RFP_32701-25-414_Amendment_5.pdf

This is Amendment 5 to Request for Proposals #32701-25-414 issued by the State of Tennessee Department of Environment and Conservation for a State Revolving Loan Fund Program Data Management System. The amendment updates the RFP schedule of events with revised dates for key milestones. The pre-response conference is scheduled for November 21, 2025, with a notice of intent to respond deadline on November 24, 2025. Written questions and comments are due by December 3, 2025, followed by a state response on December 30, 2025, a second round of questions due February 25, 2026, and state response by March 11, 2026. The response deadline is March 25, 2026, with technical evaluations to be completed by April 22, 2026. Respondent oral presentations are scheduled for May 4-5, 2026, followed by cost proposal opening and scoring on May 6, 2026. Negotiation is planned for May 7-12, 2026, with the state's notice of intent to award released on May 13, 2026. The protest period ends May 20, 2026, the contract is sent to the contractor for signature on May 21, 2026, and the contractor signature deadline is May 27, 2026.

The amendment confirms that all revisions become effective upon release, while all other terms and conditions of the original RFP remain in full force and effect. The underlying procurement seeks a comprehensive Commercial-off-the-Shelf (COTS) solution to support integrated loan and grant servicing for the Clean Water State Revolving Fund (CWSRF), Drinking Water State Revolving Fund (DWSRF), and State Water Infrastructure Grant (SWIG) Program, accommodating approximately 40 internal users and 600 external users across Tennessee municipalities, utility districts, and water authorities. The contract has a maximum estimated liability of $4,000,000 for a 60-month term, with pricing required for configuration, integration, data migration, implementation, training, annual licensing, hosting, maintenance, and professional services. Contractors must comply with strict technical requirements including SOC 2 Type 2 compliance, annual penetration testing, disaster recovery capabilities with a four-hour Recovery Point Objective, and data encryption standards, with all state data hosted within the continental United States.