Organisation: Medical Rehabilitation Practitioners Council of Zimbabwe (MRPCZ)
Location: Harare, Zimbabwe
Contract Type: Full system design, development, deployment & support

PROJECT OVERVIEW
MRPCZ invites reputable, experienced software development companies to submit proposals for the design and build of a comprehensive Digital Registration & Workforce Intelligence Platform. Full specifications are detailed in the attached requirements document.

SCOPE HIGHLIGHTS

The following scope is indicative and subject to addition, refinement, or reprioritisation during requirements clarification and contract negotiation. Bidders are encouraged to propose enhancements based on their technical expertise and experience with comparable regulatory systems.
1. Public Website Revamp

Redesign of the existing MRPCZ website into a modern, professional, mobile-responsive institutional platform using a component-based front-end framework (e.g., React, Vue.js, or Angular).

Implementation of a headless or traditional CMS for staff content management (pages, notices, downloads, announcements) without developer intervention.

SEO optimisation including semantic HTML, meta-tag management, sitemap generation, structured data (Schema.org), and page-speed optimisation (Core Web Vitals).

Accessibility compliance aligned to WCAG 2.1 AA standards.

SSL/HTTPS configuration, broken-link monitoring readiness, and analytics integration (e.g., Google Analytics 4 or Matomo).

Public-facing modules: practitioner verification search, certificate QR verification, download centre, FAQ, contact/inquiry forms, and association information pages.

2. Digital Practitioner Identity & Registration System

Creation of a single, permanent digital identity per practitioner, tracking the full lifecycle from student registration → internship → permanent registration → renewal → retirement/deregistration.

Support for role transitions (student-to-intern, intern-to-practitioner, additional qualification, change of specialisation) with full historical preservation.

Duplicate detection and profile-merging logic.

Assignment and management of registration numbers.

Status engine supporting: pending, active, expired, suspended, deregistered, deceased, exempted, under review.

Full activity timeline and audit trail per practitioner.

3. Online Applications, Renewals, CPD & Compliance Tracking

Guided, step-by-step application wizard with dynamic questions based on applicant category (local, foreign-trained, student, practitioner, institution).

Application draft-save, resume-later, and completeness-meter functionality.

Automated reference number generation upon submission.

Renewal eligibility checks, expiry tracking, automated reminders (email/SMS/WhatsApp), late-penalty calculation, and arrears tracking.

CPD submission portal, event capture, admin verification, annual compliance tracking, and configurable CPD point thresholds per profession.

Compliance risk engine with colour-coded indicators (green/amber/red), automated watchlists, and escalation workflows.

4. Integrated Payments (PayNow, Bank/EFT Reconciliation, Multi-Currency)

PayNow integration with online payment status callbacks and automatic application payment-status updates.

Bank/EFT proof-of-payment upload with finance verification queue, reconciliation workspace, and receipt generation.

Multi-currency support (USD and ZiG) with manual exchange-rate management and RBZ mid-rate settlement logic.

Duplicate payment detection, failed/cancelled payment handling, and payment reversal workflows with permission controls.

Finance audit trail, daily collections reports, and revenue-by-service reporting.

5. Automated QR-Coded Digital Certificates & Public Verification Portal

Automated generation of registration certificates, practising certificates, certificates of good standing, duplicate certificates, and institution certificates in PDF format.

Unique certificate serial number generation and QR code embedding.

Public verification portal accessible via QR scan or manual search, displaying practitioner name, registration number, profession, licence status, expiry date, and certificate serial number.

Revoked/expired/replaced certificate status handling.

Certificate template management, digital signature/signatory image support, watermarking, and reprint tracking.

6. WhatsApp Business API, Email & SMS Communication Modules

WhatsApp Business API integration for application status updates, renewal reminders, payment reminders, missing-document alerts, and certificate-readiness notifications.

Secure portal links embedded in WhatsApp messages; sensitive actions remain portal-authenticated.

Email and SMS notification readiness with configurable templates, delivery logs, and failed-notification retry.

Broadcast messaging to selected practitioner groups, profession-specific notices, and renewal campaigns.

Opt-in/opt-out preference handling and admin communication history interface.

7. Admin, Registrar, Finance & Council Leadership Dashboards

Role-specific dashboards for Admin, Registrar, Finance, Practice Control, and Council Leadership.

Admin dashboard: pending applications, payment verification queue, expiring certificates, arrears lists, deregistration risk, open disciplinary cases, CPD non-compliance.

Finance reconciliation workspace: pending bank deposits, EFT proof matching, receipt generation, and revenue reporting.

Registrar/Council dashboard: high-level statistics, trends, board-ready reports, and read-only leadership access.

Exportable dashboard data (PDF/Excel) and quick-search functionality for practitioners, applications, and certificates.

8. Predictive Workforce Analytics, GIS Mapping & Statutory Reporting

Predictive analytics engine for practitioner shortages, retirement trends, migration/diaspora risk, and training pipeline gaps.

Interactive GIS map showing practitioner distribution by province, district, profession, sector, and registration status.

Heatmap and density visualisation for coverage-gap identification.

Statutory reporting suite: registration, renewal, payment, balances, CPD compliance, disciplinary cases, institution register, arrears, and revenue-by-service reports.

Export to PDF, Excel, and Power BI-ready formats.

9. Full Audit Trail, 2FA Security, Role-Based Access & Data Migration

Comprehensive audit logging of user logins, failed attempts, profile changes, application submissions, document uploads, verification decisions, payment approvals/rejections, certificate generation, status changes, and role changes.

Two-factor authentication (2FA) for administrators, finance users, registrar users, and system administrators.

Role-based access control (RBAC) with granular permissions for viewing, verifying, approving, rejecting, editing, printing, reporting, and system configuration.

Secure authentication: password hashing, CSRF protection, input validation, upload file-type restrictions, virus/malware scanning readiness, and admin session timeout.

Data migration from existing systems with duplicate detection, validation reporting, sample approval before full import, and manual correction tools post-migration.

Daily backups, backup restoration process, and disaster recovery readiness.

Full audit trail, 2FA security, role-based access & data migration

Bidders are invited to propose additional features, alternative technical approaches, or phased delivery models that may enhance the platform's value, scalability, or security posture. All proposed additions will be evaluated as part of the technical response.


MANDATORY REQUIREMENTS

Proven track record in enterprise-grade web application development

Experience with payment gateway integrations (PayNow or similar)

Experience with WhatsApp Business API & bulk SMS/email systems

Strong security credentials (SSL, 2FA, RBAC, audit logging)

Ability to deliver full documentation, training & post-launch support

Registered company with verifiable references

SUBMISSION REQUIREMENTS
Interested firms must submit:

Company profile & registration documents(Tax clearance and PRAZ Certificate)

Portfolio of similar projects (with references)

Technical approach & proposed timeline

Itemised budget proposal (USD)

CVs of key development team members

DEADLINE: 16/10/2026
SUBMIT TO:
ENQUIRIES:

MRPCZ reserves the right to accept or reject any proposal. Only shortlisted firms will be contacted