https://cedesa.es/en/blog/ Technical articles on custom software development, the public sector, traceability, digital regulation and the technological transformation of business. en-GB https://cedesa.es/en/blog/web-accessibility-public-administration-rd-1112-2018/ https://cedesa.es/en/blog/web-accessibility-public-administration-rd-1112-2018/ What Spain's Royal Decree 1112/2018 requires of public sector websites and apps: the UNE-EN 301 549 standard and WCAG 2.1 level AA, the accessibility statement, the responsible unit, reviews and monitoring by the Web Accessibility Observatory; what goes wrong in e-offices (sedes electrónicas) and which clauses to impose on the supplier. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/shared-whistleblowing-channel-small-councils-law-2-2023/ https://cedesa.es/en/blog/shared-whistleblowing-channel-small-councils-law-2-2023/ Spain's Law 2/2023 requires every local authority to have an internal reporting system, but it allows municipalities with fewer than 10,000 inhabitants to share one with each other or with other public authorities in their autonomous community (region), and dependent entities with fewer than 50 employees to share one with the authority they depend on. What the system requires (system manager, channel, deadlines of 7 days and 3 months, register of reports, anonymity, data protection), how a shared system is organised from a provincial council (Diputación), what role the external channel of the AIPI (Spain's Independent Whistleblower Protection Authority) plays and what the software must provide. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/metro-bilbao-case-real-time-positioning-passenger-info/ https://cedesa.es/en/blog/metro-bilbao-case-real-time-positioning-passenger-info/ How a real-time train positioning system for passenger information works: where the data comes from, how position and arrival time are calculated, how they are published on the web, in the app and on station displays, what the system demands in availability, latency and security, and what CEDESA developed for Metro Bilbao. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/expired-ens-certificate-rd-3-2010-check-your-supplier/ https://cedesa.es/en/blog/expired-ens-certificate-rd-3-2010-check-your-supplier/ The deadline for complying with Royal Decree 311/2022 passed on 5 May 2024, and ENS (Spain's National Security Framework) certificates issued under RD 3/2010 ceased to be valid. How to read a certificate or a declaration of conformity, what to check in the conformity mark, the category, the scope and the certification body, and what to require in the tender specifications. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/public-procurement-of-innovation-how-to-tender/ https://cedesa.es/en/blog/public-procurement-of-innovation-how-to-tender/ What public procurement of innovation is, the forms it takes under Spain's Law on Public Sector Contracts (pre-commercial procurement, procurement of innovative technology, innovation partnership, competitive dialogue), how to start with a preliminary market consultation, how it is funded and what to require of the supplier. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/digital-farm-logbook-cue-siex-mandatory-2027/ https://cedesa.es/en/blog/digital-farm-logbook-cue-siex-mandatory-2027/ Royal Decree 1054/2022 created Spain's information system for agricultural and livestock holdings (SIEX), the regional register of holdings (REA) and the digital farm logbook (CUE). The CUE has been voluntary since 2024, fertilisation has had to be recorded since 1 January 2026 and the electronic record of plant protection treatments becomes mandatory on 1 January 2027, following the postponement in Royal Decree 1039/2025. What data has to be recorded, who can keep the logbook, how private applications connect to SIEX and what an association, a cooperative or an advisory body gains by integrating the logbook into its own system. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/data-act-regulation-2023-2854-iot-device-data-obligations/ https://cedesa.es/en/blog/data-act-regulation-2023-2854-iot-device-data-obligations/ The EU Data Act has applied since 12 September 2025 and obliges manufacturers of connected products and providers of related services to give the user access to the data the device generates and to share it with third parties at the user's request; since 12 September 2026, products placed on the market have had to be designed for that. What a connected product is, which data is covered, what rights the user has, which contractual terms are prohibited, what it requires of cloud services and how it affects an IoT sensing project for water networks or a traceability project. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/ens-small-councils-ccn-stic-883-profiles-software-supplier/ https://cedesa.es/en/blog/ens-small-councils-ccn-stic-883-profiles-software-supplier/ Spain's National Security Framework (ENS) is binding on small local councils too, but Royal Decree 311/2022 allows specific compliance profiles, and the National Cryptologic Centre (CCN) publishes three for local authorities according to their population: 883A (fewer than 5,000 inhabitants), 883B (fewer than 20,000) and 883C (from 20,000 to 75,000). What a compliance profile is, how conformity is declared, what role the provincial councils (Diputaciones) play and what a small council should ask of its software and hosting supplier. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/mandatory-b2b-e-invoicing-rd-238-2026-timeline-erp/ https://cedesa.es/en/blog/mandatory-b2b-e-invoicing-rd-238-2026-timeline-erp/ Royal Decree 238/2026 implements the mandatory e-invoicing between businesses provided for in Spain's Crea y Crece law: the Tax Agency's public solution and interconnected private platforms, accepted formats, the mandatory copy to the public solution, reporting of invoice statuses and a timeline of 12 and 24 months from the ministerial order, expected on 1 October 2026. What has to change in an industrial ERP and how it differs from Verifactu. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/custom-electronic-case-management-law-39-2015-eni/ https://cedesa.es/en/blog/custom-electronic-case-management-law-39-2015-eni/ What Law 39/2015, the Regulation approved by Royal Decree 203/2021 and Spain's National Interoperability Framework (ENI) require of an electronic case management system: ENI documents and case files, the signed index, registry, notifications, signature, data intermediation, the single archive, automated action and the ENS (the National Security Framework), and how to write it all into the tender specifications for custom development. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/eu-funds-reporting-traceability-software-igae-audit/ https://cedesa.es/en/blog/eu-funds-reporting-traceability-software-igae-audit/ What it takes to report on and justify a project financed by Next Generation EU, PERTE or the ERDF (milestones and targets, final recipients and beneficial ownership, anti-fraud measures, DNSH, the audit trail, document retention), why justification put together from folders and emails fails, and what a system must do to generate it out of the management of the project itself. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/nis2-spain-public-sector-suppliers-ens/ https://cedesa.es/en/blog/nis2-spain-public-sector-suppliers-ens/ Where the transposition of the NIS2 Directive stands in Spain as at September 2026, which obligations it passes on to the public sector's software suppliers (supply chain, incidents, management accountability), how it differs from the ENS (Spain's National Security Framework) and how to prepare without waiting for the BOE, the official state gazette. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/digital-product-passport-espr-registry-2026-nfc/ https://cedesa.es/en/blog/digital-product-passport-espr-registry-2026-nfc/ Regulation (EU) 2024/1781, the Ecodesign for Sustainable Products Regulation, creates the Digital Product Passport: a unique identifier, a data carrier (QR code, NFC or RFID), decentralised data and a central Commission registry operational from 19 July 2026. The first mandatory passport is the battery passport (18 February 2027); iron and steel, aluminium, textiles, tyres, furniture and mattresses follow with the delegated acts of 2026 to 2029. What data it will require, who supplies it along the chain and why NFC traceability at batch or item level is the basis for being ready in time. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/sustainable-commuting-plan-law-9-2025-december-2026/ https://cedesa.es/en/blog/sustainable-commuting-plan-law-9-2025-december-2026/ Spain's Law 9/2025 on Sustainable Mobility obliges companies and public entities with workplaces of more than 200 workers, or more than 100 per shift, to have a sustainable commuting plan negotiated with the workers' legal representatives; Royal Decree-Law 7/2026 brought the deadline forward to 5 December 2026. What the plan must contain, what shift, time tracking and fleet data the assessment needs and how to get it out of the software you already have. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/interoperable-europe-act-2024-903-assessment-public-sector/ https://cedesa.es/en/blog/interoperable-europe-act-2024-903-assessment-public-sector/ Regulation (EU) 2024/903 has applied since 12 July 2024 and, since 12 January 2025, has obliged public sector bodies to carry out and publish an interoperability assessment before adopting new or substantially modified binding requirements for trans-European digital public services. What a trans-European digital public service is, what the assessment must contain, where it is published, how it fits with Spain's National Interoperability Framework (ENI) and what it means for the tender specifications for custom software development. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/eu-ai-act-public-administration-virtual-assistant/ https://cedesa.es/en/blog/eu-ai-act-public-administration-virtual-assistant/ What Regulation (EU) 2024/1689 requires of a public authority that uses AI, with the timeline in force after the Digital Omnibus of July 2026: transparency since August 2026, high risk from December 2027, impact assessment, registration, AESIA (Spain's AI supervisory agency) and the Spanish law going through parliament. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/iot-sensors-water-networks-measure-predict-fund/ https://cedesa.es/en/blog/iot-sensors-water-networks-measure-predict-fund/ Which sensors are installed in a water supply network (flow, pressure, level, quality, remote meter reading), what is calculated from them (water balance, non-revenue water, minimum night flow, sectorisation), what the models predict (leaks, demand, bursts), what Directive 2020/2184 and Spain's Royal Decree 3/2023 require on leakage and how it is funded through the PERTE for digitalising the water cycle. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/smart-tachograph-second-generation-vans-july-2026/ https://cedesa.es/en/blog/smart-tachograph-second-generation-vans-july-2026/ Since 1 July 2026, vehicles of between 2.5 and 3.5 tonnes engaged in international goods transport or cabotage have had to carry a smart tachograph version 2 (G2V2), the last of the dates in Mobility Package I (Regulation (EU) 2020/1054). What the G2V2 records that its predecessor did not (position at the start, every three hours of driving and at the end, automatic border crossings, loading and unloading, Galileo authentication, DSRC remote checks, the ITS interface), what download and retention obligations the company has and how to integrate that data with fleet management and with time tracking for drivers. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/digital-livestock-traceability-ear-tag-rega-paperless/ https://cedesa.es/en/blog/digital-livestock-traceability-ear-tag-rega-paperless/ How livestock traceability works in Spain (the SITRAN system, with its REGA, RIIA and REMO registers), what the individual and electronic identification of animals requires, which documents and notifications a holding or an association generates, and how a digital system captures everything from the ear tag to the register with no paper and no rekeying. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/verifactu-2027-custom-erp-requirements-rd-1007-2023/ https://cedesa.es/en/blog/verifactu-2027-custom-erp-requirements-rd-1007-2023/ Royal Decree-Law 15/2025 fixes 1 January 2027 as the date from which corporate income tax payers must use invoicing systems that comply with Spain's Verifactu Regulation, and 1 July 2027 for everyone else. What RD 1007/2023 requires of any program that issues invoices, including a custom ERP: invoicing records, chained hash, QR code, event log, Verifactu or non-Verifactu mode, the producer's self-declaration and the penalties under Article 201 bis of the LGT (Spain's General Tax Law). Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/cctv-abattoirs-rd-695-2022-traceability-meat-erp/ https://cedesa.es/en/blog/cctv-abattoirs-rd-695-2022-traceability-meat-erp/ Royal Decree 695/2022 requires Spanish abattoirs to have cameras covering unloading, the lairage where live animals are held, the passageways and races, and the stunning and bleeding areas until death (and scalding for poultry and pigs), with footage accessible to the competent authority for 30 days; mandatory since 24 August 2023 and, for small abattoirs, since 24 August 2024. What exactly it requires, how to comply with data protection for the workers who are recorded, and how to link each recording to the slaughter batch, the incident log and the traceability in the ERP. Wed, 16 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/time-tracking-public-administration-guide/ https://cedesa.es/en/blog/time-tracking-public-administration-guide/ A guide to implementing time tracking in a public body: the rules that apply in 2026 (the 35-hour week in Spain's central government, Article 34.9 of the Workers' Statute, the ENS), system requirements, implementation steps and mistakes to avoid. Tue, 15 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/digitalising-competitive-processes-public-entity-sareb/ https://cedesa.es/en/blog/digitalising-competitive-processes-public-entity-sareb/ What a competitive process is, why a public entity has to digitalise it with traceability and equal treatment, what the platform must do and how CEDESA developed the one for SAREB, the company that manages the assets from Spain's bank restructuring, to manage competitive processes nationwide. Tue, 15 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/fleet-management-time-tracking-transport-companies/ https://cedesa.es/en/blog/fleet-management-time-tracking-transport-companies/ What a transport company in Spain is required to do on driving times, presence time and working time records (Regulation 561/2006, Royal Decree 1561/1995, Article 34.9 of the Workers' Statute), and how an integrated fleet and staff system takes care of it. Tue, 15 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/iso-27001-implementation-step-by-step-guide/ https://cedesa.es/en/blog/iso-27001-implementation-step-by-step-guide/ How to implement ISO/IEC 27001:2022 in a Spanish company: scope, risk analysis, the 93 Annex A controls, internal audit, certification by an ENAC-accredited body and how it relates to the ENS (Spain's National Security Framework). Tue, 15 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/iso-56001-innovation-management-which-companies/ https://cedesa.es/en/blog/iso-56001-innovation-management-which-companies/ ISO 56001:2024 is the first certifiable innovation management standard: what it requires, how it differs from UNE 166002, who should get certified in Spain, how it is implemented and what it offers when dealing with clients, public funding and the Pyme Innovadora (innovative SME) seal. Tue, 15 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/nfc-traceability-what-it-is-management-systems/ https://cedesa.es/en/blog/nfc-traceability-what-it-is-management-systems/ What NFC technology is, how it differs from RFID and from barcodes, how it is used to trace batches and assets, and how an NFC tag is integrated with the ERP or management system. Tue, 15 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/erp-software-meat-industry-abattoirs/ https://cedesa.es/en/blog/erp-software-meat-industry-abattoirs/ A practical guide to what an ERP for abattoirs and meat processing must include: batch-by-batch traceability, IFS/BRC audits, integration with REGA (Spain's livestock holdings register) and real-time production management. Mon, 14 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/iso-27001-software-suppliers/ https://cedesa.es/en/blog/iso-27001-software-suppliers/ What ISO 27001 certification really guarantees in a software supplier, how to verify it and what risks you take on if your supplier does not have it. A guide for IT and procurement managers. Mon, 14 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/livestock-association-management-software/ https://cedesa.es/en/blog/livestock-association-management-software/ What the software for a sheep, pig or cattle association has to manage: the register of members, livestock numbers, traceability with REGA (Spain's livestock holdings register), herd books and reporting to the regional authorities. Mon, 14 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/whistleblowing-channel-law-2-2023-software/ https://cedesa.es/en/blog/whistleblowing-channel-law-2-2023-software/ Everything you need to know about the mandatory whistleblowing channel under Spain's Law 2/2023: who it applies to, what it must include, deadlines, penalties and how to set it up with certified software. Mon, 14 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/custom-software-vs-erp-public-administration/ https://cedesa.es/en/blog/custom-software-vs-erp-public-administration/ An honest analysis of the differences between developing custom software and buying a standard ERP for public bodies. Real costs, risks, the ENS (Spain's National Security Framework) and when to use each option. Mon, 14 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/what-is-ens-spanish-national-security-framework/ https://cedesa.es/en/blog/what-is-ens-spanish-national-security-framework/ A complete guide to the National Security Framework (Esquema Nacional de Seguridad, ENS): what it is, who it applies to, how to check whether your supplier is certified and what risks you run by procuring without it. Mon, 14 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/technical-specifications-public-tender-ens/ https://cedesa.es/en/blog/technical-specifications-public-tender-ens/ A practical guide for procurement officers and IT directors who need to include ENS (Spain's National Security Framework) requirements in their software tenders. Avoid the costliest mistakes. Mon, 14 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/artificial-intelligence-public-sector/ https://cedesa.es/en/blog/artificial-intelligence-public-sector/ How AI is transforming public administration in Spain: conversational assistants for rural municipalities, predictive models and smart NFC labelling, financed with Next Gen EU. Mon, 14 Sep 2026 00:00:00 GMT https://cedesa.es/en/blog/next-generation-eu-public-sector-digitalisation/ https://cedesa.es/en/blog/next-generation-eu-public-sector-digitalisation/ Which Next Gen EU funds are available for public sector digitalisation in Spain, how to apply for them, what technical requirements they impose and why compliance with the ENS (Spain's National Security Framework) is essential to delivering them. Mon, 14 Sep 2026 00:00:00 GMT