Security for the Spanish PA means ENS.
Renewal included
Valid for 2 years
Upcoming audits
ENS
ENS
External audit
To be planned
ENS
ENS
07/31/26
Internal audit
All audits
“Audit completed. Report uploaded, only 2 Observations!”
Alessandro, Lead Auditor
OUR METHOD
This is how we bring you into compliance.
80%
automated
Documentation of the 73 Anexo II measurements generated by the platform.
5×
faster
From system categorization to audit, with the same rigor required by ENS.
100%
success
We prepare the audit with ENAC accredited bodies: no surprise non-conformities on the day of the audit.
SECURITY MANAGEMENT SYSTEM FOR THE SPANISH PA
Certify what you already do to protect the data of the Spanish Public Administration.
Procedure n. 5897
Stage 1 + Stage 2
Revision 02
Reviewed
Security for the Spanish PA means ENS
Choosing the wrong level comes at a cost: aim too low, and you risk exclusion from tenders; aim too high, and you waste time and budget you don't need. We assess the five dimensions required by the ENS, authenticity, confidentiality, integrity, availability, and traceability, and draft procedures tailored to the level that truly meets your needs.
works without surprises
The ENS requires renewal every two years.
Renewal audits every two years, with mandatory internal checks every year for medium and high levels. The platform tracks every deadline, ensuring renewals are always secure.
Compliance status
Aligned with
96%
Updated in real time
2 to close
ISO 9001
Completa 100%
Attiva
ISO 14001
70%
ISO 45001
75%
ISO 27001
80%
Base HLS
70% pronto
Prepare to grow
Open the doors of Spanish ministries, municipalities and public bodies to your company.
ENS certification is mandatory for working with the Spanish public administration at medium and high levels, and is increasingly required for the basic level as well. Ministries, municipalities, public health services, and regional bodies—an entire market segment remains inaccessible without this certification. With ENS, that requirement becomes a competitive advantage.
Complaion's Process
We'll be with you every step of the way, up to ENS compliance.
Documents
Documents
3 gaps
Upload documents
Let's analyze what you already have, what is missing and what you need to be ready.
Procedure n.123
3 ready
We write procedures
We build procedures, policies and registers based on your real way of working.
According to
Let's do the Audit
We carry out the Internal Audit, produce the reports and check everything is ready.
Valid for 2 years
Get the certificate
You get certified and continue to maintain it with the platform.
Certificate of Conformity
ENS
ENS CERTIFIED COMPANY
Certification issued by an ENAC Accredited Body.
Valid for 2 years
Mandatory for medium and high levels
Request for contracts with the Spanish PA
Renewal managed by us
Client stories
Who has achieved ENS
with Complaion.
OFTEN COMBINED
Start from the ENS, build the complete management system.
ENS and GDPR are complementary: ENS provides the concrete technical and organizational framework that the GDPR requires in general terms (Art. 32). If you already have ISO 27001, there is significant overlap between the controls. Your Lead Auditor can build everything on the same system, and the platform keeps it up to date. In practice, you do not need to manage separate processes for each regulation.
ENS cost and timelines
ENS certification: cost and timelines.
The cost and timelines of ENS certification depend on a few key factors. Here is what drives them, and how Complaion makes the whole path faster and more predictable.
Cost
ENS certification cost
There is no single answer to how much ENS certification costs. The ENS cost varies with the number of employees, sites and processes in scope, the system category: basic, medium or high, and what is already in place. Complaion starts with a free analysis and then sends a tailored quote, with no surprises along the way.
Timelines
ENS certification timelines
The ENS certification timeline depends on your organization: employees, sites and processes in scope, existing ISO 27001 controls and security documentation, and the maturity of what already exists. With Complaion, how long ENS takes changes radically: the Lead Auditor and platform work in parallel, cutting timelines to a few months, or even weeks, without cutting corners.
FREQUENTLY ASKED QUESTIONS
Do you have any questions about ENS or how Complaion can help you?
What is the ENS and why is it important for my company?
The ENS (National Security Scheme) is the mandatory cybersecurity framework for the Spanish public administration and for all providers—whether Spanish or foreign—that handle its information. It defines three levels—basic, medium, and high—based on the criticality of the data being managed. It is important because, without this certification, you cannot work with Spanish ministries, municipalities, or public bodies, even when operating from Italy.
How can you help my company obtain ENS certification?
A Lead Auditor evaluates the five dimensions required by the standard—authenticity, confidentiality, integrity, availability, and traceability—to determine the level you truly need. We draft the required procedures, and the platform generates the documentation for the 73 measures of Annex II.
How long does it usually take to obtain the ENS with Complaion?
It depends on the required level and the initial gap between your current situation and the requirements. A typical process for the intermediate level takes between 6 and 12 months. Your Lead Auditor will provide a precise estimate after the initial analysis.
What kind of support does Complaion offer during the process?
A dedicated Lead Auditor oversees every critical phase, from system categorization to audit preparation, while the platform monitors each control over time, including the mandatory annual internal audits for medium and high levels.
How do I start the process with Complaion?
Request information via the website: a Lead Auditor will analyze the type of data you handle for the Spanish public administration and identify the correct ENS level for your company.
Do you provide assistance with certifications other than ENS?
Yes. The ENS complements the GDPR, providing the concrete technical and organizational framework required by Article 32, and it largely overlaps with ISO 27001 if you already have that in place. Your Lead Auditor builds everything upon the same system.
Learn more
