Compliance Tenders
See open compliance tenders and awarded contracts for the UK public sector.
This page covers the regulatory compliance function itself: outsourced data protection officer services, governance risk and compliance platforms, anti-money laundering and financial crime monitoring, and compliance auditing services.
Two shapes dominate the record. Outsourced DPO and data protection advisory work, and GRC software platforms. 424 notices match to date, 187 of them awarded.
407 results
- Closed tenderPublished 11 April 2023
NW2560 - Governance, Risk and Compliance Software Specification
- Awarded contract
HRB-2021-Data Protection Officer services
- Closed tenderPublished 23 March 2023
VR Dev
- Expired contract
Contract for the provision of Sectoral Assessment Services
- Expired contract
Regulatory Compliance Investigations Team - Case Management System
- Closed tenderPublished 15 March 2023
IG Support and Data Protection Officer Service to the Norfolk and Waveney GP Practices
- Closed tenderPublished 15 March 2023
IG Support and Data Protection
- Closed tenderPublished 13 March 2023
Provision of Records Management and Data Protection Officer Services
- Expired contract
Enterprise Control
- Awarded contract
Data Protection Officer (DPO) as a Service
- Awarded contract
Data Protection Officer services
- Closed tenderPublished 24 February 2023
Governance, Risk & Compliance Tracking Software Solution - DECC
- Closed tenderPublished 14 February 2023
CDD Screening Solution and Fraud Investigation Solution Market Engagement
- Expired contract
Appointment of a Data Protection Officer (DPO) for BlueLight Commercial
- Stale Pre-tenderPublished 14 February 2023
CDD Screening Solution and Fraud Investigation Solution Market Engagement
- Awarded contract
Crowdfunding Platform and Associated Services
- Closed tenderPublished 3 February 2023
For the provision of Data Protection Officer as a Service and Information Governance Consultant to the Irish Prison Service
- Closed tenderPublished 3 February 2023
For the provision of Data Protection Officer as a Service and Information Governance Consultant to the Irish Prison Service
- Expired contract
GB-Glasgow: Governance Risk and Compliance (GRC)
- Closed tenderPublished 13 January 2023
Data Protection Officer (DPO) as a Service
Frequently asked questions
Frequently asked questions about governance risk and compliance, data protection officer, anti-money laundering, financial crime, compliance auditing services, regulatory compliance services in the UK public sector.
How do I find compliance contracts in the UK public sector?
Two routes. Search the portals for live compliance tenders, or get in earlier by tracking the buyers who are about to run one. Stotles pulls notices from 100+ portals into one place, and platform-wide there are 2,144 tenders open right now across every category.
For compliance specifically, most of the record is awarded work: 187 of the 424 matching notices are awards. So the contract expiry dates and the buyers behind them are the useful part, not the open list.
What compliance work do public sector buyers actually tender for?
Four recurring shapes. Outsourced data protection officer services, often shared across several councils or health bodies. Governance, risk and compliance software platforms. Anti-money laundering and financial crime transaction monitoring, which comes mainly from regulators and financial bodies. And compliance auditing services, including accessibility and regulatory audits.
Estates compliance is a separate market. Gas safety, electrical testing and building inspection use the word compliance constantly but sit on other pages.
What CPV codes cover compliance procurement?
The closest are 48170000 (Compliance software package) and 72212170 (Compliance software development services). 79212110 (Corporate governance rating services) turns up on GRC tenders too.
All three are narrow. Alongside the keyword filter this page runs on, 48170000 returns 11 notices and 72212170 returns 7, so searching by code alone would miss most of the market. Auditing services (79212000) and legal advisory and information services (79140000) carry a good share of the rest.
How big are public sector compliance contracts?
Mid-market rather than transformation-scale. Stotles' 2026 Supplier Benchmark Report found 58% of government contracts fall in the £50k to £1m bracket, and compliance sits comfortably in that band: shared DPO retainers and audit engagements rather than multi-year programmes.
GRC platform rollouts are the larger end. There are 37 pre-tender notices on record for this filter, which is where those tend to surface first.
Is there much open compliance work right now?
Not much, and that is worth knowing before you build a pipeline around it. This is an award-heavy category: of 424 matching notices, 187 are awards and 37 are pre-tender. Open tenders are rare here and they close fast.
The practical approach is to watch the pre-tender pipeline and the expiry dates on contracts already let. Platform-wide, 39,784 awarded contracts are due to expire in the next twelve months.
Win more Compliance Tenders contracts with Stotles
Get Compliance Tenders alerts, buyer intelligence and bid tools, all in one place.
