Selection of Qualified Security Assessor (QSA) for Payment Card Industry Data Security Standard (PCI-DSS)/ Recertification

In order to fulfil the requirement of Selection of QSA for Payment Card Industry Data Security Standard Recertification, Irembo Ltd, a technology company in the gov-tech and fin-tech spaces that designs and develops digital products focused on users in Africa, starting with Rwanda, is formally inviting all accredited consulting firms to submit their proposals. This recertification is essential to validate the security posture of our payment gateway.

Formerly RwandaOnline, Irembo Ltd started operations in 2014 with a mission to lead the digitisation of government services in Rwanda. With this having significantly grown, IremboPay, which is a payment gateway that uses a highly scalable and resilient API that is easy and secure with major payment options in Rwanda, has now been designed to enable domestic collections and payments for both public institutions and private companies. Irembo Ltd invites technical and financial proposals from consulting firms (hereinafter referred to as “Bidder”) who are capable and willing to undertake the recertification for Payment Card Industry Data Security Standard (PCI-DSS) as required by Irembo Ltd within the given timeline in an efficient manner and as per the details listed out in this document.

How to Apply:

Interested Bidders should submit a technical proposal and a financial proposal electronically through Irembo’s e-procurement portal no later than May 22, 2026 at 5:00 PM. Bidders will be required to sign up or register (for those that are not yet registered) via this LINK under the Area (s) of Expertise: “Consultancy Services”. After registration, your profile will undergo a review by our team. You will only be allowed access after your account has been approved. Upon successful login, navigate to “Tenders” and locate the PCI DSS tender. More guidelines can be found on the signup page: