Procurement & Delivery Framework
Procurement Law Compliance Analysis
Detailed analysis of procurement law requirements across all four partner jurisdictions,
addressing how a coordinated multinational cloud procurement can comply with existing
legal frameworks.
!
This analysis addresses a critical gap: "You can't run a single tender across four
different procurement regimes. Each has different thresholds, procedures, and remedies."
We propose a coordinated parallel procurement model rather than a
single unified tender.
1. Executive Summary
Conclusion: A single multinational tender is legally impractical.
However, coordinated parallel procurements with harmonised specifications and mutual
recognition of qualification can achieve similar outcomes while maintaining full legal compliance
in each jurisdiction.
Recommended Model: Framework Agreement approach with each
jurisdiction procuring independently against common technical specifications, with pre-qualified
supplier panels shared across jurisdictions where permitted.
Key Challenges Identified
| Different procurement thresholds |
Medium |
Use highest threshold as baseline; most procurements will exceed all thresholds |
| Different remedy/challenge procedures |
High |
Each jurisdiction handles challenges under own law; no cross-border standing |
| Preferential treatment rules (Buy Local) |
High |
Use security exceptions; focus on technical criteria not nationality |
| Different evaluation criteria requirements |
Medium |
Common technical core with jurisdiction-specific weighting permitted |
| WTO GPA compliance |
Medium |
Essential security exception (Article III); objective technical criteria |
2. United Kingdom
2.1 Current Legal Framework (as of February 2025)
Procurement Act 2023 (In Force 24 February 2025)
The Procurement Act 2023
came into force on 24 February 2025, replacing the Public Contracts Regulations 2015. This represents
the UK's first domestic procurement regime outside EU law.
- Annual spend: Approximately £385 billion across public sector
- Digital platform: Find a Tender service (FTS) for all notices
- Key procedures: Open, competitive flexible, competitive dialogue, innovation partnership
- Transparency: Enhanced publication requirements throughout procurement lifecycle
2.2 Thresholds (2025)
| Goods and services (central government) |
£139,688 |
WTO GPA-covered entities |
| Goods and services (sub-central) |
£214,904 |
Local authorities, NHS, etc. |
| Works |
£5,372,609 |
Construction and engineering |
| Light touch (social, health, education) |
£663,540 |
Simplified procedures |
2.3 Key Compliance Considerations
| Value for money |
s.12 |
Document sovereignty as strategic value; risk-adjusted TCO comparison |
| Non-discrimination |
s.12(2) |
Criteria focus on data jurisdiction, not supplier nationality |
| SME access |
s.12(5) |
Lot structure to enable SME participation; no artificial aggregation |
| Security exclusion |
s.6 |
Defence and security contracts may use restricted procedures |
| National security |
s.5 |
Procurements affecting national security may be exempt entirely |
2.4 Existing Frameworks
- G-Cloud 14: Cloud hosting, software, support services; ~£3bn annual spend; available for sovereign cloud providers meeting criteria
- Technology Services 4: Up to £16bn IT services capacity; includes cloud migration services
- Digital Outcomes and Specialists 6: Digital specialists, team capabilities
2.5 Challenge/Remedy Procedures
| Pre-contract challenge |
High Court (TCC) |
30 days from knowledge of breach (or should have known) |
| Automatic suspension |
Applies pending hearing |
Until court lifts or claim dismissed |
| Post-contract damages |
High Court |
6 years (contract limitation) |
| Debarment appeal |
Procurement Review Unit (PRU) |
New mechanism under Procurement Act 2023 |
3. European Union
3.1 Current Legal Framework
Directive 2014/24/EU (Public Procurement Directive)
Directive 2014/24/EU
governs public procurement for EU Member States. Each Member State implements through national legislation.
- Scope: All public contracts above thresholds across 27 Member States
- Publication: Tenders Europe Daily (TED) for EU-wide publication
- Procedures: Open, restricted, competitive dialogue, competitive with negotiation, innovation partnership
- 2025 Development: Commission proposing Cloud and AI Development Act with EU-wide cloud procurement policy
3.2 Thresholds (2024-2025, €)
| Goods and services (central government) |
€143,000 |
Ministries, central agencies |
| Goods and services (sub-central) |
€221,000 |
Regional/local authorities |
| Works |
€5,538,000 |
Construction projects |
| Social and other specific services |
€750,000 |
Annex XIV services |
3.3 EU-Specific Considerations
| Joint procurement (Art. 39) |
EU permits joint procurement between Member States |
EU could conduct single procurement for all MS; coordinate with non-EU ISCC members separately |
| Commission procurement |
Commission can procure for EU institutions (€180M sovereign cloud tender October 2025) |
Commission procurement can serve as EU-wide baseline |
| Security/defence (Art. 346 TFEU) |
Essential security interests permit exemption from procurement rules |
Use for critical government infrastructure elements |
| GDPR requirements |
Data processing requirements must be in specifications |
Include GDPR compliance as mandatory criterion |
3.4 Recent EU Sovereign Cloud Procurement (October 2025)
The European Commission launched a €180 million tender
for sovereign cloud services (October 2025) under Cloud III Dynamic Purchasing System.
Sovereignty criteria include: strategic, legal, operational, environmental considerations,
supply chain transparency, technological openness, security, and EU law compliance.
This provides a template for ISCC procurement specifications.
4. Canada
4.1 Current Legal Framework
Federal Procurement Framework (2025 "Buy Canadian" Reforms)
Canadian federal procurement is governed by the Contracting Policy
and related directives, with significant "Buy Canadian" reforms announced September 2025.
- Central authority: Treasury Board Secretariat (TBS); Public Services and Procurement Canada (PSPC)
- Digital: Shared Services Canada (SSC) handles IT procurement including cloud
- Challenge body: Canadian International Trade Tribunal (CITT)
- 2025 Reform: Buy Canadian policies with Canadian supplier and content preferences
4.2 Thresholds and Trade Agreement Coverage
| WTO GPA |
SDR 130,000 (~C$241,000) |
All GPA parties including UK, EU, Australia |
| CETA |
€130,000 (~C$192,000) |
EU |
| CPTPP |
SDR 130,000 |
UK, Australia + others |
| CFTA (internal) |
C$105,700 |
Canadian provinces/territories |
4.3 Buy Canadian Policy (December 2025)
| Canadian Materials Priority |
16 December 2025 |
Applies to defence/construction >$25M; may cover data centre hardware |
| Canadian Suppliers Priority |
16 December 2025 |
Price discount for Canadian suppliers in strategic sectors; ISCC partners not Canadian |
| CITT Jurisdiction Amendment |
June/December 2025 |
CITT cannot review Buy Canadian measures; limits challenge options |
4.4 ISCC Compatibility with Canadian Framework
Challenge: Canada's Buy Canadian policies create tension with multinational
procurement. However, these policies specifically carve out obligations under trade agreements
(CETA, CPTPP, GPA). ISCC members (UK, EU, Australia) benefit from these trade agreements.
Solution: Structure Canadian ISCC procurement as covered under CETA (for EU
components) and CPTPP (for UK and Australian components). This ensures Buy Canadian
preferences do not apply to ISCC-qualified suppliers from partner jurisdictions.
5. Australia
5.1 Current Legal Framework (November 2025 Reforms)
Commonwealth Procurement Rules 2025 (In Force 17 November 2025)
The Commonwealth Procurement Rules (CPRs)
govern Australian federal procurement, with the most extensive reforms in a decade taking effect
17 November 2025.
- Platform: AusTender for all notices and contract reporting
- Key reform: Australian business prioritisation for below-threshold procurement
- Ethics: New mandatory ethical conduct considerations for all procurements
- Threshold increase: Non-construction NCE threshold increased to $125,000 (first increase in 20 years)
5.2 Thresholds (2025)
| NCE goods/services (non-construction) |
$125,000 |
Increased from $80,000 (Nov 2025) |
| NCE construction |
$8,000,000 |
Retained |
| FTA-covered (services) |
SDR 130,000 (~$276,000) |
WTO GPA, CPTPP, FTAs |
5.3 Australian Business Preference Rules (2025)
| Australian Business Priority (CPR 5.4) |
Below FTA thresholds, NCEs must prioritise Australian businesses |
ISCC procurement likely above threshold; FTA protections apply |
| SME Panel Requirements |
DTA panels under $125k: SMEs only |
Affects small call-offs; main contracts unaffected |
| Ethical Conduct (CPR 4.5(c)) |
All procurements must consider supplier ethical conduct |
Supportive of sovereignty criteria (avoiding extraterritorial legal exposure) |
| Reporting (July 2026) |
Must report why non-AU/NZ supplier chosen |
Document sovereignty rationale for ISCC suppliers |
Note: The new CPRs define "Australian business" as requiring 50%+ Australian ownership,
Australian tax residency, and principal place of business in Australia. ISCC suppliers from UK, EU,
or Canada would not qualify. However, procurements above FTA thresholds (which ISCC procurements
will generally exceed) must comply with FTA obligations that prohibit such preferences.
6. Recommended Procurement Model
6.1 Coordinated Parallel Procurement
ISCC Coordinated Procurement Model
ISCC TECHNICAL STEERING COMMITTEE
Develops: Common technical specifications, qualification criteria, interoperability standards, security baselines
Common Specifications Document
▼
UK
Cabinet Office / CCS
UK Framework Agreement (G-Cloud+ sovereign)
EU
Commission + MS
EU Framework Agreement (Cloud III DPS+new)
Canada
PSPC / SSC
Canadian Framework Agreement (SSC managed)
Australia
Finance Dept / DTA
Australian Panel Contract (AusTender based)
▼
MUTUAL RECOGNITION OF QUALIFIED SUPPLIERS
6.2 Procurement Workflow
| 1. Specification Development |
Common technical specifications, security baselines, interoperability requirements |
ISCC TSC (WG-Architecture, WG-Security, WG-Procurement) |
| 2. Legal Review |
Each jurisdiction reviews specs for compatibility with local procurement law |
National procurement authorities |
| 3. Parallel Publication |
Coordinated (same week) publication of parallel tenders |
FTS (UK), TED (EU), MERX (Canada), AusTender (Australia) |
| 4. Supplier Qualification |
Each jurisdiction qualifies suppliers against common criteria; shares results |
National procurement authorities |
| 5. Evaluation |
Each jurisdiction evaluates against common technical criteria + local requirements |
National evaluation panels (may include ISCC observers) |
| 6. Award |
Independent contract awards in each jurisdiction |
National contracting authorities |
| 7. Coordination |
Cross-jurisdictional contract coordination, interoperability validation |
ISCC Secretariat |
6.3 Key Legal Protections
| Essential security exception |
WTO GPA Art. III; TFEU Art. 346; National security exemptions |
Procurements affecting critical national infrastructure; intelligence workloads |
| Objective technical criteria |
All procurement regimes permit technical specifications |
"Data must remain under [jurisdiction] law" vs "exclude US suppliers" |
| Trade agreement protection |
CETA, CPTPP, UK-Australia FTA, etc. |
ISCC suppliers benefit from preferential treatment under FTAs |
| Framework agreements |
All regimes permit multi-supplier frameworks |
Pre-qualify multiple suppliers; call-off for specific requirements |
7. Challenge/Remedy Procedures Comparison
| Primary forum |
High Court (TCC) |
National review bodies |
CITT |
Federal Court |
| Time limit |
30 days |
10-30 days (varies) |
10 working days |
28 days |
| Automatic suspension |
Yes (standstill period) |
Yes (Remedies Directive) |
No automatic |
No automatic |
| Standing |
Aggrieved bidders |
Interested parties |
Potential suppliers |
Aggrieved parties |
| Remedies available |
Set aside, damages, declaration |
Set aside, damages, ineffectiveness |
Order compliance, compensation |
Declaration, injunction, damages |
| Cross-border standing |
GPA suppliers have standing |
EU suppliers in any MS |
FTA suppliers |
FTA suppliers |
!
Critical Point: A supplier unsuccessful in the UK procurement cannot
challenge the Australian or Canadian procurement. Each procurement stands alone.
This limits risk from challenge cascades.
8. Sources and References
UK Procurement
EU Procurement
Canadian Procurement
Australian Procurement