Enterprise Technical Proposal & A4 Tender Engine

DIATOM TECHNOLOGIES LIMITED

RC: LICENSED ENTERPRISE SYSTEMS HOLDINGS // ABN/TIN: VERIFIED

DOC REF: DTL-TENDER-2026-v4

DATE OF ISSUE: OCTOBER 19, 2026

CLASSIFICATION: COMMERCIAL IN CONFIDENCE

SECTION 01

Executive Summary & Commercial Model

Diatom Technologies Limited is a leading Nigerian enterprise software engineering and systems infrastructure firm, operating as the technology holding company behind Mivas Estates, Mivas Hotels, and Mivas Schools.

Unlike standard foreign SaaS providers that subject Nigerian institutions to foreign exchange volatility and perpetual seat taxes, Diatom Technologies deploys a Sovereign Software Architecture: the platform, transactional ledgers, resident registries, and financial data reside permanently on customer-controlled private cloud or on-premises infrastructure with zero compulsory monthly software seat licensing.

Sovereign Data: 100% Client-Owned

Recurring SaaS Lock-in: Zero Mandatory Fees

Ledger Precision: Double-Entry / Minor Units

SECTION 02

System Architecture Topology

+----------------------------------------------------------------------------------------------------+
|                               CLOUDFLARE ZERO TRUST & ANYCAST WAF                                  |
|   - DDoS Layer 3/4/7 Mitigation    - TLS 1.3 Cryptographic Handshake    - Sub-30ms Nigeria Edge    |
+-------------------------------------------------+--------------------------------------------------+
                                                  |
                                                  v
+----------------------------------------------------------------------------------------------------+
|                         ENTERPRISE APPLICATION TIER (LARAVEL / TALL STACK)                         |
|   - Sovereign Authentication Engine             - Filament v3/v4 Executive Command Center          |
|   - Immutable Double-Entry Ledger Core          - Event-Driven Background Worker Architecture      |
+------------------------+---------------------------------+-----------------------------------------+
                         |                                 |
                         v                                 v
+------------------------------------+   +-----------------------------------------------------------+
|    TRANSACTIONAL LEDGER STORAGE    |   |           OMNICHANNEL & PERIPHERAL INTEGRATION            |
| - PostgreSQL / High-Perf MySQL     |   | - Paystack DVA (HMAC-SHA512 Raw-Body Signature Verify)    |
| - Row-Level Cryptographic Locking  |   | - Termii DND SMS Route (Transactional SMS Alerts)         |
| - Minor-Unit (Kobo) BigInt Storage |   | - WhatsApp Cloud Business API (Automated RFP & Gate Pass) |
| - Automated 6-Hour Cloud Snapshots |   | - POS ESC/POS Thermal Printers & Offline-Resilient Sync   |
+------------------------------------+   +-----------------------------------------------------------+

SECTION 03

Scope of Work (SOW) Breakdown

Domain	Engineering Deliverables	Compliance Standard
Infrastructure & Hosting	Hardened sovereign server instance setup, SSL installation, Cloudflare Zero Trust DNS routing, daily automated encrypted snapshot backups.	ISO 27001 / NDPR
Core Platform Modules	Complete implementation of Front Desk, Inventory, Folio Ledger, Resident/Guest Registry, QR-Pass Gate Validation, and Staff Permission Roles.	Strict Role Separation
FinTech & Payments	Direct Paystack NUBAN Dedicated Virtual Account generation, HMAC-SHA512 raw-body signature validation, integer kobo arithmetic ledgering.	CBN PSV 2030 / PCI-DSS
Omnichannel Dispatch	Termii transactional DND SMS alerts, WhatsApp Cloud Graph API v21 dispatch for digital passes, folio invoices, and tender receipts.	NCC DND Compliant

SECTION 04

Project Milestones & Delivery Schedule

PHASE 1 (WEEK 1) Architecture & Provisioning Server hardening, domain routing, and ledger schema initialization.

PHASE 2 (WEEK 2-3) Module Implementation Core workflow deployment, QR gate validator, and staff role matrices.

PHASE 3 (WEEK 4) Gateway Integration Paystack webhook security, Termii SMS, and WhatsApp dispatch.

PHASE 4 (WEEK 5) UAT & Final Handover Penetration audit, administrator onboarding, and live commissioning.

SECTION 05

Commercial Investment & Minor-Unit Schedule

Package Description	NGN Minor Units (Kobo)	NGN Standard	Est. USD Reference
Sovereign Core License Complete application codebase, client domain install, self-hosted deployment.	45,000,000 kobo	₦450,000.00	~$300.00
Turnkey Production Deployment Full engineering setup, Cloudflare WAF, Paystack & Termii wiring, staff training.	75,000,000 kobo	₦750,000.00	~$500.00
Custom Architecture & Bespoke Engineering Multi-branch federation, custom ERP/accounting integrations, dedicated SLA.	150,000,000+ kobo	₦1,500,000.00+	~$1,000.00+

SECTION 06

Service Level Agreement (SLA) & Warranty

AVAILABILITY COMMITMENT

99.98% Uptime

Redundant load balancing, automatic failover, and sub-second health monitors.

INCIDENT RESOLUTION SLA

< 2 Hours (P1)

Direct priority engineering escalation via WhatsApp & dedicated hotline.

ENGINEERING WARRANTY

12 Months Full

Covers defect remediation, security patches, and regulatory updates.

SECTION 07

Security Guarantees & NDPR Compliance

In compliance with the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR), Diatom Technologies guarantees:

Cryptographic Data-at-Rest All customer PII and financial records encrypted using AES-256 cipher standards.

Zero Plaintext Secret Storage All gateway API tokens, passwords, and webhook secrets encrypted via hardware HSM / Argon2id.

SECTION 08

Bilateral Authorization Block

FOR: DIATOM TECHNOLOGIES LIMITED

Lead Principal Systems Architect

Name: Executive Tech Lead, DTL

Registration: RC LICENSED SYSTEMS FIRM

Cryptographic Seal: SHA256: 9E1F...B88A

FOR: CLIENT AUTHORIZED ENTITY

Authorized Signature & Corporate Seal

Full Name: ___________________________

Designation: _________________________

Execution Date: ______________________

Commission Sovereign Software & Systems