Online Compliance Tracking For Probationers and Participants

The State of Utah Department of Commerce is requesting proposals for an electronic health compliance monitoring, tracking, and toxicology testing platform to serve probationers and participants under RFP JK26-40, with proposals due July 30, 2026. The contract will be awarded as a single award to the responsive and responsible vendor with the highest evaluation score.

Four mandatory prerequisites filter participation: significant solution portions must have been in continuous use by at least five professional health monitoring clients for three years; the vendor must demonstrate minimum two years of continuous operation in multi-matrix biological testing program development and administration; the vendor must have financial capacity to obtain a $1 million performance bond; and the solution must support Multi-Factor Authentication. The incumbent vendor is Affinity.

The platform must serve the Utah Professionals Health Program (UPHP) and licensee probation monitoring with secure web-enabled portals for Division staff, program participants, and approved third-party stakeholders. The vendor must establish testing site relationships statewide such that no participant in cities with populations exceeding 5,000 travels more than one hour each way, with daily collection availability 365 days per year. All services must be provided at no cost to the State, funded by testing fees and participant fees. The vendor must migrate current and historical data from Affinity, achieve GovRAMP Core status within 12 months of contract execution and GovRAMP Moderate Authorized status within 24 months, and comply with NIST 800-53 Revision 5 standards. Live technical support for participants must be available seven days per week with a maximum response time of 15 minutes; Division staff support is available weekdays 0700 to 1800 MST with two-hour maximum response. A dedicated contract manager must be available during Division business hours.

Evaluation uses an 80/20 technical-to-cost weighting (800 points technical, 200 points cost). Technical criteria include Technical Merit and Scope of Work ability (250 points), Service Capability and customer service processes (150 points), Performance References (150 points), Multi-Factor Authentication and Integration (150 points), and organizational structure documentation (100 points). A minimum of 560 technical points is required for advancement. Cost evaluation uses a comparative formula where the lowest-cost vendor receives 100 percent of available cost points, with other proposals receiving proportional points based on price differential.

The contract term is five years with pricing guaranteed for one year. Workers' compensation, commercial general liability of at least $1 million per occurrence/$3 million aggregate, and cyber security insurance with minimum aggregate limits of $2 million (low-risk), $5 million (moderate-risk), or $10 million (high-risk data) are required. All State data must be stored, processed, and disposed of exclusively within the United States with encryption in transit and at rest. Criminal background screening and drug testing are required for all personnel with access to secure state facilities or data.