Część nr 1 - Zapewnienie środowiska przetwarzania i usług obliczeniowych oraz platformowych

The contract timeline includes the following:

• Activation of Software Subscriptions (Basic Order): Within 10 calendar days from the contract signing date.
• Activation of Software Subscriptions (Option Right Order): Within 10 calendar days from the date of each declaration of exercising the option right.
• Period of Validity (Basic Order): From the date of delivery, for a period of 36 months.
• Period of Validity (Option Right Order): From the date of delivery for the indicated period, but not beyond the last day of the 36-month period of validity of licenses delivered under the basic order.
• Offer Validity: 90 Days.
• Deadline for submitting offers: September 17, 2026, 11:00 (UTC+02:00).
• Public offer opening: September 17, 2026, 12:00 (UTC+02:00).
• Deletion of Contractor's Data: Up to 120 days from the end of service provision.
• Retention of Logs: 90 days.
• Audit Report Generation: On customer's request, within 3 business days.

• Online migration
• Offline migration
• Replication (for data migration)
• Handling of changes (for data migration)
• Minimization of downtime (for data migration)
• Managed batch processing environments
• Managed stream processing environments
• Managed data warehouse
• Data warehouse scalability to at least 1 PB without downtime
• Parallel handling of at least 100 analytical queries in data warehouse
• Independent scaling of data warehouse compute and storage layers
• Data flow building (for pipelines and integrations)
• Support for multiple data source types (for pipelines and integrations)
• Hybrid integration scenarios
• Multi-center integration scenarios
• API design
• API publishing
• API monitoring
• Event-driven architecture
• Message broker
• Data balancing (via message broker)
• Secure data routing (via message broker)
• Transactional scenarios support (via message broker)
• Data classification (for Governance)
• Data cataloging (for Governance)
• Data governance in hybrid environments
• Managed application hosting model
• Managed API hosting model
• Automatic scaling (for application hosting and financial model)
• Support for commonly used technologies (for running applications)
• Support for open-source applications via predefined images
• DevOps capabilities
• CI/CD capabilities
• Automation capabilities (e.g., building, testing, deploying applications, artifact management, automatic application and infrastructure deployment, enforcing naming policies, infrastructure as code)
• Centralized logging system
• Monitoring of metrics
• Monitoring of alerts
• Observability of resource dependencies
• Integration with monitoring systems
• Role and permission management
• Least privilege policy
• Multi-factor authentication
• Directory integration
• Cryptographic protection
• Key management according to recognized standards
• Confidential information store
• Mechanisms for protection against volume attacks
• Mechanisms for protection against application attacks
• Intrusion detection and prevention
• Advanced application-level firewalls
• 24/7 security teams
• Operational logs
• Security logs
• Authentication logs
• Incident reports
• Threat reports
• Compliance with EU standard contractual clauses
• Compliance with data protection regulations
• Client data ownership
• Data deletion after contract termination (max 120 days)
• Standard subscription model
• Transparent pricing model
• Cost calculator
• Billing based on actual usage
• Compliance with generally recognized standards for security and privacy
• Compliance with generally recognized standards for network communication
• Compliance with generally recognized standards for API formats
• Compliance with generally recognized standards for programming languages and environments
• SLA no lower than 99.99%
• At least two data processing centers within the EEA
• Scalable service model
• High availability
• Management via administrative portal
• Management via programming interfaces
• Individual, unique user accounts
• Logging of operations in audit logs
• Recording of permission and configuration changes
• Acceptance path for administrative actions (approval workflow)
• System time synchronization (NTP)
• Protection of logs against modification and deletion (e.g., WORM/immutability)
• Log retention for 90 days
• Ability to generate audit report on demand within 3 working days
• Data at rest encryption up to 500 TB
• Data in transit encryption
• Block disks with different performance levels
• Configurable I/O parameters for block disks
• Private network creation
• Subnet creation
• Routing rule creation
• Segmentation and isolation (networking)
• Network-level access control
• Encrypted communication tunnels
• Dedicated fiber optic link
• Private communication with services (networking)
• Network-level load balancing
• Application-level load balancing
• Session handling (load balancing)
• Encryption (load balancing)
• Application protection (load balancing)
• Flow recording (network observability)
• Network traffic analysis
• Network traffic diagnostics
• Managed relational databases
• Managed non-relational databases
• Database high availability (min 99.9%)
• Automatic database backups
• Automatic database updates
• API compatible with common standards (for non-relational databases)
• At least two data consistency modes (for non-relational databases)
• Automatic replication between regions (for non-relational databases)