Leave us your data and we will get in contact with you shortly.
Free guide
What the ENS asks of companies that sell to the Spanish public sector, and how to read the ENS requirement in a tender. A free PDF guide with recent tribunal cases and a checklist.
Get the guideLast updated: October 2026
Can I bid for a public contract if my ENS certification is still in progress?
It depends on how the tender sets the requirement. If the ENS is set as a professional qualification or solvency requirement, you must meet it on the bid deadline, and a letter saying the audit is done is not enough. In July 2026 the Madrid public procurement tribunal upheld the exclusion of a bidder whose ENS MEDIUM certificate was granted after the deadline. The central procurement tribunal (TACRC) asks the contracting body to justify why the certificate is needed at bid stage, so the outcome can vary by tribunal. If the ENS is set as a contract execution condition, you can obtain it later, within the period the tender sets. This free guide from Qalea explains how to tell the difference and what to submit.
When the ENS applies
The three conditions that bring a private company into scope.
Category and document
Declaration or certification of conformity, by category.
Reading the tender
Where the requirement sits and when it applies.
Your certificate
The name, scope, category and dates the contracting body will check.
Timeline and cases
How far ahead to start, and what went wrong for bidders in 2026.
Who it is for: Companies that sell, or want to sell, software, cloud or IT services to the Spanish public sector and have found the ENS requirement in a tender.
Qalea takes companies through ENS certification and keeps them compliant afterwards, as part of one service that covers compliance, people and infrastructure under continuous monitoring.
Can I bid if my ENS certification is still in progress?
Only if the tender does not require the certificate on the bid deadline. When the ENS is set as a qualification or solvency requirement, tribunals have upheld exclusions where the certificate was granted after the deadline, even with the audit already done. If it is a contract execution condition, you can usually obtain it during the contract.
Do I need a declaration or a certification of conformity?
It depends on the category of your system and on the tender. BASIC systems can use a declaration of conformity after a self assessment. MEDIUM and HIGH systems need a certification of conformity issued by a certification body accredited by ENAC. If the tender asks for a certification, a declaration does not replace it, even for a BASIC system.
Can I use a certificate issued to another company in my group?
Generally no. If the tender sets the ENS as a qualification or solvency requirement, the certification must be yours. If it is a technical requirement, what matters is that the certificate covers the exact system and hosting you offer. In January 2026 the central procurement tribunal upheld an exclusion where the certificate belonged to another group company and did not cover the offered system.
Does ISO 27001 replace the ENS?
No. ISO 27001 does not replace ENS conformity, but many of its controls can be reused. The CCN-STIC 825 guide maps one framework to the other.
Is the guide available in English?
The guide is in Spanish, since the ENS applies to suppliers of the Spanish public sector.
