Modified RFP 2026000125 UDDA - OIT.pdf

Request for Proposal (RFP)

Air Pollution Control Division (APCD)

Unified Data Dissemination Application - OIT

Modified RFP 2026000125 To revise timeline and budget dates, Section 1.15 outline update (All new text in red, strikethroughs in black)

This solicitation contains instructions governing the proposal to be submitted and the material to be included therein, mandatory requirements which must be met to be eligible for consideration;

and other requirements to be met by each proposal.

STATEMENT ON AND COMMITMENT TO EQUITY

CDPHE acknowledges that long-standing systemic racism, including economic and environmental injustice, has created conditions that negatively impact marginalized communities, particularly people of color. These conditions, which limit opportunities for optional health and influence individual behaviors, are critical predictors of health outcomes.

TABLE OF CONTENTS

REQUEST FOR PROPOSALS SIGNATURE PAGE EXAMPLE 2

SCHEDULE OF ACTIVITIES 3

SECTION 1: ADMINISTRATIVE INFORMATION 4

SECTION 2: STATEMENT OF WORK 11

SECTION 3: RESPONSE FORMAT 28

SECTION 4: PROPOSAL EVALUATION 29

Attachments & Exhibits

A. Attachments:

1. Attachment 1 - Request for Proposal Signature Page (to be returned)

2. Attachment 2 - Budget / Price Sheet Template

3. Attachment 3 - RFP Proposer Response Template

4. Attachment 4 - System Security Plan

5. Attachment 5 - Data Use Agreement Template

B. Exhibits:

1. Exhibit A, Submission Instructions

2. Exhibit B, Draft Statement of Work

3. Exhibit C, State of Colorado OIT Contract Template

4. Exhibit D, APCD UDDA Mockup

Proposers are urged to read the solicitation document thoroughly before submitting a response. The Vendor Customer Number and F.E.I.N. referenced above will be used for issuance of award, contracting, and payment for the winning response. Verify that the provided numbers are correct for the entity submitting this response. The FEIN must match VSS registration to be eligible for award.

1. Vendor accepts all Contract/PO Terms and conditions without negotiation: ___Yes ___ No

2. Does your organization qualify as a Disadvantaged Business Enterprise (DBE), Minority Business Enterprise (MBE) or Women’s Business Enterprise (WBE)? ___ Yes ___ No

3. Is your organization submitting any confidential or proprietary information included in the proposal?

___Yes ___No Any confidential or proprietary information shall conform to the requirements listed in Section 1 Administrative Information or the proposal may not be considered.

(PLEASE USE ATTACHMENT 1 TO RETURN WITH YOUR RESPONSE - This is the example only)

(EXAMPLE ONLY ) - REQUEST FOR PROPOSALS – VENDOR INFORMATION / SIGNATURE PAGE

RFP INFORMATION

RFP # 2026000125 TITLE: Unified Data Dissemination Application - OIT

ANTICIPATED INITIAL CONTRACT TERM: ONE PARTIAL FULL Year

ANTICIPATED OPTIONAL EXTENSION TERMS: FOUR (4) ONE-YEAR EXTENSION TERMS, OR A

COMBINATION OF OPTIONAL EXTENSION TERMS TOTALING NO MORE THAN FIVE YEARS.

IMPORTANT: Proposer Name and the RFP # must be in the file name when the proposal is submitted. For full submission information, see Exhibit A Submission Instructions

For Non-electronic submission only: Proposers shall submit sealed proposals to the below address:

• One (1) original (signed) version of Attachment 1

• One (1) electronic version of the Proposal on USB flash drive Colorado Department of Public Health And Environment

Procurement And Contracts Unit, Mail Room 4300 Cherry Creek Drive South Denver, CO 80246

ATTN: Darla Wear, Purchasing Agent EMAIL (INQUIRIES ONLY) TO: darla.wear@state.co.us

For Electronic Submission only: Proposers shall submit proposals WITH One (1) original (signed) version of Attachment 1 via BidNet Direct at: www.bidnetdirect.com//cdphe.

PROPOSER’S CONTACT INFORMATION

COMPANY NAME:

CONTACT:

STREET ADDRESS:

PHONE:

CITY/STATE/ZIP:

E-MAIL:

FEIN:

VSS #:

PROPOSER’S AUTHORIZED SIGNATURE

AUTHORIZED SIGNATURE:

PRINTED NAME:

TITLE:

mailto:darla.wear@state.co.us http://www.bidnetdirect.com/cdphe

SCHEDULE OF ACTIVITIES

ACTIVITY DATE/TIME (MST)

RFP Notice Published on VSS and BidNet www.colorado.gov/vss and www.bidnetdirect.com//cdphe

March 10, 2026

Prospective Proposers Written Inquiry Deadline (No questions accepted after this date/time; e-mail preferred)

March 19, 2026

2:00 PM MST

Response to Written Inquiries published on Colorado VSS at www.colorado.gov/vss and www.bidnetdirect.com//cdphe

April 1, 2026

2:00 PM MST

Bid/Proposal Submission Deadline April 22, 2026

2:00 PM MST

Oral Presentations/Demonstrations/Best and Final Offers 1 To Be Determined

Notice of Award 1 To Be Determined

Initial Contract Period2 7/1/2026-10/8/2026 6/30/27

The resulting Initial Contract Term of one (1) partial year with the option to extend by four (4) one (1) year extensions, (or a combination of agreed upon years) for a total potential contract term of Four (4) Option of no more than a total of five (5) years.

plus the partial initial term. Although it is anticipated to be a partial (1) one-year contract, the State reserves the right to extend for up to four (4)additional years.

To Be Determined (TBD)

1 Dates are estimated 2 Initial contract term and option years will be at the discretion of the State in any combination thereof http://www.colorado.gov/vss http://www.colorado.gov/vss

SECTION 1: ADMINISTRATIVE INFORMATION

Issuing Office This Request for Proposals (RFP) is issued by the State of Colorado, Department of Public Health and Environment (CDPHE) Procurement and Contracts Unit, for the benefit of the State of Colorado (State).

The CDPHE Procurement and Contracts Unit and Purchasing Agent listed on the RFP Signature Page is the sole point of contact concerning this RFP. All communication must be directed to the designated Purchasing Agent.

1.1 INVITATION TO SUBMIT PROPOSALS

Please be advised that the Colorado Vendor Self Service (VSS) and BidNet Direct (BidNet) websites are the official sites for all Solicitation information, including Addenda and Modifications.

Though not a requirement, Respondents are encouraged to become a member of VSS and BidNet Direct prior to the submission deadline. Solicitations for most Colorado State Agencies (Agencies), including CDPHE, are posted on VSS. The VSS Help Desk is available Monday through Friday, 8:00 a.m. to 5:00 p.m., local time, phone, 303-866-6464 or email, VSSHelp@state.co.us.

Solicitation details posted on VSS by Agencies for goods, services, and construction are public and do not require registration to view. Should a company opt to register with VSS, it may elect to receive automatic notification in categories of interest. Additionally, there is no cost to register on VSS. However, per Procurement Rule 24-102-202.5-04, Respondents need not be registered with VSS in order to be deemed responsive to this RFP, however, a Proposer must have a current registration on VSS in order to be awarded under this solicitation.

In an effort to expand the potential pool of Respondents to this RFP thus providing the best value for the State, CDPHE is also posting this RFP on BidNet Direct at the link available in the Schedule of Activities or Exhibit A Submission Instructions. Respondents do not need to register on BidNet or pay funds to access the solicitation.

A Proposer must have a current registration on VSS in order to be awarded under this solicitation; however, vendors do not need to be registered to view the solicitation documents. There is no cost to register on Colorado VSS. To become a registered supplier on VSS, please visit www.colorado.gov/vss. To become a registered supplier on BidNet Direct please visit www.bidnetdirect.com//cdphe.

1.2 PROPOSER IDENTIFICATION

All Proposals must include a valid tax identification number for the Proposer. Any Proposer must be a legal entity with the legal right to contract in the State of Colorado. Only the identity of the Proposer will be used to determine the Proposer’s registration status on VSS or BidNet Direct. If a Proposer is owned or controlled by a parent company, the Proposal must also identify the name, main office address, and tax identification number of such parent company.

1.3. INQUIRIES

Proposers may submit written inquiries via email concerning this solicitation to obtain clarifications. The State may not accept inquiries after the date and time indicated in the Schedule of Activities. Inquiries must be made to the designated Purchasing Agent using the contact information appearing on the Signature Page for this RFP. Inquiries must be clearly marked with the RFP number and title. Where appropriate, inquiries should include references to any relevant Section/paragraph of the solicitation.

about:blank about:blank

Responses to Proposers inquiries will be published collectively, as a modification on Colorado VSS and BidNet. Proposers shall not rely on any verbal statements that alter any specification or other term or condition of the solicitation. Such changes are valid only if provided in writing by the Procurement Contact.

1.4. MODIFICATION OR WITHDRAWAL OF PROPOSALS

A Proposer may modify a Proposal submitted in response to this RFP prior to the established proposal submission deadline. A Proposer may withdraw a Proposal at any time.

1.5. THE STATE’S RIGHTS

The State reserves the right, in its sole discretion, to waive informalities and minor irregularities in connection with any Proposal received.

The State reserves the right, in its sole discretion, to cancel this entire RFP or individual phases or projects at any time, without penalty.

1.6. CERTIFICATION OF INDEPENDENT PRICE DETERMINATION

By submitting a Proposal in response to this RFP, each Proposer certifies, and in the case of a joint Proposal each party thereto certifies as to its own organization, that in connection with this procurement:

a. The prices in the Proposal have been arrived at independently, without consultation, communication, or agreement, for the purpose of restricting competition, as to any matter relating to such prices with any other Proposer or with any competitor, other than a joint Proposer;

b. Unless otherwise required by law, the prices which have been quoted in the Proposal have not been knowingly disclosed by the Proposer and will not knowingly be disclosed by the Proposer prior to opening, directly or indirectly to any other Proposer or to any competitor; and

c. No attempt has been made or will be made by the Proposer to induce any other person or firm to submit or not to submit a Proposal for the purpose of restricting competition.

Each person signing the RFP Signature Page of the Proposal certifies that:

a. The signing individual has the legal authority to bind the Proposer organization to the prices and other obligations offered in the Proposal and that the signing individual has not participated, and will not participate, in any action contrary to the certifications above; and

b. The signing individual is not aware of any person connected with the Proposer organization who has participated in any action contrary to the certifications above; and

c. The signing individual will immediately notify the State if the individual becomes aware of any action by any individual or entity contrary to the certifications above.

A Proposal will not be considered for award where any of the certifications above have been deleted or modified. In the event that any Proposer furnishes with the Proposal a signed statement which sets forth in detail the circumstances of any action contrary to the certifications above, the State may accept such proposal only if the State determines that such disclosure was not made for the purpose of restricting competition.

1.7. PROPRIETARY/CONFIDENTIAL INFORMATION

CDPHE recognizes that some elements of a Proposal may contain proprietary or confidential information.

An Proposer may request confidentiality of information submitted in connection with a Proposal using the following procedure:

a. The Proposer must submit a written request for confidentiality together with its Proposal.

b. The request must state specifically what elements of the Proposal are to be considered confidential and must provide a justification for the request. To the extent that the request includes multiple types of information, the request must include a specific justification for the request as applied to each different type of information requested to be held confidential. Whole sections of the proposal will not be considered as confidential with the exception of references and experiences.

c. Material requested to remain confidential must be separated from the remaining elements of the Proposal and must be readily identified, such as by labeling the pages as “Proprietary/Confidential.”

The State will not consider any requests for confidentiality under the following circumstances:

a. All, or substantially all, of a Proposal is requested to remain confidential.

b. Material requested to be kept confidential is co-mingled with other information in the

Proposal (i.e., is not separated from the remainder of the Proposal as required above).

c. The request concerns price or rate information, or information that will be included in any resulting contract for the goods or services proposed.

d. Whole sections of the proposal. Specific information within any section must be identified and parsed from the proposal as separate and submitted separately in order to be considered for confidentiality.

The CDPHE Procurement Official or delegate will make a written determination regarding any request for confidentiality that complies with the requirements above. In the event that CDPHE denies the Proposer’s request for confidentiality or determines that a request is not in compliance with the requirements of this RFP, a notice of that determination will be sent to the Proposer. Upon notice of such denial, the Proposer may withdraw its entire Proposal. A Proposer's decision to allow its Proposal to remain under consideration will be considered acceptance of CDPHE’s determination regarding confidentiality.

Nothing in this section prohibits CDPHE from unilaterally determining that any portion of a Proposal should remain confidential, provided that the same criteria for such determination are applied to all proposals submitted under this RFP.

1.8. RFP RESPONSE MATERIAL OWNERSHIP

All material submitted regarding this RFP becomes the property of the State of Colorado. As such, except as provided regarding confidential or proprietary information above, the State of Colorado has the right to use any or all such information or material. The State of Colorado may retain or dispose of all such information or material as is lawfully deemed appropriate.

Except as provided regarding confidential or proprietary information above, all proposals may be reviewed by any person after a Notice of Intent to Make an Award has been issued, subject to the terms of the Colorado Open Records Act (“CORA”), §§24-72-200.1, et seq., C.R.S. Proposer expressly agrees that the State of Colorado may use the materials for all lawful State purposes and may make the information available to the public in accordance with the provisions of CORA.

1.9. PROPOSAL PRICING

Price and cost information included in any Proposal must be firm, must be stated in U.S. dollars, and must include all related costs (e.g. surcharges, travel, etc.). Estimated Proposal prices are not acceptable. Any costs not included as part of the Proposal may be disallowed under the contract with the awarded Proposer.

Quantities stated in this RFP or in any Proposal are estimates only. Unless expressly stated otherwise, no volume of goods or services to be purchased can be guaranteed. Pricing may be tiered, but may not be contingent upon any unstated assumptions regarding quantities to be purchased.

At the request of the State, Best and Final Offers may be considered in determining the awarded Proposer.

Proposals, including Best and Final Offers, shall be firm for a period of not less than one hundred eighty

(180) calendar days from the date of award.

1.10. TAXES

The State of Colorado, as a purchaser, is exempt from all Federal excise taxes under Chapter 32 of the Internal Revenue Code (Registration No. 84-730123K) and from all state and local government use taxes under §39-26-114(a), C.R.S. The State of Colorado’s State and Local Sales Tax Exemption Number is 98- 02565.

Goods and services purchased by a Proposer may be subject to sales tax in certain jurisdictions even though the Proposer is purchasing such goods or services in connection with providing goods or services to the State. Any taxes to which Proposer may be subject will not be reimbursed by the State.

1.11. INSURANCE

Any awarded Proposer shall obtain and maintain at all times during the term of any contract resulting from this RFP insurance in the kinds and amounts outlined in the Model Contract or Purchase Order Terms and Conditions attached with this RFP.

1.12. CONTRACT TERM

Any contract resulting from this RFP will be effective upon approval by the State Controller or designee, or as otherwise allowed by law. The contract performance shall commence upon the effective date of the contract and shall be undertaken and performed in the sequence and manner set forth in the contract. The estimated total term of any resulting contract is stated on the Signature Page for this RFP.

1.13. CONTRACTUAL OFFER AND ACCEPTANCE

1.13.1. Acceptance or Rejection of RFP and Contract Terms

By submitting a Proposal, Proposer acknowledges and accepts all terms and conditions of this RFP unless Proposer’s proposal clearly and unequivocally rejects such term or condition. Failure to clearly articulate any such rejection, or any variation between a Proposal and this RFP, shall be deemed a waiver of any rights to subsequently modify the terms of performance. Rejection of any term or condition of the RFP may be grounds for the state to reject a Proposal or decline to select a Proposal for award.

A Proposal signed by an authorized representative for the Proposer and submitted in response to this RFP shall constitute a binding offer for the State to purchase or otherwise contract for the goods or services proposed therein. Except as modified herein or as agreed to by the State, the Model Contract or Purchase Order Terms and Conditions included with this RFP will be binding upon the awarded Proposer. The contents of the Proposal, including the services of any persons specified, will become contractual obligations of the awarded Proposer if a contract ensues. Failure of the awarded Proposer to accept these obligations in a resulting contract may result in cancellation of the award and such Proposer may be removed from future solicitations.

1.13.2. Proposed Changes to Contract Terms

A Proposal may include proposed changes to the Model Contract language or Purchase Order Terms and Conditions. Each proposed change must include proposed alternative or substitute language. Such proposed changes will not be viewed as rejections of the RFP terms and conditions. General objections or objections indicated to be negotiated subsequent to the award will not be accepted. The State of Colorado, in its sole discretion, may accept or reject proposed changes during the contract negotiation process with the awarded Proposer. The State’s rejection of any proposed change will not alter the awarded Proposer’s obligation to perform subject to the terms of this RFP.

The State of Colorado reserves the right to modify the contract language in response to legislative, budget, or policy changes, or as otherwise required by law. The State reserves the right to clarify terms and conditions not having an appreciable effect on quality, price/cost, risk, or delivery schedule during post-award formalization of the contract.

1.14. AGREEMENT EXECUTION

An awarded Proposer shall have no longer than forty-five (45) calendar days to enter into a contract after being notified of the award by the State. If no contract has been executed after forty-five days and such delay is not the fault of the State, the State may elect to cancel the award. The State may elect to grant the award to the next most responsive Proposer.

The State of Colorado shall not be liable for any costs incurred by any Proposer prior to the execution of a contract. No property interest of any nature shall accrue until a contract is approved by the parties and by the State Controller, or otherwise legally executed as allowed by law.

1.15. INFORMATION SECURITY

All Proposals will be evaluated, in part, based on the Proposer’s willingness and ability to comply with all applicable laws, regulations, rules, policies, procedures, or other requirements concerning the safeguarding of any and all State systems and data. The awarded Proposer will be expected to comply with:

a. All Colorado Office of Information Security (OIS) policies and procedures which OIS has issued pursuant to §§24-37.5-401 through 406, C.R.S. and 8 CCR §1501-5 and posted at https://oit.colorado.gov/standards-policies-guides/technical-standards-policies

b. All information security and privacy obligations imposed by any federal, state, or local statute or regulation, or by any industry standards or guidelines, as applicable based on the classification of the data relevant to Contractor’s performance under the Contract. Such obligations shall arise from:

i. Health Information Portability and Accountability Act (HIPAA)

ii. IRS Publication 1075

iii. Payment Card Industry Data Security Standard (PCI-DSS)

iv. FBI Criminal Justice Information Service Security Addendum

v. CMS Minimum Acceptable Risk Standards for Exchanges

vi. Electronic Information Exchange Security Requirements and Procedures For State and Local Agencies Exchanging Electronic Information With The Social Security Administration

vii. CIS Center for Internet Security CISecurity.org

viii. NIST Standards: https://csrc.nist.gov/publications/sp800

ix. Clinical Laboratory Improvement Amendment of 1988 (CLIA)

x. National Committee on Clinical Laboratory Standards (NCCLS)

xi. ISO 17025 General Requirements for the Competence of Testing & Calibration Labs

xii. Good Automated Laboratory Procedures (GALP)

xiii. Service Organization Control (SOC2)

xiv. FedRAMP authorization

xv. StateRAMP authorization https://oit.colorado.gov/standards-policies-guides/technical-standards-policies http://cisecurity.org/ https://csrc.nist.gov/publications/sp800

c. The Awarded Proposer shall implement and maintain all appropriate administrative, physical, technical, and procedural safeguards necessary and appropriate to ensure compliance with the standards and guidelines applicable to the performance described in the Proposal.

d. As a condition of the execution of a contract as a result of this RFP, the Awarded Proposer must provide the State with information reasonably required to assess the Awarded Proposer’s ability to comply with the requirements stated above. At the direction of the Office of Information Security (“OIS”), such access and information may include:

i. A recent SOC2 Type II audit including, at a minimum, the Trust Principles of Security, Confidentiality, and Availability, or an alternative audit acceptable to OIS.

ii. The results of security audits, penetration tests, or vulnerability scans, as requested by OIS or its designee at any time under this Contract;

iii. To the extent the Awarded Proposer controls or maintains information systems used in connection with State Records, Awarded Proposer will provide OIS with the results of all security assessment activities when conducted on such information systems, including any code-level vulnerability scans, application level risk assessments, and other security assessment activities as required by this Contract or reasonably requested by OIS. Awarded Proposer will make reasonable efforts to remediate any vulnerabilities or will request a security exception from the State. The State will work with Contractor and OIS to prepare any requests for exceptions from the security requirements described in this Contract and its Exhibits, including mitigating controls and other factors, and OIS will consider such requests in accordance with their policies and procedures referenced herein.

1.16. CONFLICT OF INTEREST DISCLOSURE

Proposers must disclose any potential conflict of interest in connection with a Proposal. A conflict of interest may include, but is not limited to, access to any non-public information regarding the RFP or the subject matter of the RFP by the Proposer, or any of the Proposer’s employees, contractors, or agents, including any individual who may have had access to non-public information in a prior capacity before entering into a relationship with Proposer.

No individual or entity engaged by the State to prepare this RFP or that has otherwise had prior access to the solicitation or to sensitive information related to this procurement process (including, but not limited to the requirements, statement of work, or evaluation criteria), will be eligible to submit or participate in a Proposal in response to this RFP.

If the State determines that a conflict of interest exists, the State, in its sole discretion, may reject any Proposal or cancel the award of a contract. In the event the Awarded Proposer was aware of any conflict of interest prior to the award of the contract and failed to disclose the conflict to the State, the State may terminate the contract for cause.

The provisions of this section regarding disclosure of conflicts of interest to the State must be included in any subcontracts in connection with performance of the work. The language included in any subcontract must preserve the State’s rights to disclosure of conflicts of interest and to termination of the contract on the basis of any unacceptable conflict or failure to disclose any conflict.

1.17.1 Resolution of Controversies

Any controversy in connection with this solicitation or the award of a contract as a result of this RFP shall be resolved according to the provisions of Article 109, Title 24, C.R.S.

1.17. COLORADO BUSINESS REGISTRATION

Within ten (10) business days of the notification of the award of a contract under this RFP, the awarded Proposer will be properly registered with the Colorado Secretary of State’s Office to do business in Colorado. The State may request that the awarded Proposer provide evidence of such registration, as well as other organizing documents such as Articles of Incorporation or By-laws.

1.18. PROTESTED SOLICITATIONS AND AWARDS

Any actual or prospective Proposer who is aggrieved in connection with the solicitation or award of a contract may protest to the CDPHE, Procurement and Contracts Director, 4300 Cherry Creek Drive S.

Denver, CO 80246. The protest must be submitted in writing within ten (10) working days after such aggrieved person knows, or should have known, of the facts giving rise thereto. Reference C.R.S., Title 24, Article 109.

1.19. ARTIFICIAL INTELLIGENCE

The use of artificial intelligence (AI) must comply with §§6-01-1701, et seq., C.R.S. Additionally, CDPHE has not approved AI for High-Risk use cases as defined in §§6-01-1701, et seq., C.R.S. Intent to use AI or generative AI (GenAI) to meet the requirements of this RFP must be explicitly disclosed along with the AI or GenAI model, product or method intended to be used, if known. The use of AI or GenAI is also subject to publicly available State of Colorado Governor’s Office of Information Technology standards and policies.

SECTION 2: STATEMENT OF WORK

This section provides the Proposer with a general overview of the requirements contained within this RFP.

Additional information regarding the specific requirements may be contained in any documents attached to this RFP.

2.1. INTRODUCTION

The Colorado Department of Public Health and Environment’s Air Pollution Control Division works to improve and protect outdoor air quality in Colorado. In the pursuit of this aim, the Division collects and generates a wide range of data including but not limited to air monitoring data, reported emissions by sources, permitting information, and modelled data. Currently, this data is primarily maintained and utilized by programs within the Division. While various efforts exist to disseminate some of this data, there is currently no single centralized location or tool, where the public may access all of this information, or even learn what exactly is available.

Given the numerous data modernization efforts currently underway to make the Division’s data collection and back-end systems more efficient, the Division is well-positioned to modernize front-end data delivery as well. Modernizing data dissemination will enable the public to better utilize the Division’s data to answer their questions and learn about their local air quality - potentially engaging citizens in the effort to improve and protect our air quality here in Colorado.

2.2. BACKGROUND

This project serves to develop a unified data dissemination tool, hereafter referred to as “the System”, in a web application format for the Colorado Department of Public Health and Environment’s Air Pollution Control Division. In order to better and more transparently disseminate information gathered by the Division, or readily available to the Division, to residents of Colorado, this project will build a series of hierarchical webpages and data dashboards to create a one-stop shop for all publicly available information for all relevant stakeholders in Colorado.

The value of developing this tool is to centralize all of the many data types collected by the Division for public dissemination in an easily digestible, intuitive, and educational manner. This tool will simplify access to the Division's public data by creating a single access point for this information. Having a single access point for all public information also allows to better synthesize all of the many disparate data types currently within the Division, which will provide more holistic information for stakeholders to support more informed data driven decisions.

2.3. MANDATORY MINIMUM REQUIREMENTS

In order to submit a proposal for this RFP, the Proposer shall meet all of the requirements listed below.

All mandatory minimum requirements are evaluated based on a pass or fail. All proposals must receive a PASS score in order to be fully evaluated and the scores totaled for the final award.

1) Be able to perform the work outlined in this RFP and in Exhibit B, Draft Statement of Work.

2) The proposed application must be hosted in AWS and that the proposer has the required experience operating in AWS cloud based environment.

3) The proposed user interface can integrate with other Enterprise systems.

4) Past experience developing interactive map-based applications incorporating a variety of standard plotting visualizations.

5) Past experience developing applications/visualization/data processing protocols using large environmental or similar datasets. Preferences for previous work are with air quality monitoring data, and emissions permitting documentation.

6) Past experience with Amazon web services (AWS), Hyland’s OnBase, and Azure DevOps as evidenced by staff certifications or project documentation.

7) Past experience developing applications that include a user-friendly back-end and public-facing front end, enabling the product owners to maintain and manage key aspects of the end product.

8) The proposed application must be capable of integrating with the State of Colorado's Single Sign-On (SSO) solution for user authentication and access control for admin users.

9) Data Security Certification: Proposer must hold a current certification (e.g., ISO 27001, SOC 2 Type II) that demonstrates a robust, formally audited information security management system.

10) Accessibility Compliance: Proposer must commit to delivering a fully functional application that is compliant with Web Content Accessibility Guidelines (WCAG) 2.1 Level AA.

11) Financial Stability: Proposer must provide a formal declaration stating that their organization has not filed for bankruptcy, is not currently in receivership, and has not been the subject of any financial insolvency proceedings within the past three (3) years.

2.4. EXECUTIVE SUMMARY (6 PAGES MAX)

1) Proposer shall submit an organizational overview that includes years in business, areas of expertise, (specifically Proposers experience with the requirements listed below), and a brief overview of staff, including the total number of employees.

2) Project understanding: Proposer shall briefly describe their understanding of the State's main objective for the Unified Data Dissemination Application (UDDA), including the critical need it addresses for the Air Pollution Control Division (APCD) and the public.

3) Proposed solution: A high-level, one-page summary of the Proposer's proposed solution, focusing on the key benefits and unique aspects that differentiate their approach.

2.5. REFERENCES, EXPERIENCE, AND KEY PERSONNEL

The State reserves the right to use Colorado State Agencies and other state governments as references. In addition to these references, Proposers must include the following with their Proposal:

1) Provide two (2) references, including contact name, individual titles, locations, email address and a current telephone number, with preferences for public sector. The references provided should be associated with work completed corresponding to the nature of the work in scope and size called for in this RFP and Statement of Work.

2) Proposer shall have adequate personnel with the necessary credentials and training to successfully complete the activities in the Draft Statement of Work (Exhibit B) and the requirements of this RFP. The proposer is required to commit key personnel for the duration of the project to preserve project continuity.

3) Proposer is required to submit 2 page resumes for proposed Key Personnel (e.g., Project Manager, Lead Architect, Lead Developer). These resumes must clearly demonstrate expertise relevant to the technologies and security standards specified in the Draft Statement of Work

4) The Proposer shall have three (3) years minimum experience with developing web applications that meet or exceed WCAG 2.1 AA accessibility standards using many large data sets with varied formats (textual, numeric, graphical) from environmental or regulatory domains and providing technical assistance and/or customer service.

5) Proposer shall have completed a minimum of three (3) projects of similar size and scope within the past five (5) years. Please specify and describe their role (Prime Contractor, Subcontractor) in the referenced projects. Similar scope is defined as public-facing web applications integrating data from a minimum of three (3) disparate data sources.

2.6. PERFORMANCE MEASURES

The final product will be evaluated based on the following criteria.

1) The completion of a robust, responsive, and intuitive front-end webpage, that includes the tabs and features listed in the mock-up example (Exhibit D).

2) The integration of all key data sources as evidenced by information based on this data visible, visualizations depicting this data, and the ability for the public to download the data from the front-end webpages.

3) The ability for staff to modify, update, and maintain aspects of the application as verified during User Acceptance Testing (UAT).

4) The delivery of complete, usable, and approved documentation for “the System”, including user manuals, architecture diagrams, etc.

2.7. OVERVIEW AND STATEMENT OF WORK SUMMARY

The successful Proposer shall provide the APCD with a data dissemination web application that allows for the communication, visualization, and download functionality of a wide variety of air quality information and data that is compatible with the existing data ecosystem within CDPHE. “The System” shall include both the public-facing webpage and any required data integration layers. “The System” shall be accessible, allowing APCD staff to manage and update both public-facing web-pages and data integration layers as needed. The entire system must adhere to a minimum 99.9% annual uptime service level and demonstrate scalability to handle an anticipated maximum of 5000 concurrent users with the ability to scale up on short notice. Furthermore, the application must be designed and developed in compliance with all relevant State of Colorado security hardening standards.

1) Develop the System’s project development plan.

2) Develop the overall System’s technology architecture diagram(s) and website navigation roadmap and detailed data flow diagrams.

3) Design and develop the primary infrastructure to support all of the functionality identified for the Overview tab (page 2-15) of the Mockup (Exhibit D).

4) Design and develop the primary infrastructure to support all of the functionality identified on the My Air Quality tab of the Mockup (page 16 of (Exhibit D).

5) Design and develop the primary infrastructure to support all of the functionality identified on the hot-topics tabs of the Mockup (pages 17-22 of (Exhibit D). The mockup currently identifies 5 hot-topics to build for this project: criteria pollutants, air toxics, greenhouse gases GHG, ozone, and methane. Each hot-topic tab will have a similar UI/UX. All data visualizations must be fully accessible and include a data export function to allow users to download the raw underlying data in a common format (e.g., AQDx - CSV, JSON).

6) Design and develop the primary infrastructure for APCD staff to modify, add, or remove tabs.

7) Implement updates to the System.

8) Provide knowledge transfer.

9) Provide Monthly Summary Reports

10) Provide UAT Completion Documentation

11) Develop a Comprehensive Set of User and Technical Documentation. This must include a System Administration Manual for State OIT staff and a Content Editor's Guide for APCD business users.

12) Provide a post-production implementation warranty period of 180 calendar days

13) Integrate the application with the State's preferred web analytics platform (Google Analytics)

Refer to Exhibit B – Draft Statement of Work for details.

2.8. BUDGET (ATTACHMENT 2)

CDPHE has allocated $2,075,000 for the development and implementation of this project for the contract period estimated to begin 7/1/2026. The timeframe specific to system development is estimated to begin 7/1/2026 for completion by 10/8/2028 10/4/29. and includes two option years. One plus a partial Two additional option years are estimated for maintenance, beginning 10/9/2028 10/5/2029 and ending 10/8/2030 6/30/31, pending additional funding. The allocated amount is to include the activities listed within the Exhibit B - Statement of Work for “the System” development, implementation, and deployment of the fully operational application. The Proposer shall include all costs necessary to complete the project for the development time frame plus maintenance years of this contract.

1) Project Management and Reporting Planning

2) “The System” Development

3) OnBase textual document discovery and data integration

4) Optional cost of AI layer added to “the System”

5) Optional annual maintenance and support for two one plus a partial additional year(s)

6) Estimate for annual operational cost to run the developed system

2.9. TIMELINE

The anticipated start date for the executed contract is targeted for 7/1/2026 with a total contract time frame from 7/1/2026 to 6/30/2030.2031, as a one (1) year contract with four (4) optional years, dependent upon additional funding. At the sole discretion of the State, and depending upon funding and Proposer performance, CDPHE may renew the initial one (1) year agreement for up to four (4) additional one (1) year periods, not to exceed five (5) years total. At the sole discretion of the State, the CDPHE may modify the dates of the contract.

1) This project must be developed, implemented, and fully operational by 10/8/2028 10/4/2029.

2) Contract years four (4) through five (5) are planned to include maintenance, updates, enhancements, support and hosting with costs estimated for these years pending additional funding.

3) Mandatory Key Milestones: Project kick-off, Final Project Plan Acceptance (no later than 30 days after kick-off), Design and Architecture Approval, ongoing UAT as key project functionality is completed, Final deliverables and documentation submission.

4) Proposer's Detailed Schedule of the project.

2.10. KEY TERMINOLOGY

Whenever the following terms are in this document, they have the meaning as outlined below:

1. “Acceptance Criteria” means the standards listed in an order which characterize the Authorized Purchaser’s specific requirements and conditions that must be satisfied by the MSP for the Authorized Purchaser to accept the completed Deliverables.

2. “Acceptance Testing” means testing as described in a Purchase Order to be performed by MSP to determine that deliverable(s) meet the Acceptance Criteria.

3. “Awarded Proposer” means the Proposer(s) whose proposal response the State deems to be most advantageous considering price and the evaluation factors set forth in this RFP.

4. “BidNet Direct” means an alternate website to VSS for RFP’s to be posted along with inquiry responses. Electronic proposal submissions are allowed here.

5. “Business Day” means 8:00 a.m. to 5:00 p.m., Mountain Time, Monday through Friday, excluding State holidays and State mandated office closures.

6. “Contractor” means the Awarded Proposer following the execution of an Enterprise Agreement resulting from this RFP.

7. “Deliverables” means the outcome to be achieved or output to be provided, in the form of a tangible object or software that would be produced as a result of Proposer’s Work as described in a Proposal.

8. “Delivery Schedule” means the schedule(s) for the performance of Work, as set forth in an Order that lists: (1) each Deliverable, including its measurable attributes; (2) payment schedule within each Deliverable, including milestone completion date; and (3) final delivery date for each Deliverable.

9. “Documentation” means an operational description, in written format, of all Work to be performed under an Order, including documents that are Deliverables.

10. “Enterprise Agreement” means the contract resulting from the award under this RFP. An OIT Enterprise Agreement is a contract authorized pursuant to C.R.S. §25-37.5-105 under which various entities may access the goods or services described in the agreement at the same prices and on the same terms defined in the Enterprise Agreement.

11. “Errors” mean defect(s) in the Deliverables, Work, or Work Product such that the Work or Work Product does not comply with the specifications set forth in an Order.

12. “Final Acceptance” means the date upon which provides MSP written notice that it has accepted all the Work to be performed, including all Deliverables or when applicable “the System” to be delivered, including any updates, corrections, or additions to content, and that will make payment for Work performed. The Warranty Period shall commence upon Final Acceptance.

13. “Key Persons” means the State Staff (supervisor or project manager) who will be principally responsible for managing the Services or for performance of Work under an Order and the satisfactory completion, delivery and acceptance of the related Deliverables.

14. “MWBE” means a Minority- or Women-owned Business.

15. “Open Source Software” means one or more of the following: (1) any software that contains or is derived in any manner (in whole or in part) from open source software or software subject to similar licensing or distribution requirements; and (2) any software that requires as a condition of its use, modification or distribution that such software (or other software incorporated into, derived from or distributed with such software) be either (a) disclosed or distributed in source code form; (b) licensed for the purpose of making derivative works; or (c) redistributable at no charge.

16. “Order” means request for work from the awarded vendor by an ordering entity such as OIT, institutions of Higher Education, political subdivisions. A purchase or Task order which may include a statement of work.

17. “PHI” is any information in the medical record or designated record set that can be used to identify an individual and that was created, used, or disclosed in the course of providing a health care service such as diagnosis or treatment.

18. “PII” means personally identifiable information including, without limitation, any information maintained by the State about an individual that can be used to distinguish or trace an individual’s identity, such as name, social security number, date and place of birth, mother’s maiden name, or biometric records; and any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information. PII includes, but is not limited to, all information defined as personally identifiable information in C.R.S.

24-72-501.

19. “Proposal” means a Proposer's response to this RFP. A Proposal may also be called a bid, response, or offer. If such have been requested and submitted following initial responses, an Proposer’s Proposal shall include any clarifications or any best-and-final offer.

20. “Proposer” means any entity or individual submitting a proposal in response to this RFP.

21. “Request for Proposals” or “RFP” means a procurement solicitation that seeks offers from organizations or individuals to perform the scope of work defined in the RFP, in accordance with the terms listed in the RFP. An RFP is issued with the intent of selecting the most advantageous proposal, making an award to that Proposer, and entering into a contract.

22. “Solicitation” means a document issued by the State of Colorado agency that requests competitive offers from organizations or individuals to sell the goods or services that are specified in the document. A solicitation typically results in an award of a contract or purchase order for the goods or services, based on an award methodology defined in the solicitation.

Types of solicitations include: Requests for Proposals (RFPs), Invitation for Bids (IFBs) and Documented Quotes (DQs).

23. “State” means the State of Colorado.

24. “Statement of Work” means the components of an Order that include but are not limited to an introduction, project objectives, definitions, detailed tasks (and subtasks if needed), measurable Deliverables that correlate with tasks, acceptance criteria, delivery and payment schedule.

25. “System” means one or more of the Authorized Purchaser’s integrated computer software application and database systems that may be modified, converted, created or enhanced by Contractor for Authorized Purchaser under an Order. “The System” includes but shall not be limited to all related technical design documents, software, databases, database schemas, formats, documentation, reports, memoranda, studies, plans, designs, specifications, statements, drawings, materials, exhibits, schedules and other documents or materials, in whatever media, developed by a contractor in the performance of Work under an Order, as more fully described and specified in a Statement of Work.

26. “UAT Completion Documentation” means the proposer should create documentation that identifies a completed system functionality, describes the functionality, describes any modifications requested by APCD staff, and includes a final sign-off by APCD staff once a functionality has been accepted.

27. “Vendor” means any organization or individual that seeks to provide, or is already providing, goods or services.

28. “VSS” means The State of Colorado's Vendor Self Service Web site. All solicitations published by State agencies and institutions are published on VSS.

29. “Work” means all work to be performed under an Order, as more fully described in the Exhibits, schedules, and Statements of Work, including but not limited to: related services that support computer software, data processing, know-how transfer, enhancements, business process automation systems, planning, programming, construction, analysis, design, development, project management, testing, risk analysis, quality assurance, integration, training or implementation.

30. “Work Product” means every invention, modification, discovery, design, development, customization, configuration, improvement, process, software program, work of authorship, documentation, formula, datum, technique, know-how, secret, or intellectual property right whatsoever or any interest therein (whether patentable or not patentable or registrable under copyright or similar statutes or subject to analogous protection) that is specifically made, conceived, discovered, or reduced to practice by a contractor or their agents (either alone or with others) pursuant to an Order.

ACRONYMS

Acronym Definition

AAA Authentication, Authorization, and Accounting

ADFS Active Directory Federation Services

ANSI American National Standards Institute

APCD Air Pollution Control Division

API Application Program Interface

AQDx Air Quality Exchange (data format standard)

ATOPs Air Toxics and Ozone Precursors Program

BAFO Best and Final Offer

CCR Code of Colorado Regulations

CDPHE State of Colorado Department of Public Health and Environment

CIS Center for Internet Security

CSP Cloud Service Provider

CORE Colorado Operations Resource Engine

COTS Commercial Off-the-shelf

CSS Cascading Style Sheets

DR Disaster Recover

FTP File Transfer Protocol

GPS Global Positioning System

HTML Hypertext Markup Language

HTTP Hypertext Transfer Protocol

HTTPS Hypertext Transfer Protocol Secure

IAM Identity and Access Management

IaC Infrastructure as Code

IaaS Infrastructure as a Service

IAD Information Assurance Directorate

IEC International Electrotechnical Commission

IP Internet Protocol

ISO International Organization for Standardization

IV&V Independent Verification and Validation

JPEG Joint Photographic Experts Group

LAN Local Area Network

LDAP Lightweight Directory Access Protocol

LLM Language Learning Model

LPHA Local Public Health Agency

MAC Media Access Control

MOTS Modified Off-the-shelf

NAS Network-attached Storage

NIEM National Information Exchange Model

NI…