Framework agreement for application expertise services

Ability to engage in professional activity Each candidate must attach to his or her application the declarations provided for in section 2.1.6. Each candidate must also submit their unique identification number (SIREN) issued by INSEE, or, failing that, an equivalent document identifying the candidate (if EDF does not request identification information elsewhere in the procurement portal in particular). This number is to be provided by individual candidates and by each member of a candidate group.

Criterion: Other economic or financial requirements Description of the selection criterion: Relevance of the application As part of a GME response, the agent will have to justify the relevance of the proposed Grouping. EDF reserves the right to refuse the GME if the justification of the Groupement is not relevant and if all members of the GME (Mandataire and Co-contractors) are not, by virtue of their activities, directly related to the purpose of the need described in the CCTG. If the candidate does not provide evidence of the relevance of the proposed Grouping, his or her suitability file will not be accepted.

Economic and financial capacity The candidate must attach to his or her application the following documents and information: (In the case of a consolidated application, each of the following documents must be submitted by each of the members of the group): -A statement indicating, for each of the last three years available, the total annual turnover and turnover relating to the supplies, services or works covered by the contract. -A copy of the last balance sheet, or extracts from balance sheets, of economic operators for whom the preparation of balance sheets is compulsory under the law. - Where appropriate, an appropriate declaration of banks or proof of insurance for occupational risks. -Where applicable, a description of the consistency of the financial relationship between the subsidiary and the parent company, the relationship of belonging to that group.

If, for a justified reason, the candidate is unable to produce the requested information and documents, he or she is authorized to prove his or her economic and financial capacity by any other means considered appropriate and to submit equivalent proofs APT-ECO01:The tenderer shall provide the total turnover France of the year N-1 (full year) and in the case of a grouping, for the agent and each co-contractor (excluding EA,ESAT, EI and ETTI).Year N-1 turnover in M€ for each candidate name. Elimination if < €36 million

Suitability Criterion SERVICE OFFERING APT-TGL01 "The bidder presents its service offering within the DBMS scope and demonstrates the availability of associated skills in the following technologies: SQL (PL/SQL, T-SQL), Shell/Bash, Python, PowerShell, as well as Oracle, PostgreSQL, SQL Server, and MySQL environments, non-exhaustive list. It specifies:

• each mastered technology;
• the level of expertise available;
• the associated technical environments;
• the structuring of the offering (catalogue, organization, specialization)" Disqualifying if the candidate does not have a service offering covering the technologies within the DBMS scope, with a recognized level of expertise (certification issued by a recognized external certifying body or proven experience) in a described technical environment constituting a coherent offering (catalogue, a lead/manager, and identified available resources).APT-TGL02 "The bidder presents its service offering within the Application Solutions/Middleware scope and demonstrates the availability of associated skills in the following technologies: Java, JavaScript/Node.js, Python, Groovy, XML/XSLT, REST/SOAP APIs, integration tools (WebMethods, ESB, Kafka; this list is non-exhaustive). It specifies:
• the mastered technologies;
• the level of expertise available, particularly through held certifications;
• the associated technical environments;
• the structuring of its service offering: catalogue, organization, specializations." Disqualifying if the candidate does not have a service offering covering the technologies within the Application Solutions scope, with a recognized level of expertise (certification issued by a recognized external certifying body or proven experience) in a described technical environment constituting a coherent offering (catalogue, a lead/manager, and identified available resources).APT-TGL03 "The bidder presents its service offering within the Finance scope and demonstrates the availability of skills in the main associated solutions and technologies, particularly SAP, Oracle Hyperion, or any equivalent solution falling within the Finance scope. It specifies:
• the mastered solutions and technologies;
• the level of expertise available, particularly through held certifications;
• the associated technical environments;
• the structuring of its service offering: catalogue, organization, and specializations." Disqualifying if the candidate does not have a service offering covering the technologies within the Finance scope, with a recognized level of expertise (certification issued by a recognized external certifying body or proven experience) in a described technical environment constituting a coherent offering (catalogue, a lead/manager, and identified available resources).Resources: APT-TRH01 "Does the bidder state the total number of technical expert profiles with at least 5 years of experience, located in Île-de-France, in the DBMS technologies mentioned in the scope of the lot (Oracle, PostgreSQL, SQL Server), and available for assignments of more than 6 months on the Company's site?" Disqualifying if &lt;10 APT-TRH02 Does the bidder state the total number of technical expert profiles with at least 5 years of experience, located in Île-de-France, in the technologies mentioned in the lot's Application Solutions scope (WebLogic, Tomcat, APIs, applications, etc.), and available for assignments of more than 6 months on the Company's site?Disqualifying if &lt;10 APT-TRH03 Does the bidder state the total number of Dynatrace expert profiles with at least 5 years of experience, located in Île-de-France, and available for assignments of more than 6 months on the Company's site?Disqualifying if &lt;2 APT-TRH04 Does the bidder state the total number of technical expert profiles with at least 5 years of experience, located in Île-de-France, in the Finance solutions and technologies mentioned in the scope of the lot (SAP, Oracle Hyperion, or equivalent solutions), and available …

Selection criterion ACTIVITY, SKILLS AND WORKFORCE (coef 17) CA3 "Indicate the share, as a percentage, of France revenue generated during the last completed financial year on activities corresponding to the technological and functional scope of this lot." Value in % + specify the baseline revenue and the selected scope of activities.

Selection criterion EFF 1 Specify the number of certified staff that can be mobilized in Île-de-France on the main technologies of the DBMS scope, indicating certifications recognized by a state body or a recognized certifying organization, their breakdown by technological field, as well as the share (%) represented by these staff members within the total workforce of DBMS experts mobilizable in Île-de-France.

Values in numbers and in % Selection criterion on the % EFF 2 Specify the number of certified staff that can be mobilized in Île-de-France on the main technologies of the Application Solutions scope, indicating certifications recognized by a state body or a recognized certifying organization, their breakdown by technological field, as well as the share (%) represented by these staff members within the total workforce of Application Solutions technology experts mobilizable in Île-de-France.

Values in numbers and in % Selection criterion on the % EFF 3 Specify the number of certified staff that can be mobilized in Île-de-France on the main technologies/solutions of the Finance scope, indicating certifications recognized by a state body or a recognized certifying organization, their breakdown by technological field, as well as the share (%) represented by these staff members within the total workforce of Finance experts mobilizable in Île-de-France.

Values in numbers and in % Selection criterion on the % TECHNICAL SKILLS AND EXPERIENCE (coef 32) TECH 1 "Describe your company's Cloud strategy within the framework of European sovereignty as well as your associated level of expertise regarding the technologies covered by the lot (DBMS, Application/middleware solutions). Specify in particular:

• preferred deployment models (Cloud/Hybrid/Private Cloud);
• architecture principles and selection criteria;
• mastered platforms and technologies;
• examples of significant achievements regarding database, middleware, and application migration." TECH 2 "What is your capacity to intervene on complex issues in the DBMS and Application/middleware solutions domains? Specify in particular:
• your capacity to analyze, diagnose, and resolve complex incidents;
• your mastery of performance, availability, and security issues;
• your capacity to identify root causes and propose remediation plans;
• your capacity to implement improvement and security enhancement actions;
• your use of AI or automation tools for incident analysis, diagnosis, and resolution;
• examples of significant achievements or interventions" TECH 3 "What strategy does your company apply regarding the various Clouds related to the technologies of the Finance lot? Specify in particular:
• your architecture choices (Cloud, hybrid, on-premise)
• your migration practices (e.g., S/4HANA, databases, applications)
• your capacity to integrate Finance solutions into Cloud environments (AWS, Azure, SAP Cloud, etc.)" TECH 4 "Regarding the integration of AI and its contributions to information systems, what strategy does your company apply to the scope of the lot? Specify in particular:
• use cases in the Finance domains
• tools or solutions used
• observed gains (performance, quality, automation, etc.)" TECH 5 "In order to provide services of ever-increasing quality within the scope of the lot, what is your involvement in innovation and continuous improvement initiatives? Specify in particular your participation in:
• technical events (meetups, coding dojos, hackathons...)
• technical communities (finance, data, middleware, etc.)
• internal initiatives (technology watch, R&D, capitalization)" EXP 1 "Describe a relevant experience and your skills, among your…

Selection Reason (cont'd) TECHNICAL SKILLS AND EXPERIENCE (cont'd) EXP 4 "Describe a relevant experience and your skills, among your best references in relation to recommendations to be implemented to optimize performance and analyze application bugs (Dynatrace, OpenTelemetry) Status: In progress for more than a year or completed for less than two years Means: Justify from all the means used, with a focus on services over 100 days/men Specify in particular the number of consultants involved and the scope covered "

Ability to engage in professional activity Each candidate must attach to his or her application the declarations provided for in section 2.1.6. Each candidate must also submit their unique identification number (SIREN) issued by INSEE, or, failing that, an equivalent document identifying the candidate (if EDF does not request identification information elsewhere in the procurement portal in particular). This number is to be provided by individual candidates and by each member of a candidate group.

Description of the selection criterion: Relevance of the application As part of a GME response, the agent will have to justify the relevance of the proposed Grouping. EDF reserves the right to refuse the GME if the justification of the Groupement is not relevant and if all members of the GME (Mandataire and Co-contractors) are not, by virtue of their activities, directly related to the purpose of the need described in the CCTG. If the candidate does not provide evidence of the relevance of the proposed Grouping, his or her suitability file will not be accepted.

Economic and financial capacity The candidate must attach to his or her application the following documents and information: (In the case of a consolidated application, each of the following documents must be submitted by each of the members of the group): -A statement indicating, for each of the last three years available, the total annual turnover and turnover relating to the supplies, services or works covered by the contract. -A copy of the last balance sheet, or extracts from balance sheets, of economic operators for whom the preparation of balance sheets is compulsory under the law. - Where appropriate, an appropriate declaration of banks or proof of insurance for occupational risks. -Where applicable, a description of the consistency of the financial relationship between the subsidiary and the parent company, the relationship of belonging to that group.

If, for a justified reason, the candidate is unable to produce the requested information and documents, he or she is authorized to prove his or her economic and financial capacity by any other means considered appropriate and to submit equivalent proofs APT-ECO01:The tenderer shall provide the total turnover France of the year N-1 (full year) and in the case of a grouping, for the agent and each co-contractor (excluding EA,ESAT, EI and ETTI).Year N-1 turnover in M€ for each candidate name. Elimination if €11 million

APT-TGL01 Service Provider Qualification Criteria "The bidder presents its service offer on the Data Exchange perimeter and demonstrates the availability of associated expertise in the following technologies and areas: Middleware exchange (BSE, BPM, B2B...), Data Streaming (Kafka, etc.), ETL/ELT, Exchange and Interoperability Protocols (MCP, A2A, API, Streaming...), Data Exchange Management and Security. It specifies:

• the technologies and areas controlled;
• the level of expertise available, in particular through the certifications held;
• associated technical environments;
• structuring its service offering: catalogue, organization, specializations." Elimination if the applicant does not have a service offer covering technologies and domains of the data exchange perimeter, with a recognized level of expertise (certification from a recognised external certifying body or proven experience) in a described technical environment constituting a coherent offer (catalogue, pilot and identified resources available).APT-TRH01 RESOURCES Are you able to provide technical experts with at least 8 years of experience, located in Île-de-France, in the technologies and domains of the data exchange perimeter (Middleware of exchange
• BSE, BPM, B2B-, Data streaming -Kafka-, ETL/ELT, API Management, exchange and interoperability protocles, flow integration and orchestration, data exchange management and security), and available for missions of more than 6 months on the Company's website? Elimination if <10 DISCUSSION OF FRESH RISKS SECURITY / CYBERSECURITE / GDPR APT-MDR01 "The tenderer justifies the relevance of his application.As part of a GME response, the agent will have to justify the relevance of the proposed Grouping. "Elimination if the justification of the Grouping is not relevant and if all members of the GME (Mandataire and Co-Contractors) are not, by virtue of their activities, directly related to the purpose of the need described in the CCTV. APT-MDR02 "The bidder has a policy on health and security, cyber security and compliance with the GDPR. It describes the organisation it intends to maintain in the framework of the contract services, specifying a minimum:
• the designated official(s),
• training and awareness dispostors,
• follow-up and continuous improvement measures. "Elimination if there is no person responsible for or training in at least one of the fields, or if there is no measure and improvement or objective APT-MDR03 "The tenderer has a CSR label: Ecovadis bronze medal or Afnor committed CSR niv 1 or equivalent, less than 2 years; or undertakes to dispose of it at the latest at the time of signature of the contract."

Selection criterion ACTIVITY, SKILLS AND WORKFORCE (coef 17) CA3 "Indicate the share, as a percentage, of France revenue generated during the last completed financial year on activities corresponding to the technological and functional scope of this lot." Value in % + specify the baseline revenue and the selected scope of activities. Selection criterion GEO 2 "Are you able to offer Nearshore and Offshore resources?

Specify the countries concerned and briefly describe existing setups." Informational criterion EFF 1 "Specify the number of certified staff that can be mobilized in Île-de-France on the main technologies of the Data Exchange scope, indicating certifications recognized by a state body or a recognized certifying organization, their breakdown by technological field, as well as the share (%) represented by these staff members within the total workforce of Data Exchange experts mobilizable in Île-de-France. Specify the number and percentage by profile:

• Number of integration / data exchange engineers
• Number of iPaaS / middleware technical experts
• Number of API Management technical experts
• Number of ESB / BPM / B2B technical experts
• Number of streaming technical experts (Kafka…)
• Number of ETL / ELT technical experts
• Number of exchange protocol technical experts (API, A2A, MCP…)
• Number of data flow security technical experts
• Number of support experts (all fields combined)" Selection criterion on the % TECHNICAL SKILLS AND EXPERIENCE (coef 32) TECH 1 "What strategy does your company apply regarding data exchange environments related to the technologies of the lot? Specify in particular:
• your mastery of integration platforms (iPaaS, webMethods…)
• your API Management approach
• your mastery of exchange middleware (ESB, BPM, B2B…)
• your capacity to manage data flows (real-time / batch / streaming
• Kafka…)
• your mastery of exchange protocols (API, A2A, MCP, ACP…)
• your capacity to integrate IS tools (supervision, traceability, security…)
• security, flow supervision, maintainability, and consistency of services
• quality, consistency, and maintainability of solutions" TECH 2 "What is your capacity to intervene on complex issues within a data exchange context? Specify in particular:
• your capacity to analyze and resolve complex flow incidents
• your capacity to diagnose malfunctions (flows, APIs, middleware, streaming…)
• your mastery of exchange security issues
• your capacity to guarantee data consistency, traceability, and quality
• your capacity to propose improvement and security enhancement solutions" TECH 3 "What is your capacity to guarantee the performance and continuous improvement of data exchange solutions? Specify in particular:
• your capacity to optimize flows and performance (latency, volume…)
• your use of supervision and observability tools
• your capacity to industrialize exchanges and deployments
• your capacity to integrate innovative approaches (AI applied to flows, automation…)
• observed gains (performance, quality, reliability…)" EXP 1 "Describe a relevant experience and your skills, among your best references related to the technologies of this lot. Domain: BUILD development
• exchange services on iPaaS and middleware platforms Domains:
• Development of exchange services (webMethods, REST/SOAP APIs, Java services…)
• Implementation of iPaaS / ESB / API Management platforms
• Integration of application and inter-IS flows
• Implementation of exchange protocols (MCP, A2A, ACP…)
• Development of real-time and streaming flows (Kafka…)
• Integration of AI solutions into exchange flows Status: Ongoing for more than one year or completed less than two years ago Resources: Account for all resources used, favoring assignments exceeding 100 person-days Preferably present experiences with a commitment to results and whose production volume is representative" EXP 2 "Describe a relevant experience and your skills, among your best references related to operational maintenance (MCO) activities…

Selection Reason (cont'd) TECHNICAL SKILLS AND EXPERIENCE (cont'd) EXP 3 "Describe a relevant experience and your skills, among your best references in connection with integration, industrialisation and innovation activities on the perimeter of the lot. Area: Industrialization and data exchange transformation Areas:

• Establishment of IC/CD channels for exchange flows
• Industrialization of deployments (API, services, middleware...)
• Automation of data processing and pipelines
• Integration of IA solutions (generative AI, agent AI, automation...)
• Implementation of real-time / streaming solutions (Kafka...)
• ETL/ELT developments, data processing and anonymization
• Prototyping and innovation (POC, models, target architecture...) Status: In progress for more than a year or completed for less than two years Means: Justify by all means used, with a focus on services over 100 days/men Specify in particular:
• technical complexity
• innovations implemented
• gains achieved (performance, automation, quality...) »

Economic and financial capacity The candidate must attach to his or her application the following documents and information: (In the case of a consolidated application, each of the following documents must be submitted by each of the members of the group): -A statement indicating, for each of the last three years available, the total annual turnover and turnover relating to the supplies, services or works covered by the contract. -A copy of the last balance sheet, or extracts from balance sheets, of economic operators for whom the preparation of balance sheets is compulsory under the law. - Where appropriate, an appropriate declaration of banks or proof of insurance for occupational risks. -Where applicable, a description of the consistency of the financial relationship between the subsidiary and the parent company, the relationship of belonging to that group.

If, for a justified reason, the candidate is unable to produce the requested information and documents, he or she is authorized to prove his or her economic and financial capacity by any other means considered appropriate and to submit equivalent proofs APT-ECO01:The tenderer shall provide the total turnover France of the year N-1 (full year) and in the case of a grouping, for the agent and each co-contractor (excluding EA,ESAT, EI and ETTI).Year N-1 turnover in M€ for each candidate name. Elimination if < €8 million

APT-TGL01 Service Provider Qualification Criteria "The bidder presents its service offer on the DevSecOps perimeter and demonstrates the availability of associated skills in the following technologies and areas: CI/CD (GitLab CI, GitLab Ultimate...), Application Security (SAST, DAST, SCA, SonarQube...), Cloud & containers (AWS, GCP, Kubernetes, OpenShift, Docker...), Infrastructure as Code (Terraform, Ansible...), Observability (Grafana, Prometheus...), Collaborative tools (JIRA, Confluence...) and IA applied to developments (generative AI, AI agentique, documentary extraction, MCP, A2A...). This list is not exhaustive. It specifies:

• the technologies and areas controlled;
• the level of expertise available, in particular through the certifications held;
• associated technical environments;
• structuring its service offering: catalogue, organization, specializations." Elimination if the candidate does not have a service offer covering technologies and areas within the DevSecOps perimeter, with a recognized level of expertise (certification from a recognized external certifying body or proven experience) in a described technical environment constituting a coherent offer (catalogue, organization, specializations and resources identified at the disposal).APT-TRH01 Are you able to provide technical experts with at least 8 years of experience, located in Île-de-France, on the technologies and domains of the DevSecOps perimeter (CI/CD (GitLab CI, GitLab Ultimate...), Application Security (SAST, DAST, SCA, SonarQube...), Cloud & containers (AWS, GCP, Kubernetes, OpenShift, Docker...), Infrastructure as Code (Terraform, Ansible...), Observability (Grafana, Prometheus...), Collaborative tools (JIRA, Confluence...) and IA applied to developments (generative AI, AI agentique, documentary extraction, MCP, A2A...), and available for missions of more than 6 months on the Company's website?Elimination if <10 FRESH RISK MANAGEMENT SECURITY / CYBERSECURITY / GDPR APT-MDR01 "The bidder justifies the relevance of his application (maximum 80 words). As part of a GME response, the agent will have to justify the relevance of the proposed Grouping."Elimination if the justification of the Grouping is not relevant and if all members of the GME (Mandataire and Co-Contractors) are not, by virtue of their activities, directly related to the purpose of the need described in the CCTV. APT-MDR02 "The bidder has a policy on health and security, cyber security and compliance with the GDPR. It describes the organisation it intends to maintain in the framework of the contract services, specifying a minimum:
• the designated official(s),
• training and awareness dispostors,
• follow-up and continuous improvement measures. "Elimination if there is no person responsible for or training in at least one of the fields, or if there is no measure and improvement or objective APT-MDR03 "The tenderer has a CSR label: Ecovadis bronze medal or Afnor committed CSR niv 1 or equivalent, less than 2 years; or undertakes to dispose of it at the latest at the time of signature of the contract."

Selection criterion ACTIVITY, SKILLS AND WORKFORCE (coef 17) CA3 "Indicate the share, as a percentage, of France revenue generated during the last completed financial year on activities corresponding to the technological and functional scope of this lot." Value in % + specify the baseline revenue and the selected scope of activities. Selection criterion GEO 2 "Are you able to offer Nearshore and Offshore resources?

Specify the countries concerned and briefly describe existing setups." Informational criterion EFF 1 "Specify the number of certified staff that can be mobilized in Île-de-France on the main technologies of the DevSecOps scope, indicating certifications recognized by a state body or a recognized certifying organization, their breakdown by technological field, as well as the share (%) represented by these staff members within the total workforce of DevSecOps experts mobilizable in Île-de-France. Specify the number and percentage by profile:

• Number of DevSecOps Engineers;
• Number of CI/CD technical experts (GitLab CI, GitLab Ultimate);
• Number of Application Security technical experts (SAST, DAST, SCA, SonarQube);
• Number of Cloud & Containers technical experts (AWS/GCP/Kubernetes/OpenShift/Docker, Terraform, Ansible);
• Number of Observability technical experts (Grafana, Prometheus);
• Number of Artifacts technical experts (Artifactory, Xray);
• Number of JIRA/Confluence technical experts;
• Number of AI technical experts (Generative AI, Agentic AI, document extraction, A2A, MCP);
• Number of support experts (all fields combined)" Selection criterion on the % TECHNICAL SKILLS AND EXPERIENCE (coef 32) TECH 1 "What strategy does your company apply regarding DevSecOps environments related to the technologies of the lot? Specify in particular:
• your mastery of CI/CD toolchains (GitLab CI, GitLab Ultimate…)
• your practices in Cloud & container environments (AWS, GCP, Kubernetes, OpenShift…)
• your Infrastructure as Code approach (Terraform, Ansible…)
• your capacity to integrate IS tools (JIRA, Confluence, artifacts…)" TECH 2 "What is your capacity to intervene on complex issues within a DevSecOps context? Specify in particular:
• your capacity to analyze and resolve complex incidents
• your mastery of security tools (SAST, DAST, SCA, SonarQube…)
• your capacity to diagnose pipeline malfunctions
• your capacity to propose improvement and security enhancement solutions" TECH 3 "What is your capacity to guarantee the performance and continuous improvement of DevSecOps toolchains? Specify in particular:
• your capacity to optimize CI/CD pipelines
• your use of observability tools (Grafana, Prometheus…)
• your capacity to industrialize deployments
• your integration of AI into pipelines (Generative AI, Agentic AI…)
• observed gains (performance, quality, automation…)" EXP 1 "Describe a relevant experience and your skills, among your best references related to expertise activities within the scope of the lot (CI/CD, application security, Cloud & containers, observability). Possible domains:
• Operation of CI/CD pipelines
• Administration and optimization of Cloud & container environments
• Supervision and observability (Grafana, Prometheus…)
• Management of application security tools
• Artifact management (Artifactory, Xray…) Status: Ongoing for more than one year or completed less than two years ago Resources: Account for all resources used, favoring assignments exceeding 100 person-days Specify in particular the number of consultants mobilized and the scope covered" EXP 2 "Describe a relevant experience and your skills, among your best references related to operational maintenance (MCO) activities within the scope of the lot. Possible domains:
• Operation of CI/CD pipelines
• Administration and optimization of Cloud & container environments
• Supervision and observability (Grafana, Prometheus…)
• Management of application security tools
• Artifact management (Artifactory, Xray…) Status: Ongoing for more than one year…