Hardware and Software for NemLog-in CA component
At a glance
Digitaliseringsstyrelsen (København K, Denmark) is tendering: Hardware and Software for NemLog-in CA component. Offers are due 10 Nov 2026, 12:00 CET. Estimated value DKK 20m, 120-month contract, 3 lots. Bidders must show, among other things: minimum turnover.
Key facts
- Deadline
- DKK 20m
- Estimated value
- 120 months
- Duration
- Open procedure
- Procedure
- 12 Oct 2026
- Published
- 701618-2026
- Notice number
- 51830f23-0eaf-476c-b8b3-fbc9bdb139ac
- Reference number
- Software package and information systems (48000000)
- Main CPV
- DNK
- Place of performance (NUTS)
- 3
- Lots
- not allowed
- Variant offers
- English
- Language of offers
Dates
Every date of the notice and its changes, in order. Times: Brussels / Warsaw.
Notice published
Deadline for questions
Deadline for offers
What the buyer wants
The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Certification Authority (CA) Software to be installed and operated on-premise in the Contracting Authority's data centres (currently two).
The Contract covers the delivery of Standard Software, including Licences, Documentation and support necessary to operate CA and Validation Authority (VA) functionality as part of the Contracting Authority's trust services.
The Software must integrate with the Contracting Authority's existing infrastructure, including HSMs, registration authority components, signing services, directory services and monitoring infrastructure, and must support the migration of the existing EJBCA-based CA environment while preserving certificate, revocation and audit-log integrity. The Supplier's principal obligations comprise:
- the Delivery of Standard Software for development, test, staging and production environments, including the required software-only configuration for development and test;
- Ongoing Services, including support and maintenance of the Standard Software and security patching;
- Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks); and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.
The Contracting Authority, the Danish Agency for Digital Government (Digitaliseringsstyrelsen), operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service, the Contracting Authority is undertaking procurement of three separate lots/contracts for the software and hardware components required.
The procurement comprises three individual lots/contracts: Lot 1 for Contract for CA and OSCP Software, Lot 2 for Contract for Utimaco HSMs for CA operation, and Lot 3 for Contract TSA Software. Full details of the individual contracts and the associated requirements are contained in the procurement documents.
CPV codes
- 48000000Software package and information systemsmain
- 30210000Data-processing machines (hardware)
- 48517000IT software package
- 48730000Security software package
- 48800000Information systems and servers
- 48900000Miscellaneous software package and computer systems
Regulations this tender relates to
Lots (3)
The contract is divided into 3 lots. Offers may be submitted for selected lots where the documents allow it.
Lot 1Contract for CA and OCSP Software
- Estimated value:
- DKK 20m
- Duration:
- 120 months
- Place (NUTS):
- DK011
- CPV:
- 48000000 · Software package and information systems
The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Certification Authority (CA) Software to be installed and operated on-premise in the Contracting Authority's data centres (currently two). The Contract covers the delivery of Standard Software, including Licences, Documentation and support necessary to operate CA and Validation Authority (VA) functionality as part of the Contracting Authority's trust services. The Software must integrate with the Contracting Authority's existing infrastructure, including HSMs, registration authority components, signing services, directory services and monitoring infrastructure, and must support the migration of the existing EJBCA-based CA environment while preserving certificate, revocation and audit-log integrity. The Supplier's principal obligations comprise: (a) the Delivery of Standard Software for development, test, staging and production environments, including the required software-only configuration for development and test; (b) Ongoing Services, including support and maintenance of the Standard Software and security patching; (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks); and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.
Lot 2Contract for Utimaco HSM's for CA operation
- Estimated value:
- DKK 15m
- Duration:
- 12 months
- CPV:
- 48000000 · Software package and information systems
The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Hardware Security Modules (HSMs) for CA operation to be installed and operated on-premise in the Contracting Authority's data centres (currently two). The lot covers the delivery of HSM, including the required client software, HSM simulator, smartcards, Documentation and support necessary to operate root CA and legacy issuing CA functionality as part of the Contracting Authority's trust services. The HSMs must integrate with the Contracting Authority's existing infrastructure, including KeyFactor EJBCA, monitoring infrastructure and associated operational processes, and must support the secure migration of the existing root CA and legacy issuing CA signing keys at cryptographic-module level while preserving the certification status and verifiability of the key material. The Supplier's principal obligations comprise: (a) the Delivery of Hardware, including associated client software, sized and configured for operation across two data centres in an active/active configuration, together with deployment in the Contracting Authority's production, staging, and test environments; (b) Ongoing Services, including support and maintenance of the Hardware, security patching, and technology refresh of Hardware during the term of the Contract to maintain valid certifications; (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks) and Options and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.
Lot 3Contract for TSA Software
- Estimated value:
- DKK 5m
- Duration:
- 120 months
- Place (NUTS):
- DK011
- CPV:
- 48000000 · Software package and information systems
The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Timestamping Authority (TSA) Software to be installed and operated on-premise in the Contracting Authority's data centres (currently two). The lot covers the delivery of Standard Software, including Licences, Documentation and support and maintenance services necessary to operate TSA functionality as part of the Contracting Authority's trust services. The Software must integrate with the Contracting Authority's existing infrastructure, including HSMs, signing services and monitoring infrastructure, and must support the migration of the existing TSA service while preserving the qualified status and verifiability of historical timestamping records. The Supplier's principal obligations comprise: (a) the Delivery of Standard Software for development, test, staging and production environments, including the required software-only configuration for development and test; (b) Ongoing Services, including support and maintenance of the Standard Software and security patching; (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks); and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.
Conditions for participation & required documents
What the notice asks bidders to prove, and the documents it requires. Full text below.
Conditions in the notice
- Minimum turnoverMinimum annual turnover or financial standing
Detected automatically in the published notice. Always confirm against the tender documents.
Show the notice text (4)
The tenderer must submit the European Single Procurement Document ("ESPD") with the following information. The tenderer's total annual turnover in the latest financial year(s) available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications.
The form is enclosed as an attachment to the tender specifications. If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of requirements, see below, the tenderer and the entities in question will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity.
Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate.
Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: A statement regarding the operator's overall turnover in the latest annual report/financial statement available, depending on when the operator was established or started trading if the figures for this turnover are available.
For groups of operators (e.g. a consortium), the information in the latest annual report/financial statement available must be submitted for each participating operator in the group. Where an operator relies on the economic and financial capacity of other entities (e.g., a parent company, a sister company or a subcontractor), information for such other entities must be provided as well.
Minimum requirement: As a minimum requirement, a total annual turnover of at least DKK 20 million is required in the latest annual report/financial statement available. If the tenderer relies on the capacities of other entities, the turnover is to be calculated as the total turnover of the tenderer and such other entities in the latest annual report/financial statement available.
For groups of operators (e.g., a consortium), the turnover is calculated as the total turnover of the operators in the latest annual report/financial statement available. The information is to be stated in section IV.B of the ESPD.
The tenderer must submit the European Single Procurement Document ("ESPD") with the following information: The tenderer's equity in the latest financial year available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications.
The form is enclosed as an attachment to the tender specifications. If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of the suitability requirements, the tenderer and the entities concerned will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity.
Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate.
Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: The operator's balance sheet, or extracts thereof, from the latest annual report/financial statements available, where publication of the balance sheet is required under the law of the country in which the operator is established, or other documentation demonstrating the operator's equity.
For groups of operators (e.g. a consortium), the relevant information from the latest annual report/financial statements available must be submitted for each participating operator in the group. Where an operator relies on the economic and financial capacity of other entities (e.g. a parent company, a sister company or a subcontractor), the corresponding information for such other entities must also be submitted.
Minimum requirement: As a minimum requirement, the tenderer must have positive equity in the latest annual report/financial statements available. If the tenderer relies on the capacities of other entities, the equity is to be calculated as the combined equity of the tenderer and such other entities based on the latest annual report/financial statements available.
For groups of operators (e.g. a consortium), the equity is calculated as the combined equity of the participating operators based on the latest annual report/financial statements available. The information is to be stated in Section IV.B of the ESPD.
The tenderer must submit the European Single Procurement Document ("ESPD") with the following information. The tenderer's total annual turnover in the latest financial year(s) available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications.
The form is enclosed as an attachment to the tender specifications. If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of requirements, see below, the tenderer and the entities in question will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity.
Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate.
Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: A statement regarding the operator's overall turnover in the latest annual report/financial statement available, depending on when the operator was established or started trading if the figures for this turnover are available.
For groups of operators (e.g. a consortium), the information in the latest annual report/financial statement available must be submitted for each participating operator in the group. Where an operator relies on the economic and financial capacity of other entities (e.g., a parent company, a sister company or a subcontractor), information for such other entities must be provided as well.
Minimum requirement: As a minimum requirement, a total annual turnover of at least DKK 15 million is required in the latest annual report/financial statement available. If the tenderer relies on the capacities of other entities, the turnover is to be calculated as the total turnover of the tenderer and such other entities in the latest annual report/financial statement available.
For groups of operators (e.g., a consortium), the turnover is calculated as the total turnover of the operators in the latest annual report/financial statement available. The information is to be stated in section IV.B of the ESPD.
The tenderer must submit the European Single Procurement Document ("ESPD") with the following information. The tenderer's total annual turnover in the latest financial year(s) available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications.
The form is enclosed as an attachment to the tender specifications. If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of requirements, see below, the tenderer and the entities in question will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity.
Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate.
Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: A statement regarding the operator's overall turnover in the latest annual report/financial statement available, depending on when the operator was established or started trading if the figures for this turnover are available.
For groups of operators (e.g. a consortium), the information in the latest annual report/financial statement available must be submitted for each participating operator in the group. Where an operator relies on the economic and financial capacity of other entities (e.g., a parent company, a sister company or a subcontractor), information for such other entities must be provided as well.
Minimum requirement: As a minimum requirement, a total annual turnover of at least DKK 4,5 million is required in the latest annual report/financial statement available. If the tenderer relies on the capacities of other entities, the turnover is to be calculated as the total turnover of the tenderer and such other entities in the latest annual report/financial statement available.
For groups of operators (e.g., a consortium), the turnover is calculated as the total turnover of the operators in the latest annual report/financial statement available. The information is to be stated in section IV.B of the ESPD.
Options, renewals, framework
- Options: foreseen
The lot includes an Option to extend the deployment to a third data centre. Reference is made to Appendix 4 and 7 for further details.
This is the SalesDots check: every condition in the notice, the company registers and your whole company profile — certificates with expiry dates, team, references and financials — in one place. The results below are an example; you see the real one after signing in.
9 met · 1 expiring · 2 missing · 2 to check
Conditions in this notice
- Minimum turnoverturnover from financial statements above the thresholdIn your profile
Registers — checked automatically
- National company registercompany active, representation matchesVerified
- EU VAT (VIES)number active in VIESVerified
- LEI (GLEIF)LEI issued and renewed, data matches the registerVerified
- Sanctions screeningcompany and owners not listedVerified
Company profile — matched to the requirements
- ISO/IEC 27001company certificate, validIn your profile
- ISO 9001company certificate — renew before you bidExpires before the deadline
- ISO 22301add it or bring in a consortium partnerNot in your profile yet
- Project manager — PMP / PRINCE22 people, 5+ years of experienceIn your profile
- Solution architect — TOGAFno certified personNot in your profile yet
- IT references, last 3 years3 public-sector implementationsIn your profile
- Turnover, last 3 yearsfrom financial statementsIn your profile
- Partner status (Microsoft, SAP, Oracle)to confirm with the vendorNeeds a look
- Security clearance (Poufne, NATO)to check in the teamNeeds a look
Award criteria
The full criteria and their weights, as published in the notice.
For all lots
- Price40%
Reference is made to the Tender specifications Appendix A.
- Quality60%
Reference is made to the Tender specifications Appendix A.
Buyer
Digitaliseringsstyrelsen
- Address
- Landgreven 4, 1301 København K, Denmark
- Region (NUTS)
- DK011
Register identifiers
- EU VAT
- DK34051178
- Registration no. in the notice
- 34 05 11 78
What this buyer bought before
12 IT contract award notices 2020–2026, €45.8m in total.
Vedligeholdelse og videreudvikling samt drift af borger.dk
Winner: Netcompany A/S · 1 bid
DKK 185mFramework agreement — maximum value
26 Jun 2026
Offentligt udbud af Kontrakt om udvikling, drift, vedligeholdelse, support og videreudvikling af nyt NemKonto-system
Winner: Netcompany A/S · 3 bids
DKK 283.5m
15 Jan 2025
Monitorering af tilgængelighed af offentlige organers websteder og mobilapplikationer
Winner: Inqlude IT ApS +2 more contractors · 2 bids
DKK 24.4m
22 Oct 2024
Denmark-Copenhagen: IT services: consulting, software development, Internet and support
Winner: Netcompany A/S · 3 bids
DKK 160mFramework agreement — maximum value
4 Nov 2022
Denmark-Copenhagen: IT services: consulting, software development, Internet and support
Winner: Solusi ApS · 1 bid
DKK 4.7m
17 Nov 2021
Denmark-Copenhagen: IT services: consulting, software development, Internet and support
Winner: Netcompany A/S · 1 bid
DKK 25mFramework agreement — maximum value
22 Sept 2021
How to submit an offer
Offers are submitted only on the buyer's platform, before the deadline for offers.
- www.ethics.dk
- Platform
- yes
- Electronic submission
- no
- Electronic auction
Questions & answers
What is the deadline for offers in "Hardware and Software for NemLog-in CA component"?
Offers are due by 10 Nov 2026, 12:00 CET.
What is the estimated value?
The estimated value published in the notice is DKK 20m.
Who is the buyer?
Digitaliseringsstyrelsen (København K, Denmark).
Where and how do I submit an offer?
Offers are submitted electronically on www.ethics.dk.
Is the contract divided into lots?
Yes, into 3 lots.
How are offers scored?
Price 40%, Quality 60%.
Which procedure is used?
Open procedure.
Win it with SalesDots
Read the documents for you
SalesDots fetches the tender documents (or takes your upload when a platform does not allow it) and answers the two questions that matter first: what the buyer wants built, and what you must prove to take part, each with the exact quote and page.
Analyse documentsMatch it with your profile
Every certificate, reference and role is checked against your company: green when you have it, amber when it expires before the deadline, grey when it needs a look.
Check my fitPrepare your response
Turn the conditions into a bid checklist with owners and due dates, draft the questions to the buyer and keep the team on one plan.
Start a responseNever miss a change
Track the deadline, amendments and answers to clarification questions, and get similar tenders and re-tenders before they are published.
Track this tenderSource: Tenders Electronic Daily (TED), Official Journal of the EU. SalesDots is not the contracting authority; offers are submitted only through the buyer's platform. Data from the official notice, refreshed 24 Oct 2026, 01:22 CEST.