CPV 48 – Software Packages and Information Systems

What does CPV 48 cover?

CPV 48 covers the procurement of software packages and information systems by public contracting authorities. This division encompasses the acquisition of standard software licences, bespoke software development, software-as-a-service (SaaS) solutions, operating systems, database software, enterprise resource planning (ERP) systems, office productivity suites, industry-specific applications (e.g. geographical information systems, building management software, laboratory information systems), security software, and internet and intranet solutions. Both perpetual licences and subscription-based software procurement models fall within this division.

In the context of public procurement, software procurement is one of the most rapidly growing and legally complex fields. The distinction between a standard supply contract (software licence) and a service contract (SaaS, cloud solution) has significant implications for the applicable procurement procedures and contract structures. Open source software, procurement of software maintenance and support, and data migration services are frequently bundled with the primary software contract.

Public contracting authorities across all levels – federal ministries, state authorities, municipalities, hospitals, universities and public-law enterprises – are major software procurers. The German Federal Office for Information Security (BSI), the IT Planning Council and the European Union Agency for Cybersecurity (ENISA) issue guidance on security standards for public sector software procurement. Further information on the CPV system is available from the European Commission (SIMAP) and in Regulation (EC) No 213/2008.

Key CPV Groups in Division 48

Examples of Tenders with CPV 48

• ERP system for federal agency: A federal ministry tenders a new ERP system to replace a legacy financial management platform, covering software licences for financial accounting, procurement, HR and controlling modules, implementation services, data migration from the existing system, user training and a five-year maintenance and support contract.
• Geographical information system for municipality: A municipality awards a new web-based GIS platform for internal use and public mapping services, covering SaaS licences, integration with existing cadastre data, citizen portal interface, training for 80 staff users and three-year subscription.
• Cyber security software suite for state administration: A state IT service centre tenders a comprehensive security software suite for 15,000 workstations, covering endpoint protection, SIEM, vulnerability scanning, privileged access management and BSI-IT-Grundschutz compliance documentation.

Current tenders with CPV 48 are published on TED (Tenders Electronic Daily) and on national procurement platforms.

Who is CPV 48 relevant for?

Public Contracting Authorities

Federal ministries, state authorities, municipalities, hospital companies and public universities are major software procurers. They commission software in the context of digital transformation programmes, system renewals, efficiency improvement projects and compliance-driven modernisation. Data protection requirements (GDPR), BSI security standards and interoperability requirements with government IT architectures significantly influence specifications.

Companies and Bidders

Software manufacturers, system integrators, IT consulting firms and managed service providers are the central bidders. In addition to evidence of the specific software solution and its public sector references, companies must typically provide security certifications (ISO 27001, BSI certification), data processing agreements (GDPR), implementation methodology documentation and references from comparable public sector deployments.

Information on eligibility requirements and procurement procedures is provided by the Federal Ministry for Economic Affairs and Climate Action (BMWK).

How does Bond help with CPV 48?

Tender Match – Automatically Find Tenders (CPV 48)

With tender.match, software companies and IT service providers automatically receive all relevant tenders with CPV 48 directly in their dashboard. BOND indexes tenders from over 1,000 procurement portals in the EU – from TED to national platforms and regional contracting authorities. Instead of manually searching dozens of portals every day, matching software tenders are filtered and delivered by industry, competency, region, and company profile. An automated gap analysis immediately shows where the company meets the requirements and where gaps exist. This ensures companies never miss a deadline and can focus on preparing their bids.

Company Match – Find the Right Partners and Suppliers (CPV 48)

For companies looking for suppliers, subcontractors, or consortium partners for software projects, company.match provides direct access to qualified firms from an EU-wide database of over 28 million companies. Especially for larger ERP or platform projects requiring combined software and implementation capabilities, company.match automatically identifies suitable partners for bidding consortia and partial services – increasing the chances of winning the contract.

Frequently Asked Questions about CPV 48

What does the CPV code 48000000 mean?

The CPV code 48000000 represents the entire division of software packages and information systems in the European procurement classification system. It is the top-level code for all software procurement by public contracting authorities, from individual software licences to complex integrated information systems.

How do I find tenders with CPV 48?

Tenders with CPV 48 are published on TED (Tenders Electronic Daily) for EU-wide procedures. Bond automatically aggregates all relevant software and IT tenders from over 1,000 portals and filters by software category, technology stack and company profile.

What are the requirements for participating in tenders with CPV 48?

Bidders must comply with the procurement procedures set out in the VgV for EU-threshold contracts and the UVgO for sub-threshold contracts, and must provide evidence of the software solution's suitability, public sector references, security certifications and GDPR-compliant data processing arrangements.