Search

  • Search

    Remote Qualified Signature Creation Device (rQSCD)

    Digitaliseringsstyrelsen

    Remote Qualified Signature Creation Device (rQSCD)

    1. Questions deadline

      Jan 20, 11:00 AMJanuary 20, 2026 11:00 AM

    2. Tender submission deadline

      Feb 3, 11:00 AMFebruary 3, 2026 11:00 AM

    3. Contract start date

      Apr 30, 10:00 PMApril 30, 2026 10:00 PM

    4. Tender validity period

      May 3, 10:00 AMMay 3, 2026 10:00 AM

    5. Competition notice published

      Jul 9, 8:51 AMJuly 9, 2026 8:51 AM

    6. Change in competition

      Jul 20, 10:25 AMJuly 20, 2026 10:25 AM

    7. Result notice published

      Jul 22, 9:34 AMJuly 22, 2026 9:34 AM

    Brief

    Denmark: Tenders/Digitaliseringsstyrelsen/Remote Qualified Signature Creation Device (rQSCD)

    Cancelled

    The competition has been cancelled.

    Brief

    Programvareprodukter og lisenser

    Digitaliseringsstyrelsen has cancelled a procurement for a Remote Qualified Signature Creation Device (rQSCD) due to a change in needs. The procurement was for the delivery of certified Hardware and Standard Software, including HSM devices and Signature Activation Module software, to be installed and operated within the Agency's two data centers in Denmark. The contract was intended to last for 10 years, with an estimated maximum total value of 37 million DKK, and included options to upgrade throughput capacity and extend deployment to a third data center. The rQSCD was required to integrate with the Agency's existing signing infrastructure and support an estimated 5,100,000 signatures per year.

    Result

    Reason for cancellation
    Besluttning av oppdragsgiveren på grunn av behovsendring
    Number of bids
    0
    Contract value
    Not stated

    About the bid

      The Danish Agency for Digital Government (Digitaliseringsstyrelsen) operates on behalf of the Danish State a national qualified trust service for the management of remote qualified electronic signature creation devices under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of modernising the signing service to meet the requirements of eIDAS2, the Agency is procuring a Remote Qualified Signature Creation Device (rQSCD) — a certified combination of Hardware and Standard Software — to be installed and operated within the Agency's data centers (currently two). The Contract includes an Option to upgrade the throughput capacity of the rQSCD and an Option to extend the deployment to a third data centre. The Contract covers the Initial Delivery of the certified rQSCD, comprising certified HSM devices (Hardware) and the associated Signature Activation Module software (Standard Software), certified as a composite in accordance with eIDAS2. The Initial Delivery includes all Licences, Documentation, and support necessary for the Agency to install and operate the rQSCD as part of its qualified remote signing service. The rQSCD must integrate with the Agency's existing signing infrastructure, including the Agency's certificate authority, authorisation server, and signing components. The Supplier's principal obligations comprise: (a) the Initial Delivery of Hardware and Standard Software, sized and configured for operation across two data centres in an active/active configuration with a minimum throughput of 16 signatures per second, together with deployment in the Agency's production, staging, and test environments; (b) Ongoing Services, including support and maintenance of the Standard Software and Hardware, security patching, and up to two replacements of Hardware during the contract term to maintain valid certifications; and (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks) and Options and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract. The contract term is 120 months. The service supports the national qualified signing volume — estimated at 5,100,000 signatures per year across two data centres — and the procured capacity is dimensioned to provide headroom above current demand for growth, peak load, and resilience.

      Contact name
      Charlotte Jacoby
      Contact phone
      24220784
      Contact email
      NemLog-in-udbud@digst.dk
      Address
      Landgreven 4, 1301 København K

    Custom Assessment Criteria

    Start a free trial to ask your own questions about the tender and get AI-generated answers.

    Award Criteria

    • Description

      Reference is made to the Tender specifications Appendix A

    • Description

      Reference is made to the Tender specifications Appendix A

    Qualification requirements

    • Description

      As a minimum requirement, a total annual turnover of at least DKK 37 million is required in the latest annual report/financial statement available. If the tenderer relies on the capacities of other entities, the turnover is to be calculated as the total turnover of the tenderer and such other entities in the latest annual report/financial statement available. For groups of operators (e.g., a consortium), the turnover is calculated as the total turnover of the operators in the latest annual report/financial statement available.

      Documentation Requirement

      The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity. Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate. Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: A statement regarding the operator's overall turnover in the latest annual report/financial statement available, depending on when the operator was established or started trading if the figures for this turnover are available. For groups of operators (e.g. a consortium), the information in the latest annual report/financial statement available must be submitted for each participating operator in the group. Where an operator relies on the economic and financial capacity of other entities (e.g., a parent company, a sister company or a subcontractor), information for such other entities must be provided as well. The information is to be stated in section IV.B of the ESPD.

    • Description

      In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of requirements, the tenderer and the entities in question will be required by the contracting entity to undertake joint and several liability for the performance of the contract.

      Documentation Requirement

      The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications. The form is enclosed as an attachment to the tender specifications.

    Previous Contract Winners

    Start a free trial to see who has won similar tenders for this buyer.

    See the full notice

    Contracting authority
    Digitaliseringsstyrelsen
    Title
    Remote Qualified Signature Creation Device (rQSCD)
    Type
    ResultPrequalification
    Main code
    48000000Software package and information systems
    Supplemental codes
    30233000Media storage and reader devices48730000Security software package48732000Data security software package72260000Software-related services
    Estimated value
    DKK 37,000,000.00
    Duration
    120 months

    Active similar competitions

    • Digitaliseringsstyrelsen

      Programvareprodukter og lisenser

      Qualified Signature Creation Device (QSCD)

      Digitaliseringsstyrelsen needs Qualified Signature Creation Devices (QSCD) for a national qualified trust service over 10 years, with a maximum total value of 24,000,000 DKK. The contract includes the initial delivery of certified QSCD hardware, ongoing services (support, maintenance, security patching, and hardware replacements), ordered services (time-based services and options), and cross-cutting services (documentation and security). The QSCD must be installed and operated within the Agency's data centers (currently two, with an option to extend to a third) and integrate with existing infrastructure, including the Agency's certificate authority, authorisation server, and signing components. The contract includes an option to upgrade throughput capacity and an option to extend deployment to a third data center. Offers will be evaluated based on quality (60%) and price (40%). Suppliers must have a total annual turnover of at least 24,000,000 DKK in the latest available financial year and positive equity in the latest available annual report/financial statements.

      CompetitionSep 8, 2026
      Oct 14, 2026(5 days)
      DKK 24,000,000

    • Digitaliseringsstyrelsen

      IT-rådgivning og strategi

      Software and hardware for the continuation of the NemLog-in CA component

      Digitaliseringsstyrelsen is planning the procurement of software and hardware for the continuation of the NemLog-in CA component, specifically EJBCA Software from KeyFactor and Utimaco FIPS 140-3 Network HSM's. The estimated maximum total contract value is 10,000,000 DKK. The tender is currently being prepared.

      PlanningJul 28, 2026DKK 10,000,000

    • Digitaliseringsstyrelsen

      Datamaskinhandel og tilhørende utstyr

      Generic HSMs

      Digitaliseringsstyrelsen is planning the procurement of generic Hardware Security Modules (HSM boxes) and related software for cryptographic operations within the Danish State Trust Services. This procurement is part of a larger reorganization of tenders for the operation and continuation of NemLog-in. The estimated maximum total contract value is 17,000,000 DKK.

      PlanningJul 28, 2026DKK 17,000,000

    • Digitaliseringsstyrelsen

      Programvareprodukter og lisenser

      Data Diode

      Digitaliseringsstyrelsen needs Data Diode solutions for a 3-year contract, with a maximum total value of 13.5 million DKK, to be installed and operated within the Agency's data centers in Denmark. The contract includes the initial delivery of certified Data Diode appliances (hardware and associated software) that meet Common Criteria or EUCC at EAL4 or higher, along with licenses, documentation, and support. These solutions must provide one-way traffic from the Agency's isolated Root CA environment to other network zones, preventing reverse data transfer, and support integration with existing infrastructure for file transfer, time information, monitoring, and logging. The supplier's obligations include initial delivery of four Data Diode appliances for production and staging environments in two data centers, ongoing support and maintenance, security patching, product lifecycle management, hardware replacement, and ordered services such as installation, configuration, and key ceremonies. There is an option to extend deployment to a third data center and to extend the contract and replace hardware. Award criteria are Price (40%) and Quality (60%). A minimum annual turnover of 13.5 million DKK in the latest financial year and positive equity are required.

      CompetitionSep 8, 2026
      Oct 14, 2026(5 days)
      DKK 13,500,000

    • Digitaliseringsstyrelsen

      IT- drift og vedlikehold

      Data diodes

      Digitaliseringsstyrelsen is planning the procurement of data diodes for use in Root CA Isolation in the operation of the Danish State Trust Services.

      PlanningJul 28, 2026DKK 2,200,000