Surety bonds

CIG ANAC and tender bonds: the automatic validation workflow

· Updated 12 May 2026 · 9 min read

Anyone managing surety bonds attached to Italian public tenders knows that CIG (Italian Tender Identifier) is not a formality: it is the key linking the bond certificate to a specific public contract. Without the correct CIG, the bond is not enforceable against the contracting authority; with the wrong CIG, the error may surface only at call time, when it is too late to fix. This article describes how a vertical surety PAS handles the bond-issuance workflow tied to the CIG, with focus on automatic validation via the ANAC API at issuance.

What CIG is and why it matters for bonds

CIG is the 10-character alphanumeric code that ANAC (Italian Anti-Corruption Authority) assigns to every public-tender procedure in Italy. Introduced by L. 136/2010 for financial-flow traceability, CIG uniquely identifies the tender, links all payments and guarantees to the specific contract, and enables anti-corruption monitoring on public procurement.

For tender surety bonds, CIG is central for three reasons:

Regulatory references

L. 136/2010 (traceability) · D.Lgs. 36/2023 new Italian Public Contracts Code (replacing D.Lgs. 50/2016) · ANAC Determination 4/2012 (CIG guidelines) · IVASS Reg. 24/2018 (governance for surety insurers).

The issuance flow: from request to certificate

In a vertical surety PAS, issuing a bid bond against a CIG follows a standardised flow. The difference between a generalist platform and a vertical one lies exactly here: the vertical one automates checks that would otherwise be delegated to manual underwriting.

Step 1 — Request input

The broker or agent enters the request indicating: guaranteed principal, CIG, declared tender base amount, beneficiary (contracting authority), type (bid or performance), duration.

Step 2 — CIG validation via ANAC API

The system queries the BDNCP (National Public Contracts Database) in real time and retrieves: CIG existence, status (active, suspended, cancelled), registered contracting authority, official base amount, tender object, CPV (Common Procurement Vocabulary). API-returned data is the authoritative source: in case of discrepancy with what the principal declared, it prevails.

Step 3 — Principal verification

On the guaranteed principal, parallel checks are performed: AML/sanctions screening, tax ID/VAT number validation via Italian Tax Agency, credit-rating retrieval (in evolved PAS, integration with Cerved or CRIF to assess post-call regress risk).

Step 4 — Premium calculation

Based on amount, duration, principal's risk class, tender type, the premium is calculated applying the insurer's IVASS-approved tariffs. Quotation is automatic for amounts within the underwriter's authority threshold; above threshold it enters a senior-approval workflow.

Step 5 — Certificate generation

The certificate is composed from a parameterised template integrating: registry data, tender data (retrieved from ANAC), standard line clauses (first demand, prior waiver of objection, jurisdiction), duration and release. The template is IVASS-approved for that insurer and that line.

Step 6 — Signing and delivery

The certificate is signed with FEQ (qualified electronic signature) by the insurer, time-stamped by an AgID-qualified TSA (Actalis, InfoCert or equivalent), and delivered as PDF/A to the broker for presentation to the contracting authority. A copy is sent for decade-long preservation to the AgID-accredited Preservation Provider.

ANAC API integration in practice

BDNCP querying happens via web service exposed by ANAC. The syntax is simple (HTTPS request with CIG as parameter, structured XML/JSON response), but the value is not in technical complexity: it is in what you do with the returned data.

A vertical PAS natively handles four cases that a generalist platform leaves to the underwriter:

Practical performance

The ANAC query adds typically 200-400 ms to issuance time. On a volume of 50,000 bonds/year with 1% CIG error rate (typical market experience), this means 500 bonds/year that are NOT issued against a wrong CIG — directly proportional reduction in the risk of future contestation.

The 5 most common errors and how to avoid them

  1. CIG mistyped. Confusion between 0 and O, 1 and I, 5 and S. The CIG check digit helps intercept mechanical errors, but validation against ANAC is the only one catching CIGs that are syntactically correct but refer to different tenders.
  2. Wrong-tender CIG. Happens when the principal participates in multiple simultaneous tenders and gives the broker the wrong CIG. Tender-object comparison validation is the antidote: if the bond is for a cleaning contract but the CIG points to a construction one, the system warns.
  3. Disproportionate bond amount. For the bid bond, typically 2% of the base amount (reducible to 1% for ISO/EMAS-certified operators); for the performance one, a % varying with award discount. A vertical PAS calculates these amounts automatically from ANAC + principal data.
  4. Inconsistent duration. The bid bond must cover offer validity (typically 180 days from submission deadline), extendable if foreseen in the notice. The performance bond covers the full contract duration + a warranty period. Mismatches create cover gaps.
  5. Incorrect beneficiary. Often the contracting authority formally named in the notice is a municipality union, a central procurement office, an in-house company: not the single entity the principal "sees". The ANAC API returns the correct formal name.

What changes for the performance bond

The described flow applies to the bid bond issued attached to the offer. The performance bond (issued after award, before contract signing) has some specifics:

In summary

CIG is the technical-legal core of bonds attached to Italian public tenders. A vertical surety PAS natively handles validation against ANAC, proposes authoritative values as default, intercepts the most common errors before the certificate is issued. The value is not in the single check (trivial): it is in the composition of all checks in a workflow that significantly reduces the risk of contested call.

Frequently asked questions

What happens if I issue a bond with a non-existent CIG?

The certificate is formally void towards the beneficiary because it lacks a tender reference. At call time the contracting authority can refuse payment, and in litigation the insurer faces gratuitous exposure. CIG validation via ANAC API at issuance is now mandatory practice to avoid the issue.

How frequently is the ANAC database updated?

The BDNCP (National Public Contracts Database) is fed near-real-time by contracting authorities publishing new tenders. A newly generated CIG is typically queryable via API within minutes of creation. For bonds issued on the same day as tender publication an automatic retry is recommended.

Can I issue the bid bond before the tender notice is published?

Technically yes if the principal already has the CIG (happens for invitation-only tenders or above-threshold direct awards), but it is the exception. In most cases the principal provides the CIG after receiving the invitation letter or downloading the notice: the bond is issued against an already-active CIG.

Does the platform also support CONSIP or MePA tenders?

Yes. CONSIP (centralised PA purchasing) and MePA (Electronic Marketplace) use the same CIG system. The difference is procedural (electronic-platform vs traditional tender) but the certificate and bond-issuance flow are identical.

What changes with the new Italian Public Contracts Code D.Lgs. 36/2023?

D.Lgs. 36/2023 (in force from 1 July 2023, fully operational from 1 January 2024) replaced D.Lgs. 50/2016 without changing the fundamental CIG and tender-bond framework. Some details change: greater digitalisation (virtual file of the economic operator, strengthened BDNCP), proportionality rules between bond and contract. IVASS-approved templates of surety insurers have been updated accordingly.