Custom software for public authorities and the wider public sector
Specialists in public tenders and public sector procurement. Current certification under the National Security Framework (Esquema Nacional de Seguridad, ENS), reference clients across Spain and in-depth knowledge of the regulations that govern the Spanish public sector.
Proven experience
15+
Years in the public sector
ENS · ISO 27001
Current security certifications
Why CEDESA is the supplier the public sector chooses
The Spanish public sector has very specific software needs: strict compliance with the ENS, demanding tender deadlines, interoperability regulations, transparency in the use of public funds and, in many cases, financing through Next Generation EU funds or PERTE (Spain's strategic projects for economic recovery and transformation).
CEDESA has spent more than 15 years working exclusively to these requirements. We do not adapt general-purpose solutions for the public sector: we build from scratch, with these regulations as the starting point.
Our current ENS certification – medium category, issued by OCA Instituto de Certificación, a body accredited by ENAC (Spain's national accreditation body) – is not just a requirement met: it is part of how we work. Every system we develop for public bodies includes a security architecture designed in line with the ENS at medium or high level.
With reference clients such as SAREB, Metro Bilbao, Navantia, the provincial councils (Diputaciones) of Badajoz, Toledo, Ourense and Burgos, TITSA and Puertos de les Illes Balears, we can demonstrate our technical capacity with real references across Spain.
Large integrator or mid-sized company? Before you set the thresholds for technical capacity and financial standing in the tender documents, it helps to know what changes with the size of the supplier: we compare them by category in How to choose a software supplier for the public sector.
Key facts
- Reference clients across Spain
- Current ENS certification (medium category)
- ISO 27001 + ISO 9001 + ISO 56001
- Next Gen EU projects delivered
- Based in Badajoz – PCTEX science park
- Applied AI: 33 municipalities in Extremadura
Capabilities for the public sector
What sets us apart from generic suppliers
Public tenders and procurement
We know the technical specifications (pliegos técnicos), the technical capacity and financial standing requirements and the award criteria. Reference clients across Spain.
Current ENS certification
National Security Framework in the medium category, certified by OCA (an ENAC-accredited body). A mandatory requirement for the information systems of public authorities.
Next Gen EU and PERTE funds
End-to-end management: drafting technical reports, delivery, reporting and justification, and follow-up with the managing body.
Interoperability
Integration with Spain's central government platforms (SARA, @firma, Cl@ve, GEISER and SIR) and with the standards of the National Interoperability Framework (ENI).
SLA support for critical services
Response time for critical issues: 4 hours. SLA documented and signed before work begins. No subcontracting.
Audits and regulatory compliance
GDPR, LOPDGDD (Spain's data protection act), ENS, the Transparency Law (Ley de Transparencia), Law 11/2007 (Ley 11/2007) and the sector-specific regulations of the public sector.
How we work
Functional analysis
2–4 weeks. Interviews and documentation of the technical and functional requirements.
Technical proposal
Architecture, technology, delivery milestones and a fixed price. No surprises.
Iterative development
2-week sprints with a client demo at the end of each sprint.
Deployment and support
Supervised go-live, training and a documented SLA.
Public sector clients
Frequently asked questions
For contracts with the Spanish public sector that involve data processing or information systems, the supplier must hold ENS (National Security Framework) certification issued by an ENAC-accredited certification body. CEDESA holds this certification, current and in the medium category, together with ISO 27001 and ISO 9001.
Yes. CEDESA is based in Badajoz and serves the whole of Spain. We have reference clients among public bodies in Extremadura, the Basque Country, Tenerife, the Balearic Islands, Castilla-La Mancha, Galicia and other autonomous communities (regions), among others.
Yes. We have delivered Next Gen EU projects for Extremadura's Regional Ministry of Digitalisation (conversational AI for 33 municipalities), the Diputación de Toledo provincial council (PRTR, Spain's Recovery, Transformation and Resilience Plan) and the Consorcio de Medio Ambiente de Badajoz (PERTE Agua).
Need this service?
Tell us about your project in a couple of lines