This Tender Has Expired

• Briefing (non‑compulsory): 19 May 2026 @ 11:00 – Microsoft Teams (Meeting ID 314 468 795 078 712, Passcode 4ae7AS9p).
• Clarifications deadline: 28 May 2026 @ 10:00.
• Gate‑access code request form deadline: 3 days before closing (by 01 June 2026).
• Closing date & time: 04 June 2026 @ 10:00.
• Bids may be submitted only between 08:00‑16:30 on the closing day.

Tender enquiries: [email protected] (email). No phone number or physical contact person listed in the document.

• Submit one original hard copy in English and one electronic copy on an unencrypted USB (PDF format). Physical copy is authoritative if discrepancies arise.
• All bids must be sealed, legible, and marked with the Bid Number (002/2026/EWSS/MASKING/RFB) on the outer packaging.
• Deliver bids to the physical address: 1st Floor, Building No. 9, Byls Bridge Office Park, 11 Byls Bridge Boulevard, Cnr Olievenhoutbosch Road and Jean Avenue, Highveld Extension 73, Centurion, 0157.
• Bids may only be received during office hours (08:00‑16:30) on the closing date (04 June 2026) and must be received before 10:00.
• Mandatory returnable documents (Annexure J Bid Receiving Form and all annexures listed in Table 1) must be completed; failure to submit any mandatory document results in disqualification.
• Required identity verification: a scannable valid ID document, driver’s licence or passport must be presented at the main gate for vetting.
• Clarification questions must be emailed to [email protected] no later than 28 May 2026 @ 10:00.
• Gate access code request form (Annexure I) must be submitted at least 3 days before the closing date.
• Non‑compliance with any of the above submission rules will lead to automatic disqualification.

Stage 1 – Returnables: All mandatory returnables are scored; missing mandatory documents = disqualification.

Stage 2 – Functional Evaluation (max 80 pts):

• Company track record – 30 pts (≥7 years experience = 30 pts, 7 years = 20 pts, <7 years = 0).
• Number of implementations – 30 pts (≥2 implementations = 20 pts, >2 = 30 pts, <2 = 0).
• Key personnel (Technical Lead) – 20 pts (≥7 years = 10 pts, >7 years = 20 pts, <7 years = 0).
• Minimum threshold to proceed: 50 pts.

Stage 3 – Demonstration (6 pts): Demonstrate six core functionalities (static masking, dynamic masking, tokenisation, anonymisation, RBAC, data discovery/classification). Full compliance on each = 1 pt; total <6 pts = disqualification.

Stage 4 – B‑BBEE & Price (100 pts total):

• B‑BBEE preference points (max 20 pts) based on contributor level (Level 1 = 20 pts, Level 2 = 18 pts, … Level 8 = 2 pts, non‑compliant = 0).
• Price evaluation (max 80 pts) using the formula provided (price points calculated against the lowest acceptable bid). Prices must be firm, inclusive of VAT, and market‑related.

Stage 5 – Supplier Vetting: Any failure in vetting (black‑list, conflict of interest, unresolved tax issues, etc.) results in disqualification.

Scope: Design, implement, configure, integrate and support an enterprise‑wide data‑masking solution (on‑prem, cloud, hybrid) for 11 applications (~10 TB).

Required functionalities:

• Static data masking (data at rest).
• Dynamic data masking (real‑time).
• Tokenisation.
• Anonymisation.
• Role‑Based Access Control (granular, policy‑based).
• Data discovery & classification.
• Masking of structured and semi‑structured data.
• Integration with Microsoft 365 Directory, Azure AD, SSO and other directory services.
• Audit, logging and real‑time/scheduled reporting.

Deliverables include detailed design documents, implementation plan, baseline assessment, risk register, executive summary, technical implementation report, operational manuals, SOPs, training, UAT plan, post‑implementation review, maintenance plan and enterprise‑wide licence.

Support: 6‑week post‑go‑live stabilisation, defined SLA response times (P1 30 min/4 h, P2 1 day/8 h, P3 4 days/2 days, P4 8 days/3‑5 days).

• Pricing must be submitted on the Pricing Schedule (Annexure H) – firm, unconditional, inclusive of VAT.
• Bid validity: 120 calendar days from the closing date.
• No explicit requirement for performance bonds or guarantees is stated in the extracted text.
• Payment terms are not detailed; bidders should refer to the Conditions of Contract (Section 11) for final terms.

• Valid Central Supplier Database (CSD) registration (mandatory).
• ISO/IEC 27001 certification (mandatory) and proof of being an accredited OEM/reseller of the solution.
• B‑BBEE certificate (Level 1 minimum) issued by a SANAS‑accredited verification agency; joint ventures must submit a consolidated B‑BBEE certificate.
• For EME/QSE bidders, a sworn affidavit meeting Annexure G requirements is required.
• No additional tax, CIDB, or professional registration requirements are explicitly mentioned.