Compliance Tenders
See open compliance tenders and awarded contracts for the UK public sector.
This page covers the regulatory compliance function itself: outsourced data protection officer services, governance risk and compliance platforms, anti-money laundering and financial crime monitoring, and compliance auditing services.
Two shapes dominate the record. Outsourced DPO and data protection advisory work, and GRC software platforms. 424 notices match to date, 187 of them awarded.
407 results
- Expired contract
CON-21-141 Cryptoasset Blockchain Analysis Platform
- Awarded contract
CON-21-141 Cryptoasset Blockchain Analysis Platform
- Awarded contract
Legal & DPO Services Melville Housing Association
- Expired contract
CON-21-141 Cryptoasset Blockchain Analysis Platform
- Awarded contract
CON-20-115 Consultancy & Skilled Persons Framework
- Closed tenderPublished 10 June 2022
Data Exploitation, Data and Technology Delivery Partner
- Awarded contract
Data Protection Officer Services
- Closed tenderPublished 30 April 2022
NDA Cyber Security Resilience Programme - Assurance
- Stale Pre-tenderPublished 22 April 2022
Lending Administration Solution
- Stale Pre-tenderPublished 22 April 2022
Lending Administration Solution
- Closed tenderPublished 5 April 2022
Data Protection Officer services
- Closed tenderPublished 31 March 2022
Professional Services (Multi-Lot) Tender
- Expired contract
Temporary staffing for legal personnel/support - Data Protection Officer
- Closed tenderPublished 17 March 2022
Data Protection Services Framework 2022
- Expired contract
Homes England - Independent review of FCC Policies
- Expired contract
Review - Financial Crime Controls
- Closed tenderPublished 17 January 2022
Data Directorate Data Architecture & Data Governance Services 2022/24
- Expired contract
TEN-2122-015 Provision of incident response support and remediation resource
- Closed tenderPublished 10 January 2022
Data Protection Officer Services
- Awarded contract
IG-1 - Data Protection Officer Services
Frequently asked questions
Frequently asked questions about governance risk and compliance, data protection officer, anti-money laundering, financial crime, compliance auditing services, regulatory compliance services in the UK public sector.
How do I find compliance contracts in the UK public sector?
Two routes. Search the portals for live compliance tenders, or get in earlier by tracking the buyers who are about to run one. Stotles pulls notices from 100+ portals into one place, and platform-wide there are 2,144 tenders open right now across every category.
For compliance specifically, most of the record is awarded work: 187 of the 424 matching notices are awards. So the contract expiry dates and the buyers behind them are the useful part, not the open list.
What compliance work do public sector buyers actually tender for?
Four recurring shapes. Outsourced data protection officer services, often shared across several councils or health bodies. Governance, risk and compliance software platforms. Anti-money laundering and financial crime transaction monitoring, which comes mainly from regulators and financial bodies. And compliance auditing services, including accessibility and regulatory audits.
Estates compliance is a separate market. Gas safety, electrical testing and building inspection use the word compliance constantly but sit on other pages.
What CPV codes cover compliance procurement?
The closest are 48170000 (Compliance software package) and 72212170 (Compliance software development services). 79212110 (Corporate governance rating services) turns up on GRC tenders too.
All three are narrow. Alongside the keyword filter this page runs on, 48170000 returns 11 notices and 72212170 returns 7, so searching by code alone would miss most of the market. Auditing services (79212000) and legal advisory and information services (79140000) carry a good share of the rest.
How big are public sector compliance contracts?
Mid-market rather than transformation-scale. Stotles' 2026 Supplier Benchmark Report found 58% of government contracts fall in the £50k to £1m bracket, and compliance sits comfortably in that band: shared DPO retainers and audit engagements rather than multi-year programmes.
GRC platform rollouts are the larger end. There are 37 pre-tender notices on record for this filter, which is where those tend to surface first.
Is there much open compliance work right now?
Not much, and that is worth knowing before you build a pipeline around it. This is an award-heavy category: of 424 matching notices, 187 are awards and 37 are pre-tender. Open tenders are rare here and they close fast.
The practical approach is to watch the pre-tender pipeline and the expiry dates on contracts already let. Platform-wide, 39,784 awarded contracts are due to expire in the next twelve months.
Win more Compliance Tenders contracts with Stotles
Get Compliance Tenders alerts, buyer intelligence and bid tools, all in one place.
