Procurement of NBP Website Hosting & D...
Go BackMr. Muhammad Sohail
ConvenerSenior Vice President
Department: National Bank of Pakistan (NBP)
Email: m.sohail@nbp.com.pk
Mr. Omair Syed
MemberExecutive Vise President (EVP)
Department: National Bank of Pakistan (NBP)
Email: omair.syed@nbp.com.pk
Mr. Javid Iqbal Bangash
MemberExecutive Vise President (EVP)
Department: National Bank of Pakistan (NBP)
Email: javid.bangash@nbp.com.pk
Mr. Ayaz Ahmed Siddiqui
MemberExecutive Vise President (EVP)
Department: National Bank of Pakistan (NBP)
Email: ayaz.siddiqui@nbp.com.pk
Mr. Aijaz Hyder Shaikh
MemberExecutive Vise President (EVP)
Department: National Bank of Pakistan (NBP)
Email: aijaz.shaikh@nbp.com.pk
Require further clarity on:
1) The domain that intend to be protected (eg. Www.cxx.xx)
2) the no of sub domain and the backend IP
3) IS NBP expecting fully managed cloud with managed services or an outright purchase of on-premises solutions? Are they expecting a subscription-based service?
This project is Extended till 01.09.2026, clarification must be on its Tab.
Clarifications Regarding CDN Requirements, Bid Security, ePADS Eligibility & Contract Termination
Dear Sir,
We seek clarification on the following four issues:
1. CDN Bandwidth & Requests: The tender requires CDN services; however, Cloudflare’s current service model does not provide unmetered bandwidth under a general fair-usage arrangement. Kindly clarify the required CDN bandwidth (Mbps/Gbps) and expected/required number of CDN requests so we can accurately size and quote the service.
2. Bid Security: The tender main page and Point 18(3)(b) mention various methods for Bid Security, whereas Page 133, Section 13 specifically mentions Bank Guarantee. Kindly clarify the acceptable form of Bid Security, particularly whether Pay Order is acceptable.
3. ePADS Eligibility: The portal shows: “You are not eligible to participate in this procurement. Your business is not eligible for this procurement.” (Screen shot attached). We have contacted PPRA Support, but resolution may take time. We request NBP to kindly extend the bid submission deadline to allow sufficient time to resolve this issue.
4. Contract Exit Clause: The tender specifies a 3-year contract. Kindly clarify whether the successful bidder may terminate/exit after one year by providing prior written notice (e.g., 60 days), or whether the bidder must continue for the full 3-year term.
This project is Extended till 01.09.2026, clarification must be on its Tab.
Mr. Imran Taqi
ConvenerSenior Vice President
Department: National Bank of Pakistan (NBP)
Email: imran.taqi@nbp.com.pk
Ms. Teemar Nauman
MemberAssistant Vice President (AVP)
Department: National Bank of Pakistan (NBP)
Email: teemar@nbp.com.pk
Mr. Muhammad Masab Faridi
MemberSenior Vice President
Department: National Bank of Pakistan (NBP)
Email: masab.faridi@nbp.com.pk
Mr. Rehan Ali Anjum
MemberSenior Vice President
Department: National Bank of Pakistan (NBP)
Email: rehan.anjum@nbp.com.pk
Mr. Noman Kazi
MemberSenior Vice President
Department: National Bank of Pakistan (NBP)
Email: noman.kazi@nbp.com.pk
Query
Why two different countries for sensitive data ?
Need more clarity on the below point
Bidder should provide web hosting services on servers located in at-least two different countries (at least one in Pakistan
with HA with cold state & auto sync) to cater contingency scenarios. The bidder is required to mention the details of
hosted servers’ locations. It is bank's discretion to accept the server hosting locations to comply with Government
regulation. (Qualitative)(Doc Required)
Clarification
NBP response
| 1.This is NBP Requirement |
| 2.The bidder shall provide web hosting services with the primary (production) hosting environment located in Pakistan and a Disaster Recovery (DR) site located outside Pakistan. In addition, the primary hosting environment in Pakistan must be configured with High Availability (HA), including a secondary server in a cold standby state with automatic data synchronisation. In the event of a failure of the primary server, the standby server should be capable of being brought online with minimal disruption to services. The bidder is required to provide details of all proposed hosting and DR data centre locations as part of the bid submission. The Bank reserves the right to assess and approve the proposed hosting locations in accordance with applicable regulatory and compliance requirements. |
Query
Bidder should provide web hosting services on dedicated server
We can provide a Virtual Private Server(VPS) for hosting the NBP's website, which can meet your requirement for a dedicated server.
View PDF Submitted on: Jul 30, 2026, 10:05 PMClarification
NBP response against M/S. Jazz
| NBP requires a Dedicated/Bare-Metal Server , rather than a VPS or shared cloud instance, to ensure dedicated physical resoures consistent performance,strong isolation and greater operational flexibility. |
Query
Why are unable to Know the Reason of Non Selection
Dear Team,
We, at Nexus Technologies, would appreciate clarification regarding our current eligibility status.
Despite fulfilling all the stated prerequisites and successfully submitting all the required documentation, including verified and valid company information, we have been informed that we are not eligible. At this stage, it is unclear to us which specific requirement has not been met.Q
We kindly request a detailed explanation of the reason for our ineligibility so that we can understand the issue and, if necessary, take the appropriate corrective action.
We look forward to your response and appreciate your assistance in resolving this matter.
View PDF Submitted on: Jul 31, 2026, 04:10 PMClarification
NBP response against M/S.Nexus Technologies
| We are unable to determine the reason for this system-generated eligibility restriction. Please contact PPRA Support for assistance |
Query
Clarifications required against web Hosting tender
Nayatel needs clarity responses agianst below queries.|
1. Is the SQL Server Enterprise 2016/2017+ license to be provided by the bidder (bundled in hosting cost) or is it NBP-owned/BYOL, with bidder only hosting on it?
2. If bidder-provided, which exact edition/licensing model is expected — Enterprise (Core-based), Enterprise (Server+CAL), or is Standard edition acceptable if functionally sufficient?
3. How many CPU cores / vCPUs need to be licensed for SQL Server, given the RFP's minimum server spec (Quad Core, 64GB RAM)?
4. Is a specific SQL Server version (2016, 2017, 2019, 2022) currently in production, and is upgrading in-place acceptable or must it match exactly?5. How many domains and subdomains currently exist under nbp.com.pk that need to be migrated (please provide an inventory/list)?
6. Is the scope limited to the main corporate website, or does it include other subdomains (e.g., internet banking portal, career portal, microsites) hosted separately?
7. What is the current size of the website + database (approx. GB) to be migrated?
8. Is there a cutover window / maintenance window NBP expects, and is downtime during migration acceptable or is zero-downtime migration required?
9. Will NBP provide DNS access directly, or is coordination through a third-party registrar/current host required?
10. Is there a current hosting provider whose cooperation/handover will be needed during migration?11. Is it necessary to provide the solution in two countries?
11. Is failover/DR expected to be active-active or active-passive between the two country locations (Section 2.xx mentions servers in ≥2 countries)?
12. What is the estimated web traffic bandwidth requirement?
13.What is the geographic/client base origin of the domains to be hosted?
14.How many servers will need to be acquired for web hosting?
15.Is the CDN required for web traffic only, or does it need to cover other services as well?
Submitted on: Aug 04, 2026, 12:48 PMClarification
NBP response against M/S. Nayatel queries.|
| 1 | Refer to SBD Technical Compliance Point 2 (c), The bidder should provide all required software, licenses, and subscriptions as part of the proposed solution. The RFP specifies SQL Server Enterprise 2016/2017 or latest as part of the existing technology stack or future upgrades. |
| 2 | The RFP requires support for the Bank’s existing Microsoft SQL Server 2016/2017 environment as well as the proposed new hosting platform. The bidder shall propose and include all SQL Server Enterprise licensing necessary for all environments in accordance with Microsoft's applicable licensing policies and licensing model. The proposed solution must ensure full licensing compliance throughout the contract period. |
| 3 | The RFP specifies a minimum dedicated server configuration of 2 × 3.4 GHz Intel Xeon Quad Core (equivalent or higher) with 64 GB RAM. Accordingly, bidders shall size and propose the required Microsoft SQL Server Enterprise core licences based on the hardware configuration offered, ensuring compliance with Microsoft's applicable licensing requirements. |
| 4 | The RFP identifies the existing platform as SQL Server Enterprise 2016/2017 or latest and allows bidders to propose upgraded technologies, provided compatibility with the existing NBP website is ensured. |
| 5 | Refer to point no 2 (a), currently we have unlimited subdomain agreement with exisiting vendor. |
| 6 | The scope covers NBP's existing website under *.nbp.com.pk. The RFP does not provide an individual inventory of subdomains or separately hosted portals; therefore, the bidder should consider the NBP website and associated web services within the *.nbp.com.pk scope. |
| 7 | The current website and database size may increase over time as part of normal business operations. Therefore, the proposed solution should be scalable and capable of supporting future growth, including the maximum website and database size supported by the proposed platform. Bidders are required to specify any applicable capacity limits and scalability options in their proposal. |
| 8 | The bidder is required to perform the migration with zero downtime. However, if any technical constraints necessitate service downtime, the bidder must clearly specify the required maintenance window, including the expected duration and migration activities, for the Bank's review and approval. |
| 9 | Refer to Point no 2 (n), Bidder should provide DNS parking for domain nbp.com.pk |
| 10 | Yes, Currently M/s Server4Sale Hosting the services. Refer to SBD Point no 2 (g). |
| 11 | Yes. The RFP requires hosting servers in at least two different countries, with at least one location in Pakistan, including HA with cold state and auto-sync for contingency purposes. |
| 12 | The RFP requires a 100+ Gbps port with unlimited traffic and 100+ Gbps inline DDoS protection. In addition, the CDN requirement includes up to 10 TB CDN traffic and 100 million HTTP requests, with over-utilization pricing to be provided by the bidder. |
| 13 | The RFP does not specify the geographic distribution of NBP website users/clients. The solution is intended for NBP's public-facing website and associated web services. |
| 14 | The RFP does not explicitly provide a total server count. It requires dedicated-server hosting and servers in at least two different countries, with at least one location in Pakistan having HA/cold-state auto-sync. The bidder should propose the required number of servers to meet all mandatory requirements. |
| 15 | The RFP requires a CDN as part of the website hosting solution, including static and dynamic content caching, client-side control, multi-location and multi-tier setup. It also specifies Cloudflare Enterprise including DDoS, WAF and CDN. The scope is primarily for the NBP domain/website and associated web services. |
⏳ Time Left for Bid Submission Deadline