Project 1034: Technical implementation of an SBOM for AI (SBOM4AI)

Auto-translated from German

Original title: Projekt 1034: Technische Umsetzung einer SBOM für KI (SBOM4AI)

Bundesamt für Sicherheit in der Informationstechnik

Published: Aug 30, 2026

Updated: Aug 31, 2026

Source: oeffentlichevergabe_de

About This Opportunity

This is a services contract in the education and training and information and communication technology sectors, with a focus on Cybersecurity and artificial intelligence. Located in Germany, Europe, this opportunity is open to firms and consortiums. Proposals must be submitted before September 28, 2026.

Published through DÖE Bekanntmachungsservice (Germany), a national government procurement portal. Public procurement tenders follow the country's national bidding regulations and may have specific eligibility and documentation requirements for services in the education and training sector. Service contracts are typically evaluated on both technical quality and price, and may require bidders to demonstrate relevant experience and qualified personnel. Interested parties should review the full documentation on the original source before submitting their proposal.

Description

Auto-translated from German

In the field of classical software, Software Bills of Materials (SBOMs) – i.e., parts lists containing information about software components and their dependencies – have long been used and are even required by the Cyber Resilience Act (CRA). This requirement also applies to AI systems, but the idea of an SBOM specifically for AI systems is relatively new. Initial approaches therefore carry the risk that they may not cover all necessary aspects regarding the transparency of the AI supply chain. This project aims to put the "SBOM for AI - Minimum Elements" concept published in the G7 framework into practice and to develop a technical implementation of the defined criteria for this purpose. The SBOM for AI is to be created automatically and output in a suitable format. The developed implementation will then be made available to all stakeholders, thus making an important contribution to the cybersecurity of AI systems.

Data provenance

This notice is sourced from DÖE Bekanntmachungsservice (Germany) and was originally published on August 30, 2026. Last refreshed 10 days ago. Original language: German. BidsFactory mirrors official procurement notices and links back to the source for full legal text.

About Bundesamt für Sicherheit in der Informationstechnik

Bundesamt für Sicherheit in der Informationstechnik has issued 33 procurement notices on BidsFactory, including 10 currently open and 2 awarded contracts. Activity concentrates in Information & Communication Technology, Education & Training, and Transport & Logistics. All notices are published for Germany. Notices are distributed via TED - Tenders Electronic Daily (EU) and DÖE Bekanntmachungsservice (Germany). Most recent publication: September 11, 2026.

Frequently asked questions about this tender

How can I submit a bid?

Visit DÖE Bekanntmachungsservice (Germany) to access the full notice, required documents, and submission instructions provided by the contracting authority.

When does this tender close?

The submission deadline is September 28, 2026. You have 17 days left to prepare and submit your proposal to the contracting authority.

Who is the contracting authority?

This notice was issued by Bundesamt für Sicherheit in der Informationstechnik in Germany. The authority is responsible for evaluating bids, awarding the contract, and managing performance.

What type of contract is this?

This is a Services contract in the Education & Training sector. The classification helps bidders match the opportunity to their qualifications and registered scope of supply.

Where will the contract be performed?

The contract is for delivery in Germany. Foreign bidders should review local registration, taxation, and any in-country presence requirements before submitting.