26036793- software - identity recovery - rubrik new

The State of California is soliciting bids for identity recovery software solutions from Rubrik under Request for Bids (RFB) 26036793, posted on May 10, 2026, with a submission deadline of May 22, 2026. This procurement represents an expansion of California's data protection and security infrastructure, seeking a new software solution that will enhance the state's identity recovery capabilities across participating agencies. The deliverables include Rubrik identity recovery software licenses, implementation services, technical support, and maintenance coverage, with potential renewal options for continued service beyond the initial contract period. Vendors must demonstrate compliance with mandatory Information Security & Privacy Requirements that establish technical safeguards, data protection standards, encryption protocols, and adherence to applicable state and federal privacy regulations. The procurement process requires bidders to submit completed required forms including Certified Business Enterprise (CBE) certification documentation, Certificates of Insurance evidencing appropriate coverage levels, and compliance with all forms specified in the Appendix A purchasing required forms. Evaluation criteria encompass pricing terms, vendor qualifications, financial capability, insurance coverage adequacy, and the contractor's demonstrated ability to meet or exceed all specified information security standards, with vendors potentially subject to security assessments as part of contract administration.

California's procurement process includes set-asides for small businesses and other designated categories as applicable under state procurement law, with the CBE form serving as a mandatory compliance and certification document for eligible small or disadvantaged business enterprises. The solicitation establishes mandatory compliance standards for information security and privacy controls that are non-negotiable requirements rather than optional enhancements, applicable throughout all phases of system design, implementation, and ongoing operations. Contractors must maintain documented policies, undergo regular security audits, and implement incident response procedures to demonstrate continued adherence to security requirements, with potential contract remediation or termination as consequences for non-compliance. While the documentation does not identify any incumbent vendors or specific existing infrastructure requiring integration, the funding derives from the state's operational budget allocated to information security and data protection initiatives. The procurement does not specify an explicit award value or budget range in the available documentation; however, interested vendors should consult the complete RFB specifications for detailed pricing expectations and contract term information.