Proposals are hereby invited for the following: Provision of a BBBEE Reporting System to assist the National Consumer Tribunal with the improvement of its BBBEE score and the development of a BBBEE implementation plan. Specifications: The outputs of the required system should include the following: - Single database warehouse with individualized tracking and reporting over the three compliance requirements: BEE, EE and WSP. The Data warehouse must have API functionality to plug into existing financial, payroll and possibly learning management software platforms; - Automated Reporting: The system must allow for flexible and extensible reporting that meets Regulatory reports, Industry reports, B-BBEE certificates, RTS (Transformation) and Internal reporting (aligned to external reports). Reporting must be automated, updated in real-time and must be in a user-friendly format (dashboards, graphs, trend analysis, etc); - Extensibility: The system must have the capability to be upgraded and extended with additional functionality/modules for handling any additional government regulations/requirements; - Entity Reporting: Facilitating entity reporting views for the Group across various business entities; - BEE Reporting Solution: the Solution should be a SaaS, with the ability to integrate with existing data sources within the Group to streamline the current process of collecting and validating the data that is used for the reporting and certification process. Staff shall not install, manage, and upgrade the system software; this will be carried out by the Vendor or their partners which must demonstrate their capability; - Privileges and Immunities: The hosting provider and location must respect the privileges and immunities (authorization matrix, preventing access to unauthorized parts of data sets to unauthorized user categories) of the NCT; - GDPR/POPI Compliance: The vendor must be able to comply with the General Data Protection Regulation (GDPR); - Certification: The SaaS platform and/or its data storage and ley processes hosting platform should be ISO 27001 and/or SOC2 certified; - Capacity: The system must support the data sets and users the Group would need to effectively process the BEE Certificates and EE, WSP reporting requirements; - Security: the system must implement strong web application security controls, including authentication, authorization, HTTPS-only services, secure storage of password hashes, password policies, input validation, output encoding, secure sessions, malware scanning, auditing, and CAPTCHA/anti-bot protection. Insert full IT security pack; - Support: The vendor must provide technical support during NCT business hours (08:00 - 17:00 South Africa time). For high issues, the vendor needs to support outside business hours support for critical issues; - Efficiencies: Improve the data collection and validation process and improve the reporting capability of our stakeholders; - Training: Structured onboarding process/plan in terms of legislative and system training, data support, helpdesk support, crafting of compliance objectives strategic support, gap analysis and remedial actions (include template strategic compliance and gap analysis report). (Tender №84303179)