ERPC-2026-63 - Subministrament d'infraestructura cloud i serveis associats

The contract has an initial duration of three (3) years. The contract's start date is set to begin from the first meeting with the awarded contractor after the contract has been formalized. This start date cannot be more than four (4) weeks after the day following the notification of the contract formalization to the contractor by both parties.

The contract can be extended for a maximum of two (2) additional years. These extensions will be for periods of up to twelve (12) months each. L'Energètica will determine the extension period and notify the awarded contractor with a two (2) month advance notice. After the initial term and any agreed extensions have concluded, further extensions are not generally possible, with the exception of Article 29.4, fifth paragraph of Law 9/2017, which allows for a maximum additional period of nine (9) months.

The core scope of work and statement of work for this tender involves the provision of cloud resources on demand, along with professional services. The services are categorized into several key areas:

1. Container Service (Kubernetes): This includes a Kubernetes cluster, a private container registry, and persistent storage for Kubernetes.

2. Databases: Specifically, managed PostgreSQL database services, including a small, highly available instance and a database for ERP applications.

3. Object Storage and Immutable Copy: This covers operational S3 object storage and immutable/cold S3 copies.

4. Network, Security, and Perimeter: This involves a new generation virtual firewall (with NAT and VPN), WAF and CDN services, additional protected web applications, a load balancer, managed DNS zones, and fixed public IPv4 addresses.

5. Backup and Recovery: Services include operational PostgreSQL backups (14-day retention and extended retention/PITR), PostgreSQL ERP backups, Kubernetes volume backups, Kubernetes resource backups, and immutable copies of backups.

6. Observability, Secrets, and Traffic: This encompasses personalized logs, personalized metrics, distributed traces, active alert rules, external synthetic tests, Secret Manager + KMS, and outbound traffic (not included).

7. Professional Services: These services include cloud architecture, specialized technical advice, and the definition of technological solutions that influence the evolution of the contracted infrastructure. This also includes planning, coordination, and monitoring of work execution, and participation in work meetings related to the on-demand cloud resource supply. Other professional services include implementation, migration, reversibility, and recovery of services, as well as any action requiring privileged access to systems or information, and security incident response.

The contract also includes a fixed amount for ordinary infrastructure operation services and a budget for professional services, which will be consumed based on actual needs and validated consumption.The core scope of work for this tender primarily involves the provision of cloud resources on demand and associated professional services. The key deliverables and services explicitly stated include:

• Container Service (Kubernetes): This covers a Kubernetes cluster, a private container registry, and persistent storage for Kubernetes.
• Databases: Managed PostgreSQL database services, specifically a small, highly available instance and a database for ERP applications.
• Object Storage and Immutable Copy: Operational S3 object storage and immutable/cold S3 copies.
• Network, Security, and Perimeter: This includes a new generation virtual firewall with NAT and VPN, WAF and CDN services, additional protected web applications, a load balancer, managed DNS zones, and fixed public IPv4 addresses.
• Backup and Recovery: Services such as operational PostgreSQL backups (14-day retention and extended retention/PITR), PostgreSQL ERP backups, Kubernetes volume backups, Kubernetes resource backups, and immutable copies of backups.
• Observability, Secrets, and Traffic: Personalized logs, personalized metrics, distributed traces, active alert rules, external synthetic tests, Secret Manager + KMS, and outbound traffic (which is not included).
• Professional Services: These encompass cloud architecture, specialized technical advice, and the definition of technological solutions influencing the infrastructure's evolution. It also includes planning, coordination, and monitoring of work execution, participation in work meetings related to cloud resource supply, implementation, migration, reversibility, recovery of services, actions requiring privileged system access, and security incident response.

The contract also includes a fixed amount for ordinary infrastructure operation services and a budget for professional services, with billing based on effectively consumed and validated services.