Vand & Teknik A/S

Denmark · owned by Fruergaard Kristensen Holding ApS (Denmark) · www.vandogteknik.dk · 14 vendors

Vand & Teknik A/S is a Danish company specialising in the design, development, and maintenance of water supply systems, providing services from source to tap including waterworks assembly, water treatment plants, stainless steel workshop fabrication, electrical and SCADA systems, and advisory services. Founded in 2005 as a spin-off from Rambøll, the company serves drinking water utilities and industrial clients across Denmark. It is part of the Envatek group, a water- and energy-specialised holding company.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 3

14 direct vendors, 197 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Vand & Teknik A/S's migration readiness is significantly impacted by its core business, which heavily relies on specialized Operational Technology (OT) systems such as SCADA, SRO, and PLC programming. These systems are typically deeply integrated with physical infrastructure, often proprietary, and run on-premise, making migration to modern cloud environments extremely complex and costly, often requiring re-architecting or hybrid solutions. The current internal tech stack mentions 'UnoEuro (Danish web hosting)' and Next.js. While Next.js indicates a modern approach to web development, it's likely a small component compared to their critical OT infrastructure. There is no mention of cloud-native technologies like containerization or microservices, suggesting a traditional infrastructure footprint. The regulatory environment notes that NIS2 applicability is 'unknown' due to missing size data; however, if they are deemed an 'Essential Entity,' compliance during migration would add significant complexity and cost. A positive factor is the absence of explicit data residency requirements ('null'), which simplifies potential cloud migrations. The data states 'Total Vendors: 0', which would imply minimal vendor lock-in. However, other data points indicate vendor relationships (e.g., TXone partnership, vendor geographic diversity across 5 countries). Assuming these relationships exist, the 'unknown' vendor lock-in risk, particularly with specialized OT systems that often involve proprietary vendor solutions, could pose significant challenges to migration. Financial stability data is 'null', making it impossible to assess their capacity to fund a potentially large-scale and complex migration effort.

Compliance

3 in-scope frameworks identified; showing 3.

GDPR (source) — Assessment Required

High risk due to severe financial penalties (up to 4% of annual turnover or €20M), reputational damage, and operational disruption. As a Danish company processing personal data (employee, customer, supplier data), GDPR compliance is mandatory. The company has a privacy policy indicating data processing activities, but comprehensive compliance status requires detailed assessment.

Evidence: https://www.vandogteknik.dk/privatlivs-og-cookiepolitik

NIS2 (source) — Assessment Required

High risk due to critical infrastructure classification and severe penalties under NIS2 (up to €10M or 2% of annual turnover). As a drinking water supply company in the EU, they likely qualify as an Essential Entity under NIS2. Non-compliance could result in significant fines, operational restrictions, and reputational damage in a critical infrastructure sector.

Evidence: https://www.vandogteknik.dk, https://www.envatek.dk

ISO 27001 (source) — Assessment Required

Medium risk as information security is important for critical infrastructure operators, especially under NIS2 requirements. While not legally mandatory, ISO 27001 certification demonstrates cybersecurity maturity and could be required by customers or for regulatory compliance. Risk level is medium due to reputational and operational benefits rather than legal requirements.

Evidence: https://www.vandogteknik.dk/drikkevand/operationel-it-sikkerhed

Financials

Three-year financials

Financial Resilience Score: 6/10

Vand & Teknik A/S operates in a structurally stable end-market: Danish municipal and cooperative waterworks are regulated utilities with continuous reinvestment needs, providing a non-cyclical, long-tail demand pattern. The company offers a full value-chain proposition spanning consulting, design, stainless-steel fabrication, electrical/SCADA systems, water softening and OT cybersecurity, which reduces dependence on any single project type. Backing by the Envatek ApS group adds cross-selling potential, shared overheads and access to financing — a partial buffer against project-driven cash-flow swings. Growth optionality is supported by exposure to the Power-to-X / hydrogen build-out in Denmark, with technical water positioned as the strategic growth segment alongside the established drinking-water core. Tightening Danish regulations on PFAS, pesticides and softening also act as a structural demand driver. Offsetting these strengths, the business is project/EPC-driven with lumpy revenue recognition and margin exposure to stainless-steel and electronics input costs. Geographic concentration is essentially 100% Denmark, and the customer base is a relatively narrow set of Danish utilities. Scarcity of skilled welders, automation engineers and SCADA specialists pressures wage costs, and continuous R&D is needed to keep pace with regulatory standards. Cybersecurity exposure on delivered SCADA installations represents a reputational tail risk. Audited figures were not retrievable in this session, so the score reflects qualitative structure rather than verified financials.

Key strengths: Stable, regulated end-market (Danish waterworks), Full value-chain offering across engineering, fabrication and automation, Group backing from Envatek ApS with sister companies (Ates, Skatek, Avos, Avos-Onsite), Exposure to Power-to-X / hydrogen technical-water growth theme, Regulatory tailwinds (PFAS, pesticides, mandatory softening)

Risk factors: Lumpy, project-driven revenue and margin sensitivity to input costs (stainless steel, electronics), Geographic concentration ~100% Denmark with limited diversification, Narrow customer base of Danish municipal and cooperative utilities, Skilled-labour scarcity (welders, automation/SCADA engineers) pressuring wages, Regulatory/standards risk requiring continuous R&D investment, Cybersecurity/reputational risk on delivered OT/SCADA installations

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report