26-MH DD Westlaw Software-SS

The State of Illinois Department of Human Services (DHS) and the Department of Innovation and Technology (DoIT) are pursuing a sole source procurement for Westlaw Correctional legal research software from Thomson Reuters. The contract, identified as Bid-47722, aims to provide specialized legal research platforms for correctional facilities with unique capabilities not available from other vendors. The procurement involves acquiring a comprehensive legal research service with advanced features like the National Reporter System, Key Number System, and WestSearch Plus technology that enables inmates to effectively research legal materials. Key deliverables include AI-powered research suggestions, comprehensive legal resources, and advanced citation tracking services with features like pending legislation notifications and graphical case history tracking. The solicitation requires a sole source hearing, with written comments or hearing requests due by May 23, 2025, at 4 p.m., and the full proposal is due by May 28, 2025. Vendor qualifications include demonstrated expertise in legal research, ability to meet stringent state cybersecurity requirements outlined in the DoIT Cloud Hosting Terms and Conditions, and compliance with federal and state data protection regulations.

The procurement appears to be an unrestricted contract without specific set-aside designations for disadvantaged enterprises. Thomson Reuters is positioned as the exclusive provider, with no indication of competing vendors or alternative solutions. The current technology infrastructure requires integration with existing state correctional facility systems and must adhere to strict security protocols, including NIST 800-53 moderate security categorization standards, comprehensive data encryption requirements, and mandatory third-party security audits like SSAE-18, SOC 1, and SOC 2 certifications. While specific contract value details are not explicitly stated, the procurement involves a specialized software solution with comprehensive legal research capabilities. The contract will require vendors to store data within the contiguous United States, use non-proprietary data formats, and implement robust access control and incident response mechanisms. Vendors must also undergo continuous risk assessments and develop a Plan of Action and Milestones to address any identified security deficiencies.