Publication / issue
The tender/BOQ is dated 18.08.2026. The tender documents do not print a separate publication time.
Loading
Loading…
Loading…
PROCUREMENT OF CLOUD SERVICES FROM MeitY EMPANELLED CLOUD SERVICE PROVIDERS
Kerala State Road Transport Corporation · Thiruvananthapuram, Kerala2026_KSRTC_865917_1
Written by TenderKart AI from the documents published when it was generated. Check the tender for later corrigenda before you bid.
18 Aug 2026
25 Sept 2026
₹1 L
All important dates as they stand after corrigenda: publication, pre-bid/clarification deadline, bid submission deadline, bid opening, and bid validity period.
The tender/BOQ is dated 18.08.2026. The tender documents do not print a separate publication time.
Pre-bid meeting: 22.08.2026 at 12.00 Noon, held by video conference. Queries were due through the e-GP Portal two working days before the meeting; no exact clock time is printed for the query deadline.
17.09.2026 at 06.00 pm, extended from 03.09.2026 at 06.00 pm.
18.09.2026 at 11.00 am, extended from 05.09.2026 at 11.00 am. Financial-bid opening will be notified separately to technically responsive bidders with at least two working days' notice.
180 days from the last date of bid submission. KSRTC may request an extension; a bidder may decline without forfeiture, but cannot modify its bid during an accepted extension.
Tender value or estimated cost, EMD/bid security (amount, acceptable forms, validity), tender document fees, performance security, and key payment terms.
No estimated cost or tender value is disclosed. The electronic BOQ is an unpriced template with estimated rates shown as zero; bidders enter their own prices.
Rs.5,900/- (Rs.5,000/- + GST at 18%) plus e-GP Portal processing fee Rs.295/-, aggregating Rs.6,195/-, payable online only.
Rs.1,00,000/- (Rupees One Lakh only), payable online through the e-GP Portal. A bidder entitled to exemption under applicable Government of India or Kerala orders may instead upload a valid exemption certificate and Form 6 Bid Securing Declaration.
3% of the Total Evaluated Bid Value of the accepted Financial Bid, due within 15 days of Letter of Award. Acceptable forms are an irrevocable bank guarantee from a scheduled commercial bank in India in Form 7, a demand draft payable at Thiruvananthapuram, or a scheduled-bank fixed deposit receipt pledged to KSRTC.
No advance. Cloud resources and managed services are billed monthly in arrears; resources are paid on actual consumption at firm quoted unit rates. The one-time implementation/migration charge is paid in full only upon Operational Acceptance. Valid undisputed invoices are payable within 30 days after tax, LD and SLA-penalty deductions.
BOQ quantities are indicative, invoicing is on actual consumption, unit rates remain firm through the three-year term and any extension, and KSRTC may decrease without limit or increase aggregate procurement up to five times indicative quantities.
Every pass/fail eligibility and qualification requirement: experience and past performance, turnover/net worth, registrations and certifications, consortium/JV rules, and debarment or blacklisting conditions.
A bidder may be a MeitY-empanelled CSP, its authorised MSP/SI, or an eligible nomination-route entity that has onboarded a MeitY-empanelled CSP through GeM or open RFP. Consortiums, JVs and conditional offers are prohibited; one CSP and one bid only.
The proposed CSP must have valid MeitY empanelment for the offered service covering both DC and DR as of bid deadline; offered DC/DR must be in India, different seismic zones, at least 250 km apart and each live for at least two years. It must publish Indian rates, SLA/status/outage-RCA information, support KSRTC-owned tenancy and delegated administration, and confirm all Annexure A capabilities.
Bidder must be an incorporated company, registered LLP, registered partnership, or proprietary concern with valid GST registration, and must hold valid PAN and GST registration.
Average annual turnover of at least Rs. 2.00 crore from IT or cloud services over FY 2022-23, FY 2023-24 and FY 2024-25.
Within the five years measured from bid deadline, satisfactory execution or ongoing performance of cloud hosting/cloud managed services for an eligible government/public body, scheduled commercial bank or listed company: one order at least Rs.40 lakh, or two each at least Rs.25 lakh, or three each at least Rs.20 lakh.
Bidder must hold valid ISO/IEC 27001 covering managed cloud or IT services and have at least three on-roll resources with current associate-level-or-higher cloud certification.
Unless bidder itself is the CSP, it must be a currently authorised partner/reseller/MSP and submit Form 5 CSP authorisation/declaration and MeitY certificate. For nomination-route bidders, onboarding evidence satisfies criteria 7 and 8.
Neither bidder nor its directors/partners may be blacklisted or debarred by central/state government or their departments/agencies/PSUs as of bid deadline. Corrupt, fraudulent, collusive or coercive conduct may cause rejection and debarment by KSRTC up to three years.
Within 30 days of award and throughout contract, maintain named account manager, named technical SPOC and Kerala support presence able to reach Transport Bhavan within four hours for Severity 1 calls. Separately, deploy one cloud engineer on site until migration completes. Any deviation from Annexure A or Section IV is disqualifying.
What is being procured: the work, supplies or services, deliverables and quantities, locations, phases, completion or delivery timelines, applicable standards, and notable exclusions.
Consolidate nine listed KSRTC workload groups from on-premises, shared hosting and vendor-operated clouds into a single secure MeitY-empanelled environment owned and controlled by KSRTC, including discovery, landing zone, provisioning, migration, cut-over/rollback, testing, documentation and exit.
Sizing basis: about 5 TB aggregate data, about 2k peak concurrent public-system users, fourteen VMs and three managed database deployments. The price schedule also covers block/object/backup storage, active-passive DR, WAF/DDoS/SIEM/threat detection/scanning/firewall, load balancers, egress, IPs, secure privileged access, DNS, managed services and one-time migration.
DC and DR must remain in India, different seismic zones and at least 250 km apart; all data stays/processes in India. Encryption minimum AES-256 at rest and TLS 1.2 in transit; security includes DDoS, IDS/IPS, WAF, firewall, anti-malware, monthly OS-level scanning and half-yearly CERT-In-empanelled VAPT.
Active-passive DR with continuous replication, RPO 30 minutes and RTO 4 hours; replicated-estate storage is always provisioned, while DR compute can be reduced but must scale to full DC capacity within RTO. Backup retention is at least 30 days with quarterly restoration tests; DR drills twice yearly. Monthly availability target is at least 99.5%.
Contractor handles cloud/infrastructure/OS build and upgrade, VM/database/data migration, cut-over, rollback and joint testing. KSRTC's application vendors retain code refactoring, schema conversion, compatibility fixes and binary redeployment. Migration is due within 60 working days of PO, with third-party-source periods starting on access and an outer limit of 90 working days; Operational Acceptance follows within 15 working days after migration.
Provide 24x7x365 monitoring/support, ticketing, reports, patching, capacity planning, five training days in year 1 and two days each later year, plus on-site engineer during migration. Contract is three years from Operational Acceptance, extendable two one-year periods at same rates. Category A workloads, application-code/schema work, cloud/network DLP and DSPM are excluded unless later directed/provisioned.
The complete checklist of documents to submit — mandatory vs conditional, with any prescribed formats, proformas or annexures — plus how to submit: portal and mode, envelope/cover structure, digital signature requirements, signing and attestation rules, and physical originals with their deadline.
Submit online only at www.etenders.kerala.gov.in. Cover A contains searchable, non-password-protected PDFs; Cover B contains only the portal electronic BOQ, completely filled and digitally signed. No price may appear in Cover A.
A valid Class-III DSC in the authorised signatory's name is mandatory. Cover A documents must be digitally signed or scanned after signature and seal. No stamp paper or notarisation is required at bid stage unless expressly stated.
No bid or hard copy is accepted by post, email, hand or physical form before award. KSRTC may later call originals for verification. Post-award Form 7, Form 8 and contract documents are due within the specified award timelines.
Every corrigendum/addendum in order — what changed (original vs amended value), its impact, and the action for the bidder — ending with the values that finally apply.
Changed the notified 22.08.2026 12.00 Noon pre-bid meeting from an unspecified physical arrangement to video conference at the published Google Meet link; all other terms/dates stayed unchanged. The two Technical Bid paths contain duplicate copies of the same one-page corrigendum.
Technical Corrigendum 2 resolved the RFP's no-fee/no-EMD conflict: total fee Rs.6,195 online; EMD Rs.1,00,000 online, with exemption certificate plus Form 6 only for eligible exempt bidders. Bid validity changed 90 to 180 days and USD conversion blank became Rs.94.94.
Technical Corrigendum 2 filled sizing at about 5 TB/2k users; relaxed block-storage IOPS to 6 IOPS/GB with 3,000/5,000 per-volume minima; allowed maintenance-window restarts; relaxed HSM/KMS; broadened acceptable platform-delivered 'native' services; defined active-passive DR pricing; changed threat-detection quantity 15 to 17; clarified backup deletion, privileged access, database HA/node pricing, supported Linux/licences, monthly scanning versus half-yearly VAPT, and SIEM retention/pricing.
Technical Corrigendum 2 broadened acceptable staff certifications where a CSP has no programme, removed the need to upload individual certificates, changed local presence from Thiruvananthapuram office to Kerala presence with four-hour Severity-1 attendance, classified listed workloads Category B, excluded Category A until written direction, and opened nomination-route participation to specified government entities with onboarded MeitY CSPs.
Technical Corrigendum 2 allocated infrastructure/OS/migration work to contractor and application-code/schema/redeployment work to KSRTC vendors. It extended migration from 45 to 60 working days, allowed workload phasing and third-party-access reckoning, with 90-working-day overall cap; LD now follows these amended dates.
Replies fixed WAF scope at six applications/300 Mbps/50 million requests, DNS at five hosted zones/10 million queries, retained indicative-quantity evaluation with actual-consumption invoicing, confirmed 225 Mbps existing leased line plus contractor VPN/DR bandwidth, and declined to publish HLD/LLD, dependency map and detailed database inventory until post-award NDA/discovery. Figures remain non-warranted and bidder due diligence remains mandatory.
Submission was extended once from 03.09.2026 06.00 pm to 17.09.2026 06.00 pm; technical opening moved from 05.09.2026 11.00 am to 18.09.2026 11.00 am. Technical Corrigendum 2 describes the extension as 14 days.
Final bid deadline 17.09.2026 06.00 pm; opening 18.09.2026 11.00 am; validity 180 days; fee Rs.6,195 including portal fee; EMD Rs.1,00,000 online or valid exemption+Form 6; FX Rs.94.94/USD; migration 60 working days with 90-day outer cap; all B-1 to B-22 amendments propagate wherever repeated in forms and Annexure C.
Genuine conflicts within and across the documents (original vs corrigenda, clause vs annexure, tender document vs BOQ): both sides with citations, and which value prevails.
Original cover/NIT said no fee and no EMD, while its Bid Data Sheet stated Rs.5,900 fee and Rs.1,00,000 EMD. Corrigendum 2 expressly resolves this in favour of the Bid Data Sheet/portal: total fee Rs.6,195 including portal fee and EMD Rs.1,00,000 online, subject to valid exemption.
Original Bid Data Sheet/ITB/Form 1 stated 90 days; Corrigendum 2 replaces it everywhere with 180 days, which prevails.
Original schedule required migration within 45 working days; Corrigendum 2 changes it to 60 working days, phased by workload, with third-party access reckoning and 90-working-day overall cap. The amendment prevails and controls LD.
Original Annexure C demanded certificates for at least three resources, but Corrigendum 2 says individual certificates need not be uploaded and the signed Form 3 statement suffices. Corrigendum B-9/B-22 prevails.
Original ITB/Annexure C required Form 6 from every bidder; Corrigendum 2 limits Form 6 to EMD-exempt bidders and requires online EMD proof from others. Corrigendum B-1 prevails.
The uploaded electronic BOQ still contains superseded values/specifications, although bidders are forbidden to modify it: threat detection quantity 15 rather than amended 17; WAF 1 million rather than 50 million requests; old bastion wording; and old block-storage IOPS. Corrigendum 2 legally prevails, but bidders need a corrected portal BOQ or written instruction because Cover B must use the locked template.
RFP Section V evaluates exclusive-of-GST unit rates and includes an Additional Services Discount line, while the portal BOQ is a generic total-with-GST/freight/other-charges template and does not reproduce that discount line. The portal BOQ is the mandatory Cover B instrument, but RFP/corrigenda remain contractually operative; written portal clarification is needed.
Only critical, tender-specific pre-bid queries that could materially change bid/no-bid, pricing, eligibility or contractual risk. Skip generic or obvious questions the documents already answer clearly.
Will KSRTC replace/revise the locked portal BOQ to incorporate all B-5, B-10, B-11, B-16 and B-18 to B-21 changes and add the Additional Services Discount field, and confirm exactly which columns bidders must fill? This is essential because bidders cannot modify the template and the current file conflicts with the controlling corrigendum.
If post-NDA discovery materially exceeds the non-warranted 5 TB/2k users/14 VMs/3 database deployments or reveals materially different dependencies/licensing, will KSRTC treat incremental one-time migration effort and required unlisted services under formal change control rather than Note 10's deemed-included rule? Request objective thresholds and approval/rate mechanism.
Confirm that delay, failed compatibility testing or non-cooperation attributable to KSRTC's application vendors will extend every affected milestone and suspend both implementation LD and Operational-Acceptance-dependent payment, not only third-party source-access delay; define evidence and acceptance responsibility.
Commercial, legal and execution risks a bidder should weigh: liquidated damages and penalties, unusual or one-sided clauses, tight timelines, and payment or security risks.
HLD/LLD, dependency mapping and detailed database inventory are withheld until post-award NDA/discovery, while published sizing is expressly non-warranted and bidders must perform due diligence. This creates material fixed-price migration, licence and compatibility risk.
KSRTC can reduce any quantity without limit, delete items, or increase aggregate quantities up to five times, while unit rates stay firm through up to five contract years. Minimum revenue is therefore unprotected and scale/price risk sits with bidder.
Delay LD is 0.5% of one-time implementation/migration value per week or part, capped at 10%; delay beyond 10 weeks permits termination. The one-time charge is payable only on Operational Acceptance, so vendor/access/acceptance dependencies can defer the full implementation payment.
Monthly SLA penalties can reach 15% of invoice value; repeated penalties permit default termination. For significant degradation KSRTC may procure replacement services at contractor cost. RTO/RPO misses attract 5% increments and vulnerability misses up to 10%.
Contractor bears broad indemnities for services, IP infringement, injury/property and labour non-compliance, with no stated aggregate liability cap. It must keep all data in India, report incidents within one hour, and can face recovery from bills/security for GST non-compliance.
KSRTC may terminate for convenience on 90 days without compensation beyond services rendered, while contractor termination is allowed only after an undisputed invoice remains unpaid 120 days after due date plus an unremedied 60-day demand; services cannot be suspended or data withheld during disputes. No interest is payable for disputes/administrative delay.
3% security runs through six months after contract completion with another six-month claim period and may be forfeited for any default/loss. Exit begins six months before expiry and extends 60 days beyond termination/expiry, with transition, data export, knowledge transfer and destruction certification at no extra cost.
The locked electronic BOQ retains superseded technical quantities/specifications and a generic tax format unlike Section V. Incorrect interpretation can cause rejection, non-comparable pricing, or later contractual disputes; obtain portal clarification before submission.
The inviting authority and relevant contacts: office, person, designation, address, phone and email — and which address receives physical submissions, if any.
Deputy General Manager (Information Technology), Kerala State Road Transport Corporation, Transport Bhavan, Fort P.O., Thiruvananthapuram – 695 023. No individual officer name is printed for the inviting authority.
KSRTC, Transport Bhavan, Fort, Thiruvananthapuram-695 023; telephone 0471-2471011 (Extn: 250); email [email protected]; website www.keralartc.com. Clarifications must be sent through the e-GP Portal only.
The tender is issued by the Chairman and Managing Director through the IT Division. No address receives physical bid submissions: bids/hard copies are prohibited before award; successful-bidder post-award instruments are addressed to KSRTC at Transport Bhavan.