NEU! Webbasierte Angebotsabgabe! Weitere Informationen unter https://csx.de/JiViu

Verfahrensangaben

Runtime Application Self-Protection (RASP)
VO: VgV Vergabeart: Offenes Verfahren Status: Veröffentlicht

Fristen

Fristen
26.05.2026
05.06.2026 10:00 Uhr
05.06.2026 10:01 Uhr

Adressen/Auftraggeber

Auftraggeber

Auftraggeber

SPRIND GmbH
HRB 36977 (AG Leipzig)
Lagerhofstr. 4
04103
Leipzig
Deutschland
DED51
Friedrich Graf von Westphalen & Partner mbB Rechtsanwälte
sprind.ausschreibungen@fgvw.de
+49697191890-12

Angaben zum Auftraggeber

Von einer Bundesbehörde kontrolliertes oder finanziertes öffentliches Unternehmen
Wirtschaftliche Angelegenheiten

Gemeinsame Beschaffung

Beschaffungsdienstleister
Weitere Auskünfte
Rechtsbehelfsverfahren / Nachprüfungsverfahren

Stelle, die Auskünfte über die Einlegung von Rechtsbehelfen erteilt

Zuständige Stelle für Rechtsbehelfs-/Nachprüfungsverfahren

Vergabekammer des Bundes
022894990
Kaiser-Friedrich-Straße 16
53113
Bonn
Deutschland
DEA22
vk@bundeskartellamt.bund.de
+49 2289499-163

Zuständige Stelle für Schlichtungsverfahren

Auftragsgegenstand

Klassifikation des Auftrags
Lieferungen

CPV-Codes

48100000-9
48000000-8
Umfang der Beschaffung

Kurze Beschreibung

The implementation of the revised eIDAS regulation (electronic Identification, Authentication and Trust Services) requires the creation of a secure and user-friendly ecosystem. As a milestone for Europe's digital sovereignty, its core element is the European Digital Identity Wallet (EUDI Wallet), which serves as the regulation's central instrument. By the start of 2027, all EU citizens and residents should have access to a trustworthy, interoperable, and non-discriminatory digital wallet for identification, attribute attestations, electronic signatures, and more. The EUDI Wallet aims to simplify users' daily lives while enabling companies and administrations to benefit from faster, more secure, and more efficient digital processes.
In Germany, the rollout of the EUDI Wallet is a joint effort by the Federal Ministry for Digital and State Modernization (BMDS) and SPRIN-D - the Federal Agency for Breakthrough Innovation. Since June 2023, the initiative has followed an open architecture and consultation process involving business, civil society, and science, with a focus on security, privacy, user-friendliness, and innovation. Germany"s dual strategy supports both a national EUDI Wallet as well as alternative EUDI Wallets. The roadmap includes a sandbox rollout of the identity (PID) function by the end of 2025 and further enhancements and production rollout throughout 2026.
In this tender, the client is seeking a Runtime Application Self-Protection (RASP) solution to provide an additional layer of runtime security for its wallet applications on iOS and Android. The objective is to enhance protection against runtime threats, obfuscate the code and support privacy provisioning and telemetry. The scope covers the procurement and integration of the RASP solution with the described functionality.

Beschreibung der Beschaffung (Art und Umfang der Dienstleistung bzw. Angabe der Bedürfnisse und Anforderungen)

The implementation of the revised eIDAS regulation (electronic Identification, Authentication and Trust Services) requires the creation of a secure and user-friendly ecosystem. As a milestone for Europe's digital sovereignty, its core element is the European Digital Identity Wallet (EUDI Wallet), which serves as the regulation's central instrument. By the start of 2027, all EU citizens and residents should have access to a trustworthy, interoperable, and non-discriminatory digital wallet for identification, attribute attestations, electronic signatures, and more. The EUDI Wallet aims to simplify users' daily lives while enabling companies and administrations to benefit from faster, more secure, and more efficient digital processes.
In Germany, the rollout of the EUDI Wallet is a joint effort by the Federal Ministry for Digital and State Modernization (BMDS) and SPRIN-D - the Federal Agency for Breakthrough Innovation. Since June 2023, the initiative has followed an open architecture and consultation process involving business, civil society, and science, with a focus on security, privacy, user-friendliness, and innovation. Germany"s dual strategy supports both a national EUDI Wallet as well as alternative EUDI Wallets. The roadmap includes a sandbox rollout of the identity (PID) function by the end of 2025 and further enhancements and production rollout throughout 2026.
In this tender, the client is seeking a Runtime Application Self-Protection (RASP) solution to provide an additional layer of runtime security for its wallet applications on iOS and Android. The objective is to enhance protection against runtime threats, obfuscate the code and support privacy provisioning and telemetry. The scope covers the procurement and integration of the RASP solution with the described functionality.

Umfang der Auftragsvergabe

2.500.000,00
EUR

Laufzeit des Vertrags, der Rahmenvereinbarung oder des dynamischen Beschaffungssystems

Laufzeit in Monaten
30

SPRIND GmbH has the option to extend the contract two
times, each time for one year.
2
Erfüllungsort(e)

Erfüllungsort(e)

---
Lagerhofstr. 4
04103
Leipzig
Deutschland
DED51

Weitere Erfüllungsorte

Zuschlagskriterien

Zuschlagskriterien

---
Weitere Informationen

Angaben zu Mitteln der europäischen Union

Angaben zu KMU

Angaben zu Optionen

The scope of services may, by mutual agreement between the parties, be supplemented or specified in more detail to include comparable services related to the scope of services as set out in clause 1.4 and the service description, provided that such services do not materially alter the original scope of services.

If a backend is required, the Licensor warrants that this component can be operated on the Client"s infrastructure or that of its designated subcontractors; at the same time, the Licensor warrants that the SDK supports standalone operation without a backend. Acceptance shall take place following successful integration and functional testing of the SDK and, where appli-cable, the backend against the specifications set out in this Agreement, and the Licensor un-dertakes to rectify any material deviations within the response and rectification periods agreed in this Agreement.

For further details. please refer to the tender documents.

Zusätzliche Angaben

The figure given for the estimated contract value relates to the contract term, including extension options, and thus covers a period of up to 54 months.

Verfahren

Verfahrensart

Verfahrensart

Offenes Verfahren

Angaben zum Verfahren

Angaben zum Beschaffungsübereinkommen (GPA)

Besondere Methoden und Instrumente im Vergabeverfahren

Angaben zur Rahmenvereinbarung

Entfällt

Angaben zum dynamischen Beschaffungssystem

Entfällt

Angaben zur elektronischen Auktion

Angaben zur Wiederkehr von Aufträgen

Angaben zur Wiederkehr von Aufträgen

Strategische Auftragsvergabe

Strategische Auftragsvergabe

Gesetz über die Beschaffung sauberer Straßenfahrzeuge

Energieeffizienz-Richtlinie

Angaben zu elektronischen Arbeitsabläufen

Angaben zu elektronischen Arbeitsabläufen

Erforderlich
Auftragsunterlagen

Sprache der Auftragsunterlagen

Englisch
Sonstiges / Weitere Angaben

Kommunikationskanal


Communication shall only take place via the electronic procurement
platform DTVP.
https://www.dtvp.de/Satellite/notice/CXP4D9LMNX2

Einlegung von Rechtsbehelfen

According to Article 160, Section 3 of the German Act Against Restraint of Competition (GWB), application for review is not permissible insofar as

1. the applicant has identified the claimed infringement of the procurement rules before submitting the
application for review and has not submitted a complaint to the contracting authority within a period of 10 calendar days; the expiry of the period pursuant to Article 134, Section 2 remains unaffected,

2. complaints of infringements of procurement rules that are
evident in the tender notice are not submitted to the contracting authority at the latest by the expiry of the deadline for the application or by the deadline for the submission of bids, specified in the tender notice.

3. complaints of infringements of procurement rules that first become evident in the tender documents are not submitted to the contracting authority at the latest by the expiry of the deadline for application
or by the deadline for the submission of bids,

4. more than 15 calendar days have expired since receipt of notification from the contracting authority that it is unwilling
to redress the complaint. Sentence 1 does not apply in the case of an application to determine the invalidity of the contract in accordance with Article 135, Section 1

(2) Article 134, Section 1, Sentence 2 remains unaffected.

Frühere Bekanntmachung zu diesem Verfahren

Anwendbarkeit der Verordnung zu drittstaatlichen Subventionen

Zusätzliche Informationen

The tender documents will be available in English. However, German (public proucurment) law applies and for the legally binding version of the contract is German version decisive.

Angebote

Anforderungen an Angebote / Teilnahmeanträge

Übermittlung der Angebote / Teilnahmeanträge

Anforderungen an die Form bei elektronischer Übermittlung

Sprache(n), in der (denen) Angebote / Teilnahmeanträge eingereicht werden können

Englisch

Varianten / Alternativangebote

Elektronische Kataloge

Nicht zulässig

Mehrere Angebote pro Bieter

Nicht zulässig
Verwaltungsangaben

Bindefrist

2
Monate

Bedingungen für die Öffnung der Angebote

Bidders are not permitted to attend the opening of bids.

Nachforderung

Eine Nachforderung von Erklärungen, Unterlagen und Nachweisen ist nicht ausgeschlossen.

SPRIND GmbH asks - within its
discretion - the bidder to submit, complete
or correct documents, within the framework laid down by law (Section 56
(2) VgV).

Bedingungen

Ausschlussgründe

Ort der Angabe der Ausschlussgründe

Auswahl der Ausschlussgründe

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act)

In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act).
Teilnahmebedingungen

Eignungskriterien / Ausschreibungsbedingungen

Eignungskriterium

Eintragung in das Handelsregister

If the company is registered in the commercial register or a comparable register in the country of origin, submiission of a copy of the extract from the commercial register or equivalent proof from the respective country of origin (not older than 90 days at the time of expiry of the tender deadline) at the request of the client after expiry of the tender deadline. For foreign documents that are not written in German or English, a simple translation into German or English must be enclosed

Eignungskriterium

Durchschnittlicher Jahresumsatz

Self-declaration regarding the company's total turnover in the last three completed financial years provided that the relevant information is available. (e.g., companies that have not yet been in existence for three years must include the information since their inception)..

Minimum requirement
Total Turnover - average annual turnover of at least EUR 3,000,000.00 (net)

Please use the relevant form "Appendix 01_Self-declarations and evidence".

Eignungskriterium

Referenzen zu bestimmten Lieferungen

At least three references from reference provider (RP) for the performance of comparable services/supplies (Providing Runtime Application Self-Protection (RASP) solutions for critical infrastructures, public sector, finance/banking, healthcare, insurance or crypto & fintech) since January 1, 2023, (it is sufficient that the relevant services were also provided in the reference period in the specified reference project, e.g., a reference that began on January 1, 2022, and ended on February 1, 2023, would be sufficient). The number of devices secured today (ongoing reference) or on exit (completed reference) must be minimum 50,000. Only references for providing Runtime Application Self-Protection (RASP) solutions for critical infrastructures, public sector, finance/banking, healthcare, insurance or crypto & fintech are permitted. Each reference must be either completed or ongoing. In the case of an ongoing reference specifications of the planned/contractual project duration and information on the current status must be included.
The reference provider may be a public or private company in the above-mentioned required sector.

Minimum requirements for each reference:

1. Since January 1, 2023
2. Completed and ongoing reference; if ongoing, specifications of the planned/contractual project duration and information on the current status of the reference project must be included
3. The respective reference must include providing Runtime Application Self-Protection (RASP) solutions for critical infrastructures, public sector, finance/banking, healthcare, insurance or crypto & fintech
4. Number of devices secured today (ongoing reference) or on exit (completed reference): minimum 50,000
5. The description must clearly and unambiguously show that at least the following services were provided, otherwise the reference will not be accepted:
a. Providing Runtime Application Self-Protection (RASP) solutions for critical infrastructures, public sector, finance/banking, healthcare, insurance or crypto & fintech
b. Please describe RASP functionalities that have been used and ramp-up of device count.

Please use the relevant form "Appendix 01_Self-declarations and evidence".

Eignungskriterium

Berufliche Risikohaftpflichtversicherung

Self declaration to undertake to take out and maintain business liability insurance with the coverage amounts specified below in the event of an award. Insurance coverage shall be provided without restriction and in full for the entire duration of the contact.

The sum insured is available twice per annum.

Financial loss: At least EUR 1,0 million.

Please use the relevant form "Appendix 01_Self-declarations and evidence".

Eignungskriterium

Zertifikate von unabhängigen Stellen über Qualitätssicherungsstandards

Self-declaration on ISO 27001 certificate or comparable.

Upon request by SPRIND GmbH following the submission of a tender, the bidder will provide the relevant documentation.

Finanzierung

Rechtsform des Bieters

Bedingungen für den Auftrag

Bedingungen für den Auftrag

Reference is made to the tender documents.

Angaben zu geschützten Beschäftigungsverhältnissen

Nein

Angaben zur reservierten Teilnahme

Angaben zur beruflichen Qualifikation

Nicht erforderlich

Angaben zur Sicherheitsüberprüfung