SOW
SOW
ABBREVIATIONS
4. AAI Website 1.0 Existing AAI Website (Corporate AAI Website and it’s all subdomains)
5. AAI Website 2.0 New AAI Website (Corporate AAI Website, employee’s portal and it’s all
subdomains including Airports subdomains)
6. AAI Website AAI Website 2.0 including features developed during O&M.
11. DB Database
1|Page60
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
2|Page60
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
3|Page60
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Scope of work
Airports Authority of India (AAI) intends to advance its digital journey in alignment with the Digital India program of Govt.
of India by transforming the existing AAI Website to one of the world‐class aviation websites. AAI’s digital program aims
to enhance the user experiences of general public, air travellers, employee and other stakeholders. AAI is envisaging that
the digital transformation of Website shall bring an improved experience for users.
AAI desires to improve upon the existing AAI website (AAI website 1.0) and enhance the services. AAI wants to develop
AAI website 2.0 and mobile APPs with addition of new features to AAI website 1.0 as outlined in the below scope of work.
The focus of AAI website 2.0 and mobile APPs would be to provide an upgraded platform to all stakeholders of AAI.
AAI website 2.0 and mobile APPs shall make good use of the latest state of the art ICT solutions, hosting technologies,
development technologies, deployment technologies, location technologies, UI/UX technologies and other related
technologies to provide a comprehensive digital platform to provide various desired features and functionalities needed
for a delightful user experience.
4|Page60
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
1. Design, Development, Testing, Integration, Deployment and Go‐live of new AAI website in the latest technology
1.1. Responsibilities of the Contractor
1.1.1. Design, Development, testing, Integration, Implementation and rollout of the developed AAI Website
2.0 as per requirement mentioned in the RFP and thereafter.
1.1.2. Development of two separate websites:
1.1.2.1. Corporate Website for general public use
1.1.2.2. Web portal for serving and retired employees
1.1.3. Development of separate websites/microsites/subdomains for all AAI Airports.
1.1.4. All the features of AAI website 1.0 to be made available in AAI website 2.0. Please refer Annexure‐D for
list of features of AAI website 1.0. However, the list of features is not exhaustive, contractor may prepare
their own list at the time of SRS, FRS & design with the help of AAI.
1.1.5. To provide the Nodal Officer Dashboard and customized user dashboard in AAI Website 2.0. Please refer
clause 20 for more details.
1.1.6. The request intended for general public information shall not hit internal AAI data.
1.1.7. Development of Single Sign‐On (SSO) and signup system across all platforms. Please refer clause 19 for
more details.
1.1.8. Contractor shall provide customized user Dashboard in AAI Website 2.0 as per clause 20.
1.1.9. On‐premise Setup of DevOps Environment for automation of CI/ CD/ CT. Please refer clause 21 for more
details.
1.1.10. Optimization, backup and Performance Monitoring using various tools. Please refer clause 22 for more
details.
1.1.11. Integration with third party/AAI services using APIs. Please refer clause 23 for more details.
1.1.12. Audits and Compliances. Please refer clause 24 for more details.
1.1.13. Please refer Annexure‐A for scope of work ‐ Common Requirements for Website & Mobile APPs.
1.1.14. Please refer Annexure‐C for scope of work ‐ Guiding Principles for on Premise Deployment.
1.2. Functionality of Website
1.2.1. Front‐end and backend of the AAI website 2.0 shall be integrated but independent of each other
allowing modifications in one without affecting the other.
1.3. Features of Website
1.3.1. AAI Website 2.0 shall support all major internet browsers e.g. Chrome, Firefox, Safari, Edge and other
browsers, including mobile device browsers.
1.3.2. Back end platform shall have in‐built DMS Capability.
1.3.3. AAI Website 2.0 shall be running on SSL i.e. http request should automatically get redirected to https.
1.3.4. AAI website 2.0 shall be designed in a responsive manner so that the rendering of the website is
independent of device screen resolution and aspect ratio.
2. Design, Development, Testing, Integration Deployment and Go‐live of Mobile Apps for Android & iOS in the latest
cross‐platform technology
2.1. Responsibilities of the Contractor
2.1.1. Design, Development, testing, Integration, Implementation and rollout of the developed mobile APP as
per requirement mentioned in the RFP and thereafter.
2.1.2. Development of two separate Mobile APPs
2.1.2.1. Corporate Mobile APP for general public use
2.1.2.2. Mobile APP for serving and retired employees
2.1.3. Launch, install, integrate, scale‐up, test and maintain mobile applications on Android, iOS Platform and
any other prevalent platform with same codebase.
2.1.4. Develop and manage the app with all the appropriate security features as per industry standards.
2.1.5. Shall Ensure regular updating of Mobile APPs to keep it abreast with latest operating system Changes.
2.1.6. Product Delivery should be in the form of a published mobile application on each platform in the market
5|Page60
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
place (Google Play store, Apple App store, Mobile Seva App Store) and will be under the AAI accounts of
these stores. No additional payments shall be made to Contractor for publishing of mobile application.
2.1.7. Provide App Design Documentation, App Installation guide, App Administration guide and App User
Operation document to AAI.
2.1.8. Ensure that all interface / license required to connect to iOS, Android etc. will be procured by the
Contractor in the name of AAI without any additional financial implication.
2.1.9. Contractor shall follow cross‐platform development for mobile APP.
2.1.10. Contractor shall ensure that mobile applications shall support the last two measure OS versions (N‐2)
for the respective platforms. N is the current version.
2.1.11. Contractor shall make all efforts to keep the APP as light as possible to ensure fast and responsive design.
2.1.12. Contractor shall ensure that users have access to the latest features, enhancements, and security
patches, maintaining a consistent and secure user experience.
2.1.13. Guidelines for the development of e‐Governance applications (GuDApps) as developed by NIC shall be
followed for the development.
2.1.14. Development of Single Sign‐On (SSO) and signup system across all platforms. Please refer clause 19 for
more details.
2.1.15. Contractor shall provide customized user Dashboard in Mobile APPs as per clause 20.
2.1.16. Front‐end of mobile APPs shall be integrated with the same back‐end services as the AAI Website 2.0.
However, the front‐end of the Mobile APP must be loosely coupled with the back‐end services so that
future changes in either can be implemented with minimum efforts.
2.1.17. On‐premise Setup of DevOps Environment for automation of CI/ CD/ CT. Please refer clause 21 for more
details.
2.1.18. Optimization, backup and Performance Monitoring using various tools. Please refer clause 22 for more
details.
2.1.19. Integration with third party/AAI services using APIs. Please refer clause 23 for more details.
2.1.20. Audits and Compliances. Please refer clause 24 for more details.
2.1.21. Please refer Annexure‐A for scope of work ‐ Common Requirements for Website & Mobile APPs.
2.1.22. Please refer Annexure‐C for scope of work ‐ Guiding Principles for on Premise Deployment.
2.2. Functionality of Mobile APPs
2.2.1. Mobile APPs shall have provision to use the real time information via GPS availability.
2.2.2. Offline Functionality for specified features must be available in Mobile APP. Such list of specified features
will be finalized at the time of design Phase after approval of AAI.
2.2.3. Mobile APP shall be designed in a responsive manner so that the rendering of the APP is independent
of device screen resolution and aspect ratio.
2.2.4. Superfluous permissions asked while downloading the mobile App to be removed.
2.3. Features of Mobile APPs
2.3.1. The applications must include a feature to prompt users to update to the latest version in the event of
a newly published version of the applications. All apps shall be kept updated in terms of
changes/updates undertaken.
2.3.2. Mobile APPs shall support Asynchronous processing, Custom Reporting, analytic services‐ display and
download capabilities, Offline data retention on mobile and Sync to database.
2.3.3. Mobile APPs must be able to send push notifications to respective registered user in order to make
aware about the relevant information.
2.3.4. Mobile APPs shall have provision to conduct selective survey at Airports/CHQ/Regions. The form shall
be customizable according to the need of user. Provision to make geo‐location mandatory for such
surveys shall be made available.
6|Page60
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
2.3.5. All applicable features of AAI Website 2.0 to be made available in mobile APPs. However, features of
mobile APPs will be finalized at Design Phase after approval of AAI.
2.3.6. APP design complies with each platform’s advocated, documented design principles. The app shall
comply with Platform’s Human Interface Guidelines, while the Android version follows Material Design
principles.
3. Data Migration from AAI website 1.0 to AAI website 2.0 and mobile APPs
3.1. Contractor shall share execution plan mentioning the detailed data and functionalities to be migrated including
historical data, time variant data, user accounts, content, images, documents (text content, pdf, word, excel
etc.), and any other relevant information from AAI website 1.0 from AAI website 2.0 & Mobile APPs.
3.2. Contractor shall ensure compatibility with new requirements and functionalities while migrating existing data
and functionalities.
3.3. Contractor shall create a comprehensive map of data relationships, structures, and dependencies between the
AAI website 1.0 and AAI website 2.0.
3.4. Contractor shall ensure the quality, accuracy, integrity, completeness and consistency of data by identifying
and cleaning up inconsistencies, errors, and duplicates in the old data.
3.5. Before initiating the migration, perform a complete backup of the data of AAI Website 1.0 to ensure that there
is a fallback option in case of issues.
3.6. Develop a data recovery plan outlining steps to revert to the AAI Website 1.0 in case of unexpected problems.
3.7. Choose appropriate data migration tools or scripts based on the nature of the data and the systems involved.
3.8. Test the migration tools in a controlled environment to ensure they work as expected.
3.9. If the data formats or structures differ between the AAI website 1.0 and AAI website 2.0, develop
transformation scripts to convert data appropriately.
3.10. Plan for parallel operations, allowing both AAI website 1.0 and AAI website 2.0.to coexist during the migration.
3.11. After migration, conduct post‐migration validation checks to identify and address any issues that may have
arisen during the process.
3.12. Monitor the performance of the AAI Website 2.0 after migration to detect and address any performance‐
related issues.
3.13. Ensure compliance with data privacy regulations and policies during the migration process.
3.14. Set the data ownership and access rights in the AAI Website 2.0.
3.15. The overall responsibility of content and Data migration/ porting from the AAI Website 1.0 to the AAI Website
2.0 and mobile APPs is the responsibility of the Contractor.
4. Deployment of Enterprise based search capability through automatic indexing, hashing, meta‐tagging and
versioning including OCR for AAI Website 2.0 and Mobile APPs
4.1. Responsibilities of the Contractor
4.1.1. Shall provide a functionality for full text and document search for all the contents.
4.1.2. Contractor shall implement the Optical character recognition (OCR) in search of content inside scanned
PDF, images, PDF, word and any other uploaded documents. OCR shall be included in each search result.
4.1.3. Contractor shall make provisions to allow users to modify tags if desired, providing flexibility and
customization options to enhance document categorization and organization.
4.1.4. Contractor should provide software based meta‐tagging, auto indexing, hashing and versioning in search
capability.
4.1.5. Contractor shall ensure that the indexing, hashing, tagging and versioning processes are scalable to
handle large volumes of uploaded documents efficiently. Consider optimizing algorithms and
infrastructure for performance and responsiveness. Design the system to handle increased load as the
database grows.
4.2. Functionality of Enterprise Based Search
7|Page60
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
4.2.1. In case of global search, it shall be able to search in all the links, sub‐links and shall provide links where
the searched word or phrase is present. On clicking the link, the content shall be displayed.
4.2.2. Shall support for multiple languages (i.e. Hindi, English and other regional languages at Airports
Microsite) in voice recognition and searching. Ensure quick and responsive voice search results to
enhance the user experience.
4.2.3. Integration of search functionality with advanced filters and autocomplete suggestions.
4.2.4. Generate a cryptographic hash (e.g., SHA‐256) of the documents at the time of upload. This hash value
uniquely represents the contents of the document and can be used to verify the document's integrity
and detect any unauthorized modifications.
4.2.5. Compare the generated hash value with existing hashes in the database to identify duplicate documents
or versions. This helps prevent redundant storage and improves data management efficiency.
4.2.6. Conduct comprehensive testing of the integrated OCR and voice search functionalities.
4.2.7. It should have auto completion and auto correction of search words feature along with search facets for
better search functionality.
4.2.8. Should supports synonyms and result rankings. The search engine should be capable of fuzzy search.
4.2.9. The search will ‘intelligently’ guess the intent of the user (through the key word typed in) even when the
key word may not exactly match the one in content. The ‘intelligence’ will be ‘Learned’ by the system
from past uses.
4.2.10. Search result for logged‐in users should be personalized according to their assigned roles and access
privileges.
4.2.11. OCR should also be used to validate the submitted data in the forms as and when required.
4.3. Features of Enterprise Based Search
4.3.1. AAI Website 2.0 & mobile APPs should be capable to display list of links based on the user search.
4.3.2. Implement appropriate security measures to protect sensitive information during document processing
and indexing. This includes encryption of data in transit and at rest, access controls, and adherence to
data privacy regulations.
4.3.3. Incorporate mechanisms for user feedback and quality assurance to validate the accuracy and
effectiveness of automatic indexing, hashing, versioning and tagging algorithms.
4.3.4. Implement pre‐processing, learning and training techniques to enhance OCR accuracy, such as image
cleanup, noise reduction, contrast adjustment, training on AAI data set.
4.3.5. Ensure that voice search is compatible with various devices, including smartphones, tablets, and smart
speakers. Ensure compatibility of voice search across different web browsers. Implement secure
transmission and storage practices for voice data.
5. Supply of SMS gateway for transactional message (for OTP & bulk messages)
5.1. Contractor shall supply SMS gateway for transactional message for sending OTP and bulk messages to users
with total count of 2 lakhs messages.
5.2. In case of third‐party integration, Contractor shall assist AAI team without any financial implication to AAI.
5.3. Additional SMS may be procured as per the quoted rate with same Terms and Conditions, in case AAI desires
to procure additional SMS.
5.4. SMS Gateway shall be available and fully operational as per SLA defined. A dashboard shall be provided to
monitor the same.
5.5. Contractor shall ensure that messages can be sent to user on 24x7 basis.
5.6. There shall be provision to deliver automated messages to users.
5.7. Same Business Day (SBD) customer support from Contractor shall be available to fix the issues.
5.8. SMS Services Application/Module/Gateway to be fully integrate with the application by the Contractor at no
extra cost.
5.9. Validity of SMS shall be life time. No expiry date shall be in place.
5.10. SMS gateway shall be integrated with AAI Website 2.0 and mobile Apps seamlessly.
5.11. SMS gateway shall be able to send SMS in Hindi and English.
5.12. SMS gateway shall be able to provide delivery report.
5.13. SMS gateway shall be compliant with the Government of India Telecom regulation.
5.14. Contractor shall ensure necessary security measure to protect the message data.
8|Page60
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
6. Safe to Host Certification from Cert‐in empanelled auditor as per latest GIGW guidelines
6.1. The Contractor is required to provide “Safe to Host” certificate as per latest GIGW guidelines before go‐live of
complete solution.
6.2. Contractor shall get the “Safe to Host” certificate by 3rd party CERT‐IN empanelled auditors.
6.3. Please refer to Annexure‐A Clause 8 for more details on Cyber security and compliance.
7. Certified Quality Website (CQW) Certificate from STQC/3rd party audit agency for the compliance of latest GIGW
7.1. The Contractor shall engage STQC/third‐party audit agency for auditing and certification on GIGW compliance
for quality of AAI Website & Mobile APPs. Contractor shall obtain the Certified Quality Website (CQW)
Certificate before go‐live of complete solution.
7.2. The Contractor shall ensure that AAI Website and mobile APPs are certified with latest GIGW standard,
wherever required, and are in compliance with the GIGW standard throughout the duration of the contract.
7.3. The Contractor is required to address and resolve the errors/non‐conformities if any rose during the
audit/annual surveillance activities by any government agencies/AAI.
7.4. The Contractor is required to conduct milestone‐wise third‐party audit of the developed Solution for
compliance with GIGW for the Quality of Milestone item.
7.5. The Contractor is required to prepare an Audit Plan milestone‐wise and subsequently update on need basis.
Due approval on the Audit Plan is required from AAI for commencement of the Audit activities.
7.6. The Contractor should close all observations & recommendations of such an audit and the cost of closure of all
such audit observations & recommendations to be borne by Contractor.
7.7. Upon rectification based on the recommendations, the Auditor will be required to re‐audit the system to ensure
that all recommendations accepted for inclusion are complied with.
7.8. The final report is to be submitted immediately upon completion of the activity before go‐live of such milestone
item. Presentations on the report, its findings, conclusions and recommendations need to be made to AAI.
7.9. Contractor shall get audited with AAI Cybersecurity team for compliance with GIGW before hosting of new
features, websites/microsites/subdomains, Mobile APPs in production environment during warranty & AMC.
8. Perpetual Enterprise support/ License cost for provided tools/software/Middleware/platform as required for the
project, as per SOW. (List of such tools/software/Middleware/platform to be provided by Bidder. Must be
mutually exclusive with such tools /software/Middleware/platform provided under BOQ line‐item No. 1.09.
8.1. Contractor shall supply the tools/software/Middleware/platform with enterprise support license to be used
during entire duration of the contract for all the environments.
8.2. All the licenses shall be procured in the name of AAI.
8.3. For hosting of the solution, Contractor shall provide software tools and solutions for load balancer, CI/CD/CT
pipeline, clustering, cache implementation, solution deployment, SLA monitoring, ticketing, alert mechanism
tools for the deployed applications etc.
8.4. Indicative List of tools/software/Middleware/platform include, but not limited to, the following:
10. Deployment of onsite Administrator for AAI website and Mobile APPs
To achieve the key objective of the project, Administrator is required to be deploy in AAI office to lead the
development, warranty, AMC of AAI Website 2.0 & mobile APPs and any new requirement comes across contract
duration. Contractor shall deploy an Administrator for entire duration of contract as per BOQ.
The roles and responsibility of Administrator are mentioned as below:
10.1. Administrator shall be the single point of contact for AAI.
10.2. Administrator will look after the development, warranty and AMC of AAI Website 2.0 and mobile APPs.
10.3. Should have experience in Website Administrator to oversee the management and maintenance of the AAI
website and Mobile APPs.
10.4. should have a deep understanding of web technologies, excellent troubleshooting skills, and the ability to
10 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
ensure the smooth operation of the AAI website and Mobile APPs.
10.5. This role requires a proactive approach for managing the website & APP’s functionality security and user
experience.
10.6. Oversee the day to day management of the AAI website & Mobile APPs, ensuring availability, uptime, and
speed. Monitor website functionality, resolve any issues promptly, and implement necessary updates.
10.7. Identify, diagnose, and resolve technical issues related to the website & Mobile APP, including broken links,
content errors, and server issues.
10.8. Should be able to Manage backup and disaster recovery processes.
10.9. Should be able to Install, configure, and update tool/software/Middleware if required.
10.10. Should be able to Manage network configurations and ensure connectivity to AAI Website & Mobile APP
server.
10.11. Should be able to Manage user accounts and access permissions on the AAI Website & Mobile APP server.
10.12. Ensure databases are up‐to‐date, secure, and performing optimally.
10.13. Diagnose and resolve database‐related issues.
10.14. Perform routine checks to ensure the AAI website 2.0 and Mobile APP's proper functioning.
10.15. Monitor AAI website and mobile APPs on a day‐to‐day basis to ensure that it functions reliably.
10.16. Monitor Website and mobile APPs proactively to ensure lag free and a seamless user experience i.e.
application does not suspend, hang etc.
10.17. Monitor components, including but not limited to, Application servers, Web Servers, Middleware and other
Servers on an ongoing basis to ensure smooth functioning of the AAI Website and mobile APPs.
10.18. He will also look after the new requirement related to AAI Website and Mobile APPs throughout the entire
duration of the contract.
10.19. He/ She will also act as Business Analyst and Solution Architect for new requirements during the warranty
and AMC period.
10.20. Administrator shall involve in requirement gathering, shall co‐ordinate with the various
Directorates/Airports/Regions for requirement gathering, approvals/sign‐offs. The requirement gathering will
also involve discussions with all concerned, and other stakeholders as per requirements.
10.21. He/ She shall also be able to develop high‐level and low‐level designs for AAI Website 2.0 and mobile APPs
and also for the new development during Warranty and AMC.
10.22. He/ She shall also be able to identify technical risks and challenges early in the project lifecycle, develop
mitigation strategies and contingency plans to address potential issues.
10.23. It will be Administrator’s responsibility to ensure compliance of various security audit reports/observations
received from AAI Cyber Security Team and other govt. agencies.
10.24. It will be Administrator’s responsibility to submit the claims with all the deliverables to AAI.
10.25. Administrator shall get the necessary deliverables approved from time to time as per project management
plan.
10.26. It will be Administrator’s responsibility to develop a comprehensive project plans, outlining the tasks and give
the timelines for the same.
10.27. Assist in designing solutions that meet business requirements. Collaborate with the development team to
translate business needs into technical specifications.
10.28. Collaborate with testing teams and users to validate that delivered solutions meet business requirements.
10.29. Administrator shall review quality of project deliverable to ensure compliance with agreed quality measures
and standards.
10.30. Provide regular project updates, addressing concerns and ensuring alignment with business goals.
10.31. Facilitate communication between team members, stakeholders, and AAI project team. Coordinate with DC
and DR team in case of any issue.
11 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
10.32. Administrator shall be responsible for SOPs and Manuals (Text, Video) updation during Warranty and AMC
period.
10.33. Administrator shall conduct trainings and Demo for the AAI personnel whenever there is any change in the
system functionality and after go‐live of new requirement/features/microsite/website during AMC and
Warranty. All Training and Demo plans have to be mutually agreed on with the AAI team.
10.34. Administrator would contact with offsite manpower (Technical Architect, DevOps Engineer, non‐functional
tester etc.) or call them in AAI premise if need arises and escalating issues to offsite resource in case deployed
manpower is unable to resolve.
10.35. Periodic Progress Reports to be submitted indicating the activities remaining / completed as against the
scheduled tasks / activities.
10.36. Above responsibility are not exhaustive. AAI reserves the right to assign any other work related to AAI website
and Mobile APPs.
11. Deployment of onsite UI/UX Designer for AAI Website and Mobile Apps
Role and responsibility of UI/UX Designer is mentioned as below:
11.1. The UI/UX Designer focuses on designing interfaces that are visually appealing, easy to navigate, and align
with user expectations and brand identity.
11.2. Conduct research to understand the target audience, their preferences, and behaviors.
11.3. Gather insights through surveys, interviews, and usability testing to inform design decisions.
11.4. Develop the information architecture to create a logical and intuitive structure for the AAI website and
Mobile APPs.
11.5. Design site maps and user flows to outline the navigation and user journey.
11.6. Create wireframes to outline the basic structure and layout of each page or screen.
11.7. Design logos, banners, branding materials, advertisements and other marketing collateral.
11.8. Develop interactive prototypes to demonstrate user interactions and flow.
11.9. Choose color schemes, typography, and imagery to create a cohesive and engaging visual experience.
11.10. Ensure designs are responsive and adaptable to various screen sizes and devices.
11.11. Produce high‐quality artwork and layouts that meet technical specifications and design standards.
11.12. Optimize layouts for both desktop and mobile experiences.
11.13. Work closely with developers to ensure the feasibility and implementation of design concepts.
11.14. Provide design assets and specifications for a seamless development process.
11.15. Design animations and interactive elements to enhance user engagement.
11.16. Ensure smooth transitions and interactions for a delightful user experience.
11.17. Consider accessibility standards and design interfaces that are inclusive for users with disabilities.
11.18. Implement features like alt text for images and ensure a focus on keyboard navigation.
11.19. Integrate user feedback into the design process to continuously improve the user experience.
11.20. Use analytics and user data to inform design decisions and enhancements.
11.21. Create design documentation, including style guides, design principles, and component libraries.
11.22. Ensure consistency in design elements across the AAI website and Mobile APPs.
11.23. Stay abreast of the latest design trends, tools, and technologies.
11.24. Apply innovative and industry‐relevant design solutions.
11.25. Be adaptable to changing project requirements and evolving user needs.
11.26. Iterate designs based on feedback and emerging trends.
11.27. To coordinate with on‐call manpower and Administrator to get the support for AAI website and Mobile APPs.
11.28. Ensure adherence to office policies and office timing of AAI.
11.29. Maintain the confidentiality of sensitive information and records.
12 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
11.30. Shall attend the phone call of users of Departments/Regions/Airports in case any issue falls under above
mentioned points.
11.31. Above responsibility are not exhaustive. AAI reserves the right to assign any other work related to AAI website
and Mobile APPs.
12. Deployment of onsite Back‐end developer for AAI Website and Mobile Apps
Role and responsibility of back‐end developer is mentioned as below:
12.1. Collaborate with front‐end developers, UI/UX designers, and other team members to deliver a cohesive and
efficient end‐to‐end solution.
12.2. Develop server‐side logic to handle the business logic and processes of the AAI website and Mobile APPs.
Implement algorithms and functionalities required for data processing and manipulation.
12.3. Design, implement, and maintain databases to store and retrieve data efficiently. Optimize database queries
and ensure data consistency and integrity.
12.4. Create and maintain APIs (Application Programming Interfaces) for seamless communication between the
front end and back end, between the servers & between the server and external system. Also, may ensure
RESTful or GraphQL API standards and proper documentation.
12.5. Ensure smooth communication between the front‐end and back‐end components.
12.6. Implement security measures to protect the application from common vulnerabilities, such as SQL injection
and cross‐site scripting (XSS).
12.7. Set up and manage user authentication and authorization processes.
12.8. Optimize server‐side performance to ensure fast response times. Implement caching mechanisms and other
performance enhancement strategies.
12.9. Design the back‐end architecture to be scalable, accommodating potential increases in user traffic and data
volume. Implement load balancing and other scalability strategies.
12.10. Plan and execute data migration processes when transitioning between database versions or migration to
AAI Website. Also, ensure data integrity during migration.
12.11. Configure and manage web servers, application servers, and databases.
12.12. Work closely with DevOps teams to automate deployment processes and ensure continuous integration and
delivery (CI/CD).
12.13. Implement infrastructure as code (IaC) practices.
12.14. Implement robust error handling mechanisms to identify and address issues proactively.
12.15. Set up logging systems to track and analyze errors for debugging.
12.16. Ensure compliance with data protection regulations and industry standards. Implement necessary measures
for data privacy and security.
12.17. Collaborate with other developers through version control workflows.
12.18. Conduct unit testing and debugging to identify and fix issues in the back‐end code.
12.19. Document the back‐end codebase, including API documentation, database schema, and architecture
diagrams.
12.20. Facilitate knowledge transfer within the development team.
12.21. To coordinate with on‐call manpower and Administrator to get the support for AAI website and Mobile APPs.
12.22. Ensure adherence to office policies and office timing of AAI.
12.23. Maintain the confidentiality of sensitive information and records.
12.24. Shall attend the phone call of users of Departments/Regions/Airports in case any issue falls under above
mentioned points.
12.25. Above responsibility are not exhaustive. AAI reserves the right to assign any other work related to AAI website
and Mobile APPs.
13 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
13. Deployment of onsite Front‐end developer for AAI Website & Mobile APPs
Role and responsibility of front‐end developer is mentioned as below:
13.1. Implement responsive and visually appealing user interfaces based on design specifications. ensuring a
seamless and engaging user experience.
13.2. Translate design wireframes or prototypes into functional and interactive web pages.
13.3. Write clean, semantic front‐end code for the structure of web pages. Style web pages to create attractive
and consistent layouts.
13.4. Develop interactive and dynamic features using front‐end frameworks and Libraries.
13.5. Ensure that AAI website functions correctly and looks consistent across various web browsers.
13.6. Address browser‐specific quirks and issues to achieve cross‐browser compatibility.
13.7. Design and implement layouts that adapt to different screen sizes and devices for a mobile‐friendly
experience.
13.8. Optimize website performance by minimizing page load times and optimizing assets.
13.9. Provide feedback on design feasibility and contribute to design discussions.
13.10. Integrate with back‐end APIs to fetch and display dynamic content on the front end.
13.11. Ensure smooth communication between the front‐end and back‐end components.
13.12. Conduct testing and debugging of front‐end code to identify and fix issues.
13.13. Implement accessibility best practices to ensure that the AAI website is usable for people with disabilities.
13.14. Use ARIA (Accessible Rich Internet Applications) attributes and follow WCAG guidelines.
13.15. Implement secure coding practices to prevent common vulnerabilities, such as cross‐site scripting (XSS) and
cross‐site request forgery (CSRF).
13.16. Document front‐end code, including comments and documentation files, for the benefit of other developers
and future maintenance.
13.17. Implement client‐side performance monitoring tools to track and analyze user interactions and experiences.
13.18. Be adaptable to changing project requirements.
13.19. Iterate on designs and functionalities based on feedback and evolving needs.
13.20. Design and implement the user interface of mobile applications based on design specifications.
13.21. Utilize mobile development frameworks and technologies to build cross‐platform Mobile APPs.
13.22. Implement responsive design principles to ensure optimal user experience on various screen sizes and
resolutions. Test and optimize layouts for smartphones, tablets and also for different platforms.
13.23. Implement interactive features and user interface elements using mobile‐specific technologies.
13.24. Incorporate gestures, animations, and transitions to enhance user engagement.
13.25. Ensure that the mobile app functions consistently and looks coherent across different mobile platforms (iOS
and Android), screen sizes, and resolutions.
13.26. Address platform‐specific design guidelines and requirements.
13.27. Optimize mobile app performance by minimizing load times and optimizing assets.
13.28. Implement caching strategies and optimize data fetching for efficient mobile usage.
13.29. Integrate mobile apps with back‐end APIs to fetch and display dynamic content.
13.30. Ensure seamless communication between the front‐end and back‐end components.
13.31. Collaborate closely with back‐end developers, UI/UX designers and other team to understand design
requirements and implement them effectively in the Mobile APPs.
13.32. Provide feedback on design feasibility and contribute to design discussions.
13.33. Implement secure user authentication mechanisms and sensitive data communication, considering mobile‐
specific security concerns.
13.34. Follow best practices for securing data storage and transmission.
14 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
13.35. Implement offline functionality when required, allowing users to access certain features or content without
an active internet connection.
13.36. Integrate push notification functionality to keep users informed about updates and relevant information on
both iOS and Android.
13.37. Conduct testing and debugging of mobile app front‐end code to identify and fix issues.
13.38. Document mobile app front‐end code, including comments and documentation files, for the benefit of other
developers and future maintenance.
13.39. Be adaptable to change project requirements, emerging technologies, and updates to mobile platforms.
13.40. Collaborate closely with back‐end developers, UI/UX designers and other team to understand design
requirements and implement them effectively. Also, collaborate with other developers using version control
workflows.
13.41. To coordinate with on‐call manpower and Administrator to get the support for AAI website and Mobile APPs.
13.42. Ensure adherence to office policies and office timing of AAI.
13.43. Maintain the confidentiality of sensitive information and records.
13.44. Shall attend the phone call of users of Departments/Regions/Airports in case any issue falls under above
mentioned points.
13.45. Above responsibility are not exhaustive. AAI reserves the right to assign any other work related to AAI website
2.0.
14. Deployment of onsite Functional Tester (Manual and Automation) for AAI Website and Mobile Apps
Role and responsibility of functional tester is mentioned as below:
14.1. Thoroughly understand the project requirements, including functional specifications, user stories, and
acceptance criteria.
14.2. Develop test plans outlining the testing approach, scope, resources, schedule, and deliverables.
14.3. Collaborate with stakeholders to ensure alignment with project goals.
14.4. Create detailed test cases based on requirements, covering positive and negative scenarios.
14.5. Ensure that test cases are traceable to requirements for comprehensive coverage. Define test scenarios and
criteria for UAT.
14.6. Execute manual test cases to validate the functionality of AAI Website and Mobile APPs.
14.7. Identify, document, and prioritize defects, and work with the development team to ensure timely resolution.
14.8. Perform regression testing to verify that new changes do not adversely impact existing functionality.
14.9. Automate repetitive and critical test cases for efficient regression testing.
14.10. Conduct exploratory testing to discover defects and potential issues that may not be covered by existing test
cases.
14.11. Verify mobile‐specific functionalities such as gestures, responsiveness, and device compatibility.
14.12. Develop and maintain automated test scripts using testing frameworks (e.g., Selenium, Appium etc.) for AAI
Website and Mobile APPs. Execute automated tests to increase test coverage and efficiency.
14.13. Conduct performance testing to assess the responsiveness, adaptability, stability, and scalability of AAI
Website and Mobile APPs. Identify and resolve performance bottlenecks. Perform security testing to identify
vulnerabilities and ensure that sensitive data is adequately protected.
14.14. Evaluate the user interface and experience to ensure that AAI website and Mobile APPs are user‐friendly and
intuitive.
14.15. Collaborate with developers to understand the root cause of defects and verify fixes.
14.16. Maintain detailed test documentation, including test cases, test scripts, test data, and defect reports.
14.17. Provide test summary reports and other relevant documentation to stakeholders.
14.18. Propose and implement improvements to the testing process for enhanced efficiency.
15 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
14.19. Provide clear and constructive feedback on the quality of the software to the development team.
14.20. Communicate testing progress, issues, and results to relevant stakeholders.
14.21. Ensure adherence to testing standards, processes, and methodologies defined by the organization.
14.22. To coordinate with on‐call manpower and Administrator to get the support for AAI website and Mobile APPs.
14.23. Ensure adherence to office policies and office timing of AAI.
14.24. Maintain the confidentiality of sensitive information and records.
14.25. Shall attend the phone call of users of Departments/Regions/Airports in case any issue falls under above
mentioned points.
14.26. Above responsibility are not exhaustive. AAI reserves the right to assign any other work related to AAI website
and Mobile APPs.
15. Deployment of onsite Content uploader for AAI Website and Mobile Apps
Role and responsibility of each Web content uploader is mentioned as below:
15.1. Shall upload the document at AAI website 2.0 & Mobile APPs on approval of competent authority.
15.2. Shall edit/update/delete the content of AAI website 2.0 & Mobile APPs on approval of competent authority.
15.3. Shall raise the tickets and track the ticket on Ticket Management system.
15.4. Shall cater the request coming on ticket Management tool, email and provide reply after resolution.
15.5. Shall check the status of server health, performance, resource usage and application availability on daily
basis.
15.6. Shall support Administrator in Monitoring of the AAI website 2.0 and Mobile APPs working on daily basis and
ensuring that they run smoothly and are secure.
15.7. Ensure adherence to office policies and office timing.
15.8. Maintain the confidentiality of sensitive information and records.
15.9. Shall attend the phone call of users (helpdesk support) at 1st level from Departments/Regions/Airports in
case any issue if not resolvable then forward to developer.
15.10. Above responsibility are not exhaustive. AAI reserves the right to assign any other work related to AAI website
and Mobile APPs.
16. Deployment of Wildcard SSL Certificate with latest version for all the platforms
16.1. All the applications should be hosted in SSL environment (https). The platform should support predefined
security configuration to protect AAI website 2.0 and mobile APPs resources against any kind of attacks.
16.2. Contractor shall provide the valid Wildcard SSL Certificate in latest version for entire duration of contract as
per BOQ.
16.3. Choose a reputable SSL certificate provider that offers Wildcard SSL certificates with support for the latest
encryption protocols and security standards.
16.4. Configure server redirects to ensure that all HTTP requests are automatically redirected to the HTTPS version
of the AAI website 2.0.
16.5. Update the network security configuration within the mobile APPs to enforce SSL/TLS encryption and trust
the Wildcard SSL Certificate for all API endpoints and server communications.
16.6. Set up monitoring and alerting mechanisms to notify AAI officials of SSL certificate expiration or potential
security vulnerabilities.
16.7. Proactively renew the SSL certificate before the expiration date to avoid service disruptions. Automate the
certificate renewal process if possible.
16.8. Keep the SSL/TLS libraries and dependencies up to date to address any security vulnerabilities or weaknesses
identified in the latest versions.
16.9. Conduct thorough testing to ensure that the SSL/TLS configuration is correctly implemented and functioning
16 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
17. Operation and Maintenance (O&M) of new AAI website and mobile APPs after Go‐Live
Salient requirements are described as:
17.1. O&M includes, but not limited to, troubleshooting, performance optimization, addressing
functionality/availability and performance issues. Focus should be on preventive/proactive maintenance.
17.2. All tickets related to any issue/complaint/observation about the solution & request for uploading, updating
& new feature/microsite/subdomain development shall be maintained in comprehensive ticketing solution.
17.3. Contractor has to ensure the AAI website 2.0 and Mobile APPs is well maintained, up‐and‐running 24x7.
17.4. The overall responsibility of the AAI website 2.0 and Mobile APPs maintenance lies with the Contractor.
17.5. Contractor shall provide the AMC of the AAI Website 2.0 and Mobile APPs for the duration of three (3) years
after One (1) year of Warranty. Warranty Period of AAI Website 2.0 and Mobile APPs will commence after
completion of stabilization period.
17.6. The contractor will deploy the resources on‐site/ off‐site depending on the nature of activity apart from
permanently deployed manpower in AAI corporate office as per BOQ. Deployed manpower shall work under
guidance of AAI Project Manager/ Project In‐charge.
17.7. Update software, plugins, and components to the latest versions to address security vulnerabilities and
improve performance.
17.8. Identify and fix any errors/bugs/gaps or issues that may arise during the operation and maintenance period
after Go‐Live.
17.9. Provide timely resolutions to reported problems, ensuring minimal disruption to AAI website and Mobile
APPs services.
17.10. Contractor shall coordinate with AAI cyber security team for security audits and vulnerability assessments.
17.11. Contractor shall prevent the AAI Website and Mobile APPs from security threat and proactively address
security concerns.
17.12. Contractor shall improve the performance of AAI Website and Mobile APPs. Improve logic and design
whenever requires in order to enhance performance of AAI website and Mobile APPs.
17.13. Contractor shall manage AAI website and Mobile APPs servers at AAI, DC & DR. Contractor shall perform DC‐
DR drill as per frequency set under SLAs.
17.14. The Contractor will have to include version upgrade and enhancements in services on account of industry
dynamics as a part of the O&M. Any development work of such type will be carried out by the deployed team
by Contractor at no extra cost.
17.15. Contractor shall perform accessibility, load testing of Applications, Database and Load balancer.
17.16. Contractor shall ensure that DC‐DR replication is happening round the clock.
17.17. Contractor shall share Contingency Plans for application and data recovery.
17.18. Contractor shall develop and implement a robust disaster recovery plan to ensure data integrity and rapid
recovery in case of system failures.
17.19. Contractor shall monitor AAI website & Mobile APPs performance and address any issues related to speed,
responsiveness, or resource utilization. Optimize AAI website & Mobile APPs components to enhance overall
performance. Contractor may procure or utilize additional software to enhancement the performance of
website.
17.20. Contractor shall ensure compliance of security issues / GIGW compliance time to time. It is the responsibility
of Contractor to rectify the security issues/ GIGW compliance raised by AAI or any government agencies
17.21. Contractor shall ensure provision to send the alert in case of AAI website or Mobile APPs go down.
17 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
17.22. Contractor shall keep record of Software Change and Version Control. Contractor may utilize the enterprise
edition of tools to monitor the same.
17.23. The Contractor shall maintain the solution related documentations such as High‐level design of whole system,
Low level design for whole system/module design level, System Requirements Specifications (SRS) etc.
17.24. The Contractor shall also ensure that any software system documentation is updated with regard to the
following:
17.24.1. Source code is documented
17.24.2. Functional specifications are documented
17.24.3. Application documentation is updated to reflect on‐going maintenance and enhancements
including FRS and SRS in accordance with the defined standards
17.24.4. User manuals and training manuals are updated to reflect on‐going changes/enhancements
17.24.5. Standard practices of version control and management are adopted and followed
17.25. All project documents need to follow a proper version control mechanism. The Contractor will be required
to keep all project documentation updated and ensure the updated project documents are submitted to the
AAI by the end of next quarter in case of any change.
17.26. Application monitoring and Compliance to Service Level Agreements, it is the responsibility of the Contractor
to:
17.26.1. Ensure compliance with SLAs as indicated in the RFP and any upgrades/updates/any changes to the
solution shall be planned by the Contractor while ensuring that the SLA requirements are met at no
additional cost to the AAI.
17.26.2. The Contractor shall ensure compliance to uptime and performance requirements of solution as
indicated in the SLA and any major changes to the software shall be planned accordingly by the
Contractor for ensuring the SLA requirements.
17.26.3. Ensure the accuracy and timeliness of data uploaded as received.
17.26.4. Resolve and report the data discrepancies to the designated AAI Officials.
17.26.5. The Contractor shall submit a document on the performance of the Software application against
the desired SLA on a Quarterly basis/as required.
17.26.6. Contractor shall ensure the password policy for application and servers.
17.26.7. Contractor need to submit a report based on user login, location, last update, visits etc. whenever
required.
18 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
18.2.5. Administrator will be responsible for training the department, region, Airport users in the areas of
parameterization, operations, management, error handling etc. with respect to Content
Management.
18.2.6. Training to the content managers (nodal officers) on the content management and tools used in AAI
website 2.0 and mobile APPs.
18.2.7. After each training session, feedback will be sought from each of the attendees on either printed
feedback forms or through a link available on the web portal. The feedback received would be
reported to the AAI for each training session.
19. Development of Single Sign‐On (SSO) and signup system across all platforms
19.1. Contractor shall develop a Single Sign‐On (SSO) and signup system across all platforms such as AAI Website
2.0, Mobile APPs, subdomains, and microsites of Airports for external users (Passengers, Visitors etc.) which
will enable them to access the services provided by AAI.
19.2. Contractor shall provide a user registration mechanism for new users to sign up for an account at
aforementioned platforms. User registration includes fields for capturing essential user information (Mobile
No., email ID etc.) and preferences. The system should have the ability to verify the accounts through e‐mail
verification, mobile OTP etc.
19.3. Contractor shall allow users to manage their profiles, including updating personal information, preferences,
and security settings.
19.4. User login at AAI Website 2.0 and mobile APPs shall be happed in encrypted mode.
19.5. Contractor shall implement password policies, such as complexity requirements, expiration periods, and
password recovery mechanisms, to ensure secure user authentication.
19.6. Contractor shall ensure that user profiles and preferences are synchronized between the platforms, providing
a consistent user experience across platforms.
19.7. Contractor shall implement robust security measures, such as encryption, session management, and threat
detection, to safeguard user credentials and data across all platforms.
19.8. Contractor shall ensure compliance with relevant regulations and standards governing user authentication,
data privacy, and security, such as India Govt. Data Protection Law & regulations, and OWASP guidelines.
19.9. Contractor shall design the SSO and signup system to accommodate future growth and scalability
requirements, including increased user traffic and expanded platform functionality.
19.10. AAI serving employees shall be authenticated through AAI LDAP system. Contractor shall provide required
mechanism to authenticate AAI serving employees through LDAP.
19.11. AAI retired employees shall be authenticated through unique Mobile Number. Contractor shall provide
required mechanism to authenticate AAI retired employees using SMS gateway.
19.12. Contractor shall develop required mechanism to fetch Real‐time retired and serving employee profile data
from AAI SAP system.
19.13. Single Sign‐On service will centrally maintain user session thus preventing user from multiple login when
trying to access multiple applications.
19 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
to populate their dashboard. Widgets may include latest updates, status, notifications, weather
updates, calendar events, recent activity logs, and more.
20.1.3. Allow users to customize their dashboard layout by arranging and rearranging widgets using a drag‐
and‐drop interface. This enables users to prioritize content based on their preferences.
20.1.4. Enable users to configure individual widgets by adjusting settings, preferences, and content sources.
For example, users may customize the circulars widget by selecting preferred circulars categories or
sources.
20.1.5. Display personalized content on the dashboard based on user preferences, behavior, and historical
data. This may include recommendations, personalized messages, and relevant notifications.
20.1.6. Enable users to access their dashboard and view cached content even when offline in Mobile APPs.
This ensures continuous usability and engagement, especially in areas with limited or no internet
connectivity.
20.1.7. Integrate push notification functionality to notify users of important updates, reminders, or events
directly on their dashboard.
20.2. Nodal Officer Dashboard:
20.2.1. Dashboard should have provision to showcase the analytics of uploaded and updated information in
respect to their Directorates, Regions and Airports. All the activities performed on AAI website 2.0
and mobile APPs by AAI Website Admin, Directorates, Regions and Airports shall be recorded on
dashboard. Nodal officers will handle the dashboard. Some of activities may be like number of
document uploaded from his/her directorate, No. of Hindi doc missing, date of expiry of contents
etc.
20.2.2. Contractor shall provision to Departments, Regions and Airports to upload and update the content
on AAI website 2.0 and Mobile APPs through Dashboard. However, any content deletion provision
shall only be available with AAI website team. There should be provision to upload data using excel
sheet. System shall also maintain the revision of uploaded contents.
20.2.3. Different role shall be given to more than one user of Departments/Regions/Airports to view
Dashboard content if required.
20.2.4. Platform shall be capable of de‐centralized content contribution (Department/Regions/Airports
based) and content management. It also caters to multiple authenticated customers beyond
organizational boundaries.
20.2.5. The Applications must be able to send mail alert and push notifications to the concerned nodal officer
on expiry of content and Hindi doc missing of corresponding English upload.
20.2.6. The system shall provide a trigger facility to send a reminder notifying about the expiry date of the
content and once the notification is sent, it shall be ensured that either the content is placed in the
archive section or the expiry date is extended. Each workflow will be associated with dashboard of
nodal officer.
20.2.7. Contractor shall represent data through graphs and bar charts etc. under dashboard view.
20.2.8. Contractor may embed the analytics tool in Dashboard if required.
20.2.9. Develop various MIS reports as required by AAI. The application shall provide option to AAI Admin,
Directorates, regions and airport to generate MIS reports.
20.3. Analytics Dashboard:
20.3.1. The system should facilitate the view of hits separately for multi‐lingual website and mobile APPs.
Analysis of visitor hits on the AAI website 2.0 and Mobile APPs should be possible by filtering the data
based on certain parameters such as date range, specific page hit. The administrator shall be able to
view the number of hits, traffic coming from a specific search engine, keywords used on search
engine, repeat and unique visitors and visitor's state and countries. It shall also generate analytics on
peak usage time during a particular day/week/month/year.
20 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
20.3.2. The system shall also give a facility to generate dashboards on the website and Mobile APPs visitor's
behaviour pattern on a weekly, monthly, quarterly and annual basis. It shall also be capable of
generating detailed reports which shall be downloadable in multiple formats.
20.3.3. Contractor should provide monitoring facility, creation of metric and choice of visualization as per
AAI Admin, Directorates, regions and airport requirement. There should be provision to attach
document with planned events and dates. There should be a provision to upload excel/pdf/Doc and
download report in .xls /.pdf/Doc file formats or any other format as desired by AAI.
20.3.4. AAI website 2.0 and Mobile APPs should be capable of Omni enablement and analytics. Analytics
should be user selectable and generate reports (like number of clicks from particular IP address,
downloads, etc).
20.3.5. Solution shall provide a custom report builder for the Web portal UI.
20.3.6. MIS report should be auto generated periodically or need basis.
20.4. SLA monitoring Dashboard:
20.4.1. Contract shall provide SLA monitoring Dashboard.
21 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
21.6. The platform should help automate the release and delivery of applications, shortening the delivery lifecycle,
streamlining manual processes, and accelerating team velocity.
21.7. The platform to support source code management which enables coordination, sharing and collaboration
across the development teams. It should also track and merge branches, audit changes and enable
concurrent work, to accelerate software delivery.
21.8. The platform should enable teams to package their applications and dependencies and build artifacts with
ease to ensure DevOps acceleration with automated software pipelines.
21.9. The platform should be able to automate unit testing, functional testing and non‐functional testing (e.g.
performance test, security test) and integrate them into the pipeline.
21.10. The platform should be able to orchestrate and manage development and test environments.
21.11. The platform should be able to provide a common comprehensive reporting dashboard as part of
“continuous measurement”.
23 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
specified email Ids after completion of backup. Contractor may procure or utilize additional software
for the same.
22.4.5. 7x24 support for file and volume restoration requests at the DC & DR.
22.4.6. Contractor shall also provision for automatic restoration of backup as per backup policy to be
designed by Contractor with the help of AAI.
22.4.7. Contractor shall take incremental and full Back up as backup policy.
22.4.8. Contractor shall keep Backup files encrypted.
22.4.9. In case a Govt. department ex. IB, CERT‐IN needs dump of application and database, Contractor shall
provide the same information without any delay.
22.5. Contingency Plans for Application & Data Recovery
22.5.1. The DR site would work as the failover site in case the datacenter (DC) goes down. This includes
application crash, database crash, network crash or any other issues rendering the datacenter
unresponsive. In case of Application Crash, effort will be made to bring back the application to
working state through the most recent application state & configuration files from the DR site and if
required the backup / restore and reinstallation procedure would be used if the same is available in
the backup set or as a last resort if the DR site also fails. It will be taken up on a high criticality basis
with round the clock support to ensure the application state is reverted to the most recent state.
22.5.2. In case of Database Crash ‐ Effort must be made to retrieves much data as possible from the dataset
of the DR site with the most recent copy of the data. If the last backup set also includes the most
recent copy of the data then that can also be used for restoration of the database. If required,
previous backups will be used to ensure restoration. However, the Contractor needs to honor the
RPO (Recovery Point Objective) & RTO (Recovery Time Objective). Contractor should be on this job
round the clock to restore availability.
22.6. Bugs / Fixes Management
22.6.1. Bugs or Fixes Management is an important activity and based on the severity level, it becomes highly
critical.
22.6.2. Contractor shall use standard bug management tools like Bugzilla, JIRA etc. to log and track the
reported issues. Weekly bug reports shall be shared with AAI for the bug reported and fixed bug
trends which shall include severity, bug root cause, fix provided etc.
22.6.3. Contractor commits involvement in resolution on ‘best of efforts’ basis as per requirements.
Following are the steps involved:
22.6.3.1. Problem definition
22.6.3.2. Context definition (through functional teams as per requirements)
22.6.3.3. Request Analysis
22.6.3.4. Priority Categorization
22.6.3.5. Logging with OEM (if applicable) and tracking to resolution
22.6.4. The Contractor shall address all the errors/bugs/gaps in the functionality offered by the AAI website
2.0 and mobile APPs (vis‐à‐vis the FR the FRS, BRD and SRS signed off) at no additional cost during
the operations & maintenance period.
22.6.5. The Contractor shall identify and resolve application problems like system malfunctions,
performance problems, data corruption etc. due to which the software solution is not able to give
the desired performance. The Contractor shall be responsible for the following:
22.6.5.1. Updating all available patch/ updates to the AAI Website 2.0 & mobile APPs.
22.6.5.2. providing handholding support to end users.
22.6.5.3. Ensuring proactive and timely support in identification and provision of solutions including
OEM (if applicable) Support for resolution.
22.6.5.4. Timely logging of Bugs/Problems.
22.6.5.5. Periodic Reports to AAI & other Project Stakeholders.
22.6.6. An Issue log shall be maintained by the Contractor for the errors and bugs identified in the solution
24 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
24.2. The Solution shall maintain a record (e.g. audit trail) of all additions, changes and deletions made to data in
the system. This should be readily searchable by user ID.
24.3. This must include but is not limited to:
24.3.1. The User ID of the person who made the change
24.3.2. The date and time of the change
24.3.3. The physical, software/hardware and/or network location of the person while making the change.
24.3.4. The information that was changed.
24.3.5. The outcome of the event.
24.3.6. The data before and after it was changed, and which screens were accessed and used
24.4. Contractor shall ensure compliance with GIGW 3.0, WCAG 2.0 guidelines etc.
24.5. New AAI Website and mobile APPs should ensure compliance with ISO and W3C and should be compatible
with the international standard for physically challenged persons.
24.6. The AAI website 2.0 and mobile APPs shall be OWASP compliant. Specifically, top ten threats should not be
present in the web and mobile applications.
27 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
ANNEXURE‐A
28 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
1.22. Contractor shall ensure that all the features/modules/microsites/subdomains developed in AAI Website 1.0
till the milestone‐2 shall be included in AAI Website 2.0 and mobile APPs.
1.23. Contractor shall ensure that DC‐DR replication is happening round the clock.
3.7.6. Application security assessment (both Black Box and Grey Box testing)
3.7.7. Source Code assessment
3.8. Functional audit should cover at least the following (but not be limited to):
3.8.1. Review of User Account Management
3.8.2. Privilege Management and Access Restrictions User ID Scrutiny and Evaluation
3.8.3. Segregation of Duties
3.8.4. Evaluating Access Controls
3.8.5. Review of logs and integration with security monitoring solutions, if any.
3.8.6. Critical Access Review
3.8.7. Recording of security events for future investigations and access control
3.8.8. Modifications done to the programs and the configurations
3.8.9. Segregation between the development and production
3.8.10. Testing process
3.8.11. Quality assurance
3.8.12. Configuration Management
3.8.13. Verification and evaluation of configurations relating to business processes
3.9. The Audit Report should include (but not limited to):
3.9.1. Dates and Location(s) of audit
3.9.2. Audit components, including benchmarks for assessment
3.9.3. Summary of audit findings including identification tests, tools used and results of tests performed
3.9.4. Analysis of vulnerabilities and issues of concern
3.9.5. Plan for inclusion / rectifications needs to be prepared by the Contractor
3.9.6. Recommendations for action
3.10. The Contractor should close all vulnerabilities, observations & recommendations of such an audit and the
cost of closure of all such audit vulnerabilities, observations & recommendations to be borne by Contractor.
Upon rectification based on the recommendations, the Auditor will be required to re‐audit the system to
ensure that all recommendations accepted for inclusion are complied with.
3.11. The final report is to be submitted immediately upon completion of the activity before moving the code into
production environment or go‐live of such milestone item, as the case may be. Presentations on the report, its
findings, conclusions and recommendations need to be made to AAI.
3.12. Scope of work also covers evaluating the confidentiality, safety & security of the data & strengthen the
security posture of solution and protection against external threats.
3.13. All documents, information and reports relating to the assignment would be handled and kept strictly
confidential and not shared/published/supplied or disseminated in any manner whatsoever to any third party.
3.14. Contractor shall ensure to maintain data security at the application, database, messaging and middleware
level.
3.15. Contractor shall ensure security when the applications are accessed from outside the network or accessing
resources outside the network and shall maintain such history of logs for further review with AAI Security Team
3.16. AAI Website & Mobile APPs should be highly secure without vulnerabilities like duplicate login session and
should be SSL supported and encrypted.
3.17. The application should enforce network level security. All the traffics (client‐server, load balancer‐
application, application‐database, between micro services etc.) to be encrypted using secured connectivity.
3.18. Contract shall escalate any untoward incidents to AAI on an immediate basis either for reporting purposes /
action from AAI.
3.19. Contractor shall provide solution support availability 24x7 via phone, email, or online support portal.
4. Manpower Requirements
4.1. Contract shall deploy the manpower during the development phases as per need of the project.
4.2. The Airport Authority of India (AAI) reserves the right to conduct interviews with the specified personnel
deployed for the project during development period. Additionally, AAI may verify and cross‐check the
credentials and qualifications of other team members working offshore to ensure compliance with project
requirements and standards.
4.3. Contract shall deploy the manpower in AAI premise during Warranty and AMC as per BOQ.
30 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
4.4. In the event of absent of any deployed manpower in AAI premise, Contractor shall provide the replacement of
said manpower as per Annexure‐B. Contractor shall maintain the count of manpower.
4.5. In the event of absent of deployed manpower, the penalty will be calculated as per SLA.
4.6. Deployed manpower except content uploader shall be available at AAI Corporate Headquarter (CHQ), New
Delhi office from 0930 hrs to 1800 hrs on all working days (Monday‐Friday). If required, all the deployed
manpower may be required to provide support services from their respective locations or AAI New Delhi office
on weekends/Public Holidays or after office hours on need basis. Contractor will provide the resource with the
necessary infrastructure to carry out on‐call support. In case of non‐compliance of office timing, penalty will be
imposed as per SLA.
4.7. Content uploaders shall be available at AAI Corporate Headquarter (CHQ), New Delhi office in two (2) shift in
six (6) days of a week.
4.7.1. Monday to Friday – one from 7:00 AM to 3:30 PM & other from 1:30 PM to 10:00 PM
4.7.2. Saturday and Sunday – One in each day from 9:30 AM to 6:00 PM
4.8. Both Content uploaders shall provide support to AAI internal users as well as external users of the solution such
as customers, passengers, and visitors etc.
4.9. In addition to deployed permanent manpower requirement mentioned in BOQ, AAI may call Content Creator,
Technical Architect, non‐functional tester, devOps Engineer and any other manpower which are related to
project, in case the need arises. No any additional costs will be borne by AAI for the same, including TA/DA for
travel. In case of non‐compliance of such on‐call manpower, penalty will be imposed as per SLA.
4.10. Contractor shall take consent of AAI before deployment of manpower in AAI premise as per BOQ and all the
manpower would be interviewed by AAI before deployed in AAI premise.
4.11. AAI may, at its discretion, request the Contractor to deploy additional onsite manpower in AAI premise on a
regular basis, on top of the manpower capacity mentioned in the BOQ. Deployment of such manpower shall be
dealt as per provision of person‐month mentioned in BoQ.
4.12. If the performance of any deployed manpower is found unsatisfactory, the Contractor will be required to
replace the individual within one week. During this period:
4.12.1. If the replacement is provided within the specified week, no penalty will be applied.
4.12.2. If the replacement is not provided within one week, the individual will be considered absent, and
penalties will be calculated as per the SLA from the day the replacement was requested.
4.13. Please refer to Annexure – B for manpower qualifications requirements to be deputed onsite.
4.14. Functional requirement such as development of new features/subdomain/microsite/microservice shall be
carried out by deployed manpower without any financial implication on AAI.
31 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
5.10. The proposed helpdesk solution must be able to log and escalate user interactions and requests. All
interactions with users will be assigned a ticket number.
5.11. The proposed helpdesk solution must have an updateable knowledge base for technical analysis and further
help end‐users to search solutions for previously solved issues.
5.12. The proposed helpdesk solution must have the ability to track work history of calls to facilitate troubleshooting.
5.13. The proposed helpdesk solution must support tracking of SLA (service level agreements) for call requests within
the help desk through service types.
5.14. Receiving incidents/requests through email or ticketing system. Incident management tool should be
integrated with email received from the end users and a ticket should be auto created by the tool once the
email is received.
5.15. The proposed helpdesk solution shall integrate its systems in such a way that if a grievance or a query is posted
at any of the communication channels (Portal, mobile apps, help desk centre etc.) the same are registered at
one database and resolved in similar fashion so that unified or an integrated view of the communications is
viewed by the stakeholders.
5.16. The proposed helpdesk solution must be capable of assigning call requests to technical staff manually as well
as automatically based on predefined rules, and should support notification and escalation over email, web etc.
5.17. Knowledge tools and Configuration Management Data Base (CMDB) should be integral built‐in components of
Helpdesk and should be accessible from the same login window to enable seamless access.
5.18. The proposed helpdesk solution must allow the IT team to see the Configuration Items (CI) relationships in
pictorial format, with a specified number of relationships on single window.
5.19. The proposed helpdesk solution must have a top management dashboard for viewing the helpdesk KPI in graph
& chart formats.
5.20. The proposed helpdesk solution must support remote management for end‐user & allow analysts to do the
desktop sharing for any system located anywhere, just connected to internet/intranet.
32 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
7.1.2. The Contractor’s program of work should be synchronized with the staff deployment plan proposed;
the deployment plan shall clearly define onsite and offsite deployment plan and personals under each
deployment category.
7.1.3. The prepared project plan should allow teams to track the progress of various deliverables and
milestones, through the scheduled review mechanisms.
7.1.4. Approval by AAI of the proposed plan shall not relieve the Contractor of any of his duties or
responsibilities under the Contract. However, if the Contractor’s work plans necessitate a
disruption/shutdown in AAI Website’s operation, the plan shall be mutually discussed and developed
so as to keep such disruption/shutdown to the barest unavoidable minimum.
7.1.5. The program so submitted by the Contractor shall conform to the requirements and timelines specified
in the RFP.
7.1.6. Any time and cost arising due to failure of the Contractor to develop/adhere such a work plan shall be
to his account.
7.1.7. Please note that the deliverables are indicative in terms of enlistment; kindly refer the entire section
for comprehensive view on the deliverable’s requirements.
7.1.8. Deliverable(s):
7.1.8.1. Integrated Project Plan including:
a. Milestones
b. Resource deployment
c. Risks and their mitigation plan
d. Dependencies
e. Responsibility matrix
7.1.8.2. Submission of Project Charter to include:
a. Risk Management and Mitigation plan
b. Information Security Plan
c. Communication Plan
d. Data Migration plan
e. SLA Monitoring and reporting plan
f. Exit Management Plan including transition management
7.2. System Requirement Elicitation and System Design
7.2.1. Requirement Gathering & Analysis
7.2.1.1. Detailed functional requirements and process flow is provided in this RFP. Contractor is required
to validate the same and fill gaps (that may be identified at this stage). Further, the Contractor is to
further elaborate the functional requirements and process flow, based on discussion with AAI, from
a systems perspective.
7.2.1.2. The requirement gathering should cover (but not be limited to) workflows, business rules,
validations, regulatory / legal requirements/security requirements etc. On basis of the requirements
gathered, the Contractor is required to prepare an SRS document.
7.2.1.3. The Contractor is also required to prepare a Requirements Traceability Matrix (RTM) to establish
the design, development, testing and roll‐out of various functionalities and non‐functional (and
Technical) requirements. It should include mapping of: SRS, LLD, DFD, and other relevant
documents (as per need).
7.2.1.4. Deliverable(s):
a. Data Flow Diagram (DFD)
b. Software Requirement Specifications (SRS)
c. Requirements Traceability Matrix (RTM)
7.2.2.Solution Design
7.2.2.1. The Contractor shall design the solution architecture and specifications to meet the functional
and technical requirements mentioned as part of this RFP. The Contractor shall be entirely
responsible for the design and architecture of the proposed ‘Websites and Mobile APPs’ and its
successful operations for the period defined in the RFP.
33 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
7.2.2.2. Contractor would need to appropriately size the solution (including the bandwidth) for successful
operations, meeting the SLAs, for the contract period.
7.2.2.3. The system architecture for the integrated solution shall be designed, developed & delivered as
per following:
1. The solution design should be n‐tier services‐based architecture for all environments.
2. The solution design should focus on developing workflow and business transaction, rules
management, configuration management.
3. The solution design should be done in such a manner that components are loosely coupled;
ensuring that the application components are treated individually and dependencies are
reduced. The Contractor should ensure that addition, removal, failure or update of one
component has a minimum impact on other components.
4. The Contractor should ensure that services should be written in such a way that they can be
automated for testing. Test automation is necessary to ensure services can be upgraded, re‐
factored, etc. without breaking other services that use them. The Contractor should ensure that
all services should be inherently versioned and all invocations must specify the version of service.
5. The solutions design should provide for service abstraction, to control what part of the service
logic of a particular application needs to be private (hidden) and which parts need to be made
public (consumable).
6. The solution should not only be modular in nature, but be adaptive to converse with other
technology components such as platforms and databases, complete with management suites or
with the induction of adaptors and interfaces or even smaller bespoke solutions to support the
same.
7. All Websites & Mobile APPs must take into account appropriate security, performance, efficiency and
maintainability issues based on the functional, technical and non‐functional requirements and
the defined SLAs.
8. The solution must be supported by at least ‘N‐2’ versions of any underlying products. This will be
required in case some / other functionalities become non‐functional upon deployment on the
latest version, or in case a roll‐back is required.
9. Products must be supported in terms of upgrades, bug fixes, functionality enhancements and
patches to cater to changes to statutory requirements by their respective OEM for the entire
duration of the contract plus 6 months after end of contract. OEM support should be made
available on all deployed versions for the contract period.
10. The Contractor shall provision for following hosting environments –
Development Environment
UAT environment
Production Environment
Staging Environment
DR Environment
11. Data will be owned, shared, controlled and protected as a corporate asset of AAI.
12. Data should only be accessed through application / interfaces for create, update and delete.
There should not be any direct access to the data layer for users.
13. The Contractor shall provide the details of data synchronization strategy both in batch mode and
in real time. AAI, in consultation with Contractor, shall decide on the methodology of data
synchronization based on service requirements
34 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
7.2.2.4. Deliverable(s):
7.2.2.4.1. High Level Design (HLD) should include Solution Architecture, including:
a. Business Architecture
b. Application Architecture
c. Integration Architecture
d. Technology Architecture
e. Security architecture
f. Deployment Architecture
7.2.2.4.2. Low Level Design (LLD)
35 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
36 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
8.2.3.8. The Contractor shall perform various tests including security, load balancing, Active‐active
testing, DC/DR failover tests to verify the availability of the services in case of component/location
failures.
8.2.3.9. Deliverable(s):
a. Performance Test Reports
b. Load Test Report
8.3. Go‐Live Criteria
8.3.1. 'Go‐Live' of the project is defined as the date on which all services/modules specified in the milestones
are fully operational, and a subsequent two‐month observation period has been successfully
completed. The below describe the criteria of Go‐live:
Requirement Criteria of Go‐live
• AAI Website 2.0 and Mobile APPs are up and running as per the defined
Up and running scope of work.
Signed‐off UAT • Signed‐off UAT report, ensuring all issues raised during UAT have been
report resolved.
Safe to Host • Security Audit has been conducted by a CERT‐In empaneled agency and
Certificate corresponding findings have been mitigated in the solution, without any
additional financial implication to AAI.
The software developed for AAI Website 2.0 & Mobile APPs shall be audited
by the CERT‐In empaneled agency from a security and controls perspective.
Following are the broad activities to be performed by the Agency as part of
Security Audit. The security review shall include the following activities:
1. Audit of Application security mechanisms
2. Assessment of authentication mechanism provided in the application
/components/modules
3. Assessment of data encryption mechanisms implemented for the
solution
4. Assessment of data access privileges, retention periods and archival
mechanisms
5. Application security features incorporated etc.
The Contractor is required to provide “Safe to Host” certificate as per latest
GIGW guidelines before go‐live of complete solution. Contractor shall get the
“Safe to Host” certificate by 3rd party CERT‐IN empaneled auditors prior to
Go‐live.
Certified Qualified Quality Audit has been conducted by STQC/3rd party audit agency as per
Website (CQW) latest GIGW guideline and corresponding findings have been mitigated in the
Certificate solution, without any additional financial implication to AAI.
Contractor shall provide Certified Qualified Website (CQW) Certificate from
STQC/3rd party audit agency for the compliance of latest GIGW
37 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Data migration & Contractor shall migrate the entire data from AAI website 1.0 to AAI website
Quality 2.0 and mobile APPs as per SOW
The Contractor shall perform the Data Quality Assessment for the entire data
The errors/gaps identified during the Data Quality Assessment shall be
addressed by Contactor before moving the data into production
environment.
8.3.2.3rd Party Audit: The entire solution is designed, developed, tested, integrated, Deployed and made Go‐
live in accordance to the defined scope of work and project deliverable documents submitted by the
contractor.
8.3.2.1. For this purpose, the contractor must engage a 3rd party agency to audit the entire solution,
post approval of AAI.
8.3.2.2. Project deliverable document that have been submitted by the contractor must be audited
by the appointed 3rd party agency.
8.3.2.3. Appointed 3rd party agency must audit the entire solutions to validate if the solution comply
all the points mentioned in SOW.
8.3.2.4. Appointed 3rd party agency must audit the entire solutions to validate if the solution is
designed to remove all single point failures and appropriate redundancy is built into all the
components to provide the ability to recover from failures.
8.3.2.5. Appointed 3rd party agency must audit the manageability requirements such as remote
monitoring, administration, configuration, inventory management, fault identification etc.
8.3.2.6. The contractor needs to prepare and provide all requisite information/documents to third
party auditor and ensure that there is no delay in overall schedule.
8.3.2.7. The Agency shall verify the accuracy and completeness of the information captured by the
Service Levels monitoring system implemented by the Contractor.
8.3.2.8. The aforesaid auditing activity must be taken up by the contractor without any additional
financial obligation to AAI.
8.3.3.Deliverable(s):
a. Defect Reports
b. Post Go‐Live:
38 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
39 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
9.15. The Contractor shall be released from the project once successful transition is completed by meeting the
parameters defined for successful transition
9.16. In case the Contractor fails to observe any of the above points, the Contractor shall not be released and all
the pending payments shall be put on hold till the successful completion of the exit management to the
satisfaction of the AAI.
9.17. Key artefacts (not limited to) required to be prepared for the purpose of exit include:
9.17.1. Software Documentation
Design Documents
Software Requirement Specifications
Requirements Traceability Matrix
Source Code
Approved Versions
User Manual
Search Tool Manual
Test Plan & Cases
DC / DR Documentation
9.17.2. Asset (DC / DR), if any
Asset Register
S/w End‐of‐Life Details (s/w: for COTS)
S/w End‐of‐Shelf Details (s/w: for COTS)
S/w Licenses details (in case of COTS & Enterprise tools)
9.18. Operations Documentation
Updated Runbook if any
Incidents list with RCA
Computer Based Training Manual
SLA compliance reports
Training Presentation
ToT‐ Training Manual
User Training Manual
9.18.1. Project Governance Documentation
Pending Action Items List
Activities, Dates, Responsibility
40 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Annexure ‐ B
Scope of Work – Manpower experience & qualification
41 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Functional Minimum BE/B.Tech degree in • Develop and execute functional test plans and test
Tester Computer Science/IT or cases.
Functional • Proficiency in test automation frameworks and tools
equivalent field.
Tester (e.g., Selenium, Testing, JUnit).
• Knowledge of SQL for database testing and data
experienc
validation.
e
• Basic scripting skills in languages such as Python or
3 years
JavaScript for creating automated test scripts.
• Understanding of API testing tools like Postman or
SoapUI.
• Familiarity with mobile testing tools and frameworks
(e.g., Appium).
• Familiarity in working with Agile/Scrum
methodologies.
UX/UI Expert Minimum BE/B.Tech degree in • Proficient skills in design software like Adobe
Computer Science/IT or Photoshop/ wireframe tools (e.g., Adobe XD)
UX/UI Expert • Proficiency in HTML, CSS, and JavaScript for rapid
equivalent field
experienc prototyping, working knowledge of front‐end
e OR development technologies.
4 years • UI/UX Designer with experience in designing
BS/MS in Human‐ Computer
websites for public sector undertakings (PSUs)
Interaction, Interaction
(Good to have).
Design or equivalent field • Design intuitive and user‐friendly interfaces for web
OR and mobile.
• *Strong portfolio, excellent design skills in design
Certifications in UI/UX design tools like Adobe XD, Sketch, or Figma.
(optional) • Familiarity in working with Agile/Scrum
methodologies.
Content Min 2 years Graduate with proficiency • Good Knowledge of English and Hindi Language
Uploader in Computer Application Experience in data entry operations/Content
editing.
The role involves uploading, managing, and
organizing content to ensure accuracy and
compliance with standards.
Upload and update content on the website.
Ensure content accuracy, formatting, and
compliance with guidelines.
Maintain content organization and manage
content schedules.
Experience in content management and
uploading.
42 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Annexure ‐ C
Scope of Work – Guiding Principles for on Premise Deployment
2. Stateless vs Stateful
2.1. While designing the application, contractor should make sure that the application built are stateless
application. While contractor should ensure that only stateless application are present but if there is a need
to have a stateful component for storing of session details the state should be stored in a NoSQL/SQL/In‐
Memory database.
2.2. The storing of state on HTTP cookies should be prevented as HTTP cookies can be tampered with at the
client side and these are required to be transmitted with every request which can increase the size of
the payload and result in unnecessary latency. For storing large state components other shared storage
layer should be used.
2.3. If at all, there is a requirement for client devices to be connected to a single compute (the design should
prevent this), sticky sessions,” session affinity” should be utilized at the load balancer level.
43 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
4. Microservices Architecture
4.1. Contractor is recommended to follow the microservices and serverless underlying Architecture in
development of AAI Website 2.0 and Mobile APP.
4.2. Micro services architecture is an architecture style that structures an application as a collection of loosely
coupled services which enables continuous delivery/deployment of large complex application.IT should be
designed to reduce interdependencies so that failure in one component of the system should not affect
other components and each and every component should be independently deployable in case of change
without deploying the entire application.
4.3. Use of technology agnostic services like REST/ GraphQL for the communication between various
components.
4.4. IP addresses should not be hardcoded and should be discovered using a service discovery service.
4.5. Wherever it is deemed fit use of asynchronous integration services.
4.6. The component failure should be handled in a graceful way
the environment and ensuring that the data for which backup is not required is either purged or archived
depending upon criticality of data. Contractor should ensure Backup Software deployed on VMs managed
by Contractor that services are backed up.
5.4. It is important to have a DR site where the services can failover in case of a disaster and business can
continue. Keeping in mind that the application is to be built which has to be future ready and at the same
time should ensure that at time of disaster all the services fail over within RTOs and RPOs defined.
Contractor should make sure that storage replication is taken care by Software Deployed on VM managed
by Contractor. For the compute, depending on the RTO, criticality and architecture instances should be sized
on the DR site.
6. Database
6.1. Sensitive data should be in encrypted form in database.
6.2. Contractor should also do a detailed study and advice on the type of databases to be used for each
component (SQL or NoSQL). Each of the database has a specific use case and accordingly each might be
utilized. The database instances can be provisioned as a Database as a Service. In case of SQL, it should be
provisioned preferably in two separate zones/fault domains/update domains/PODS with synchronous
replication to ensure that in case of failure of even a zone/fault domain/update domains/PODS, there is no
Data loss and service can be provisioned instantly from the other zones/fault domains/PODS.
6.3. For SQL (Relational) databases, Contractor should also design the data model of the application with
partitioning where the logical data elements should breakup into multiple entities to have more availability,
performance and maintainability.
6.4. Contractor should ensure Database sync Software deployed on VMs managed by Contractor that services
are synched properly.
6.5. The solution should be database independent and should allow deployment on multiple databases. The
solution should allow integration with other heterogeneous databases irrespective of the choice of
database.
7. High Availability
7.1. As the complete solution, Contract shall provision following environments for hosting– Production,
Staging, Development and UAT at both DC & DR. Production at DC & DR shall be sized at 100% as per
requirement of the project and are required to be highly available in active‐active mode.
7.2. Staging environment shall be sized at 70% as per requirement of the project and are required to be highly
available in active‐active mode.
7.3. All UAT instances should be sized at 40% of the production instance and should be in High availability. All
Development instance should be sized at 20% of the Production instance size and are not required to be
in High Availability.
7.4. Staging environment shall be used as Non‐Functional Test Environment for Stress and Performance testing.
Post Go‐Live, the Production environment must not be used for testing and training purpose.
7.5. For sizing of DR, Contractor should ensure that the DR should be available at time of disaster at DC within
defined RTOs and RPOs. In case of failover to DR site (once disaster is declared) within the defined RTO,
the SLA would not be applicable for RTO period only. Post the RTO period, SLA would start to apply and
should be measured accordingly.
7.6. The solution should be resilient in nature with high availability, disaster recovery and backup & restore
capabilities.
7.7. The speed and efficiency of the solution should not be affected with growing volumes, especially during
search operations, reporting, MIS, online processes and batch processes.
45 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Annexure ‐ D
Scope of Work‐ Features of AAI Website 1.0
Table of Content
Table of Content......................................................................................................................................... 46
1) Corporate Website ............................................................................................................................. 47
1.1) Guest House ............................................................................................................................... 48
1.2) Chairman Corner ........................................................................................................................ 50
1.3) Lost & Found Portal ................................................................................................................... 51
2) Aeronautical Information Management India .................................................................................. 51
3) Retired Employee Portal .................................................................................................................... 52
4) Land Requisition................................................................................................................................. 53
5) Flight Training Organisation No Objection Certificate...................................................................... 54
6) IAP Forum ........................................................................................................................................... 54
7) Civil Aviation Research Organization (CARO) ................................................................................... 55
8) Civil Aviation Training Centre Prayagraj............................................................................................ 56
9) Fire Service Training Centre, Kolkata ................................................................................................ 56
10) Fire Training Centre New Delhi...................................................................................................... 57
11) Kalyanmayee Portal ....................................................................................................................... 59
12) Vigilance Complaint Management System Portal ........................................................................ 59
46 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
1) Corporate Website
Majorly Corporate AAI website features and contents are covered under three sections, namely Corporate section,
Employee section and Airports section.
a) Corporate section:
Menu and submenu items ‐ All information about the entity and their respective departments, useful for the
citizens and other stakeholders, present in the menu and submenu and mechanism is in place to keep the
information up to date. This also includes the history of the AAI, its structure and other basic details.
Corporate Banner ‐ It's a bilingual banner which is used to flash the very important messages to the first fold
of AAI Web Portal through the banner and it's having linked pdf file.
AAI important notice ‐ It's the publicly visible section where we can publish the important information and also
pin the particular information. The concerned title may have linked pdf file or external URL.
AAI latest tender – Latest tender shows in this section and it's also linked to main tender search page. The
particular tender can be pinned in "Latest Tender" block.
Photo gallery ‐ It's a corporate photo gallery which are organised in event wise.
Social media feeds ‐ Latest YouTube videos, latest Twitter feeds and latest Instagram photos/videos are
provisioned for this section. For more feeds the individual visits concerned application.
Quick link bar – Most of the major and important section is incorporated in Quick Links section like Lost &
Found, RCS Udan, Career, AIM India, Retired Employee Portal, etc. Its purpose is to easily access to major and
important section of the portal.
Important link ‐ It's also having important links to navigate quickly but not a major part of the website.
AAI Media ‐ All the PR related content like Press Release, AIBM, Photo Gallery, Electronic and Print media
coverage are published here.
Training Corner ‐ It's a training corner of AAI Web Portal from where we can navigate to training institutes or
get information about particular training institute.
Scroll bar ‐ It's the very important section on the top of the portal where we can publish the important
information for a particular time period. The concerned title may have linked pdf file or external URL. We can
scroll the message URL wise also.
Footer bar ‐ It's having some generic links like contact us, RTI, Official Language, FAQs, T&C, Privacy Policy, etc.
Quick navigation bar ‐ The following links are available in quick link bar such as Careers, Media, Medical, AIM‐
India, AirSewa, Lost & Found, OPAAS, PromoteAAI, CPP Portal, BDP, Nocas, Cargo, RCS UDAN, Retired Emp
Portal, MoCA Website.
Careers
Current Vacancies
Display recruitment results
On‐line recruitment
b) Airport Section:
Home: Serves as a landing page for the respective airport. Also contains links to the airport facilities like ATMs,
Eat and Dine, Accommodation, and so on.
Airport Information:
About Airport
Domestic and international Terminals
The Management Team, Our Organization, Values & Beliefs, Quality, Environment, CSR, Business Awards etc.
Media including News & Events, Fact Sheet, Photo Gallery and Milestones
Flight Schedule: Displays a detailed schedule for all the flights departing from, or destined to, the respective
airport.
Passenger Info: All information relevant to facilitation of passengers, like parking, medical facilities, baggage
facilities, Free Wi‐Fi, Mobile Charging Point, Smoker Lounge, Vending Machines, Prayer Room Parents Room,
47 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Currency Exchange facilities, Business & VIP facilities, Disability Access and facilities for Disabled Access
Information etc. are listed here.
Transport: Contains info regarding the transport facilities available at the airport thereby enabling last mile
connectivity such as Parking, Car Rental, Bus, Train, Passenger pickup Area (Bus/Car) etc.
City Info: All info related to tourism can be found here such as Cruise, theme parks, Religious/heritage sites,
tours, Zoos etc.
Security Info: This tab consists of security related information like various do’s and don’ts, prohibited items,
lost and found baggage, Unattended Items, Emergency Contacts including Embassies information, Emergency
Numbers and other info relevant to the subject.
AAI Airports: This tab contains links to all AAI owned airports.
Navigation Pane: Every page on the respective airport website contains a quick navigation pane which provides
links to the facilities available at the airport.
Footer: Contains useful links like Lost & Found items, Airsewa grievances, PGO details, FAQs, Cargo, Contact
details, Map and so on.
Cargo Handling Facilities including Clearance Procedure, Schedule of Charges etc.
Any other statutory or general information helpful to the passengers.
c) Employee Section:
Circulars & Orders ‐ The employee can see related information like circulars, policy, reports, manuals, etc.
Events ‐ The documents/images of events organized by AAI are updated here.
Awards ‐ The awards received by AAI employees can be seen here.
Employee Search ‐ To search employee and creator/publisher by department, region, airport, etc.
Tender ‐ It's used to create new tender and contract award.
Others ‐ This menu contains Employee Responsibilities, Gender Equalities, National Register and New Features.
Help ‐ It contains text and video manuals helps in uploading and updating files.
Banner ‐ It's a bilingual banner which is used to flash the very important messages to the first fold of AAI Web
Portal through the banner and it's having linked pdf file.
Photo Gallery ‐ It's a photo gallery which is organized in event wise for AAI Employees.
Announcements ‐ It contains important announcements/messages can be seen or downloaded through the
link.
Important Link ‐ It's also having important links to navigate quickly on the linked page or other website i.e. IAP
discussion forum, Guest House Booking, AAI Ideation, AAI Blog, AAI Holiday calendar, IAA Training nomination
form.
Scroll bar ‐ It's the very important section on the top of the portal where we can publish the important
information for a particular time period. The concerned title may have linked pdf file or external URL.
Quick Navigation bar – The following links are available in quick link bar such as Media, Medical, AAI‐Mail,
Parivartan, Eoffice, Biometric Attendance, CPP Portal, GeM, AIM‐ India, AAI Survey, Safar, AAI Ideation, Gagan,
IAP Forum Discussion, RCDU.
Reminder Section‐ Employee may configure reminder in future date.
Role based access has been provided for following features‐ Airport Master plan, Airport Infrastructure details,
RESA maintenance, RCDU ,etc.
Survey forms may be created as per need of User Directorate.
Ideation – employees can publish their ideas and other employees can comment on the same.
48 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
AAI Employees: These users can book guest house subject to availability.
Guest House Admin: This user will be responsible to manage all guest house related details i.e. Rooms
available, Location details, Facilities available, etc. This will be an AAI Employee.
Guest House Supervisor: This user will be able to see bookings for the guest house.
Guest house admin is responsible to manage all guest house related details i.e. Rooms available, Location details,
Facilities available, etc.
Book Guest House: The admin can book a guest house for self and others. Quota Booking Guest house admin
can book a room on behalf of other employee/dependent, in that case room/s will be booked from Quota
Rooms. If rooms are not available, then system gives error accordingly.
List of Guest House: Admin will see a list of all guest houses assigned to handle after clicking ‘List of Guest
House’.
Room Occupancy History: Admin can check the room reservation as per the guest houses assigned.
Admin can view the guest house room occupancy history month wise.
Manage the guest house for room availability, advance booking time, adults/children limit etc.
49 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Admin can cancel the booking if found anything wrong or as per requested by the guest house supervisor.
Admin can do the early checkout if guests leave the room before checkout time.
Booking History:
Request to the guest house admin for a booking cancellation if found anything wrong.
Check all the bookings done by AAI employees under this section.
Extent the room booking during the guests stays as requested by them.
Do the early checkout if guests leave the room before checkout time.
URL: https://www.aai.aero/
Login with the registered username and password (Only internal employees of AAI can Login)
50 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
User Roles:
1. Employee Dashboard
2. Chairman Office Dashboard
3. Department Dashboard
The Lost and Found portal of the Airports Authority of India (AAI) is designed to assist the passengers who have
misplaced personal belongings within airport premises, service aims to enhance passenger experience by ensuring
that lost items are efficiently managed and returned to their owners whenever possible.
In the Lost and Found Section the passenger who has lost an item logs into the AAI website.
3. Claim Process
Claim Received: It shows the list of claims initiated by the user. Admin verifies the item and description provided
by the user. In case of match, Admin sends verification link.
Claim Link Sent: Verification link sent to user.
Claim Docs Received: Admin can view documents uploaded by user via verification link. Admin can review the
documents.
Claim Docs Partially Accepted: User re‐uploads required documents.
Claim Docs Accepted: Admin approves documents.
Item marked as “Settlement in Process.”
Claimant Didn't Turn Up: Status updates if user doesn't claim item in time.
Claim Settled: Admin settles claim, item removed from catalogue.
Declined: Admin declines claim with reason.
Fill Form: Fill the required information of the contact person. One contact details per airport.
51 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Retired employee portal (REP) of AAI is a web portal to facilitate medical reimbursement online claimed by
retired/separated employee of AAI.
52 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
4) Land Requisition
URL: https://landmngt.aai.aero/
The AAI Land Requisition Portal provides a structured and streamlined process for users and managers to handle
land requisitions and lease renewals.
Types of Roles:
Users can register, apply for land, track application status, and respond to clarifications.
Managers have a dashboard to oversee applications, request clarifications, and make decisions on acceptance
or rejection of applications.
Users can register and login to the portal to access various features.
Menu and Submenu items: Information about land requisitions for citizens and stakeholders.
Banner: Banner is displayed on the home page for general announcements or information.
Fresh Applications:
My Information: Users can view and manage their profile information.
Apply for Land: Users can submit new land requisition applications.
Draft Applications: Users can track, modify, or delete draft applications.
Submitted Application: Users can view all their submitted applications.
Clarification Submission: Users can respond to clarification request from managers.
Application Status: Users can track the status of their applications.
Renewal Applications:
Manager Dashboard:
My Information: Managers can view and manage their profile information.
Received Application: Managers can track details of all received applications and update their status.
Seek Clarification: Managers can request additional information or clarification from users.
Under Review: Managers can view applications under review and either accept or reject them.
Accepted/Rejected Application: Managers can track all accepted or rejected applications.
53 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Accepted/Rejected Lease Renewal: Managers can track all accepted or rejected lease renewal applications.
Flight Training Organisation No Objection Certificate Application System is an initiative to streamline and expedite
process of obtaining No Objection Certificate (NOC) from Air Traffic Management Point of View from Airports
Authority of India.
6) IAP Forum
Url : https://iapforum.aai.aero/
The IAP Forum is a platform utilized by Airports Authority of India members to create groups, add members, share
content, and contribute comments in various sections.
54 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Discussion List: Users can view a list of discussions. The list includes: Discussion Title, Last Updated On.
User Account Management: Users can access their account details via "My Account."
IAP Community @AAI: Admin can view, create and edit community information.
Group Management:
Civil Aviation Research Organization (CARO) is a collaborative research platform catering to R&D requirements
projected by both Air Navigation Services (ANS) and Airport/engineering fields under one roof.
Menu and Submenu Items: Contains comprehensive information about CARO Hyderabad.
Banner Description: A corporate banner used for displaying very important messages prominently on the
homepage.
Useful Links: Quick navigation links to essential pages/Websites.
Dashboard: It shows the number of Total Applications, Pending Applications, Accepted Applications, Declined
Applications.
55 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Pending Applications: It shows the list of applications awaiting action (reject or accept).
Accepted Applications: It shows the list of accepted applications. The user can export the list in excel and pdf
format.
Visa Invitations: It shows the list and visa details of those applicants who have applied for visa.
Declined Applications: It shows the list of those applications which are rejected by the admin. The user can
export the list in excel sheet and pdf format.
Archived Applications: List of applications where the event has expired.
The CATC, Prayagraj subdomain includes detailed menus, an attention‐grabbing banner, regularly updated news
and announcements, an organized photo gallery, and quick access to important links.
Menu and Submenu Items: Contains comprehensive information about CATC Prayagraj. Details about various
courses available at CATC, Prayagraj.
Banner Description: A corporate banner used for displaying very important messages prominently on the
homepage.
News and Announcements: Section for important announcements and news updates. Viewable and
downloadable content
Photo Gallery: A visual representation of events organized by CATC. Event‐wise categorization for easy
navigation.
Important Links: Quick navigation links to essential pages.
Footer: It contains following features: Image Gallery, Contact Us, Disclaimer, Terms and Conditions
User Registration:
Private:
Fill personal details such as Name, Gender, Email, Address, Mobile, Aadhar Upload, Math question.
Validate details (email format, Aadhaar, mobile).
Email confirmation and verification link sent, One‐time login to set password.
Password setup with security requirements and Account creation confirmation.
Organization:
56 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Fill official details such as Email, Nodal Officer Name/Designation, Department, Organization, Location,
Management Level, Address, Mobile, Email, Authorization Letter Upload (up to 20 MB), Math question.
Validate details (email format, Aadhaar, mobile). Email confirmation and verification link sent.
One‐time login to set password. Password setup with security requirements. Account creation confirmation.
Personal Profile: Displays and allows editing of‐ User name, Gender, Mobile number,
Join Course: Here, user can apply for active training course.
Submitted Application: View submitted applications.
Application Process and Selection Criteria: Content for SOP for Online Application Process for Admission
in BTC Course for Private Candidates
Download Form Format: Download different forms such as: Indemnity Bond (PDF), Physical Standard
Form (PDF)
Nodal Officer Profile: Displays and allows editing of: Name, Organization, Designation, Department, Mobile
Number
Apply for Course Options: Here, user can apply for active training course.
Submitted Application: View submitted applications.
Application Process & Selection Criteria: Details for BTC Course admission.
Download Form Format: Download various forms such as Indemnity Bond (PDF), Medical Fitness Certificate
(PDF)
Login as Admin
Course Setting: View and edit National, International, ICMS courses and dates
Application Received: View active course applications
Download Report: View reports for 7 days’ post‐course completion
Archive Application: Archive applications after 7 days
User Registration:
57 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
Private:
Fill personal details such as Name, Gender, Email, Address, Mobile, Aadhar Upload, Math question.
Validate details (email format, Aadhaar, mobile).
Email confirmation and verification link sent, One‐time login to set password.
Password setup with security requirements and Account creation confirmation.
Organization:
Fill official details such as Email, Nodal Officer Name/Designation, Department, Organization, Location,
Management Level, Address, Mobile, Email, Authorization Letter Upload (up to 20 MB), Math question.
Validate details (email format, Aadhaar, mobile). Email confirmation and verification link sent.
One‐time login to set password. Password setup with security requirements. Account creation confirmation.
Personal Profile: Displays and allows editing of‐ User name, Gender, Mobile number,
Join Course: Here, user can apply for active training course.
Submitted Application: View submitted applications.
Application Process and Selection Criteria: Content for SOP for Online Application Process for Admission in BTC
Course for Private Candidates
Download Form Format: Download different forms such as: Indemnity Bond (PDF), Physical Standard Form
(PDF)
Login as Organization
Nodal Officer Profile: Displays and allows editing of: Name, Organization, Designation, Department, Mobile
Number
Apply for Course Options: Here, user can apply for active training course.
Submitted Application: View submitted applications.
Application Process & Selection Criteria: Details for BTC Course admission.
Download Form Format: Download various forms such as Indemnity Bond (PDF), Medical Fitness Certificate
(PDF)
Login as Admin
• Course Setting: View and edit National, International, ICMS courses and dates
• Application Received: View active course applications
• Download Report: View reports for 7 days’ post‐course completion
• Archive Application: Archive applications after 7 days
The portal for Kalyanmayee, the Airports Authority of India Women Welfare Association. The site likely includes
information on various welfare activities, initiatives, events, and resources aimed at supporting women and their
families in the AAI community.
• Home: Brief Information about Kalyanmayee: Banner, Photo Gallery, Our Network (Region‐wise details of
Kalyanmayee committee’s activities and the projects they’ve undertaken)
• About Us: Information about the Kalyanmayee portal, as it is a CSR (Corporate Social Responsibility) portal of
the Airports Authority of India. This section includes: details of Management, details of Committees, Vision.
• Projects: Details about various case stories of Kalyanmayee’ s CSR initiatives.
• Events: Images and descriptions of various events organized by Kalyanmayee, such as Women's Day
celebrations.
• Media: This shows a list of CSR activities. This section includes:
• A list of activities sorted by serial number and title.
• Download options for PDF files containing images of CSR activities.
• Pagination to navigate through the list of activities.
• News: A section that displays a list of activities in serial order with titles and download options, including
pagination for easy navigation.
This platform is for lodging vigilance complaints under the jurisdiction of the Chief Vigilance Officer (CVO) of AAI.
a) Citizen Login
1) New User Registration
Click on “Register new account”.
Fill out the registration form.
59 | P a g e 6 0
Name of Work: Development of new AAI Website and Mobile APPs
Document Title: Scope of Work
b) CVO Login
Upload Complaint
Complaint Handling Policy : It includes the compliant handling policies procedures to manage and resolve
complaints.
Alternatively, click on "My Dashboard" located just before the "User Manual" button.
View Dashboard: The dashboard displays the number of complaints categorized as Received, In‐Process,
Downloaded, and Closed.
60 | P a g e 6 0