NCDHHS PDMCVO RFP - #30-2026-017-DHB_Addendum 1.pdf

This is an addendum to a Request for Proposal (RFP) issued by the North Carolina Department of Health and Human Services, Division of Health Benefits, for a Provider Data Management/Credentialing Verification Organization (PDM/CVO) solution under Solicitation Number 30-2026-017-DHB. The addendum, dated July 17, 2026, amends the original RFP schedule due to system issues with the ARIBA Sourcing Tool application. The revised schedule establishes the following key dates: RFP issuance on June 12, 2026; pre-proposal conference registration deadline of June 16, 2026; pre-proposal conference on June 17, 2026 at 2:00 p.m. ET; written questions deadline of June 26, 2026 at 2:00 p.m. ET; agency response to written questions and addendum issuance on July 24, 2026; proposal submission deadline of August 28, 2026 at 2:00 p.m. ET; proposal evaluation beginning September 4, 2026; system demonstrations estimated for January 12, 2027; and estimated contract award of June 8, 2027. The initial contract term is five years with two optional one-year renewal periods. Protest deadline for responding vendors is 15 days after award notification.

Offerors must acknowledge receipt of this addendum by executing it and submitting one properly executed copy with their RFP proposal or prior to the proposal due date and time. Failure to acknowledge receipt of the addendum may result in rejection of the proposal. The underlying PDM/CVO solution is a cloud-based Software as a Service (SaaS) offering that will consolidate provider data management, enrollment, credentialing, verification, and data-sharing functions as part of the Medicaid Integrated Modular Solution (MIMS). The solution must meet National Committee for Quality Assurance (NCQA) standards and comply with Medicaid Information Technology Architecture (MITA) 3.0 requirements, with vendors required to provide current independent third-party security certifications such as FedRAMP, SOC 2 Type 2, ISO 27001, or HITRUST and comply with NIST 800-53 controls. Data conversion and migration of approximately 4.25 million documents and legacy provider data must be completed with state approval at each phase.