PEBA Code & Database Modernization

The State Fiscal Accountability Authority (SFAA), Division of Procurement Services, is requesting proposals for code conversion and database modernization services on behalf of the South Carolina Public Employee Benefit Authority (PEBA), with proposals due January 4, 2027, at 11:00 a.m. and a pre-proposal conference scheduled for November 13, 2026, at 10:00 a.m. in Columbia. A signed Non-Disclosure Agreement is required by October 23, 2026. This is a capability-intensive technical engagement with security controls as a central filter.

PEBA seeks to convert legacy Natural/Adabas systems to Java and modern database technology serving approximately 252,616 active members, 183,715 annuitants, and 262,265 inactive members across five defined benefit retirement plans with assets exceeding $50.8 billion, plus insurance benefits for more than 547,700 lives. The project spans three phases: a twelve-week Proof of Technology, Insurance Systems modernization, and Retirement Systems modernization over an estimated five-year term with one two-year renewal, two one-year renewals, and one forty-week renewal.

Contractors must provide all conversion tools, methodologies, and technologies while ensuring no proprietary vendor lock-in or runtime dependency post-implementation. All data ownership remains with PEBA; contractors are prohibited from using PEBA data to train or fine-tune artificial intelligence models. Key Personnel must include a Project Manager and Account Executive, each with a minimum of five years' professional experience in Java and database modernization, with prior Natural/Adabas conversion experience preferred. Subcontracting is permitted up to 25 percent of contract value, with the contractor retaining full responsibility.

Compensation is up to $250,000 for successful Proof of Technology completion, with additional phases structured on milestone-based payments detailed in the business proposal. PEBA assumes responsibility for acquiring and maintaining database platform licenses following Proof of Technology completion. The contractor must deliver workload specifications, architecture documentation, comprehensive testing documentation, knowledge transfer training, post-implementation support, and all source code and technical documentation. Award notification is anticipated March 1, 2027, with contract commencement March 11, 2027.

Contractors must complete a 68-question Service Provider Security Assessment Questionnaire covering access control, data protection, HIPAA compliance, artificial intelligence usage, incident response, and other security domains. Demonstrated compliance with SOC 1/2/3, ISO/IEC 27001, HITRUST, and PCI DSS standards is required, along with disclosure of third-party vendors, data center locations, backup methodologies, and breach history.