Denmark – IT services: consulting, software development, Internet and support – Udbud af kontrakt om videreførelse mv. af NemLog-in-Applikationen

Background: The Danish Agency for Digitalisation is procuring a Contract for the continuation and further development of the NemLog-in Application. According to LBKG no. 333 of 19 March 2025, the Danish Agency for Digitalisation makes NemLog-in available to public authorities, public-law bodies and legal entities, and the Danish Agency for Digitalisation is responsible for ensuring the development, operation, management and maintenance of NemLog-in. The Contract is therefore to support the Danish Agency for Digitalisation's continuation of NemLog-in. NemLog-in is a critical system with a central role in Denmark's digital infrastructure, providing a range of services to citizens, businesses and public authorities, including login to public and private self-service solutions, digital signature and certificates, administration of business users and power of attorney functionality. NemLog-in consists of a number of Components, including 1) Connection Competence, 2) Login Component, 3) STS Component, 4) Administration Component, 5) MitID Business Component, 6) User Rights Management Component, 7) Billing Component, 8) Power of Attorney Component, 9) Signing Component, 10) Validation Component, 11) CA and TSA Component, 12) Reporting Component, 13) Common Components, 14) Reference Components and 15) Test Components. NemLog-in has a large number of internal and external integrations and is critical to the security and availability of Denmark's digital infrastructure. NemLog-in handles approximately 36 million logins per month (average 2025), 560,000 digital signatures per month (January 2025). NemLog-in has 340,000 connected user organisations in MitID Business (November 2025) and 1,236,379 active business identities in MitID Business (November 2025). The NemLog-in Application is continued in its entirety and is to be taken over in a transition and subsequently further developed and maintained. As part of the transition, selected Components are transformed. The procurement of the Contract is carried out in close connection with the Danish Agency for Digitalisation's ongoing procurement of a Contract for infrastructure operation, etc. for the NemLog-in Application and selected support systems, etc., cf. tender notice no. 55320-2026 of 26 January 2026. The Danish Agency for Digitalisation wishes the supplier of the tendered contract (hereinafter: "Main Supplier") to enter into close and dynamic cooperation with the Danish Agency for Digitalisation and the future Operations Supplier and any Other Suppliers. The Main Supplier is therefore to deliver its Services in close cooperation with the Danish Agency for Digitalisation (hereinafter "the Customer") and the Operations Supplier, including in connection with the transition and commissioning of the NemLog-in Application on the Infrastructure, participation in cooperation forums and handling of operational disruptions and Incidents. To support the cooperation between the Main Supplier, the Customer, the Operations Supplier and Other Suppliers, the Customer makes software licences for a number of Shared Support Systems available. The Shared Support Systems are established in their own Environments in the Infrastructure with the Operations Supplier. The support systems are included in the System Portfolio together with the NemLog-in Application. The supplier's obligations under the Contract cover the System Portfolio, cf. section II below and the description in the tender material. II: Main Services: 1) TRANSITION, including taking over responsibility for delivering the Ongoing Services, Order Services and Cross-cutting Services from the Outgoing Suppliers, establishing a cooperation organisation, knowledge transfer, establishing the Shared Support Systems and transforming selected Components. 2) ONGOING SERVICES a. Application operation, including implementing Releases, handling batch runs, application and security monitoring, and configuring Environments and virtual servers, including installation and maintenance of software. b. Application maintenance and further development, including ongoing bug fixing, preventive maintenance, with a focus on security and legislative requirements, and further development of existing functionality to secure the Customer's business vision and needs and further development of new functionality. c. Support, including delivering support services in the form of a service desk made available to Actors and Users, 1st-line and 3rd-line support to a number of Actors, 2nd-line support to areas where the Customer provides 1st-line support, establishing and administering IT service management, and connecting user organisations, IT system providers and IT suppliers. d. Compliance, including assisting the Danish Agency for Digitalisation with its own audits, compliance assessments regarding trust services and audit statements regarding security requirements, the Main Supplier's responsibility for carrying out and declarations from its own audits regarding security requirements and any necessary audit. 3) ORDER SERVICES, including Consultancy and Standard Order Services and an Option for supporting a third data centre. 4) CROSS-CUTTING SERVICES, including reporting, Documentation and quality assurance and testing. 5) TRANSITION OUT AND OTHER TERMINATION SERVICES, including in connection with handover, contract termination or possible transfer of responsibility for the Services to the Customer or the Customer's Receiving Supplier.