CT2274/2026 - Services - Tender for the Implementation of a Fully Compliant European Digital Identity Wallet (EUDIW), Supporting Trust Ecosystem and use cases for the Malta Digital Innovation Authority (MDIA)

The contract commences on the day of the last signature on the contract. The intended commencement date will be specified in the Notice of Commencement, which will be communicated to the Awarded Bidder within twelve calendar weeks from the date of the last signature on the contract agreement.

The total duration of the contract is ninety (90) months from commencement.

The Contracting Authority has the option to extend the contract or part of it by up to six (6) months at no additional cost, provided this extension does not delay the completion of Milestone 16 by more than six months. However, Milestones 1 and 3 cannot be extended. Furthermore, after the initial ninety-month period, the Contracting Authority, with the Contractor's agreement, may extend the contract by two additional periods of twenty-four (24) months each, specifically for the operation, maintenance, and support of the Solution.

Key milestones and phases include:

• Milestone 1: Design a minimum of five branding proposals (including logos, colour schemes, fonts, naming, social media templates, presentation templates, and artwork for web and mobile applications) – 45 calendar days from signing of the contract.
• Milestone 2: Design, build, and test iOS and Android applications capable of authenticating with the Maltese eID Server using the eID Card's authentication certificate (NFC functionality) at LoA High, as part of the Wallet Solution (Version 2) – 3 months from signing of the contract.
• Milestone 3: Design, build, test, deploy, and operate Version 1.
• EUDIW Solution Integration and Deployment: Integrate and deploy the EUDIW Solution with necessary exchanges between various providers and components, attaining a fully compliant EUDIW Solution – 19 months from signing of the contract.
• Milestone 16: Support the Contracting Authority in achieving certification of the Solution according to national or EU schemes – 21 months from signing of the contract.
• Hosting, Operations, SLA, Maintenance, Training, Review of Regulatory and Standards Updates and Support: This phase covers the entire 90-month duration of the contract.

The core scope of work and statement of work summary for this tender involves the phased provision of a European Digital Identity Wallet (EUDIW) for citizens and residents, focusing on privacy, security, user-centricity, and interoperability.

The project encompasses two main phases:

1. Version 1 Development: Design, development, building, and deployment of a mobile application within six months of contract signing. This application will allow users to authenticate with the eID server, store identification data, include age verification functionality, support at least two use cases, and securely store, present, and share digital information. It must also use approved branding in both Maltese and English, adhering to accessibility directives.

2. Version 2 Development (EUDIW Compliant): Design, testing, and deployment of a solution compliant with the EUDI Regulation and all applicable Implementing Acts, to be completed within twenty-one months from contract signing. This includes implementing necessary components for an EUDIW ecosystem. The solution will be thoroughly tested and integrated into the national setup, including the eID server.

Key deliverables and services include:

• Design and Implementation: Designing a mobile application for digital document storage and new digital services, leveraging existing infrastructure where possible. Designing a solution based on high-level technical architectures compatible with current systems.
• Components: Implementation of WRPAC, RP Verification, Digital Signing, and PID Provider components. The project also includes Infrastructure (hardware for operation, maintenance, and support) and necessary software licenses.
• Support and Maintenance: Operating, maintaining, and supporting Version 2 and subsequent use cases to ensure uninterrupted access to a secure and privacy-preserving application for Maltese EUDIW users. This also involves person-days support for certification and consultancy services regarding changes from new Legislation, Implementing Acts, and Standards.
• Use Cases: Development and roll-out of use cases based on regulatory obligations and national priorities.
• Testing and Integration: Thorough system testing and assistance with integration into the national setup, including the eID server.
• Certification: Support for the contracting authority in the certification of the solution.
• Documentation: Comprehensive documentation is required at both design and implementation stages. This includes detailed requirements specifications (functional and non-functional), use cases/user stories, architectural and detailed design documents (high-level architecture diagrams, data flow diagrams, entity-relationship diagrams), interface design specifications (API definitions, UI wireframes), security architecture and risk assessment, compliance mapping, project management documentation (project plans, resource allocation, risk management), and an initial test strategy and plan. During implementation, source code documentation, build and deployment guides, and configuration management documents are required.
• Training: Provision of training services.
• Hosting: Hosting costs for Version 1 are also mentioned.
• Intellectual Property: All intellectual property rights in Bespoke Deliverables (including Wallet Provider, PID Provider, Relying Party Registrar, Signing Certificate Provider (PKI), WPRAC Provider, RP Verification Component, and Wallet Instances) are assigned to the Contracting Authority upon creation.