Norwegian Public Procurement: A Guide for UK Tech Suppliers

Last updated 29 July 2026 · by attorney-at-law Kjell Steffner

The Norwegian public sector buys goods and services for several hundred billion kroner a year, and technology — software, cloud, AI, consultancy — is a growing share of it. For a UK supplier, Norwegian public procurement is a genuinely open market with a procedure-driven culture, and the suppliers who win are rarely those with the best product alone. They are the ones who can document compliance in the required format, accept the standard contract, and answer every “shall” requirement precisely. This guide covers the rules as they stand after the reform that entered into force on 1 July 2026.

How is Norwegian public procurement regulated after the July 2026 reform?

The framework is the Public Procurement Act (anskaffelsesloven) with its regulations, built on the EU procurement directives as incorporated through the EEA Agreement, and resting on the principles of competition, equal treatment, predictability, transparency and proportionality. Significant amendments took effect on 1 July 2026. The threshold at which the rules apply was raised from NOK 100,000 to NOK 500,000 excluding VAT, aligning Norway with Sweden and Denmark. The “Norway model” — requirements on pay and working conditions, payment through banks, apprentices and limits on subcontractor chains — was consolidated into the Act. A new provision makes security and preparedness a statutory consideration, contracting authorities must maintain a publicly available procurement strategy, and the purpose clause now speaks of efficient and sustainable use of society’s resources (overview from DFØ).

One transitional detail matters for bidders. The planned repeal of section 4 — the basic principles governing the national tier — was postponed, so those principles continue to apply below the EEA thresholds for now. This is expressly the first phase of a larger reform, with the EU’s own revision of the procurement directives running in parallel, so the rulebook should be re-checked at the time of any given tender.

Can UK companies bid for Norwegian public contracts?

Yes. UK suppliers are no longer EEA suppliers, but both Norway and the UK are parties to the WTO Government Procurement Agreement, so covered procurements above the relevant thresholds are open to UK companies on equal terms with European competitors. In practice, nationality is almost never the obstacle — qualification, documentation and security requirements are. It is also worth noting that the UK’s own regime went through a parallel modernisation with the Procurement Act 2023, in force since 24 February 2025, so a UK bid team’s instincts are current at home but do not transfer — the Norwegian procedures, portals and contract forms are their own system and need to be learned as such.

Where are tenders published, and which thresholds apply?

National notices are published on Doffin, and procurements above the EEA thresholds are additionally published on TED, the EU-wide database. The tiers determine how formal the procedure is. Procurements below NOK 500,000 now fall outside the rules altogether. Between NOK 500,000 and the national threshold of NOK 1.3 million, light national rules and the basic principles apply. Above the EEA thresholds — from 21 April 2026, NOK 1.63 million for central-government goods and services and NOK 2.5 million for other contracting authorities such as municipalities — the full directive-based procedures apply. For technology suppliers the practically important formats are open and restricted procedures, competitive dialogue for complex projects, and above all framework agreements and dynamic purchasing systems, which is how much of the public sector’s IT and consultancy spend is actually channelled.

What documentation must a foreign supplier prepare?

Norwegian tenders are won on paper before they are won on product. A UK supplier should have ready, in advance, company registration documents, tax and VAT certificates, financial statements demonstrating capacity, references from comparable deliveries described so they can actually be compared against the requirement, CVs and documented technical qualifications, relevant security and quality certifications, and data-protection and information-security documentation. Norwegian tenders also commonly require commitment declarations from subcontractors whose capacity the bid relies on. Two practical warnings from reviewing bids — a public tender in practice requires a Norwegian organisation number and current tax attestations, which takes time to arrange from abroad, and many tenders are wholly or partly in Norwegian with tight deadlines, so translation and clarification questions must be planned for, not improvised.

How do security, data protection and cloud requirements affect IT tenders?

Security has moved from an evaluation criterion to a statutory theme. Norwegian public buyers scrutinise supply-chain resilience, ownership transparency, subcontractor chains, cloud hosting locations, remote access and the possibility of foreign access to data, and contracts touching critical functions may engage the Security Act (sikkerhetsloven) or sector rules with substantially stricter requirements. For SaaS, cloud and AI suppliers, the data-protection layer arrives in the same questionnaire — hosting location, subprocessors, non-EEA support access, telemetry, audit rights, exit and deletion, and whether customer data or prompts are used for model training. The document set that answers those questions is the same one covered in the data protection article in this series, GDPR and AI in Norway, and it should exist before the tender is published, because assembling it inside a three-week deadline does not go well.

Which contract will we be asked to sign? The SSA standard agreements

For IT and consultancy purchases, Norwegian public buyers typically contract on the state’s standard agreements, the SSA suite — standardised contracts for consultancy assistance, development, operations, purchases and maintenance, most recently updated in 2026. The supplier’s own SaaS or licence terms will usually be rejected or subordinated to the SSA structure, and the procedure often leaves little or no room for negotiation after award. The consequence for a UK supplier is a discipline that feels backwards at first — read the draft contract before deciding to bid, assess whether your commercial and delivery model can live with its risk allocation, and treat material reservations as what they are, a common ground for having the bid rejected. If the contract does not work for you, the time to influence it is in the market-dialogue phase before the tender is finalised, or through clarification questions early in the process.

What if the process goes wrong? Complaints and KOFA

Norway has no procurement supervisory authority — enforcement runs on suppliers challenging decisions. A supplier can complain to the contracting authority itself, bring the matter before the Complaints Board for Public Procurement (KOFA), or go to the courts. KOFA is fast and inexpensive, but its opinions are advisory except in cases of illegal direct awards, where it can impose binding fines, and a KOFA complaint does not suspend the contract signing. Where real money is at stake before contract signature, the effective remedies are a complaint to the authority within the standstill period and, if necessary, an interim injunction from the courts (guide from anskaffelser.no). The uncomfortable truth about procurement remedies is that the deadlines are short and the practical leverage evaporates once the contract is signed, so the decision to challenge must be made in days, not weeks.

UK vs Norway — public procurement at a glance

Which mistakes do UK suppliers make most often?

Five patterns recur in the Norwegian bids we see fail.

• Waiting for the tender to be published instead of engaging in the market dialogue where requirements are shaped.
• Bidding “subject to our standard terms” and being rejected for material reservations against the SSA contract.
• Answering “shall” requirements loosely, with marketing language instead of precise confirmation and evidence.
• Under-preparing the EEA-grade data-protection and security documentation that IT tenders now demand.
• Submitting references that do not map onto the tender’s requirements closely enough to be evaluated.

When should a UK tech company involve Norwegian counsel?

The moments where legal input changes the outcome are considering a first Norwegian public bid, reviewing the tender documents and the draft SSA contract before the bid decision, judging whether a reservation is safe or disqualifying, responding to security, data and cloud requirements, structuring the use of subcontractors, asking clarification questions that protect your position without revealing your hand, and — on the shortest fuse of all — assessing a challenge to an award decision within the standstill period.

The commercial and IP terms that sit inside your bid are covered in the first article in this series, Norwegian contract law, and if winning the contract means hiring locally, the employment rules are covered in the third, Setting up and hiring in Norway.

Nordia Law helps UK technology companies enter and operate in the Norwegian market. As part of a Nordic firm with a presence in Norway, Sweden, Denmark and Finland — and through close cooperation with DAC Beachcroft and Laworld — we also coordinate cross-border legal questions across the Nordics and beyond.

Considering a Norwegian public tender? Book a short Teams call with Kjell Steffner to review the tender documents, the SSA contract and your documentation before you commit the bid team. Book a meeting.

Sources: Public Procurement Act (anskaffelsesloven), Lovdata · Amendments in force 1 July 2026, regjeringen.no · Overview of the amendments, anskaffelser.no · Thresholds, anskaffelser.no · The SSA standard agreements, anskaffelser.no · Complaints in public procurement, anskaffelser.no · KOFA, Klagenemndssekretariatet · Security Act (sikkerhetsloven), Lovdata · Procurement Act 2023 supplier guide, gov.uk