27000384- software - cloud renewal - rubrik (brand only)

The State of California is requesting bids for a Rubrik cloud software renewal under solicitation 27000384, with proposals due July 20, 2026. This is a brand-restricted procurement — Rubrik products only — eliminating open competition and requiring bidders to demonstrate authorization as Rubrik resellers or distributors.

The scope covers renewal of existing Rubrik cloud subscription services for data protection and recovery, with pricing evaluation centered on total cost of ownership including all licensing, support, and maintenance fees. Bidders must comply with comprehensive Information Security & Privacy Requirements including SOC 2 Type II, ISO 27001, encryption of data in transit and at rest, multi-factor authentication, role-based access controls, audit logging, incident response procedures with defined notification timelines, data residency controls, and business continuity and disaster recovery plans with specified recovery time objectives and recovery point objectives. Compliance with California Consumer Privacy Act (CCPA) requirements and state and federal data protection obligations is mandatory. The vendor must submit to periodic security reviews and audits throughout the contract term.

Bidders must complete all required forms including a Certified Business Enterprise (CBE) form and a Certificate of Insurance, and must provide documentation of security certifications, penetration testing results, and privacy impact assessments. The renewal structure maintains service continuity with the incumbent Rubrik service provider, ensuring consistency with the state's existing cloud data management infrastructure. Funding derives from the state's information technology budget allocation. The contract includes potential options for extension based on performance and continued organizational need.