System implementationTED

Hardware and Software for NemLog-in CA component

DigitaliseringsstyrelsenKøbenhavn K, DenmarkNotice 701618-2026 · Reference number: 51830f23-0eaf-476c-b8b3-fbc9bdb139ac

At a glance

Digitaliseringsstyrelsen (København K, Denmark) is tendering: Hardware and Software for NemLog-in CA component. Offers are due 10 Nov 2026, 12:00 CET. Estimated value DKK 20m, 120-month contract, 3 lots. Bidders must show, among other things: minimum turnover.

Key facts

Deadline
DKK 20m
Estimated value
120 months
Duration
Open procedure
Procedure
12 Oct 2026
Published
701618-2026
Notice number
51830f23-0eaf-476c-b8b3-fbc9bdb139ac
Reference number
Software package and information systems (48000000)
Main CPV
DNK
Place of performance (NUTS)
3
Lots
not allowed
Variant offers
English
Language of offers

Dates

Every date of the notice and its changes, in order. Times: Brussels / Warsaw.

  1. Notice published

  2. Deadline for questions

  3. Deadline for offers

What the buyer wants

The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Certification Authority (CA) Software to be installed and operated on-premise in the Contracting Authority's data centres (currently two).

The Contract covers the delivery of Standard Software, including Licences, Documentation and support necessary to operate CA and Validation Authority (VA) functionality as part of the Contracting Authority's trust services.

The Software must integrate with the Contracting Authority's existing infrastructure, including HSMs, registration authority components, signing services, directory services and monitoring infrastructure, and must support the migration of the existing EJBCA-based CA environment while preserving certificate, revocation and audit-log integrity. The Supplier's principal obligations comprise:

  1. the Delivery of Standard Software for development, test, staging and production environments, including the required software-only configuration for development and test;
  2. Ongoing Services, including support and maintenance of the Standard Software and security patching;
  3. Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks); and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.

The Contracting Authority, the Danish Agency for Digital Government (Digitaliseringsstyrelsen), operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service, the Contracting Authority is undertaking procurement of three separate lots/contracts for the software and hardware components required.

The procurement comprises three individual lots/contracts: Lot 1 for Contract for CA and OSCP Software, Lot 2 for Contract for Utimaco HSMs for CA operation, and Lot 3 for Contract TSA Software. Full details of the individual contracts and the associated requirements are contained in the procurement documents.

CPV codes

  • 48000000Software package and information systemsmain
  • 30210000Data-processing machines (hardware)
  • 48517000IT software package
  • 48730000Security software package
  • 48800000Information systems and servers
  • 48900000Miscellaneous software package and computer systems

Regulations this tender relates to

SalesDots Regulatory Library

Lots (3)

The contract is divided into 3 lots. Offers may be submitted for selected lots where the documents allow it.

  1. Lot 1Contract for CA and OCSP Software

    Estimated value:
    DKK 20m
    Duration:
    120 months
    Place (NUTS):
    DK011
    CPV:
    48000000 · Software package and information systems

    The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Certification Authority (CA) Software to be installed and operated on-premise in the Contracting Authority's data centres (currently two). The Contract covers the delivery of Standard Software, including Licences, Documentation and support necessary to operate CA and Validation Authority (VA) functionality as part of the Contracting Authority's trust services. The Software must integrate with the Contracting Authority's existing infrastructure, including HSMs, registration authority components, signing services, directory services and monitoring infrastructure, and must support the migration of the existing EJBCA-based CA environment while preserving certificate, revocation and audit-log integrity. The Supplier's principal obligations comprise: (a) the Delivery of Standard Software for development, test, staging and production environments, including the required software-only configuration for development and test; (b) Ongoing Services, including support and maintenance of the Standard Software and security patching; (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks); and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.

  2. Lot 2Contract for Utimaco HSM's for CA operation

    Estimated value:
    DKK 15m
    Duration:
    12 months
    CPV:
    48000000 · Software package and information systems

    The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Hardware Security Modules (HSMs) for CA operation to be installed and operated on-premise in the Contracting Authority's data centres (currently two). The lot covers the delivery of HSM, including the required client software, HSM simulator, smartcards, Documentation and support necessary to operate root CA and legacy issuing CA functionality as part of the Contracting Authority's trust services. The HSMs must integrate with the Contracting Authority's existing infrastructure, including KeyFactor EJBCA, monitoring infrastructure and associated operational processes, and must support the secure migration of the existing root CA and legacy issuing CA signing keys at cryptographic-module level while preserving the certification status and verifiability of the key material. The Supplier's principal obligations comprise: (a) the Delivery of Hardware, including associated client software, sized and configured for operation across two data centres in an active/active configuration, together with deployment in the Contracting Authority's production, staging, and test environments; (b) Ongoing Services, including support and maintenance of the Hardware, security patching, and technology refresh of Hardware during the term of the Contract to maintain valid certifications; (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks) and Options and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.

  3. Lot 3Contract for TSA Software

    Estimated value:
    DKK 5m
    Duration:
    120 months
    Place (NUTS):
    DK011
    CPV:
    48000000 · Software package and information systems

    The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Timestamping Authority (TSA) Software to be installed and operated on-premise in the Contracting Authority's data centres (currently two). The lot covers the delivery of Standard Software, including Licences, Documentation and support and maintenance services necessary to operate TSA functionality as part of the Contracting Authority's trust services. The Software must integrate with the Contracting Authority's existing infrastructure, including HSMs, signing services and monitoring infrastructure, and must support the migration of the existing TSA service while preserving the qualified status and verifiability of historical timestamping records. The Supplier's principal obligations comprise: (a) the Delivery of Standard Software for development, test, staging and production environments, including the required software-only configuration for development and test; (b) Ongoing Services, including support and maintenance of the Standard Software and security patching; (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks); and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.

Conditions for participation & required documents

What the notice asks bidders to prove, and the documents it requires. Full text below.

Conditions in the notice

  • Minimum turnoverMinimum annual turnover or financial standing

Detected automatically in the published notice. Always confirm against the tender documents.

Show the notice text (4)

The tenderer must submit the European Single Procurement Document ("ESPD") with the following information. The tenderer's total annual turnover in the latest financial year(s) available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications.

The form is enclosed as an attachment to the tender specifications. If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of requirements, see below, the tenderer and the entities in question will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity.

Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate.

Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: A statement regarding the operator's overall turnover in the latest annual report/financial statement available, depending on when the operator was established or started trading if the figures for this turnover are available.

For groups of operators (e.g. a consortium), the information in the latest annual report/financial statement available must be submitted for each participating operator in the group. Where an operator relies on the economic and financial capacity of other entities (e.g., a parent company, a sister company or a subcontractor), information for such other entities must be provided as well.

Minimum requirement: As a minimum requirement, a total annual turnover of at least DKK 20 million is required in the latest annual report/financial statement available. If the tenderer relies on the capacities of other entities, the turnover is to be calculated as the total turnover of the tenderer and such other entities in the latest annual report/financial statement available.

For groups of operators (e.g., a consortium), the turnover is calculated as the total turnover of the operators in the latest annual report/financial statement available. The information is to be stated in section IV.B of the ESPD.

The tenderer must submit the European Single Procurement Document ("ESPD") with the following information: The tenderer's equity in the latest financial year available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications.

The form is enclosed as an attachment to the tender specifications. If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of the suitability requirements, the tenderer and the entities concerned will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity.

Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate.

Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: The operator's balance sheet, or extracts thereof, from the latest annual report/financial statements available, where publication of the balance sheet is required under the law of the country in which the operator is established, or other documentation demonstrating the operator's equity.

For groups of operators (e.g. a consortium), the relevant information from the latest annual report/financial statements available must be submitted for each participating operator in the group. Where an operator relies on the economic and financial capacity of other entities (e.g. a parent company, a sister company or a subcontractor), the corresponding information for such other entities must also be submitted.

Minimum requirement: As a minimum requirement, the tenderer must have positive equity in the latest annual report/financial statements available. If the tenderer relies on the capacities of other entities, the equity is to be calculated as the combined equity of the tenderer and such other entities based on the latest annual report/financial statements available.

For groups of operators (e.g. a consortium), the equity is calculated as the combined equity of the participating operators based on the latest annual report/financial statements available. The information is to be stated in Section IV.B of the ESPD.

The tenderer must submit the European Single Procurement Document ("ESPD") with the following information. The tenderer's total annual turnover in the latest financial year(s) available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications.

The form is enclosed as an attachment to the tender specifications. If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of requirements, see below, the tenderer and the entities in question will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity.

Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate.

Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: A statement regarding the operator's overall turnover in the latest annual report/financial statement available, depending on when the operator was established or started trading if the figures for this turnover are available.

For groups of operators (e.g. a consortium), the information in the latest annual report/financial statement available must be submitted for each participating operator in the group. Where an operator relies on the economic and financial capacity of other entities (e.g., a parent company, a sister company or a subcontractor), information for such other entities must be provided as well.

Minimum requirement: As a minimum requirement, a total annual turnover of at least DKK 15 million is required in the latest annual report/financial statement available. If the tenderer relies on the capacities of other entities, the turnover is to be calculated as the total turnover of the tenderer and such other entities in the latest annual report/financial statement available.

For groups of operators (e.g., a consortium), the turnover is calculated as the total turnover of the operators in the latest annual report/financial statement available. The information is to be stated in section IV.B of the ESPD.

The tenderer must submit the European Single Procurement Document ("ESPD") with the following information. The tenderer's total annual turnover in the latest financial year(s) available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications.

The form is enclosed as an attachment to the tender specifications. If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of requirements, see below, the tenderer and the entities in question will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity.

Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate.

Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: A statement regarding the operator's overall turnover in the latest annual report/financial statement available, depending on when the operator was established or started trading if the figures for this turnover are available.

For groups of operators (e.g. a consortium), the information in the latest annual report/financial statement available must be submitted for each participating operator in the group. Where an operator relies on the economic and financial capacity of other entities (e.g., a parent company, a sister company or a subcontractor), information for such other entities must be provided as well.

Minimum requirement: As a minimum requirement, a total annual turnover of at least DKK 4,5 million is required in the latest annual report/financial statement available. If the tenderer relies on the capacities of other entities, the turnover is to be calculated as the total turnover of the tenderer and such other entities in the latest annual report/financial statement available.

For groups of operators (e.g., a consortium), the turnover is calculated as the total turnover of the operators in the latest annual report/financial statement available. The information is to be stated in section IV.B of the ESPD.

Options, renewals, framework

  • Options: foreseen

The lot includes an Option to extend the deployment to a third data centre. Reference is made to Appendix 4 and 7 for further details.

EXAMPLE — not a result for your companyCan you bid? Your readiness check

This is the SalesDots check: every condition in the notice, the company registers and your whole company profile — certificates with expiry dates, team, references and financials — in one place. The results below are an example; you see the real one after signing in.

9 met · 1 expiring · 2 missing · 2 to check

Conditions in this notice

  • Minimum turnoverturnover from financial statements above the thresholdIn your profile

Registers — checked automatically

  • National company registercompany active, representation matchesVerified
  • EU VAT (VIES)number active in VIESVerified
  • LEI (GLEIF)LEI issued and renewed, data matches the registerVerified
  • Sanctions screeningcompany and owners not listedVerified

Company profile — matched to the requirements

  • ISO/IEC 27001company certificate, validIn your profile
  • ISO 9001company certificate — renew before you bidExpires before the deadline
  • ISO 22301add it or bring in a consortium partnerNot in your profile yet
  • Project manager — PMP / PRINCE22 people, 5+ years of experienceIn your profile
  • Solution architect — TOGAFno certified personNot in your profile yet
  • IT references, last 3 years3 public-sector implementationsIn your profile
  • Turnover, last 3 yearsfrom financial statementsIn your profile
  • Partner status (Microsoft, SAP, Oracle)to confirm with the vendorNeeds a look
  • Security clearance (Poufne, NATO)to check in the teamNeeds a look
Check it against my company

Award criteria

The full criteria and their weights, as published in the notice.

For all lots

  • Price40%

    Reference is made to the Tender specifications Appendix A.

  • Quality60%

    Reference is made to the Tender specifications Appendix A.

Buyer

Digitaliseringsstyrelsen

Address
Landgreven 4, 1301 København K, Denmark
Region (NUTS)
DK011

Register identifiers

EU VAT
DK34051178
Registration no. in the notice
34 05 11 78

What this buyer bought before

12 IT contract award notices 2020–2026, €45.8m in total.

  • Vedligeholdelse og videreudvikling samt drift af borger.dk

    Winner: Netcompany A/S · 1 bid

    DKK 185mFramework agreement — maximum value

    26 Jun 2026

  • Offentligt udbud af Kontrakt om udvikling, drift, vedligeholdelse, support og videreudvikling af nyt NemKonto-system

    Winner: Netcompany A/S · 3 bids

    DKK 283.5m

    15 Jan 2025

  • Monitorering af tilgængelighed af offentlige organers websteder og mobilapplikationer

    Winner: Inqlude IT ApS +2 more contractors · 2 bids

    DKK 24.4m

    22 Oct 2024

  • Denmark-Copenhagen: IT services: consulting, software development, Internet and support

    Winner: Netcompany A/S · 3 bids

    DKK 160mFramework agreement — maximum value

    4 Nov 2022

  • Denmark-Copenhagen: IT services: consulting, software development, Internet and support

    Winner: Solusi ApS · 1 bid

    DKK 4.7m

    17 Nov 2021

  • Denmark-Copenhagen: IT services: consulting, software development, Internet and support

    Winner: Netcompany A/S · 1 bid

    DKK 25mFramework agreement — maximum value

    22 Sept 2021

How to submit an offer

Offers are submitted only on the buyer's platform, before the deadline for offers.

yes
Electronic submission
no
Electronic auction

Questions & answers

What is the deadline for offers in "Hardware and Software for NemLog-in CA component"?

Offers are due by 10 Nov 2026, 12:00 CET.

What is the estimated value?

The estimated value published in the notice is DKK 20m.

Who is the buyer?

Digitaliseringsstyrelsen (København K, Denmark).

Where and how do I submit an offer?

Offers are submitted electronically on www.ethics.dk.

Is the contract divided into lots?

Yes, into 3 lots.

How are offers scored?

Price 40%, Quality 60%.

Which procedure is used?

Open procedure.

Win it with SalesDots

Read the documents for you

SalesDots fetches the tender documents (or takes your upload when a platform does not allow it) and answers the two questions that matter first: what the buyer wants built, and what you must prove to take part, each with the exact quote and page.

Analyse documents

Match it with your profile

Every certificate, reference and role is checked against your company: green when you have it, amber when it expires before the deadline, grey when it needs a look.

Check my fit

Prepare your response

Turn the conditions into a bid checklist with owners and due dates, draft the questions to the buyer and keep the team on one plan.

Start a response

Never miss a change

Track the deadline, amendments and answers to clarification questions, and get similar tenders and re-tenders before they are published.

Track this tender

Source: Tenders Electronic Daily (TED), Official Journal of the EU. SalesDots is not the contracting authority; offers are submitted only through the buyer's platform. Data from the official notice, refreshed 24 Oct 2026, 01:22 CEST.