CER26

The European Parliament Directorate-General for Innovation and Technological Support (ITEC) plans to procure a mobile gamified cybersecurity escape room to train EP staff on cyber threats and best practices. This is an advance notice for a planned negotiated procedure (EP-ITEC/LUX/2026/MVP/0003-EXA), not an active call for tenders, with expressions of interest opening 21 April 2026 and closing 5 May 2026 at 00:59 Luxembourg time via the EU Funding and Tenders Portal. The procurement foresees a framework agreement for services (CPV 80511000) with a maximum duration of 48 months. Expressions of interest must be submitted electronically using an EU Login account and from 30 June 2026 two-factor authentication will be mandatory for portal access.

What it funds

Scope summary

Provision of a gamified, interactive cybersecurity training experience for European Parliament staff delivered as an escape room. Delivery may be in a fixed room setup or a movable truck stationed outside EP buildings. Activity classed under staff training services (CPV 80511000).

Who will contract:European Parliament, ITEC Directorate-General for Innovation and Technological Support.

Who can apply:Commercial suppliers of staff training and experiential learning services (companies or consortia able to provide mobile/onsite gamified training). Submission requires an EU Login account for electronic expression of interest.

Procedure and contract form:Planned negotiated procedure for a middle/low value contract leading to a framework agreement (without reopening of competition). Maximum contract duration 48 months.

1. 1Start date for expression of interest: 21/04/2026 (Europe/Brussels).
2. 2Deadline for expression of interest: 05/05/2026 00:59 (Europe/Luxembourg).
3. 3Indicative launch of the negotiated procedure: 05/05/2026.

This notice is a publication of intent, not a call for tenders. Full procurement documents and the formal tender will be published later on the EU Funding & Tenders Portal Tender page.

Opportunity summary

Procedure identifier EP-ITEC/LUX/2026/MVP/0003-EXA. The contracting authority (lead) is the European Parliament, ITEC - Directorate-General for Innovation and Technological Support. This publication is an advance notice: it is not a call for tenders but a publication announcing the contracting authority's intention to launch a negotiated procedure for a low or middle value contract. The procurement concerns the provision of a mobile cybersecurity escape room experience to engage and educate European Parliament staff about cybersecurity threats and best practices through a gamified, interactive escape room hosted either in a room setup inside EP buildings or in a movable truck stationed in front of the EP buildings.

Procedure type:Planned negotiated procedure for middle/low value contract; framework agreement without reopening of competition.

CPV / Main classification:80511000 - Staff training services.

Nature of contract and duration:Services contract. Maximum contract duration 48 months. Will be established as a framework agreement without reopening of competition.

Milestones and dates

Expressions of interest must be submitted electronically through the F&T Portal. An EU Login account is required for electronic submission and to express interest; from 30 June 2026 two-factor authentication will be mandatory for EU Login access for affected users ¹.

Detailed description of the required services

The contracting authority seeks a supplier to design, deliver and operate a mobile, gamified cybersecurity escape room experience adapted for European Parliament staff. The service includes an interactive, educational scenario that illustrates common cybersecurity threats and promotes best practice behaviours. Delivery modes indicated include an in-building room setup and a movable truck-based facility stationed outside EP buildings. The solution is intended to be engaging and tailored to staff training needs, combining experiential learning and gamification to raise awareness and practical skills.

Who should consider this opportunity

Suppliers and service providers with demonstrable capability to design and operate educational, interactive training experiences, particularly cybersecurity awareness solutions, including providers of mobile experiential learning units (e.g. escape-room designers, experiential learning agencies, cybersecurity training companies with event delivery capacity and vehicles/trucks fitted as training venues).

Eligible Applicant Types

1. 1SMEs and large enterprises providing training services and event delivery.
2. 2Specialised training agencies and experiential learning companies (escape room designers / operators).
3. 3Cybersecurity consultancies and awareness providers with event-hosting capability.
4. 4Companies owning or able to subcontract movable vehicles/trucks adapted for interactive training.
5. 5Consortia combining training designers, cybersecurity content experts and vehicle providers (if required).

Funding Type

This is a public procurement (tender) for services leading to a services contract and framework agreement. It is not a grant, loan or equity instrument; the financial mechanism is procurement.

Consortium Requirement

The notice does not explicitly mandate a consortium; suppliers may apply individually or, where capacity gaps exist, as consortia. The planned procedure is a negotiated procedure which typically allows flexibility in how suppliers present joint capabilities.

Beneficiary Scope (Geographic Eligibility)

The contracting authority is the European Parliament (EU institution). The procedure is published on the EU Funding & Tenders Portal and targets suppliers capable of delivering within locations of the European Parliament (the publication reference includes LUX and Brussels time zones). Eligibility will follow procurement rules applicable to EU public contracts; typically suppliers established in EU Member States and possibly EEA countries can participate. The notice itself references Europe/Brussels and Europe/Luxembourg time zones and the EP; therefore geographic delivery is focused on EP locations in the EU.

Target Sector

Primary sectors:cybersecurity awareness and staff training (ICT / information security / professional training). Secondary sectors: events, experiential learning, mobile unit services and vehicle-based exhibition delivery.

Mentioned Countries and Regions

1. 1European Union (European Parliament locations)
2. 2Luxembourg (reference in procedure identifier and deadline time zone)
3. 3Belgium / Brussels (Europe/Brussels time zone and EP buildings in Brussels implied)

Project Stage and Expected Maturity

Delivery stage:design through deployment and operation. Required maturity: suppliers should be able to provide a production-ready training experience (concept design, scenario scripts, cybersecurity content, physical installation or fitted truck, facilitators, logistics, maintenance) and operate under a contract for up to 48 months. This implies readiness at demonstration/implementation and operational stage (not early research).

Funding Amount

The specific estimated total value is not published in the scraped content. The procedure is described as low or middle value contract. Suppliers should expect a procurement package suitable for a framework agreement covering multi-year service delivery; financial offer requirements will be published with the tender documents.

Application Type and Submission Method

Method of expression of interest:Electronic submission exclusively via the EU Funding & Tenders Portal. EU Login account is required. The call is a planned negotiated procedure; the formal negotiated procurement will be launched on the indicated date. Expressions of interest have specific start and deadline dates.

Nature of Support for Beneficiaries

Successful applicants will provide the contracted services and receive monetary payment under a public services contract. The opportunity delivers money to the supplier for services rendered (procurement), not non-monetary services to beneficiaries.

Application Stages

At minimum:1) Expression of interest (electronic) within the stated window; 2) Negotiated procurement submission invited by the contracting authority; 3) Evaluation and award. Because it is a negotiated procedure, there may be additional bilateral negotiation stages; plan for at least 2 to 3 stages overall.

Success Rates

Not specified. Success rate typical for EU institutional tenders depends on number of offers received; no historical data provided. As a negotiated middle/low value procedure, the contracting authority may shortlist few suppliers and negotiate directly, so competition may be limited compared with open public tenders.

Co-funding Requirement

No co-funding from applicants is indicated. This is a fee-for-service procurement:the contractor is paid for delivering the specified services.

Application templates and structure

Procurement documents and template forms will be published with the actual negotiated procedure launch. For expression of interest, submissions must be sent electronically via the Portal using the EU Login account; the expression of interest mechanism on the Portal will present the required fields. Expect standard procurement submission components: administrative declaration, company profile, evidence of legal and financial standing, technical proposal (concept, scenario, learning objectives, delivery modalities, vehicle specifications if applicable), staffing and CVs, implementation plan, risk and health & safety measures, pricing/financial offer, and any requested certificates or references. Detailed document templates (e.g. forms) will be provided in the call for tenders documentation when published.

Key requirements and technical expectations (based on available text)

1. 1Design and delivery of a gamified interactive escape room experience focused on cybersecurity threats and best practices.
2. 2Capability to host the experience either in an internal room setup (inside EP buildings) or inside a movable truck stationed outside EP buildings.
3. 3Provision of facilitators/educators and logistical support for EP staff sessions.
4. 4Operational readiness to deliver services under a framework agreement for up to 48 months, including maintenance, updates to content, and scheduling.
5. 5Compliance with EU institutional security, health & safety and access rules when operating at EP facilities and external truck locations.
6. 6Electronic submission via EU Funding & Tenders Portal and compliance with EU Login and (from mid-2026) two-factor authentication requirements.

How to prepare an expression of interest

Register or ensure your organisation has an EU Login account and that it meets the two-factor authentication requirements when applicable. Prepare company administrative and legal documents, a concise statement of interest describing relevant experience delivering similar experiential training and mobile units, high-level concept of the escape room (learning objectives and key scenarios), description of vehicles/room setup and logistics, examples/references of previous deliveries to public sector clients, and confirmation of availability for the framework duration. Submit the expression of interest electronically via the Portal before the deadline.

This notice also clarifies that references with ExA in their identifier are advance publications announcing intent to launch a low or middle negotiated procedure in the future; full procurement documents will follow the indicated dates.

Contact and portal notes

All submissions and communications for this procurement are handled through the EU Funding & Tenders Portal. Users need an EU Login account to subscribe, submit questions and express interest. The Portal provides Q&A and download options for procurement documents once published. Public Q&A currently shows no items for this notice.

Summary — What is this opportunity about and how to explain it?

The European Parliament intends to award a framework services contract (negotiated low/middle value) to a supplier to design, build and operate a mobile cybersecurity escape room experience for EP staff. The service aims to increase cybersecurity awareness and promote best practice through an engaging, gamified learning format, either installed as a room within EP premises or delivered from a specially fitted movable truck stationed outside EP buildings. The framework may last up to 48 months. Suppliers must express interest electronically via the EU Funding & Tenders Portal within the announced window. The formal tender documents and selection criteria will be published when the negotiated procedure is launched. Suppliers experienced in cybersecurity training, gamified learning and mobile experiential delivery should prepare to demonstrate technical capacity, operational readiness and compliance with EU institutional access and security requirements.

Key immediate actions for interested suppliers:ensure EU Login account is active and prepared for 2FA, assemble company credentials, prepare a high-level concept and evidence of prior delivery of similar services, and submit an expression of interest via the Portal between 21/04/2026 and 05/05/2026.

Footnotes

1. 1From 30 June 2026, two-factor authentication will be mandatory for EU Login access for affected users. See EU Funding & Tenders Portal guidance on registering devices, security keys, passkeys and eID linkage for details.

Opportunity Overview

This is a planned call for tenders (not yet an active tender) from the European Parliament's Directorate-General for Innovation and Technological Support (ITEC). The European Parliament intends to procure a mobile cybersecurity escape room experience designed to engage and educate EP staff on cybersecurity threats and best practices. The service will be delivered through a gamified, interactive escape room that can be hosted either as a room setup or in a movable truck stationed in front of EP buildings in Luxembourg.

Procedure Details

Procedure Type:Planned negotiated procedure for middle or low value contract. This is an announcement of the European Parliament's intention to launch a future negotiated procedure, not an active call for tenders.

Procedure Identifier:EP-ITEC/LUX/2026/MVP/0003-EXA

Contracting Authority:European Parliament, ITEC - Directorate-General for Innovation and Technological Support, based in Luxembourg

Contract Nature:Services

Contract Type:Framework agreement without reopening of competition

Financial and Duration Information

Estimated Total Value:Not disclosed in the tender notice. The estimated value is not publicly available at this stage.

Maximum Contract Duration:48 months (4 years)

Classification

Main CPV Code:80511000 - Staff training services

Key Milestones and Timeline

Expression of Interest Process

Submission Method:Electronic submission only via the EU Funding and Tenders Portal

Requirements:An EU Login account is required to submit expressions of interest electronically. As of 30 June 2026, two-factor authentication will be mandatory for all EU Login accounts accessing the portal.

Submission Address:Expressions of interest must be submitted exclusively through the electronic submission system on the EU Funding and Tenders Portal at EU Funding and Tenders Portal

Service Description and Requirements

The European Parliament seeks a mobile cybersecurity escape room experience specifically designed to educate EP staff on cybersecurity threats and best practices. The service delivery model offers flexibility, allowing the contractor to provide either a dedicated room setup or a movable truck stationed in front of EP buildings. ¹

Based on market research, cybersecurity escape rooms have emerged as an innovative training format that combines gamification with practical cybersecurity education. These interactive experiences simulate real-life cyber attack scenarios, requiring participants to solve puzzles and complete tasks under pressure. ² The format improves engagement and information retention compared to traditional passive training methods, while promoting cross-departmental cooperation essential for strong cybersecurity culture. ³

Mobile escape room solutions are currently available in the European market. For example, rental of a mobile escape room unit for one day is priced at approximately €3,450 excluding VAT, with availability across Europe and beyond. ⁴ Some providers offer hacker escape trucks that can accommodate teams of 4 to 8 participants, with capacity for up to 80 participants per day, and are available for deployment across Western Europe. ⁵

Eligibility and Applicant Profile

The tender notice does not explicitly state eligibility criteria at this stage, as this is a planned call announcement rather than an active tender. However, based on the negotiated procedure framework, potential applicants would typically include: service providers specializing in cybersecurity training and awareness, companies with experience in gamified learning solutions, organizations operating mobile training facilities, and firms with expertise in designing and delivering interactive security training programs.

Applicants should be prepared to demonstrate:experience in cybersecurity training delivery, capability to design and operate mobile or fixed escape room facilities, understanding of European Parliament operational requirements, and ability to deliver services that comply with EU institutional standards and security protocols.

Important Procedural Notes

This is not an active call for tenders but rather a publication announcing the European Parliament's intention to launch a future negotiated low or middle value procedure. ⁶ Interested parties should note that expressions of interest submitted during this phase do not constitute formal tender submissions. The actual call for tenders will be launched on or after 5 May 2026, at which point formal procurement documents will be made available and the full evaluation criteria will be disclosed.

Potential applicants are encouraged to monitor the EU Funding and Tenders Portal for the formal call launch. Questions regarding this planned procedure can be submitted through the portal's Q&A system once an account is created and two-factor authentication is configured.

Market Context and Comparable Opportunities

The European Union has demonstrated increased investment in cybersecurity training and awareness initiatives. Recent comparable tenders include a request from the Chief State Solicitor's Office in Ireland for cybersecurity training and compliance services covering phishing and malware simulations, compliance management, and eLearning modules. ⁷ Additionally, ENISA (European Union Agency for Cybersecurity) has issued tenders for support services related to EU cybersecurity certification schemes with a total estimated budget of €2,000,000 over four years. ⁸

The Cybersecurity Skills Academy, announced at Forum InCyber 2026, represents broader EU commitment to cybersecurity skills development, with 47 academia members and 20 industry companies pledging to deliver training experiences across Europe. ⁹

Next Steps for Interested Parties

1. 1Create or verify your EU Login account on the EU Funding and Tenders Portal
2. 2Register a two-factor authentication method with your EU Login account before 30 June 2026 (mandatory deadline)
3. 3Monitor the portal for the formal call launch expected on or after 5 May 2026
4. 4Prepare documentation demonstrating relevant experience in cybersecurity training and mobile facility operations
5. 5Review the full procurement documents when published to understand detailed requirements and evaluation criteria
6. 6Submit a formal tender response by the deadline specified in the call for tenders

Footnotes

1. 1European Parliament ITEC planned call for tenders EP-ITEC/LUX/2026/MVP/0003-EXA, published on EU Funding and Tenders Portal
2. 2Escape room mobile solutions offer hands-on, immersive experiences that simulate real-life cybersecurity scenarios requiring immediate action and problem-solving inspired by real cyber attacks, improving engagement and threat awareness
3. 3Interactive training through escape rooms makes learning engaging through game elements, leads to better information retention compared to passive listening, and promotes cross-departmental cooperation essential for strong cybersecurity
4. 4Mobile escape room rental pricing and availability information from YGQ Solutions and Sectricity, indicating market rates of approximately €3,450 per day excluding VAT for mobile units
5. 5Hacker escape truck providers such as Sectricity offer mobile security awareness solutions accommodating teams of 4 to 8 with capacity for up to 80 participants per day, available across Western Europe
6. 6References with ExA designation are publications announcing the contracting authority's intent to launch in the future a low or middle value negotiated procedure, not active calls for tenders
7. 7Chief State Solicitor's Office Ireland cybersecurity training tender (RFT-ICT25AS02) for online training covering phishing and malware simulations, compliance management, and eLearning modules
8. 8ENISA tender for support services in relation to EU cybersecurity certification schemes with total estimated budget of €2,000,000 over four years, deadline 17 April 2026
9. 9Cybersecurity Skills Academy announced at Forum InCyber 2026 includes 47 academia members and 20 industry companies committed to delivering cybersecurity training experiences across Europe