OnePlan Subscription - Renewal

The Ohio Department of Developmental Disabilities is issuing a Request for Quote (RFQ) for the renewal of OnePlan subscription services and related software solutions. This procurement encompasses one GCC Tenancy Surcharge; 25 OnePlan Enterprise licenses; four OnePlan Enterprise licenses for a five-month term (November 1, 2026 through March 31, 2027); 150 OnePlan Team Member Plus licenses; one OnePlan Innovation Portal; one OneConnect Productivity Azure DevOps training package; one OnePlan Advantage Essentials package consisting of 40 hours of support; one OnePlan Academy Express Standard LMS with two instructor-led courses; and two Premier Success offerings at 20 percent of software subscription fees. The primary contract term runs from April 1, 2026 through March 31, 2027, with select items commencing November 1, 2026. Delivery is required directly to the Ohio Department of Developmental Disabilities Information Technology Services at 30 East Broad Street, 13th Floor, Columbus, Ohio 43215, attention Kim Lewis. All quotes must be submitted through OhioBuys with an expiration date of at least 90 days from submission, reference the contract number and Product ID, and include contact information for Kim Lewis at 614-369-4083 for inquiries. Bidders must be registered with the Ohio Office of Budget & Management (OBM) and possess a payee/supplier ID verified at https://ohiopays.ohio.gov/, and all responsible bidders must submit a completed Data Security form. Award will be made to the lowest, responsible, and responsive bidder, with a due date of February 6, 2026.

Contractors responding to this opportunity must comply with comprehensive Data Security and Privacy Terms aligned with National Institute of Standards and Technology (NIST) Special Publication 800-53 at the moderate baseline level and Federal Information Security Management Act (FISMA 2014) requirements. All solutions must maintain State Data—including Personally Identifiable Information (PII), Protected Health Information (PHI), Federal Tax Information (FTI), and Criminal Justice Information (CJI)—across secure facilities within the contiguous United States with minimum redundancy across two geographically distant data centers. Required security controls include multifactor authentication for systems containing Sensitive Data, encryption of data at rest and in transit, annual Service Organization Control (SOC) Type 2 audits at contractor expense, mandatory background investigations for personnel accessing FTI or CJI, regular source code vulnerability scanning following Open Web Application Security Project (OWASP) standards, and business continuity and disaster recovery plans. Contractors must report Security Incidents within 24 hours to Enterprise.SIRT@das.ohio.gov or 614.728.7448 and comply with all applicable federal regulations including IRS Publication 1075, HIPAA, and FBI Criminal Justice Information Services Security Policy. No specific budget range or award value has been published in the available documentation, and no incumbent vendor information or set-aside designations have been identified.