How Spanish administrations contract BPO services: the platform, ROLECE and tender specifications
Corpshore Spain editorial team · · 7 min read
In summary: Spanish public procurement runs through the Public Sector Procurement Platform. ROLECE registration is voluntary in general but mandatory for the simplified open and abbreviated procedures. BPO tenders typically add National Security Scheme, data protection and, depending on the territory, co-official language requirements.
To a company used to the private sector, Spanish public procurement looks more opaque than it is. The procedure is regulated, the information is public and the requirements are written down, but the vocabulary is its own and the deadlines are unforgiving.
This article sets out the route for an outsourcing service, flagging the two or three points where a company without prior experience is excluded on a formality.
Where are Spanish public tenders published?
On the Public Sector Procurement Platform, the single access point for procurement information from the central government and the bodies that have joined it. Many autonomous communities also run their own portals, aggregated into the state platform.
What matters for a supplier is that bids are submitted electronically and that each contracting body's profile publishes the full tender documents there. You do not need to request the specification: it is published, and it is the document that decides whether you can bid.
The administrative clauses document and the technical specifications document are the two that count. The first sets out how the contract is awarded and the second what is being bought; most exclusions come from the first, not the second.
Is ROLECE registration mandatory?
This is the distinction that causes most confusion. The Official Register of Bidders and Classified Companies is voluntary in general: you do not need to be registered to bid for any tender.
But Public Sector Contracts Law 9/2017 requires registration to take part in the simplified open procedure and the abbreviated procedure. Since a significant share of mid-sized service contracts is awarded through exactly that route, in practice registration stops being optional for anyone who wants to bid regularly.
Registration is free, processed electronically in the register using an electronic certificate, and is not instant. Starting it once a tender is already published usually means arriving too late.
What does ROLECE evidence, and what work does it save?
It evidences the registered company's conditions of aptitude: legal personality, capacity to act, representation, professional or business authorisation, economic and financial standing, and classification where applicable.
The practical saving is that it exempts you from submitting that documentation in every procedure you enter, provided the data is correctly registered and kept up to date. That caveat about updating is not minor: an outdated entry produces the same effect as not being registered.
What technical requirements appear in a BPO tender?
Three families, regularly. The first is information security: public sector tenders require compliance with the National Security Scheme for the systems supporting the service, and frequently ask for the corresponding declaration or certification of conformity.
The second is data protection: a processing agreement, sub-processing conditions and, where the service involves processing outside the European Economic Area, the applicable transfer instruments. A tender can exclude processing outside the European Union outright, and that clause is worth reading before designing the solution rather than after.
The third, in autonomous communities with a co-official language, is support in that language. It is usually framed as a requirement rather than a scored criterion, which means failing it excludes you.
What should you check before bidding?
First, the procedure: if it is simplified open or abbreviated, there is no possible bid without current ROLECE registration.
Second, the National Security Scheme category required, and whether the tender asks for a declaration of conformity or certification by an accredited body. They are not the same, and the difference decides whether you can bid at all.
Third, the data processing clause, specifically whether it permits or excludes processing outside the European Economic Area. Designing a solution with a delivery hub in a third country for a tender that forbids it is wasted time.
And fourth, the deadlines. Public procurement does not allow everything to be remedied after the fact, and a submission deadline is among the things that are not negotiable.
This article is general information, not legal advice. We work alongside your legal advisors, not in their place.