In terms of Rules 65 of Public Procurement Rules, 2026 Grievance Redressal Committee (GRC) is notified for the subject procurement and notification copy is available on the procuring agency’s website and also available on EPADS v2.0 as well as Authority’s website at (www.ppra.gov.pk).
Pakistan Revenue Automation Pvt Limited (Pakistan Revenue Automation Pvt Limited), Manager
Galaxy Business Center, 2nd Floor, Plot # 266-B, Street # 9, Sector I-9/3, Islamabad, Islamabad Capital Territory
+92-334-531-4503
procurement@pral.com.pk
The following specific data for the procurement of Goods to be procured shall complement, supplement, or amend the provisions in the Instructions to Bidders (ITB). Whenever there is a conflict, the provisions herein shall prevail over those in ITB.
BDS Clause Number
ITB Number
Amendments of, and Supplements to, Clauses in the Instruction to Bidders
BDS Clause Number 1
ITB Number 1.1
Name of Procuring Agency: Pakistan Revenue Automation Pvt Limited (Pakistan Revenue Automation Pvt Limited)
The subject of procurement is: TENDER NO. P-78/2026 PROCUREMENT AND IMPLEMENTATION OF SERVER SECURITY INCLUDING EMAIL AND WEB SECURITY - HYBRID PROXY SOLUTION
Expected commencement date: Friday, December 25, 2026
BDS Clause Number 2
ITB Number 2.1
Financial year for the operations of the Procuring Agency: 2026-27
Name and identification number of the Contract: P153276
BDS Clause Number 3
ITB Number 4.6
JV/Consortium or Association Allowed: No
Number of JV/Consortium Members: Nil
BDS Clause Number 4
ITB Number 7.1
The Bidders may seek clarifications through EPADS v2.0: Clarification Date: Tuesday, October 20, 2026
BDS Clause Number 5
ITB Number 8.1
Any addendum, in case issued, shall be published on Pakistan Revenue Automation Pvt Limited (Pakistan Revenue Automation Pvt Limited) website and on EPADS v2.0.
BDS Clause Number 6
ITB Number9.1
List of documents required along with the bid: No
BDS Clause Number 7
ITB Number 11.1
The qualification criteria to establish the supply / production capability of the bidder.
see Eligibility Criteria
BDS Clause Number 8
ITB Number 7.6
Services and Their related documents:
See section Required Services and Scope of Work
BDS Clause Number 9
ITB Number 13.1 & 13.2
Price schedule will be provided according to the format defined and acquired.
see section price schedule.
BDS Clause Number 10
ITB Number 7.6.2
Specifications:
see section of specifications.
BDS Clause Number 11
ITB Number 13.5
The price shall be Fixed.
BDS Clause Number 12
ITB Number 15.1
Currency of the Bids shall be : PKR
BDS Clause Number 13
ITB Number 16.1
The Bids/Bid Validity period shall be: 90 Days
BDS Clause Number 14
ITB Number 17.1
The amount of Bid Security shall be as defined in Bid Security Section for items and lots given in BDS 6
Instrument of Bid Security Shall be in the Name of : Pakistan Revenue Automation Pvt Limited
The Bid Security shall be in the form of: Pay Order
BDS Clause Number 15
ITB Number 17.3
The Bids security shall be valid for twenty-eight (28) days beyond the expiry of the Bids validity period specified in the bidding documents, for example the bid validity is 180 days so the bid security shall be valid for 180+28 = 208 days.
BDS Clause Number 16
ITB Number 18.1
Alternative Bids to the requirements of the bidding documents will not be permitted.
BDS Clause Number 17
ITB Number 21.1
Bid shall be submitted online on EPADS v2.0 whereas hard copy of the bid security should be submitted to the following;
Galaxy Business Center, 2nd Floor, Plot # 266-B, Street # 9, Sector I-9/3, Islamabad, Islamabad Capital Territory
Bids that are not submitted on EPADS v2.0 shall be disqualified.
The deadline for Bids submission is: Friday, October 23, 2026 03:00 PM
BDS Clause Number 18
ITB Number 26.1
The Bids opening shall take place on EPADS v2.0.
Day : Friday
Date: Friday, October 23, 2026
Time : 03:30 PM
BDS Clause Number 19
ITB Number 32.1
Selection technique adopted will be: Least Cost Based Selection (LCBS)
see Evaluation Criteria
BDS Clause Number 20
ITB Number 49.1
The Performance guarantee shall: 0%.
The Performance Guarantee shall be acceptable in the form of: Nil
BDS Clause Number 21
ITB Number 51.1
Arbitrator shall be appointed by mutual consent of the both parties.
BDS Clause Number 22
ITB Number 53.1
Grievence against this procurement shall be submitted online on EPADS v2.0.
| Bidder's Type | Required Registration |
|---|---|
|
Sole Proprietorship Partnership Firm Company (Private Limited) Company (Public Limited) Company (Holding Company) Company (Limited by Guarantee) State Owned Enterprise (Private Limited) State Owned Enterprise (Public Limited) |
FBR (NTN) FBR (GSTN) |
| Eligibility Criteria | Document |
|---|---|
| The Bidder should be a registered entity in Pakistan in the form of Public Ltd/Private Ltd or any other form permissible under Legal system of Pakistan and should be in business for a tenure of at least Five (05) years. Relevant proof of existence | Yes |
| The Bidder should also be a registered taxpayer, enrolled with concerned tax authorities and enlisted on the active tax payer list of FBR's. (Documentation Proof NTN, Incorporation Certificate, Active Tax Payer, Tax Returns required must be provided in the proposal with proper reference (page No)) | Yes |
| The Bidder should have registered office in Pakistan and shall submit a list of offices/presence having technical resources and support should be provided in Islamabad. (Documentation Proof of List of Offices must be provided with proper reference (page No) in the proposal) | Yes |
| Bidder should possess at least 03 years' experience in the field of providing same solution and support for the similar proposed solution to different reputed organizations. (Documentation proof like Purchase order/ Contract Agreement/ work orders/ LOI/ customer reference/ or equivalent etc. must be provided with proper reference (page No) in the proposal) | Yes |
| Bidder should have experience of at least 03 implementations in Pakistan of the same product out of which at least 01 should be large organization. (Documentation proof like Purchase order/ Contract Agreement/ work orders/ LOI/ customer reference/ or equivalent etc. must be provided with proper reference (page No) in the proposal) | Yes |
| The Bidder should provide audited Profit & Loss (Income Statement) showing Sale volume/ Revenue of company of at least Rs. 50 million aggregated in the last 3 years. In case if audited statement is not available for last year, then Bidder should provide letter from company's CFO or senior management staff confirming that Sale Volume / Revenue of company is at least Rs. 50 million aggregated in the last 3 years. (Documentation proof Annual Audited Report must be provided with proper reference (pa | Yes |
| The Bidder should provide an undertaking on non-judicial stamp paper stating that "the bidder's company is not blacklisted by any Government entity in Pakistan for unsatisfactory past performance, corrupt, fraudulent or any other unethical business practices and also not involved in lawsuits in this regard either current or pending." (The undertaking on legal paper provided by the bidder must cover all points mentioned in the statement above) | Yes |
| Bidder shall provide Declaration of Ultimate Beneficial Owners Information Form as per specimen given in this document. Failing which its bid will not be considered. | Yes |
| Bidder must have Direct Partnership with the principal supplier and also must provide signed and stamped "Manufacturer Authorization Form" and Partnership Certificate from principal supplier as per the requirements (guarantee, warranty and maintenance etc.) stated in the specimen provided in Section - VI Standard Bidding Document. | Yes |
| Bidder/Distributor must have at least two (02) expert level resources of proposed solution, support team and must have relevant experience to supervise and provide expert support and deployment services as per OEM standards and industry best practices. (Documentation proof detailed list of Technical Resources / CVs must be provided with proper reference (page No) in the proposal) | Yes |
Least Cost Based Selection (LCBS)
Weightage
| Technical Evaluation % |
|---|
| 100 |
| Technical Marks | 100 | |
|---|---|---|
| Passing Marks | 100 | |
| Technical Evaluation Criteria | ||
| The proposed solution should be on prem based solution. The proposed solution should have a centralized Web-based management console which administrators use to configure security policy and deploy protection to the enforcement component. The proposed solution should support agent based and agent less environments (Quantitative)(Doc Required) | 5 | |
| The solution should be capable to: 1) Solution should have detection & response capability including but not limited to device isolation, process termination, IOC sweeping. 2) Proposed solution must have support for Windows, Linux and AIX. 3) Proposed solution must provide IPS for Windows, Linux and AIX. 4) Should be able to provide security shield against WebSphere Application Server vulnerabilities. 5) Should be able to provide security shield against Oracle Web Logic. 6) Should be able to identify use of PSEXEC tool through SMB share. 7) Should be able to detect and alert if executable file is being uploaded on a SMB share. 8) Should be able to detect and alert batch file upload on network share. 9) Should be able to identify and alert on suspicious (RDP) possible attempt of brute force. 10) Should be able to prevent access to administration share. 11) Should be able to detect OneDrive, Dropbox, BOX traffic. 12) Should be able to detect download of a file over FTP. (Quantitative)(Doc Required) | 5 | |
| The solution should be capable to: 13) Should be able to detect traffic remote applications like VNC and TeamViewer. 14) The proposed solution must provide firewall feature on Windows, Linux and AIX. 15) The proposed solution must have application control feature to quickly identify new suspicious files. 16) The proposed solution must be able to detect and alert on administrator log-ins on servers. 17) The proposed solution must be able to alert when log file is cleared. 18) The proposed solution must be able to detect PowerShell command execution. 19) Should be able to detect ftp events on AIX. 20) Should be able to detect ftp event on Windows. 21) Should be able to detect hosts file modification on Windows. 22) Should be able to detect file attribute changes in /usr/bin and /user/sbin on Unix. 23) Should be able to detect change in the attribute Permissions of any log file under /var/log path. 24) Should be able to alert when command history is cleared (Quantitative)(Doc Required) | 5 | |
| The solution should be capable to: 25) Should be able to detect installation of root certificate. 26) Should be able to detect removable devices on Linux. 27) Should be able to identify create and delete activity of users and groups. 28) Should be able to detect when task scheduler entries are modified. 29) Should be able to detect when Windows start up programs are modified. 30) Should be able to detect when a software is installed or uninstalled on Unix. 31) Should be able to detect files created by Oracle server when modified. 32) Should be able to provide lock-down ability (to block all new executable) if needed on Linux. 33) Should be able to provide information on the user and process associated with launching of executable. 34) Should be able to provide a way to block suspicious list of hashes on Linux. 35) Should be able to list down the vulnerabilities being protected with relevant CVE and CVSS score. 36) Should be able to provide a mechanism to block suspicious web traffic. 37) solution should be capable to monitor TPM signatures and raise Alerts if changes are detected (Quantitative)(Doc Required) | 5 | |
| Anti-Malware: 1) Solution must provide real-time and scheduled anti-malware protection for Windows and Linux, including behavior-based ransomware detection, machine-learning-based zero-day detection, and blocking of known command-and-control (C&C) domains. (Quantitative)(Doc Required) | 5 | |
| Intrusion Prevention System: 1) Solution must provide network-based Intrusion Prevention (IPS) with virtual-patching capability for Windows, Linux, and etc., including shielding of known vulnerabilities in third-party application servers (e.g., IBM, Oracle) pending permanent patching. 2) Solution must provide a mechanism to list all vulnerabilities currently shielded by IPS rules, with associated CVE ID and CVSS score, for audit and compliance reporting. 3) Solution must detect FTP-based file transfer activity (including downloads) on Windows and etc., via protocol inspection or log correlation. 4) Solution must detect network traffic associated with unauthorized remote-access tools (e.g., VNC, TeamViewer) (Quantitative)(Doc Required) | 5 | |
| Firewall: 1) Solution must provide a bidirectional, stateful host firewall for Windows, Linux and AIX, with policy-based ability to restrict access to administrative shares and other high-risk lateral-movement paths (Quantitative)(Doc Required) | 5 | |
| Web Reputation: 1) Solution must provide URL/domain reputation-based filtering to block access to known-malicious or suspicious web destinations. (Quantitative)(Doc Required) | 3 | |
| Integrity Monitoring: 1) Solution must provide real-time File/Directory/Registry Integrity Monitoring across Windows, Linux, covering OS-critical paths (e.g., hosts file, /usr/bin, /usr/sbin, /var/log permissions), with support for custom rules on network share directories (including detection of specific file types such as executables and batch files) and third-party application paths (e.g., Oracle). 2) Solution must detect and alert on persistence, evasion, and identity-related configuration changes — including scheduled-task modification, startup/Run-key changes, root certificate installation, command-history/log clearing, and creation/deletion of users and groups, as well as software install/removal events on Unix (Quantitative)(Doc Required) | 2 | |
| Log Inspection: 1) Solution must correlate OS and application logs to detect and alert on suspicious authentication and administrative activity — including RDP brute-force attempts, administrator logons, and use of remote administration/lateral-movement tools (e.g., PsExec) over SMB. 2) Solution must detect and alert on log-tampering events (e.g., Windows Event Log cleared) and script-based execution activity (e.g., PowerShell command/script-block execution) (Quantitative)(Doc Required) | 2 | |
| Application Control: 1) Solution must provide Application Control capable of detecting new/unauthorized executables in real time, with user- and process-level context at execution, and a lockdown mode to block all unrecognized executables on Linux. 2) Solution must support custom allow/deny rules for Application Control, including hash-based blocklisting, on Linux (Quantitative)(Doc Required) | 2 | |
| Device Control: 1) Solution must provide Device Control to detect and restrict removable storage devices and optical media (USB, CD/DVD) on Windows endpoints (Quantitative)(Doc Required) | 1 | |
| Email Security Gateway (Email User License = 1,050), 1. The proposed solution must be a complete email gateway solution including an on-premise hardware based sandboxing capability within a single box. 2.The proposed solution must be deployed in HA.. 3.Single quoted appliance must be able to process [150,000] emails per day. 4.The appliance must also support NIC teaming to enable fault tolerance in the event of a network interface failure. 5.The proposed solution must act as SMTP relay / MTA and must include spam filtering engine, IP reputation/RBL feature, SPF, DKIM and DMARC feature and should provide marketing/graymail filter. 6.The proposed solution must include DKIM signing capability for outbound emails. 7.The proposed solution vendor must have its own malware scan engine to avoid detection dependency on third-party scan engines. (Quantitative)(Doc Required) | 5 | |
| The proposed solution should be able to offer following settings for proper SMTP relay MTA configuration: a) Message Delivery detailed Reports, b) Configuring SMTP Connection Settings, c) Configuring Message Delivery Settings, d) Configuring Limits and Exceptions, e) Configuring the SMTP Greeting Message, f) Edge MTA Relay Servers, The proposed solution should provide End-User Quarantine feature to improve spam management. Messages that are determined to be spam should be available for users to review, delete or approve for delivery. The solution should be able to automatically send digest notifications to end-users (Quantitative)(Doc Required) | 5 | |
| The proposed solution should provide ability to generate reports: a) Daily, b) Weekly, c) Monthly, The proposed solution must be able to detect fraud/business email compromise attacks and it should be possible to select specific high-profile users to detect possible fraud/business email compromise attacks. The proposed solution must have the ability to identify anomalies by correlating signals across different detection layers. (Quantitative)(Doc Required) | 3 | |
| The proposed solution must provide high level view of threat monitoring via dashboard: a) Attack Sources, b) High-Risk Messages, c) Detected Messages, d) Advanced Threat Indicators, (Quantitative)(Doc Required) | 2 | |
| The proposed solution must provide high level view of system status via dashboard: a) Processing Volume, b) Hardware Status (Quantitative)(Doc Required) | 1 | |
| The proposed solution must provide high level view of top trends via dashboard, The proposed solution should provide at-least the following logs: a) Email Message Tracking, b) MTA Events, c) System Events, d) Message Queue Logs, e) Email Submission Logs, f) Time-of-Click Protection Logs (Quantitative)(Doc Required) | 2 | |
| The proposed solution must utilize multiple detection engines and sandbox simulation to investigate file attachments, The solution must detect malicious files, including password-protected archives and password-protected document files, The solution must be able to decrypt password-protected Office files for analysis, The solution must be able to decrypt password-protected PDF files for analysis (Quantitative)(Doc Required) | 2 | |
| The solution should be able to detect threats masqueraded in shortened URLs, The proposed solution should be able to take action on the suspicious email messages like block, quarantine & delete, Should have the capability to whitelist certain email messages to pass through to the recipient, The solution should also be capable to strip suspicious attachments, redirect suspicious links to blocking or warning pages and tag the email with a customized string, The solution must be able to send copies of malicious detected email messages to archive servers, The proposed solution should be able to effectively block content that is specified as inappropriate from reaching recipients by analyzing both the message content and attachments (Quantitative)(Doc Required) | 3 | |
| The proposed solution should also be able to prevent sensitive content being sent outside by analyzing message content and attachments, Proposed solution should have DLP templates for data leakage over email, The proposed solution sandbox must support Windows 11 image, The proposes solution sandbox must support Windows Server 2019 image, The proposed solution sandbox must support Linux image, The sa, ndbox analysis must be able to detect deception and social engineering, The proposed solution must be able to provide detection of zero-day threats, The proposed solution must be able to detect embedded exploit code, The proposed solution must detect unknown risks through digital DNA fingerprinting and API mapping, The proposed solution must have the ability to detect image based QR code phishing attacks (Quantitative)(Doc Required) | 2 | |
| Web Security – Hybrid Proxy (User License: 500): The proposed solution must support secure access control for both Internet facing and internal application resources using zero trust principles, The proposed solution must be deployed in High Availability., Secure Internet access control solution is required for 500 users, The proposed solution must provide visibility into Internet access and browsing, The proposed solution must provide secure access to external websites, The proposed solution must protect both corporate and BYOD, The proposed solution must support cloud proxy service for roaming users, The proposed solution must allow restricting access to external websites and applications, The proposed solution must allow integration with Identity and Access Management System (Quantitative)(Doc Required) | 5 | |
| The proposed solution must allow the ability to add local user accounts, The proposed solution must support agent-based enforcement for Internet, The proposed solution must have the ability use PAC files for traffic forwarding, The proposed solution must allow configuration of corporate network locations to ensure proper identification of Internet traffic of users, The proposed solution must include functionality to detect emerging advanced threats, The proposed solution must provide machine learning to detect unknown threats, The proposed solution must provide the threat intelligence to detect botnets. (Quantitative)(Doc Required) | 3 | |
| The proposed solution must be able to scan upto 10 compression layers, The proposed solution must provide cloud sandbox analysis feature, The proposed solution must include web reputation feature to block suspicious websites automatically, The proposed solution must include data loss prevention (DLP) rules to scan outbound web traffic for sensitive data. (Quantitative)(Doc Required) | 2 | |
| The proposed solution must include data loss prevention templates, The proposed solution must include the ability to create customize templates using expressions, The proposed solution must include the ability to create customize templates using file attributes, The proposed solution must include the ability to create customize templates using keyword lists, The proposed solution must allow device posture checking before allowing Internet access, The device posture checking should be available for Windows, MacOS, Android and iOS/iPadOS (Quantitative)(Doc Required) | 2 | |
| The proposed solution must support URL categories for quick control, The proposed solution must support cloud application categories for quick control, The proposed solution must allow custom URL categories for deeper control, The proposed solution must allow custom cloud application categories for deeper control, The proposed solution must provide the ability to provide more control on specific resource by blocking certain features instead of blocking the entire resource, (Quantitative)(Doc Required) | 2 | |
| The proposed solution must allow blocking of file upload on Youtube, The proposed solution must allow blocking of commenting post on Youtube, The proposed solution must allow blocking of creating post on Linkedin, The proposed solution must allow blocking of uploading file on Linkedin (Quantitative)(Doc Required) | 1 | |
| The proposed solution must provide monitor, warn, block and allow as action for cloud applications, The proposed solution must provide monitor, warn, block and allow as action for URLs, The proposed solution must all, ow HTTPS inspection, The proposed solution must allow safe search functionality on Google, Yahoo and Bing Search Engines, The proposed solution must allow safe search functionality on Youtube, The proposed solution must have bandwidth control feature for corporate users (Quantitative)(Doc Required) | 5 | |
| The proposed solution must support both upstream and downstream bandwidth throttling for corporate users, The proposed solution must allow bandwidth control on specific traffic, The proposed solution must secure all access across internal and cloud applications from any user, device, location, at any time, The proposed solution must ensure that only authenticated users with compliant devices can connect to authorized applications and network resources at a given location and time, The proposed solution must manage user risk and control access by providing private access rules to control access to private or internal apps, including private cloud apps (Quantitative)(Doc Required) | 5 | |
| The proposed solution must enforce private access rules with connector virtual appliances associated with each private app, The proposed solution must manage user risk and control access by providing Internet access rules control access to the internet, such as blocking certain kinds of risky sites or public cloud apps, The proposed solution must enforce internet access rules with an Internet Access Gateway, The proposed solution must provide risk control rules to control user accounts and devices based on risk scores (Quantitative)(Doc Required) | 5 | |
Positions Without Lots :
| Position | Delivery Schedule | Quantity | Bid Security |
|---|---|---|---|
| Procurement, implementation and support services for Server Security including Email and Web Security – Hybrid Proxy Solution for 03 years. | Address: PRAL Head Office, Islamabad Schedule: 4-6 Weeks Quantity: 1/job |
1/job | 2500000 PKR |
No
Positions Without Lots :
Position: Procurement, implementation and support services for Server Security including Email and Web Security – Hybrid Proxy Solution for 03 years.
Specifications / Requirements:
Technical Requirement Bidder's quote shall comply with the required minimum Technical Requirements, as any alternate or additional proposition will not be considered for evaluation and its bid will be considered as Technically Non-Responsive. • For all bidder's requirements against which Bidder is responding “Y”, all bidders are required to provide Documentation with proper reference (Section No/ Page No) in the proposal against all requirements. It is mandatory to provide proper reference of document. • Bids will be considered non-responsive if bidder's response with ‘N’ / ‘No’ or incomplete response against any of the below criteria. • PRAL will only raise clarification queries against requirements where reference is provided, and further clarification is required. In case no reference is provided, and documents are not available in the submitted proposal, PRAL may not raise any clarification query and response will be considered as NIL, which may lead to disqualification. • All bidders are required to affix their company's stamp/signature on each page of the submitted Technical Requirements. Procurement, implementation and support services for Server Security including Email and Web Security – Hybrid Proxy Solution for 03 years.PROCUREMENT AND IMPLEMENTATION OF SERVER SECURITY INCLUDING EMAIL AND WEB SECURITY – HYBRID PROXY SOLUTION
1. Scope of the Solution and Requirements:
PRAL intends to procure an integrated security solution comprising server security featuring exploit prevention, mail box security, and web traffic protection delivered through a hybrid proxy.
1.1. Delivery:
Delivery will be considered accomplished when the complete solution along with licenses and accessories are delivered.
1.2. Installation:
Installation will be considered accomplished when proposed hardware equipment will be installed at FBR DC Islamabad.
1.3. Integration:
Integration means that all necessary configuration of the proposed solution is according to the purchaser’s requirement and ready for use.
1.2. Accessories:
Bidder will provide all other related accessories including hardware / cable / software / licenses / subscriptions (if any) which are necessary for the proper and smooth working of the proposed solution.
1.3. Operational Acceptance:
Operational Acceptance means that the offered solution has been installed, configured, integrated and operational after testing in accordance with the standard procedure provided by the OEM.
1.4. Training and Documentation:
The bidder/supplier will provide formal hands-on training and documentation to all the relevant personnel at no additional cost to the purchaser.
1.5. Professional Services:
Bidder/supplier should provide professional services with proven methodology from its principal for the implementation of the proposed solution.
PROCUREMENT AND IMPLEMENTATION OF SERVER SECURITY INCLUDING EMAIL AND WEB SECURITY – HYBRID PROXY SOLUTION
For Individual Positions
| # | Position Title | Quantity | Unit Price (PKR) | Total Price (PKR) | Delivery Location | Delivery Period / Year | Country of Origin |
|---|---|---|---|---|---|---|---|
| 1 | |||||||
| 2 |
| # | Lot Title | Total Lot Price (PKR) | Country of Origin |
|---|---|---|---|
| 1 | [Lot 1 Title] |
The following Special Conditions of Contract shall supplement the General Conditions of Contract. Whenever there is a conflict, the provisions herein shall prevail over those in the Conditions of Contract. The corresponding clause number of the GCC is indicated in parentheses.
Number of GC Clause
Amendments of, and Supplements to, Clauses in the General Conditions of Contract
Definitions
The Procuring Agency is: Pakistan Revenue Automation Pvt Limited (Pakistan Revenue Automation Pvt Limited), Manager Galaxy Business Center, 2nd Floor, Plot # 266-B, Street # 9, Sector I-9/3, Islamabad, Islamabad Capital Territory
Contractor is:
The title of the subject procurement is:TENDER NO. P-78/2026 PROCUREMENT AND IMPLEMENTATION OF SERVER SECURITY INCLUDING EMAIL AND WEB SECURITY - HYBRID PROXY SOLUTION
Number of GC Clause 2
Applicable/Governing Law:
The Contract shall be interpreted in accordance with the laws of Islamic Republic of Pakistan
Number of GC Clause 3
Language:
The language of the Contract, all correspondence and communications to be given, and all other documentation to be prepared and supplied under the Contract shall be in English.
Number of GC Clause 4
Notices:
The addresses for the notices are:
Procuring Agency:
Pakistan Revenue Automation Pvt Limited (Pakistan Revenue Automation Pvt Limited), Manager
Galaxy Business Center, 2nd Floor, Plot # 266-B, Street # 9, Sector I-9/3, Islamabad, Islamabad Capital Territory
+92-334-531-4503
procurement@pral.com.pk
Contractor/ Bidder:
[Name, address and telephone number].
The Contractor/ Bidder’s Representative(s)
[Name, address, telephone number and e-mail address]
Number of GC Clause 6.1
The Authorized Representatives are:
For the Procuring Agency:
Pakistan Revenue Automation Pvt Limited (Pakistan Revenue Automation Pvt Limited), Manager
Galaxy Business Center, 2nd Floor, Plot # 266-B, Street # 9, Sector I-9/3, Islamabad, Islamabad Capital Territory
+92-334-531-4503
procurement@pral.com.pk
For the Bidder:
Name: ………………………
Designation: ……………..
Address: ……………………………..
Number of GC Clause 7
Effectiveness of the contract
The Contractor/Bidder shall be effective within ….. days from the date of signature of the Contract by both parties
Number of GC Clause 8
Commencement of Contract:
The Contractor/ Bidder shall provide Non-Consultancy Services from the effective date of contract.
Number of GC Clause 10.2
Expiration of Contract:
The time period shall be ………………….
Number of GC Clause 14
Termination
In the event of termination of the contract due to any reason as already defined in the General Conditions of Contract, the Bidder shall be responsible for providing to the Authority the Goods till the time of alternate arrangements.
Number of GC Clause 16
Conflict of Interest:
The Procuring Agency reserves the right to determine on a case-by-case basis whether the Bidder should be disqualified from providing goods or services due to a conflict of a nature described in Clause GCC 16.
Number of GC Clause 20
Liquidated Damages
If the Bidder fails to provide services as required under the contract or in case of any data loss/data breach or any incident compromising the data security or other such failures related to any services, the Bidder shall pay to the Procuring Agency as Liquidated Damages at a rate of 0.01% to 5.00% of the Contract value, in accordance with the extent of performance failure & the cost of investigating such incidents as judged by the Authority.
Number of GC Clause 21
Performance Guarantee:
Instrument of Performance Guarantee shall be in the Name of : Nil
The amount of performance guarantee shall be 0% of the contract price in acceptable form of Nil
Number of GC Clause 27
Currency of Payment:
All the payment to be released to the contractor/Bidder shall be in Pakistani Rupees.
Number of GC Clause 28
Payment terms:
Payment will be made to the Bidder against the procured Goods and services according to the actual invoice or running bills submitted by the Bidder against the services provided within the time given in the conditions of the contract.
Number of GC Clause 29
Identifying Defects:
The Authority reserves the right at any time to inspect the premises of the provider to inspect the goods and monitor the goods being provided.
Number of GC Clause 31
Following is the guidance for Dispute Resolution
Notwithstanding any reference to the arbitration herein, the parties shall continue to perform their respective obligations under the Contract unless they otherwise agree that the Authority shall pay the Bidder any monies due to the Bidder.
Arbitrator’s fee:
The fee shall be specified in Pak Rupees, as determined by the Arbitrator, which shall be shared equally by both parties.
Appointing Authority for Arbitrator:
By the Mutual Consent or in accordance with the provisions of Arbitration Act, 1940, in case the parties fail to reach a consensus on the name of sole arbitrator, any party may submit an application to the Chief Justice Islamabad High Court for appointment of sole arbitrator. The Chief Justice IHC may appoint a former judge of any High Court or Supreme Court as the sole arbitrator to resolve the dispute between the parties.
Rules of procedure for arbitration proceedings:
Any dispute between the Authority and a Bidder who is a national of the Islamic Republic of Pakistan arising in connection with the present Contract shall be referred to adjudication or arbitration in accordance with the laws of the Islamic Republic of Pakistan including Arbitration Act 1940, however above provision shall prevail in referring the case to the Arbitrator.
Place of Arbitration and Award:
The arbitration shall be conducted in English language and place of arbitration shall be at Islamabad. The award of the arbitrator shall be final and shall be binding on the parties.
Date: [insert date (as day, month and year)]
Bid No.:P153276
To: Pakistan Revenue Automation Pvt Limited (Pakistan Revenue Automation Pvt Limited), Manager Galaxy Business Center, 2nd Floor, Plot # 266-B, Street # 9, Sector I-9/3, Islamabad, Islamabad Capital Territory
We, the undersigned, declare that:
We understand that, according to your conditions, Bids must be supported by a Bid Securing Declaration.
We accept that we will be blacklisted and henceforth cross debarred for participating in respective category of public procurement proceedings for a period of (not more than) six months, if fail to abide with a bid securing declaration, however without indulging in corrupt and fraudulent practices, if we are in breach of our obligation(s) under the Bid conditions, because we:
We understand this Bid Securing Declaration shall expire if we are not the successful
Bidder, upon the earlier of (i) our receipt of your notification to us of the name of the successful Bidder; or (ii) twenty-eight (28) days after the expiration of our Bid.
THIS AGREEMENT made the _____ day of __________ 20_____ between Pakistan Revenue Automation Pvt Limited (Pakistan Revenue Automation Pvt Limited), Manager Galaxy Business Center, 2nd Floor, Plot # 266-B, Street # 9, Sector I-9/3, Islamabad, Islamabad Capital Territory
(hereinafter called “the Procuring Agency”) of the one part and [name of Bidder] of [city and country of Bidder] (hereinafter called “the Bidder”) of the other part:
WHEREAS the Procuring Agency invited Bids for provision of goods, viz., TENDER NO. P-78/2026 PROCUREMENT AND IMPLEMENTATION OF SERVER SECURITY INCLUDING EMAIL AND WEB SECURITY - HYBRID PROXY SOLUTION (P153276) and has accepted a Bids by the Bidder for the provision of Services in the sum of [contract price in words and figures] (hereinafter called “the Contract Price”).
NOW THIS CONTRACT WITNESSETH AS FOLLOWS:
1. In this Contract words and expressions shall have the same meanings as are respectively assigned to them in the Conditions of Contract referred to.
2. The following documents shall be deemed to form and be read and construed as part of this Contract, In the event of any ambiguity or conflict between the Contract Documents listed below, the order of precedence shall be the order in which the Contract Documents are listed below:-
3. In consideration of the payments to be made by the Procuring Agency to the Bidder as hereinafter mentioned, the Bidder hereby covenants with the Procuring Agency to provide the Goods related services and to remedy defects therein in conformity in all respects with the provisions of the Contract.
4. The Procuring Agency hereby covenants to pay the Bidder in consideration of the provision of Goods and the remedying of defects therein, the Contract Price or such other sum as may become payable under the provisions of the contract at the times and in the manner prescribed by the contract.
IN WITNESS whereof the parties hereto have caused this Contract to be executed in accordance with their respective laws the day and year first above written.
Signed, sealed, delivered by __________________the ________________ (for the Procuring Agency)
Witness to the signatures of the Procuring Agency:
………………………………………………
Signed, sealed, delivered by __________________the ________________ (for the Procuring Agency)
Witness to the signatures of the Bidder: …………………………………………………
Contract Number: Contract Value: Contract Title:
Dated:
[Name of Supplier] hereby declares that it has not obtained or induced the procurement of any contract, right, interest, privilege or other obligation or benefit from Government of Pakistan or any administrative subdivision or agency thereof or any other entity owned or controlled by it (GoP) through any corrupt business practice.
Without limiting the generality of the foregoing [Name of Supplier] represents and warrants that it has fully declared the brokerage, commission, fee etc. paid or payable to anyone and not given or agreed to give and shall not give or agree to give to anyone within or outside Pakistan either directly or indirectly through any natural or juridical person, including its affiliate, agent, associate, broker, consultant, director, promoter, shareholder, sponsor or subsidiary, any commission, gratification, bribe, finder's fee or kickback, whether described as consultations fee or otherwise, with the object of obtaining or inducing the procurement of a contract, right, interest, privilege or other obligation or benefit in whatsoever form from GoP, except that which has been expressly declared pursuant hereto.
[Name of Supplier] certifies that it has made and will make full disclosure of all agreements and arrangements with all persons in respect of or related to the transaction with GoP and has not taken any action or will not take any action to circumvent the above declaration, representative or warranty.
[Name of Supplier] accepts full responsibility and strict liability for making and false declaration, not making full disclosure, misrepresenting fact or taking any action likely to defeat the purpose of this declaration, representation and warranty. It agrees that any contract, right interest, privilege or other obligation or benefit obtained or procured as aforesaid shall, without prejudice to any other right and remedies available to GoP under any law, contract or other instrument, be voidable at the option of GoP.
Notwithstanding any rights and remedies exercised by GoP in this regard, [Name of Supplier] agrees to indemnify GoP for any loss or damage incurred by it on account of its corrupt business practices and further pay compensation to GoP in an amount equivalent to ten time the sum of any commission, gratification, bribe, finder's fee or kickback given by [Name of Supplier] as aforesaid for the purpose of obtaining or inducing the procurement of any contract, right, interest, privilege or other obligation or benefit in whatsoever form from GoP.
To: Pakistan Revenue Automation Pvt Limited (Pakistan Revenue Automation Pvt Limited), Manager Galaxy Business Center, 2nd Floor, Plot # 266-B, Street # 9, Sector I-9/3, Islamabad, Islamabad Capital Territory
WHEREAS [name of Bidder] (hereinafter called “the Bidder”) has undertaken, in pursuance of Contract No. [reference number of the contract] dated [insert date] for provision of Non-Consultancy Services(hereinafter called “the Contract”).
AND WHEREAS it has been stipulated by you in the said Contract that the Bidder shall furnish you with a Bank Guarantee by a reputable bank for the sum specified therein as security for compliance with the Bidder’s performance obligations in accordance with the Contract.
AND WHEREAS we have agreed to give the Bidders guarantee:
THEREFORE, WE hereby affirm that we are Guarantors and responsible to you, on behalf of the Bidder, up to a total of [amount of the guarantee in words and figures], and we undertake to pay you, upon your first written demand declaring the Bidder to be in default under the Contract and without cavil or argument, any sum or sums within the limits of [amount of guarantee] as aforesaid, without your needing to prove or to show grounds or reasons for your demand or the sum specified therein.
This guarantee is valid until the: [insert date]
Signature and seal of the Guarantors
_____________________________________________________________________
[name of bank or financial institution]
_____________________________________________________________________
[address]
_____________________________________________________________________
[date}