Canadian Urban Transit Research & Innovation Consortium
Become a Member
Member Portal
Canadian Urban Transit Research & Innovation Consortium
Become a Member
Member Portal

Deadline for submissions extended to September 18, 2026.

Open Request for Quotes

Protecting Canada’s Digital Transit Infrastructure

The Canadian Urban Transit Research and Innovation Consortium (CUTRIC) is seeking quotes from qualified software development firms to audit and rebuild the Autonomous, Connected, Electric and Shared (ACES) CloudTransit Data Trust. As transit fleets electrify, they become highly connected data centers on wheels that require robust protection from escalating cyber threats. This RFQ will secure a domesticated Canadian programming firm to guarantee Canadian data residency, conduct a comprehensive code review, and ensure the ACES platform meets enterprise-grade cybersecurity standards. Learn more about ACES here.

Reference number
CMR-0005_24-RFQ-2026-0001
Download the Full RFQ (PDF)
Questions due
August 21, 2026
RFQ responses due
September 18, 2026
Final decision notification
October 23, 2026
Intended contract start (code review)
November 05, 2026
01Scope of work

Two sections, scored separately

This RFQ is divided into two distinct sections, which will be evaluated and scored separately. Proponents must provide a description and pricing proposal for both.

1
Fixed price

Code review

Section One · scored separately

A comprehensive technical audit of the existing dashboard's backend and web repositories.

Vendors will
  • ✓Identify critical cybersecurity vulnerabilities, such as exposed API keys or unrestricted administrator access
  • ✓Assess the code against the original specifications
  • ✓Deliver a consolidated recommendation report and development roadmap
2
Proposal

Full system rebuild

Section Two · scored separately

A complete rebuild and integration of the national ACES Data Trust.

This includes
  • ✓Establishing automated data ingestion (ETL) pipelines
  • ✓Optimizing the database for multi-year historical queries
  • ✓Upgrading the analytical interface with advanced data-at-a-glance visualization
  • ✓Enforcing strict cybersecurity protocols: multi-factor authentication, data encryption, and an active incident response plan
Autonomous, Connected, Electric and Shared transit overview Click to enlarge
Autonomous, Connected, Electric and Shared transit. Electrified fleets operate as connected data centers on wheels that require enterprise-grade protection.
ACES OPTA ZEB performance dashboard Click to enlarge
Current ACES performance dashboard. Section One audits this codebase and Section Two rebuilds it with hardened data-at-a-glance visualization.
02Mandatory eligibility requirements

What every vendor must demonstrate

CUTRIC is committed to fostering Canadian innovation and equity. To be eligible, vendors must demonstrate compliance with the following.

🍁

Canadian data residency and sovereignty

Signed attestation required
The vendor must be a domesticated Canadian programming firm. You must submit a signed attestation confirming your corporation maintains a registered place of business in Canada, pays corporate taxes in Canada, and guarantees all pilot user data will be hosted exclusively on Canada-based servers.

Women in leadership

Must be addressed in proposal
CUTRIC is a woman-owned organization and mandates gender leadership on our projects. Proposals must explicitly outline the inclusion of women in leadership or core senior management development roles.
03Evaluation criteria

How submissions are scored

Submissions will be heavily evaluated to ensure maximum value and security for Canada’s transit infrastructure. Key scoring categories include, in order of weighting.

01 Cost and budget breakdown Highest weighting 100%
02 Technical and cybersecurity approach 82%
03 Capacity to deliver and past experience 70%
04 Project activities and timeline 58%
05 Involvement of partners and team, including gender leadership 48%
06 Buy Canadian policy 40%
04Key dates

Procurement timeline

June 1, 2026
RFQ published
This portal opens to vendors
August 21, 2026
Questions due
All questions reach procurement inbox
Do not miss this
September 18, 2026
Submission deadline
Complete proposals due in PDF format
November 05, 2026
Intended contract start
Selected vendor begins work
05How to submit

Send your complete proposal

Please submit your complete proposal in PDF format, including the pricing forms, electronically to the procurement inbox below. All questions regarding the RFQ must also be directed to this address before the question deadline of August 21, 2026.

  • 1Prepare your proposal in PDF format, with pricing forms for both Section One and Section Two.
  • 2Include your signed Canadian data residency attestation and your women in leadership statement.
  • 3Email everything to the procurement inbox before September 18, 2026.
CUTRIC · CRITUC
Canadian Urban Transit Research and Innovation Consortium
RFQ No. CMR-0005_24-RFQ-2026-0001