Multi-Year DOB Anti-Predatory Lending Database IFB

The Illinois Department of Financial and Professional Regulation (IDFPR) is procuring administration, maintenance, and support services for the statutorily required Anti-Predatory Lending Database (APLD) through an Invitation for Bid (IFB #26-440DFPR-BANKI-B-50508) with a due date of May 12, 2026. The APLD is a cloud-based, Software-as-a-Service (SaaS) solution that tracks residential mortgage loan transactions initiated by licensed loan originators and mortgage brokers in Cook, Kane, Peoria, and Will counties, currently managing approximately 95.5 GB of data for approximately 270-335 brokers, 13,993-15,560 originators, and 10,449-11,070 closing agents monthly. The selected vendor must provide a W3C-compliant, web-based platform accessible 24/7 with a minimum 99.97% uptime guarantee, support for three separate environments (development, testing, and production), and integration with the State's multi-factor authentication and CORE regulatory systems. The vendor must submit comprehensive plans within 90 days of execution covering Solution Development and Implementation, Change Management, Training, Exit Transition, and Disaster Recovery and Continuity of Operations, and must maintain Cybersecurity Liability insurance of $10,000,000 per occurrence and General Commercial Liability of $1,000,000 per occurrence ($2,000,000 annual aggregate) while achieving SOC 2 Type II standards and NIST 800-53 security controls compliance. The initial contract term runs from July 1, 2026, through June 30, 2028, with four optional two-year renewal periods available through June 30, 2036, for a maximum ten-year contract duration. The Service Level Agreement establishes four incident severity levels with response timeframes ranging from 45 minutes for critical incidents to 8 hours for low-priority incidents, requires resolution of 95 percent or more of help desk incidents on first response, and mandates 99.97% system availability supported by Microsoft Azure hosting with geo-replicated disaster recovery, nightly full database backups, and differential backups every four hours.

This procurement includes Business Enterprise Program (BEP) requirements under the Illinois Procurement Code (30 ILCS 575), establishing aspirational goals of awarding not less than 30 percent of total contract value to businesses certified as owned by minorities, women, or persons with disabilities; bidders must either self-perform as a certified BEP vendor, partner with BEP-certified subcontractors to meet the goal, or submit a formal waiver request demonstrating good faith efforts to identify and solicit eligible diverse businesses. Vendors must be registered and in good standing in the Illinois Procurement Gateway (IPG) and complete both the Active Registered Vendor Disclosure and Vendor Disclosure forms, with failure to provide accurate information potentially resulting in contract voidance, debarment, or civil penalties. No incumbent vendor is referenced in the solicitation, indicating this is a newly procured contract; however, the selected vendor must integrate with the State's existing multi-factor authentication systems and CORE regulatory systems while maintaining compatibility with potential future migration to State infrastructure through VMware-compatible hypervisor tools. The contract does not require State-hosted infrastructure during the initial term, with vendors expected to provide vendor-hosted solutions meeting all functional requirements, though bidders may propose alternative cloud architectures functionally equivalent to Azure-based hosting if they submit redlined Service Level Agreements reflecting their proposed solutions. The total contract value is to be entered by the State prior to execution based on the awarded quote; all costs for hosting, maintenance, technical support, unlimited training, system enhancements, scalability increases, and integrations within the system's existing architecture are included at no additional cost to IDFPR. Vendor pricing must not exceed the lowest prices charged to other comparable customers for similar services, and price evaluation is based on the total cumulative price covering the initial contract term and all renewal options across the full ten-year period.