Request for Information API management Saas solution

This is a Request for information for an API management SaaS solution. The purpose of this solution is twofold: 1) replace the existing API management product, and 2) accelerate API development, discoverability, and ownership in line with VR API strategy. VR is looking for a single, unified API platform for the whole organization. With this RFI, VR is seeking information on suppliers interested in delivering the services described. This document is not a procurement announcement or a call for tenders, but a detailed market research, i.e. a request for information. Participation in this request for information procedure does not in any way bind any party in a potential future Invitation to Tender. Decisions to launch a possible procurement process will be taken after the market research. The procurement process and the subject of the procurement may be different from what has been mentioned in this request for information.

This is a Request for information for an API management SaaS solution. The purpose of this solution is twofold: 1) replace the existing API management product, and 2) accelerate API development, discoverability, and ownership in line with VR API strategy. VR is looking for a single, unified API platform for the whole organization. With this RFI, VR is seeking information on suppliers interested in delivering the services described. Important core components of the API management platform include authentication, routing, rate limiting, monitoring, analytics, policies, alerts, and security. The platform provides a deployment flow well integrated with the team’s CI/CD practices, and the API owners have an easy-to-use way to manage and monitor their APIs. On top of these features, API management platform has a developer portal that is the go-to place for all API needs from discovery through subscription to giving feedback. It is worth recognizing that there are both internal and external API users, and the external users may need to be catered with different branding depending on which business domain they interact with. At least HTTP(S) APIs (including REST and SOAP) must be supported. The system must be able to handle at least 1 billion API requests per month with bursts of 10 000 requests per second. Scaling up the throughput must be possible with minimal manual setup. Low latency is of high interest. All personal data must remain within EU/EEA, and GDPR regulation must be complied with. For internal users, VR SSO (Azure AD) must be supported. All core functionality the product offers should be available as well-documented APIs. As business-critical traffic will flow through the solution, high availability with swiftly available support is mandatory.

Suppliers are asked to provide information about the services they provide that correspond to subject of the RFI. VR requests the following information from the supplier: · General description of the services offered by the company · Description of the service which fulfills the service described in this RFI · Supplier's comment for the possible procurement process · Pricing model and price estimate for the service described in the RFI · Project duration estimate for the implementation of the service described in the RFI Suppliers are requested to answer questions presented in separate appendix 1 (Supplier questionnaire). The used document format should be a commonly used file format, e.g. Microsoft Office documents and/or PDF. As a response to this request for information, Supplier is asked to fill in the questionnaire in Appendix 1. Supplier´s responses and given information are handled as confidential information. VR will not give any information to outsiders unless law, regulations or authorities needs to do so. Any confidential information that is delivered in the response must be clearly marked as such. Responses to this RFI must be submitted in English or Finnish. Responses is to be delivered by March 10th, 2023 to the following email hankinta.kilpailutus@vr.fi