What kind of government projects does JoinX take on?+–
System projects: case management, booking and registration, data platforms, IoT monitoring and AI adoption, plus extension and support contracts for existing systems that center on new development. We do not take on brochure websites, outsourced website builds, or annual small-scale maintenance with no development work.
We do not have a requirements specification yet. Can we talk to you first?+–
Yes. When requirements are still unclear, an agency may publicly invite vendors to provide reference material under Article 34, Paragraph 1 of the Government Procurement Act, and we can provide information on technical approaches and development scope under the procedure the agency adopts. Requirements are best written around the functions and outcomes needed, without unnecessary technical specifications that could unduly restrict competition. The actual procedure still follows the case and the agency's procurement authority.
How are security requirements handled in a government system project?+–
Under the Cyber Security Management Act and the Regulations Governing the Classification of Cyber Security Responsibility Levels, systems an agency develops itself or outsources must complete protection requirement classification and apply the corresponding controls, so permissions, personal data and activity logs are planned during requirements and architecture. Before delivery, JoinX runs its own source code and vulnerability scans (white-box); black-box testing is done by a third party, and JoinX can help arrange it and recommend a vendor, then fixes the findings before delivery. On Cooc, for example, vulnerability scans, version control and access control follow the education bureau's ISMS standard.
How should we prepare for acceptance?+–
Start during requirements. Write each important requirement as a scenario someone can carry out, such as application, review and requests for more documents through to closure, then turn it into test cases and acceptance items. Test plans, test reports and deliverables follow the tender documents and contract; when requirements change, scope, schedule and acceptance criteria are adjusted together and recorded.
What public sector systems have you built?+–
Three have been made public: Cooc, Taipei's school cloud and parent–teacher–student platform for the Taipei City Education Bureau (one entry point for 9 sub-systems, with ongoing extension and support); AI eddy current signal analysis and automation for the National Atomic Research Institute (developed in stages, 2022–2025); and an online course live streaming platform for ITRI.
How is support arranged after launch?+–
The same team that built the system supports it, with no handover. On Cooc, for example, we set up support, monitoring and incident reporting from 5×8 up to 7×12, run regular backups and log audits, and handle the bureau's improvement and extension requests. Support scope and service hours are set by the tender documents and contract.