ATTCHMENT I Deviation Form -Commonwealth Response RFP 758 2000000273.xlsx

This is a Vendors' Deviation Form for Commonwealth Response RFP 758 2000000273, documenting proposed deviations from the stated requirements in the Request for Proposals. The form identifies three key areas where vendors have proposed alternatives to Commonwealth requirements: Section 508 compliance standards for user interfaces, source code ownership provisions, and PCI compliance liability scope. The RFP addresses technical requirements distributed across multiple sections and pages, including requirements for Web Content Accessibility Guidelines (WCAG) 1.0 conformance at Double-A level or greater for all user interfaces, software development provisions, and vendor liability assumptions related to Payment Card Industry compliance standards.

The Commonwealth has indicated that it cannot accept any of the proposed deviations submitted by vendors. For the Section 508 compliance requirement on page 6 of the RFP, the Commonwealth maintains its position that all user interfaces must meet the specified WCAG standards. Regarding the software development provision on page 8, the Commonwealth requires that source code developed outside the vendor's platform for integration purposes becomes Commonwealth property, and the vendor's proposed alternative giving the vendor sole ownership of all source code is not acceptable. For the PCI compliance liability issue referenced on pages 21 and 22, the Commonwealth has requested clarification on the scope of vendor liability before making a final determination, but has preliminarily indicated it cannot accept the vendor's proposed alternative language pending further understanding of the compliance obligations.