5-SOW - Postman.pdf

ATTACHMENT A – STATEMENT OF WORK (SOW)

PR 35171592

A. BACKGROUND / PURPOSE

The Superior Court of Los Angeles County (“Court”) requires an enterprise‑grade API development and management platform to support its software development lifecycle and ensure consistent governance of integration services across Court Technology Services (CTS).

Postman is an industry‑leading platform used for designing, developing, testing, documenting, monitoring, and managing Application Programming Interfaces (APIs). It supports major API protocols including:

• REST (Representational State Transfer) – the most common architectural style for web APIs

• GraphQL – a query‑language‑based API protocol providing efficient, flexible data retrieval

• MCP (Model Context Protocol) – an emerging API protocol supporting AI‑driven workflows and integrations

The Postman Enterprise platform will allow Court developers to manage the Court’s integration endpoints with visibility, version control, policy governance, SSO‑based access management, and monitoring tools. CTS leadership will gain oversight to ensure API lifecycle governance, security, and compliance with Court standards.

strategy.

B. DETAILED DESCRIPTION OF GOODS AND/OR SERVICES NEEDED

The vendor shall provide a Postman Enterprise annual subscription for twenty-five

(25) users, which includes full administrative, user, and governance capabilities;

access to the Postman Enterprise workspace, API repository, collections, collaboration features, runtime environments, mock servers, monitors, and documentation tools; and enterprise-level access controls and policy enforcement.

C. APPLICABLE STANDARDS/LEGAL REQUIREMENTS CONTRACTOR MUST ABIDE

The Vendor must comply with the following Court requirements:

a.) SOC 2 Compliance The system must maintain SOC 2 Type II certification to demonstrate controls related to security, availability, confidentiality, and processing integrity.

b.) Data Protection Requirements Court data must not be used to train AI or machine learning models. Vendor must provide written confirmation of compliance upon request.

c.) General Security Requirements

• All data must remain within approved regions.

• All data in transit and at rest must be encrypted using industry standard encryption.

• Vendor must notify the Court of any material security incidents impacting the service.

D. SUBSCRIPTION TERM

• Start Date: June 1, 2026

• End Date: May 31, 2027

• Term Length: 12 Months

E. DELIVERABLES SCHEDULE

Deliverable Description Due Date Delivery Location

Access to Platform

Provision of production‑ready Postman Enterprise environment with 25 licensed users and administrative access

Upon contract execution or as otherwise agreed by Court

Remote

F. PRODUCT AND/OR SERVICE WARRANTIES

Vendor shall provide:

• Service uptime of 99.9%, excluding scheduled maintenance windows

• Service performance consistent with published Postman Enterprise SLA standards

G. SUPPORT AND MAINTENANCE REQUIREMENTS

Vendor shall provide:

• Support Availability: Minimum 24x5 technical support coverage

• Access to Enterprise Support Channels: Email, portal, knowledge base

• Bug Fixes and Updates: Continuous platform improvements provided at no additional cost.

H. CONTRACTOR’S RESPONSIBILITIES

Vendor must:

• Provide enterprise software subscription licenses for 25 users

• Provide configuration assistance as needed to onboard Court teams

• Provide technical support for the duration of the contract

• Integrate the platform with the Court’s SSO identity management system

• Maintain compliance with all standards listed in Section C

I. COURT’S RESPONSIBILITIES

The Court will:

• Provide the necessary access and configuration details for the Court’s Entra ID tenant, which Postman will integrate with via Single Sign‑On (SSO).