C-9/2025 - servicios de adquisición i plataforma de servicios de pago por el uso de tarjetas emv en la t-mobilitat

The contract timeline is structured into two main periods with a total duration of 2 years and 3 months.

Phases:

• Implementation Period (Phases 1, 2, and 3): This period has an estimated duration of three (3) months, commencing from the formalization date of the contract.
• Exploitation Period (Phase 4): This period lasts for twenty-four (24) months, starting from the formal validation by the ATM of the effective service commissioning.

Total Duration: The total duration of the contract is the sum of both periods, ensuring twenty-four (24) months of effective service provision.

Extension Option: There is a possibility to extend the contract in the exploitation phase (Phase 4) for an additional twelve (12) months.

Key Milestones:

• Milestone 1 (Commissioning of services): The contractor must complete all necessary actions for the actual commissioning of the services within a maximum of 3 months from the contract formalization date (T0). An additional grace period of one (1) month (days 91 to 120 from T0) is provided. This milestone is considered achieved when the ATM formally validates that the service is ready for real exploitation, which also marks the beginning of Phase 4.
• Milestone 2 (Start of real operation of the EMV T-mobilitat ecosystem): This must commence within a maximum of fifteen (15) calendar days after all conformity tests have been passed and authorization for entry into production by the ATM.
• Milestone 3 (End of services in exploitation): The exploitation services will be provided for a period of twenty-four (24) months from the actual exploitation start date (Milestone 2).

Specific contract start and end dates are not explicitly stated as calendar dates, but are defined relative to the formalization of the contract and the start of exploitation.

The core scope of work for this tender involves the provision of technological and operational services for the EMV T-mobilitat ecosystem. This includes Acquiring Services (PSP and acquiring bank) to manage payments made with contactless EMV bank cards on T-mobilitat terminals in public transport.

The initial functional scope is strictly limited to the operation of single tickets and their associated scenarios within a multi-scheme, multi-operator, and multi-territory environment. Any services or functionalities beyond single ticket operation are excluded from the current contract.

Key service areas and deliverables include:

• Operation of Acquiring Services (PSP and Acquiring Bank) in an exploitation regime.
• Management and evolution of acquiring services and the Payment Service Platform (PSP).
• Management of the compensation process for transactions via PSP and acquiring bank, including 24x7 operation, monitoring, incident resolution, and continuous improvement plans.
• Generation, custody, rotation, and distribution of cryptographic keys used for information exchange protection (PSP).
• Generation and distribution of authorization lists.
• Management of the debt recovery process.
• Generation and return of tokens to IVR.
• Integration of Acquiring Services with the "banking logic" subsystem for all schemes.
• Ensuring the effective operation of specific components (1.22 to 1.25) within the PSP/acquirer domain.

Proposals are also required to detail aspects such as KPIs, dashboard/reporting, traceability of tokens, API and security logs, and incident and quality management for tokenization services. For authorization list management, proposals must cover update mechanisms (incremental/complete), periodicity, update windows, and compliance with minimum service levels, as well as criteria for adding/removing entries from lists.