2-MANDATORY MINIMUM REQUIREMENTS.docx
DOCX document 16 KB Posted
- Attached to
- Child Nutrition Software
- Solicitation number
- WCSD-MH-006
- Issued by
- Washington County, Utah
About this file
This is a Mandatory Minimum Requirements document for a Child Nutrition Software RFP issued by Washington County School District (WCSD) in Utah. The district seeks to procure a comprehensive School Nutrition Management Software System to replace its legacy environment across 50 school sites. The contract is anticipated to be a single award to the highest-scoring responsive and responsible vendor, with a term of 5 years. The vendor must guarantee pricing for 60 days to allow for evaluation and contract award.
The mandatory minimum requirements establish critical technical and compliance standards for all proposers. The system must integrate bi-directionally with PowerSchool SIS via API or SFTP, support real-time financial synchronization to parent views, and function fully in Chrome browser on Windows 11, macOS, and ChromeOS devices. Proposers must demonstrate compliance with FERPA, COPPA, HIPAA, PCI DSS, and the Utah Student Data Privacy Act, including signing the Utah NDPA and WCSD Data Privacy Agreement. Cybersecurity requirements mandate compliance with a recognized framework, TLS 1.2 or higher encryption in transit, and submission of a SOC 2 Type II report or third-party penetration test executive summary from within the past 12 months. The system must be USDA-approved for Nutrient Analysis and meet all 7 CFR requirements. Additionally, proposers must demonstrate successful data migration experience from the legacy systems (PCS Revenue Control, Nutrikids), provide SSO options via SAML 2.0 or OIDC with Google Workspace integration, and commit to providing full data export in CSV or SQL format with a Certificate of Data Destruction upon contract termination.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| 3-TECHNICAL REQUIREMENTS.docx | DOCX document | |
| 1-RFP CHILD NUTRITION SOFTWARE.docx | DOCX document |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
MANDATORY MINIMUM REQUIREMENTS
· System Integration: Must provide automated, bi-directional integration with PowerSchool SIS via API or SFTP.
· Real-Time Financial Sync: Must support Real-time sync of meal account balances to the PowerSchool SIS parent view.
· Platform Compatibility: As a Google District, the system must be fully supported in the Chrome browser and function on Windows 11, macOS, and ChromeOS (Chromebooks).
· Privacy & Compliance: Proposer must be fully compliant with FERPA, COPPA, and HIPAA regulations. Proposer must sign the Utah NDPA and be fully compliant with the Utah Student Data Privacy Act, U.C.A. §53E-9-3, and all other applicable state regulations.
· Cybersecurity: The proposer must follow and demonstrate compliance with a recognized and credible cybersecurity framework. Data must be encrypted in transit using TLS 1.2 or higher. Proposer must provide a summary of their most recent SOC 2 Type II report or a third-party penetration test executive summary performed within the last 12 months.
· PCI Compliance: Proposer must be fully compliant with PCI DSS.
· Data Privacy & Security: Proposer must agree to and sign the WCSD Data Privacy Agreement. The standard agreement can be found at: http://go.washk12.org/NDPA. Proposers must be fully compliant with FERPA, COPPA, and HIPAA.
· USDA Compliance: System must be currently USDA-approved for Nutrient Analysis and must meet all 7 CFR requirements.
· Data Migration: Proposer must demonstrate a successful history of migrating data from PCS Revenue Control (WebPOS/RightNOW, ApplyNow, PayPams) and Nutrikids.
· Single Sign-On (SSO): Provider must provide SSO options via SAML 2.0 or OIDC (specifically Google Workspace integration) for administrative and staff access.
· Data Export: Upon contract termination, the Proposer must provide WCSD with a full data export in a flat-file format (CSV or SQL) at no additional cost. The Proposer must also provide a Certificate of Data Destruction confirming all District data has been purged from their systems.
File details come from the government source that posted it. Updated .