Fixed-Price Development of a Modern Car Rental Booking Platform (Web + Mobile-Ready)

We operate a car rental company in Dubai and require a secure, scalable digital booking system. The platform must allow customers to view real-time vehicle availability, book cars with delivery and collection options, upload identity documents (driving licence front/rear + passport), complete payments, and manage bookings. An admin/fleet management backend is required. We are seeking experienced developers or agencies to deliver this as a fixed-price contract. Proposals must include a clear fixed price, scope breakdown, timeline, technology stack, past relevant systems, and approach to security & compliance. Core Functional Requirements Customer-Facing (Web, responsive; mobile app or high-quality PWA preferred) • Vehicle catalogue with filters (type, transmission, seats, price range, features, location). • Real-time availability calendar and inventory management (prevent double-booking). • Booking flow: select dates/times, pickup & drop-off locations (map-based address entry + predefined locations), optional delivery/collection service with address capture. • Customer account: registration/login (email + optional social/OTP), booking history, upcoming bookings, digital documents. • Document upload: driving licence (front + rear) and passport. Secure storage, preview, and admin verification workflow. Support for common formats (JPG/PNG/PDF) with size limits and virus scanning. • Payment integration: online card payments (and preferably Apple Pay / Google Pay). Support for AED. Ability to take deposit + balance, or full prepayment. Refunds and partial refunds. • Booking confirmation, reminders, and status updates via email + SMS/WhatsApp (preferred). • Digital rental agreement / terms acceptance (e-signature or checkbox + timestamped consent). • Multi-language: English + Arabic (RTL support). • Multi-currency display with AED as base (optional). • Basic customer support contact and FAQ. Admin / Operations Backend • Fleet management: add/edit vehicles, status (available, rented, maintenance, blocked), pricing rules, seasonal rates, extras (insurance, child seat, etc.). • Booking management: calendar view, list view, status changes, assignment of delivery/collection drivers. • Document verification queue (approve/reject ID uploads with notes). • Customer management and blacklist capability. • Payment and transaction log, refunds, reconciliation reports. • Role-based access (Admin, Operations, Finance, Driver if needed). • Dashboard with key metrics (utilisation, revenue, upcoming handovers). • Audit logs for sensitive actions (document views, status changes, refunds). • Export capabilities (CSV/Excel) for bookings, customers, financials. Desirable / Nice-to-Have Features (price as optional modules if needed) • GPS / live location for delivery & collection tracking. • Automated contract generation (PDF) with customer details and vehicle condition notes. • Damage reporting with photo upload at handover. • Loyalty / promo code system. • Integration with popular UAE payment gateways (PayTabs, Telr, Network International, Stripe if supported) and local SMS providers. • Push notifications (if native apps). • Basic analytics and reporting. • API for future third-party integrations (e.g. insurance partners, fleet telematics). Technical & Non-Functional Requirements • Architecture: Prefer modern, maintainable stack (e.g. React/Next.js or similar frontend, Node.js / Laravel / Django / NestJS backend, or equivalent proven stack). Clean separation of concerns, well-documented code, CI/CD ready. • Mobile: Fully responsive web + Progressive Web App (PWA) minimum. Native iOS/Android (React Native / Flutter) is a strong plus and should be priced separately if offered. • Hosting & Scalability:
The client will arrange and own the hosting account and infrastructure.
The developer is required to: ◦ Recommend the optimal hosting setup for best performance, reliability, latency (especially for Dubai/UAE users), scalability, and cost-effectiveness. Preferences should consider cloud providers with strong Middle East / UAE presence or low-latency regions (e.g. AWS, Google Cloud, Azure, or suitable alternatives), including any data residency considerations. ◦ Provide a clear recommended architecture (e.g. recommended instance types, database, CDN, storage for documents, load balancing if needed, backup strategy). ◦ Assist with the initial setup and configuration of the recommended environment (server provisioning guidance, environment variables, domain/SSL setup support, deployment pipeline, and handover of a working production deployment). ◦ Document the hosting setup, deployment process, and ongoing maintenance recommendations so the client (or their future team) can manage it independently after handover. • Security (mandatory best practices): ◦ HTTPS everywhere, secure headers, input validation & sanitisation. ◦ Encrypted storage of personal data and uploaded documents (at rest + in transit). ◦ Strict access controls and least-privilege roles. ◦ Secure file upload handling (type/size validation, malware scanning, private storage with signed URLs). ◦ PCI-DSS compliant payment handling (never store raw card data; use tokenisation via payment gateway). ◦ Authentication: secure password hashing, optional MFA for admin, rate limiting, session management. ◦ Protection against common OWASP risks (XSS, CSRF, injection, etc.). ◦ Regular security updates and dependency management. ◦ Audit logging of sensitive operations. ◦ Data protection alignment with UAE Personal Data Protection Law (PDPL) principles (purpose limitation, data minimisation, security measures, retention controls). Ability to support data subject requests. • Performance & Reliability: Fast page loads, offline-tolerant booking confirmation where possible, reliable email/SMS delivery, backup & recovery strategy. • Integrations: Payment gateway(s), maps (Google Maps or equivalent for address autocomplete & delivery locations), email/SMS/WhatsApp providers, optional e-signature if proposed. • Testing & Quality: Unit/integration tests for critical paths (booking, payments, document handling), UAT support, bug-fix period after launch. • Documentation & Handover: Technical documentation, admin user guide, API docs if applicable, source code ownership transferred to client, deployment runbooks. Deliverables 1 Fully functional production system (web + agreed mobile approach). 2 Admin panel. 3 Source code repository with ownership transferred. 4 Deployment on the client’s arranged hosting (with developer assistance for initial setup as described above). 5 User and technical documentation. 6 Training session for operations team (remote or recorded). 7 Post-launch support period (propose duration, e.g. 30–90 days bug fixes). 8 Optional: ongoing maintenance retainer quote (separate from fixed price). Proposal Requirements (what developers must submit) • Fixed total price (or clearly itemised fixed-price modules) in USD or AED. No open-ended time & materials for core scope. • Detailed scope confirmation and any assumptions / exclusions. • Proposed technology stack and architecture diagram (high-level). • Timeline with milestones (e.g. discovery → design → development sprints → testing → launch). • Team composition and relevant experience. • Portfolio of past similar systems (car rental, vehicle booking, marketplace with payments + document verification, or strong e-commerce + admin platforms). Include live links or detailed case studies where possible. • Approach to security, data protection (especially document handling and payments), and UAE/PDPL considerations. • Payment gateway recommendations suitable for Dubai. • Hosting recommendations and initial setup assistance plan (as outlined in the Hosting section). • Post-launch support and warranty terms. • Any third-party costs (hosting, SMS, payment fees) that the client will bear. • References or client testimonials preferred. Evaluation Criteria • Relevant past work and proven ability to deliver booking + payment + document systems. • Clarity and realism of fixed-price proposal and timeline. • Strength of security and compliance approach. • Quality of proposed UX/UI (especially mobile and Arabic support). • Communication and professionalism. • Value for money within a fixed-price model. Timeline Preference We aim for a production-ready system within a realistic timeframe. Please propose a schedule with clear milestones and payment gates tied to deliverables. Budget Guidance Please provide your best fixed-price quotation based on the core requirements above. Optional features can be priced as add-ons. We will compare proposals on capability, experience, security approach, and total cost of ownership rather than lowest price alone. Next Steps Interested developers/agencies should submit a detailed proposal responding to all points above. Shortlisted candidates may be invited for a call to discuss technical approach and past systems in more detail.