Appointment of a service provider for licencing, implementation, support and maintenance of an integrated governance performance regulatory compliance (gprc) system (business management platform) of the ceta for 3 years

Provide a cloud‑native or cloud‑ready Business Management Platform (Azure, AWS or Google Cloud) hosted in South Africa with ≥99.5 % uptime SLA, auto‑scaling and disaster recovery (RPO < 4 hrs, RTO < 8 hrs).
Support at least 200 named users, 100 concurrent users and data growth beyond 5 TB, accessible via modern browsers and mobile devices.
Meet stringent security standards: MFA, SSO, RBAC, AES‑256 encryption, ISO 27001 and SOC 2 Type II certifications, and retain immutable audit logs for ≥7 years.
Include comprehensive functional modules for governance, risk, compliance, performance management, workflow automation, reporting, ESG, idea and board management.
Deliver full implementation services (design, configuration, data migration, integration, testing, training, change management) and a three‑year warranty/support package.
Comply with all procurement requirements: valid CSD registration, up‑to‑date tax certificates, B‑BBEE status, CIDB grading, CIPC registration, local content and POPIA data‑residency obligations, and provide ISO 27001/SOC 2 evidence.
Submit all required returnable documents, signed and sealed where applicable, by 11:00 hrs on 29 January 2026.

Closing date: 29 January 2026, 11:00 hrs (as stated in the tender).
No other dates (briefings, site visits, clarification deadlines) are mentioned in the extracted text.

Email: [email protected]
Phone: +27 11 265 5901
No specific contact name or physical address provided in the extracted sections.

Prepare all required returnable documents as listed in the tender (the current analysis only notes “Returnable Documents:” – obtain the detailed list from the tender pack).
Submit the completed bid to the address/email provided by the closing time (11:00 on 29 January 2026).
Use the prescribed submission forms; incomplete or missing forms may lead to disqualification.
Ensure the bid is signed, dated and sealed if a hard‑copy submission is required.
Verify that all mandatory annexes (e.g., technical proposal, financial proposal, compliance certificates) are included before submission.

Provide a cloud‑native or cloud‑ready Business Management Platform (Azure, AWS or Google Cloud) with ≥99.5 % uptime SLA, auto‑scaling, and disaster recovery (RPO < 4 hrs, RTO < 8 hrs).
Support ≥200 named users and ≥100 concurrent active users; data growth to >5 TB.
Must run on modern browsers (Chrome, Firefox, Edge, Safari) and be fully responsive on mobile devices.
Enterprise‑grade relational database with ACID compliance, clustering, backup and point‑in‑time recovery.
RESTful API with documentation, versioning and webhook support.
Security: MFA, SSO (SAML 2.0/OAuth 2.0), RBAC, fine‑grained permissions, data encryption at rest (AES‑256) and in transit (TLS 1.2+), ISO 27001 and SOC 2 Type II certifications, immutable audit logs (≥7 years).
Data residency: all data stored within South Africa, complying with POPIA.
Functional modules covering governance, risk, compliance, performance management, workflow automation, reporting, dashboards, ESG, idea management and board/committee management.
Implementation services include design, configuration, data migration, integration, testing, training, change management and 3‑year warranty/support.

Must hold a valid CSD (Central Supplier Database) registration.
Provide up‑to‑date tax compliance certificates (IRP5, VAT).
Demonstrate B‑BBEE status as required by government procurement policy.
Provide CIDB registration and relevant grading.
Show CIPC registration and any required professional licences.
Meet local content requirements and South African data‑residency obligations.
Submit evidence of ISO 27001 (and/or SOC 2) certification as part of security compliance.

Integrated governance performance regulatory compliance (gprc) system – 3‑year service provider for ceta

Information & Communication Technology Industry Profile

Critical Requirements

Regulatory Bodies

Typical Documents

Core procurement rules

Broad-Based Black Economic Empowerment Act (B-BBEE Act)

Constitution of the Republic of South Africa, 1996 – Section 217

Construction Education and Training Authority

Similar Tenders

REQUEST FOR THE PROVISION OF BITRIX24 PROFESSIONAL LICENSE (12-MONTH SUBSCRIPTION) FOR TRADE & INVESTMENT KWAZULU NATAL.

VMWare License Renewal

Provision of consulting services to review the outcomes of the request for information (RFI) issued by DCDT and SAPO, prepare a business case, an indicative costing model for the proposed solution and prepare a request for proposals (RFP)

Supply and delivery of Gaskets and Seals

CPSC/B/PC/115/2026 OUTSOURCING A SERVICE PROVIDER FOR RENDERING OF A CLEANING SERVICE FOR A PERIOD OF 6X MONTHS AT DOD LOGISTIC SUPPORT FORMATION SAINT GEORGE HOTEL DOD PROC PLAN 26-27/LOG DIV/2063

Appointment of a service provider for the provision of cleaning services at the Department of Science, Technology and Innovation (DSTI), National Intellectual Property Management office (NIPMO) and National Advisory Council on Innovation (NACI) for a period of eighteen months

Supplier Readiness Hub

Guide to Telecommunications Tenders in South Africa

Preferential Procurement Policy Framework Act (PPPFA)

Prevention and Combating of Corrupt Activities Act (PRECCA)

Public Procurement Act, 2024 (PPA)

Promotion of Access to Information Act (PAIA)

Promotion of Administrative Justice Act (PAJA)

Sector-specific rules

State Information Technology Agency Act (SITA Act)

Electronic Communications Act

Electronic Communications and Transactions Act (ECTA)

Winning Broadband Rollout Tenders: Opportunities for Fiber and ISP Firms

Understanding ICASA License Requirements for Government Telecom Tenders