# Cithorum — Tender Response Template

**Use:** Copy this whole document into a Word file at the start of every tender response. Replace every `[PLACEHOLDER]` with tender-specific content. Sections roughly mirror the structure of public-sector RFPs in India (Cover A — Eligibility, Cover B — Technical, Cover C — Commercial). Numbering matches the most common RFP pattern; check the actual tender document and renumber to match.

> **Bidding entity:** Cithorum **[INDIA LEGAL SUFFIX]**. The Indian operating entity is in formation (Q2 2026); confirm with corporate-secretarial that incorporation has completed before submitting any bid that names this entity as the contracting party. See `_placeholders.json` for the canonical entity values to substitute throughout this document.

---

## Cover Letter

[Cithorum [INDIA LEGAL SUFFIX] Letterhead]

Date: [DD/MM/YYYY]

To,
[Designation — e.g. The Chief Manager, Information Technology Department]
[Issuing Authority Full Name]
[Issuing Authority Address]

**Subject:** Response to Tender Reference No. [TENDER REF NO] — "[TENDER TITLE]"

Dear Sir/Madam,

We refer to your Request for Proposal No. [TENDER REF NO] dated [TENDER ISSUE DATE] for [TENDER SCOPE — e.g. "providing colocation services for the data centre"].

Cithorum [INDIA LEGAL SUFFIX] is pleased to submit our response, comprising:

- **Cover A** — Eligibility documentation, tender doc fee receipt, and EMD documentation (or Udyam-registered MSE exemption claim per Annexure A-EMD-Exemption attached).
- **Cover B** — Technical bid: executive summary, technical write-up, scope-of-work compliance matrix, project plan with PERT chart, and minimum technical specification compliance.
- **Cover C** — Commercial bid as per the format prescribed in the tender's Commercial Bid Annexure.

We confirm:

1. Our offer is valid for **[VALIDITY DAYS, default 90] days** from the date of bid submission.
2. We have read and accept all terms and conditions of the RFP without deviation, except as explicitly stated in the Statement of Deviations enclosed (where applicable; otherwise the Statement of No Deviations is attached at Annexure A-No-Deviations).
3. Cithorum [INDIA LEGAL SUFFIX] has not been blacklisted or debarred by any Government Department, Agency or Public Sector Undertaking in India as on the date of submission. The No-Blacklist Declaration is attached at Annexure A-No-Blacklist.
4. We are Udyam-registered as a [Micro / Small] Enterprise. The Udyam Registration Certificate is enclosed and we claim the applicable EMD exemption, tender document fee exemption, and procurement preferences under the Public Procurement Policy for Micro and Small Enterprises (Order, 2012, as amended) issued by the Ministry of MSME, Government of India.
5. The signed Pre-Contract Integrity Pact (two copies on stamp paper of requisite value) is enclosed at Annexure A-Integrity-Pact.

We thank you for the opportunity and look forward to participating in the bid evaluation.

Yours faithfully,

For Cithorum [INDIA LEGAL SUFFIX]

[Authorised Signatory Name]
[Designation — e.g. Director / Authorised Representative]
Date: [DD/MM/YYYY]
[Company Seal]

---

## Section 1 — Executive Summary

*(Maximum 5 pages. Procurement officers read this first; everything else is reference. Lead with eligibility and proof, not narrative.)*

### 1.1 About Cithorum

Cithorum [INDIA LEGAL SUFFIX] is the Indian operating entity of Cithorum, a sovereign cloud and data-centre operator with a European parent holding the Jam intellectual property and a Canadian operating entity (Cithorum Canada). Cithorum [INDIA LEGAL SUFFIX] is headquartered in [REGISTERED OFFICE CITY] with the proof environment in [DC LOCATION]. The company operates a live 1 PB managed data-centre service powered by **Jam** — a software data-plane technology that delivers 3–8× end-to-end compression on enterprise workloads (and up to 100× on backup-class workloads against rsync as the comparator) without GPU dependency.

Cithorum [INDIA LEGAL SUFFIX] is **SOC 2 operationally compliant** via continuous control monitoring today, with formal Type I attestation in flight (target Q4 2026) and Type II Q3 2027. **ISO 27001 operationally compliant** with full Annex A control mapping in place; formal certification in flight Q4 2026. RBI IT & Cybersecurity Framework alignment, PCI-DSS-scoped estate support, HIPAA-aligned deployment patterns, CERT-In incident-response logging, and DPDP Act 2023 residency are built into the architecture by default.

### 1.2 Why Cithorum for this engagement

| What the tender asks | How Cithorum answers |
|---|---|
| [Tier 3 facility] | Tier 3-compliant data centre operated in [LOCATION]; certificate enclosed |
| [Uptime SLA] | 99.982% data-centre infrastructure uptime, quarterly SLA review |
| [Compliance certifications] | SOC 2 operationally compliant; ISO 27001 control mapping; HIPAA / PCI / RBI / CERT-In / DPDP alignment |
| [Storage / colocation / cloud scope] | 1 PB live; scaling to 300–700 PB usable on a single MW envelope under Jam |
| [Customer-controlled exits] | Data plane is ours; data ownership is the customer's. Pull at any time; deterministic restore from any compressed envelope; no lock-in |
| [Project timelines] | Site readiness in 6 weeks from PO; lift-and-shift in 3 weeks following acceptance |

### 1.3 Unique qualifications

1. **Live revenue benchmark.** M2M TechConnect production deployment running at $7,000 / month MRR on Jam-on-Linux; first invoice issued April 2026.
2. **Independently measured benchmark proof.** April 2026 live test on a 135 GB VM-snapshot workload: **135 GB → 17.2 GB combined (7.85×)**, NVMe-bound throughout (281 MB/s encode, 1.13 GB/s decode). Diff/backup workload benchmark vs rsync: **123 GB → 1.18 GB (>100×)**.
3. **Energy delta.** Jam-enabled 1 MW reference build draws ~600 kW for the same IT workload as a conventional 1.4 MW facility — a ~32–57% facility delta and 3.87–6.96 GWh/year of avoided energy per MW. Direct fit to the Karnataka 1,000 MW sustainable data-centre programme.
4. **Ecosystem validation.** NVIDIA Inception programme member; NATO BRAVE1 / UNITE National Authority vetting; ZenLaunchpad CAD $30,000 grant won; Atreides IO production deployment route; SwissVault genomics benchmark trial.
5. **Udyam-registered MSE.** EMD exemption, tender doc fee exemption, and 25% procurement preference under the Public Procurement Policy for MSEs.

---

## Section 2 — Detailed Technical Write-Up

### 2.1 Solution overview

[Describe how the proposed deployment maps to the tender's Scope of Work. Use the headers from the tender's Scope-of-Work section verbatim — most public-sector RFPs are graded item-by-item.]

### 2.2 Compliance with Minimum Technical Specifications

[Reproduce the tender's Annexure of Minimum Technical Specifications as a two-column table: tender requirement on the left, Cithorum's compliance statement on the right. State "Complied" or "Not Complied — alternative offered" against each line.]

### 2.3 Telemetry-only architecture

Jam — Cithorum's software data plane — operates exclusively on infrastructure telemetry (CPU, thermal, power, throughput) and never accesses or processes customer application data. All payload data remains in customer-controlled buckets, encrypted in transit (TLS 1.3) and at rest (AES-256). Restore is hash-verified end-to-end; deterministic restore is guaranteed and demonstrated as part of the monthly benchmark report.

### 2.4 Security posture

- **SOC 2 operationally compliant** — pre-audit framework document available on request under NDA; Type I attestation targeted Q4 2026, Type II Q3 2027.
- **ISO 27001 control mapping** — full control matrix available on request.
- **RBI IT & Cybersecurity Framework** — designed to operate within RBI-supervised environments.
- **PCI-DSS** — supports PCI-DSS-scoped estates with isolated tenancy.
- **HIPAA-aligned** — deployment patterns for clinical and sequencing data.
- **CERT-In** — logging and incident-response integration.
- **DPDP Act 2023** — data residency by default; customer-controlled exit guaranteed.
- **MeitY empanelment** — in process via Suraj S Naik's network (Chirag Labs).

### 2.5 Energy and sustainability

[Cite the Karnataka programme, the -32% facility-draw delta on conservative workloads, the -57% best-case for backup-heavy workloads, and the captive solar power channel at ₹2.35/unit if relevant to the tender's evaluation criteria.]

---

## Section 3 — Project Plan & PERT Chart

### 3.1 Timeline

| # | Activity | Owner | Duration | Cumulative weeks from PO |
|---|---|---|---|---|
| 1 | PO acceptance, kick-off, project manager assigned | Cithorum + customer | 3 days | 0.5 |
| 2 | Site survey, data audit, risk register | Cithorum | 1 week | 1.5 |
| 3 | Server cage / co-location area readiness | Cithorum + SI partner | 4 weeks | 5.5 |
| 4 | Network & communication-area readiness | Cithorum + SI partner | 1 week | 6.5 |
| 5 | Site readiness inspection & acceptance | Customer | 1 week | 7.5 |
| 6 | Lift-and-shift / data migration | Cithorum | 3 weeks | 10.5 |
| 7 | Cut-over, parallel run, go-live | Cithorum + customer | 1 week | 11.5 |
| 8 | First monthly benchmark report | Cithorum | 1 week post go-live | — |

### 3.2 PERT chart

[Insert PERT diagram or Gantt as required by the tender. Most RFPs accept a tabular Gantt; some require a PERT diagram. Default to producing both.]

### 3.3 Risk register

| Risk | Likelihood | Impact | Mitigation |
|---|---|---|---|
| Hardware delivery delay from SI partner | Low | Medium | 14–16 week lead time pre-baked into the 11.5-week timeline; SI partner onboarded before PO |
| Customer data audit reveals non-standard formats | Medium | Low | Pre-PO data audit included in Activity 2 |
| Compliance certification request mid-engagement | Low | Low | Control mapping ready on request before bid |
| Network/link migration outage | Low | High | Parallel-run window of 1 week; DR fallback to source DC |

---

## Section 4 — Commercial Bid

[Strict adherence to the tender's Commercial Bid format is mandatory. Do not deviate from the format. Reproduce every line item, even if the value is zero or N/A. Quote in INR only. Taxes extra as applicable. State validity period clearly.]

[Include the Optional Rate Card if the tender prescribes one — even when not asked, public-sector tenders often reference it for change orders.]

---

## Annexures

The following annexures are filed alongside this response. Each is on Cithorum [INDIA LEGAL SUFFIX] letterhead or on stamp paper of requisite value as required by the tender:

- **Annexure A-Letter-of-Authorization** — authorising the named representative to attend bid opening
- **Annexure A-No-Blacklist** — No-Blacklist Self-Declaration on letterhead
- **Annexure A-No-Deviations** — Statement of No Deviations on letterhead (or Statement of Deviations if any)
- **Annexure A-Eligibility** — Eligibility Criteria Form with documentary proof attached
- **Annexure A-EMD-Exemption** — Udyam Registration Certificate + claim of EMD exemption under PPP-MSE
- **Annexure A-NDA** — Non-Disclosure Agreement on ₹100 stamp paper, two copies signed
- **Annexure A-Integrity-Pact** — Pre-Contract Integrity Pact on stamp paper of requisite value, two copies signed
- **Annexure A-Bid-Submission-Checklist** — bid submission checklist as per the tender's prescribed format
- **Annexure A-Min-Tech-Spec** — Minimum Technical Specification compliance matrix
- **Annexure A-Asset-Details** — asset details / inventory (if migration scope)

[End of template]

---

*Maintained by Cithorum [INDIA LEGAL SUFFIX]. Last updated: [DATE]. Internal version: v1.0.*