---
title: "Multi-Factor Authentication: SMS and Voice Calling"
ocid: "ocds-b5fd17-2c7fa2fe-6936-4e37-a5b5-1355c974b88a"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-2c7fa2fe-6936-4e37-a5b5-1355c974b88a"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-2c7fa2fe-6936-4e37-a5b5-1355c974b88a.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-2c7fa2fe-6936-4e37-a5b5-1355c974b88a.json"
source: "Contracts Finder"
current_stage: "Tender"
buyer: "H M REVENUE & CUSTOMS"
published: "2019-12-23"
---

# Multi-Factor Authentication: SMS and Voice Calling

Buyer: H M REVENUE & CUSTOMS  
Current stage: Tender  
OCID: ocds-b5fd17-2c7fa2fe-6936-4e37-a5b5-1355c974b88a

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-2c7fa2fe-6936-4e37-a5b5-1355c974b88a)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-2c7fa2fe-6936-4e37-a5b5-1355c974b88a.json)

## Summary

HM Revenue and Customs (HMRC) is seeking to procure a Multi-Factor Authentication service that includes SMS and Voice Calling capabilities to enhance its customer service operations and security protocols. This tender, identified as SR268256346, is currently in the Tender stage, with a submission deadline set for 12:00 PM on 20 January 2020. The contract has an estimated value of £6,500,000 and is classified under the industry category of Telephone and data transmission services, impacting a global audience as the services can be provided to customers both within the UK and abroad.

This procurement offers significant opportunities for businesses specialising in telecommunications, particularly those capable of providing robust SMS and voice services integrated with security features. Companies with ISO-27001 certification, Cyber Essentials credentials, and experience in delivering large-scale communication services are particularly well-suited to compete. With HMRC’s substantial annual volume of communications, potential suppliers can expect to engage in a lucrative contract that enhances competitive positioning in the public sector.

## Notice

This is to alert interested parties that HM Revenue and Customs is going out to tender to meet its needs for the provision of SMS and Voice Calling as part of a Multi-Factor Authentication process and Customer Service Campaigns. HMRC send out access codes to their customers via SMS or Voice to either landlines or mobiles, anywhere in the world. The Authority intends to award a single supplier contract for the provision of a SMS and Voice Calls service as part of a Multi-Factor Authentication Process. Currently approximately 80 million SMS a year and 2 million voice calls are issued per annum on behalf of HMRC. The service consists of two elements - Multi-Factor Authentication and Customer Service Campaigns. 1) The current scope for the SMS and Voice Calling as part of the Multi-Factor Authentication service is limited to the following: a) To send a 6 digit access code (that expires after 15 minutes) to a customer b) The code can be sent to a landline or mobile via SMS or Voice c) The user could be in the UK or abroad (anywhere in the world) d) The code is sent using a short code associated with HMRC e) To provide a helpdesk function to investigate issues customers have with receiving the access code f) To provide development/changes at nil cost. 2) The SMS service as part of Customer Service Campaigns include all above Multi-Factor Authentication requirements with the below additional requirements: a) Ability to have 2-way SMS if needed, where customers can reply to SMS, and ability to view replies and MI. b) Search Facility, to show all SMS a customer has received. c) Ability to see if SMS has been opened/read. d) A dead number check. The Supplier must check if a number is live or dead before SMS is sent. This must be at a significantly lower cost than the sending of an SMS. If the check fails, this must not prevent the SMS from being sent. Dead numbers will then need to be screened against for future campaigns and removed as necessary. HMRC requires potential providers to comply with the relevant essential requirements below: a.) ISO-27001 Certification as accredited by UKAS or a comparable body, b.) Cyber Essentials Certification c.) Cyber Essentials Plus Certification d.) Pen Testing by CREST approved third party auditor every 3 months for both internal and external system IP's. Tested to OWASP latest guidelines. e.) Dedicated server architecture either third party or owned, must be UKAS accredited to ISO-27001, ISO14001, ISO-9001, ISO18001 f.) Cyber Risk Insurance. g.) Security Patch Management System. Please refer to the additional information section, and relevant documents attached to obtain more information on registering interest for this tender. Additional information: HMRC uses an HMRC instance of SAP Ariba Sourcing Pro (thereafter referred to as HMRC's SAP Ariba) and this must be used to express an interest and/or bid for the opportunity. (Further information about HMRC's SAP Ariba is available on the HMRC website: www.hmrc.gov.uk/about/supplying.htm) Economic operators who have used HMRC's SAP Ariba previously will be registered as part of the HMRC Ariba Supplier Network and you should access the system to obtain your account ID number. Contact details on the system should be checked and, where necessary, additional users added to help avoid multiple registrations for the same organisation. Previously registered users having difficulty recovering their account ID number or identifying users within their organisation should email for assistance sapariba.hmrcsupport@hmrc.gsi.gov.uk. Economic operators using HMRC's SAP Ariba for the first time, including suppliers who are already registered on the wider SAP Ariba supplier network, will need to register at http://hmrc.supplier-eu.ariba.com/ad/register/SSOActions?type=full. (You must ensure that you are directed to the registration page for HMRC's SAP Ariba, identified with the HMRC logo at the top of the page, and to do this you may need to cut and paste the web address directly into your web browser). You will receive a system generated email asking you to activate your SAP Ariba supplier account by verifying your email address. Once you have completed the activation process you will receive a further email confirming the 'registration process is now complete' and providing you with 'your organisation's account ID' number. If an email response from HMRC is not received within one working day of your request, please re-contact sapariba.hmrcsupport@hmrc.gsi.gov.uk (after first checking your spam in-box) notifying non-receipt and confirming when your registration request was first made. Once you have obtained 'your account ID' number, please email Amandip.kang@hmrc.gov.uk and Bhavina.patel1@hmrc.gov.uk with the following information as confirmation that you wish to express an interest and/or bid for the opportunity. The contract reference: MFA SR268256346 Your HMRC SAP Ariba account ID: AN Your organisation's name: Your name: Your email address: Your telephone number: Economic operators who have complied with the foregoing will receive an e-mail confirming access to the online questionnaires. If access is not provided within one working day, please contact amandip.kang@hmrc.gov.uk notifying non-receipt and confirming when your request for access to the online questionnaires was first made. Questionnaires must be fully completed no later 12:00pm on 20/01/2020.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/e4559274-4c07-4e58-aa2f-d6b7307cedae |
| Notice type | Tender Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Open procedure (above threshold) |
| Tender suitability | SME |
| Awardee scale | Not specified |
| All stages | Tender |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 23 Dec 2019 |
| Submission deadline | 20 Jan 2020 |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | 31 Mar 2020 - 1 Apr 2022 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £6,500,000 |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Active |
| Lots status | Not specified |
| Awards status | Not specified |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | H M REVENUE & CUSTOMS |
| Locality | SALFORD |
| Post town | Manchester |
| Postcode | M60 9LA |
| Country | England |
| ITL 1 | TLD North West (England) |
| ITL 2 | TLD3 Greater Manchester |
| ITL 3 | TLD34 Greater Manchester South West |
| Local authority | Salford |
| Electoral ward | Ordsall |
| Westminster constituency | Salford |
| Delivery location | Not specified |

## CPV Codes

### Divisions

- 64 - Postal and telecommunications services

### Codes

- 64210000 - Telephone and data transmission services

## Release History

- 23 Dec 2019 at 16:04 - Tender - Tender Notice - https://www.contractsfinder.service.gov.uk/Notice/e4559274-4c07-4e58-aa2f-d6b7307cedae

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/e4559274-4c07-4e58-aa2f-d6b7307cedae
  23rd December 2019 - Opportunity notice on Contracts Finder
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/ca171296-aaa8-450a-bca5-5d2bb6a80994
  Supplier Guidance
- http://ted.europa.eu/udl?uri=TED:NOTICE:609570-2019:TEXT:EN:HTML
  OJEU Notice

## Notice URLs

- http://hmrc.supplier-eu.ariba.com/ad/register/SSOActions?type=full
- http://www.gov.uk/hm-revenue-and-customs

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-2c7fa2fe-6936-4e37-a5b5-1355c974b88a. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-2c7fa2fe-6936-4e37-a5b5-1355c974b88a.json.