PUR_7776_ Buildwell 2026.docx

DOCX document 38 KB Posted

Attached to
SS - 2602 ADRD Registry
Solicitation number
SS-15566
Issued by
Leon County, Florida

About this file

This is a Description of Intended Single Source Purchase (PUR 7776) filed by the Florida Department of Elder Affairs for secure data hosting and managed data environment services. The agency is procuring infrastructure, compliance support, and technical services to support the Florida Memory Project, a data registry for Alzheimer's Disease and Related Dementias. The services include HIPAA-compliant data storage and computing environments, encrypted data transfer systems, IT security controls and monitoring, data governance support, and technical hosting and maintenance. The contract has a term of six months. The last day for receipt of information is posted for at least seven business days from the posting date of March 30, 2026. The requestor is the Department of Elder Affairs, specifically Cari Eyre, Deputy Secretary and Dementia Director. Contact for the procurement is Justin Taylor at 850-414-2153 or Taylorj@elderaffairs.org.

The estimated dollar amount for this single source purchase is $70,000. The intended single source vendor is Buildwell Consulting, located at 9306 SW 19th Ave, Gainesville, Florida 32607, with primary points of contact Dr. Christine Sapienza (Csapien@ju.edu, 352-214-9098) and Dr. Susan Brandeis Cahn, DrPH, M.H.S., M.A. (cahnsusan38@gmail.com, 773-710-6491). The justification for single source acquisition emphasizes the vendors' unique combined expertise in clinical and translational neurology, federal healthcare data systems, and large-scale health program design. The vendors possess specialized knowledge of registry architecture compatible with the Virginia Memory Project model upon which Florida's registry is based. The services procured are not available as standard commercial offerings and include specialized data enclave design, HIPAA and CMS-compliant infrastructure, data governance frameworks, and complex data analysis. All data remains the property of the Department of Elder Affairs, with the vendor serving solely as a data hosting and infrastructure provider under strict data use agreements and business associate agreements.

View the file

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

DESCRIPTION OF INTENDED

SINGLE SOURCE PURCHASE

(PUR 7776)

AGENCY: Department of Elder Affairs

TITLE: ADRD Registry Short description of the commodity or service desired: The Agency is procuring Secure Data Hosting and Managed Data Environment Services to support the development and operation of the Florida Memory Project: A Data Registry for Alzheimer’s Disease and Related Dementias.

This includes:

•Secure data infrastructure
•HIPAA-compliant data storage and computing environment
•Encrypted data transfer and controlled access systems
•IT security controls and monitoring
•Data governance and compliance support
•Technical hosting and maintenance services
•Potential IRB and research compliance support (if applicable)

CONTACT

Name: Justin Taylor Address: 4040 Esplandade Way, Tallahassee, FL 32399 Telephone: 850-414-2153 Email: Taylorj@elderaffairs.org

Internal tracking number, if any:

Date posted: 03.30.2026 Last day for receipt of information:

This description of commodities or contractual services intended for purchase from a single source is posted in accordance with Sections 120.57(3) and 287.057(3), Florida Statutes, and will remain posted for a period of at least 7 business days.

Commodity or Contractual Service Required (commodity or United National Standard Products and Services Code (UNSPSC), manufacturer, model, and description, as appropriate):

85121606 Geriatric services

Quantity or Term (as appropriate):

6 months

Requestor (division, bureau, office, individual, as appropriate):

Department of Elder Affairs; Cari Eyre, Deputy Secretary and Dementia Director

Performance and/or Design Requirements (e.g. intended use, function or application, compatibility, requirements; reference to policy, rule, statute or other act of the Legislature, etc., as appropriate):

Infrastructure Services

•Secure server environment (cloud or on-premises)
•HIPAA-compliant storage
•Encrypted data transfer
•Secure access (VPN or equivalent)
•Role-based access controls
•Logging and audit trails
•Backup and disaster recovery

Compliance and Security

•HIPAA compliance framework
•Security risk assessments
•Alignment with state and federal privacy laws
•Support for Data Use Agreement (DUA) compliance
•Incident response procedures

Data Governance Support

•Data access review processes
•User provisioning/deprovisioning
•Data retention and destruction policies
•Governance documentation

Technical Support

•IT support for secure access
•Environment maintenance
•Service level expectations (uptime, response time)

CONTRACTUAL AND LEGAL REQUIREMENTS

The resulting agreement will include:

Data Use Agreements (DUAs)

•Define permitted uses and access restrictions
•Clarify vendor role (data processor vs. hosting provider)

Business Associate Agreement (BAA) (If PHI is involved)

•HIPAA compliance requirements
•Breach notification obligations

Data Security Addendum

•Encryption standards
•Access controls
•Incident response protocols
•Audit rights
•Data segregation

ROLES AND RESPONSIBILITIES

FunctionResponsible Party
Data OwnershipGovernment Agency
Data StewardshipGovernment Agency
Infrastructure HostingVendor
User CredentialingVendor (with Agency approval)
Access AuthorizationGovernment Agency
Compliance OversightGovernment Agency
Security InfrastructureVendor
Breach NotificationVendor (immediate to Agency)

DATA OWNERSHIP AND USE RESTRICTIONS

•All data remains the property of the Agency
•Vendor acts solely as a data hosting and infrastructure provider
•No independent research use without prior written approval
•No re-disclosure of data
•Data must be returned or destroyed upon contract termination

FEDERAL DATA COMPLIANCE (IF APPLICABLE)

The vendor must:

•Meet CMS data security requirements
•Support FISMA Moderate or High environments if required
•Maintain secure data enclaves
•Provide security attestations as required

Intended Single Source:

Buildwell Consulting Address: 9306 SW 19th Ave Gainesville, FL 32607

Christine Sapienza, PhD (main point of contact) Csapien@ju.edu 352-214-9098

Susan Brandeis Cahn, DrPH, M.H.S., M.A.

cahnsusan38@gmail.com 773-710-6491

Estimated Dollar Amount:

$70,000

Justification for single source acquisition (what is necessary and unique about the product, service or source; steps taken to confirm unavailability of competition, as appropriate):

1. Unique Capabilities and Expertise The proposed vendors, Dr. Christine Sapienza and Dr. Susan Cahn, possess a unique and complementary combination of expertise that is not available from other known providers.

Dr. Christine M. Sapienza

•Nationally recognized academic and healthcare leader with over 125 publications and significant citation impact
•Extensive experience leading large-scale academic and healthcare programs as Provost, Dean, and Executive Vice President
•Proven success in building and scaling healthcare initiatives, including rapid expansion of a major health sciences college
•Inventor of the EMST150, a globally adopted medical device
•Deep expertise in neurological and respiratory conditions relevant to aging populations

Dr. Susan Brandeis Cahn

•Doctor of Public Health with over 30 years of experience in healthcare policy, data systems, and program evaluation
•Extensive work with the Centers for Medicare & Medicaid Services (CMS), including:
oEvaluation of Accountable Care Organization (ACO) models
oMedicare telehealth policy analysis for reports to Congress
oMedicaid 1115 waiver and payment model analysis
•Expertise in:
oMedicare and Medicaid claims data
oHealth system financing and policy
oHealth equity and disparities research
oLarge-scale data analysis and program evaluation

2. Combined Expertise (Uniqueness of Vendor Team) No other vendor is known to provide this integrated combination of capabilities, including:

•Clinical and translational expertise in neurological and aging populations
•Advanced knowledge of federal healthcare data systems (Medicare/Medicaid)
•Experience designing and evaluating large-scale health programs
•Ability to align data infrastructure with both clinical outcomes and public policy need

3. Compatibility with Existing Model The Florida Memory Project is modeled after the Virginia Memory Project, requiring:

•Specialized knowledge of registry architecture
•Experience integrating multi-source health datasets
•Ability to adapt an established model to Florida-specific regulatory and data environments

Use of another vendor would require significant redevelopment, increasing cost, time, and risk.

4. Non-Commoditized Nature of Services The services being procured include:

•Secure data enclave design
•HIPAA- and CMS-compliant infrastructure
•Data governance and compliance frameworks
•Complex data analysis

These are highly specialized services, not available as standard commercial or commodity offerings.

5. Time Sensitivity A competitive solicitation would:

•Delay implementation of a critical statewide Alzheimer’s registry
•Impact alignment with ongoing policy and funding initiatives
•Delay integration of time-sensitive Medicaid and Medicare datasets

Approved By (names & titles, as appropriate, e.g., requestor, requestor management, information systems, budget, purchasing):

Cari Eyre, Deputy Secretary and Dementia Director, DOEA eyrec@elderaffairs.org

Prospective vendors are requested to provide information regarding their ability to supply the commodities or contractual services described. If it is determined in writing by the agency, after reviewing any information received from prospective vendors, that the commodities or contractual services are available only from a single source, the agency shall: provide notice of its intended decision to enter a single-source purchase contract in the manner specified in Section 120.57(3), F.S.

PUR 7776 (01/16) Page 2 of 2 60A-1.045, F.A.C.

File details come from the government source that posted it. Updated .