On Call Solution & Schedule Management System

University Health, a Level I Trauma Center located in Bexar County, Texas, is seeking an On Call Solution & Schedule Management System through a comprehensive Request for Proposal (RFP-225-08-044-SVC). The procurement aims to acquire a robust scheduling system for managing multidisciplinary clinical teams, with specific requirements including administrative version control, user-friendly application functionality, third-party application integration, and unlimited end-user licenses. The solicitation will be conducted through the Bonfire e-Procurement Portal, with proposals evaluated across seven key criteria: Company Background (3 points), Functionality (46 points), Integrations (15 points), Security & IT Management (16 points), Implementation (10 points), and Price (10 points), totaling 100 points. The contract term is initially three years with two potential one-year renewal periods, and the proposal submission deadline is October 17, 2025. Vendors must comply with extensive cybersecurity requirements, including annual network and application penetration testing, adherence to security standards from organizations like ISO, IEC, OWASP, and NIST, and submission of a SOC Type II report.

The procurement encourages participation from local, small, and veteran business enterprises, with vendors required to define a minimum percentage of monies to be spent with certified second-tier vendors. University Health does not discriminate against vendors based on race, color, religion, sex, age, national origin, or disability. Vendors must complete mandatory credentialing through Symplr and be prepared to integrate with the existing Epic medical records system. The hospital district, as a political subdivision of Texas, maintains specific legal provisions, including a self-insurance program with liability limits of $100,000 per person and $300,000 per occurrence for bodily injury. While no specific budget range is explicitly stated, the comprehensive requirements and integration expectations suggest a significant investment in the selected solution. Potential vendors must navigate complex technical requirements, including specific security protocols such as domain joining, CrowdStrike Falcon monitoring, TLS 1.2 encryption, and compliance with HIPAA data protection standards.