Compliance Tenders
See open compliance tenders and awarded contracts for the UK public sector.
This page covers the regulatory compliance function itself: outsourced data protection officer services, governance risk and compliance platforms, anti-money laundering and financial crime monitoring, and compliance auditing services.
Two shapes dominate the record. Outsourced DPO and data protection advisory work, and GRC software platforms. 424 notices match to date, 187 of them awarded.
407 results
- Stale Pre-tenderPublished 9 March 2026
Upcoming Request for Information (RFI): Supplier & Customer Due Diligence & Know Your Customer Services
- Closed tenderPublished 6 March 2026
RFI- DDaT Enterprise GRC Tooling
- Stale Pre-tenderPublished 6 March 2026
DDaT Enterprise GRC Tooling
- Awarded contract
Consultancy & Skilled Persons Framework 3
- Closed tenderPublished 2 March 2026
Captive Insurance Management Services
- Closed tenderPublished 17 February 2026
Provision of Data Protection Officer Services for the Charities Regulator
- Expired contract
RegTech Market Research
- Expired contract
Digital Unified Intelligence Environment (DUIE) - Analytics Consultancy
- Awarded contract
Provision of Data Protection Officer Services
- Closed tenderPublished 9 February 2026
Pro357 - Consultancy Services for Data Protection and Artificial Intelligence (AI) to the Land Development Agency
- Expired contract
Skilled person review on financial crime under the MLRs
- Closed tenderPublished 2 February 2026
Outsourced Data Protection Officer (DPO) Services (LSHW.006.2025)
- Expired contract
Data Protection Officer as a Service
- Expired contract
CPU 7866 Data Protection Officer Services
- Closed tenderPublished 23 January 2026
Single Supplier Framework for a Unified Governance Risk and Compliance Platform
- Awarded contract
GRC Cloud Service
- Closed tenderPublished 6 January 2026
Tender for Treasury Advisory Services & Brixx Financial Modelling Software Support
- Awarded contract
Permanent Data Protection Officer Recruitment
- Closed tenderPublished 19 December 2025
FTS050 Data Protection Services Framework
- Closed tenderPublished 10 December 2025
External Support Services to CHI's Data Protection Office
Frequently asked questions
Frequently asked questions about governance risk and compliance, data protection officer, anti-money laundering, financial crime, compliance auditing services, regulatory compliance services in the UK public sector.
How do I find compliance contracts in the UK public sector?
Two routes. Search the portals for live compliance tenders, or get in earlier by tracking the buyers who are about to run one. Stotles pulls notices from 100+ portals into one place, and platform-wide there are 2,171 tenders open right now across every category.
For compliance specifically, most of the record is awarded work: 187 of the 424 matching notices are awards. So the contract expiry dates and the buyers behind them are the useful part, not the open list.
What compliance work do public sector buyers actually tender for?
Four recurring shapes. Outsourced data protection officer services, often shared across several councils or health bodies. Governance, risk and compliance software platforms. Anti-money laundering and financial crime transaction monitoring, which comes mainly from regulators and financial bodies. And compliance auditing services, including accessibility and regulatory audits.
Estates compliance is a separate market. Gas safety, electrical testing and building inspection use the word compliance constantly but sit on other pages.
What CPV codes cover compliance procurement?
The closest are 48170000 (Compliance software package) and 72212170 (Compliance software development services). 79212110 (Corporate governance rating services) turns up on GRC tenders too.
All three are narrow. Alongside the keyword filter this page runs on, 48170000 returns 11 notices and 72212170 returns 7, so searching by code alone would miss most of the market. Auditing services (79212000) and legal advisory and information services (79140000) carry a good share of the rest.
How big are public sector compliance contracts?
Mid-market rather than transformation-scale. Stotles' 2026 Supplier Benchmark Report found 58% of government contracts fall in the £50k to £1m bracket, and compliance sits comfortably in that band: shared DPO retainers and audit engagements rather than multi-year programmes.
GRC platform rollouts are the larger end. There are 37 pre-tender notices on record for this filter, which is where those tend to surface first.
Is there much open compliance work right now?
Not much, and that is worth knowing before you build a pipeline around it. This is an award-heavy category: of 424 matching notices, 187 are awards and 37 are pre-tender. Open tenders are rare here and they close fast.
The practical approach is to watch the pre-tender pipeline and the expiry dates on contracts already let. Platform-wide, 42,590 awarded contracts are due to expire in the next twelve months.
Win more Compliance Tenders contracts with Stotles
Get Compliance Tenders alerts, buyer intelligence and bid tools, all in one place.
