Search nstenders nstenders-16-Application Maintenance and Development
Application Maintenance and Development Services
Closes in 36 days 01 Oct 2026 00:00 UTC
IT fit 92 Directly matches software development and maintenance services.
AI workability
Effort & value
3,675 h AI · 1,125 h human · 4,800 h total
Deliverable mix
agent · assisted · human
Dates
20 Jul
20 Jul
01 Oct
01 Oct
AI agents can perform the majority of this application maintenance and development work, with humans handling contract, stakeholder, and release approval.
Bid call: MAYBE AI workability is high and the work fits the shop, but missing SOW and security clearance details create uncertainty. Recommend proceeding only after clarification; otherwise no-go.
| Deliverable | Mode | AI share | Hours | Notes |
|---|---|---|---|---|
|
Requirements Analysis and Backlog Refinement
Analyze existing mandate application, ROADMAP, and integrated apps; produce user stories and acceptance criteria. |
ai assisted | 70% | 300 | AI can parse documents and draft stories, but a human product owner must validate business rules and priorities. |
|
Application Maintenance
Bug fixes, patches, dependency updates, and small enhancements to existing applications. |
ai agent | 85% | 1200 | AI agents can handle routine code changes and tests; human review required for production changes. |
|
Feature Development
New features for ROADMAP and integrated applications to support Interventions or Simulations. |
ai agent | 80% | 1500 | AI can generate most code, tests, and docs; human architect reviews complex modules. |
|
Testing and QA
Unit, integration, regression, and performance testing; test data generation. |
ai agent | 90% | 500 | AI can generate and run test suites; human approves test plans and investigates failures. |
|
DevOps and CI/CD Pipeline Maintenance
Maintain build, test, deployment pipelines, infrastructure as code, and monitoring. |
ai agent | 85% | 300 | AI can automate pipeline changes; human needed for production access and incident response. |
|
Documentation and Training Material
User manuals, technical docs, runbooks, and EN/FR translations. |
ai agent | 90% | 200 | AI can draft and translate; human subject matter expert reviews for accuracy. |
|
Client Workshops and Stakeholder Engagement
Facilitate workshops, demos, and status meetings with CDIC stakeholders. |
human only | 0% | 200 | Relationship and facilitation work requires a person. |
|
Contract, Security, and Compliance Governance
Contract signature, insurance, security clearance processing, compliance reporting. |
human only | 0% | 100 | Legal and financial accountability cannot be delegated to AI. |
|
Deployment and Production Release Management
Coordinate releases, change management, rollback plans, and go/no-go approvals. |
ai assisted | 60% | 200 | AI can prepare release notes and checklists; human must approve production releases. |
|
Data Migration and Integration
Data cleaning, migration, API integrations, and BI/dashboard updates. |
ai agent | 80% | 300 | AI can handle data transformation and integration code; human validates data quality. |
Risks
-
high
Security clearance requirements unknown; CDIC may require cleared personnel/facility.
Mitigation: Request security requirements in clarification; partner with cleared subcontractor if needed. -
medium
Full SOW and application details not available; effort estimate may be inaccurate.
Mitigation: Obtain full RFP and conduct discovery before final bid. -
medium
AI-generated code may not meet CDIC's security/quality standards.
Mitigation: Implement human code review, automated security scanning, and test coverage gates. -
medium
No TBIPS/SBIPS standing offer may limit eligibility or evaluation.
Mitigation: Confirm CDIC's procurement vehicle; highlight niche AI-agent capability. -
low
Canadian content compliance could be complex.
Mitigation: Prepare Canadian content plan and track value-added contributions.
Human roles needed
- Senior Developer / Technical Reviewer · 66% — Reviews AI-generated code, validates architecture, and handles complex modules.
- Client Engagement Lead · 17% — Facilitates workshops, demos, and stakeholder communication.
- Contract / Legal / Financial Officer · 8% — Signs contract, manages insurance, and ensures compliance.
- Release Manager / DevOps Approver · 7% — Approves production releases and change management.
Why not more AI
- Cannot sign contracts or take legal/financial responsibility.
- Cannot facilitate sensitive stakeholder workshops or build executive trust.
- Cannot perform security-cleared on-site work if required.
- Needs human judgment for ambiguous business rules in CDIC's mandate application.
- AI-generated code must be reviewed for security, correctness, and maintainability.
- No physical presence for on-site deployment or hardware work.
Suggested delivery stack
- Use AI coding assistants (e.g., GitHub Copilot, Cursor) with strict code review.
- Adopt TypeScript/Python for backend, React/Angular for frontend, and PostgreSQL for data.
- Use automated testing (Jest, Playwright, pytest) and CI/CD (GitHub Actions/Azure DevOps).
- Use Terraform for infrastructure as code and Kubernetes for deployment.
- Use LLM-based document generation and translation for EN/FR deliverables.
- Implement human-in-the-loop gates for production releases and security approvals.
Requirements & compliance (2)
| Ref | Requirement | Kind | Compliance |
|---|---|---|---|
| Policy Section 5.2.1 | Only Canadian Suppliers, or Suppliers of an applicable trading partner, as defined in the Statement of Work, are eligible to submit proposals. Non-Canadian Suppliers and suppliers of non-trading partners are not eligible to compete or be awarded a contract. Shop is Canadian; must provide proof of Canadian supplier status. |
mandatory | met |
| Policy on Prioritizing Canadian Suppliers and Canadian Conte | This procurement is subject to the Policy on Prioritizing Canadian Suppliers and Canadian Content in Strategic Federal Procurement and includes clauses that prioritize Canadian Suppliers and Canadian Value-Added Content, including eligibility provisions, evaluation methodology and related compliance obligations. Canadian content thresholds and evaluation methodology not provided; must confirm in full RFP. |
mandatory | unclear |
Evaluation criteria & key dates
- Eligibility — Eligibility under Canadian supplier/content policy; no detailed scoring weights in notice.
- 2026-07-20 — Publication
- 2026-10-01 — Closing Date
Assumptions & gaps
Assumptions
- Effort estimate is for the first year of the contract; total multi-year effort will scale.
- Full SOW and application access will be provided after award.
- No security clearance is required unless stated in the full RFP.
- Canadian shop meets Canadian supplier eligibility.
- AI agents can access the development environment and codebase.
- Human review effort is included in the estimates.
Gaps in source documents
- Full Statement of Work not provided; only a summary.
- No estimated contract value or pricing structure.
- No security clearance requirements stated.
- No details on ROADMAP application stack, interfaces, or data.
- No evaluation weightings or scoring details.
- No onsite presence or language requirements specified.
Deep read covered 1 captured document.
Draft proposal
Application Maintenance and Development Services – AI-Accelerated Delivery with Human Accountability · drafted 21 Aug 2026 with deepseek-v4-flash — human review required before submission.
Executive summary
We propose a human-led, AI-accelerated approach to maintain and develop CDIC's mandate application (ROADMAP and integrated systems). Our model combines senior human architects, developers, and business analysts with AI agents to deliver faster cycles, lower costs, and rigorous quality. We are a Canadian shop, fully compliant with the mandatory eligibility requirement. We address the tender's limited detail by proposing a phased discovery sprint to refine scope and mitigate risks. No security clearance or on-site presence is assumed; we will confirm these requirements early.
Why us
We are a small, agile Canadian IT shop specializing in AI-agent-first delivery. Our model reduces routine coding, testing, and documentation effort by up to 72%, while keeping named humans accountable for architecture, client relationships, and quality. We bring senior expertise in legacy system modernization and integration, and we are transparent about our capabilities—no standing offers or large reference contracts, but we deliver with precision and direct accountability.
Understanding of your needs
CDIC requires ongoing maintenance and development of its mandate application, including ROADMAP and integrated applications. The tender notice is high-level, but we understand the need for reliable, secure, and compliant software that supports CDIC's deposit insurance mandate. Our approach prioritizes understanding existing systems, clarifying requirements, and delivering incremental value with minimal disruption.
Proposed approach
-
Discovery and ScopingWeeks 1-2
Conduct a 2-week sprint to map the existing application landscape, clarify requirements, and define success metrics with CDIC stakeholders.
Deliverables: Discovery report, Refined backlog, Risk register
AI leverage AI agents analyze available documentation, code repositories, and data schemas to accelerate discovery.
Human oversight Senior business analyst and architect lead workshops, validate findings, and sign off on the scope.
-
Maintenance and SupportOngoing, monthly cycles
Provide ongoing bug fixes, patches, and minor enhancements to ROADMAP and integrated apps, with SLAs for response and resolution.
Deliverables: Monthly release notes, Patch deployments, Incident reports
AI leverage AI agents triage tickets, generate fixes, and run automated regression tests.
Human oversight Senior developers review all AI-generated code; QA specialist validates against CDIC standards.
-
Development and EnhancementsBi-weekly sprints
Implement new features and integrations based on prioritized backlog, using agile sprints.
Deliverables: Feature releases, Technical documentation, Test reports
AI leverage AI agents generate code, tests, and documentation; automate CI/CD pipelines.
Human oversight Architect reviews design, developer reviews code, business analyst validates against requirements.
-
Quality and ComplianceContinuous
Ensure all deliverables meet CDIC's quality, security, and regulatory standards.
Deliverables: QA reports, Compliance checklists, Sign-off documents
AI leverage AI-powered static analysis, automated test generation, and compliance checks.
Human oversight QA/Compliance specialist performs final sign-off; senior developer reviews critical paths.
Team and accountability
AI-accelerated delivery with human accountability: AI agents handle routine and repetitive tasks, while named humans own decisions, quality, and client outcomes.
- Project Manager / Business Analyst · 15% of total effort — Facilitate workshops, gather requirements, manage stakeholder expectations, and ensure alignment with CDIC goals.
- Senior Software Architect / Developer · 10% of total effort — Review AI-generated code, make architectural decisions, handle complex integrations, and ensure technical quality.
- QA / Compliance Specialist · 3% of total effort — Validate deliverables against CDIC's quality and regulatory standards, manage testing, and ensure compliance.
Compliance responses (1)
| Ref | Requirement | Our response | Status |
|---|---|---|---|
| Solicitation Number 2026-4858 | Only Canadian Suppliers, or Suppliers of an applicable trading partner, are eligible to submit proposals. Non-Canadian Suppliers or suppliers of a non-trading partner will be rejected. | We are a Canadian-owned and operated company, fully eligible under this requirement. | met |
Evaluation criteria — how we score
- Technical approach and methodology — We present a clear, phased approach with AI acceleration and human oversight, demonstrating efficiency and quality.
- Experience and qualifications — We highlight our senior team's expertise in application maintenance and modern development practices, despite being a small shop.
- Cost and value — Our AI-accelerated model reduces effort hours, offering competitive pricing without compromising quality.
- Compliance and security — We are Canadian and will work with CDIC to meet any security or on-site requirements, with clear mitigation plans.
Pricing guidance (figures TBD)
Time-and-materials with a capped monthly rate, or fixed-price per sprint based on refined scope after discovery. We will provide a detailed cost breakdown after the discovery sprint.
- Pricing is driven by the mix of human hours (senior roles) and AI agent usage (platform costs).
- We will provide a transparent rate card for each role and AI tooling costs.
- No hidden fees; all costs are itemized in monthly invoices.
Fill in before submission
- TBD: Monthly rate for maintenance and support
- TBD: Fixed price per sprint for development
- TBD: One-time discovery sprint cost
Questions, assumptions & checklist
Questions for the buyer
- Can you provide the detailed scope of work, including the technology stack and complexity of ROADMAP and integrated applications?
- Is remote work acceptable, or is on-site presence required? If on-site, where and how often?
- Are there any security clearance requirements for personnel? If so, what level?
- What are the specific evaluation criteria and weighting?
- Is there an estimated budget or ceiling for this contract?
Assumptions
- The work is primarily software development and maintenance, not physical or security-cleared.
- The contract allows remote work and does not require on-site presence.
- The shop can provide a Canadian supplier status and meet all mandatory requirements.
- The estimated effort is based on typical application maintenance contracts of similar scope.
Submission checklist
- action needed Completed solicitation form
- ready Proof of Canadian supplier status
- ready Technical proposal (this document)
- action needed Pricing schedule with placeholders
- action needed References (not available; will provide alternative evidence of capability)
- n/a Security clearance documentation (if required)
Open gaps & mitigations
- Tender notice is very thin; no detailed scope, evaluation criteria, or security requirements provided.
We will request clarification before bidding and base our proposal on industry benchmarks, with a discovery sprint to refine scope. - No information on the specific technologies or complexity of the applications (ROADMAP, etc.).
We will conduct a technical discovery sprint to assess the stack and complexity, and adjust our approach accordingly. - No indication of whether on-site presence or security clearance is required.
We will clarify these requirements early; if needed, we will partner with a security-cleared subcontractor or adjust our delivery model. - No estimated contract value or budget to assess bid competitiveness.
We will provide a flexible pricing structure (T&M with caps) and work with CDIC to align with their budget.
- Buyer
- Canada Deposit Insurance Corporation (CDIC)
- Type
- provincial
- Location
- Canada
- Notice type
- —
- Published
- 20 Jul 2026
- Closes
- 01 Oct 2026 00:00 UTC
- GSIN
- —
- UNSPSC
- —
Extracted document text
notice-page.txt
Loading... Ok 2026-4858 - Application Maintenance and Development Services 2026-4858 - Application Maintenance and Development Services This solicitation is OPEN Select a tab Notice Categories Documents (6) Notice Categories Documents 6 Mail Basic Information Reference Number cb-670-44707187 Issuing Organization Canada Deposit Insurance Corporation (CDIC) Solicitation Type RFP - Request for Proposal (Formal) Solicitation Number 2026-4858 Title Application Maintenance and Development Services Source ID PWGSC Agreement Types Canada-European Union Comprehensive Economic and Trade Agreement(CETA) Canadian Free Trade Agreement (CFTA) Canada-UK Trade Continuity Agreement (Canada-UK TCA) Details Location Canada Dates Publication 2026/07/20 12:00:00 AM EDT Closing Date 2026/10/01 12:00:00 PM EDT Contact Information Judy Ann Hollander (343) 576-2218 Proposals@cdic.ca Description The Canada Deposit Insurance Corporation (“CDIC”) has a requirement to establish a contract for application maintenance and development services. CDIC maintains a suite of tools and applications that collectively support operations during an Intervention or in the unlikely event of a Member Institution ("MI") failure. Due to the nature of CDIC’s business, much of CDIC’s mandate application functionality is only leveraged during elevated preparedness activities on higher risk MIs, an Intervention or a Simulation. However, it is within CDIC’s mandate to ensure they are ready to support an Intervention or Simulation at any point in time. During elevated preparedness activities, an Intervention or Simulation, the primary application that is used is ROADMAP, which integrates with other applications. CDIC is looking to establish a multi-year Agreement with a single, qualified supplier to provide application maintenance and development services to support CDIC’s mandate application as further described in this RFP. The term of any resulting agreement will be for an initial term of three (3) years with up to five (5) consecutive option periods of one (1) year, which if exercised, may be exercised individually or multiple at a time, at CDIC’s sole discretion. This procurement is subject to the Policy on Prioritizing Canadian Suppliers and Canadian Content in Strategic Federal Procurement and includes clauses that prioritizes Canadian Suppliers and Canadian Value-Added Content. This includes eligibility provisions, evaluation methodology and related compliance obligations. This means that only Canadian Suppliers, or Suppliers of an applicable trading partner, as defined in the Statement of Work, are eligible to submit proposals as part of this procurement. Any proposals submitted by non-Canadian Suppliers or a supplier of a non-trading partner will be rejected, as non-Canadian Suppliers and suppliers of a non-trading partner are not eligible to compete or be awarded a contract, pursuant to Section 5.2.1 of the Policy on Prioritizing Canadian Suppliers and Canadian Content in Strategic Federal Procurement. Addendum No.1 See more Disclaimer Government of Canada (GC) tender notices and awards, solicitation documents and tender attachments are available free of charge and without registration on canadabuys.canada.ca/en/tender-opportunities , the authoritative location for GC tenders. You may have received this tender notice or award through a third-party distributor. The Government of Canada is not responsible for any tender notices and/or related documents and attachments not accessed directly through canadabuys.canada.ca/en/tender-opportunities. This Government of Canada tender notice or tender award carries an Open Government Licence - Canada that governs its use. Related solicitation documents and/or tender attachments are copyright protected. Please refer to the section about Commercial Reproduction in the canadabuys.canada.ca/en Terms and Conditions for more information. Contains information licensed under the Open Government license - Canada. Contains data reproduced
Documents
- text_saved