Request for information for maintenance, support, enhance and further development of the existing national treasury safetyweb banking system for a period of three (3) years

No eligibility criteria specified

provisions

in the SCC shall prevail.

Table of clauses

1. Definitions
2. Application
3. General
4. Standards
5. Use of contract documents and information; inspection
6. Patent rights
7. Performance security
8. Inspections, tests and analysis
9. Packing
10. Delivery and documents
11. Insurance
12. Transportation
13. Incidental services

No specific requirements found

{"name":null,"email":null,"phone":null,"department":"SUPPLY CHAIN MANAGEMENT","address":null}

Bidders must complete and sign SBD 4 (Bidder's Disclosure). Bidders listed on the Register for Tender Defaulters or the List of Restricted Suppliers are automatically disqualified. Bidders must not have consulted with any official of the procuring institution prior to or during the bidding process except to provide clarification, and must not have been involved in drafting the specifications or terms of reference.

Supply chain management system should

This declaration prove to be false.

.................................... .....................................................

Signature Date

.................................... ......................................................

Position Name of bidder

Bidders must not have consulted with any official of the procuring institution prior to or during the bidding process except to provide clarification, and must not have been involved in drafting the specifications or terms of reference.

The National Treasury, through the Office of the Accountant-General (OAG), invites suitably qualified service providers to submit a Request for Information (RFI) for the maintenance, support, enhancement, and further development of the existing National Treasury-owned SafetyWeb Banking System for a period of three years. The SafetyWeb Banking System is a critical banking, payment validation, and fraud prevention application that supports banking services provided by the OAG. It is used by NT Pay Master General (PMG) users and authorised users from National Departments and other participating government entities. The system processes transactions exceeding approximately R400 billion per month and provides critical controls to identify duplicate, invalid, unauthorised, and potentially fraudulent payment transactions. The service provider will be appointed solely to provide maintenance, support, enhancement, and further development services and will not acquire any ownership rights, intellectual property rights, or proprietary interests in the system.

Closing date: 04 September 2026 at 11:00. No other dates (briefings, site visits, clarification deadlines) are stated.

No contact information is provided in the document.

This is a Request for Information (RFI), not a formal tender. No specific submission method or address is stated in the document. Bidders should submit their response by the closing date and time. The document does not list any mandatory returnable forms for this RFI.

No formal evaluation criteria are stated for this RFI. The purpose is information gathering to inform a future procurement. The document requests information on company profile, years in operation, office locations, relevant experience (at least three comparable projects in the past five years), technical capability, service delivery model, service levels, project management, resource requirements, reporting and governance, technical debt management, innovation, and commercial/pricing model.

The SafetyWeb Banking System is a critical banking, payment validation and fraud prevention application used by the Office of the Accountant-General (OAG). It processes transactions exceeding approximately R400 billion per month. The system supports daily local and foreign payments in ISO 20022 layout, electronic verification of banking details (including CSD, SASSA, GEPF), daily EFT reports, cash management reports, daily electronic bank statements to at least 83 bank accounts, monitoring of grant payments, and monthly requests for funds. The technical environment includes: Microsoft Windows Server 2025 Standard, IIS, .NET Framework 4.8.1, Microsoft SQL Server 2022, and interfaces with Connect, web services, SARB, commercial banks, CSD, SASSA, GEPF, and other government systems. The service provider will be expected to provide maintenance, support, enhancements, further development, database administration, infrastructure support, systems integration, incident/problem/change management, testing, security, project management, knowledge transfer, and business continuity/disaster recovery support. The service provider must support the system during NT business hours every working day, including the Christmas/New Year period when OAG remains operational, and must indicate after-hours, weekend, and public holiday support arrangements for Priority 1 incidents. Priority 1 incidents should be corrected within a maximum of 8 hours.

The service provider must describe their proposed service delivery model, including incident management, problem management, change management, release management, configuration management, call logging and help desk services, escalation procedures, service continuity, and knowledge transfer. They must recommend an appropriate Service Level Agreement (SLA) framework, including proposed support hours and availability, incident priority classifications, response and resolution times for each priority level, escalation procedures, system availability targets, planned maintenance windows, service performance monitoring and reporting, and recommended KPIs. The service provider must describe their proposed project management methodology, how technical resources would be managed, how upgrades and maintenance activities would be coordinated, how project risks would be identified and managed, and the approach to stakeholder communication and reporting. They must also describe their proposed reporting and governance framework, including operational reporting, SLA reporting, development and enhancement reporting, testing and quality assurance reporting, release and deployment reporting, executive reporting, review meetings, and performance measurement.

The service provider must provide company information including company profile, number of years in operation, office locations, and details of relevant experience in providing similar services. They must include details of at least three comparable projects undertaken during the past five years and provide details of their experience in supporting mission-critical banking or financial systems, public sector financial management systems, Microsoft-based application environments, Microsoft SQL Server databases, web-enabled applications, Connect Direct environments, managing interfaces with banking institutions and government systems, providing application maintenance and production support, and supporting payment validation, fraud detection, or fraud prevention systems within banking or government payment environments.

The service provider must establish and maintain appropriate testing processes to ensure all software changes are adequately tested before deployment into production. Testing must include unit testing, system testing, integration testing, regression testing, User Acceptance Testing (UAT) support, performance testing, security testing, and production verification testing. No enhancement, upgrade, or software release shall be implemented into the production environment without documented approval and sign-off from the NT's authorised business and technical representatives in accordance with approved change management procedures. The service provider must maintain comprehensive technical and user documentation and provide knowledge transfer to NT personnel. The service provider must also implement effective incident, problem, and change management processes, including call logging, issue tracking, root cause analysis, change control, release management, and reporting. The call logging system must provide a central point for logging, allocation, monitoring, escalation, and reporting of all support-related activities, and must be available for use by the NT and relevant stakeholders for the duration of the contract.

The NT requires a comprehensive managed service model based on a fixed monthly fee arrangement for the ongoing maintenance, support, enhancement, modernisation, and further development of the existing system. The service provider will be responsible for delivering all required services, resources, and activities necessary to maintain, support, and continuously improve the SafetyWeb Banking System within the agreed fixed monthly fee. The fixed monthly fee must include all services, activities, resources, and deliverables required, including application maintenance and support, incident/problem/change/release management, provision and management of a call logging and service management system, system enhancements and further development, system upgrades, development of new functionality, maintenance of payment validation and fraud prevention controls, database administration, technical environment support, coordination with NTICT, software development lifecycle activities, project management, service management, reporting, governance, technical debt management, and any other activities reasonably required. No separate charges shall be applicable for the provision, licensing, operation, maintenance, or support of the call logging and service management system.

The NT requires a comprehensive managed service model based on a fixed monthly fee that includes all services, resources, and activities necessary to maintain, support, enhance, and further develop the SafetyWeb Banking System. The fixed monthly fee must include all maintenance, enhancements, upgrades, new functionality, technical improvements, legislative changes, and other approved development activities. The service provider must provide and maintain a call logging and service management system as part of the fixed monthly fee, with no separate charges. The service provider must confirm capacity to provide all required resources as part of the fixed monthly fee.

No formal compliance requirements are stated for this RFI. The document mentions that all resources assigned to the contract must be available for security vetting where required by the NT or other authorised government authority. The service provider must cooperate fully with such vetting processes.

The RFI is issued solely for information-gathering purposes and does not constitute a commitment by the NT to procure any services or award a contract. The information received will assist the NT in determining the most appropriate procurement approach and developing comprehensive technical specifications for a future procurement process. The service provider will be expected to apply a structured Software Development Lifecycle (SDLC) for all maintenance, enhancements, upgrades, and new developments, including requirements analysis, technical design, secure development practices, source code management, peer reviews, testing, controlled production deployment, and post-implementation verification. The NT retains full ownership of all source code, documentation, configuration, intellectual property, and related artefacts developed or modified under the contract. The service provider must provide the NT with unrestricted access to the source code repository and hand over all source code at any time upon request and upon contract termination. The SafetyWeb Banking System remains the sole property of the National Treasury, and the service provider is granted access only for the purpose of delivering the contracted services.

No formal evaluation criteria are stated for this RFI. The document requests information on the service provider's capability, experience, service delivery model, and recommendations. The response should include details of at least three comparable projects undertaken in the past five years, covering mission-critical banking or financial systems, public sector financial management systems, Microsoft-based application environments, Microsoft SQL Server databases, web-enabled applications, Connect Direct environments, interfaces with banking institutions and government systems, application maintenance and production support, and payment validation/fraud detection systems. The service provider must also describe technical capability across application maintenance, system enhancements, database administration, server administration, performance monitoring, capacity planning, backup and recovery, vulnerability remediation, web services, Connect Direct, disaster recovery, production support, and payment validation/fraud prevention controls.

The RFI concerns the maintenance, support, enhancement and further development of the existing National Treasury SafetyWeb Banking System for a period of three (3) years.

Closing date: 04/09/2026 at 11:00 AM.

Bidding procedure and technical enquiries may be directed to Supply Chain Management at National Treasury, e-mail: [email protected].

Bids must be submitted online on the e-Tender Portal (https://www.etenders.gov.za/). A tutorial on uploading bid documents is available at https://youtu.be/B7pNseNJYHM. Bids must be submitted by the closing time; late bids will not be considered. All bids must be submitted on the official forms provided, not re-typed. The successful bidder will be required to complete and sign a written contract form (SBD 7).

This is a Request for Information, so no scoring or preference point system is specified. Bidders must be tax compliant and provide a SARS Tax Compliance PIN or a CSD number. Bids will not be considered from persons in the service of the state, companies with directors who are in the service of the state, or close corporations with members in the service of the state.

The subject of this RFI is the maintenance, support, enhancement and further development of the existing National Treasury SafetyWeb Banking System for a period of three (3) years.

Bidders must be tax compliant and submit their unique SARS Tax Compliance Status (TCS) PIN. Alternatively, if no TCS PIN is available, a CSD number must be provided. In consortia, joint ventures or sub-contracting arrangements, each party must submit a separate TCS certificate/PIN/CSD number. Foreign suppliers must complete the questionnaire regarding residency, branch, permanent establishment, source of income, and tax liability in South Africa. Bids from persons in the service of the state, or companies/close corporations with such persons as directors/members, will not be considered.