NICL/IT/RFP/06/2026/KYC

RFP No.: NICL/IT/RFP/06/2026/KYC Name of Bidder: __________________________

1. SUMMARY OF TOTAL COST OF OWNERSHIP (TCO) FOR 3 YEARS

S. No Component of Cost Total Amount (INR) (Excl. GST) GST Amount (INR) Total Amount (INR, Incl. GST)

A Total Implementation & Integration Cost (From Table A)

B Total Annual Fixed Cost – 3 Years (From Table B)

C Total Recurring Operational Cost – 3 Years (From Table C)

Total Grand Total TCO for 3 Years (A + B + C)

Note1: Grand Total TCO for 3 Years (A + B + C) shall be the final evaluated commercial value for QCBS scoring. Refer Clause 3.2 for TCO evaluation methodology. Total Implementation & Integration Cost (from Table A) should be within 25% of the Total Cost of Ownership (TCO) for 3 years (A+B+C). Note2: All amounts in the above table are exclusive of GST. GST shall be applied separately as quoted in the detailed tables below and as per prevailing tax laws at the time of invoicing.

TABLE A: IMPLEMENTATION & INTEGRATION COST

*(including all deliverables, implementation activities, integrations, documentation, training, testing, and go-live support as defined under Section 3.2 and Section 3.2.15 of the RFP during the Contract Period)* *Payable on milestone completion, subject to acceptance criteria and in alignment with Section 3.4 (Commercial & Billing) and Section 2.9 (Terms of Payment) of the RFP. Refer Clause 3.3.6.2 for payment milestones : 30% on Phase 1 Go-Live; 20% after 3 months; 30% on Phase 2 Go-Live; 20% after 3 months.*

Sl. No. Particulars Total Amount (INR, Excl. GST) GST Amount (INR) Total Amount (INR, Incl. GST)

1 Setup of Dedicated, Low-Latency Environment (Non-Shared/Exclusive for NICL), including compute, storage, network, and security infrastructure. This covers all storage for V-CIP recordings, API transactions, logs, images, audit trails, and any other data generated under this scope, for the entire contract period.

2 Core Systems & API Integration with NICL systems (eBao, Portals, Aggregators, APIs, Partners, etc.), including API connectivity, workflow enablement, and real-time data exchange. No bulk migration of historical KYC data is envisaged. Limited transition of metadata (KYC status, reference IDs, audit logs) shall be supported where technically feasible and compliant with regulations.

3 CKYC Integration with NICL On-Prem DC/DR Setup, DB & OS Configuration

4 CKYC Upload & Regulatory Workflow Implementation

5 Configuration, Testing, Training & Go-Live Support

6 Any Other (Please Specify)

TOTAL IMPLEMENTATION & INTEGRATION COST (A)

Notes for Table A: (i) The above cost shall be inclusive of all activities required for end-to-end implementation including environment setup, integrations, onboarding of channels/partners, testing, documentation, training, and deployment during the contract period. (ii) Any Other (Mandatory – Bidder to specify all additional implementation components; no additional items shall be allowed post bid submission) (iii) TOTAL IMPLEMENTATION & INTEGRATION COST (A) – To be carried forward to TCO Summary. (iv) The implementation cost shall also include system sizing, configuration, and readiness to meet performance requirements defined under Section 3.2.10, including support for peak throughput of 2400-3600 TPS. (v) All implementation-related commitments demonstrated during Technical Evaluation (Annexure 5) shall be deemed to be included in the above cost. (vi) All costs related to compliance with regulatory requirements (including IRDAI, UIDAI, CERSAI, RBI, DPDP Act, and PMLA, and any other applicable statutory or regulatory requirements introduced during the contract period) during implementation shall be included. (vii) The bidder shall support transition of limited metadata (such as KYC status, reference IDs, and audit logs), wherever technically feasible and compliant with applicable regulations. No migration of existing KYC history or service requests from legacy systems is envisaged under this RFP. For existing customers, KYC records shall be accessed in real-time via CKYC (CERSAI) or through Re-KYC as per regulatory process. Accordingly, no separate or additional cost shall be payable for migration activities.

Table B: Annual Subscription, Support & Managed Services Cost (SaaS + CKYC On-Prem Hybrid Model)

Includes SaaS subscription components, Aadhaar Data Vault (ADV), CKYC lifecycle management (on-prem), dedicated manpower, support services, monitoring, and SLA compliance as per Scope of Work.

Sl.No. Particulars Year 1 (INR) Year 2 (INR) Year 3 (INR) Total Amount (INR, Excl. GST) GST Amount (INR) Total Amount (INR, Incl. GST)

1 Dedicated SaaS Environment Subscription (Low Latency/High Speed/Millisecond Response – Exclusive, non-shared environment for NICL only) including compute, storage, network, and security infrastructure. This covers all storage for V-CIP recordings, API transactions, logs, images, audit trails, and any other data generated under this scope, for the entire contract period.

2 Aadhaar Data Vault (ADV) SaaS Subscription (Inclusive of HSM, Key Management, Encryption Infrastructure, DC-DR High Availability & Compliance) – Fully compliant with UIDAI guidelines, including tokenization, AES-256/RSA-2048 encryption, masking, audit logging, and deployment on FIPS 140-2 Level 3 (or higher) HSM (dedicated or logically partitioned) with DC-DR high availability. Includes complete key lifecycle management (generation, storage, rotation, revocation) under dual control, with NICL logical ownership and audit rights over keys. All upgrades, patches, and regulatory changes during the contract period are included.

3 CKYC On-Premise Management & Maintenance (Complete lifecycle management including: installation, configuration, DC/DR support, API-based Search/Fetch/Download/Upload/Update, KIN generation, CERSAI regulatory compliance, version upgrades including CKYC v1.3 and all future versions, reconciliation, retry mechanisms, and ongoing maintenance – NO per-transaction or per-hit charges)

4 Dedicated Manpower (L2 Resource) – Per resource per year

5 Dedicated Manpower (L3 Resource) – Per resource per year

6 Any Other (Please Specify)

TOTAL ANNUAL FIXED COST (B)

Notes for Table B: 1. Total Dedicated Manpower Requirement: The Bidder shall deploy a total of two (2) dedicated resources for NICL. The combination of resource levels (L2/L3) is at the Bidder's discretion based on its proposed support model. The Bidder shall quote its per-resource-per-year rates in Rows 4 and 5 above. The total manpower cost for TCO evaluation shall be calculated as the sum of rates for two resources as quoted by the Bidder. 2. Resource Exclusivity & Continuity: All deployed resources shall be exclusive to NICL, non-shared, and compliant with SLA requirements (Section 2.41(k) – Personnel). In case of absence or unavailability of any deployed resource, the Bidder shall ensure an immediate suitable replacement so that continuity of support is not impacted under any circumstances. If any deployed resource is found unsuitable, the Bidder shall replace such resource within 7 days from notification by NICL(as specified in Section 2.41(d)). 3. Operational & Regulatory Inclusions: The above cost shall include all recurring operational expenses including infrastructure, hosting, monitoring, security patching, vulnerability management, performance tuning, upgrades, patches, support services, and capacity scaling up to 3600 TPS. Additionally, all regulatory compliance costs (IRDAI, UIDAI, RBI, CERSAI, DPDP Act, PMLA, and any other applicable statutory or regulatory requirements introduced during the contract period) shall be included. No additional cost shall be payable for any regulatory change, version upgrade, or compliance mandate. 4. No Double Charging: No component covered under Table B shall be charged again under Table C (Transaction-Based Pricing). Specifically, CKYC services (including Search, Download, Upload, Update, KIN generation, probable match handling, reconciliation, and lifecycle management) are fully covered under Row 3 above and shall NOT be charged on a per-transaction or per-hit basis. See also Table C Note (iv). 5. Commitment from Technical Evaluation: All requirements under Section 3.2 (Scope of Work) and all commitments demonstrated during Technical Evaluation (Annexure 5) shall be deemed included in the above costs. 6. Price Firmness & TCO Evaluation: Prices shall remain firm and fixed for the contract period and any extension. Year-wise pricing is for billing purposes only; TCO evaluation for QCBS scoring shall be based on the total 3-year cost (sum of Year 1 + Year 2 + Year 3 from Table B). No minimum volume guarantee is provided. Refer to Clauses 3.2 and 3.3 of this Annexure. 7. For Scope Inclusivity (No-CR Zone), Billing & Payment, and other terms, refer to Clauses 3.5, 3.9, and other relevant clauses of this Annexure. 8. ADV All-Inclusive Clause: The ADV (Aadhaar Data Vault) subscription cost shall be all-inclusive and shall cover all infrastructure, software, security, and compliance components required for its operation, including but not limited to HSM, encryption services, key management, tokenization, hosting (including DC-DR redundancy), integration, maintenance, and regulatory compliance. No additional cost shall be payable by NICL for any component of ADV during the contract period. 9. Deemed Inclusion Clause: Any component required for regulatory compliance (including Aadhaar-related security infrastructure) but not explicitly quoted shall be deemed included in the ADV subscription cost. This line item is all-inclusive and shall cover all infrastructure, security, and compliance components required for ADV operation. No additional cost shall be payable. 10. No Change Request for ADV: The Bidder shall not raise any Change Request (CR) or claim additional compensation for any hardware, software, security, or compliance component required for the ADV, including but not limited to HSM procurement, hosting, key management, encryption services, storage, DC-DR replication, or regulatory updates. 11. Data Transfer at No Cost: All costs associated with the transfer of storage data generated or processed during the contract period (including but not limited to KYC records, audit logs, video recordings, transaction data, metadata, and Aadhaar reference keys) upon termination or expiry of the contract shall be borne solely by the Bidder. No additional cost shall be payable by NICL for such data transfer, migration, formatting, or any related activities required to make the data usable by NICL or a designated third party.

TABLE C: Recurring Operational Cost (Transaction-Based Pricing – KYC Services)

• Pricing shall be applicable only for successful transactions processed, validated, and stored in NICL systems as per defined SLA and business rules. • If the Bidder fails to quote a unit rate for any item in Table C or quotes zero (0) for any item, it shall be assumed that the Bidder will provide that service at zero cost to NICL during the contract period, and the commercial bid will be evaluated accordingly. Such zero-cost quotes shall be binding on the Bidder if selected. This applies to all items in Table C unless explicitly stated otherwise. • All unit rates shall be quoted exclusive of GST. GST shall be applicable at actuals.

Item Description (A) Unit Rate (Per Txn) Excl. GST (A) Est. Txns per Year (B) Total 3-Year Cost (P=3×A×B)(INR, Excl. GST) GST Amount (INR) Total Amount (INR, Incl. GST)

End-to-End Digital KYC API Hit (Comprehensive suite including but not limited to OCR, PAN, Voter ID, Driving License, GSTIN, CIN, LLPIN, Business Verification, DigiLocker, Face Match, and all other KYC-related APIs as defined in Scope of Work Section 3.2) 55000000

Video KYC (V-CIP) / PwD Interaction (Includes Live interaction, AI-Liveness including passive non-blinking detection, deepfake detection, Geotagging, VPN/proxy detection, session recording and storage, and PwD assistive features like Sign Language interpretation, closed captions, audio descriptions as mandated by Supreme Court/IRDAI directives) 200000

End-to-End PEP/Sanction/AML Screening (Automated real-time and periodic weekly screening against UNSC/MHA and other regulatory/watchlists, including fuzzy/phonetic matching, alert generation, case management, and Enhanced Due Diligence workflows as updated from time to time) 5000000

TOTAL RECURRING COST (C)

Notes for Table C: (i) The estimated transaction volumes are indicative for evaluation purposes only and do not constitute a minimum commitment. No minimum volume guarantee is provided. Payment shall be on actual successful transactions as defined in Clause 3.1. (ii) Payment shall be made on actual successful transactions processed and stored in NICL systems. (iii) The quoted unit rates shall include all APIs, integrations, enhancements, and regulatory requirements as per Section 3.2 (Scope of Work). (iv) CKYC services are covered under Table B and shall not be charged under transaction-based pricing. See Table B Row 3 and Table B Note 4. (v) The system shall support peak throughput of 3600 TPS without additional cost. (vi) No services covered under Table B shall be charged again under Table C. (vii) All functionalities demonstrated during Technical Evaluation (Annexure 5) shall be included in the quoted rates. (viii) All regulatory requirements (IRDAI, UIDAI, RBI, CERSAI, DPDP Act, PMLA, etc.) shall be included. (ix) Duplicate, retry, and failed transactions attributable to Bidder systems shall be non-billable. (x) Unit rates shall remain firm and fixed for the contract period and any extension (refer Clause 3.3). (xi) Payment shall be governed by Section 3.4 and Section 2.9 of the RFP. (xii) For Re-KYC commercial treatment, refer to Clause 3.10 of this Annexure.

Table D: Optional Cost (Rate Discovery – Non-TCO Items)

“Indicative rate discovery for future requirements outside the defined Scope of Work, including UI customizations and manpower-intensive enhancements approved under Change Request (CR).”

Particulars / Role Unit Year 1 (INR) Year 2 (INR) Year 3 (INR)

User Interface (UI) Customization (for requirements outside defined Scope of Work, as approved via CR) Per Request

Solution Architect Per Day

Sr. Developer / Integration Specialist Per Day

Notes for Table D: (i) These costs shall not be considered for TCO evaluation, L1 determination, or commercial scoring. (ii) These rates shall be applicable only for approved Change Requests (CR) as defined under Clause 3.6. (iii) No work under this table shall be executed without prior written approval from NICL. (iv) The discovered rates shall remain fixed for the contract period and any extension. (v) Items covered under Table A, B, or C shall not be charged again under this table. (vi) Regulatory changes and API updates mandated by IRDAI, UIDAI, RBI, CERSAI, DPDP Act, or PMLA etc. shall not be treated as CR (refer Clause 3.5). (vii) All rates shall be quoted exclusive of GST. GST shall be applicable at actuals.