Performance Work Statement – Host Nation Payroll Services

This is a draft Performance Work Statement for a Software as a Service (SaaS) solution providing integrated timekeeping, attendance, and payroll management services for approximately 4,000 Host Nation (HN) employees employed by the U.S. Navy across Italy, Bahrain, Romania, Saudi Arabia, Spain, Greece, and other locations. The contracting activity is Commander, Navy Region Europe, Africa Central (CNREURAFCENT) Payroll Office, located in Naples, Italy. The contractor must provide a dedicated hosting environment with hosting on government-approved servers meeting specified hardware requirements (1 Frontend Server, 1 Application Server, 1 Reporting Server, 1 Database Server, 1 Citrix + Application Server or equivalent) and integrate with a back-end Relational Database Management System such as Oracle, Microsoft SQL Server, MySQL, or PostgreSQL to store and retain all payroll data with continuous availability and transfer capability to the U.S. Navy upon contract termination.

The system must support comprehensive timekeeping and payroll functions including clock-in/out via web portal and mobile application, time-off management, automated rules and policy engine calculations for breaks and overtime, gross-to-net payroll processing with deductions and tax calculations, payroll reporting and analytics, employee self-service portal, and compliance with Host Nation labor laws across all supported countries. The E-Timecard software must track accurate time and attendance based on assigned work schedules, enable customizable pay periods by location, generate work schedule records, support employee profile creation with automatic display of employee information, include a sheet entry screen for exceptions, and integrate with the payroll database for processing. The contractor must ensure 99.9% system uptime during European and Middle East workdays, provide technical support within 24 hours or less with Monday–Friday availability from 0800–1700 Central European Time, maintain ISO/IEC 27001 certification, obtain DISA FedRAMP+ authorization upon award, ensure US Law Section 508 compliance, provide disaster recovery services with 48-hour recovery time, and deliver comprehensive documentation including user manuals, software manuals, and all deliverables related to data security certifications and cyber security artifacts as specified in Section 4.