Findings build 2026-07-04
Governments have finalized post-quantum standards and set 2030 to 2033 migration deadlines, yet PQC appears in just 50 of 4,401 procurement records (1.14 percent overall, 3.03 percent in the US, 1.0 percent in the EU), the clearest quantum-readiness demand gap in the dataset.
We publish the Trust-Tech Procurement Observatory, a live, provenance-verified dataset of what governments actually buy across artificial intelligence, post-quantum cryptography (PQC), public-key infrastructure (PKI), and eIDAS or digital-identity systems. The current release holds 4,401 unique procurement records spanning 106 countries, drawn from four public tender and award sources. The findings below report demand signals, meaning what buyers put out to tender or awarded, and should be read as a curated coverage sample rather than a complete population census.
Post-quantum cryptography is almost absent from procurement
PQC is the smallest domain in the dataset by a wide margin. Of 4,401 unique records, only 50 (1.14 percent) name post-quantum cryptography. The share is 3.03 percent in the United States (17 of 561 records) and 1.0 percent in the European Union (33 of 3,290 records), and 0 records in the World Bank global set (0 of 547). As policy context, NIST finalized the ML-KEM, ML-DSA and SLH-DSA standards (FIPS 203, 204 and 205) in August 2024, and the US NSA CNSA 2.0 suite sets migration deadlines across 2030 to 2033. The gap between that standards-and-mandate context and the observed procurement share is the single strongest signal in the dataset.
Buyers spend on security infrastructure far more than on AI
Across the whole dataset, AI accounts for 1,505 records while security-oriented procurement (PKI, PQC and eIDAS combined) accounts for 2,896. PKI alone is the largest single domain at 1,727 records, ahead of AI at 1,505 and eIDAS at 1,119. On the US award side, where dollar values are available, PKI-related procurement totals 566,664,128 USD against 154,331,410 USD for AI and 6,269,846 USD for PQC. The pattern that emerges is one of continued, heavy investment in identity and trust infrastructure alongside, and often exceeding, the newer AI spend.
Coverage is real but uneven, and the EU dominates it
The dataset is concentrated in the European Union, which supplies 3,290 of the 4,401 records, followed by the United States at 561 and the World Bank global set at 547, with the United Kingdom contributing 3. By source, TED provides 3,290 records, USAspending 561, World Bank 547 and UK Contracts Finder 3. Germany leads all countries with 886 records, ahead of Poland at 324 and France at 267. This concentration reflects source depth rather than a claim that these countries buy the most; the EU above-threshold tender data is the deepest and most complete lane, while the US and UK lanes are keyword-sparse.
Activity is recent and rising
Records cluster in the most recent years. The dataset holds 376 records dated 2022, 344 for 2023, 496 for 2024, 1,191 for 2025 and 886 for 2026 to date. The 2025 count is the largest in the series. We caution that year totals are shaped by when sources publish and by our collection window, so the rise should be read as a coverage-and-activity signal rather than a precise growth rate.
How to read this. How to read this: every figure above is a count or value from the observatory's consolidated analysis file, not an estimate or projection. Records are deduplicated tenders and awards from four public sources (TED for the EU, USAspending for the US, UK Contracts Finder, and World Bank contract awards for the global set), matched to the four domains by keyword. Because sources differ in depth, this is a curated coverage sample and not a population census: EU above-threshold procurement is near-complete, while US and UK coverage is keyword-sparse and undercounts. Domain totals can overlap where a single record touches more than one topic, and dollar values are available only for the US award lane. Treat the numbers as demand signals, meaning what buyers advertised or awarded, and treat cross-region comparisons as comparisons of visible procurement, not of total national spend.
Narrative drafted by analyst agents and adversarially verified: every figure re-checked against data/consolidated/analysis.json and re-computed against dataset.json (all reproduced exactly).
Coverage by region × domain
| Region | AI | PKI | PQC | eIDAS | Total |
|---|---|---|---|---|---|
| US | 73 | 471 | 17 | 0 | 561 |
| UK | 2 | 0 | 0 | 1 | 3 |
| EU | 1200 | 1094 | 33 | 963 | 3290 |
| Global | 230 | 162 | 0 | 155 | 547 |
Top 25 countries by record count
| Country | Records |
|---|---|
| DEU | 886 |
| POL | 324 |
| FRA | 267 |
| NOR | 207 |
| HRV | 187 |
| CZE | 181 |
| BEL | 137 |
| ROU | 136 |
| NLD | 118 |
| ESP | 116 |
| Bangladesh | 82 |
| IRL | 74 |
| HUN | 69 |
| Pakistan | 69 |
| FIN | 62 |
| India | 62 |
| CHE | 59 |
| ITA | 52 |
| LTU | 52 |
| SVK | 48 |
| AUT | 47 |
| BGR | 45 |
| Ethiopia | 41 |
| GRC | 37 |
| LUX | 34 |
AI — 1505 records
| Date | Buyer/Country | Title | Source |
|---|---|---|---|
| 2026-07-03 | DEU | Germany – Servers – Lieferung eines GPU-Servers | TED |
| 2026-07-03 | DEU | Germany – Research and development services and related consultancy services – Lösungsumsetzung der SET Inno Tandems | TED |
| 2026-07-03 | DEU | Germany – IT services: consulting, software development, Internet and support – KI-basierte Detektion von Totästen | TED |
| 2026-07-03 | CZE | Czechia – CT scanners – Multidetektorový přístroj výpočetní tomografie – počítačový tomograf (CT) | TED |
| 2026-07-03 | DEU | Germany – News-agency services – KI-gestütztes Medienmonitoring | TED |
| 2026-07-03 | FRA | France – Maintenance of information technology software – Maintenance et évolution des outils logiciels et matériels informatiques pour l'exploitation des équipements et des données du réseau d'assainissement du Val-de-Marne | TED |
| 2026-07-03 | FRA | France – Custom software development services – Prestations de Développements informatiques pour le Département de la Côte-d'Or | TED |
| 2026-07-02T07:43:31+01:00 | DVSA - Driver and Vehicle Standards Agency | L4 Artificial intelligence (AI) and automation practitioner | UK-ContractsFinder |
| 2026-07-02 | FRA | France – Staff training services – Formation sur les usages et application de l'intelligence artificielle (IA) | TED |
| 2026-07-02 | FRA | France – Vocational training services – FORMATION - Architecture, développement et administration des SI - Intelligence Artificielle (IA) - A7A | TED |
| 2026-07-01T12:42:53+01:00 | NHS England | SUS Autogrouper Software Re-Procurement | UK-ContractsFinder |
| 2026-07-01 | DEU | Germany – IT services: consulting, software development, Internet and support – Unterstützungsleistungen für SAP-Human Capital Management (HCC) | TED |
| 2026-07-01 | NOR | Norway – Information technology services – Market dialogue: new procurement of IT consultancy services | TED |
| 2026-07-01 | NOR | Norway – IT services: consulting, software development, Internet and support – Market survey Cloud based platform and infrastructure services for the Health regions in Norway | TED |
| 2026-07-01 | DEU | Germany – Super computer – JARVIS Eine zentrale Plattform für KI Inferenz • Acquisition of AI inference IT equipment including hardware and mandatory software. • Rack infrastructure, including power distribution units (PDU) and cooling distribution units (CDU) optimized for the offered IT equipment. | TED |
PQC — 50 records
| Date | Buyer/Country | Title | Source |
|---|---|---|---|
| 2026-06-26 | ROU | Romania – IT services: consulting, software development, Internet and support – Establishment of a List of External Experts in Post-Quantum Cryptography (PQC) | TED |
| 2026-06-25 | DEU | Germany – Software development services – Satellitenprojekt: IT-Entwicklung und missionsbezogene Beratungsleistungen | TED |
| 2026-06-24 | NLD | Netherlands – IT services: consulting, software development, Internet and support – Resultaatverplichte ICT-/ IV-opdrachten Maatwerk Diensten Applicaties (RVICTO-MDA) 2026 | TED |
| 2026-06-18 | ROU | Romania – IT services: consulting, software development, Internet and support – Establishment of a List of External Experts in Post-Quantum Cryptography (PQC) | TED |
| 2026-06-12 | DEU | Germany – IT services: consulting, software development, Internet and support – Projekt 1011: Aktualisierung der Studie "Entwicklungsstand Quantencomputer" (Aktualisierung QC-Studie) | TED |
| 2026-06-08 | NLD | Netherlands – IT services: consulting, software development, Internet and support – Resultaatverplichte ICT-/ IV-opdrachten Maatwerk Diensten Applicaties (RVICTO-MDA) 2026 | TED |
| 2026-05-07 | DEU | Germany – Software development services – Satellitenprojekt: IT-Entwicklung und missionsbezogene Beratungsleistungen | TED |
| 2026-04-30 | NLD | Netherlands – IT services: consulting, software development, Internet and support – Resultaatverplichte ICT-/ IV-opdrachten Maatwerk Diensten Applicaties (RVICTO-MDA) 2026 | TED |
| 2026-04-23 | NLD | Netherlands – Research and development services and related consultancy services – Crypto Module tbv N2MTC Programma | TED |
| 2026-04-15 | HRV | Croatia – Computer-related equipment – JAVNA NABAVA RAČUNALNE OPREME I SOFTVERA | TED |
| 2026-03-25 | HRV | Croatia – Computer-related equipment – JAVNA NABAVA RAČUNALNE OPREME I SOFTVERA | TED |
| 2026-03-23 | POL | Poland – Servers – Dostawa platformy wirtualizacyjnej wraz z wdrożeniem, gwarancją i wsparciem technicznym na okres 36 miesięcy (2 części) | TED |
| 2026-03-05 | NLD | Netherlands – IT services: consulting, software development, Internet and support – Resultaatverplichte ICT-/ IV-opdrachten Maatwerk Diensten Applicaties (RVICTO-MDA) 2026 | TED |
| 2026-02-24 | DEU | Germany – Software programming and consultancy services – Framework Agreement Direct Contributions - Lot 3: Post-Quantum Encryption Readiness | TED |
| 2026-02-11 | DEU | Germany – Software programming and consultancy services – Framework Agreement Direct Contributions - Lot 3: Post-Quantum Encryption Readiness | TED |
PKI — 1727 records
| Date | Buyer/Country | Title | Source |
|---|---|---|---|
| 2026-07-03 | DEU | Germany – IT services: consulting, software development, Internet and support – Projekt 680: "Quantensichere (Verwaltungs-)PKI (PQ V-PKI) | TED |
| 2026-07-02 | ROU | Romania – Software package and information systems – Sistem securizare contoare PKI-HSM | TED |
| 2026-07-01 | DEU | Germany – Administration services – Planung von Regionalem Verkehrsmanagement (RVM) in der Region Rhein Neckar | TED |
| 2026-07-01 | CZE | Czechia – Construction work – Človíček 2 – denní stacionář | TED |
| 2026-06-30 | PRT | Portugal – IT services: consulting, software development, Internet and support – AQUISICAO DE SERVICOS DE CONSULTORIA NO AMBITO DA CONFIANCA DIGITAL, IDENTIDADE ELETRONICA E INFRA-ESTRUTURA PKI DE SUPORTE A DESMATERIALIZACAO DE FATURACAO | TED |
| 2026-06-30 | IRL | Ireland – IT services: consulting, software development, Internet and support – T.019.2026 Request for Tenders for the supply of Entrust nShield Hardware Security Modules and Premium Support Licensing for An Garda Síochána | TED |
| 2026-06-29 | DEU | Germany – IT services: consulting, software development, Internet and support – Betrieb von Windows-, Unix-Server- und Virtualisierungs-Infrastrukturen | TED |
| 2026-06-26 | CZE | Czechia – Construction work – Dělnický dům Peklo – sanace společenského sálu | TED |
| 2026-06-26 | HRV | Croatia – Suits – Građansko odijelo, Grupa 1: Građansko odijelo odjeća Grupa 2: Građanska obuća | TED |
| 2026-06-25 | POL | Poland – Software package and information systems – Dostawa, wdrożenie oraz zapewnienie wsparcia technicznego dla systemów zarządzania cyklem życia certyfikatów (CLM) oraz centralnego systemu zarządzania kluczami kryptograficznymi (CKMS) w Banku Gospodarstwa Krajowego | TED |
| 2026-06-25 | HRV | Croatia – Protective and safety clothing – Radna zaštitna odjeća i obuća | TED |
| 2026-06-25 | BGR | Bulgaria – Machines and apparatus with individual functions – "Разширение на единната система АИС "Граничен контрол" в съответствие с изискванията на Регламент 2017/2226 и Системата за вход/изход (СВИ) на ЕС чрез доставка, инсталиране и въвеждане в експлоатация на 8 (осем) нови електронни гишета за | TED |
| 2026-06-24 | CZE | Czechia – Construction work – Človíček 2 – denní stacionář | TED |
| 2026-06-24 | DEU | Germany – IT services: consulting, software development, Internet and support – Entwicklungs-, Liefer- und Montageleistungen des "Velo Wave System" | TED |
| 2026-06-19 | DEU | Germany – Software package and information systems – EU-Vergabe -Corporate PKI - DB Systel | TED |
eIDAS — 1119 records
| Date | Buyer/Country | Title | Source |
|---|---|---|---|
| 2026-07-02T10:32:33+01:00 | Money and Pensions Service | Docusign Agreement (2026 - 2029) | UK-ContractsFinder |
| 2026-07-01 | NLD | Netherlands – Software package and information systems – DPS online collaboration tools | TED |
| 2026-06-30 | DEU | Germany – Electronic signature certification services – Einführung einer SaaS-Lösung für die Digitale Signatur | TED |
| 2026-06-30 | DEU | Germany – Electricity distribution – Green Electricity for EPO Munich Buildings | TED |
| 2026-06-30 | NLD | Netherlands – Electricity distribution – Green Electricity EPO Buildings The Hague | TED |
| 2026-06-30 | POL | Poland – Miscellaneous medical devices and products – Delivery of medical equipment for air medical evacuation for a total of 6 intensive care units and/or 16 non-intensive care bed unit units in 5 different configurations, including the preparation of certification documentation and obtaining a Sup | TED |
| 2026-06-30 | IRL | Ireland – Electronic signature certification services – 2025/011 Establishment of a Single Party Framework for the development of a Digital Transaction Management platform. | TED |
| 2026-06-29 | SWE | Sweden – Electronic signature certification services – Upphandling av Digital Identitet | TED |
| 2026-06-26 | DEU | Germany – Electricity distribution – Green Electricity for EPO Munich Buildings | TED |
| 2026-06-25 | POL | Poland – Medical information systems – Wdrożenie systemu do automatycznej digitalizacji zgód pacjenta wraz z dostawą niezbędnego sprzętu oraz digitalizacja dokumentacji medycznej w "Poddębickim Centrum Zdrowia" Sp. z o.o. w Poddębicach | TED |
| 2026-06-24 | GRC | Greece – Security-type printed matter – Προμήθεια νέου Ολοκληρωμένου Πληροφοριακού Συστήματος Εντύπων Ασφαλείας (Ο.Π.Σ.Ε.Α.), για την εκτύπωση – προσωποποίηση εντύπων ασφαλείας, συμπεριλαμβανομένου του νέου δελτίου Αστυνομικής Ταυτότητας Ελλήνων Πολιτών - Κάρτας Πολίτη, με τις συναφείς υπηρεσίες Ηλε | TED |
| 2026-06-24 | DEU | Germany – Information technology services – Bug Bounty Program Services | TED |
| 2026-06-22 | IRL | Ireland – Insurance and pension services – Provision of DC Pension Master Trust Services | TED |
| 2026-06-19 | MLT | Malta – Software-related services – Provision of Online Identity Verification Services - T041/26 | TED |
| 2026-06-19 | DEU | Germany – Trust services – Projektträgerschaft für Förderprogramme des Bundesministeriums für Verkehr (BMV) zur Förderung erneuerbarer Kraftstoffe | TED |
Method & anti-fabrication guarantees
Every record carries an immutable provenance stamp: the exact source URL, the fetch timestamp, the observed HTTP status (must be 200), and a sha256 hash of the raw upstream payload. A record enters this dataset only through a deterministic harvest script — never by hand, never by an LLM. A validator rejects any record with a future date, a placeholder host, an unverified classification code, or a missing provenance field before it can be published. Sources: EU TED (v3 full-text API), US USAspending.gov, UK Contracts Finder / Find-a-Tender (OCDS), World Bank procurement notices (~100 borrower countries). Full method, source ledger, and the complete dataset are archived on Zenodo (CC-BY-4.0), DOI 10.5281/zenodo.21192405.