Colorado Health Systems Directory (CHSD)

The Colorado Department of Public Health and Environment is requesting proposals for ongoing database management, data integration, and security services for the Colorado Health Systems Directory (CHSD) under RFP 2027000001, with proposals due October 1, 2026 at 2:00 PM MDT via BidNet Direct; written questions are due September 1, 2026.

Proposers must be registered with Colorado Vendor Self Service (VSS) to be eligible for award. Mandatory minimum requirements include Microsoft certification in BizTalk, a minimum of three years' experience with data collection and technical assistance, completion of at least three similar projects within the past five years, and provision of two references. The successful offeror must achieve full functionality within 90 days of contract execution with no separate onboarding period funded. Coverage expectations are 7 AM to 7 PM, seven days per week, without 24/7/365 on-call requirements.

The scope encompasses database maintenance and security across development, pre-production, and production environments hosted on Microsoft Azure; data integration and quality control for up to 2–4 new data sources annually (ranging from 1,000 to over 4,000,000 rows with up to 250 fields each); maintenance of composite quality scores; creation and maintenance of user-defined reports and queries via SQL Server Reporting Services; analytical dashboards with regional splits; and patient-level claims data integration from the All Payer Claims Database and Medicaid. Survey data management includes up to 30,000 records annually using existing templates. The current production environment utilizes Microsoft BizTalk Server 2020 CU7, SQL Server 2022, Windows Server 2019, and .NET 4.8.

The anticipated contract term is July 1, 2027 through June 30, 2028 (one year) plus up to four one-year renewal options for a maximum five-year term. The total five-year budget is $3.5 million, with annual allocations of $1 million for Years 1–2 and $500,000 for Years 3–5, contingent upon available funding. Payments are made monthly on a cost-reimbursement basis per primary activity. State-furnished items excluded from contractor pricing include Azure consumption, BizTalk, SQL Server, Windows Server and Power BI licensing, SSRS licensing, and commercial data validation service subscriptions. The State retains responsibility for obtaining APCD and Medicaid data use agreements.

Proposals must comply with Colorado Information Security Policies, HIPAA, HITECH, FedRAMP standards, and Web Content Accessibility Guidelines (WCAG). Submission of a SOC 2 Type II report on the offeror's own operations is required; FedRAMP or StateRAMP authorization by the offeror is not required. Evaluation criteria include mandatory minimum requirements (pass/fail), references and experience, performance measures, business requirements, data structure and entity management, reporting and analytics, patient-level claims data integration, enterprise data integration and data governance, OIT security requirements, accessibility compliance, and cost proposals. Oral presentations, demonstrations, and Best and Final Offers are anticipated with dates to be determined. The awarded proposer has forty-five calendar days to execute a contract following notification of award.