Transparent Digital Governance, Disclosure & Procurement Platform
The Operating Standard for Butwal Power Company Limited (NEPSE: BPCL)
Prepared by: Advaita Solutions
Prepared for: Executive Leadership & Board of Directors, Butwal Power Company Limited (BPC)
Corporate Office: Ganga Devi Marga-313, Buddhanagar, Kathmandu, Nepal
Liaison Office: Campus Road, Butwal, Nepal
Date: August 20, 2026
Valid until: September 20, 2026
Contact: Advaita Solutions Engagement Lead | [email protected] | +977-01-4790000
1. Executive summary
Since its founding in 1966, conversion to a public company in 1993, and pioneering PPP privatization in 2003, Butwal Power Company Limited (BPC) has stood as a flagship enterprise in Nepal's energy sector. Managing operational assets like Jhimruk (12 MW) and Andhikhola (9.4 MW), while advancing major strategic developments such as Nyadi Hydropower (30 MW), Kabeli 'A' (37.6 MW), and Lower Manang Marsyangdi (139.2 MW), BPC operates under constant public, regulatory, and capital market scrutiny as a premier NEPSE-listed issuer (NEPSE: BPCL).
Currently, BPC manages its digital presence through a web portal (www.bpc.com.np) built by Amsoft Technologies. While effective for basic corporate news and static announcements, a standard CMS setup is not designed to serve as an enterprise governance and disclosure engine. Public notices, quarterly financial filings, regulatory submissions to the Securities Board of Nepal (SEBON), Nepal Stock Exchange (NEPSE), and Electricity Regulatory Commission (ERC), along with multi-million NPR civil and electro-mechanical tenders, are currently handled through static PDF uploads, separated English/Nepali pages, and manual email/paper envelope submissions.
In BPC's current workflow, internal administrators can upload, edit, or remove disclosure files directly. Supporting reviews from the Company Secretary, Legal Counsel, or Finance team often reside in external emails, shared drives, or physical routing sheets. When auditors, NEPSE, ERC, statutory auditors, or the Board ask who independently verified this financial report, who authorized this material announcement, and when, the answer must be reconstructed manually rather than produced from an immutable audit trail.
We propose transforming BPC’s digital infrastructure into a governed, enterprise-grade system of record. The platform pairs a high-performance public disclosure website with a hidden, multi-factor-protected administrative console. Internal staff, including the Company Secretary's office, Legal Counsel, Finance leadership, and Information Officer, author, review, and publish content under a strict four-eyes (maker-checker) approval control, enforcing the same separation-of-duties principle applied in BPC's financial governance.
This proposal is supported by a working prototype tailored to hydropower operations and NEPSE compliance. The engagement encompasses production engineering, BPC-specific obligation mapping, migration of historical project and financial archives, security assurance, deployment, staff training, and ongoing SLA support.
What this changes for Butwal Power Company Limited:
Today at BPC (bpc.com.np) | With the Advaita Governed Platform |
|---|---|
| Web portal serves as website and informal filing desk without enforced maker-checker controls | Marketing pages remain on the web; disclosure-critical & compliance work runs in a governed system |
| Material announcements uploaded directly as static PDFs, often without verifiable digital approval logs | Company Secretary (Hari Budhathoki) & CEO (Uttar Kumar Shrestha) publish only after independent review |
| Disclosures to SEBON, NEPSE, and ERC depend on manual procedural discipline | Every publication carries an immutable, cryptographically linked approval ledger |
| Nepali and English notices published as separate, unlinked uploads | Nepali and English captured side by side in unified, multi-lingual database objects |
Tenders on /procurement-bid-notice rely on unsealed email submissions or physical dropboxes | Financial bid envelopes encrypted client-side (AES-256-GCM) before transmission, remaining sealed until official opening date |
| Operational data for Jhimruk (12 MW) & Andhikhola (9.4 MW) stored in static text records | Structured generation dashboards with quarterly MWh rollups and automatic risk escalation |
2. Why this matters now for BPC
2.1 Transparency as BPC's Strategic Operating Standard
As one of Nepal's oldest and most respected power producers, BPC's reputation rests on governance integrity. Transparency for BPC means that material information, whether an AGM notice, dividend declaration, quarterly financial report, or joint-venture milestone for Lower Manang Marsyangdi, reaches shareholders, lenders, and regulators accurately, simultaneously, and in both official languages.
Architecture Diagram
The platform makes this chain visible and system-enforced. The application strictly rejects single-user approvals, logs every state transition, and preserves cryptographically verified evidence for board and regulatory audits.
2.2 Addressing Gaps in Current Web Infrastructure
BPC’s current web portal architecture presents three operational risks for a major listed utility:
Architecture Diagram
2.3 Sector Pressures Converging on BPC
| BPC Executive Requirement | Generic Web CMS (Current Setup) | Advaita Governed Platform |
|---|---|---|
| Timely NEPSE/SEBON Disclosures | Manual PDF upload, risk of premature release or delayed filing | Defined workflow states, timed publication engine (5-min cron release) |
| Board & Auditor Assurance | Approval trails reconstructed from internal emails and memos | Cryptographically linked approval records with independent Redis checkpoints |
| Separation of Duties | Relies on internal discipline and generic CMS admin rights | Maker, checker, and approver strictly segregated at database and application layers |
| Bilingual Shareholder Relations | Independent English and Nepali posts without schema link | Nepali and English captured together in single bilingual database objects |
| Hydropower Portfolio Tracking | Unstructured text pages for Jhimruk, Andhikhola, Nyadi, Kabeli A | Structured asset profiles: MW capacity, COD dates, quarterly MWh generation charts |
| Fair Hydropower Procurement | Bids submitted via standard web forms or emails, visible to admins on arrival | Technical envelope readable; Financial envelope encrypted in browser until committee opening date |
3. What we deliver for BPC
A single deployment serving two dedicated operational entry points for Butwal Power Company Limited:
Architecture Diagram
- The BPC Public Website: Delivered via Cloudflare Edge network for instantaneous loading in Kathmandu, Pyuthan, Syangja, and abroad. Server-rendered to guarantee maximum availability during market-sensitive news spikes or major tender announcements.
- The BPC Administrative Console: Protected behind a non-predictable secret route, requiring Multi-Factor Authentication (Supabase Auth AAL2), session inactivity termination, and strict role authorization matching BPC's organizational chart.
4. BPC Platform Capabilities & Executive Value
The platform modules map directly to BPC's operational structure, subsidiaries (HCE, NHE, Nyadi Hydropower), and regulatory duties:
| Capability | How It Works for BPC | Executive Value for BPC Leadership |
|---|---|---|
| BPC Public Notices | Staff prepare AGM, Dividend, Right-Share, Book Closure, and General Notices in Nepali and English side-by-side. Requires formal Maker-Checker-Approver sign-off prior to NEPSE/public release. | Company Secretary (Hari Budhathoki) guarantees consistent market announcements with full audit defensibility. |
| Financial Reporting Hub | Organizes Quarterly (Q1-Q4) and Consolidated Annual Reports by fiscal year (e.g., FY 2080/81), with bilingual titles, audit statements, and publication histories. | CFO (Radheshyam Shrestha) & Board Audit Committee present an organized, tamper-evident financial repository to statutory auditors. |
| Regulatory Disclosures (SEBON/NEPSE/ERC) | Material developments (ERC tariff revisions, PPA updates, joint ventures) prepared with timed releases. The system checks release schedules every 5 minutes. | Reduces risks of selective disclosure or market manipulation findings from SEBON/NEPSE. |
| Hydropower Assets & Pipeline | Structured profiles for active plants (Jhimruk 12 MW, Andhikhola 9.4 MW) and pipeline projects (Nyadi 30 MW, Kabeli 'A' 37.6 MW, Lower Manang Marsyangdi 139.2 MW, Green Hydrogen 50 kW). | VP Business Dev (Pratik Man Singh Pradhan) presents an authoritative asset portfolio to international JV partners and institutional investors. |
| Procurement Vault & Tender Hub | Replaces static /procurement-bid-notice and /supplier-registeration lists. Handles civil, electro-mechanical (NHE), and consultancy (HCE) tenders with sealed two-envelope security. | CEO (Uttar Kumar Shrestha) & Tender Committee eliminate vendor allegations of premature bid viewing. |
| BPC Risk Matrix | Tracks operational, environmental, legal, and financial risks across BPC plants and subsidiaries, with severity scoring and automated escalation rules. | VP Corporate Management (Tika Ram Bhatta) receives real-time alerts on deteriorating or overdue risk items. |
| Generation Dashboard | Captures plant configuration and monthly/quarterly MWh generation logs for Pyuthan (Jhimruk) and Syangja (Andhikhola) assets with capacity-aware charts. | Operations management reviews generation performance alongside regulatory disclosures in a unified view. |
| Role & Identity Enclave | Role assignments mirror BPC's hierarchy (Maker, Checker, Approver, Super Admin). Enforces mandatory MFA, session binding, and auto-expiry. | Eliminates reliance on shared WordPress admin logins across departments. |
| Immutable Audit Ledger | Writes every publishing action, bid receipt, and permission change to a write-once ledger with cryptographic HMAC chaining and independent Redis checkpoints. | BPC can prove compliance history instantly during internal audits, SEBON inquiries, or lender reviews. |
5. Four-Eyes Governance Tailored to BPC's Hierarchy
The core distinction of this platform is system-enforced separation of duties. At BPC, an individual who drafts a document cannot approve or publish it.
Architecture Diagram
Role Mapping for BPC Leadership:
- Content Editor (Maker) (e.g., Information Officer Lila Nanda Bote, Secretarial Executive): Drafts notices, uploads quarterly report PDFs, inputs generation numbers. System permission: Draft & Submit only.
- Compliance Viewer (Checker) (e.g., VP Corporate Management Tika Ram Bhatta, Legal Counsel): Inspects bilingual accuracy, regulatory compliance, and attachments. Returns for edits or attests recommendation. System permission: Review & Recommend only.
- Authorized Approver (Publisher) (e.g., CEO Uttar Kumar Shrestha, Company Secretary Hari Budhathoki): Final authorization and publication to the public website and market feeds. System permission: Approve & Publish (Enforced: Approver ≠ Maker).
6. The Procurement Vault: Sealed Two-Envelope Tendering for BPC
BPC routinely issues high-value procurement packages for civil works, electro-mechanical supplies (often partnered with Nepal Hydro & Electric Ltd), and engineering consultancies (Hydro Consult Engineering Ltd).
Architecture Diagram
Key Security Commitments for BPC Procurement:
- Client-Side AES-256-GCM Encryption: Financial bids are encrypted inside the contractor's browser before transmission over the network.
- Technical Unaccessibility: Neither BPC IT staff, website administrators, nor Advaita Solutions engineers can view financial figures prior to the declared opening time.
- Audit-Gated Downloads: No tender file can be downloaded unless the download action is first committed to the immutable audit ledger.
7. Security Architecture & Isolation
| Security Layer | Technical Control Enforced for BPC |
|---|---|
| Network Edge | Global Cloudflare WAF absorbs DDoS attacks, rate-limits bot scans, and fails closed if edge infrastructure is compromised. |
| Console Entry | Hidden administrative console URL path (e.g. /bpc-governance-[secret-key]), returning 404 to unauthorized scanners. |
| Identity & Access | Supabase Auth with mandatory Multi-Factor Authentication (AAL2 TOTP). Inactive sessions expire after 15 minutes. |
| Single-Tenant Isolation | Database policies strictly enforce organization_id scoping to prevent cross-tenant data leaks. |
| Database-Level RLS | PostgreSQL Row-Level Security policies enforce Maker-Checker rules even if an application API is bypassed. |
| Data Integrity | Uploaded report PDFs and tender documents stored in Cloudflare R2 with SHA-256 checksum validation upon retrieval. |
| Cryptographic Audit | Write-once audit ledger using HMAC-SHA256 linkage between entries, backed by an independent Upstash Redis database. |
8. Operational Model & Cloud Infrastructure
- Zero Server Maintenance: Runs serverlessly via Cloudflare Workers and Supabase PostgreSQL. BPC IT incurs no server patching, OS upgrading, or physical hardware overhead.
- Predictable Operating Costs: All cloud services (Cloudflare, Supabase, Upstash) are provisioned directly under BPC's corporate accounts with consumption-based pricing.
- Complete Data Ownership: BPC retains 100% ownership of database backups, audit archives, and PDF documents with automated daily backups.
9. Delivery Approach & Implementation Timeline
With the core architecture already proven in our hydropower prototype, engagement focuses on BPC-specific configuration and content migration:
Architecture Diagram
10. Commercial Model
Commercial proposal tailored for Butwal Power Company Limited (BPCL).
| Component | Scope & Basis | Amount (NPR) |
|---|---|---|
| Production Engineering, BPC Configuration & Migration | One-time turnkey implementation: BPC branding, Maker-Checker setup, migration of historical notices, quarterly financial archives, plant schemas (Jhimruk, Andhikhola, Nyadi, Kabeli A), tender vault, and staff training. | - |
| Annual Maintenance, Security Updates & SLA Support | Annual recurring: 24/7 critical issue support, quarterly security reviews, regulatory schema updates (SEBON/NEPSE/ERC rules), feature maintenance. | - / year |
| Infrastructure Costs (Cloudflare, Supabase, Upstash) | Pass-through consumption billing directly to BPC corporate accounts. | Est. $135/month |
Payment Schedule:
- 40% upon contract signature & initiation.
- 40% upon staging deployment, schema acceptance, and content migration verification.
- 20% upon successful domain cutover (
bpc.com.np) and executive handover.
11. Why This Platform Over BPC’s Current Setup
- Governance over Publishing: Generic CMS tools publish web pages; this system governs compliance, enforces separation of duties, and records immutable evidence for auditors.
- Hydropower & NEPSE Native: Built specifically for MWh generation logging, capacity tracking, fiscal quarterly rollups, and SEBON disclosure timing.
- Sealed Procurement Vault: Solves the core vulnerability of unencrypted web tender submissions, protecting BPC against bid-leak allegations.
- Complete Handover: Complete source code, SQL migrations, API references, and documentation delivered to BPC IT leadership upon completion.
12. Executive Recommendation
Adopt the Advaita Governed Platform as Butwal Power Company Limited’s official digital system of record for public notices, financial reports, regulatory disclosures, project information, procurement, risk management, and generation reporting. Retain the existing web portal solely for general corporate marketing if desired.
This strategic upgrade establishes a single, accountable, and audited workflow from initial drafting to executive sign-off and public release, elevating BPC’s transparency standard to match its stature in the Nepalese energy market.
13. Next Steps
- 45-Minute Executive Walkthrough: Live demonstration of the prototype console, four-eyes Maker-Checker workflow, and Procurement Vault for CEO Uttar Kumar Shrestha, Company Secretary Hari Budhathoki, and CFO Radheshyam Shrestha.
- NDA & Security Documentation Exchange: Review of our complete security architecture document by BPC IT and internal audit.
- Discovery Workshop: Finalizing BPC role assignments, asset schemas, and statement of work.
To schedule the executive walkthrough, contact Advaita Solutions Engagement Lead at +977-01-4790000 or [email protected].
Appendix: Technical Fact Sheet for BPC IT Function
| Architecture Area | Technical Specification |
|---|---|
| Framework & UI | Next.js 16 (App Router), React 19, TypeScript, TailwindCSS Design Tokens |
| Deployment Engine | Cloudflare Workers via OpenNext (Serverless Edge Delivery) |
| Database & Security | Supabase PostgreSQL with Row-Level Security (RLS) & Supabase Auth AAL2 MFA |
| Object Storage | Cloudflare R2 with SHA-256 integrity metadata & path sanitization |
| State & Checkpoints | Upstash Redis (Dedicated instances for Rate Limiting & Audit Ledger Checkpoints) |
| Governance Engine | Database-level triggers & application state machine enforcing Maker ≠ Approver |
| Audit Ledger | Cryptographically chained HMAC-SHA256 write-once ledger |
| Encryption Standard | Client-Side AES-256-GCM for financial bid envelope encryption |
| Automation Crons | Scheduled disclosure release every 5 minutes; risk escalation daily at 00:00 UTC |