7. In terms of Rules 48 of Public Procurement Rules, 2004 Grievance Redressal Committee (GRC) is notified for the subject procurement and notification copy is available on the procuring agency’s website and also available on EPADS v2.0 as well as Authority’s website at (www.ppra.org.pk).
National Bank of Pakistan (Compliance Group), SVP
The Office of Departmental Head Tender, Procurement Division-LCMG, 3rd Floor, National Bank of Pakistan, Head Office Building, Karachi.
+92-213-890-2267
teemar@nbp.com.pk
The following specific data for the procurement of Non-Consultancy Services to be procured shall complement, supplement, or amend the provisions in the Instructions to Bidders (ITB). Whenever there is a conflict, the provisions herein shall prevail over those in ITB.
BDS Clause Number
ITB Number
Amendments of, and Supplements to, Clauses in the Instruction to Bidders
BDS Clause Number 1
Name of Procuring Agency: National Bank of Pakistan (Compliance Group)
The subject of procurement is: Trade Based Money Laundering (TBML)
Expected commencement date: Wednesday, March 31, 2027
BDS Clause Number 2
Financial year for the operations of the Procuring Agency: 2026-27
Name and identification number of the Contract: P97471
BDS Clause Number 3
JV/Consortium or Association Allowed: No
Number of JV/Consortium Members: Nil
BDS Clause Number 4
The Bidders may seek clarifications through EPADS v2.0: Clarification Date: Tuesday, September 15, 2026
BDS Clause Number 5
Any addendum, in case issued, shall be published on National Bank of Pakistan (Compliance Group) website and on EPADS v2.0.
BDS Clause Number 6
List of documents required along with the bid:
BDS Clause Number 7
The qualification criteria to establish the supply / production capability of the bidder.
see Eligibility Criteria
BDS Clause Number 8
Services and Their related documents:
See section Required Services and Scope of Work
BDS Clause Number 9
Price schedule will be provided according to the format defined and acquired.
see section price schedule.
BDS Clause Number 10
Specifications:
see section of specifications.
BDS Clause Number 11
The price shall be Fixed.
BDS Clause Number 12
Currency of the Bids shall be : PKR
BDS Clause Number 13
The Bids/Bid Validity period shall be: 180 Days
BDS Clause Number 14
The amount of Bid Security shall be as defined in Bid Security Section for items and lots given in BDS 6
The Bid Security shall be in the form of: Bank Guarantee
BDS Clause Number 15
The Bids security shall be valid for twenty-eight (28) days beyond the expiry of the Bids validity period specified in the bidding documents, for example the bid validity is 90 days so the bid security shall be valid for 90+28 = 118 days.
BDS Clause Number 16
Alternative Bids to the requirements of the bidding documents will not be permitted.
BDS Clause Number 17
Bid shall be submitted online on EPADS v2.0 whereas hard copy of the bid security should be submitted to the following;
The Office of Departmental Head Tender, Procurement Division-LCMG, 3rd Floor, National Bank of Pakistan, Head Office Building, Karachi.
Bids that are not submitted on EPADS v2.0 shall be disqualified.
The deadline for Bids submission is: Thursday, September 24, 2026 11:00 AM
BDS Clause Number 18
The Bids opening shall take place on EPADS v2.0.
Day : Thursday
Date: Thursday, September 24, 2026
Time : 11:30 AM
BDS Clause Number 19
Selection technique adopted will be: Quality and Cost Based Selection (QCBS)
see Evaluation Criteria
BDS Clause Number 20
The Performance guarantee shall: 10.00%.
The Performance Guarantee shall be acceptable in the form of: Banker's Cheque, Bank Guarantee
21.
51.1
Arbitrator shall be appointed by mutual consent of the both parties.
BDS Clause Number 22
Grievence against this procurement shall be submitted online on EPADS v2.0.
| Bidder's Type | Required Registration |
|---|---|
|
Company (Private Limited) |
NADRA CITIZENSHIP (CNIC/NICOP) FBR (NTN) FBR (GSTN) SECP |
| Eligibility Criteria | Document |
|---|---|
| Bidders must have a documented track of at least two (2) live implementations locally or globally of “Trade Based Money Laundering System” and providing Maintenance and Technical support as the direct authorized agent / dealer / partner of the manufacturer in Pakistan. Bidder must provide Reference Letters / Purchase / Work Orders from the customers where the solution is deployed and last implementation details. | Yes |
| The bidders must have verifiable presence/support/branch office in Pakistan. | Yes |
| Bidder must provide audited Profit & Loss (Income Statement) showing Sale volume of company of at least Rs.50 Million in each last 3 years. | Yes |
| Bidder must provide an undertaking on non-judicial stamp paper of 500 Rupees stating that "the bidder's company is not blacklisted by any Government entity in Pakistan for unsatisfactory past performance, corrupt, fraudulent or any other unethical business practices and also not involved in any kind of lawsuits either current or pending." (The undertaking on legal paper provided by the bidder must cover all points in the statement mentioned above). | Yes |
| Bidder must provide 03(three) CV's/Profile of their proposed implementation and configuration team which should be employees of the company since last one year and must have relevant experience for proposed solution | Yes |
| Bidder must have Direct Partnership with the principal supplier and also must provide "Manufacturer Authorization Form / Authorized Partner / Distribution Certificate" from principal supplier as per the requirements (guarantee, warranty and maintenance etc.). | Yes |
| Bidder must provide undertaking that the proposed solution is an international or national level solution. The bidder must also confirm therein that he is content specialist for the proposed solution. | Yes |
| Bidder must be CMMI Level 3 or above compliant or have other equivalent certifications. | No |
| Bidder must provide Solution architecture diagram and technical requirement of proposed solution. | Yes |
| SRB (Sindh revenue Board Certificate) | Yes |
Quality and Cost Based Selection (QCBS)
Weightage
| Technical Evaluation % | Financial Evaluation % |
|---|---|
| 70 | 30 |
| Technical Marks | 100 | |
|---|---|---|
| Passing Marks | 80 | |
| General Requirements | ||
| "Vendor will perform business analysis and customize the software in order to capture relevant requirements and all details necessary for the design of the required solution as per State Bank of Pakistan Framework for Managing Risks of Trade Based Money Laundering and Terrorist Financing issued in 2019, SBP Framework for TBML is here under: Including but not limited to the following: · Implementation of required modules with all features and controls to meet regulatory requirement and minimum human interaction and intervention. · The vendor shall provide plan on training, tutoring, including comprehensive training contents and share all mandatory material to business users and IT Staff including but not limited to provisioning of user manual and administrative guide. · Timely solution to the problem through on-site visit. (Quantitative)(Doc Required) | 1 | |
| The Vendor will ensure smooth implementation of Trade Based Money Laundering System so that the day-to-day activities of Trade Operations, Compliance and Risk Management function will continue uninterrupted. (Quantitative)(Doc Required) | 1 | |
| "Vendor shall implement the following module for NBP TBML system : 1. Price Due Diligence 2. Vessel Tracking 3. Container Tracking 4. Dual Use Goods 5. TBML Scenarios 6. Trade Documents Validation 7. MIS & Dashboards 8. Integration with Bank Systems Each Module should have “Help Option” display for each item with description. Video Tutorial/training material tab on each module." (Quantitative)(Doc Required) | 1 | |
| System must be capable of providing reports for audit trail with time and date stamp (Quantitative)(Doc Required) | 1 | |
| "a) System must be complied with SSDLC checklist (refer: Annexure I) provided by bank's information Security Division(ISD) for Bidder Qualification and Technical Requirements. Bidder also need to complied any new requirement by SBP or NBP ISD during implementation/Go-Live. b) In case of cloud based solution, compliance with SBP regulations should be mandatory. (refer: Annexure II)" (Quantitative)(Doc Required) | 1 | |
| Upon selection of bidder, Functional specification document (FSD) with complete architecture diagram with respect to NBP environment (including communication protocol, authentication mechanism, integration with other components like TI, etc.) should be provided before deployment phase. (Quantitative)(Doc Required) | 1 | |
| Regulation Assessment, Maintenance & Updation | ||
| The vendor shall ensure that the system shall have a process to identify and upgrade the system as per new/ evolving regulatory requirements without additional cost. (Quantitative)(Doc Required) | 1 | |
| Price Due Diligence | ||
| The system shall be capable of evaluating the deviation in pricing between the amount/ value of underline goods/ commodity input in the system based on shipping documents and the prices available on multiple reliable resources which includes but not limited to FBR, PSW, WEBOC, OGRA, Platts of all regions, shipping line data, TDAP, websites, historical appraisement etc. on real time basis in terms of percentage and absolute value as defined in the SBP Framework on TBML issued in 2019. (Quantitative)(Doc Required) | 1 | |
| "The system shall maintain and update the following list - List of goods which are exempt from import-related duties. - list of goods which are subject to over 25% import-related duties This data should be used by system in evaluating price variance. " (Quantitative)(Doc Required) | 1 | |
| "a) The system shall have capability to validate HS code , unit of measure & custom duty against the product description b) The system shall be capable to give alert if the deviation in the price is more than given threshold as per bank policy and subject to change whenever required. c) The system shall be capable to evaluate the deviation all the components of price including but not limited to Unit Price (FoB), Freight & other components like premium etc. Each product has different components of pricing which should be catered accordingly." (Quantitative)(Doc Required) | 1 | |
| The system shall be capable to generated report with complete details with Time and date stamp for audit trail purpose. (Quantitative)(Doc Required) | 1 | |
| Vessel Tracking | ||
| The system shall be capable to provide vessel Information which includes but not limited to Name. AIS Name, IMO number, Country, Country ISO, Type, Year Built, Weigh & Size, Home port, European Number of Identification etc. (Quantitative)(Doc Required) | 1 | |
| The system shall be capable to provide vessel position on real time basis and tracking record which includes but not limited to Last Position, Last Position Date, Region, Nearest Port and its distance, Departure Port, Destination Port, Actual time of Departure, estimated time of arrival, details of instance in case vessel had touched or come close to any sanction port/ country/ vessel, details of instance in case vessel had switched off transponder in past etc. (Quantitative)(Doc Required) | 1 | |
| "a) The system shall be capable to provide vessel Ownership which includes but not limited to Cover Flag, Owner, Manager, Operator, Technical Manager, insurer etc. b) The system shall be capable to verify the Bill of Lading" (Quantitative)(Doc Required) | 1 | |
| The system shall be capable to generate the report with date and time stamp for audit trail. (Quantitative)(Doc Required) | 1 | |
| Container Tracking | ||
| "a) The system shall be capable to provide container information which includes but not limited to type, number, status, sealine name, ISO Code, AT, Transshipment, Sanction country, departure port, Arrival port, Discharge port and IMO, Vessel Flag of vessel in which it is placed etc. b) The system shall be capable to Track containers events like Empty to shipper, arrival at first port of loading, loading and discharge at transshipment (T/S) ports, vessel departure and arrival etc. " (Quantitative)(Doc Required) | 1 | |
| The system shall be capable to search container through various information like Container number, booking number and its tracking and navigation details should be provided by system. (Quantitative)(Doc Required) | 1 | |
| The system shall be capable to provide mapping on real time basis and historical tracking record (Quantitative)(Doc Required) | 1 | |
| Dual Use Goods | ||
| The system shall be capable to identify whether a specific product is subject to import and export control regulation. (Quantitative)(Doc Required) | 1 | |
| The system shall be capable to identify/ detect the underline Good as Dual Use Good by using information like Product Name, CAS number, HS Code, category, sub-category, serial number etc. (Quantitative)(Doc Required) | 1 | |
| The system shall be capable to update the list of Dual Use Goods as per latest regulatory changes. (Quantitative)(Doc Required) | 1 | |
| "The system shall be capable to over complete range of Dual Use Goods by using different list including but not limited to following; - Sec Div - Wassenaar - United States Commerce Control List - United Kingdom Strategic Control List" (Quantitative)(Doc Required) | 1 | |
| TBML Scenarios | ||
| The system shall be capable to detect Red Flags in the transactions on Pre-check and Post-Check basis. (Quantitative)(Doc Required) | 1 | |
| "a) The system shall have comprehensive list of TBML Red Flags including but not limited to Red Flags given by SBP & FMU in their Regulations respectively. b) The system shall have option of Case Management of Alerts." (Quantitative)(Doc Required) | 1 | |
| The system shall have ability to update the Red Flags are the latest guideline, regulations and industry practice. (Quantitative)(Doc Required) | 1 | |
| The system shall have capability to maintain historical records of Red Flags, alerts, scenarios, cases and system changes. (Quantitative)(Doc Required) | 1 | |
| Trade Documents Validation | ||
| The system shall be capable to match GD declared value with the payment against import/ export bills and generate alert in case of deviation. (Quantitative)(Doc Required) | 1 | |
| "a) The system shall be capable to detect deviations between GD declared v/s assessed value b) The system shall be capable to detect deviation between FIs details and GDs. " (Quantitative)(Doc Required) | 1 | |
| The system shall be capable to detect duplication of Invoices, Goods Declaration, Transport Documents already used (Quantitative)(Doc Required) | 1 | |
| MIS & Dashboards | ||
| The system shall be capable to generated meaningful MIS by using available information to give end to end view of trade portfolio and audit trail. (Quantitative)(Doc Required) | 1 | |
| The system shall be capable to formulate different Dashboards to analyze trade data, monitor compliance and extract valuable insight for historical analysis and status updates. (Quantitative)(Doc Required) | 1 | |
| The system shall be capable to generate reports of non-performance and overdue status of import payments and export receipts respectively to meet regulatory requirements. (Quantitative)(Doc Required) | 1 | |
| Integration with Bank Systems | ||
| The system shall be capable to integrate with existing bank system including but not limited to Trade Application (TI+), Account Opening System (AOS), Core Banking System (CBA) for smooth data exchange and process automation. (Quantitative)(Doc Required) | 1 | |
| The system shall restrict duplicate data entry by automating data capture and synchronization across systems through real time connectivity. (Quantitative)(Doc Required) | 1 | |
| Access and Control | ||
| The system shall be capable to implement robust controls to ensure security and confidentiality (Quantitative)(Doc Required) | 1 | |
| The system shall be capable to define user roles, assign permissions as per department/role. (Quantitative)(Doc Required) | 1 | |
| System shall not use built-in super admin ID to run systems operations for routine tasks. (Quantitative)(Doc Required) | 1 | |
| System should be capable to assign limited administrative authority to named authorized application administrators. (Quantitative)(Doc Required) | 1 | |
| System shall be capable of integration with the SIEM solution for information security at NBP. (Quantitative)(Doc Required) | 1 | |
| Performance | ||
| Ability to perform at or above specifications. Fast as possible with acceptable performance in regions with poor internet performance. (Quantitative)(Doc Required) | 1 | |
| System must support multiple users. (Minimum 30 concurrent users) (Quantitative)(Doc Required) | 1 | |
| Support | ||
| Support through multiple mediums. (E.g. Email, fax, telephone, chat, helpdesk portal with ticketing system, etc.) Bidder should have 24x7x365 Corporate Helpline availability for reporting and resolution of all kinds of issues and escalations via including Phone Support, Email Support or Online customer portal to access support tickets for escalation and resolution (Quantitative)(Doc Required) | 1 | |
| Bidder must provide complaint reporting and escalation matrix and/or software solution for NBP to report any issue / complaint and its rectification / resolution in the proposed solution. (Quantitative)(Doc Required) | 1 | |
| Onsite or Virtual Support within Pakistan should be available. (Quantitative)(Doc Required) | 1 | |
| Implementation | ||
| Bidder before the start of implementation must provide hardware and software requirement , the entire installation process / implementation guidelines to NBP, including the installations related to application / database / web server etc., in conjunction with all other suppliers and contractors. (Quantitative)(Doc Required) | 1 | |
| "a) Bidder must provide relevant examples/supported by rationale, of previously implemented in similar projects. Examples may include but not limited to strategy and execution plan, production of any digital content, production of any print content, distribution mechanism. b) System must support text editor, embed external resources, multimedia integration including video, audio and presentation files." (Quantitative)(Doc Required) | 1 | |
| Bidder is required to provide the Proof of Concept (POC) of the proposed solution along with the presentation / solution screenshots with the proposal. Presentations / Demo session will be scheduled as per NBP requirements. (Quantitative)(Doc Required) | 1 | |
| Testing | ||
| "Bidder should provide the performance benchmark / metrics of the proposed solution. Note: The bidder would also develop and provide a testing methodology for the provided performance benchmark/metrics of the proposed solution, in coordination with NBP, after being awarded the contract. NBP will perform testing (which may not be limited to single test cycle) of complete solution after its deployment and any gaps found therein would be fixed by the bidder without any additional cost." (Quantitative)(Doc Required) | 1 | |
| Issues / bugs reporting, tracking and resolution tools must be provided to NBP. (Quantitative)(Doc Required) | 1 | |
| License and Maintenance Support | ||
| Bidder must provide an undertaking that it will not bind NBP for any component upgrades (i.e. OS, Software, Database, Reporting tools etc.) during the period of maintenance & support. However, consent on compatibility will be sought from bidder. Latest version of the solution should be implemented and all patched should be included during contract period under SLA. The methodology for implementing new releases / updates of your software should be described along with specifying user notification process, frequency of updates, update media options and the process by which changes are identified to be included in a new release. (Quantitative)(Doc Required) | 1 | |
| Bidder must provide the cost of implementation, maintenance and support & warranty (including license, if applicable) for (01) one year after system implementation and user acceptance testing. This is separate from the SLA Agreement, which shall come into effect after completion of the support service period. (Quantitative)(Doc Required) | 1 | |
| "Bidder must provide cost of a support and maintenance (including license, if applicable) of proposed solution for two (02) consecutive years after the date of expiry of 1st year contract period. It is on bank’s discretion to opt for 2nd and 3rd year support and maintenance agreement." (Quantitative)(Doc Required) | 1 | |
| Training | ||
| Bidder must provide comprehensive training (functional + technical) to business as well as IT users of NBP on the proposed solution. Details of high level Training Plan / Schedule should be provided by the Bidder with the proposal. (Quantitative)(Doc Required) | 1 | |
| Bidder must provide undertaking that whenever, there will be new release the bidder will also provide modified desktop manuals, training manuals and user manuals as part of maintenance agreement signed between NBP & Bidder. (Quantitative)(Doc Required) | 1 | |
| Bidder must provide training sessions for NBP staff as trainers and course creators including video-recording and editing of lectures with hands on experience. (Quantitative)(Doc Required) | 1 | |
| Bidder must provide Training Guides, Trainer’s guides and Frequently Asked Questions for learners (in both Urdu and English Languages) for the proposed / implemented solution. (Quantitative)(Doc Required) | 1 | |
| Bidder must provide architecture diagram with process flow of application internal and external integration technically and logically with detailed briefing. (Quantitative)(Doc Required) | 1 | |
| Security | ||
| System must have ability to define new roles and privileges and assign multiple roles and privileges to the users. Services Menu of users on interface should be based on assigned privileges only. (Quantitative)(Doc Required) | 1 | |
| System must support single sign-on to access all granted modules of proposed System i.e. Separate login should not be required to access modules of proposed System individually. (Quantitative)(Doc Required) | 1 | |
| Have capability to disallow multiple concurrent sessions of User-id. (Quantitative)(Doc Required) | 1 | |
| Support automatic log-off or time-out the session after a defined configurable period of time. (Quantitative)(Doc Required) | 1 | |
| Be able to block / unblock any user through centralized user management interface. (Quantitative)(Doc Required) | 1 | |
| Have configuration control for allowed login attempts in a day. Number of failed attempts must be controlled through a parameter. (Quantitative)(Doc Required) | 1 | |
| Have user Password configuration / control parameters which at a minimum include minimum password length -, alphanumeric, auto-reset password (forget password option) / password generation / construction requirements, password change, password expiry period, password change attempts allowed per day, password change on first login, and non-display of password in clear text on any interface / screen. (Quantitative)(Doc Required) | 1 | |
| "a) All passwords must be stored and transferred in encrypted form and never in clear text. b) Application must have inputter / authorizer function for all administrative and end-user processes ." (Quantitative)(Doc Required) | 1 | |
| VAPT of application (white box, Black and Grey box penetration testing) by third party is mandatory. Bidder should provide undertaking that it will provide its full support in remediating and fixing all issues that will be reported by ISD and third party company during the Penetration Testing / Ethical Hacking / Web Vulnerability assessment of the proposed System. This exercise will be performed before Go-Live phase. (Quantitative)(Doc Required) | 1 | |
| System must provide complete audit trail of unauthorized access, rejected sign on attempts, authorization level changes, Alert's definition and issuance, etc. Logs should be maintained for user activity, admin activity, user management activity, security, user login attempts etc. as required by Audit (Quantitative)(Doc Required) | 1 | |
| "a) System must provide last access time and date upon login, deployment of content and editing, etc. b) System must maintain history of all modifications of roles with date and time stamp and user performing the activity." (Quantitative)(Doc Required) | 1 | |
| The application server(s) must have support to be exposed on public servers only via authenticated latest versions of SSL/TLS based connections or recommended by banks ISD. (Quantitative)(Doc Required) | 1 | |
| The bidder must ensure that system should be protected against all kind of vulnerabilities including all kind of virus/hacking/phishing attacks (including but not limited to DDoS, MITM, SQLi, XSS, Malware Attacks etc.) (Quantitative)(Doc Required) | 1 | |
| There must be no provision for creation of anonymous accounts within application. (Quantitative)(Doc Required) | 1 | |
| Maker-checker functionality must be available for User Access Management and activities related to Security Parameterization. (Quantitative)(Doc Required) | 1 | |
| Application source code must not be accessible to Administrators. (Quantitative)(Doc Required) | 1 | |
| Administrative accounts must not have access to logs of their own activities. (Quantitative)(Doc Required) | 1 | |
| All default access capabilities (including passwords) must be changeable. (Quantitative)(Doc Required) | 1 | |
| Application must be able to auto disable users not logged in to the system for certain period of days (configurable). (Quantitative)(Doc Required) | 1 | |
| Application system must generate reports for User List, Invalid Login Details with defined Time Duration, Changes in User Rights, 60/90 Day Login Details. (Quantitative)(Doc Required) | 1 | |
| HTTPS protocol must be implemented. (Quantitative)(Doc Required) | 1 | |
| Application time must be synchronized with NTP Server. (Quantitative)(Doc Required) | 1 | |
| Errors should reveal only necessary information without disclosing any internal system detail. (Quantitative)(Doc Required) | 1 | |
| "a) Passwords or keys must not be hardcoded within application. b) User credentials must not be cached within application. c) Application must not allow creating more than one User ID with same name." (Quantitative)(Doc Required) | 1 | |
| Any modification of user password must be notified to user via registered Email ID. (Quantitative)(Doc Required) | 1 | |
| Adequate input filtering controls must be in place to address SQL injection, XSS, RCE and unauthorized file inclusion threats. (Quantitative)(Doc Required) | 1 | |
| Validations performed at client end must also be performed at server end. (Quantitative)(Doc Required) | 1 | |
| The bidder must apply security patches in line with service level agreement as soon as patches are available for new vulnerabilities disclosed via CVE no. etc. in technologies/systems which are the part of proposed solution’s architecture. (Quantitative)(Doc Required) | 1 | |
| "a) User’s credentials and private information such as PII & profile details must not be accessible via browser’s local storage / session storage after the user logs out from application. b) The logging system in proposed solution must have the capability to integrate with standard security monitoring tools/solutions such as SIEM (IBM QRadar, Guardium, Splunk, AlienVault etc.)" (Quantitative)(Doc Required) | 1 | |
| The database platform must support password configuration / control parameters for database users, which at a minimum includes: minimum password length (i.e. 8 characters length for standard users and 12 characters for administrative/privilege users), alphanumeric with special characters, failed login attempts, password life and password history. (Quantitative)(Doc Required) | 1 | |
| The database must have capability to enable/generate a comprehensive audit trail, which includes all types of database user’s activities/events and provide integration with third party database security and SIEM solutions. (Quantitative)(Doc Required) | 1 | |
| "a) The database platform must have capability to change passwords of default and unused database accounts. b) The database should provide best-practice security configuration as per industry leading compliance standards, such as CIS benchmarks etc." (Quantitative)(Doc Required) | 1 | |
| The database platform must provide native capability of data encryption for sensitive data. Database encryption should be flexible to implement on complete database, table space or at column level. In addition, Database should be flexible to support integration with any 3rd party database encryption solutions. (Quantitative)(Doc Required) | 1 | |
| The database must provide native capability of data redaction/masking for sensitive data. In addition, Database should be flexible to support integration with any 3rd party data masking/redaction solutions. (Quantitative)(Doc Required) | 1 | |
| The database must provide role-based-access control at the granular level and allow database administrator to centrally manage roles and privileges of database users. (Quantitative)(Doc Required) | 1 | |
| Solution Stability and Business Continuity & Contingency Plan- Disaster Recovery Plan | ||
| "a) Escalation process against incident Management , for immediate repair actions in the event of application failure causing an interruption in service. Incident management plan to be provided as well b) Availability of releases / patches which are critical for system stability / security. c) Bidder must provide full support and manuals to setup Application’s disaster recovery site and both Application and Database replication." (Quantitative)(Doc Required) | 1 | |
| "a) Bidder must to assist NBP in connecting the proposed system with the NBP'S Disaster recovery site. b) Proposed system must include details / SOPs of back up System and mechanism to switch to disaster recovery site." (Quantitative)(Doc Required) | 1 | |
| "a) System Backup Mechanism must be provided with step-wise procedure document for execution of the same. b) Proposed system must include details of set up required for high availability with Active-Active solution." (Quantitative)(Doc Required) | 1 | |
| "a) The System Architecture must be based on the principles of performance, scalability and security. b) The System deployment must consider high - availability and DR environment with 99.99% uptime." (Quantitative)(Doc Required) | 1 | |
| "a) If application is version based then proper version management must be available and documented. b) The System must be able to support any remote connectivity software chosen by NBP in case remote access is required for any operation." (Quantitative)(Doc Required) | 1 | |
| Other Technical Requirement | ||
| The Proposed Solution must be compatible with, but not limited to, these browsers: Microsoft edge, Google Chrome, and Mozilla Firefox. (Quantitative)(Doc Required) | 1 | |
| "a) Bidder must provide one solution for Trade Ops, Compliance & Risk Management. b) The Proposed Solution must support latest version of database platforms like Oracle and MS SQL Server. NBP will decide which database to select and proceed." (Quantitative)(Doc Required) | 1 | |
| "The Proposed Solution must 1. Be able to be deployed as Container based and 2. Be able to be hosted on MS Windows and Linux VM and 3. Be able to be hosted on Intel based hardware with latest MS Windows and Linux operating systems. Deployment model will be at NBP’s discretion." (Quantitative)(Doc Required) | 1 | |
Positions Without Lots :
| Position | Delivery Schedule | Quantity | Bid Security |
|---|---|---|---|
| Trade Based Money Laundering (TBML) | Address: The Wing Head CFT & Saction, Compliance Group, 10th Floor, National Bank of Pakistan, Head Office Building, Karachi. Schedule: 15 Days Quantity: 01/job |
1/job | 1000000 PKR |
No
Positions Without Lots :
Position: Trade Based Money Laundering (TBML)
Specifications / Requirements:
"As per the current practice which is in line with Regulatory guidelines given in Framework for Managing Trade Based Money Laundering and Terrorist Financing-2019, the bank is using different manual controls and processes in some areas to monitor the TBML risk. However, to further strengthen the controls and processes to counter Trade Based Money Laundering (TBML) in line with EPD Circular Letter No. 08 dated August 12, 2025, we need to acquire a robust and comprehensive system for Monitoring of Trade Based Money Laundering. This system will enable us to streamline our compliance efforts, capture relevant data, consolidate information, and facilitate informed decision-making in different areas of TBML. The areas of TBML which requires to be further strengthen by implementing system controls are Price Due Diligence, Vessel Tracking, Container Tracking, Dual Use Goods, TBML Scenarios, Trade Documents Validation, MIS & Dashboards, Integration with Bank Systems etc."| As per the current practice which is in line with Regulatory guidelines given in Framework for Managing Trade Based Money Laundering and Terrorist Financing-2019, the bank is using different manual controls and processes in some areas to monitor the TBML risk. However, to further strengthen the controls and processes to counter Trade Based Money Laundering (TBML) in line with EPD Circular Letter No. 08 dated August 12, 2025, we need to acquire a robust and comprehensive system for Monitoring of Trade Based Money Laundering. This system will enable us to streamline our compliance efforts, capture relevant data, consolidate information, and facilitate informed decision-making in different areas of TBML. The areas of TBML which requires to be further strengthen by implementing system controls are Price Due Diligence, Vessel Tracking, Container Tracking, Dual Use Goods, TBML Scenarios, Trade Documents Validation, MIS & Dashboards, Integration with Bank Systems etc. |
For Individual Positions
| # | Position Title | Quantity | Unit Price (PKR) | Total Price (PKR) | Delivery Location | Delivery Period / Year | Country of Origin |
|---|---|---|---|---|---|---|---|
| 1 | |||||||
| 2 |
| # | Lot Title | Total Lot Price (PKR) | Country of Origin |
|---|---|---|---|
| 1 | [Lot 1 Title] |
The following Special Conditions of Contract shall supplement the General Conditions of Contract. Whenever there is a conflict, the provisions herein shall prevail over those in the Conditions of Contract. The corresponding clause number of the GCC is indicated in parentheses.
Number of GC Clause
Amendments of, and Supplements to, Clauses in the General Conditions of Contract
Definitions
The Procuring Agency is: National Bank of Pakistan (Compliance Group), SVP The Office of Departmental Head Tender, Procurement Division-LCMG, 3rd Floor, National Bank of Pakistan, Head Office Building, Karachi.
The Supplier is:
The title of the subject procurement is:Trade Based Money Laundering (TBML)
Number of GC Clause 2
Applicable/Governing Law:
The Contract shall be interpreted in accordance with the laws of Islamic Republic of Pakistan
Number of GC Clause 3
Language:
The language of the Contract, all correspondence and communications to be given, and all other documentation to be prepared and supplied under the Contract shall be in English.
Number of GC Clause 4
Notices:
The addresses for the notices are:
Procuring Agency:
National Bank of Pakistan (Compliance Group), SVP
The Office of Departmental Head Tender, Procurement Division-LCMG, 3rd Floor, National Bank of Pakistan, Head Office Building, Karachi.
+92-213-890-2267
teemar@nbp.com.pk
Contractor/ Bidder:
[Name, address and telephone number].
The Contractor/ Bidder’s Representative(s)
[Name, address, telephone number and e-mail address]
Number of GC Clause 6.1
The Authorized Representatives are:
For the Procuring Agency:
National Bank of Pakistan (Compliance Group), SVP
The Office of Departmental Head Tender, Procurement Division-LCMG, 3rd Floor, National Bank of Pakistan, Head Office Building, Karachi.
+92-213-890-2267
teemar@nbp.com.pk
For the Bidder:
Name: ………………………
Designation: ……………..
Address: ……………………………..
Number of GC Clause 7
Effectiveness of the contract
The Contractor/Bidder shall be effective within ….. days from the date of signature of the Contract by both parties
Number of GC Clause 8
Commencement of Contract:
The Contractor/ Bidder shall provide Non-Consultancy Services from the effective date of contract.
Number of GC Clause 10.2
Expiration of Contract:
The time period shall be ………………….
Number of GC Clause 14
Termination
In the event of termination of the contract due to any reason as already defined in the General Conditions of Contract, the Bidder shall be responsible for providing to the Authority the Services till the time of alternate arrangements.
Number of GC Clause 16
Conflict of Interest:
The Procuring Agency reserves the right to determine on a case-by-case basis whether the Bidder should be disqualified from providing services due to a conflict of a nature described in Clause GCC C2.
Number of GC Clause 20
Liquidated Damages
If the Bidder fails to provide services as required under the contract or in case of any data loss/data breach or any incident compromising the data security or other such failures related to any services, the Bidder shall pay to the Procuring Agency as Liquidated Damages at a rate of 0.00% to 0.00% of the Contract value, in accordance with the extent of performance failure & the cost of investigating such incidents as judged by the Authority.
Number of GC Clause 21
Performance Guarantee:
The amount of performance guarantee shall be 10.00% of the contract price in acceptable form of Banker's Cheque, Bank Guarantee
Number of GC Clause 27
Currency of Payment:
All the payment to be released to the contractor/Bidder shall be in Pakistani Rupees.
Number of GC Clause F
Payment terms:
Payment will be made to the Bidder against the procured Goods and services according to the actual invoice or running bills submitted by the Bidder against the services provided within the time given in the conditions of the contract.
Number of GC Clause F
Identifying Defects:
The Authority reserves the right at any time to inspect the premises of the provider to inspect the goods and monitor the goods being provided.
Confirmation of Licenses of Complete Proposed Solution as mentioned in Technical Requirements.
Product Complete Technical & User level documentation (For example; Software Requirement Specifications, Design Document, Database ERD, Installation Guide, User Manual, Train the Trainer Manual etc.)
Invoice Showing detailed breakup.
Number of GC Clause F 5 & 6
Following is the guidance for Dispute Resolution
Notwithstanding any reference to the arbitration herein, the parties shall continue to perform their respective obligations under the Contract unless they otherwise agree that the Authority shall pay the Bidder any monies due to the Bidder.
Arbitrator’s fee:
The fee shall be specified in Pak Rupees, as determined by the Arbitrator, which shall be shared equally by both parties.
Appointing Authority for Arbitrator:
By the Mutual Consent or in accordance with the provisions of Arbitration Act, 1940, in case the parties fail to reach a consensus on the name of sole arbitrator, any party may submit an application to the Chief Justice Islamabad High Court for appointment of sole arbitrator. The Chief Justice IHC may appoint a former judge of any High Court or Supreme Court as the sole arbitrator to resolve the dispute between the parties.
Rules of procedure for arbitration proceedings:
Any dispute between the Authority and a Bidder who is a national of the Islamic Republic of Pakistan arising in connection with the present Contract shall be referred to adjudication or arbitration in accordance with the laws of the Islamic Republic of Pakistan including Arbitration Act 1940, however above provision shall prevail in referring the case to the Arbitrator.
Place of Arbitration and Award:
The arbitration shall be conducted in English language and place of arbitration shall be at Islamabad. The award of the arbitrator shall be final and shall be binding on the parties.
Date: [insert date (as day, month and year)]
Bid No.:P97471
To: National Bank of Pakistan (Compliance Group), SVP The Office of Departmental Head Tender, Procurement Division-LCMG, 3rd Floor, National Bank of Pakistan, Head Office Building, Karachi.
We, the undersigned, declare that:
We understand that, according to your conditions, Bids must be supported by a Bid Securing Declaration.
We accept that we will be blacklisted and henceforth cross debarred for participating in respective category of public procurement proceedings for a period of (not more than) six months, if fail to abide with a bid securing declaration, however without indulging in corrupt and fraudulent practices, if we are in breach of our obligation(s) under the Bid conditions, because we:
We understand this Bid Securing Declaration shall expire if we are not the successful
Bidder, upon the earlier of (i) our receipt of your notification to us of the name of the successful Bidder; or (ii) twenty-eight (28) days after the expiration of our Bid.
THIS AGREEMENT made the _____ day of __________ 20_____ between National Bank of Pakistan (Compliance Group), SVP The Office of Departmental Head Tender, Procurement Division-LCMG, 3rd Floor, National Bank of Pakistan, Head Office Building, Karachi.
(hereinafter called “the Procuring Agency”) of the one part and [name of Bidder] of [city and country of Bidder] (hereinafter called “the Bidder”) of the other part:
WHEREAS the Procuring Agency invited Bids for provision of goods, viz., Trade Based Money Laundering (TBML) (P97471) and has accepted a Bids by the Bidder for the provision of Goods in the sum of [contract price in words and figures] (hereinafter called “the Contract Price”).
NOW THIS CONTRACT WITNESSETH AS FOLLOWS:
1. In this Contract words and expressions shall have the same meanings as are respectively assigned to them in the Conditions of Contract referred to.
2. The following documents shall be deemed to form and be read and construed as part of this Contract, In the event of any ambiguity or conflict between the Contract Documents listed below, the order of precedence shall be the order in which the Contract Documents are listed below:-
3. In consideration of the payments to be made by the Procuring Agency to the Bidder as hereinafter mentioned, the Bidder hereby covenants with the Procuring Agency to provide the Goods related services and to remedy defects therein in conformity in all respects with the provisions of the Contract.
4. The Procuring Agency hereby covenants to pay the Bidder in consideration of the provision of Goods and the remedying of defects therein, the Contract Price or such other sum as may become payable under the provisions of the contract at the times and in the manner prescribed by the contract.
IN WITNESS whereof the parties hereto have caused this Contract to be executed in accordance with their respective laws the day and year first above written.
Signed, sealed, delivered by __________________the ________________ (for the Procuring Agency)
Witness to the signatures of the Procuring Agency:
………………………………………………
Signed, sealed, delivered by __________________the ________________ (for the Procuring Agency)
Witness to the signatures of the Bidder: …………………………………………………
Contract Number: Contract Value: Contract Title:
Dated:
[Name of Supplier] hereby declares that it has not obtained or induced the procurement of any contract, right, interest, privilege or other obligation or benefit from Government of Pakistan or any administrative subdivision or agency thereof or any other entity owned or controlled by it (GoP) through any corrupt business practice.
Without limiting the generality of the foregoing [Name of Supplier] represents and warrants that it has fully declared the brokerage, commission, fee etc. paid or payable to anyone and not given or agreed to give and shall not give or agree to give to anyone within or outside Pakistan either directly or indirectly through any natural or juridical person, including its affiliate, agent, associate, broker, consultant, director, promoter, shareholder, sponsor or subsidiary, any commission, gratification, bribe, finder's fee or kickback, whether described as consultations fee or otherwise, with the object of obtaining or inducing the procurement of a contract, right, interest, privilege or other obligation or benefit in whatsoever form from GoP, except that which has been expressly declared pursuant hereto.
[Name of Supplier] certifies that it has made and will make full disclosure of all agreements and arrangements with all persons in respect of or related to the transaction with GoP and has not taken any action or will not take any action to circumvent the above declaration, representative or warranty.
[Name of Supplier] accepts full responsibility and strict liability for making and false declaration, not making full disclosure, misrepresenting fact or taking any action likely to defeat the purpose of this declaration, representation and warranty. It agrees that any contract, right interest, privilege or other obligation or benefit obtained or procured as aforesaid shall, without prejudice to any other right and remedies available to GoP under any law, contract or other instrument, be voidable at the option of GoP.
Notwithstanding any rights and remedies exercised by GoP in this regard, [Name of Supplier] agrees to indemnify GoP for any loss or damage incurred by it on account of its corrupt business practices and further pay compensation to GoP in an amount equivalent to ten time the sum of any commission, gratification, bribe, finder's fee or kickback given by [Name of Supplier] as aforesaid for the purpose of obtaining or inducing the procurement of any contract, right, interest, privilege or other obligation or benefit in whatsoever form from GoP.
To: National Bank of Pakistan (Compliance Group), SVP The Office of Departmental Head Tender, Procurement Division-LCMG, 3rd Floor, National Bank of Pakistan, Head Office Building, Karachi.
WHEREAS [name of Bidder] (hereinafter called “the Bidder”) has undertaken, in pursuance of Contract No. [reference number of the contract] dated [insert date] for provision of Goods(hereinafter called “the Contract”).
AND WHEREAS it has been stipulated by you in the said Contract that the Bidder shall furnish you with a Bank Guarantee by a reputable bank for the sum specified therein as security for compliance with the Bidder’s performance obligations in accordance with the Contract.
AND WHEREAS we have agreed to give the Bidders guarantee:
THEREFORE, WE hereby affirm that we are Guarantors and responsible to you, on behalf of the Bidder, up to a total of [amount of the guarantee in words and figures], and we undertake to pay you, upon your first written demand declaring the Bidder to be in default under the Contract and without cavil or argument, any sum or sums within the limits of [amount of guarantee] as aforesaid, without your needing to prove or to show grounds or reasons for your demand or the sum specified therein.
This guarantee is valid until the: [insert date]
Signature and seal of the Guarantors
_____________________________________________________________________
[name of bank or financial institution]
_____________________________________________________________________
[address]
_____________________________________________________________________
[date}
Bidder must provide 03 (three) CV's/Profile of their proposed implementation and configuration team which should be employees of the company since last one year and must have relevant experience for proposed solution.
Undertaking on Estamp paper amounting to PKR 500/- stating that the bidder is not blacklisted by any Goverment insitution (Federal/ Provincial)
Attach agreement/Work Order ongoing/completed contracts of simlar nature.
Bidder must provide audited Profit & Loss (Income Statement) showing Sale volume of company of at least Rs.50 Million in each last 3 years.