Tender Description:

1. Introduction

1.1 About Tegeta Motors

Tegeta Motors LLC is one of Georgia's leading automotive holding groups, operating an extensive network of dealerships, service centers, and spare-parts distribution across the country. As part of Tegeta Holding, the company manages a large and distributed IT infrastructure supporting sales, finance, logistics, and customer operations.

The Information Security department of Tegeta Holding functions as a centralized governance body for all subsidiaries, responsible for security architecture, compliance frameworks, policy development, and vendor evaluation.

1.2 Purpose of this RFP

Tegeta Motors is requesting formal proposals from qualified vendors for the supply, implementation, and support of a comprehensive Data Loss Prevention (DLP) solution. The solution must protect sensitive data across endpoints, removable media, cloud services, email, and web channels.

This RFP covers three (3) endpoint tiers to allow vendors to provide scalable pricing. Tegeta Motors reserves the right to select any single tier or negotiate a phased rollout across tiers.

1.3 Confidentiality Statement

All information contained in this RFP is strictly confidential and intended solely for authorized responding parties. No content may be disclosed to third parties or used for any purpose other than preparing a response to this RFP without express written consent from Tegeta Motors Information Security department.

2. Requirements

2.1 Requirements for the Solution Provider

The solution provider must submit a comprehensive proposal package including, but not limited to:

• Detailed description of offered technologies, product vendor(s), engine architecture, and modules
• Technical architecture diagrams showing deployment topology and data flow
• Project implementation plan including milestones, resource requirements, and timelines
• Information about the product manufacturer (longevity, market presence, certifications)
• System testing and acceptance plan
• Detailed and transparent project budget per tier
• Support terms, SLA commitments, and associated fees
• Warranty conditions for software licenses and services

The supplier is additionally required to:

• Present company profile, relevant experience, and Georgian-market or regional references
• Specify contractual conditions proposed for inclusion in the service agreement
• Provide post-implementation training for Tegeta Motors IS and IT administrators
• Configure baseline DLP policies aligned with Tegeta Motors requirements during initial deployment
• List all similar DLP projects implemented in Georgia or the region (if applicable)
• Submit any clarifying questions prior to the response deadline

2.2 Goals & Objectives

Tegeta Motors requires a modern, enterprise-grade DLP solution to monitor, detect, and prevent unauthorized movement of sensitive data across the organization's distributed endpoint estate.

Key objectives include:

• Identify, classify, and monitor sensitive data including financial records, PII, and proprietary business data
• Prevent unauthorized sharing or leakage across all channels: endpoint, USB, email, web, cloud/SaaS, print, and screen capture
• Support compliance with applicable regulatory and security standards 
• Provide audit-ready reporting, compliance dashboards, and exportable evidence packages
• Enable centralized policy creation, modification, and enforcement across all covered endpoints
• Deliver deep visibility into how sensitive data is accessed, transferred, and used
• Support behavior analytics to identify abnormal data activity and insider threats
• Enforce real-time policy controls with flexible response actions (block, warn, justify, quarantine, encrypt)
• Enable offline enforcement when endpoints are disconnected from the corporate network
• Provide role-based incident management, alerting, and escalation workflows
• Include native data classification and OCR capabilities
• Maintain a transparent, per-endpoint licensing structure across all tiers

3. Scope of Work

3.1 DLP Platform Capabilities

The selected vendor must deliver an end-to-end DLP platform providing the following capabilities:

Data Discovery & Classification

• Automated discovery of sensitive data at rest across endpoints and file servers
• Native data classification engine with support for custom data identifiers (regex, fingerprinting, keywords)
• OCR-based detection for sensitive content within images and scanned documents
• Support for Georgian-language content detection where applicable

Unified Policy Management

• Centralized management console for creating, modifying, and deploying policies
• Granular policy controls by user, group, device type, location, and data sensitivity
• Policy versioning, testing mode (shadow/monitor), and staged rollout support

Inline Data Protection Controls

• Automated enforcement actions: block, quarantine, encrypt, redact, mask, notify, or request user justification
• Channel coverage: USB/removable media, print, clipboard (copy/paste), screen capture, email (SMTP), web upload (HTTP/HTTPS), cloud storage/SaaS applications
• Offline enforcement — policies enforced when endpoint is not connected to corporate network

Advanced Detection Technologies

• Content inspection with exact data matching, partial document matching, and statistical analysis
• Risk scoring for users and data transfers with automated response actions
• AI/ML-based anomaly detection for insider threat identification

Insider Risk & Behavioral Analytics

• User risk profiling based on data access and transfer patterns
• Pre-defined and customizable risk indicators
• Integration capability with SIEM/UEBA platforms via syslog or API

Incident Management & Reporting

• Real-time alerting with incident workflow: triage, assignment, annotation, and escalation
• Role-based dashboards for security analysts, IS managers, and executive stakeholders
• Detailed audit logs and exportable compliance reports (PDF, CSV)
• Retention of incident data per configurable policy

3.2 Deployment & Architecture

• Support for on-premises and/or hybrid deployment models
• Lightweight agent with minimal endpoint performance impact (CPU/RAM benchmarks required)
• High availability and failover support for management infrastructure
• Role-based access control (RBAC) for the management console
• Supported OS: Windows 10/11 (mandatory), macOS (preferred)

3.3 Implementation Services

The vendor must provide the following implementation deliverables:

• Detailed implementation plan with milestones and acceptance criteria
• Deployment and configuration assistance for all covered endpoints
• Knowledge transfer sessions and administrator training (minimum 8 hours)
• Complete documentation: installation guide, administrator guide, user guide, and policy playbook

3.4 Support & Maintenance

• 24/7 technical support with defined SLA tiers (P1 response ≤ 4 hours)
• Regular software updates, hotfixes, and security patches included
• Access to vendor support portal and knowledge base
• Dedicated technical account manager (preferred)
• Annual health check or license review session

4. Pricing Requirements

4.1 Endpoint Coverage Tiers

Vendors must provide pricing for 100 licenses. 

Note: Tegeta Motors reserves the right to select any single tier, negotiate a phased rollout, or request blended pricing. The lowest-price offer will not automatically be selected.

4.2 Pricing Breakdown Requirements

For each tier, vendors must provide a line-item breakdown of:

• Software license fees (per endpoint, per year)
• Implementation and professional services fees (one-time)
• Year 1 support and maintenance (if not bundled)
• Training costs (if separate)
• Optional add-on modules and their per-endpoint pricing

All prices must be stated in Georgian Lari (GEL), inclusive and exclusive of VAT.

5. Required Documentation

Responding vendors must submit the following documents as part of their proposal package:

• Completed pricing table (all three tiers) — signed, stamped, and provided in both PDF and Excel format
• Company profile and overview of relevant DLP/security experience
• Product datasheet(s) and technical architecture diagrams
• CV(s) of lead implementation engineer(s) and project manager
• Minimum two (2) reference letters from comparable DLP deployments
• List of DLP projects implemented in Georgia or the Caucasus region (if any)
• Vendor/manufacturer authorization letter confirming the proposing company's partner status
• Extract from the Registry of Entrepreneurs (issued within the last 3 months)
• Signed Non-Disclosure Agreement (NDA) — template provided by Tegeta Motors upon request
• Methodology overview and project plan — maximum 3 pages
• Sample DLP policy playbook or deployment reference from a comparable customer (redacted as needed)

Tender Submission Terms:

• Offers should be submitted on procurement web-page: www.tenders.ge
• Submission Deadline is: 03/11/2026 18:00
• Bid currency: GEL
• Auction type: Without auction
• Instructions to Apply for E-Tender can be found in the attached file
• Any question during the electronic tender process shall be made in writing and communicated through the Q&A platform of www.tenders.ge website

Contact information:

ProcurementTenders@tegetamotors.ge

ტენდერის კატეგორია:

• 48730000 დაცვის პროგრამული პაკეტები
• 72260000 პროგრამულ უზრუნველყოფასთან დაკავშირებული მომსახურებები