Summary
EU public IT procurement exceeds €80 billion annually — the largest single service category on TED, dominated by central government digital transformation programs. Most large IT spending flows through multi-supplier framework agreements rather than open tenders, making framework entry the highest-leverage priority for IT vendors seeking sustained public sector revenue. Technology companies from hyperscale cloud providers to specialist cybersecurity boutiques can access this market through TED Europa.
The EU Public IT Market in 2026: Scale and Structure
EU public IT procurement is the single largest service category on TED by volume and value. Central government digital transformation programs are the primary engine — every member state has a national digitisation agenda, and most are running behind their own targets, creating sustained procurement pressure through 2027 and beyond.
The European Commission's Digital Decade 2030 targets are particularly significant as procurement drivers: 75% of EU enterprises using cloud, AI, and big data by 2030; 100% online access to key public services; and widespread AI deployment in public administration. Translating these political commitments into delivery requires procurement — the pipelines are large and mostly already visible on TED.
Key procurement drivers in 2026:
- Legacy migration: COBOL mainframe modernisation and transition to cloud-native architecture — a massive, multi-year opportunity across German federal authorities, Italian ministries, and French central government
- Cybersecurity investment: NIS2 Directive (Directive 2022/2555/EU) compliance is driving procurement of security operations, vulnerability management, and incident response capabilities
- AI governance tools: EU AI Act (Regulation 2024/1689) compliance creates demand for explainability, bias testing, and human oversight tooling in high-risk AI deployments
- Data management platforms: Interoperability requirements under the Interoperable Europe Act (Regulation 2024/903) are driving procurement of data exchange infrastructure
Key Buyers: Named Contracting Authorities and Bodies
Unlike many sectors where contracting authorities are generic, EU IT procurement is concentrated in identifiable bodies worth profiling and tracking directly:
- DIGIT (European Commission DG DIGIT): The Commission's IT department and the EU's largest IT framework operator. DIGIT runs frameworks for software development, cloud infrastructure (including the EUCS-aligned cloud framework), and IT consultancy used across EU institutions.
- DINSIC/DNUM (France): The Direction du Numérique, France's central digital government unit, coordinates IT procurement for French central government. The "Marché cloud" framework for French public sector cloud adoption has significant ongoing procurement volume.
- ITZBund (Germany): The German federal IT centre — responsible for central IT infrastructure for German federal ministries. ITZBund framework competitions are high-value and high-complexity; monitor their TED profile for framework re-procurement notices.
- Consip (Italy): Italy's central purchasing body operates national IT frameworks (SPC Cloud, MEPA digital services) accessible to all Italian public authorities. Consip framework agreements are a major entry point to the Italian public IT market.
- Logius (Netherlands): The Dutch government's digital service provider procures infrastructure, development, and operational services. Netherlands IT tenders are notable for detailed technical specifications and high quality evaluation weightings.
- DG CONNECT (European Commission): Procures telecoms infrastructure, internet governance, and digital single market implementation — substantial contracts, often multi-year.
Key CPV Codes for IT Services
- 72000000 — IT services: consulting, software development, internet, support
- 72200000 — Software programming and consultancy services
- 72212000 — Programming services for application software
- 72250000 — System and support services
- 72300000 — Data services
- 72310000 — Data processing services
- 72315000 — Data network management and support services
- 72600000 — Computer support and consultancy services
- 72700000 — Computer network services
- 48000000 — Software packages and information systems
- 48800000 — Information systems and servers
- 48730000-4 — Security software packages (key code for cybersecurity and NIS2-related contracts)
For cybersecurity, relevant codes include 72212730 (cybersecurity software development) and 72222300 (information technology services). For cloud services, authorities use 72320000 or 72315000 — the CPV system predates dedicated cloud categories, so keyword searching alongside CPV filtering is essential for complete market coverage.
Major EU IT Framework Agreements
Most large EU public IT spending flows through framework agreements — 4-year multi-supplier arrangements where direct awards (up to €143K) or mini-competitions run within a pre-approved supplier list. Getting onto a framework is a high-value investment: it can generate multiple contracts without a full open tender each time. The framework vs. individual contract distinction matters for pipeline planning — framework call-offs rarely appear on TED until they are issued, so framework membership is the only reliable way to access this pipeline.
Key EU-level IT frameworks include:
- DIGIT frameworks (European Commission): Multiple active frameworks for software development, cloud infrastructure, cybersecurity operations, and IT consultancy — used across EU institutions and often accessible to member state authorities through joint procurement arrangements.
- ENISA frameworks: The EU Agency for Cybersecurity runs procurement for cybersecurity services, research, and awareness — a targeted opportunity for specialist security vendors.
- National central purchasing bodies: France (UGAP, Marché cloud), Germany (ITZBund procurement frameworks), Italy (Consip SPC Cloud), Netherlands (ICTU) all operate IT frameworks with broad public authority access. Monitor TED for their framework re-procurement notices — add 4 years to award dates to estimate competition windows.
- SME access: EU IT frameworks increasingly mandate SME-specific lots or sub-lots below €500K to reduce barriers to entry. These SME lots are often under-subscribed relative to enterprise lots, offering better win probability for smaller vendors.
Evaluation Criteria: Understanding Quality/Price Splits
IT services tenders are evaluated heavily on quality — price is secondary. The typical evaluation split is 60–80% quality / 20–40% price, with quality broken down into specific sub-criteria. A common pattern for a software development or consultancy contract:
For complex legacy migration or AI contracts, the quality weighting often increases to 80/20 or even 90/10. Investing in the methodology section — particularly a credible risk register, realistic timeline, and clear governance structure — is the most important differentiator in IT procurement. Reference letters from public sector clients carry significantly more weight than equivalent private sector references.
Qualification Requirements for IT Contracts
- Annual turnover: For large framework agreements, €2–10 million minimum; for individual project contracts, proportionate to contract value
- Professional indemnity insurance: €1–5 million coverage typical for software development and consultancy
- Relevant references: 2–5 comparable projects completed within the last 3–5 years, with description of scope, technology stack, and client
- Key personnel CVs: Named project managers, technical architects, developers with relevant certifications
- ISO 27001: Information security management certification — increasingly mandatory for contracts involving sensitive government data
- GDPR compliance documentation: Data processing agreements, DPO appointment evidence
For cloud services, contracting authorities are increasingly referencing EUCS (EU Cloud Services Certification Scheme) levels under ENISA, and some specify requirements for data residency within EU borders.
Emerging Demand: Legacy Migration, AI Governance, and Cybersecurity
The most significant near-term procurement opportunity in EU public IT is legacy system migration. COBOL mainframe-to-cloud transitions are underway or planned across German federal ministries, French social security systems, and multiple Italian public sector bodies — these are multi-year, multi-million-euro programs where technical credibility in migration methodology is the primary selection factor.
AI governance tooling is growing rapidly as the EU AI Act comes into full effect. Public authorities deploying high-risk AI systems (in law enforcement, benefits assessment, or recruitment) must procure solutions meeting specific transparency, accuracy, and human oversight requirements. Vendors who can demonstrate AI Act compliance documentation — explainability tools, bias testing methodologies, human-in-the-loop designs — will have a structural advantage in this emerging procurement category through 2027.
Cybersecurity procurement is also accelerating under NIS2. Public authorities are procuring security operations centres (SOC), vulnerability management platforms, and incident response retainers. These contracts frequently appear under CPV 72212730 or 48730000-4 — monitor both codes across Germany, France, and the Netherlands for the highest volume of NIS2-related procurement.