ESBD_477340_1765991056514_SOL_PST_RFP_25R0016515.pdf

DEPARTMENT OF PUBLIC SAFETY OF THE STATE OF TEXAS

SOLICITATION NO.

405-25R0016515

TYPE OF SOLICITATION

NEGOTIATED - REQUEST FOR

PROPOSAL (RFP)

DATE ISSUED

12/17/2025

GENERAL AVIATION SERVICES

Vendor must submit electronic responses no later than 5:00 P.M. Central Time on 01/28/2026 to the following address or via the DPS Online Bid Room.

DPS_Solicit_Response@dps.texas.gov Attention: 405-25R0016515

DPS is not currently accepting any in-person solicitation responses. DPS will only accept electronic responses received by the date and time indicated in this document.

FOR INFORMATION CONTACT:

Heidi Davis, CTCD & CTCM

Contract Administrator

PHONE: (512) 424-5724

EMAIL: Heidi.Davis@dps.texas.gov

RESPONSE (Respondent must fully complete)

DISCOUNT FOR PROMPT PAYMENT: 10 DAYS

20 DAYS

30 DAYS

___ DAYS

NAME AND ADDRESS

OF RESPONDENT:

RESPONSE DATE

EMAIL AND TELEPHONE NO. (Include area code)

SIGNATURE OF AUTHORIZED REPRESENTATIVE*

NAME AND TITLE OF AUTHORIZED REPRESENTATIVE

CERTIFICATION, DISQUALIFICATION, AND REMEDIES

By signing this document, Vendor represents and warrants that all statements, certifications, and information submitted in response to this solicitation are true, current, complete, and accurate.

DPS may pursue and enforce any available remedies against Vendor for making false statements, including disqualifying the Vendor’s response, immediately cancelling any Contract awarded to Vendor, or recommending State of Texas debarment.

*FAILURE TO SIGN WILL DEEM THE RESPONSE NON-RESPONSIVE.

TERM, PRICING, AND FUNDING

The initial contract term commences on the date of award stated in the signing document, or purchase order and expires five (5) years from that effective date.

If necessary, at the end of the contract term, DPS reserves the right to extend continued performance of the Contract at rates specified within, by written notification to Contractor for no more than a six-month period, for the purpose of re-advertising, awarding a new Contract, or transitioning into a new Contract.

DPS will not allow changes after Date of Award to terms or pricing during Contract term. The continuation of the Contract for any period is subject to the availability of DPS’s funding source for the Contract.

Page 2 of 23 Template Approved 5/26/2022

TABLE OF CONTENTS

SECTION A—DEFINITIONS

SECTION B—SERVICES AND PRICES

B.1 PRICING REQUIREMENTS

B.2 INVOICE REQUIREMENTS

B.3 PAYMENTS

B.4 MANDATORY PRICING SCHEDULE

SECTION C - STATEMENT OF WORK

C.1 INTRODUCTION

C.2 REQUIRED SPECIFICATIONS

C.3 TRANSITION

C.4 DPS PERSONNEL

C.5 HISTORICALLY UNDERUTILIZED BUSINESSES (HUB) PARTICIPATION

C.6 INSURANCE REQUIRED UNDER THE CONTRACT

C.7 CRIMINAL HISTORY BACKGROUND CHECK

C.8 GENERAL CONFIDENTIALITY REQUIREMENTS

C.9 PERSONAL INFORMATION

SECTION D—INSTRUCTIONS, CONDITIONS, AND NOTICES TO RESPONDENTS ... 14

D.1 RESPONSE PREPARATION INSTRUCTIONS

D.2 SOLICITATION ADDENDA

D.3 LATE SUBMISSIONS, CHANGES, AND WITHDRAWALS OF RESPONSES

D.4 RESPONSE ACCEPTANCE PERIOD

D.5 CONTRACT AWARD

D.6 DPS’s RIGHTS

D.7 RESPONSE SUBMISSION INSTRUCTIONS

D.8 DISCUSSION AND CORRESPONDENCE

D.9 SUBMISSIONS SUBJECT TO THE TEXAS PUBLIC INFORMATION ACT

D.10 AGENCY POSTING OF CONTRACTS

D.11 ANTICIPATED SCHEDULE OF EVENTS

SECTION E—EVALUATION CRITERIA

SECTION F—LIST OF EXHIBITS

Page 3 of 23 Template Approved 5/26/2022

SECTION A—DEFINITIONS

The following terms and acronyms used in the Contract have the meanings given in this section unless the context indicates otherwise.

“Business Day” means Monday through Friday except for federal, state, and legal holidays observed by the State of Texas.

“Business Hours” means 8:00 a.m. to 5:00 p.m. Central Time.

“Contract” means this formal, written, and legally enforceable agreement between DPS and Contractor.

“Contractor” means the individual, business entity, or organization awarded the Contract. In the context of submitting a response, “Contractor” also means “Respondent” and “Vendor.”

“Date of Award” means the date the Contract is fully executed.

“Days” means calendar days unless otherwise specified.

“DPS” means the Department of Public Safety of the State of Texas, a state agency in the executive branch created under Tex. Gov’t Code Ch. 411.

“Fiscal Year” means any of the one year periods beginning September 1 and ending August 31 used for annual budgetary purposes by the State of Texas.

“Parties” means Contractor and DPS.

“Respondent” means the individual, business entity, or organization that submits a response in response to this solicitation with intent to contract with DPS.

“Vendor” means the individual, business entity, or organization at any stage in the procurement or contracting process (prior to response, during response, and after contract award).

Page 4 of 23 Template Approved 5/26/2022

SECTION B—SERVICES AND PRICES

B.1 PRICING REQUIREMENTS

B.1.1 Pricing Instructions

A. Respondent must submit proposed pricing on the Mandatory Pricing Schedule that includes all costs, fees, licenses, and all expenses for Contractor’s delivery and performance of the commodities or services requested. The final negotiated, contracted pricing and payment structure will represent Contractor’s sole compensation under the Contract. DPS guarantees no minimum compensation under the Contract.

B. DPS will negotiate pricing prior to award of the Contract if the pricing offered appears that it may not be best value to DPS.

C. Contractor must deliver and provide the commodities and services described in compliance with all requirements of the Contract on a no minimum, as needed, as requested basis. Notwithstanding anything else to the contrary in the Contract, DPS will not make any payments of any amount to Contractor or any other entity or person, and Contractor will not submit any invoices, until Contractor has received approval from DPS’s Contract Monitor specifically stating that DPS accepts the commodities or services and Contractor is authorized to submit an invoice. If DPS does not accept the commodities or services, the Contract will involve no payments of any type for any amount.

B.1.2 Financial Rating Report, Financial Resources, and Ability to Perform

A. Respondent must provide evidence of its financial resources and its ability to provide the commodities or perform the services for which Respondent is submitting a response.

This includes information Respondent believes is pertinent to demonstrate its financial capability, financial solvency, and capacity to fulfill the requirements of this solicitation.

B. Evidence of financial stability include providing audited financial statements for each of the last two years of Respondent’s operations or, in the alternative, financial statements compiled, reviewed and attested by an independent certified public accountant or certified public accounting firm. Respondents may submit a copy of its Dun & Bradstreet (D&B) Business Information Report. If a D&B Report is submitted the report must include Respondent’s Viability Score and the Portfolio Comparison Score or similar ratings.

C. In lieu of providing financial statements in its Proposal, a Respondent may provide a statement regarding the Respondent’s financial stability and viability to perform under any resulting contract. If Respondent elects this approach rather than audited financial statements, the Respondent must submit a statement, with appropriate supporting documentation, sufficiently detailed to demonstrate financial solvency, and to verify the capacity to fulfill the requirements of this solicitation.

Page 5 of 23 Template Approved 5/26/2022

D. Respondent must provide information and any other financial information reasonably requested by DPS consistent with the services provided by Respondent or otherwise required by the then applicable DPS policies for similar contracts.

E. Selected Contractor must also submit to the Contract Administrator its financial rating information within 120 days after the end of Contractor’s fiscal year.

F. DPS reserves the right to investigate and determine the financial integrity and responsibility of a Respondent and to reject a response on the grounds of Respondent’s lack of financial soundness, or if DPS reasonably concludes, after reviewing the information submitted by Respondent as well as all other relevant information obtained by DPS, that significant issues exist that could jeopardize Respondent’s full and timely performance. DPS also reserves this same right throughout the life of the Contract, including before executing any optional renewal with Contractor.

B.2 INVOICE REQUIREMENTS

A. Invoices are Contractor’s billing for commodities or services rendered. DPS will pay

Contractor based on itemized invoices submitted to and approved by DPS. The invoices must be itemized and clearly identify the actual commodities and services provided.

B. Contractor’s invoice must include the following: the Contract/Purchase Order number, the remittance address, and any prompt payment discount offered. Contractor must email the invoice to the Contract Monitor listed in the Contract and to apinvoices@dps.texas.gov.

The State of Texas will not incur any penalty for late payment if the invoice fails to conform to the requirements of this section or if Contractor did not email the invoice to the appropriate email addresses identified in this section.

B.3 PAYMENTS

A. DPS recommends that Vendor receive payments by electronic funds transfer (EFT), also known as direct deposit. If Vendor elects to be set up for direct deposit payment, Vendor must submit a completed Direct Deposit Authorization Form (74-176).

B. Regardless as to whether Direct Deposit is chosen, Vendor must submit a completed Application for Texas Identification Number (AP-152) and Request for Taxpayer Identification Number and Certifications Form (W-9) with its response.

C. If Vendor has previously submitted a completed Direct Deposit Authorization Form and Request for Taxpayer Identification Number and Certifications Form to DPS for another separate contract, Vendor is not required to submit another form.

B.4 MANDATORY PRICING SCHEDULE

Respondent must submit pricing within the Pricing Schedule Exhibit replicating, as necessary, in this exact format.

mailto:apinvoices@dps.texas.gov

Page 6 of 23 Template Approved 5/26/2022

SECTION C - STATEMENT OF WORK

C.1 INTRODUCTION

DPS seeks to establish an aviation services and maintenance blanket contract to aid with the increase in flight operations. The services will be provided within 30 Nautical Miles (NM) of Austin Bergstrom International Airport.

C.2 REQUIRED SPECIFICATIONS

The Respondent's proposed All-Inclusive Unit Price(s) is for the Goods and/or Services as specified in this Solicitation and shall include all labor, materials, tools, supplies, equipment, and personnel, including but not limited to, travel expenses, associated costs and incidental costs necessary to provide the products and Services according to the minimum specifications, requirements, provisions, terms, and conditions set forth in the Solicitation. The All-Inclusive Unit Prices will be used for evaluation purposes and will apply to the Contract and any amendments executed to incorporate new services and/or deliverables to the Contract. The Agency makes no guarantee of volume, usage, or total compensation to be paid to any Respondent under any awarded Contract, if any, resulting from this Solicitation.

C.2.1 Aircraft Maintenance and General Aviation Services and Supply

A. Scheduled and non-scheduled inspections and repairs of DPS fixed wing single engine, multi-engine, retractable gear, fixed gear, and both pressurized and non-pressurized turbo-propeller driven aircraft (examples would include Cessna C208, Beechcraft King Air Series, and Pilatus PC12 all series).

B. Scheduled and non-scheduled maintenance on single—and multi-engine rotary-wing aircraft (examples would include Airbus AS350/H125 aircraft, including all variants, Airbus EC-145, and Bell Heavy Lift 412).

C. Provide for the acquisition, service, and supply relative to Unmanned Aerial Systems (UAS).

NOTE: If Contractor's primary maintenance location is unavailable, DPS reserves the right to use an available contracted maintenance location to provide the required aircraft maintenance and repairs.

C.2.2 Scope of Services – Repair Facility

A. The Contractor’s repair facility must be located within a straight-line distance of 30 Nautical Miles of Austin International Airport (KAUS) of the DPS Aircraft Headquarters located at:

o Texas DPS Aircraft Headquarters Texas Department of Transportation – Flight Services 10335 Golf Course Road Austin, TX 78719

B. The Contractor’s repair center must be designated as a Federal Aviation Administration (FAA) Part 145 Repair Station. Contractor’s Repair station must be accredited with one or both of the following ratings: Airframe Class 3 & 4, and Power Plant Class 1,2,& 3.

C. The Contractor’s repair center must employ a minimum of twenty-five (25) FAA licensed Airframe and Powerplant (A&P) license holders and have at least one (1) Authorized Inspection personnel on staff. The Inspection personnel may hold an Inspection

Page 7 of 23 Template Approved 5/26/2022

Authorization issued by the Repair Station in Accordance with their Repair Station Quality Control Manual (RSQM) or hold an Inspection Authorization (IA) issued by the FAA.

D. Contractor’s normal business hours will be no less than Monday through Friday, 8:00 am to 5:00 pm Central Time, with the ability to conduct after-hours maintenance when required.

The Contractor must have a minimum of one regularly scheduled after-hours shift per week.

E. Contractor’s repairs, scheduled inspections, and non-scheduled inspections must be completed in accordance with the OEM service manuals and FAA regulations.

F. The Contractor must provide with its response, documentation to confirm the Contractor has completed a minimum of seventy (70) maintenance work orders on aircraft of similar type and class as the aircraft outlined in this document. Documentation must be in the form of work orders.

G. If awarded, Contractor must maintain work records for a minimum of three (3) years from the date of contract expiration or termination.

H. The Contractor must maintain a library of required maintenance publications specific to the type of aircraft being maintained or inspected.

I. The Contractor must have access to an aircraft-grade paint booth facility with full paint mixing capability within at least one hundred (100) nautical miles of the Contractor’s facility.

J. Contractor must possess appropriate tooling to conduct law-enforcement mission-specific equipment and repairs. Examples include calibrated crimpers for coax terminations, D-Sub pins and sockets, test equipment for post installation functional checks.

K. Contractor must have at least one Commercial/Instrument Rated pilot on staff, or available by sub-contract, who with the approval of DPS on a case by case basis, can complete maintenance runs and test flights. Approval must be obtained by DPS for each case.

L. Contractor must have on staff or available by sub-contract Specialty Aviation Services that have specific training and experience in areas such as:

o Propulsion o Acoustics o Aerodynamics o Acoustical o Fabrication

M. Contractor must provide for the acquisition of commercial and non-commercial aviation supplies related to UAS in both commercial grade and custom application, upon request (Examples would include brands such as Skydio, DJI, Autell, etc. for items such as spare parts, batteries, hand-controllers, etc.).

C.2.3 Scope of Services – Parts and Equipment:

A. All parts, equipment, and necessary materials and supplies must comply with FAA regulations and must meet or exceed the OEM specifications.

B. DPS will consider the use of aftermarket, refurbished, or overhauled replacement parts when it’s in the best interest of the State of Texas and flight safety is not compromised.

C. Aftermarket, refurbished, overhauled, or PMA parts must meet the OEM specifications and must be approved by the FAA.

Page 8 of 23 Template Approved 5/26/2022

D. The use of aftermarket, refurbished, overhauled, or PMA parts are allowed with express, prior, and written approval by the DPS Chief Pilot or his authorized representative (Assistant Chief Pilot and the DPS Aviation Maintenance Officer)

E. Upon request, Contractor must provide proposals within this scope of work to be completed as outlined by DPS for aircraft modifications or engine replacements.

F. All equipment supplements must be made in writing, mutually agreed upon, and signed by Contractor and DPS.

G. Contractor must supply with bid, a cost plus percentage markup from cost for all parts.

Contractor must provide any and all supporting documentation to DPS’s satisfaction for the items and how costs are calculated. Markup percentage must remain constant throughout the contract term.

C.2.4 Scope of Services – General Aviation Services and Support

A. Aircraft Storage Capacity—The contractor must have a minimum of 20,000 square feet of hangar storage space for short—and long-term rental. Short-term rental is classified by a weekly rate, and long-term rental is classified by a monthly rate.

B. Aircraft Leasing Capacity—The Contract must have the capacity to lease aircraft for short— and long-term leasing at the discretion of DPS. Short-term aircraft rentals are classified by a weekly rate, while long-term rentals are classified by a monthly rate.

C. Contractor facility must have a full-service Fixed Base Operation (FBO) that is co-located on the airfield with access to aviation fuel (Jet-A and AvGas 100LL) 24 hours a day, 7 days a week. Fuel must be billed on a cost plus mark-up per gallon basis.

D. Contractor must possess the capability for on-demand charter service and be equipped for roll-on and roll-off customer-supplied police mission equipment. This service would be quoted after specs and requirements are provided by DPS, then mutually agreed on. The on-demand service would only be conducted using single and multi-engine turbine powered aircraft with mutually agreed upon alert and notice times.

E. All equipment, shop supplies, oil, grease, and materials otherwise necessary to complete the services described herein must be included in the service cost.

C.2.5 Scope of Services – General Aviation Services and Support

A. Additional services that become available during the life of the contract will be considered on a case-by-case basis and approved at DPS’s discretion.

C.3 TRANSITION

In the event that DPS awards a subsequent competitive solicitation to a new contractor or if DPS decides to perform the work itself, Contractor must work with DPS and any new contractor to smoothly and seamlessly transition the contract. Contractor will develop a transition plan upon request by DPS. DPS must approve the transition plan before implementation. DPS will not release the final invoice until Contractor returns all Work to

DPS.

C.4 DPS PERSONNEL

Page 9 of 23 Template Approved 5/26/2022

C.4.1 DPS’s Contract Administrator

A. The Contract Administrator for administration of the Contract is Heidi Davis.

B. The telephone number for the Contract Administrator is 512-424-5724.

C. The email address is Heidi.Davis@dps.texas.gov.

The Contract Administrator is the representative of DPS’s Procurement and Contract Services responsible for the general administration of the Contract, negotiation of any changes, and issuance of written amendments to the Contract.

If DPS and Contractor agree to amend the Contract, DPS will issue a written amendment signed by authorized signatories of the Parties.

C.4.2 DPS’s Contract Monitor

A. The Contract Monitor for the Contract is Analisa Resendez.

The Contract Monitor is not authorized to make any representations or commitments of any kind on behalf of DPS or the State of Texas outside of contractual authority.

C.5 HISTORICALLY UNDERUTILIZED BUSINESSES (HUB) PARTICIPATION

A. An Historically Underutilized Business (HUB) is a business that is certified by the State of Texas that (1) is at least 51% owned by an Asian Pacific American, a Black American, a Hispanic American, a Native American, an American woman, or a Service Related Disabled Veteran; (2) is a for-profit entity that has not exceeded the size standards established by 34 Tex. Admin. Code § 20.294, and has its principal place of business in Texas; and (3) has an owner residing in Texas who has a proportionate interest in the business and who actively participates in the control, operations and management of the entity’s affairs. See also 34 Tex. Admin. Code § 20.282.

B. Contractor must make a good faith effort to comply with all state HUB requirements under Tex. Gov’t Code Chapter 2161 and the administrative rules, as applicable.

Contractor must also comply with its approved HUB Subcontracting Plan (HSP).

C. Vendor must submit an HSP as part of its response and must comply with implementation of the HSP. Contractor must seek written approval from DPS prior to making any modifications to its HSP. Respondent must submit a complete HSP and required forms with the response. Respondent’s response will be considered non-responsive if the agency forms are not completed in full or are missing from Respondent’s original response.

D. Vendor must provide notice to all subcontractors on their approved HSP of their selection as a subcontractor for the Contract. The notice will specify, at a minimum, DPS’s name, the HUB Office, the Contract’s assigned contract number, the subcontracting opportunity the subcontractor will perform, the approximate dollar

Page 10 of 23 Template Approved 5/26/2022 value of the subcontract, and the expected percentage of the Contract’s total value that the subcontract represents. A copy of the notice will be provided to the HUB Office and the Contract Administrator no later than ten business days after the effective date of the Contract.

E. Contractor must submit to the Contract Administrator on a monthly basis (by the fifth day of the following month) the Prime Vendor Progress Assessment Report.

C.6 INSURANCE REQUIRED UNDER THE CONTRACT

Unless otherwise specified in this Contract, DPS’s Standard Terms and Conditions or any other exhibit or attachment, Contractor will acquire and maintain, for the duration of this Contract, insurance coverage, specified below, to ensure this Contract’s proper performance and cover any potential liabilities with financially sound and reputable insurers licensed by the Texas Department of Insurance, in the type and amount customarily carried within the industry or as determined by DPS. Contractor will provide evidence of insurance upon request by DPS.

If any policy is determined by DPS to be deficient and does not comply with the terms of this Contract, Contractor will secure such additional coverage as required by DPS, law, regulation, or customary practice. If coverage expires during the term of this Contract, Contractor must produce renewal certificates for each type of coverage.

Minimum Required Amounts of Insurance Coverage Type of Insurance Each Occurrence/Aggregate Commercial General Liability (occurrence based)

Bodily Injury and Property Damage $5,000,000 Each Occurrence Limit $2,000,000 Aggregate Limit $2,000,000 Products/Completed Operations Aggregate Limit $5,000,000 Personal Injury and Advertising Liability $50,000 Damage to Premises Rented $5,000 Medical Payments

C.7 CRIMINAL HISTORY BACKGROUND CHECK

A. Contractor’s project personnel must submit to a fingerprint-based Criminal History Background Investigation, at Contractor’s expense. To facilitate this Criminal History Background Investigation, each person must complete DPS Contractor Background Information form (HR-22), which DPS will provide.

B. If required under the Contract, Contractor will not allow personnel who have not submitted to and successfully completed DPS fingerprint-based Criminal History Background Investigation and who do not otherwise maintain a DPS security clearance to work on the Contract. DPS has the right to prevent Contractor’s personnel from gaining access to DPS building(s) and computer systems if DPS determines that such

Page 11 of 23 Template Approved 5/26/2022 personnel do not pass the background check or fail to otherwise maintain DPS security clearance.

C. When required, Contractor’s Project Manager will provide the following to the DPS Contract Monitor no later than ten days of executing the Contract:

a) the completed Contractor Background Information form (HR-22) for all proposed personnel; and

b) acceptable fingerprints for all proposed personnel.

D. Throughout the term of the Contract, DPS may require Contractor personnel to submit to an annual DPS fingerprint-based Criminal History Background Investigation to DPS.

E. Throughout the term of the Contract, Contractor will promptly notify DPS of any activity or action by Contractor’s personnel that may affect that individual’s ability to continue to work under the Contract.

C.8 GENERAL CONFIDENTIALITY REQUIREMENTS

A. All information provided by DPS to Contractor, created by Contractor, or overheard, seen, or otherwise obtained by Contractor in performing the obligations under the Contract is confidential and may not be used by Contractor or disclosed to any person or entity, unless such use or disclosure is required for Contractor to perform work under the Contract. The requirements in this section also apply to subcontractors. The obligations of this section do not apply to information that Contractor can demonstrate:

1) Is publicly known at the time of disclosure or subsequently becomes publicly known through no fault of Contractor;

2) Contractor discovered, learned, or created independently by Contractor or by a rightfully possessing and disclosing third party or by any other legitimate means;

3) Is required to be disclosed by law or final order of a court of competent jurisdiction or regulatory authority, but Contractor must furnish prompt written notice of such required disclosure and will reasonably cooperate with DPS at DPS’s cost and expense, in any effort made by DPS to seek a protection order or other appropriate protection of its confidential information.

B. Contractor must notify DPS in writing of any unauthorized release of confidential information within four hours of when Contractor knows or should have known of such unauthorized release.

C. Contractor must notify affected parties in writing of any unauthorized release of confidential information within two business days of when Contractor knows or should have known of any unauthorized release of confidential information obtained from affected parties.

Page 12 of 23 Template Approved 5/26/2022

D. Contractor must maintain all confidential information in confidence during the term of the Contract and after the expiration or earlier termination of the Contract.

E. If Contractor has any questions or doubts as to whether particular material or information is confidential information, Contractor must obtain the prior written approval of DPS prior to using, disclosing, or releasing such information.

F. Contractor acknowledges that DPS’s confidential information is unique and valuable, and that DPS may have no adequate remedy at law if Contractor does not comply with its confidentiality obligations under the Contract. Therefore, DPS will have the right, in addition to any other rights it may have, to seek in any Travis County court of competent jurisdiction temporary, preliminary, and permanent injunctive relief to restrain any breach, threatened breach, or otherwise to specifically enforce any confidentiality obligations of Contractor if Contractor fails to perform any of its confidentiality obligations under the Contract.

G. Contractor must immediately return to DPS all confidential information when the

Contract terminates, at such earlier time as when the confidential information is no longer required for the performance of the Contract or when DPS requests that such confidential information be returned.

H. Information, documentation, and other material in connection with the Contract, including Contractor’s response, may be subject to public disclosure under the Tex.

Gov’t Code Chapter 552.

C.9 PERSONAL INFORMATION

To the extent this subsection does not conflict with the section entitled “General Confidentiality Requirements,” Contractor must comply with both sections. To the extent this subsection conflicts with the section entitled “General Confidentiality Requirements,” this section entitled “Personal Information” controls.

A. “Personal identifying information” and “Sensitive personal information” are defined by

Tex. Bus. & Com. Code Ch. 521. Both are classified as personal information for purposes of this section.

B. Personal information does not include publicly available information that is lawfully made available to the public from the federal government or a state or local government.

C. “Breach of system security” is defined as follows: Unauthorized acquisition of computerized data that compromises the security, confidentiality, or integrity of personal information Contractor maintains under the Contract, including data that is encrypted if Contractor’s employee or agent accessing the data has the key required to decrypt the data. Good faith acquisition of personal information by an employee or agent of Contractor for the purposes of performing under the Contract is not a breach of system security unless the employee or agent of Contractor uses or discloses the personal information in an unauthorized manner.

Page 13 of 23 Template Approved 5/26/2022

D. Contractor must implement and maintain reasonable procedures, including taking any appropriate corrective action, to protect from unlawful use or disclosure any personal information collected or maintained by Contractor under the Contract.

E. Contractor must notify DPS and affected parties of any breach of system security immediately after discovering the breach or receiving notification of the breach, if personal information was, or is reasonably believed to have been, acquired by an unauthorized person. However, Contractor must delay providing notice to the affected parties at DPS’s request, if DPS determines that the notification will impede a criminal investigation. Notification to the affected people may be made as soon as DPS determines that it will not compromise any criminal investigation.

F. Contractor must give notice as follows, at Contractor’s expense:

1) Written notice;

2) Electronic notice, if the notice is provided in accordance with 15 U.S.C. Section 7001;

3) Notice as follows:

a) If Contractor demonstrates that the cost of providing notice would exceed $250,000, the number of affected people exceeds 500,000, or Contractor does not have sufficient contact information for the affected people, Contractor may give notice as follows:

i. Email, if Contractor has an email address for the affected people;

ii. Conspicuous posting of the notice on Contractor’s website;

iii. Notice published in or broadcast on major statewide media; or

b) If Contractor maintains its own notification procedures (as part of an information security policy for the treatment of personal information) that comply with the timing requirements for notice under this subsection entitled “Personal Information,” Contractor may provide notice in accordance with that policy.

G. If this subsection requires Contractor to notify at one time more than 10,000 people of a breach of system security, Contractor must also notify, without unreasonable delay, each consumer reporting agency (as defined by 15 U.S.C. Section 1681a) that maintains files on consumers on a nationwide basis, of the timing, distribution, and content of the notices.

H. In the event of a breach of system security, if personal information was, or is reasonably believed to have been, acquired by an unauthorized person, DPS, an agency of the State of Texas, may assess and enforce, as applicable and without limitation, cyber insurance coverage requirements, indemnification, duty to defend, liquidated damages, actual damages, sanctions, rights, claims, remedies and other amounts against Contractor in accordance with the contract that includes these Cyber Security Contract Requirements, Page 14 of 23 Template Approved 5/26/2022 and in accordance with other applicable law. Contractor understands that there may be constitutional and statutory limitations on DPS to enter into certain terms and conditions of the contract that includes these Cyber Security Contract Requirements and that any such terms and conditions will not be binding on DPS except to the extent authorized by the laws and constitution of the State of Texas.

I. Liquidated Damages may be assessed under this section in the amount of the per capita data breach cost for public sector (government) records as listed in the current Ponemon Institute Research Report Cost of Data Breach Study: United States. The number of affected records will be determined at the time of breach, with a not to exceed Liquidated Damages Cap of 100% of the total contract value.

The Ponemon Institute Research Report Cost of Data Breach Study: United States may be found at: http://www-03.ibm.com/security/data-breach/.

J. Contractor will not be responsible and liquidated damages may not be assessed due to a breach of system security caused entirely by someone other than Contractor, Contractor’s subcontractor, or Contractor’s agent. (This provision is not to be interpreted that Contractor is absolved of liability with any other sections pertaining to cyber security or data protection).

K. Any liquidated damages assessed under the Contract may, at DPS’s option, be deducted from any payments due Contractor. DPS has the right to offset any liquidated damages payable to DPS, as specified above, against any payments due to Contractor. If insufficient payments are available to offset such liquidated damages, then Contractor will pay to DPS any remaining liquidated damages within 15 days following receipt of written notice of the amount due.

SECTION D—INSTRUCTIONS, CONDITIONS, AND NOTICES TO RESPONDENTS

D.1 RESPONSE PREPARATION INSTRUCTIONS

A. These instructions are designed to help ensure the Respondent submits all relevant information in its response

B. Responses must be prepared in accordance with these instructions providing all required information in the format specified.

C. Failure of a response to show compliance with these instructions and submit all documentation may be grounds for considering the response non-responsive unless stated otherwise within this solicitation.

D. Responses must use a sans serif 12-point font (such as Arial or Calibri) on an 8-1/2” x 11” format (except for graphic information being requested). Respondent’s response must be paginated, contain a full table of contents, and have component sections clearly identified.

http://www-03.ibm.com/security/data-breach/

Page 15 of 23 Template Approved 5/26/2022

E. DPS must receive responses no later than the deadline established in this solicitation and submitted to the submission email or DPS Online Bid Room listed on page 1.

F. Respondent must ensure that its response is clearly labeled.

G. Respondent must submit only material directly pertinent to the requirements of this solicitation. Extraneous narrative, elaborate brochures, uninformative public relations material, and other similar documents may not be submitted.

H. Respondent must submit all pertinent information directly within its response, information submitted as an internet link is considered non-responsive. Respondent must submit documentation or information within the response.

D.2 SOLICITATION ADDENDA

A. No later than the established solicitation deadline, Respondents must acknowledge receipt of all solicitation addenda by signing and returning the addenda, identifying the addenda number and date.

B. Respondent’s failure to timely acknowledge addenda may subject its response to rejection.

D.3 LATE SUBMISSIONS, CHANGES, AND WITHDRAWALS OF RESPONSES

A. DPS will not consider any response received at the designated email address or DPS Online Bid Room after the specified date and time.

B. Respondent cannot amend its response and DPS will not accept an amended response after closing date and time. If Respondent wants to amend its response, Respondent must amend prior to the closing date and time.

C. Respondent must clearly identify any alterations made before closing time through its authorized representative.

D. Alterations made before closing time will be initialed by Respondent or its authorized representative.

E. No responses can be withdrawn after closing date and time without approval by DPS.

Should a Respondent, after closing time, request its response be withdrawn, Respondent must email the request to the Contract Administrator listed in the solicitation.

F. DPS is not responsible for submissions delivered to DPS after the date and time stated on page 1 of this solicitation or as updated in any addendum. It is the Respondent’s responsibility to ensure that it submits, and that DPS receives, its complete response timely. DPS recommends that Respondent submit their complete response well in advance of the due date and time.

Page 16 of 23 Template Approved 5/26/2022

G. DPS takes no responsibility for electronic responses that are captured, blocked, filtered, quarantined, or otherwise prevented from reaching the proper destination server by any DPS anti-virus or other security software. Therefore, DPS recommends confirming receipt.

H. Submission via the DPS Online Bid Room will receive submission confirmation through the system. If confirmation is received through the DPS Online Bid Room, no additional confirmation of receipt is required.

D.4 RESPONSE ACCEPTANCE PERIOD

A. All responses will be valid for 180 days after the solicitation opening date and will constitute an irrevocable response to DPS for the 180-day period.

B. Such period may be extended beyond the 180 days upon mutual written agreement of both parties.

D.5 CONTRACT AWARD

DPS may award one or more Contract resulting from this solicitation to the responsible Respondent, whose response is best value under the evaluation criteria in this solicitation.

D.6 DPS’S RIGHTS

A. DPS may:

1. reject any or all responses if such action is in the public interest;

2. accept other than the lowest priced response; and

3. waive minor informalities and minor irregularities in responses received.

B. Waiver of deviations in any response will not constitute a modification of this solicitation and will not preclude DPS from asserting all rights against Respondent for failure to fully comply with all terms and conditions of this solicitation. Copyrighted responses are unacceptable and are subject to being considered non-responsive. DPS reserves the right to make any corrections or include additional requirements in the resulting contract prior to issuance which are necessary for DPS compliance, as an agency of the State of Texas, with all state and federal requirements. DPS reserves the right to consider any response non-responsive which asserts any copyright on any DPS-created form which is specifically designated by this solicitation to be a form that will be completed and included in a response submitted in response to this solicitation.

C. DPS reserves the right to reject any one response or all responses or portions of responses submitted in response to this solicitation.

D. Except as described in Section D.9, the submission of a response has the effect of waiving proprietary rights or confidentiality.

Page 17 of 23 Template Approved 5/26/2022

E. All responses and any content provided by the Respondent are considered the property of DPS for use for the life of any resulting contract as determined by DPS with respect to the scope of the project.

F. DPS is not liable for any costs or damages that may be incurred by Respondents or in the preparation, formulation, or presentation of a response.

G. In case of ambiguity or lack of clarity, DPS may adopt such interpretations as may be advantageous to DPS.

H. DPS reserves the right to withdraw this solicitation at any time for any reason.

I. DPS reserves the right to award no contract and to solicit additional responses at a later time.

J. DPS incurs no obligation regarding this solicitation unless and until a contract is fully executed by the parties. However, all responses received by DPS will remain confidential until the evaluation process is complete.

K. DPS will not hold a public response opening event.

D.7 RESPONSE SUBMISSION INSTRUCTIONS

D.7.1 Volume One – Contract Forms and Required Response Information

This section will contain the following completed contract sections with authorized representative signatures, where applicable:

A. Solicitation, page 1 (with any signed addenda)

B. Information and Certifications Form;

C. Financial Rating and Solvency Information, if applicable;

D. A Redacted Solicitation and Contract response, if applicable;

E. Direct Deposit Authorization Form (74-176), completed if choosing direct deposit as a possible payment option;

F. Request for Taxpayer Identification Number and Certifications (W-9);

G. Application for Texas Identification Number (AP-152); and

H. Documentation from the appropriate state entity that indicates that Respondent is properly certified to conduct business in the State of Texas (e.g., The Certificate of Existence from the Texas Secretary of State and the Certificate of Account Status from the Comptroller of Public Accounts).

D.7.2 Volume Two – Information Section

Page 18 of 23 Template Approved 5/26/2022

A. Cover Page: List name and address of Respondent, date of response, solicitation identifier, and signature of authorized official.

B. Introduction: Clear expression of who Respondent is, to include an outline of organizational capabilities, goals, project management process approach, business process management design, other previous accolades, and a listing of all subcontractors.

C. Information Sheet: Including all information required of Respondent and any subcontractors.

1. Name and address (including telephone number) of Respondent and all subcontractors.

2. Business form of Respondent and its subcontractors (e.g., corporation, partnership).

3. Date and state of incorporation.

4. Names and addresses of principal officers, directors, or partners.

5. Names and licenses/certifications with years of experience of key personnel.

D. Respondent must identify and provide in its response a minimum of three references relating to past contracts or projects that are similar in size and scope. Respondent must provide, at a minimum, the name, email address, phone number, and title for each reference provided. Additionally, Respondent must provide project begin and end dates, brief descriptions of deliverables, overall costs, and scope of work performed.

E. Organizational, biographical, and Financial Rating information for the Respondent and all proposed third-parties and subcontractors, if applicable.

F. Project Schedule and Plan: A plan detailing how Respondent will deliver the commodities and fully implement the services required in Section C.

G. Respondent must specifically address, within its response, the requests for information as detailed throughout this solicitation. Respondent is responsible for ensuring that all such information is included within its response.

H. Respondent is encouraged to provide a response narrative for each section and subsection, in the format in which requirements are presented, in sufficient detail to clearly demonstrate Respondent’s compliance with all requirements of this solicitation, both technical and administrative. Supplemental justification or documentation can be provided as attachments. Respondent must ensure that all material submitted should be directly pertinent to the requirements of this solicitation and will be formatted as to the specific requirement as delineated in this solicitation.

I. Electronic and Information Resources (EIR) Accessibility. Respondent must provide documentation of the voluntary product accessibility template (VPAT) Voluntary Product Accessibility Template (VPAT^™) | Section508.gov (including accessibility conformance reports or vendor accessibility development services questionnaire as applicable) and Section 508 and EIR compliance for all components of https://www.section508.gov/sell/vpat/ https://www.section508.gov/sell/vpat/

Page 19 of 23 Template Approved 5/26/2022 the proposed goods or services. See Tex. Gov’t Code Chapter 2054, Subchapter M; 1 Tex. Admin. Code Chapter 213; and 1 Tex. Admin. Code Chapter 206; and WCAG 2.0 AA (current and as subsequently amended). VPAT is a vendor-generated statement (using the required template) that provides relevant information on how a vendor’s product or service claims to conform to the Section 508 Standards.

J. Business Continuity and Disaster Recovery Plan. Respondent must submit, with its response, descriptions of its business continuity and disaster recovery plan and processes. If DPS awards a Contract under this solicitation, Contractor must submit, within ten days from Contract award, its plans regarding how Respondent will protect DPS’s vital state records throughout the life of the Contract and for any record retention period required beyond the life of the Contract. The plans must include specific actions Contractor will take to meet DPS’s essential function recovery times and the related artifacts for the methodologies, tests, and exercises used to validate its business continuity and disaster recovery plan. DPS may reasonably require Contractor to amend its business continuity and disaster recovery plan (based on DPS’s dependence or necessity on the particular good or service).

K. Assumptions. No assumptions should be included in a response. All issues or questions that might be advanced or addressed by way of assumption should be submitted to DPS. The inclusion of assumptions in a proposal may result in a Respondent not being awarded a contract.

L. Exceptions. If Respondent has exception requests to the DPS Standard Terms and Conditions, these exceptions must be submitted on the Vendor Exceptions Form.

D.7.3 Volume Three – HUB Subcontracting Plan (HSP)

Respondent must provide a completed HSP as required.

NOTE: Failure to submit the HUB Subcontracting Plan, if applicable, with the appropriate forms will subject Respondent’s response to rejection from further consideration.

D.7.4 Volume Four – Cost and Pricing Response

Respondent must provide pricing in the required Mandatory Pricing Schedule format.

D.8 DISCUSSION AND CORRESPONDENCE

A. Respondent must communicate and ask questions concerning this solicitation, including any of a technical nature, in writing only to the Contract Administrator listed on page 1 or via the DPS Online Bid Room and in accordance with any required deadlines.

B. DPS will provide written responses to the questions.

C. Respondent should rely only on the written information provided in this manner.

Respondent is specifically cautioned against relying on any oral information.

http://www.w3.org/TR/WCAG20/

Page 20 of 23 Template Approved 5/26/2022

D. Respondent is specifically prohibited from making contact with any DPS personnel other than the Contract Administrator involved in this solicitation or via the DPS Online Bid Room for discussing its responses. The only exception is if the Respondent has questions regarding proper completion of the HSP, the HUB coordinator listed on the HSP may be contacted with a copy to the Contract Administrator.

E. The responsiveness of each response will be evaluated upon the written instructions provided by throughout this solicitation and as described in Evaluation Criteria.

F. Unauthorized contact with DPS personnel by any Respondent may result in DPS considering Respondent’s response non-responsive in its entirety.

D.9 SUBMISSIONS SUBJECT TO THE TEXAS PUBLIC INFORMATION ACT

DPS is a governmental body subject to the Texas Public Information Act (PIA), Tex. Gov’t Code Chapter 552. The response and other information submitted to DPS by Respondent are subject to release as public information by DPS. The response and other submitted information is presumed subject to disclosure unless a specific exception to disclosure under the PIA applies.

If it is necessary for Respondent to include proprietary or otherwise confidential information in its response or other submitted information, Respondent must clearly label that proprietary or confidential information and identify the legal basis for confidentiality.

Merely making a blanket claim that the entire response is protected from disclosure because it contains some proprietary information is not acceptable, and will make the entire response subject to release under the PIA.

In order to trigger the process of seeking an Attorney General opinion on the release of proprietary or confidential information, the specific provisions of the response that are considered by Respondent to be proprietary or confidential must be clearly labeled as described above. Any information which is not clearly identified by Respondent as proprietary or confidential will be deemed subject to disclosure under the PIA. Respondent will irrevocably deemed to have waived, and Respondent agrees to fully indemnify the State of Texas and DPS against any claim of infringement by DPS regarding the intellectual property rights of Respondent or any third party for any materials appearing in the response.

If Respondent’s response contains any information that Respondent claims is confidential and not subject to release under the PIA, Respondent must prepare and deliver to DPS two copies of its response containing the following information.

A. A complete copy of all of Respondent’s submissions under this solicitation. Respondent must mark this copy’s documents with “Complete Response Documents, [Respondent’s Name], DPS SOLICITATION [SOLICITATION Number]. CONTAINS CONFIDENTIAL

INFORMATION.”

Page 21 of 23 Template Approved 5/26/2022

B. A complete copy of all of Respondent’s submissions with all information claimed as confidential excised, blacked out, or…