Provision of electronic sealing and related qualified services as a SaaS solution, including support and security monitoring

The subject of the public contract is the provision of electronic sealing and related qualified services as a SaaS solution, i.e., operated entirely on the supplier's infrastructure, using the supplier's certified HSM (Hardware Security Module) devices, located at the supplier's premises and managed by a qualified service provider. The service includes the issuance of qualified electronic time stamps. It also includes ensuring compliance with legislation (eIDAS 2.0, Cybersecurity Act, Critical Infrastructure Act), security measures, management of cryptographic resources, and ensuring guaranteed service availability for the Municipality of Prague, its municipal districts, and organizations established by the city. The scope of work includes, in particular: 1. Provision of qualified electronic sealing service in SaaS mode • Delivery of electronic sealing service within the supplier's environment. • Ensuring high service availability, 24/7 operation including monitoring and incident detection. • Provision of the service via a secure API for integration with the Prague City Hall IP. 2. Cryptographic services and key management in the supplier's environment • Ensuring qualified sealing in accordance with eIDAS 2.0. • Generation, management, and storage of private keys in HSM operated by the supplier, including records and audit logs. • Management of the certificate lifecycle (issuance, rotation, automatic renewal). • Ensuring availability of key generation and cryptographic operation protocols. 3. Provision of qualified electronic time stamps • Issuance of qualified electronic time stamps for the needs of the Contracting Authority. 4. Compliance with legislation and security regulations • The provided services must comply with Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC (hereinafter referred to as "eIDAS"), with Regulation (EU) 2024/1183 of the European Parliament and of the Council of 11 April 2024 amending Regulation (EU) No 910/2014 as regards establishing a European framework for digital identity ("eIDAS 2.0") and Act No. 297/2016 Coll., on trust services for electronic transactions, as amended, in the area of issuing qualified certificates for electronic signatures, qualified electronic time stamps, qualified certificates for electronic seals, qualified certificates for website authentication, and qualified services for validating qualified electronic signatures and seals. • The service complies with Commission Implementing Regulation (EU) 2025/1567 laying down implementing rules for Regulation (EU) No 910/2014 of the European Parliament and of the Council as regards the management of qualified remote electronic signature and qualified remote electronic seal creation services as trust services. • The service complies with the standards according to Act No. 264/2025 Coll., on Cybersecurity (hereinafter referred to as the "Cybersecurity Act"), which implements Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (hereinafter referred to as "NIS 2 Directive"). • The supplier must meet the conditions according to Act No. 266/2025 Coll., on the resilience of critical infrastructure entities and on amending related acts (Critical Infrastructure Act) (hereinafter referred to as the "Critical Infrastructure Act"). 5. Integration into the environment of the Municipality of Prague, municipal districts, and established organizations • Cooperation in ensuring compatibility and secure integration with key agenda systems (eSSL, ASDP, DMS, Portál Pražana, registries, and others – via the Prague City Hall Integration Platform). • Provision of technical interfaces and API gateway for secure service calls from internal Prague City Hall IS...