Denmark's Two Biggest Hospital Regions Award a €10 Million Deal to Unify Access Control for Their 2027 Merger

Two Danish regional health authorities that together run hospitals across Copenhagen and Zealand have awarded a contract worth roughly 76.2 million DKK (about €10.2 million) to replace their separate identity and access management systems with a single platform. The winning bidder, Danish software firm Omada A/S, will build a cloud-based Identity Governance & Administration solution ahead of the regions' formal merger into a new "Region stdanmark" (Region East Denmark).

Introduction

Region Hovedstaden (the Capital Region) and Region Sjælland (Region Zealand) currently run their hospitals, diagnostic systems and administrative platforms on separate identity and access management setups. That is about to change: the two regions are merging into a single entity, Region stdanmark, and they need one standardised system to control who can access what across the combined organisation before that happens.

The two regions have now jointly awarded that contract to Omada A/S, a Copenhagen-based identity governance specialist, in a deal worth just over 76 million DKK and running for nearly ten years once fully underway.

Why This Contract Matters

Identity and access management rarely makes headlines, but in a healthcare setting it is foundational infrastructure: it determines which clinicians, administrators and systems can reach patient records, diagnostic platforms and administrative tools, and how quickly access can be granted or revoked as staff join, move or leave.

This contract is also a case study in procurement timed around organisational change. Rather than merging two regions first and reconciling their IT systems afterwards, the buyers are using this contract to build the unified access platform in parallel with the administrative merger itself, aiming to have common infrastructure ready as the new region takes shape.

Contract Timeline

•          Internal reference: 25059279

•          Notice published: 9 July 2026 (OJ S 130/2026)

•          Winning bidder selected: 23 June 2026

•          Contract concluded: 7 July 2026

•          First sub-delivery cutover: expected approximately 7 months after signing

•          Core contract term: 108 months from that cutover (115 months total from signing)

Contract Overview

Region Hovedstaden acted as group lead, running a negotiated procedure with prior publication of a call for competition, a process under Danish procurement law that allows the buyer to negotiate technical and commercial terms with shortlisted bidders rather than simply ranking sealed offers. Three tenders were submitted, all electronically, through the Mercell CTM procurement platform.

The buyers reserved the right to award directly on initial tenders without holding negotiation meetings, and ultimately selected Omada A/S. The regions confirmed the award on 23 June 2026 and signed the contract on 7 July 2026.

Key Contract Details

Project Scope

The core deliverable is a cloud-based Identity Governance & Administration platform, hosted by Omada in its own data centre, that will give every employee across the merged region a single, unique digital identity regardless of employment type. The regions want the new system to automate at least 60 percent of all system access grants through standardised data processes, replacing today's patchwork of manual approvals with one consistent ordering process.

Delivery is structured in three phases. Phase A establishes the platform's foundation: connecting it to source HR data systems, migrating existing data, and onboarding technical applications including Active Directory, ServiceNow, CyberArk, BeyondTrust, Imprivata and Microsoft Entra ID, alongside designing business roles and training the regions' own staff to eventually manage onboarding themselves. Phase B extends this to the regions' business-critical clinical systems, including the shared Sundhedsplatformen (Health Platform) and core diagnostic systems, plus management-oversight and delegation features. Phase C completes onboarding of remaining user systems and finishes staff training so the regions can operate independently.

Beyond initial delivery, Omada must provide ongoing hosting, operation, support and maintenance of the software, backed by a professional IT service management function for incident handling, plus on-demand consulting and training call-offs, such as building new connectors, for the life of the contract.

About the Contracting Authorities

Region Hovedstaden and Region Sjælland are Danish regional authorities responsible for public healthcare, running hospitals, diagnostic services and associated administration across Copenhagen and the wider Zealand area. The two regions are in the process of merging into a single entity, Region stdanmark, making this contract part of the practical groundwork, standardising shared digital infrastructure, that underpins that administrative consolidation.

About the Winning Company

Omada A/S is a Copenhagen-based identity governance and administration specialist, classed as a medium-sized enterprise. The company's selection for a near-decade-long, mission-critical access management contract for two of Denmark's largest healthcare regions reflects a specialism in the IGA category, an area of enterprise software focused specifically on governing digital identities and system access at scale. No subcontracting was declared.

Procurement Analysis

Procedure: A negotiated procedure with prior publication was used, giving the regions scope to refine technical requirements with bidders, though they reserved the right to award on initial tenders without holding negotiation meetings at all.

Competition: Three tenders were received, a reasonable field for a specialised enterprise software category where few vendors combine healthcare-scale identity governance with the ability to commit to a near ten-year service relationship.

Award criteria: Quality carried 60 percent of the weighting against 40 percent for price, meaning the regions prioritised technical and functional fit over the lowest cost, appropriate for a platform this deeply embedded in clinical and administrative operations.

Value gap: The awarded value of roughly 76.2 million DKK came in well under the regions' own estimate of 155 million DKK, though the notice cautions that the estimate reflects a broader forecast scenario over the full contract term rather than a directly comparable like-for-like figure.

GPA status: The contract falls under the WTO's Government Procurement Agreement, open in principle to qualifying international bidders, though the winning vendor is Danish.

Additional Procurement Facts

•          The procedure was not accelerated, indicating a standard timeline was followed.

•          No framework agreement or dynamic purchasing system was used; this is a direct services contract with a built-in 12-month extension option.

•          All communication in the procedure, including bidder questions, was required to run through the regions' electronic procurement system, with technical support available via Mercell CTM.

•          Bidders had to submit tenders in Danish, though screenshots or figures reproducing existing standard software could remain in English.

•          The notice flags that the contract may fall under Denmark's investment screening law, potentially requiring non-EU/EFTA-linked bidders to seek approval from the Danish Business Authority before signing.

•          The notice also flags that the procurement is subject to EU sanctions rules under Article 5k of Regulation (EU) No 833/2014, which bars awarding contracts to Russian or Russian-controlled entities.

•          Disputes or review requests fall to the Klagenævnet for Udbud (Danish Complaints Board for Public Procurement) in Viborg.

Market & Industry Perspective

Identity governance has become a priority category for large public healthcare organisations across Europe, driven by rising cyber-risk in the health sector and stricter expectations around auditable, automated access control rather than manual approval chains. Denmark's regional merger adds a second driver on top of that: consolidating two organisations' IT estates gives buyers a rare opportunity to standardise on a single platform rather than integrating two legacy systems indefinitely.

For vendors in this space, healthcare buyers represent a demanding but sticky customer segment: implementations are long, deeply integrated with core clinical systems like Sundhedsplatformen, and once embedded are costly to displace, which likely explains the near-decade contract term secured here.

Economic Significance

At roughly €10.2 million awarded against a much larger ceiling estimate, this is a modest headline figure by major infrastructure standards, but the nearly ten-year term makes it a significant, durable revenue relationship for Omada, and a long-term dependency for the two regions. Enterprise software contracts of this length are relatively unusual in public procurement and reflect how deeply an identity platform needs to be woven into an organisation's daily operations before it can be considered stable.

The contract also gives both merging regions a predictable cost basis for a category of IT spend, security and access administration, that might otherwise have been duplicated or renegotiated repeatedly through the merger process.

Future Procurement Opportunities

The call-off consulting and training services built into this contract mean further individual orders, such as new system connectors or extended onboarding support, are likely to be issued to Omada throughout the nearly decade-long term. More broadly, as Region stdanmark takes shape, other shared-services contracts covering IT, administration and clinical systems may follow a similar pattern of consolidating what were previously two separate regional procurements into one.

Opportunities for Suppliers

While no subcontracting was declared at award, a platform of this scope, spanning HR data integration, clinical system onboarding, and ongoing IT service management, typically generates demand for specialist implementation partners, connector developers and training providers over its lifetime. Firms with healthcare-sector identity and access management experience in the Nordic market are best positioned to engage as the phased rollout progresses.

What Businesses Should Watch

•          How the phased rollout, particularly onboarding of business-critical systems like Sundhedsplatformen in Phase B, proceeds through the regions' merger timeline.

•          Whether Region stdanmark issues further consolidated IT contracts as the two regions' systems continue to align.

•          Quality-weighted award criteria on enterprise software contracts, which reward functional fit and long-term service capability over the lowest bid price.

TendersOnTime Procurement Intelligence

This contract illustrates a pattern likely to recur as European public bodies merge or restructure: using a major IT procurement as the mechanism to standardise infrastructure ahead of, rather than after, an organisational consolidation. Building one identity platform for the merged Region stdanmark now avoids the alternative of integrating two separate legacy systems once the merger is already complete.

The quality-weighted award criteria are also a useful signal. With 60 percent of the decision resting on quality against 40 percent on price, the regions treated this as a long-term platform choice rather than a commodity purchase, consistent with a near ten-year commitment embedded in clinical operations.

For suppliers, the lesson is that specialised, long-duration public sector software contracts of this kind favour vendors who can demonstrate deep sector-specific integration experience, healthcare systems, HR data, identity standards, over those competing purely on upfront cost.

Supplier Takeaways

•          Public sector mergers and restructurings can generate significant one-off IT consolidation contracts, worth tracking as organisational change unfolds across Europe.

•          Quality-weighted criteria, here 60/40 in favour of quality, mean technical and functional fit outweighs price in specialised enterprise software procurements.

•          Long contract terms, nearly ten years in this case, are increasingly used for platforms deeply embedded in clinical or operational workflows.

•          Call-off consulting and training provisions built into service contracts offer ongoing engagement opportunities beyond the initial award.

•          Danish and EU sanctions and investment-screening rules are increasingly explicit conditions in public procurement notices and should be checked early by any prospective bidder.

Key Takeaways

•          Region Hovedstaden and Region Sjælland jointly awarded a 76.2 million DKK (approx. €10.2 million) contract to Omada A/S for a unified identity and access management platform.

•          The contract supports the two regions' merger into a new Region stdanmark, replacing separate legacy systems with one standardised solution.

•          The contract runs for approximately 115 months (nearly ten years), with a further 12-month extension option.

•          Three bids were received through a negotiated procedure weighted 60% quality and 40% price.

•          The platform will onboard business-critical clinical systems, including the shared Sundhedsplatformen, alongside core administrative applications.

Conclusion

This is not a contract that will attract broad public attention, but it reflects a structurally important moment for Danish regional healthcare administration: two large public health authorities standardising their digital access infrastructure as they merge into one. Omada A/S now carries responsibility for delivering and running that platform for the combined Region stdanmark for close to a decade.

Frequently Asked Questions

Q1. What is Identity Governance & Administration (IGA)?

It is a category of enterprise software that manages digital identities and controls which systems and data each user can access, automating approval, review and revocation processes rather than handling them manually.

Q2. Why are two separate regions awarding one joint contract?

Region Hovedstaden and Region Sjælland are merging into a new entity, Region stdanmark, and are using this contract to build one standardised access management platform ahead of that administrative consolidation.

Q3. Why was quality weighted more heavily than price?

For a platform deeply integrated with clinical systems and running for close to a decade, the regions prioritised functional fit and technical capability, weighted at 60 percent, over the lowest purchase price, weighted at 40 percent.

Q4. Is this contract funded by the EU?

No. The notice confirms the project is not financed with EU funds, though it is governed by EU Directive 2014/24/EU and covered by the WTO's Government Procurement Agreement.

Q5. Did any subcontracting take place?

No subcontracting was declared by Omada A/S at the time of award.