Coya biofeedback subscription

The Texas Department of Public Safety (DPS) is issuing an Invitation for Bids (IFB) for a five-year blanket contract to provide biofeedback subscriptions and biometric coaching programs, including the Coya app or equivalent services. The procurement seeks coaching subscriptions and wearable biometric devices (such as WHOOP or Garmin) for an estimated minimum of 165 units, with each subscription delivering research-based coaching on health habits including nutrition, hydration, sleep, movement, and physical training. Required coaches must have at least one year of experience working with first responders and hold at least two certifications or education credentials in sports and nutrition fields; the program may include annual travel costs aligned with state travel rates. Bidders must submit electronic responses by 5:00 p.m. Central Time on October 24, 2025, to DPS_Solicit_Response@dps.texas.gov or through the DPS Online Bid Room portal, with an anticipated contract award date of October 31, 2025. The contract term commences on the effective date and continues for five years, with DPS retaining the right to extend performance for up to six months if necessary for re-advertising or transitioning to new contracts. Bidders must submit pricing within a Mandatory Pricing Schedule covering subscription and travel costs for each of the five contract years and provide evidence of financial resources including audited financial statements for the last two years, a Dun & Bradstreet report, or a detailed financial stability statement; service call response times must be within 24 hours during regular work hours and within four to 24 hours for emergency calls outside regular hours depending on severity.

A Historically Underutilized Businesses (HUB) Subcontracting Plan is mandatory and must be submitted with all responses; failure to include the HSP and required forms will result in rejection of the bidder's response. Vendors must comply with extensive cybersecurity requirements including CJIS, HIPAA, and PCI DSS standards as applicable, complete a Consensus Assessments Initiative Questionnaire (CAIQ) within the last year, and maintain compliance with Cloud Security Alliance Cloud Control Matrix standards; all DPS data must remain within the United States and be encrypted using FIPS 140-2 or 140-3 validated cryptographic modules. Contractors must maintain appropriate insurance coverage throughout the contract term, conduct annual vulnerability scanning and penetration testing, and remediate all vulnerabilities within 90 days. The solicitation requires contractors to obtain and maintain TEC Form 1295 certification if required, comply with E-Verify system participation, provide drug-free workplace certification, and adhere to all DPS security policies and facility-specific regulations. No minimum compensation is guaranteed by DPS, and no payments will be made until the Contract Monitor specifically approves commodities or services and authorizes invoice submission. The specific award value or budget range for this procurement is not disclosed in the solicitation materials provided.