IT, cloud services, cybersecurity and AI

All industries

Digital procurement should produce a usable and maintainable service, with clear rights to data and a practical exit route. The legal assessment needs to connect procurement, technology, intellectual property and contractual responsibilities.

Choose a commercially viable specification

Separate the business need from a preferred supplier architecture. Describe integrations, volumes, availability and migration requirements. Identify mandatory requirements and scored improvements. A product reference should be examined for necessity and equivalence. If the solution genuinely needs development, assess a suitable innovation route rather than disguising research as a fixed-price standard purchase.

Define rights, data and security

Set out licences, permitted users, third-party components, documentation and access to results. Clarify roles in processing personal data and the permitted locations and subcontracting chain. Specify security evidence, incident notification, remediation and audit arrangements in a form suppliers can actually price. For AI, identify the intended use, human oversight, testing and responsibility for changes; procurement approval is not a substitute for the applicable regulatory assessment.

Evaluate cost and capability

Model licence metrics, storage, traffic, implementation, support and exit costs over the announced period. If demonstrations or proofs of concept are scored, use comparable conditions and a documented method. A polished presentation should not replace evidence that the required functions and interfaces will work. Check the resources and subcontractor commitments behind the implementation plan.

Prevent lock-in at the contract stage

Specify data export, transition assistance, usable formats and the handover of configuration and documentation. Address updates and changes to third-party terms. Renewal, extra modules and migration to a different service tier can affect the procurement analysis. An exit clause is only useful if the technical and commercial conditions make it workable.

Three practical situations

  • A cloud tender has usage-based charges: compare the same realistic consumption scenarios.
  • An authority replaces a legacy system: make migration and data access responsibilities explicit.
  • An AI service changes models after award: assess contractual approval, performance and regulatory implications.

From tender review to contract delivery

We assess the procurement documents and the proposed delivery model together. For bidders, the first questions are eligibility, technical compliance, commercial exposure and deadlines. For authorities, they are a lawful route, comparable offers and a contract that can be managed after award. Provide the specification, pricing schedule and draft terms so these issues can be reviewed as one package.

Official sources and further reading

Editorial review: 12 November 2026. Apply the rules and transitional provisions governing the start of the individual procedure.

Discuss your procurement project

Send the notice, tender documents, relevant correspondence and the next deadline. We assess the legal route, the work required and the proposed fee before taking further steps. For proceedings abroad, the scope of local-law advice and any involvement of local counsel are agreed for the specific matter.

Contact our procurement team →