Zhejiang Geely Holding Group Co., Ltd.

China · global.geely.com · 6 vendors

Zhejiang Geely Holding Group Co., Ltd. is a Chinese multinational automotive conglomerate headquartered in Hangzhou, China. It designs, researches, develops, produces, sells, and services automobiles and related components, encompassing a wide range of brands including Volvo Cars and Lotus. The group also has interests in transportation services, digital technology, financial services, and education.

Resilience scores

Technology vendors

Services catalogue

3 services in catalogue across 1 category; runs on 6 sub-vendors.

Insights

Last updated 2026-07-30 · revision 2

6 direct vendors, 97 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Zhejiang Geely Holding Group exhibits a moderate to high level of migration readiness, largely due to its adoption of modern technological architectures and existing cloud presence. The internal tech stack includes Microsoft Azure and cloud-based inventory and production monitoring systems, indicating a foundational understanding and implementation of cloud principles. The company's emphasis on modular vehicle architectures (SEA, GEA, CMA, BMA) and proprietary in-vehicle operating systems (GEELY ONE OS) suggests a move towards more agile, potentially microservices-oriented development, which facilitates cloud migration. The integration of 5G Industrial IoT and advanced AI also points to a forward-thinking approach to IT infrastructure. However, several critical data gaps hinder a higher readiness assessment. There is no information provided on data residency requirements, which are crucial for cloud migration planning, nor on the specific regulatory environment that might impose compliance complexities. Financial stability data (ability to fund migration) is also absent. The 'Vendor Lock-in Risk: Unknown' is a significant concern; while vendor geographic diversity is present across two countries, the lack of information on the total number of distinct vendors and the nature of their contracts means potential lock-in could complicate or increase the cost of migration. The presence of Sitecore CMS, while an enterprise solution, can sometimes present migration challenges if not strategically managed.

Compliance

12 in-scope frameworks identified; showing 3.

China Cybersecurity Law — Assessment Required

China's Cybersecurity Law (2017) and MLPS 2.0 (GB/T 22239-2019) apply to all network operators in China, including automotive manufacturers with connected vehicle platforms. Geely's 5G factories, connected vehicle ecosystem, satellite constellation (Geespace), and AI platforms constitute critical network infrastructure subject to MLPS classification and grading. Systems classified at Level 3 or above require third-party security assessments, annual testing, and government filing. As a major automotive manufacturer with national security implications (connected vehicle data), Geely's systems likely include Level 3 or Level 4 classified systems. Non-compliance can result in fines, operational suspension, and criminal liability.

Evidence: https://global.geely.com/en/brand, https://global.geely.com/en/privacy-policy

SOC 2 (source) — Assessment Required

Geely operates significant cloud-based digital infrastructure including connected vehicle platforms, 5G smart factories, AI-driven vehicle architectures (GEA, SEA, CMA, BMA), a satellite constellation (Geespace), and cloud services for inventory and production monitoring. The company also provides digital services to customers and dealers globally. While SOC 2 is not legally mandated, enterprise customers, fleet operators, and B2B partners (especially in the US and EU) increasingly require SOC 2 Type II reports as evidence of security controls. The risk is medium because Geely's primary business is vehicle manufacturing rather than cloud service provision, but its expanding digital ecosystem creates meaningful exposure.

Evidence: https://global.geely.com/en/privacy-policy, https://global.geely.com/en/brand

China Personal Information Protection Law — Assessment Required

PIPL (effective November 1, 2021) is China's primary data protection law and directly applies to Geely as a Chinese company headquartered in Hangzhou, Zhejiang. The law governs collection, processing, and cross-border transfer of personal information of individuals in China. Geely's connected vehicles, digital platforms, and manufacturing operations collect vast amounts of personal data from Chinese consumers and employees. Cross-border data transfers require either a security assessment by the Cyberspace Administration of China (CAC), a standard contract filing, or certification — all of which are mandatory for large-scale processors. As a Fortune 500 company processing data at scale, Geely is likely classified as an 'important data processor' subject to enhanced obligations.

Evidence: https://global.geely.com/en/privacy-policy, https://www.cac.gov.cn/, https://global.geely.com/en/brand

Financials

Three-year financials

Financial Resilience Score: 7/10

Zhejiang Geely Holding Group demonstrates strong top-line resilience, with group revenue growing from ~US$55.86B in FY2021 to an implied ~US$85B in FY2024, and its Fortune Global 500 ranking improving from #239 to #155 in just three years. The core listed subsidiary Geely Automobile Holdings (0175.HK) delivered 34% revenue growth in 2024 to RMB 240B, with vehicle sales up 32% to 2.18M units and exports up 57% to over 414,000 units. Volvo Cars, another major subsidiary, contributed SEK 400B in revenue with EBIT of SEK 27B in 2024, further diversifying the group's earnings base. The group benefits from significant diversification across brands (Geely, Lynk & Co, Zeekr, Volvo, Polestar, Lotus, smart, Proton), vertical integration (proprietary EV platforms, battery investments, satellite constellation), and a growing NEV portfolio (>40% mix at Geely Auto in H2 2024). However, consolidated financial transparency is limited because ZGH is privately held; group-level EBIT, leverage, and equity are not publicly disclosed. Several EV subsidiaries (Zeekr, Polestar, Lotus Tech) have historically been loss-making, and China's intense price war is compressing margins. Geopolitical risks (EU EV tariffs, potential US restrictions) and complex intra-group cross-holdings add further uncertainty, warranting a solid but not top-tier resilience score.

Key strengths: Fortune Global 500 for 14 consecutive years, ranking improved from #239 (2022) to #155 (2025), Group revenue nearly doubled from ~$44.4B (2020) to ~$85B (2024), Broad brand diversification across mass-market, premium, luxury, and commercial segments, Vertical integration: proprietary EV architectures (SEA, GEA, CMA, BMA), in-house batteries, Geespace satellites, Strong export momentum with 414,000+ units exported by Geely Auto in 2024 (+57% YoY), NEV mix at Geely Auto exceeded 40% in H2 2024, Cumulative global vehicle sales exceeded 20 million by 2025 (doubled in 5 years), Access to Chinese capital markets and government relationships

Risk factors: Opaque consolidated financials as a private holding company, Heavy capex and R&D burn across EV brands (Zeekr, Polestar, Lotus Tech historically loss-making), Intense price war in China compressing margins (BYD, Chery, Xiaomi, Huawei, Xpeng, Li Auto), Geopolitical/trade risk: EU EV tariffs (~19% provisional), potential US restrictions, Complex related-party structure with intra-group cross-holdings and consolidations, Foreign-brand exposure: Volvo Cars and Polestar face slower EV demand in Europe and US, Only modest operating margins at Geely Auto despite strong revenue growth

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report