Denmark – Software package and information systems – Data Diode

The Danish Agency for Digital Government (Digitaliseringsstyrelsen) operates on behalf of the Danish State a national qualified trust service for the management of qualified electronic signature creation devices under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of securing and modernising the signing service to meet the requirements of eIDAS2, the Agency is procuring Data Diode solutions to be installed and operated within the Agency's data centres (currently two). The Contract includes an Option to extend the deployment to a third data centre and an Option to extend the Contract and replace the Data Diode Hardware. The Contract covers the Initial Delivery of certified Data Diode appliances, comprising dedicated Hardware and associated Software, certified in accordance with Common Criteria or EUCC at EAL4 or higher. The Initial Delivery includes all Licences, Documentation, and support necessary for the Agency to install and operate the Data Diode solutions as part of its trust service infrastructure. The Data Diode solutions must provide one way traffic from the Agency's isolated Root CA environment to other network zones, while preventing any data transfer in the reverse direction. The solutions must support integration with the Agency's existing infrastructure and the required protocols for transfer of files, time information, monitoring and logging data. The Supplier's principal obligations comprise: (a) the Initial Delivery of four Data Diode appliances for deployment across the Agency's production and staging environments in two data centers, together with the required Standard Software and deployment in the Agency's test and development environments; (b) Ongoing Services, including support and maintenance of the Standard Software and Hardware, security patching, product lifecycle management and hardware replacement; and (c)Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks) and Options; and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.