Trekantområdets Varmetransmissionsselskab TVIS

Denmark · owned by Fredericia Kommune, Kolding Kommune, Middelfart Kommune, Vejle Kommune (joint municipal ownership) (Denmark) · tvis.net · 11 vendors

TVIS (Trekantområdets Varmetransmissionsselskab) is a municipally owned district heating transmission company operating under Danish heat supply law (Varmeforsyningsloven). It operates the district heating infrastructure across the Trekantområdet region, serving the municipalities of Fredericia, Kolding, Middelfart, and Vejle. The company is focused on green energy transition, supplying and transmitting heat through an extensive pipeline network in the Triangle Region of Denmark.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-07 · revision 2

11 direct vendors, 167 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 2/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

TVIS exhibits low migration readiness, scoring 20. The primary challenge stems from its heavily specialized and likely on-premise operational technology (OT) stack, including SCADA/SRO systems, custom GIS deployment, and Programmable Industrial Controllers (PLCs). Migrating these deeply integrated industrial control systems to modern cloud-native or containerized environments would be exceptionally complex, costly, and disruptive, requiring significant re-engineering rather than simple lift-and-shift. The corporate website's reliance on an extremely outdated WordPress 7.0.4 further highlights a lack of modern digital infrastructure practices and would require a substantial upgrade or re-platforming effort. There is no indication of cloud-native adoption, microservices architecture, or containerization within the provided tech stack. While there is geographic diversity among vendors, the specialized nature of OT systems often leads to inherent vendor lock-in for critical components, complicating any potential migration. The absence of specified data residency requirements offers some flexibility, but this is heavily outweighed by the technical complexity and legacy nature of the core systems. The lack of financial data also prevents an assessment of the company's capacity to fund a major migration initiative.

Compliance

8 in-scope frameworks identified; showing 3.

NIS2 (source) — Partially Compliant

TVIS explicitly self-identifies as part of the 'samfundskritiske sektor' (critical infrastructure sector) and confirms it became subject to the Danish NIS2/CER implementing law on 7 March 2025. District heating (fjernvarme) is explicitly listed as a covered sector under NIS2 Annex I (Essential Entities – Energy). The risk level is High because: (1) NIS2 is now legally in force for TVIS; (2) Non-compliance can result in fines up to €10M or 2% of global annual turnover for Essential Entities; (3) Management liability provisions apply personally to board members; (4) Energistyrelsen (Danish Energy Agency) is the designated supervisory authority conducting active inspections; (5) While TVIS's ISO 27001 certification provides a strong foundation, full NIS2 compliance requires additional measures (incident reporting to authorities within 24/72 hours, supply chain security assessments, business continuity plans, physical security under CER) that are still being implemented. The status is 'Partially Compliant' because TVIS acknowledges the law applies and has ISO 27001 as a base, but the law only entered force in March 2025 and full compliance maturity is still being established.

Evidence: https://www.tvis.net/nis2-og-cer/, https://www.tvis.net/informationssikkerhed/, https://www.retsinformation.dk/eli/lta/2025/258, https://www.tvis.net/wp-content/uploads/2025/08/ISO-IEC_27001-DAN-C621971-1-20250520-certifikat.pdf, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555

GDPR (source) — Partially Compliant

TVIS is headquartered in Denmark (EU), making GDPR universally applicable. The company has published a Privacy Policy (Privatlivspolitik) demonstrating awareness and active compliance efforts: it identifies itself as data controller (dataansvarlig), describes lawful bases for processing, documents data subject rights, references Datatilsynet (the Danish DPA) as the supervisory authority, and has executed written data processing agreements (databehandleraftaler) with third-party processors including Mailchimp and Google Analytics. However, the privacy policy references Google Analytics data transfers to the US and notes Google is 'certified to receive data from Europe' — a statement that may not fully reflect the current post-Schrems II / EU-US Data Privacy Framework landscape and warrants verification. No formal GDPR audit or DPO appointment is publicly disclosed. The risk is Medium rather than High because the company has clearly implemented foundational GDPR controls, but gaps in third-country transfer documentation and absence of a publicly named DPO introduce residual risk.

Evidence: https://www.tvis.net/om-tvis/privatlivspolitik/, https://www.tvis.net/informationssikkerhed/, https://www.datatilsynet.dk/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679

Danish Varmeforsyningsloven — Assessment Required

As a district heating transmission company operating in Denmark, TVIS is subject to the Danish Heat Supply Act (Varmeforsyningsloven) and associated regulations, which govern tariff setting, supply obligations, technical standards, and regulatory oversight by Forsyningstilsynet (the Danish Utility Regulator). Risk is High because: (1) Tariff regulation is mandatory and subject to regulatory approval; (2) Non-compliance with supply obligations can result in regulatory sanctions; (3) The sector is undergoing significant regulatory change as part of Denmark's green energy transition. Compliance status cannot be fully assessed from public information alone.

Evidence: https://www.tvis.net/om-tvis/oekonomi/, https://www.tvis.net/takstblad/, https://www.tvis.net/aarsregnskaber/, https://www.tvis.net/udvikling/varmeplan-tvis/, https://www.retsinformation.dk/eli/lta/2021/2068

Financials

Three-year financials

Financial Resilience Score: 7/10

TVIS operates under the Danish 'hvile-i-sig-selv' (non-profit) regulatory model, which by design produces zero equity and zero net result, with any over- or under-recoveries settled with customers through future tariffs. This makes traditional financial ratios less meaningful but provides exceptional structural stability: the company cannot go bankrupt in a conventional sense because its four municipal owners (Fredericia, Vejle, Kolding, Middelfart) guarantee its debt via KommuneKredit, giving TVIS access to very low-cost financing. As essential district-heating infrastructure serving a growing Danish region, its cash flows are highly predictable and demand is inelastic. Operationally the business is resilient: certifications in ISO 55001 (asset management) and ISO 27001 (cybersecurity), long-lived transmission assets (~278 km pipeline network), a very low CO2 profile (1.3 kg/GJ), and long-dated supply rights to Ørsted's Skærbækværket biomass plant through 2037 all support long-term stability. Heat volumes have grown ~30% since 2019 and gross margins have trended upward from 16% to 19%. However, the balance sheet shows structural fragility: zero equity, DKK 1.32bn of interest-bearing debt, and a negative net liquid position (-DKK 5.8m at YE-2025 with only DKK 3,000 in cash). The company relies heavily on short-term credit facilities and a small number of upstream heat suppliers (Ørsted, Crossbridge Energy, Energnist), creating concentration risk demonstrated by the 2024 Energnist shutdown that added DKK 14.5m in costs. Volume risk from mild winters and political/regulatory exposure to Danish heat-supply legislation are additional vulnerabilities, though the municipal-guarantee backstop provides significant downside protection.

Key strengths: Municipal ownership by four Danish municipalities with debt guarantees via KommuneKredit, Regulated cost-plus (hvile-i-sig-selv) model eliminates commercial profit/loss risk, Essential infrastructure with inelastic demand and long-lived assets, Long-dated biomass heat supply rights from Ørsted Skærbækværket through 2037, ISO 55001 and ISO 27001 certifications strengthen operational and cyber resilience, Stable EBIT band of DKK 32-38m since 2019, Very low CO2 profile (1.3 kg/GJ) aligned with regulatory tailwinds, Heat volumes grew ~30% from 2019 to 2025

Risk factors: Zero equity by regulatory design; DKK 1.32bn interest-bearing debt, Negative net liquid position (-DKK 5.8m at YE-2025) with only DKK 3,000 cash, High customer concentration on 4 municipal downstream utilities, Supplier concentration on Ørsted, Crossbridge Energy, and Energnist, Volume risk from mild winters (2024 -250 TJ, 2025 -190 TJ vs budget), Regulatory/political exposure to Danish heat-supply legislation changes, Large upcoming capex programme will further raise gearing, Ørsted's 2025 withdrawal from state CCS tender halted potential new heat contract

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report