Cloud-based mobile communications capture solution

The State of California is requesting bids on a cloud-based mobile communications capture solution under RFB-IS-26200952-1, with bids due June 10, 2026. The solution must support capture, storage, and management of mobile communications data (voice, text, email, instant messaging) across state agencies with integration into existing state IT infrastructure.

The system must meet stringent information security and privacy requirements, including NIST Cybersecurity Framework compliance, SOC 2 Type II certification, multi-factor authentication, encryption for data in transit and at rest, role-based access controls, and annual penetration testing and security audits. The solution must comply with the California Consumer Privacy Act, HIPAA where applicable, and FINRA regulations where applicable. The contractor assumes responsibility for implementing all security controls at its own expense and must report security incidents to the state within 24–72 hours depending on severity. Business continuity and disaster recovery plans with defined recovery time objectives are required, as is current cyber liability insurance.

Functional requirements include handling high-volume data processing, searchable audit trails, 24/7 system availability, and data retention and destruction procedures aligned with statutory requirements. The system must support both cloud-based and hybrid deployment models with redundancy. Implementation must occur within 90 days of contract award with phased rollout across agencies. Service level agreements must guarantee 99.9% uptime and maximum 4-hour response times for critical system issues.

Pricing shall be structured on a per-user-per-month basis with volume discounts based on anticipated usage across participating state agencies. Pricing should include both initial implementation and ongoing operational expenses separately identified. Vendors must demonstrate experience managing similar systems for government entities, provide references from comparable implementations, and maintain financial stability for long-term service delivery.