A modern, secure, and scalable digital platform delivering a unified Customer Portal,
Mobile Web App, and Internal User Portal for ARMS Ltd. — powered by SKIOS enterprise
engineering and VERACLOUD cloud infrastructure.
380k
Customer Accounts
250+
Internal Users
5yr
Support & Maintenance
99.9%
Availability Target
Scroll to explore
Overview
Executive Summary
A comprehensive proposal for the modernisation of ARMS Ltd.'s digital ecosystem —
transforming customer interactions, billing operations, and internal workflows into a
unified, AI-ready platform.
SKIOS, in partnership with VERACLOUD, proposes the end-to-end
design, development, and deployment of a modern Digital Customer & Internal User Portal for
ARMS Ltd. This platform will replace the current portal with a comprehensive digital ecosystem
comprising a responsive Customer Portal (web), a Progressive Web App (PWA) for mobile, and a
full-featured Internal User Portal for agents and back-office teams.
The platform will serve 380,000 customer accounts (residential
and commercial), up to 250 internal back-office users, and
50 meter readers, delivering end-to-end digitisation of
customer services including billing, payments, meter readings, applications, and service requests.
It integrates deeply with SAP (billing, contracts, master data),
AMM/MDM (smart metering), the
Government Payment Gateway,
Zendesk (ticketing), and
Nintex K2 (workflow/forms).
Our solution is built on API-first, microservice-ready architecture with event-driven workflows.
Security is embedded by design — OAuth2/OIDC authentication, multi-factor authentication (MFA),
role-based access control (RBAC), comprehensive audit logging, and full GDPR compliance. The platform
is AI-ready from day one, with chatbot integration and a clear architectural path to AI agent
orchestration for automated customer service.
SKIOS and VERACLOUD bring the combined strength of Malta's leading enterprise software
developer and the nation's Microsoft Partner of the Year
for cloud security. Together, we deliver a solution that is technically superior, operationally
robust, and backed by the highest level of Microsoft cloud security credentials available in Malta
— built for the next decade of ARMS Ltd.'s digital evolution.
Key Deliverables
Customer-Facing Portal
Responsive web application with full feature parity across desktop and tablet. Self-service billing, payments, meter readings, applications, and real-time notifications.
Mobile Web App (PWA)
Installable Progressive Web App with push notifications, offline-aware patterns, mobile-optimised navigation, and full feature parity with the desktop portal.
Internal User Portal
Comprehensive back-office workspace for agents, billing processors, supervisors, and field technicians — with embedded ticketing, workflow management, and customer 360-degree views.
Enterprise Integrations
Deep integration with SAP, AMM/MDM, Government Payment Gateway, Zendesk, Nintex K2, and Email/SMS gateways through a unified API layer.
Training & Change Management
Comprehensive training programme for 20 internal users, end-user guides, video tutorials, and a structured change management plan for the customer rollout.
5-Year Maintenance & Support
Post go-live maintenance agreement with defined SLAs, incident response procedures, proactive monitoring, and continuous improvement roadmap.
Our Unique Position
Why SKIOS & VERACLOUD
The only consortium in the Maltese market combining enterprise-grade software development,
AI-ready architecture, and Microsoft Partner of the Year cloud security — purpose-built
for a utility platform of national importance.
1. Proven Enterprise Delivery at Scale
SKIOS has delivered mission-critical platforms for Malta's most demanding institutions —
including the Housing Authority (€500,000+),
Malta Tourism Authority (€467,999),
the Mediterranean Conference Centre AR/VR platform
(€600,450), and OHSA (€119,000).
We understand government and regulated-industry procurement requirements, GDPR compliance,
and the operational realities of Maltese public-sector technology projects.
Our deep experience in building platforms that handle hundreds of thousands of users,
complex role-based access hierarchies, and multi-system integrations makes us uniquely qualified
for the ARMS portal project. We have built and operated systems processing over
€100 million in government voucher transactions
(Astimulus platform), demonstrating our capability to handle mission-critical financial workflows at scale.
2. VERACLOUD — Malta's #1 Microsoft Cloud Security Partner
VERACLOUD holds the Microsoft Partner of the Year
designation — the highest recognition for cloud security and infrastructure excellence in Malta.
For a utility platform serving 380,000 customer accounts with sensitive billing data, meter readings,
and payment information, enterprise-grade security is not optional. VERACLOUD provides Azure cloud
architecture, managed security services, 24/7 monitoring, identity and access management, and
compliance assurance — ensuring the ARMS portal meets the highest standards of data protection,
availability, and regulatory compliance including GDPR and MITA Azure Stack compatibility.
Azure Production Track Record
VERACLOUD currently manages large-scale, security-sensitive Azure environments
for numerous government agencies and private-sector enterprises in Malta. These are not development environments
— they are production-critical workloads handling sensitive citizen data,
financial transactions, and regulated operations. This includes Azure AD identity management, Azure Security Centre
monitoring, Azure DevOps CI/CD pipelines, and MITA Azure Stack deployments. The ARMS portal will benefit from the
same enterprise-grade infrastructure management, security posture, and operational maturity that protects Malta's
most sensitive government and financial systems today.
Enterprise Software & AI
SKIOS
Enterprise software development, systems integration, and AI services for regulated industries.
Lead development partner for portal frontend, backend, API layer, and all system integrations.
Creator of AI-powered enterprise platforms with proven public-sector delivery.
Cloud, Security & Infrastructure
VERACLOUD
Microsoft Partner of the Year. Azure cloud architecture, managed security operations,
identity management (OIDC/MFA), 24/7 monitoring, disaster recovery, and MITA Azure
Stack deployment expertise. Infrastructure backbone for the entire platform.
3. AI-Ready from Day One
Our team includes specialists with 5+ years of enterprise AI leadership
at organisations like Tipico, alongside PhD-level AI researchers at the University of Malta.
We do not treat AI as a bolt-on feature — we architect platforms with AI integration points
from the foundation. For ARMS, this means a chatbot integration that understands billing queries
in both English and Maltese, predictive consumption analytics using smart meter data, automated
anomaly detection for high-usage alerts, and a clear path to full AI agent orchestration that
can handle routine customer requests autonomously with human-in-the-loop escalation.
4. Utility Sector Understanding
We understand the specific operational realities of utility companies — SAP-centric billing
ecosystems, smart metering infrastructure, government payment gateway regulations, omnichannel
customer communication requirements, and the critical importance of service continuity.
Our team includes Malcolm Micallef as specialist consultant,
who has worked directly with ARMS on SAP and MDM projects,
bringing first-hand knowledge of ARMS's data landscape and operational processes.
Combined with Roderick Bartolo's own ARMS and SAP familiarity, our team has unmatched
direct experience with the systems this portal must integrate with, alongside financial reconciliation systems and
high-availability platforms that serve entire national populations. The ARMS portal will
be classified as a system of national importance
— and our consortium is built for exactly that level of responsibility.
Technology-Specific Experience
Every integration technology required by this CfQ is one we already use in production.
This is not aspirational — these are capabilities we deliver today across government and enterprise clients.
SAP (BAPI / RFC / MDM)
Roderick Bartolo and consultant Malcolm Micallef both have direct hands-on experience with the ARMS SAP landscape, billing documents, BAPIs, and master data management. Two senior team members who already know the system.
Nintex K2 Workflows
SKIOS is the contracted Nintex support provider for multiple Malta Government agencies. Deep production expertise with K2 workflow design, SmartForms, and API integration.
Microsoft Azure
VERACLOUD manages large-scale, security-sensitive Azure environments for government agencies and private enterprises. Production-critical workloads with Azure AD, Security Centre, and MITA Azure Stack.
Government Payment Gateway
Multiple integrations across enterprise clients. Astimulus platform processed €100M+ in government transactions with complex reconciliation and retry logic.
Zendesk
Delivered Zendesk integrations for multiple enterprise clients: bidirectional ticket sync, embedded agent workspaces, automated ticket creation, and custom field mapping.
Messaging & Notifications
Built omnichannel notification systems across enterprise customers: SMTP, SMS providers, push notifications, event-driven delivery, bilingual templates, and millions of transactional messages.
No other consortium in the Maltese market can offer the combination of €1.5M+ in public-sector
enterprise delivery, Microsoft Partner of the Year cloud security, production AI capabilities,
and direct hands-on experience with every single integration technology
required by this CfQ — SAP, Nintex K2, Azure, Government Payment Gateway, Zendesk, and
omnichannel messaging. SKIOS and VERACLOUD offer ARMS the lowest-risk, fastest path to a proven,
secure, AI-ready customer platform — built by the team that already knows these systems.
Requirements
Understanding of Requirements
Our comprehensive analysis of ARMS Ltd.'s current operational challenges, desired outcomes,
and the opportunity to transform the customer experience.
Current Challenges
Fragmented Customer Experience
Customers currently navigate between multiple touchpoints for billing, readings, and service requests. The existing portal lacks the unified, self-service experience that modern utility customers expect.
Limited Mobile Access
No dedicated mobile experience means 380,000 customers cannot conveniently manage their accounts on smartphones — the primary device for most users.
Manual Internal Processes
Back-office teams manage customer interactions across disconnected tools, leading to slower resolution times, inconsistent data, and limited visibility into service request statuses.
Reactive Communication
Customer communication is primarily reactive rather than proactive. Outage notifications, billing reminders, and meter reading requests lack the omnichannel delivery customers need.
Integration Complexity
Multiple backend systems (SAP, AMM/MDM, Zendesk, Nintex K2, Payment Gateway) operate as silos, requiring manual data transfer and reconciliation between platforms.
Scalability Constraints
The current infrastructure cannot efficiently scale to support 10,000+ concurrent sessions, real-time meter data visualisation, and the growing expectation for self-service capabilities.
Stakeholders & Actors
Actor
Description
Portal Access
Residential Customers
Private household account holders managing water and electricity services
Customer Portal & PWA
Commercial / Industrial
Business account holders with potentially multiple contracts and meters
Customer Portal & PWA
Delegated Users
Accountants, property managers, landlords, and authorised representatives managing multiple accounts on behalf of others
Customer Portal & PWA
Landlords / Multi-Property
Property owners with multiple contracts across different addresses requiring unified portfolio management
Customer Portal & PWA
Contact Centre Agents
Frontline support handling tickets and simple customer requests
Internal User Portal
Back-Office Processors
Billing, credit control, and technical teams processing workflows
Internal User Portal
Supervisors
Team leads responsible for oversight, escalation, and SLA management
Internal User Portal
Field Technicians
Meter readers and service technicians with read-only portal access
Internal User Portal (read-only)
System Administrators
IT team managing portal configuration, CMS, and user permissions
Admin Panel
Solution
Platform Architecture & Vision
A modern, API-first platform built on microservice-ready architecture with event-driven workflows,
designed for omnichannel delivery, horizontal scalability, and AI-readiness.
Experience Principles
Mobile-first UX with desktop parity; accessibility WCAG 2.2 AA throughout
Task-oriented navigation and clear feedback throughout all customer and agent flows
Contextual help, guided forms, and chatbot assistance at every interaction point
Consistency across Customer Portal and Mobile Web App with adaptive, responsive layouts
Bilingual support (English / Maltese) with content versioning and approval workflows
Performance-first: First Contentful Paint under 2 seconds on 4G mobile networks
Architectural Principles
API-First Design
All platform capabilities exposed through a well-documented RESTful API layer. Modular services organised by domain boundaries: billing, contracts, meters, requests, notifications. Every frontend (web, PWA, future native app) consumes the same API.
Event-Driven Architecture
Asynchronous event bus for notification triggers, workflow state changes, and system integration events. Enables real-time updates across all channels without tight coupling between services.
Zero Trust Security
Security by design with least-privilege access, comprehensive audit logging, encrypted data at rest and in transit, and continuous vulnerability monitoring by VERACLOUD's security operations centre.
Observability by Default
Structured logging with correlation IDs, distributed tracing, metrics collection, and automated alerting. Full visibility into system health, performance, and user behaviour from day one.
Cloud-Ready Deployment
Containerised services deployable on-premises, private cloud, or MITA Azure Stack. Infrastructure as code for reproducible environments, automated scaling, and zero-downtime deployments.
Headless CMS Integration
Public content (news, tariffs, FAQs, downloads) managed through a headless CMS with content versioning, approval workflows, and bilingual EN/MT support with translation management.
High-Level Architecture
Frontend Layer
Customer Portal Responsive Web
Mobile Web App PWA
Chatbot Widget AI-Powered
Internal Portal Agent Workspace
↓ HTTPS / WebSocket ↓
API & Service Layer
API Gateway Auth, Rate Limit
Billing Service
Meter Service
Request Service
Notification Engine
CMS Service
↓ Integration Layer ↓
Backend Systems
SAP Billing & Contracts
AMM/MDM Smart Metering
Gov Payment Gateway Online Payments
Zendesk Ticketing
Nintex K2 Workflows
Email / SMS Notifications
Recommended Technology Stack
Layer
Technology
Rationale
Frontend
React / Next.js with TypeScript
Server-side rendering for SEO, PWA support, WCAG 2.2 AA accessibility, component-based architecture for consistency across portal and mobile
Backend API
.NET 8 / ASP.NET Core
Enterprise-grade, high-performance API framework with native Azure integration, strong typing, and excellent SAP/Nintex K2 connector ecosystem
Database
Azure SQL / PostgreSQL
Relational database for transactional data with geo-redundant replication, point-in-time recovery, and strong compliance capabilities
Cache
Redis
In-memory caching for session management, meter data aggregation, and API response caching to meet <500ms p95 latency targets
Message Bus
Azure Service Bus / RabbitMQ
Reliable message delivery for event-driven notification triggers, workflow state changes, and async integration events
Identity
Azure AD B2C / Keycloak
OIDC-compliant identity provider supporting eID, MFA, social login, and enterprise IdP federation
CMS
Strapi / Contentful
Headless CMS for bilingual content management with versioning, approval workflows, and API-first delivery
Search
Azure Cognitive Search / Elasticsearch
Full-text search across public content, FAQs, knowledge base articles, and customer account data for internal users
Monitoring
Azure Monitor / Application Insights
Centralised logging, distributed tracing, performance metrics, and automated alerting with VERACLOUD 24/7 SOC integration
CI/CD
Azure DevOps
Automated build, test, and deployment pipelines with quality gates, security scanning, and zero-downtime deployment strategies
Infrastructure
MITA Azure Stack / Azure Cloud
Sovereign data residency, container orchestration (Kubernetes / Azure Container Apps), infrastructure as code (Terraform/Bicep)
Public Area
Unauthenticated Experience
The public-facing website serves as the digital front door for ARMS Ltd., providing
information, self-service tools, and seamless registration pathways.
Homepage & Service Highlights
Dynamic homepage with quick-access service tiles (My Consumption, Quick Pay, Bill Calculator, View Bills, Submit Readings, Applications), outage banners sourced from SAP/MDM, and personalised CTAs for registered vs. new users.
About ARMS & Corporate Pages
CMS-managed pages for company information, mission, team profiles, products & services, and procurement information. Fully bilingual (EN/MT) with content versioning.
Tariff Information
Interactive tariff pages for water and electricity with rate calculators, comparison tools, and downloadable tariff schedules. Automatically updated from SAP master data.
FAQs & Knowledge Base
Searchable FAQ library with categorised topics, related articles, and contextual chatbot integration. Powered by headless CMS with analytics on most-viewed topics.
Registration & Onboarding
Self-registration using National eID or email + identity verification against SAP master data. Progressive profile completion with progress indicators and guided onboarding flow.
Outage & Works Information
Real-time outage map by locality (sourced from SAP/MDM where available), planned maintenance schedules, and automatic SMS/email opt-in for outage notifications in your area.
Search & Navigation
Full-text search across all public content, services, and downloads. Contextual search suggestions, breadcrumb navigation, and accessibility-compliant keyboard navigation.
Downloads & Resources
Document library for forms, manuals, tutorials, legislation references, and downloadable resources. Categorised and searchable with version tracking.
Private Area — Customer
Customer Portal Experience
A comprehensive self-service platform giving customers complete visibility into their
accounts, consumption, billing, and service requests — with real-time data from SAP
and smart meters.
5.1 Customer Dashboard
Contract Selector
Customers with multiple contracts (residential + commercial) can switch between accounts seamlessly. Each contract displays address, meter details, and active status.
Summary Cards
At-a-glance cards showing unpaid bills with total amount, payments due with next due date, latest meter readings for electricity and water, and outstanding balance.
Consumption Trends
Interactive charts showing electricity and water consumption over time (hourly/daily/weekly/monthly). Quick drill-down with benchmark comparisons against locality averages and historical patterns.
Open Requests & Tickets
Active service requests and support tickets with real-time status, SLA progress indicators, last update timestamp, and direct link to ticket details and comments.
Notification Centre
In-portal inbox for bills, payments, ticket updates, outage alerts, and system notices. Granular preference management for email, SMS, and push notification channels.
Smart Insights AI-Powered
AI-generated consumption insights: "Your electricity usage is 23% higher than last month" with actionable recommendations. Anomaly detection alerts for unusual consumption patterns.
5.2 Billing & Payments
Bill Viewer & History
View unpaid, paid, and disputed bills in a chronological list. Each bill shows amount, issue date, due date, payment status, and a link to download the full PDF invoice generated from SAP.
Online Payment
Secure payment via Government Payment Gateway with support for partial or full payment, multiple-bill checkout in a single transaction, and real-time payment confirmation.
Payment History & Export
Complete payment history with filtering by date range, amount, and status. CSV/PDF export for records keeping. Payment receipts downloadable for each transaction.
Dunning & Alerts
Proactive dunning alerts with clear explanations and direct payment links. Automatic email/SMS reminders before due dates and escalation notifications for overdue balances.
Bill Calculator
Interactive tool allowing customers to estimate bills based on consumption inputs, current tariff rates, and seasonal adjustments. Helps customers understand billing structure.
Direct Debit Management
Self-service setup and management of direct debit arrangements. View active mandates, modify bank details, and track scheduled deductions with confirmation notifications.
5.3 Meter Readings & Consumption
Manual Reading Submission
User-friendly form for submitting manual meter readings with photo upload capability, validation against expected ranges, and confirmation with next expected reading date.
Smart Meter Charts
Rich interactive charts sourced from AMM/MDM: hourly, daily, weekly, and monthly views for both electricity (kWh) and water (m³). Toggle between utility types, zoom into periods, and compare against locality benchmarks.
High-Usage & Anomaly Alerts
Automatic alerts when consumption exceeds configurable thresholds or deviates from historical patterns. Real-time push notifications for smart meter customers with recommended actions.
CSV Export & Reporting
Download consumption data in CSV format for personal records or third-party analysis. Configurable date ranges with water/electricity toggles.
Predictive Consumption AI-Powered
Machine learning models predict next month's consumption and estimated bill amount based on historical patterns, weather data, and seasonal trends. Helps customers plan budgets proactively.
Conservation Recommendations AI-Powered
Personalised energy and water conservation tips based on individual consumption patterns. Goal-setting with progress tracking for customers committed to reducing usage.
5.4 Applications & Service Requests
Application Catalogue
All available applications in a categorised grid: Direct Debit, Declaration of Service Not in Use, Instant Up-to-Date Bill, Meter Test/Replacement, Meter Shifting (water), Replacement of Service, Request Meter Reading, and more.
Guided Form Experience
Multi-step guided forms powered by Nintex K2 with contextual help, field validation, document attachment support, and save-as-draft functionality. Progress indicator and estimated completion time.
Real-Time Status Tracking
Visual progress tracker for each application showing current step, SLA indicators, estimated completion date, and responsible team. Automatic Zendesk ticket creation with updates visible to customer.
Document Management
Secure document upload for application supporting evidence. File type validation, virus scanning, and organised document library accessible from the customer profile.
Transfer of Account
Digital workflow for property ownership or tenancy changes. Guided process with document requirements, identity verification, and automatic SAP master data update upon approval.
Smart Application Routing AI-Powered
AI-powered classification of incoming requests to automatically route to the correct department, assign priority levels, and pre-populate forms with known customer data from SAP.
5.5 Communications & Notifications
In-Portal Inbox
Centralised notification centre for all communications: new bills, payment confirmations, ticket updates, outage alerts, meter reading reminders, and system notices. Read/unread tracking with archive.
Email Notifications
Transactional email delivery via SMTP/API for critical events: bill issuance, payment success/failure, ticket status changes, application updates, and dunning notices.
SMS Notifications
SMS delivery via provider API for urgent notifications: outage alerts, high-usage warnings, payment reminders, and security alerts (MFA codes, suspicious login attempts).
Push Notifications (PWA)
Browser push notifications via web push service for real-time alerts on mobile. Granular opt-in preferences at channel and event level with configurable quiet hours.
Preference Management
Customer-controlled notification preferences: choose which events trigger notifications, preferred channels (portal, email, SMS, push), and frequency settings (immediate, daily digest).
Outage Alerts by Locality
Location-aware outage notifications: customers automatically receive alerts for planned maintenance and unplanned outages affecting their registered address. Map-based outage viewer.
5.6 Account Sharing & Multi-Property Management
A dedicated capability layer for landlords, property managers, accountants, and any user who needs
to manage or view multiple accounts. This is a key differentiator
of our proposal — purpose-built for ARMS's mixed customer base of individual homeowners and
multi-property stakeholders who today have no efficient way to manage their portfolio digitally.
Delegated Access Framework New Feature
Account holders can grant access to third parties (accountants, property managers, family members) with granular permission levels: View Only (see bills and readings), Manage (submit readings, raise requests), or Full Access (make payments, modify account). Delegation is invite-based via email with acceptance flow, and can be revoked instantly by the account holder at any time. Every delegated action is logged with the delegate's identity for full audit traceability.
Multi-Property Portfolio Dashboard New Feature
A unified portfolio view for landlords and property managers who oversee multiple contracts across different addresses. A single dashboard shows all properties with at-a-glance status: total outstanding balance, properties with overdue bills, upcoming meter readings due, active service requests, and consumption summaries. Properties can be grouped, labelled (e.g., "Sliema Apartments", "Qormi Commercial"), and filtered by status, locality, or utility type.
Consolidated Billing View New Feature
View all bills across every managed property in a single chronological feed with filtering by property, status (paid/unpaid/overdue), date range, and utility type. Bulk payment capability allows landlords to select multiple bills across different contracts and pay them in a single Government Payment Gateway transaction. Exportable to CSV/PDF for bookkeeping and tax purposes.
Cross-Property Consumption Comparison New Feature
Side-by-side consumption charts comparing electricity and water usage across properties. Identify underperforming or unusually high-consumption properties instantly. Benchmark each property against locality averages to spot potential leaks, meter issues, or tenant misuse. Aggregate consumption and cost totals across the entire portfolio with trend analysis.
Bulk Meter Reading Submission New Feature
Submit meter readings for multiple properties in a single workflow instead of navigating to each account individually. A table-based entry form lists all properties with their last reading, expected range, and input field. Validation runs across all entries before submission. Ideal for property managers visiting multiple units during a single inspection round.
Tenant Change & Transfer Workflows New Feature
Streamlined digital workflow for landlords managing tenant turnover: initiate tenant departure, submit final meter reading, trigger up-to-date bill generation, and begin new tenancy registration — all from the portfolio dashboard. Automatic SAP master data updates upon workflow completion with document attachment support for lease agreements.
Portfolio Notifications & Alerts New Feature
Consolidated notification stream for all managed properties: overdue payment alerts, high-usage anomalies across any property, meter reading reminders, service request updates, and outage notifications for any property address. Configurable digest mode sends a daily/weekly summary instead of individual notifications per property, reducing notification fatigue for large portfolios.
Access Audit & Compliance New Feature
Complete audit trail of all delegated access: who has access to which accounts, what permission level, when access was granted/revoked, and every action taken by delegates. Account holders receive notifications when delegates perform sensitive actions (payments, account modifications). GDPR-compliant with data processing agreements built into the delegation acceptance flow.
Why this matters: ARMS serves a mixed customer base where
a significant portion of accounts are managed by landlords, property management companies, and accountants
rather than individual tenants. Today these users must log in and out of separate accounts or rely on
workarounds. The Account Sharing & Multi-Property Management module transforms this experience,
reducing call centre volume for multi-account queries, accelerating payment collection across portfolios,
and providing ARMS with a competitive digital offering that matches what customers expect from
modern utility providers.
Private Area — Internal
Internal User Portal
A comprehensive back-office workspace empowering agents, processors, supervisors, and field
technicians to manage customer interactions, process workflows, and monitor operational KPIs.
Customer 360° View
Unified customer profile showing contact information, all contracts, meter details, billing summary, outstanding balance, open tickets, notes, communication history, and activity timeline — sourced in real-time from SAP.
Customer Search
Powerful search by name, ID, address, phone, email, or contract number. Typeahead suggestions with quick-access customer cards showing key information at a glance.
Zendesk Ticket Workspace
Embedded or deep-linked Zendesk workspace: full ticket lifecycle management, internal notes, customer communication history, file attachments, priority assignment, and SLA tracking.
Nintex K2 Task Management
Process applications end-to-end with SLA tracking. View assigned K2 tasks, update workflow fields, approve/reject requests, and escalate to supervisors — all within the portal.
Notes, Flags & Internal Comments
Add internal notes to customer records with timestamp and author tracking. Flag accounts for special attention with configurable flag types and notification to relevant teams.
Comprehensive Audit Trail
Full audit log for all user and system actions: customer data changes, bill adjustments, workflow approvals, permission changes, and login events. Searchable and exportable.
Delegated Access Management New Feature
Internal view of all account delegation relationships: see who has access to which accounts, permission levels granted, and activity logs for delegates. Agents can override, suspend, or revoke delegated access on behalf of account holders when requested. Supports dispute resolution when delegation permissions are contested.
Multi-Property Account Overview New Feature
When viewing a landlord or property manager profile, agents see a complete portfolio view: all linked contracts, outstanding balances per property, and aggregate totals. Enables efficient handling of multi-account queries without switching between customer records.
6.1 Internal Roles & Permissions
Role
Description
Key Permissions
Agent
Frontline support handling tickets and simple requests
Real-time dashboards showing ticket volumes, average resolution time, SLA compliance rates, application turnaround, payment success rates, and queue depths by team.
Agent Performance Metrics
Individual and team performance tracking: tickets resolved, average handling time, customer satisfaction scores, and SLA adherence rates with trend analysis.
Revenue & Billing Analytics
Collection rates, outstanding balances by segment, payment method distribution, direct debit adoption, and dunning cycle effectiveness with drill-down capabilities.
Customer Adoption Metrics
Portal registration rates, active user counts, feature usage heatmaps, mobile vs. desktop split, and self-service resolution rates to measure digital adoption success.
Predictive Analytics AI-Powered
Forecast ticket volumes, identify seasonal demand patterns, predict at-risk accounts for proactive outreach, and surface emerging issues before they escalate.
Customer Sentiment Analysis AI-Powered
NLP analysis of customer communications (tickets, chat, feedback) to identify sentiment trends, common pain points, and opportunities for service improvement.
System Integrations
Enterprise Integration Layer
A robust integration framework connecting the portal with ARMS Ltd.'s backend
ecosystem through secure, resilient, and well-monitored API adapters.
7.1 SAP Integration
SAP remains the system of record for contracts, business partners, billing documents, and balances. Our integration provides:
Real-time retrieval of contract details, business partner data, and account balances
Bill PDF retrieval and metadata synchronisation for the customer bill viewer
Payment posting and credit application via SAP BAPI/RFC interfaces
Validation of manual meter readings against expected ranges and business rules
Up-to-date bill generation requests triggered from the customer portal
Master data synchronisation for customer registration verification
Bidirectional data exchange with retry logic, dead-letter queues, and reconciliation dashboards
Our SAP Experience
SKIOS co-founder Roderick Bartolo has years of hands-on SAP experience and is directly familiar with the ARMS SAP landscape, including BAPI interfaces, billing document structures, and master data management. Joining the team as specialist consultant, Malcolm Micallef brings extensive direct experience working with ARMS on SAP integration and data management projects. This is not a learning exercise — we have two senior team members who already understand ARMS's SAP ecosystem, the contract/billing data model, and the specific integration patterns required to connect a modern portal to SAP reliably. This first-hand familiarity eliminates the discovery overhead and integration risk that other bidders would face.
7.2 Smart Metering (AMM/MDM)
Time-series consumption data feeds powering the customer portal's consumption analytics:
Hourly, daily, weekly, and monthly consumption data retrieval for electricity and water
Server-side aggregation and caching for performant chart rendering (target: <500ms response)
Smart meter event feeds for anomaly alerts and high-usage notifications
Support for both API-based real-time data and batch file ingestion patterns
Data normalisation layer handling different meter types and data formats
Our MDM Experience
Roderick Bartolo's direct experience with the ARMS MDM/AMM infrastructure means we understand the data feed patterns, meter data schemas, and aggregation requirements specific to Malta's smart metering rollout. Consultant Malcolm Micallef further strengthens this capability with extensive MDM expertise gained through direct work with ARMS — he has hands-on knowledge of ARMS's meter data management systems, data quality processes, and the integration touchpoints between MDM and the customer-facing platforms. Our team has also built time-series data pipelines and real-time analytics dashboards at enterprise scale, including consumption monitoring and anomaly detection systems at Tipico processing millions of data points daily.
7.3 Government Payment Gateway
Secure payment processing compliant with Government Payment Gateway policies:
Hosted payment page / redirect model with return status callbacks
Support for multiple bills in a single transaction (multiple-bill checkout)
Partial and full payment support with real-time balance updates
Transaction retry logic with idempotency guarantees
Payment reconciliation dashboard for back-office teams
Automated posting of successful payments to SAP
Our Payment Gateway Experience
SKIOS has integrated with the Government Payment Gateway multiple times across our enterprise customer base, including public-sector platforms handling high-volume financial transactions. Our Astimulus voucher platform processed over €100 million in government-backed transactions with complex multi-party reconciliation, retry logic, and real-time payment status tracking — the exact patterns required for ARMS's multi-bill checkout and payment reconciliation needs.
7.4 Zendesk Ticketing
Bidirectional ticket synchronisation for seamless customer and agent experiences:
Automatic ticket creation for each service request submitted through the portal
Real-time sync of comments, attachments, and status changes via Zendesk API
Customer-visible ticket list with status, SLA indicators, and last update
Embedded or deep-linked Zendesk workspace in the internal portal
Consideration for alternative built-in ticketing solution integrated natively into the portal (as per ARMS openness to alternatives)
Our Zendesk Experience
SKIOS has delivered Zendesk integrations across multiple enterprise clients, building bidirectional ticket synchronisation, embedded agent workspaces, and automated ticket creation from web portals. We understand Zendesk's API capabilities, webhook patterns, and the nuances of mapping custom fields between portal workflows and Zendesk ticket schemas. Our experience spans both standard Zendesk Support and Zendesk Suite deployments.
7.5 Nintex K2 Workflow & Forms
Workflow orchestration for service request processing:
Initiate workflows from portal forms with automatic K2 process instantiation
Surface K2 task statuses and approval/rejection states to customers and agents
Bidirectional data exchange: portal form data populates K2 fields, K2 status updates reflected in portal
Document upload and storage policy enforcement
SLA monitoring with escalation triggers for overdue tasks
Our Nintex K2 Experience
SKIOS is the contracted Nintex support provider for multiple Malta Government agencies. We provide ongoing Nintex K2 administration, workflow development, and integration services across government departments. This means we have deep, production-level expertise with K2 workflow design patterns, SmartForms, API integration, and the specific deployment and configuration requirements of K2 in regulated public-sector environments. No other bidder can match this level of Nintex K2 institutional knowledge in the Maltese market.
7.6 Messaging & Notification Gateways
Omnichannel notification delivery:
Email gateway (SMTP/API) for transactional and marketing communications with template management
SMS gateway (provider API) for urgent notifications and MFA delivery
Web push service for PWA push notifications with subscription management
Delivery tracking, bounce handling, and retry logic for all channels
Centralised notification template management with bilingual (EN/MT) support
Our Messaging & Notifications Experience
SKIOS has built and operated omnichannel notification systems across multiple enterprise customers, integrating with SMTP gateways, SMS providers, and push notification services. Our platforms deliver millions of transactional messages — from the Astimulus voucher notifications to real-time alerts across government portals. We have production experience with delivery tracking, bounce management, template engines with bilingual support, and event-driven notification architectures at scale.
Events Catalogue (Illustrative)
Event
Trigger
Channels
New Bill Issued
SAP posts billing document
Portal, Email, Push
Payment Success
Payment gateway callback
Portal, Email
Payment Failure
Payment gateway callback
Portal, Email, SMS
Ticket Update
Zendesk status/comment
Portal, Email, Push
Workflow Task
K2 task assigned/updated
Portal, Email
High Usage Alert
MDM anomaly detection
Portal, Push, SMS (opt)
Outage Alert
SAP/MDM outage event
Portal, Push, SMS, Email
Meter Reading Due
Scheduled reminder
Portal, Email, Push
Payment Reminder
Dunning schedule trigger
Portal, Email, SMS
Application Status
K2 workflow state change
Portal, Email, Push
Account Security
Login anomaly / MFA event
Email, SMS
Direct Debit
DD setup/modification confirmed
Portal, Email
Mobile Experience
Mobile Web App (PWA)
A full-featured Progressive Web App delivering the complete customer portal experience
optimised for mobile devices, with native-like performance and capabilities.
Full Feature Parity
Every customer-facing feature available on desktop is accessible on mobile: login, dashboard, bills, payments, readings, requests, tickets, and notifications.
Installable PWA
Add-to-homescreen with custom icon and splash screen. Launches in standalone mode for a native app experience without app store distribution requirements.
Mobile-Optimised Navigation
Bottom tabbed navigation for primary sections, sticky action buttons for frequent tasks (Quick Pay, Submit Reading), large tap targets, and swipe gestures for natural mobile interaction.
Push Notifications
Browser push notifications with in-app notification centre. Badge counts on homescreen icon, notification grouping by type, and deep-linking to relevant portal sections.
Offline-Aware Patterns
Graceful handling of connectivity loss: cached account data for offline viewing, queued actions (reading submissions, form saves) that sync when connection restores, and clear offline indicators.
Accessibility & Performance
Screen reader support, high-contrast mode, dynamic text sizes, WCAG 2.2 AA compliance. Performance target: First Contentful Paint under 2 seconds on 4G with responsive chart rendering.
Camera Integration
Use device camera for meter reading photo uploads and document scanning for application attachments. Image compression and quality validation before submission.
Biometric Authentication
Support for device biometrics (fingerprint, face recognition) via WebAuthn for quick re-authentication on trusted devices, reducing friction for frequent portal interactions.
Intelligence Layer
AI-Readiness & Automation
A platform architected for AI from the foundation — with immediate chatbot integration
and a clear path to autonomous AI agent orchestration.
Intelligent Chatbot Integration
Integration with ARMS's existing chatbot for FAQ handling, triage, and contextual links to
portal applications and workflows. The chatbot is embedded across all portal pages and the
mobile PWA with persistent conversation context.
FAQ answering with context-aware responses based on customer's account status
Triage and classification of customer queries for routing to correct department
Direct links to relevant applications, forms, and self-service tools
Human-in-the-loop escalation to Zendesk agents with full conversation context transfer
Bilingual support (English / Maltese) with natural language understanding
Future AI Agent Orchestration
The platform architecture includes dedicated AI integration points designed for future
autonomous agent deployment. These agents will be capable of handling routine customer
requests end-to-end:
Bill Copy Agent — automatically retrieve and deliver bill copies on request
Appointment Booking Agent — schedule appointments for customer care, debt management, and legal office
Reading Submission Agent — guide customers through meter reading submission with validation
Account Query Agent — answer balance, payment, and consumption questions from SAP data
All AI agents operate with human-in-the-loop safeguards — complex or sensitive requests
are always escalated to human agents with full context.
Predictive Analytics & Smart Insights
Machine learning models embedded in the platform for operational intelligence:
consumption prediction using historical data and weather patterns,
anomaly detection for leak identification and meter malfunction alerts,
customer churn risk scoring for proactive engagement,
ticket volume forecasting for workforce planning,
and sentiment analysis across customer communications
to identify emerging issues before they escalate. Workflow orchestration via Nintex K2 with
compatibility for RPA if required.
Security & Compliance
Identity, Security & Access Management
Enterprise-grade security architecture designed and operated by VERACLOUD —
Malta's Microsoft Partner of the Year for cloud security.
Authentication & Identity
OIDC-Compliant Login
OpenID Connect authentication supporting National eID, enterprise IdP federation, and username/password fallback. Single sign-on across customer portal, mobile app, and internal portal.
Multi-Factor Authentication
Configurable MFA policy: SMS OTP, email OTP, authenticator app (TOTP), and WebAuthn (biometric). Policy-driven enforcement by user role and risk level.
Session Management
Automatic session timeout with configurable durations by role. Device remember options, concurrent session limits, and forced logout for security events.
Authorisation & Data Protection
Role-Based Access Control
Fine-grained RBAC with least-privilege enforcement. Configurable roles for internal users (agent, back-office, supervisor, read-only, admin) and delegated access for corporate customers (grant, view, revoke).
Encryption & Data Security
TLS 1.2+ for all data in transit. AES-256 encryption at rest for sensitive data. Key management via Azure Key Vault or HSM. Database-level encryption with transparent data encryption (TDE).
OWASP Protection
Protection against OWASP Top 10 threats: input validation, output encoding, parameterised queries, rate limiting, CORS policies, CSP headers, and anti-CSRF tokens.
GDPR Compliance
Privacy by design: consent management, purpose limitation, data minimisation, configurable retention policies, and right to erasure implementation. Transparency notices in UX. Data subject rights (access, rectification, deletion) via self-service and support processes.
Comprehensive Audit Trails
Every user and system action logged with timestamp, actor, action type, affected resource, and IP address. Immutable audit logs with configurable retention and compliance reporting.
Penetration Testing & Monitoring
Pre-launch penetration testing, continuous vulnerability scanning, and VERACLOUD's 24/7 security operations centre monitoring for threat detection and incident response.
Non-Functional Requirements
Category
Requirement
Target
Performance
Median page load on 4G mobile
< 2 seconds
Performance
p95 API latency for core endpoints
< 500ms
Scalability
Concurrent customer sessions
≥ 10,000
Scalability
Horizontal scaling capability
Auto-scaling on demand
Availability
Monthly uptime target
99.9%
Availability
Maintenance windows
Agreed in advance
DR
Recovery Time Objective (RTO)
≤ 2 hours
DR
Recovery Point Objective (RPO)
≤ 30 minutes
Security
Data encryption in transit
TLS 1.2+
Security
Data encryption at rest
AES-256
Compliance
GDPR compliance
Full
Accessibility
WCAG compliance level
2.2 AA
Localisation
Bilingual support
EN / MT
Investment
Financial Bid & Cost Breakdown
A phased delivery approach with clear milestones, transparent pricing, and
measurable deliverables at each stage.
Sprint 1 — Foundation & Identity
Platform infrastructure, authentication, public area, and CMS
Test plans, UAT cycles, security testing, load testing, bug fixes
€10,000
Training & Documentation
20-user training, user guides, video tutorials, change management
€10,000
Total Implementation Investment
All 6 sprints — full platform delivery
€275,000
Excluding VAT
Foundation & Identity (16%)Portal Core (20%)Meters & Requests (18%)Internal Portal (17%)Mobile & Notifications (13%)AI, Training & Launch (15%)
Yearly Maintenance & Support
Year 1 Post Go-Live
Warranty & Support
Included warranty period with bug fixes, security patches, monitoring, and incident response. SLA-backed support with defined response times by severity.
€36,000
per annum, excluding VAT
Years 2–5
Maintenance & Evolution
Ongoing maintenance, security updates, performance optimisation, minor enhancements, 24/7 monitoring, and quarterly health checks.
€36,000
per annum, excluding VAT
Total 5-year maintenance investment: €180,000 (excluding VAT). Ad-hoc hourly rate for
out-of-scope services: €70/hour (excluding VAT). Volume discounts available for pre-committed
enhancement packages.
Delivery
Implementation Timeline
A phased delivery approach with early access to working increments, allowing ARMS Ltd.
to validate progress and provide feedback at each milestone.
Sprint 1 — Foundation & Identity
Weeks 1–6
Infrastructure
Authentication
Public Area
CMS
Registration
API Gateway
Sprint 2 — Customer Portal Core
Weeks 7–14
Dashboard
Billing
Payments
SAP Integration
Payment Gateway
Direct Debit
Sprint 3 — Meter Readings & Applications
Weeks 15–22
Meter Charts
AMM/MDM
Applications
Nintex K2
Document Upload
Status Tracking
Sprint 4 — Internal Portal & Ticketing
Weeks 23–30
Agent Workspace
Zendesk
Reporting
Admin Tools
Customer 360°
Audit Logs
Sprint 5 — Mobile PWA & Notifications
Weeks 31–36
PWA
Push Notifications
Offline Mode
Notification Engine
SMS/Email
Camera
Sprint 6 — AI, Testing & Go-Live
Weeks 37–44
Chatbot
AI Features
UAT
Load Testing
Security Audit
Training
Go-Live
Environments: Dev/Test and UAT provided throughout the project lifecycle. Each sprint
concludes with a demo and sign-off checkpoint. UAT cycles include ARMS scenarios with
defect triage and closure criteria. Final acceptance only upon meeting all functional,
integration, performance, and security criteria.
Enablement
Training, Documentation & Change Management
A comprehensive enablement programme ensuring ARMS staff and customers can
maximise the value of the new platform from day one.
Internal User Training
Hands-on training sessions for 20 internal users covering portal navigation, customer management, ticket handling, K2 workflow processing, reporting, and admin tools. Role-specific training tracks.
End-User Guides
Comprehensive customer-facing guides with step-by-step instructions for registration, billing, payments, readings, and service requests. Available in English and Maltese with screenshots and video walkthroughs.
Internal User Manuals
Detailed manuals for agents, back-office processors, and supervisors covering all internal portal features, workflows, reporting, and troubleshooting procedures.
Video Tutorials
Library of short, focused video tutorials for common tasks: submitting readings, paying bills, applying for services, managing notifications. Embedded in-portal for contextual help.
Admin Training
Dedicated training for system administrators on CMS content management, user/role management, portal configuration, integration monitoring, and incident response procedures.
Change Management Plan
Structured communications plan for customer rollout: pre-launch awareness, registration drive support, phased feature introduction, and feedback collection mechanisms.
Compliance
Bidder Compliance Matrix
Our compliance status against the key requirements specified in the CfQ.
Ref
Requirement
C/P/N
Comments
R-UX-01
Portal and Mobile Web App meet WCAG 2.2 AA
C
WCAG 2.2 AA compliance built into our design system and tested with automated tools and manual accessibility audits
R-SEC-05
OIDC login with MFA policy support
C
Full OIDC implementation via Azure AD B2C/Keycloak with configurable MFA policies (SMS, email, TOTP, WebAuthn)
R-BIL-12
Multiple-bill payments via Government Payment Gateway
C
Multi-bill checkout with partial/full payment support, transaction retry, and automated SAP reconciliation
R-MTR-09
Smart meter charts for electricity and water
C
Interactive charts with hourly/daily/weekly/monthly granularity, benchmark comparisons, and CSV export from AMM/MDM data
R-ZEN-03
Bi-directional Zendesk ticket sync
C
Full bi-directional sync via Zendesk API: ticket creation, status updates, comments, attachments, and SLA tracking
R-K2-07
Nintex K2 workflow status surfaced in portal
C
Real-time K2 task status, approval flows, and progress tracking visible to both customers and internal users
R-NFY-04
Push notifications for ticket updates
C
PWA push notifications via web push service with granular opt-in preferences and configurable event triggers
R-NFR-15
99.9% availability and DR targets met
C
99.9% monthly SLA with VERACLOUD managed infrastructure. RTO ≤ 2h, RPO ≤ 30min with geo-redundant backups
R-AI-01
Chatbot integration and AI-agent readiness
C
Existing chatbot integration with API-based architecture ready for future AI agent orchestration
R-SAP-01
SAP integration for contracts, billing, payments
C
Full SAP integration via BAPI/RFC interfaces with bidirectional data exchange and reconciliation
R-MOB-01
Mobile Web App with full feature parity
C
PWA with installable app experience, offline patterns, push notifications, and complete portal feature set
R-CMS-01
Bilingual EN/MT content management
C
Headless CMS with content versioning, approval workflows, and full bilingual support
R-GDPR-01
GDPR compliance with data subject rights
C
Privacy by design: consent management, data minimisation, right to erasure, retention policies, and self-service data access
Governance
Assumptions & Dependencies
Key assumptions underpinning our proposal, timeline, and investment figures.
Cloud Environment — The platform will be delivered as a cloud-ready solution deployable on-prem, private cloud, or MITA Azure Stack as preferred by ARMS. VERACLOUD will manage the infrastructure deployment.
SAP Access — ARMS will provide API access to SAP (BAPI/RFC/OData) for contracts, billing, payments, and master data. SAP integration documentation will be provided as referenced in the CfQ appendices.
Government Payment Gateway — ARMS will facilitate access to the Government Payment Gateway with applicable policies, test environment credentials, and integration documentation.
AMM/MDM Data — Smart meter data will be accessible via APIs or data feeds from the existing AMM/MDM infrastructure. Data format and access patterns will be clarified during Sprint 1.
Zendesk & Nintex K2 — Existing licenses are provided by ARMS. API access and admin credentials for integration development will be made available during the relevant sprint.
Existing Chatbot — ARMS will provide API documentation for the existing chatbot to enable integration. Future AI agent development is scoped as a separate enhancement.
ARMS Availability — A dedicated ARMS product owner and subject matter experts will be available for requirements clarification, sprint reviews, and UAT participation throughout the project.
Content & Branding — ARMS will provide all corporate content, branding guidelines, imagery, and bilingual text for CMS population. Translation services for portal UI strings are included in our scope.
Test Data — ARMS will provide anonymised or test data sets for development and UAT, including sample customer accounts, contracts, bills, and meter readings.
National eID — Integration with the National eID system requires ARMS to facilitate the necessary agreements and provide access to the eID gateway for authentication integration.
Clarifications
Questions & Clarifications
Key questions to be addressed during the clarification period to refine our
proposal and delivery approach.
SAP & Backend Systems
01What SAP modules and interface types (BAPI, RFC, OData, IDoc) are currently available for integration?
Understanding the specific SAP interface landscape will allow us to confirm integration approach, estimate adapter complexity, and identify any middleware requirements.
02What is the current AMM/MDM data availability and update frequency for smart meter readings?
This determines our caching strategy, chart update frequency, and whether we need to support both real-time API and batch file ingestion patterns.
Ticketing & Workflow
03Is ARMS open to a built-in ticketing solution as an alternative to Zendesk integration?
As noted in the CfQ, ARMS is open to alternative ticketing solutions. A natively integrated ticketing module could reduce integration complexity, improve user experience, and lower ongoing licensing costs.
04How many active Nintex K2 workflows currently exist, and what is the expected volume of new applications per month?
This informs the K2 integration depth and whether we should build a workflow abstraction layer to accommodate future workflow changes without portal modifications.
Infrastructure & Hosting
05Is the preferred deployment target MITA Azure Stack, private cloud, or Azure public cloud?
Deployment target affects our infrastructure architecture, scaling approach, and managed service availability. VERACLOUD can support all three options.
06Are there specific MITA compliance or security certification requirements beyond GDPR?
Understanding additional compliance frameworks (e.g., NIS2, ISO 27001) ensures we design the security architecture to meet all applicable standards.
Customer Experience
07What is the current customer registration rate and expected adoption targets for the new portal?
This helps us design the onboarding experience and plan the change management campaign to maximise adoption among the 380,000 customer base.
08Which chatbot platform is currently in use, and what API capabilities does it expose?
Understanding the existing chatbot technology stack ensures seamless integration and helps us design the future AI agent orchestration layer.
Post Go-Live
Service Level Requirements
Committed service levels for the 5-year post go-live maintenance period,
backed by VERACLOUD's 24/7 infrastructure monitoring.
Severity
Description
Response Time
Resolution Target
Critical (P1)
Platform down, payment processing failure, data breach
30 minutes
4 hours
High (P2)
Major feature unavailable, integration failure, performance degradation
2 hours
8 hours
Medium (P3)
Non-critical feature issue, UI defects, minor integration errors
SLA based on normal ARMS Ltd office hours with 24/7 monitoring for P1/P2 incidents via VERACLOUD's
Security Operations Centre. Maintenance windows agreed in advance. Service credits applicable for SLA
breaches as defined in the maintenance agreement. Change control process with impact assessment for
all production changes.
Reference
Glossary & Acronyms
Term
Definition
AMM/MDM
Advanced Metering Management / Meter Data Management
×
VERACLOUD