Cloud Services for Hosting of SECP Services

The Securities and Exchange Commission of Pakistan (SECP) is procuring cloud services specifically for hosting its critical services in Islamabad. This procurement is for a local cloud hosting solution with datacenters located exclusively in Pakistan. The scope includes hosting and migration of virtual machines (VMs) with specifications such as Windows/Linux OS, 200 GB disk, 16 GB memory, and 8 vCPUs for mail gateway and monitoring servers, plus a management server for centralized control. The technical requirements are stringent, demanding SSD storage, daily incremental and weekly full backups with 90 days retention, full VM recovery within 4 hours, Cloudflare WAF and DDoS protection, NGFW with UTM, class-3 SSL certificates, DNS management, and 24x7 technical support with escalation matrix. The service level agreement mandates 99.995% availability and disaster recovery capabilities. Bidders must have a minimum of five years' experience in cloud hosting, a data center in Pakistan, and comply with cybersecurity standards including regular VAPT and audits. Eligibility criteria require incorporation under Companies Act 2017, valid NTN and STRN registration, and FBR/ATL compliance. The tender follows a single stage two envelope procedure with bid security of Rs. 200,000. Proposals must be submitted exclusively through the e-Pak Acquisition & Disposal System (EPADS) by 1430 hours on May 11, 2026, with public opening at 1500 hours the same day in Islamabad. A practical tip for bidders is to ensure their proposal clearly tags compliance with all MUST requirements and provides page references, as non-compliance will lead to rejection. Also, timely submission of the original bid security to the procuring agency before closing time is critical to avoid disqualification. This tender offers a significant opportunity for qualified cloud service providers to partner with a premier federal regulatory authority and contribute to Pakistan's digital infrastructure.