1090032 software - subscription commvault - multi-year

The State of California is requesting bids for a multi-year Commvault ResOps (Resilience Operations) as a Service software subscription under RFB-IS-27200077, with bids due August 20, 2026. California Certified Business Enterprise (CBE) participation applies to this procurement.

The scope covers enterprise-grade data protection and resilience operations capabilities, including backup and recovery solutions across the state's information systems infrastructure. Vendors must deliver Commvault ResOps as a managed service with defined service-level agreements and operational oversight. The procurement requires SOC 2 Type II certification or equivalent and comprehensive compliance with California information security standards, including data encryption, access controls, audit logging, and incident response procedures. Vendors must demonstrate compliance with HIPAA, PCI-DSS, and California Consumer Privacy Act (CCPA) requirements. All personnel with access to sensitive data must complete security training and background checks before contract award.

Pricing is structured on a subscription basis with clearly defined costs for licensing, support, and professional services. The contract establishes a multi-year term with renewal options to extend coverage beyond the initial period. Evaluation criteria include vendor experience, technical qualifications, pricing competitiveness, financial stability, and ability to deliver reliable data resilience operations aligned with California's IT governance standards.