Bank Depository Services

Dallas County, Texas is requesting proposals for bank depository services, with proposals due July 17, 2026. Bidders must submit a Non-Collusion Affidavit and Authorization for Release of Financial Information as part of their proposal package.

Proposers must certify compliance with the Gramm-Leach-Bliley Act (GLBA) and the FTC Safeguards Rule (16 CFR Part 314), effective June 9, 2023. The compliance acknowledgment requires institutions to implement a comprehensive Written Information Security Program (WISP); designate a qualified Chief Information Security Officer (CISO) reporting annually to the Board; conduct periodic risk assessments; implement safeguards including access controls, data encryption (minimum TLS 1.2 in transit and AES-256 at rest), and multi-factor authentication for all personnel accessing customer information; establish service provider oversight through contractual requirements; maintain a written incident response plan with annual board reporting on WISP status; and undergo annual SOC 1 Type II and SOC 2 Type II audits. Proposers must attest to each compliance requirement or provide explanations for any partial compliance or pending remediation.

Dallas County also requires contractors to certify that they do not boycott energy companies, a condition of contract award and performance under Texas state policy. Bidders must complete and notarize the Non-Collusion Affidavit affirming that bids are genuine, independent, and made without coordination or collusive agreements with competing bidders. The Authorization for Release of Financial Information permits the county to conduct financial and credit assessments of bidders to determine capability to serve as the county's depository institution.