Adobe Licensing

The Illinois Department of Information Technology (DoIT) is requesting bids on Adobe software licenses and related maintenance services for all DoIT products, with bids due November 2, 2026, and questions due seven days prior to bid opening.

This is a five-year fixed-quantity agency-specific agreement with an initial term from December 23, 2026 through December 22, 2031. All deliverables are electronic; no physical goods are required. The vendor must maintain authorized Adobe reseller status throughout the contract term and comply with specified Service Level Agreements, including one-hour response times for critical system-wide outages and one-business-day provisioning for new licenses.

Compliance with multiple security and accessibility frameworks is mandatory: NIST Special Publication 800-53 Revision 5 security controls, Cloud Security Alliance recommendations, Illinois Information Technology Accessibility Act Standards and WCAG 2.1 Level AA, FedRAMP, CJIS, and HIPAA where applicable. Data centers must be located within the contiguous United States. Vendors must encrypt all state data at rest and in transit using AES-256 encryption compliant with FIPS 140 standards; remediate critical and high vulnerabilities within 24 hours of discovery; restrict artificial intelligence use to expressly disclosed and state-authorized applications; maintain comprehensive logging compliant with Minimum Logging Requirements (Appendix S1); and integrate with the State's Identity and Access Management platform with multifactor authentication for all privileged accounts. Vendors must provide SOC 2 Type 2 audit reports at contract award and annually thereafter, Software Bills of Materials in recognized formats (SPDX or CycloneDX), encrypted backups meeting state-defined Recovery Point Objectives, and annual disaster recovery testing. Data breach notification to the State's Chief Information Security Officer is mandatory within 24 hours.

General commercial liability insurance of $1 million per occurrence and $2 million annual aggregate, plus worker's compensation insurance as required by law, are required. Pricing is firm and will be established through BidBuy; maximum contract amount is not specified. All bids must remain firm for 90 days from opening. The State reserves the right to receive prompt-payment discounts and warrants that vendor pricing will not exceed the lowest prices offered to comparable customers for similar quantities and conditions. The contract is contingent on appropriated funds and may be terminated for convenience with 30 days' notice or for cause immediately upon notice. Vendors must complete either a Vendor Disclosure or IPG Active Registered Vendor Disclosure form and submit all required documentation through BidBuy. Contracts valued at $1,000 or more are subject to a $15 Minority Contractor Opportunity Initiative administrative fee, deducted from the vendor's first payment.