16 ORG-0001 SPRIND GmbH Lagerhofstr. 4 Leipzig 04103 DED51 DEU HRB 36977 (AG Leipzig) Friedrich Graf von Westphalen & Partner mbB Rechtsanwälte +49697191890-12 sprind.ausschreibungen@fgvw.de ORG-0002 Vergabekammer des Bundes Kaiser-Friedrich-Straße 16 Bonn 53113 DEA22 DEU 022894990 +49 2289499-163 vk@bundeskartellamt.bund.de 2.3 eforms-de-2.1 eforms-sdk-1.13 e1c3dc27-a4d6-4e8f-bc18-08ca2678729e 45f9d120-52ff-4aa0-9fed-a42ddc504f33 2026-05-05+02:00 19:20:33+02:00 01 2026-05-05+02:00 32014L0024 cn-standard ENG pub-undert-cga econ-aff ORG-0001 false false no-eu-funds false vgv ENG SomeTenderDocID1 non-restricted-document nati-ground In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) crime-org In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) terr-offence In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) finan-laund In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) fraud In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) corruption In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) human-traffic In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) tax-pay In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) socsec-pay In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) envir-law In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) socsec-law In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) labour-law In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) insolvency In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) liq-admin In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) susp-act In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) bankr-nat In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) prof-misconduct In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) distorsion In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) partic-confl In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) prep-confl In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) sanction In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act) misrepresent In accordance with Sections 123,124 GWB (Act Against Restraints of Competition), Section 21 AEntG (Posted Workers Act), Section 98c AufenthG (Residence Act), Section 19 MiLoG (Minimum Wage Act), Section 21 SchwarzArbG ( Act to Combat Illegal Employment) and Section 22 LkSG (Supply Chain Due Diligence Act). epo-notice epo-procurement-document ORG-0001 According to Article 160, Section 3 of the German Act Against Restraint of Competition (GWB), application for review is not permissible insofar as 1. the applicant has identified the claimed infringement of the procurement rules before submitting the application for review and has not submitted a complaint to the contracting authority within a period of 10 calendar days; the expiry of the period pursuant to Article 134, Section 2 remains unaffected, 2. complaints of infringements of procurement rules that are evident in the tender notice are not submitted to the contracting authority at the latest by the expiry of the deadline for the application or by the deadline for the submission of bids, specified in the tender notice. 3. complaints of infringements of procurement rules that first become evident in the tender documents are not submitted to the contracting authority at the latest by the expiry of the deadline for application or by the deadline for the submission of bids, 4. more than 15 calendar days have expired since receipt of notification from the contracting authority that it is unwilling to redress the complaint. Sentence 1 does not apply in the case of an application to determine the invalidity of the contract in accordance with Article 135, Section 1 (2) Article 134, Section 1, Sentence 2 remains unaffected. ORG-0002 ENG Communication shall only take place via the electronic procurement platform DTVP. open https://www.dtvp.de/Satellite/notice/CXP4D9LMNX2 false false EIN-1380 Runtime Application Self-Protection (RASP) The implementation of the revised eIDAS regulation (electronic Identification, Authentication and Trust Services) requires the creation of a secure and user-friendly ecosystem. As a milestone for Europe's digital sovereignty, its core element is the European Digital Identity Wallet (EUDI Wallet), which serves as the regulation's central instrument. By the start of 2027, all EU citizens and residents should have access to a trustworthy, interoperable, and non-discriminatory digital wallet for identification, attribute attestations, electronic signatures, and more. The EUDI Wallet aims to simplify users' daily lives while enabling companies and administrations to benefit from faster, more secure, and more efficient digital processes. In Germany, the rollout of the EUDI Wallet is a joint effort by the Federal Ministry for Digital and State Modernization (BMDS) and SPRIN-D - the Federal Agency for Breakthrough Innovation. Since June 2023, the initiative has followed an open architecture and consultation process involving business, civil society, and science, with a focus on security, privacy, user-friendliness, and innovation. Germany"s dual strategy supports both a national EUDI Wallet as well as alternative EUDI Wallets. The roadmap includes a sandbox rollout of the identity (PID) function by the end of 2025 and further enhancements and production rollout throughout 2026. In this tender, the client is seeking a Runtime Application Self-Protection (RASP) solution to provide an additional layer of runtime security for its wallet applications on iOS and Android. The objective is to enhance protection against runtime threats, obfuscate the code and support privacy provisioning and telemetry. The scope covers the procurement and integration of the RASP solution with the described functionality. supplies #Bekanntmachungs-ID: CXP4D9LMNX2# The tender documents will be available in English. However, German (public proucurment) law applies and for the legally binding version of the contract is German version decisive. 2500000.00 48100000 48000000 Lagerhofstr. 4 Leipzig 04103 DED51 DEU LOT-0001 slc-suit-reg-trade If the company is registered in the commercial register or a comparable register in the country of origin, submiission of a copy of the extract from the commercial register or equivalent proof from the respective country of origin (not older than 90 days at the time of expiry of the tender deadline) at the request of the client after expiry of the tender deadline. For foreign documents that are not written in German or English, a simple translation into German or English must be enclosed slc-stand-to-avg Self-declaration regarding the company's total turnover in the last three completed financial years provided that the relevant information is available. (e.g., companies that have not yet been in existence for three years must include the information since their inception).. Minimum requirement Total Turnover - average annual turnover of at least EUR 3,000,000.00 (net) Please use the relevant form "Appendix 01_Self-declarations and evidence". slc-abil-ref-supply At least three references from reference provider (RP) for the performance of comparable services/supplies (Providing Runtime Application Self-Protection (RASP) solutions for critical infrastructures, public sector, finance/banking, healthcare, insurance or crypto & fintech) since January 1, 2023, (it is sufficient that the relevant services were also provided in the reference period in the specified reference project, e.g., a reference that began on January 1, 2022, and ended on February 1, 2023, would be sufficient). The number of devices secured today (ongoing reference) or on exit (completed reference) must be minimum 50,000. Only references for providing Runtime Application Self-Protection (RASP) solutions for critical infrastructures, public sector, finance/banking, healthcare, insurance or crypto & fintech are permitted. Each reference must be either completed or ongoing. In the case of an ongoing reference specifications of the planned/contractual project duration and information on the current status must be included. The reference provider may be a public or private company in the above-mentioned required sector. Minimum requirements for each reference: 1. Since January 1, 2023 2. Completed and ongoing reference; if ongoing, specifications of the planned/contractual project duration and information on the current status of the reference project must be included 3. The respective reference must include providing Runtime Application Self-Protection (RASP) solutions for critical infrastructures, public sector, finance/banking, healthcare, insurance or crypto & fintech 4. Number of devices secured today (ongoing reference) or on exit (completed reference): minimum 50,000 5. The description must clearly and unambiguously show that at least the following services were provided, otherwise the reference will not be accepted: a. Providing Runtime Application Self-Protection (RASP) solutions for critical infrastructures, public sector, finance/banking, healthcare, insurance or crypto & fintech b. Please describe RASP functionalities that have been used and ramp-up of device count. Please use the relevant form "Appendix 01_Self-declarations and evidence". slc-stand-ins Self declaration to undertake to take out and maintain business liability insurance with the coverage amounts specified below in the event of an award. Insurance coverage shall be provided without restriction and in full for the entire duration of the contact. The sum insured is available twice per annum. Financial loss: At least EUR 1,0 million. Please use the relevant form "Appendix 01_Self-declarations and evidence". slc-sche-qu-cert-indep Self-declaration on ISO 27001 certificate or comparable. Upon request by SPRIND GmbH following the submission of a tender, the bidder will provide the relevant documentation. false false not-allowed no-eu-funds not-requ not-allowed false ENG SomeTenderDocID1 non-restricted-document https://www.dtvp.de/Satellite/notice/CXP4D9LMNX2/documents false late-all SPRIND GmbH asks - within its discretion - the bidder to submit, complete or correct documents, within the framework laid down by law (Section 56 (2) VgV). none epo-notice no not-allowed required performance Reference is made to the tender documents. false ORG-0001 https://www.dtvp.de/Satellite/notice/CXP4D9LMNX2 ORG-0001 2 According to Article 160, Section 3 of the German Act Against Restraint of Competition (GWB), application for review is not permissible insofar as 1. the applicant has identified the claimed infringement of the procurement rules before submitting the application for review and has not submitted a complaint to the contracting authority within a period of 10 calendar days; the expiry of the period pursuant to Article 134, Section 2 remains unaffected, 2. complaints of infringements of procurement rules that are evident in the tender notice are not submitted to the contracting authority at the latest by the expiry of the deadline for the application or by the deadline for the submission of bids, specified in the tender notice. 3. complaints of infringements of procurement rules that first become evident in the tender documents are not submitted to the contracting authority at the latest by the expiry of the deadline for application or by the deadline for the submission of bids, 4. more than 15 calendar days have expired since receipt of notification from the contracting authority that it is unwilling to redress the complaint. Sentence 1 does not apply in the case of an application to determine the invalidity of the contract in accordance with Article 135, Section 1 (2) Article 134, Section 1, Sentence 2 remains unaffected. ORG-0002 ENG false true false Communication shall only take place via the electronic procurement platform DTVP. required true https://www.dtvp.de/Satellite/notice/CXP4D9LMNX2 2026-06-05+02:00 10:00:00+02:00 2026-05-26+02:00 23:59:59+02:00 2026-06-05+02:00 10:01:00+02:00 Bidders are not permitted to attend the opening of bids. false none none EIN-1380 Runtime Application Self-Protection (RASP) The implementation of the revised eIDAS regulation (electronic Identification, Authentication and Trust Services) requires the creation of a secure and user-friendly ecosystem. As a milestone for Europe's digital sovereignty, its core element is the European Digital Identity Wallet (EUDI Wallet), which serves as the regulation's central instrument. By the start of 2027, all EU citizens and residents should have access to a trustworthy, interoperable, and non-discriminatory digital wallet for identification, attribute attestations, electronic signatures, and more. The EUDI Wallet aims to simplify users' daily lives while enabling companies and administrations to benefit from faster, more secure, and more efficient digital processes. In Germany, the rollout of the EUDI Wallet is a joint effort by the Federal Ministry for Digital and State Modernization (BMDS) and SPRIN-D - the Federal Agency for Breakthrough Innovation. Since June 2023, the initiative has followed an open architecture and consultation process involving business, civil society, and science, with a focus on security, privacy, user-friendliness, and innovation. Germany"s dual strategy supports both a national EUDI Wallet as well as alternative EUDI Wallets. The roadmap includes a sandbox rollout of the identity (PID) function by the end of 2025 and further enhancements and production rollout throughout 2026. In this tender, the client is seeking a Runtime Application Self-Protection (RASP) solution to provide an additional layer of runtime security for its wallet applications on iOS and Android. The objective is to enhance protection against runtime threats, obfuscate the code and support privacy provisioning and telemetry. The scope covers the procurement and integration of the RASP solution with the described functionality. supplies The figure given for the estimated contract value relates to the contract term, including extension options, and thus covers a period of up to 54 months. false none 48100000 48000000 Lagerhofstr. 4 Leipzig 04103 DED51 DEU 30 The scope of services may, by mutual agreement between the parties, be supplemented or specified in more detail to include comparable services related to the scope of services as set out in clause 1.4 and the service description, provided that such services do not materially alter the original scope of services. If a backend is required, the Licensor warrants that this component can be operated on the Client"s infrastructure or that of its designated subcontractors; at the same time, the Licensor warrants that the SDK supports standalone operation without a backend. Acceptance shall take place following successful integration and functional testing of the SDK and, where appli-cable, the backend against the specifications set out in this Agreement, and the Licensor un-dertakes to rectify any material deviations within the response and rectification periods agreed in this Agreement. For further details. please refer to the tender documents. 2 SPRIND GmbH has the option to extend the contract two times, each time for one year.