BB27-103, Medication Dispensing System

The State of Utah Division of Purchasing, conducting for the Department of Health and Human Services, is requesting proposals for parts, maintenance, support, and installation of BD Pyxis Medication Dispensing Systems under RFP BB27-103, with proposals due October 6, 2026. A single award will go to the responsive and responsible vendor with the highest evaluated score. Vendor pricing must be guaranteed for one year; the contract term is five years.

The scope encompasses equipment supply, installation, and comprehensive maintenance and support services for three correctional facility locations: Utah State Correctional Facility (USCF) Currant medical and psychiatric infirmaries and Central Utah Correctional Facility (CUCF) Henry nursing station. Equipment includes patient-centric interfaces, barcode scanners, thermal printers, sealed keyboards, biometric access systems, six-drawer and seven-drawer MedStation units, single-column auxiliary towers, dual-locking systems, and refrigeration units. The contractor must deliver 24-hour response time for critical failures and 3 business day response for routine repairs, with troubleshooting initiated within 4 hours. All contractor employees and subcontractors must pass background checks. The contractor must achieve GovRAMP Core verification within 12 months and GovRAMP Moderate Authorized status within 24 months of contract amendment or face termination.

Evaluation allocates 70 percent of points (700 of 1,000 total) to technical criteria—weighted equally across equipment provision capability, response time demonstration, qualified 24/7 technical support with remote and on-site service, and prior BD Pyxis experience in healthcare or correctional settings—and 30 percent (300 points) to cost. A minimum technical score of 60 percent (420 points) is required for cost evaluation. Five mandatory minimum requirements must be satisfied before technical scoring, including equipment provision, license maintenance, service response commitments, and qualified personnel availability.

The contractor must comply with NIST 800-53 and GovRAMP security standards, maintain cybersecurity insurance ($2 million to $10 million depending on data classification), provide one-year hardware and software warranties, submit to state audits, and destroy all state data within 90 days of termination. Commercial general liability insurance of at least $1 million per occurrence and $3 million aggregate, and workers' compensation insurance, are required. The State retains ownership of all work product and data; contractors retain pre-existing intellectual property rights. DHHS will remit payment within 30 days of correct invoice receipt. Questions should be submitted through the U3P portal.