4618-20261013152929 Hattiesburg

Hattiesburg Clinic, P.A. issued RFP No. HC-RTG-2026-EMAIL for AI-driven email and web-browser threat detection for Microsoft 365, with proposals due November 1, 2026, so the deadline has passed. The procurement is funded through the Mississippi Rural Health Transformation Program using federal funds, which subjects bidders to 2 CFR Part 200, SAM.gov registration, and Equal Employment Opportunity provisions. Small, minority-owned, women's business enterprise, and labor surplus area firms are encouraged to apply, but the source sets no set-aside.

The awardee must execute the Clinic's HIPAA Business Associate Agreement, hold SOC 2 Type II certification or equivalent, store and process Clinic data within the United States, and use least-privilege Microsoft 365 API permissions. Bidders must also submit a notarized non-collusion affidavit (Attachment A) and a pricing form (Attachment B).

The solution must protect 2,001 licensed users across more than 60 locations. It must detect payloadless business email compromise, vendor impersonation, QR-code and image-based phishing, and credential harvesting that evade the existing secure email gateway. Web-browser protection against malicious sites and credential theft is required. Deployment must occur without changes to existing mail flow infrastructure, and the vendor must deliver monthly threat reporting.

The initial term is twelve months from service activation, with pricing required for two optional twelve-month renewals that the Clinic is not obligated to exercise. Implementation must be substantially complete within 30 days of contract execution. Pricing excludes Mississippi sales tax, which must be listed separately. Attachment B requires Year 1 subscription, one-time implementation, and grand total lines, along with unit rates for additional users, hourly professional services, annual price escalation caps, and minimum user count or true-up terms. Bidders must state a proposal validity date and certify that prices are firm through that period.

Evaluation weights are 45 percent on technical solution and compliance, 30 percent on Year 1 and renewal pricing, 15 percent on vendor experience and references, and 10 percent on implementation approach and timeline.