Government procurement asks specific questions. Here are our answers, so you can qualify us before the first meeting.
Nationwide traffic enforcement in Saudi Arabia and a land and tax registry in Palestine, both delivered with full handover.
On-premise, government cloud or sovereign region. Nothing leaves the jurisdiction unless the contract allows it.
The people who write the proposal build the system and stay through handover. No handoff to a delivery team you have never met.
Both are live today. Details, references and site visits are available under NDA.
Tahakom · Saudi Arabia · 2018–present
Computer vision that flags phone use and unbuckled belts from roadside cameras, in production across Saudi Arabia since 2018.
In production, nationwide
Land and Tax Department, Palestine · Palestine · 2026
Paper land and tax records moved into a single secure system with citizen-facing services.
Delivered and handed over
What evaluation committees usually ask, how we implement it, and the evidence you receive.
| Control | How we implement it | Evidence you receive |
|---|---|---|
| Data residency | On-premise or in the region and provider you name. No external calls from production without written approval. | Network diagram and data-flow register |
| Access control | Role-based access, MFA for administrators, least-privilege infrastructure. | Access matrix and admin list |
| Audit trail | Every change attributed and timestamped. Enforcement decisions carry frame, model version and confidence. | Immutable log export on request |
| Security testing | Independent penetration test before go-live. Findings fixed within the contract. | Test report and remediation record |
| Backup and recovery | Recovery objectives agreed in writing and rehearsed before launch. | Disaster-recovery runbook and drill record |
| Ownership and escrow | Source code in a repository you own from day one. Infrastructure as code. | Signed handover checklist |
| Accessibility and Arabic | WCAG 2.1 AA target, right-to-left layout designed first, Hijri and Gregorian dates. | Accessibility audit and bilingual screens |
| Support | Response and resolution times by severity, named engineer, monthly report. | Support agreement and SLA report |
Three routes that fit most public procurement rules.
Send the RFP or RFI. You receive a compliant response with fixed-scope pricing where requirements are stable, and time-and-materials with a cap where they are not.
A fixed-price, two to four week discovery produces the scope, architecture and estimate you can attach to a tender or a direct award.
Where rules require a registered local contractor, we deliver as the named technical subcontractor and remain the accountable engineering party.
A six-month citizen-facing system, from first workshop to independent operation. Larger programmes repeat the build and verify phases.
Process mapping, data assessment, architecture, written estimate.
Working software every two weeks on your infrastructure. Migration rehearsals.
Penetration test, load test, user acceptance with your staff.
Cut-over, on-site presence, daily reporting.
Training, documentation, signed checklist, support agreement.
Projects that go well share a few things on the client side.
Yes. Our largest deployment runs entirely inside the client's own data centre with no external connectivity. We adapt tooling and process to your policies.
Core engineering is in-house. Where a tender needs a local partner or a specialist, we say so in the proposal and remain the single accountable party.
A support agreement with defined SLAs, or a full handover to your team with training. Many clients choose both for the first year.
Discovery is fixed-price. Build is fixed-scope where requirements are stable, and time-and-materials with a cap where they are not. Either way you receive a written estimate before commitment.
Yes. Discovery workshops, acceptance testing, go-live and training are normally on site. Build work runs from our engineering centre with your stakeholders reviewing working software every two weeks.
Our delivery process follows ISO 27001 controls and we support your auditors with evidence at every stage. Ask us for the current status of formal certification when you send the RFP.
It stays with you. We hold no copies after handover, and any data used during discovery is deleted under the NDA terms.
Send us the brief or the tender documents. You will hear back from an engineer, not a salesperson, within two working days.