Revision Request _ Response.pdf

PDF 1 MB Posted

Attached to
Electronic Payment Transaction Processing Services
Solicitation number
BPM005375
Issued by
Arizona

About this file

This document is a revision request response from ViaPath Technologies (Global Tel*Link Corporation) to the Arizona Department of Corrections, Rehabilitation & Reentry (ADCRR) regarding RFP BPM005375 for Electronic Payment Transaction Processing Services. ADCRR issued a request for clarifications on October 25, 2023, requiring responses by 9:00 a.m. MST on October 31, 2023. ViaPath submitted its response on October 30, 2023, addressing two primary areas of concern identified during the initial proposal evaluation phase. The clarifications requested focused on the company's disaster recovery capabilities and penetration testing procedures, both critical security and operational continuity requirements for the payment processing services contract.

In its response, ViaPath provided detailed information on its disaster protection and recovery systems, including near real-time backup frequency, a mirror site located in Dallas with Network Attached Storage backup, an average recovery time of approximately four hours across various disaster scenarios, monthly self-testing of backup procedures, and a maximum theoretical data loss window of approximately 15 minutes. Regarding penetration testing, ViaPath clarified that it does not allow customers to perform testing or receive test results on its multitenant system due to potential impacts on other customers, but indicated it conducts external penetration testing annually and continuously through BugCrowd, as well as annual internal penetration testing. Jonathan Walker, Chief Growth Officer, signed the response as an authorized company representative.

View the file

Other files

File Type Posted
JPay pricing pg3.jpg JPG image
Attachment_2_-_Boycott_of_Israel_Disclosure.pdf PDF
Attachment_4_-_Confidential_Information.pdf PDF
JPay pricing pg2.jpg JPG image
Attachment_5_Supplement_-_Deviations_and_Exceptions.pdf PDF
Appendices.pdf PDF
Keefe pricing pg2.jpg JPG image
Original_Binder_Cover.pdf PDF
1_-_Attachment_1_-_Offer_and_Acceptance_Form.pdf PDF
Penetration Test Report Summary- TKC Holdings 2023.06.30.pdf PDF
Keefe pricing pg1.png PNG image
Confidential_-_Supplement_-_ViaPath_PCI_DSS_Certification.pdf PDF
AZDOC_BPM005375_Scope_of_Work_Response_and_Attachment_Forms_100523.pdf PDF
BPM005375_Solicitation_Requirements_per_Amendment_1.pdf PDF
BPM005375_-_Amendment_1.pdf PDF
BPM005375_Pre-Solicitation_Documents.pdf PDF
Attachment_8_-_Forced_Labor_of_Ethnic_Uyghurs_Ban.pdf PDF
JPay_Response_to_RFP_No._BMP005375.pdf PDF
Attachment_10___Letter_of_Insurability.pdf PDF
JPay pricing pg1.png PNG image
7_-_Attachment_7_-_References.pdf PDF
Letter_of_Transmittal.pdf PDF
2_-_Attachment_2_-_Boycott_of_Israel_Disclosure.pdf PDF
Attachment_10_-_Letter_of_Insurability.pdf PDF
8_-_Attachment_8_-_Forced_Labor_of_Ethnic_Uyghurs_Ban.pdf PDF
GTL pricing pg1.jpg JPG image
GTL pricing pg2.png PNG image
BPM005375_Solicitation_Requirements_rev1.pdf PDF
BPM005375_Award_Documents.pdf PDF
BPM005375 Evaluation Documents.pdf PDF
Attachment_5_-_Conformance_Statements.pdf PDF
Keefe_Response_to_BMP005375.pdf PDF
10_-_Description_of_Work__Scope.pdf PDF
Attachment_G_-_Walk-in_Storefront_Locations.pdf PDF
11_-_Pricing_and_Fees_-_Header.pdf PDF
Keefe Response to revision request.pdf PDF
Attachment_A_-_Insurance.pdf PDF
Attachment_5_Conformance_Statements_Deviations_Exceptions_Supplement_1_of_1 (1) - Copy.pdf PDF
BPM005375_Solicitation_Instructions_per_Amendment_1.pdf PDF
BPM005375_Solicitation_Instructions.pdf PDF
BPM005375_Solicitation_Requirements.pdf PDF
JPay_s_Quotation_Form.pdf PDF
Attachment_7_-_Experience_and_References.pdf PDF
JPay_s_Quotation_Form.xlsx XLSX spreadsheet
Attachment_1_-_Offer_and_Acceptance_Form.pdf PDF
Attachment_6_-_Subcontractors.pdf PDF
Attachment_3_-_Rules_for_Non-Employees.pdf PDF
Attachment_9_-_Accepted_Payments.pdf PDF
Attachment_B_-_Keefe_group_Security_Program_Overview_2022.pdf PDF
Keefe pricing pg3.png PNG image
Show 40 more

50 files listed here. See the rest on GovTribe.

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

10/31/23, 7:56 AM State of Arizona Mail - RFP BPM005375 - Electronic Payment Transaction Processing Services Request for Revision | ViaPath R… https://mail.google.com/mail/u/0/?ik=78ac67c65f&view=pt&search=all&permthid=thread-f:1781236602797674332%7Cmsg-f:1781236602797674332&… 1/1

David Brackney <dbrackney@azadc.gov>

RFP BPM005375 - Electronic Payment Transaction Processing Services Request for Revision | ViaPath Response 1 message

Elana Alexander <elana.alexander@viapath.com> Mon, Oct 30, 2023 at 7:33 PM To: "dbrackney@azadc.gov" <dbrackney@azadc.gov> Cc: Nikki Calhoun <nikki.calhoun@viapath.com>, Tammy Golchert <Tammy.Golchert@viapath.com>, "rfp@viathat.com" <rfp@viathat.com>

Dear Mr. Brackney, ViaPath Technologies (ViaPath) is pleased to present the attached response to your letter dated October 25, 2023 regarding our disaster recovery and penetration test process. Please feel free to contact Nikki Calhoun, Payment Services Specialists at 602.614.5480 or Nikki.Calhoun@viapath.com, if you should need additional information or clarification.

Regards, E'Lana Alexander

ViaPath Technologies | Proposal Developer elana.alexander@viapath.com www.viapath.com

ViaPath Technologies was awarded Top Workplaces 2021 and 2022!

This electronic mail transmission is intended for the use of the individual or entity to which it is addressed and may contain confidential information belonging to the sender. If you have received this transmission in error, please notify the sender immediately and delete the original message. Unless explicitly noted above, this e-mail should not, in any way, be considered evidence of the sender's intent to be bound to any agreement.

2 attachments

Ltr - Revision Requests - ViaPath.pdf 182K

ViaPath Clarifications BPM005375 EPT Processing Services Final.pdf 210K mailto:Nikki.Calhoun@viapath.com mailto:elana.alexander@viapath.com http://www.viapath.com/ https://www.viapath.com/ https://www.viapath.com/ https://mail.google.com/mail/u/0/?ui=2&ik=78ac67c65f&view=att&th=18b83940baadcf5c&attid=0.1&disp=attd&safe=1&zw https://mail.google.com/mail/u/0/?ui=2&ik=78ac67c65f&view=att&th=18b83940baadcf5c&attid=0.1&disp=attd&safe=1&zw https://mail.google.com/mail/u/0/?ui=2&ik=78ac67c65f&view=att&th=18b83940baadcf5c&attid=0.2&disp=attd&safe=1&zw https://mail.google.com/mail/u/0/?ui=2&ik=78ac67c65f&view=att&th=18b83940baadcf5c&attid=0.2&disp=attd&safe=1&zw

3120 Fairview Park Dr. / Suite 300 Falls Church, VA 22042

October 30, 2023

Arizona Department of Corrections, Rehabilitation and Reentry Mr. David Brackney, Sr. Procurement Specialist State Procurement Office 701 E. Jefferson, Mail Code 55302 Phoenix, AZ 85034

RE: RFP BPM005375 - Electronic Payment Transaction Processing Services Request for Revisions

Dear Mr. Brackney, ViaPath Technologies (ViaPath) provides the following information in response to your letter dated October 25, 2023.

1. Disaster Protection/Recovery (Section 4.5.4.1.2) ViaPath’s response to this section provides an overview of its provisions for disaster protection/recovery, but does not provide the level of detail requested. Please provide additional details on how your protection and recovery systems operate and other requested details.

As noted in our Business Continuity and Disaster Recovery Plan, ViaPath has an existing policy and plan in place should any emergencies occur. Below is additional information in response to the details requested:

• Update/restore point frequency – ViaPath does this in near real time

• Remote backup/mirror site(s) locations – Mirror site location is our Dallas data center, and information is backed up to a Network Attached Storage (NAS)

• Time needed for full recovery after a disaster – Our plan covers various types of disasters, our average recovery time based upon all disaster types is approximately four (4) hours

• Method and frequency of self-testing its backup and recovery procedures - ViaPath performs self-testing on a monthly basis

• Date of last disaster recovery test – the last test was conducted in January 2023

• The maximum theoretical potential loss using ViaPath’s system would be approximately 15 minutes, we have secondary systems that would minimize downtime

2. Penetration Testing (Section 4.5.4.1.5) ViaPath’s response does not provide the requested level of detail intended on this testing. As offered in your proposal, please provide a summary of the latest third-party test report and/or adequate additional details so that ADCRR may evaluate ViaPath’s penetration testing.

ViaPath took a partial exception to requirement 4.5.4.1.5 as we do not allow customers to perform penetration testing of our system and we do not provide penetration test results. ViaPath does not allow customers to perform penetration testing nor provide penetration test results to our customers as these systems are multitenant systems and providing these results could affect other customers.

We do perform external penetration testing both as an annual engagement and continuously using BugCrowd. In addition, internal penetration testing is performed annually.

3120 Fairview Park Dr. / Suite 300 Falls Church, VA 22042

In closing, I want to thank the Arizona Department of Corrections, Rehabilitation and Reentry for the opportunity to respond to the Request for Proposal. We look forward to continuing our high priority service under the new contract. As Chief Growth Officer I am authorized to bind the company. Please feel free to contact Nikki Calhoun, Payment Services Specialists at 602.614.5480 or Nikki.Calhoun@viapath.com with any further questions.

Sincerely, Jonathan Walker Chief Growth Officer

Procurement Services, 701 E. Jefferson, Mail Code 55302, Phoenix, AZ 85034

Phone: (602) 542-1172

Arizona Department of Corrections

Rehabilitation & Reentry

KATIE HOBBS

GOVERNOR

RYAN THORNELL

DIRECTOR

October 25, 2023

Global Tel*Link Corporation d/b/a ViaPath Technologies

3120 Fairview Park Dr.

Suite 300

Falls Church, VA 22042

Attn: Nikki Calhoun, Payment Specialist

Sent to: rfp@viapath.com

Re: RFP BPM005375 - Electronic Payment Transaction Processing Services

Request for Revisions

Dear Ms. Calhoun:

The Arizona Department of Corrections, Rehabilitation & Reentry (ADCRR) is in the process of evaluating your proposal submitted in response to the above referenced RFP. ADCRR conducted an initial evaluation of the proposal submitted and in order to complete its evaluation, the

Department is requesting clarification of the following from Global Tel*Link Corporation d/b/a

ViaPath Technologies (ViaPath):

1. Disaster Protection/Recovery (Section 4.5.4.1.2)

ViaPath’s response to this section provides an overview of its provisions for disaster protection/recovery, but does not provide the level of detail requested. Please provide additional details on how your protection and recovery systems operate and other requested details.

2. Penetration Testing (Section 4.5.4.1.5)

ViaPath’s response does not provide the requested level of detail intended on this testing. As offered in your proposal, please provide a summary of the latest third-party test report and/or adequate additional details so that ADCRR may evaluate ViaPath’s penetration testing.

Please provide the requested information by email to David Brackney at dbrackney@azadc.gov no later than 9:00 am MST (Arizona Time) on October 31, 2023.

If you have any questions or concerns, please feel free to contact me.

701 E. Jefferson St.

PHOENIX, ARIZONA 85034

(602) 542-5497 corrections.az.gov mailto:dbrackney@azadc.gov http://www.corrections.az.gov/

Procurement Services, 701 E. Jefferson, Mail Code 55302, Phoenix, AZ 85034

Phone: (602) 542-1172

Sincerely, David Brackney

Sr. Procurement Specialist

Dave Brackney

File details come from the government source that posted it. Updated .