Invitation for Initial Selection Information Systems
(Design, Supply, and Installation)
Purchaser: LEPL Enterprise Georgia on behalf of Public Service Development Agency of Georgia
Project: Georgia Relief and Recovery for MSME Project
Contract title: Digital Identity Wallet at Public Service Development Agency
Country: Georgia
Loan No. 9239-GE
ISD No: GE-EG-G-IS-2024
1. The Government of Georgia has received financing from the World Bank toward the cost of the Georgia Relief and Recovery for MSME Project and intends to apply part of the proceeds toward payments under the contract for “Digital Identity Wallet at Public Service Development Agency”.
2. The LEPL Enterprise Georgia (EG) on behalf of Public Service Development Agency of Georgia (PSDA) intends to initially select Applicants for Digital Identity Wallet at Public Service Development Agency (PSDA). The estimated period of services is 18 months, excluding time needed for the Warranty period. The projected implementation budget is estimated at USD 4.3 million.
The general object of the assignment is:
To implement a Digital Identity Wallet system at the Public Service Development Agency (PSDA). This system will allow citizens and businesses of Georgia to manage their digital identities securely.
The scope includes the supply, installation and integration of the necessary information systems and technologies, along with services such as software development, customization, commissioning, and training for:
- Digital Identity Wallet solution encompassing Issuer, Holder and Verifier capabilities
- Verifiable Credential issuance capabilities allowing the PID issuance based on the Georgian ID card into the Wallet, and other type of credentials.
- Deployment of a Proof of Concept project for piloting the Digital Identity Wallet implementation. The PoC will involve PSDA as Wallet issuer and PID issuer, at least one Relying Party (likely a financial service provider) and citizens (Wallet holders)
- An independent (reference) credential verification system for use by Relying Parties during piloting and tests that can receive the attestations shared.
The selected proposer will also ensure the system's compliance with General Data Protection Regulation (Regulation EU 2016/679) and international standards related to identity verification, cryptographic security, and selective disclosure of information.
The successful Proposer will be responsible for the following tasks:
Software Development and Customization;
System Integration and Commissioning;
Training and Support;
Support for Proof of Concept deployment and piloting the implementation;
GDPR Compliance and Security:
Mobile Application Development;
Meeting International Standards;
Warranty and Maintenance;
It is expected that the Request for Proposals will be made in April 2025.
3. Initial Selection will be conducted through the procedures as specified in the World Bank’s Procurement Regulations for Borrowers - Procurement in Investment Projects Financing” Goods, Works, Non-Consulting and Consulting Services dated November 2020. (“Procurement Regulations”), and is open to all eligible Applicants as defined in the Procurement Regulations.
4. Interested eligible Applicants may obtain further information from the Public Service Development Agency and the Enterprise Georgia at the following addresses: gmaisuradze@enterprise.gov.ge. A complete set of Initial Selection documents in English is attached hereby; However, in case of request, these documents may also be sent on email to the interested applicants upon submission of a written request, free of charge.
5. The Initial Selection process will be conducted as follows:
The Initial Selection process will consist of submission of the Initial Selection document only, without any reference to prices. Following the evaluation of Initial Selection documents only qualified applicant shall receive Request for Proposal to submit their Technical and Financial Proposal.
6. Initial Selection documents (in pdf format) must be delivered to the address: gmaisuradze@enterprise.gov.ge before March 18, 2025, 17:00 Georgian Time.
The key qualification requirements:
General Experience: Experience in Information Systems Design, and/or Supply and/or Installation contracts in the role of prime contractor, JV member, subcontractor, or management contractor for at least the last 5 years, starting January 1, 2019.
Specific Experience: A minimum number of 1 similar contract as specified below with a minimum value of USD 2 million, that have been satisfactorily and substantially [see note 1] completed as a prime contractor, joint venture member [see note 2], management contractor or subcontractor between January 1, 2019 and Application submission deadline.
Each of the elements below must be covered by at least one contract:
- Successfully delivered a live implementation of a wallet system based on international standards, including functional and non-functional elements at the organizational, process and technology levels;
- Provision of an information system to over 100,000 registered users;
- Cooperation was performed on the basis of a Service Level Agreement or equivalent;
- Broad international geographical coverage providing professional services for at least 2 different countries and several organizations;
The above requested contract included the necessary assessment on GDPR compliance, and ensured compliant personal data processing.
Interested bidders shall provide:
- Case studies. Documentation of relevant live implementations, including client references where possible.
- Technical documentation. A description of the standards and technologies used in previous projects.
- UI/UX portfolio. Demonstration of wallet application front-end design and user experiences.
- Integration examples. Detailed examples of integration with both issuer and verifier systems.
The Functional Requirements for Specific Experience:
The following minimum key requirements in terms of functional characteristics, performance, production capacity, complexity, personal data protection and cybersecurity aspects shall be covered by at least one contract, or if not covered in the same contract, these shall be supported by documentary evidences.
- implementing Identity schemes;
- developing or operating the necessary technology for the provision of identity means to citizens or businesses;
- developing and implementing digital identity wallet architecture, including full functionalities for the issuance and management of verifiable credentials, presentation and validation of verifiable credentials, secure storage and management of credentials at Wallet holders level;
- Proven track record of offering robust post-implementation maintenance and support
- implementing selective disclosure of information, zero-knowledge proofs or similar;
- involving cryptographic verification of information;
- relying upon and implementing FIPS-140 L2 and/or EAL4+ certified devices;
- using secure execution and storage (Trusted Execution Environment/Secure Enclave);
- In-depth understanding and practical application of international identity or trust-services related standards or industry specifications from the EUDI Wallet Architecture and Reference Framework (ARF) such as SAML, CTAP, EACv2, oAUTH, OpenID Connect, OpenID4VCI, OpenID4VP, DIDCOMM, W3C DID, ISO/IEC 18013 – 5:2021, ISO/IEC TS 18013-7:2024, AnonCreds, ‘Verifiable Credentials Data Model 1.1.’, W3C Recommendation, March 3, 2022;
- developing mobile apps - design and deliver wallet application front-end/UI with:
- user interface intuitive
- security features: authentication, access management, encryption, credentials protection, secure authentication and identification of relying parties
- interoperability: compliance with cross-platform standards (iOS, Android) and implementation of interoperable component-based architectures
- working in online and offline mode for credentials presentation and verification
- deploying mobile applications with users in different countries;
- good understanding of or prior experience in the eIDAS ecosystem supporting relying parties, eID schemes, Digital Identity Wallets;
- Good understanding of Common Criteria certification of products;
- Relevant Use Case Experience:
- Experience with user consultations, user journeys, requirements gathering, requirements modeling, and other aspects of the discovery process.
- Practical experience with wallet implementations in real-world use cases such as:
- Digital identity verification: Integration with eID systems for identity verification.
- Financial services: KYC (Know Your Customer) compliance and credential-based banking services.
- Travel: Mobile credentials for airport check-ins, boarding, and visa processing.
- Healthcare: Verifiable health credentials for vaccinations or test results.
- Education: Academic credentials like diplomas and certifications.
N.B.: Please note that Applicants that substantially meet the qualification criteria and requirements in Qualification Criteria and Requirements of Table 1 will be long listed, and will be evaluated further. This means that in addition to other Qualification Criteria and Requirements of Table 1, the Specific Experience which also includes functional requirements shall be fully met by Applicants to be long listed. However, for the evaluation of all the longlisted Applicants against Past Performance in Rated Criteria and Requirements of Table 2, the functional requirements for Specific Experience will not be applied for each x+ additional contract experience.
The above specific experience requirements may be met by specialized subcontractors.
Financial Capabilities:
The Applicant shall demonstrate that it has access to, or has available, liquid assets, unencumbered real assets, lines of credit, and other financial means (independent of any contractual advance payment) sufficient to meet the cash flow requirements estimated as USD 300,000 for the subject contract net of the Applicants other commitments.
Average annual Turnover:
Minimum average annual turnover in Information Systems Design, and/or Supply and/or Installation of USD 3,000,000 (three million USD), calculated as total certified payments received for contracts in progress and/or completed within the last three years, divided by 3 years.
[Note 1] Substantial completion shall be based on 80% or more of the contracts completed.
[Note 2] For contracts under which the Applicant participated as a joint venture member or sub-contractor, only the Applicant’s role and responsibilities shall be considered to meet this requirement.