European Health Data Space IT systems development, operations and support

The contract duration is 48 months. The contract is set to start 48 months from the later of these two dates: the date the contract is signed by the last contracting party, or November 1, 2027.

Key milestones and phases include:

• A kick-off meeting, which will take place remotely within three weeks following the contract signature.
• An Inception Report (D0) due in Month 1.
• A First Interim Report (DI) due in Month 12, which, upon submission and acceptance along with all deliverables up to that point, triggers an interim payment of 30% of the total.
• A Second Interim Report (DII) due in Month 24, which, upon submission and acceptance along with all deliverables up to that point, triggers another interim payment of 30% of the total.
• A Third Interim Report (DIII) due in Month 36, which, upon submission and acceptance along with all deliverables up to that point, triggers an interim payment of 20% of the total.
• A Final Report (DF) due in Month 48, which, upon submission and acceptance along with all deliverables up to that point, triggers the final payment.
• Project Progress Reports (D01.03) are required from Month 1 to Month 48.
• Support for systems integration (D05.05) is expected from Month 3 to Month 48.
• A Handover Plan (D06.01) is due in Month 42.
• A Handover Report (D06.02) is due in Month 48.

The core scope of work for this tender involves several key tasks and their associated deliverables.

The main tasks include:

• Project Management: This encompasses organizing and managing the project team, establishing a Quality Management Plan, creating a Project Workplan, preparing Meeting Agendas & Minutes, and submitting Project Progress Reports.
• Maintaining and evolving business requirements, user interface, architecture model, and technical specifications: This task focuses on enhancing systems' business requirements, user interface, use cases, User Manuals, and the systems' Architecture Model for specific platforms such as HealthData@EU Central Platform, Health Data IT Portal, EU Database, and EU DTE, ensuring overall consistency.
• Systems development and operations: This involves adopting a DevSecOps approach, managing environments, developing and documenting systems, deploying solutions, conducting various tests (unit, string, conformance, end-to-end), and providing ongoing maintenance, support, and warranty services.
• Cybersecurity: Key activities include ensuring system cybersecurity through dedicated development and testing, supporting the preparation of cybersecurity documentation, ensuring compliance with plans, providing early detection and support during cyberattacks, and assisting in restoring services and improving solutions post-attack.
• User-focused design and support: While the task name is partially cut off, related deliverables indicate the scope includes systems users’ knowledge building services, user support guides, users' onboarding and registration, and support for systems integration.
• Handover: This involves the preparation and submission of a Handover Plan and a Handover Report.

The core deliverables include:

• Quality Management Plan, Project Workplan, Project Progress Reports, Meetings Agendas & Minutes.
• Executable software for releases, Development Release documentation, Deployment Plan, Reports from deployment.
• Test Plan and Reports, Test Framework for end-to-end tests, Reports from end-to-end tests.
• Operational Framework, Report regarding system operations and compliance with SLAs, Change management procedure.
• Report on the initial security and follow-up plan, Reports on audit trails, traceability, vulnerability assessments, penetration testing, resilience and integrity testing, security controls.
• Security Plan (and updates), Disaster Plan (and updates), Recovery Plan (and updates), Report on cyberattacks, Analysis of cyberattack damage and restoring work.
• Reports from systems users’ knowledge building services (including videos, chatbot specifications and code, dialogue scripts), User support guides, Support Report, Users on-boarding and registration, Support for systems integration.
• Handover Plan, Handover Report.
• Inception Report, First, Second, and Third Interim Reports, and a Final Report summarizing all activities.