Replacement of MFCU eDiscovery Platform Project

The Virginia Office of the Attorney General is requesting proposals for infrastructure replacement of the Medical Fraud Control Unit's eDiscovery platform under an RFP with sealed proposals due August 3, 2026. This is a competitive-negotiation procurement.

The scope requires on-premises Relativity Server 2024 infrastructure supporting 25–50 concurrent users with at least 100TB of scalable storage, capable of supporting Relativity Server 2025. Deliverables include complete data migration from the existing environment with validation and post-deployment testing, onsite installation at the OAG office in Richmond, Virginia and offsite backup configuration at an existing OAG disaster recovery site in Northern Virginia. The supplier must provide a separate comprehensive managed services plan for 24/7/365 monitoring and support, onsite and offsite backup solutions with hardware and software, all hardware warranties and software licenses for at least three years, and annual AICPA SOC-2 Type 2 audits covering Security, Availability, Processing Integrity, Privacy, and Confidentiality. Critical requirements include compliance with all current Commonwealth of Virginia Information Technology Resource Management (VITA) Security Policies and Standards, Health Insurance Portability and Accountability Act compliance, help desk support with severity-level assignment, security incident notification within 24 hours, daily endpoint detection and response log telemetry submission, user training documentation, disaster recovery planning, security risk management processes, and Section 508 accessibility compliance where applicable.

The contract has an initial term of two years, with options for the Commonwealth to renew for up to two additional two-year periods at its sole discretion. The supplier must maintain errors and omissions insurance of $5 million per occurrence and provide 24/7 maintenance support with on-site response and 24–48 hour repair completion. Contractor liability is limited to twice the cumulative contract value, excluding intentional misconduct, fraud, recklessness, and bodily injury or property damage from negligence. A Service Level Agreement will be established within 30 days of contract effective date, with performance reports required at minimum every six months. The contractor is subject to Commonwealth termination for convenience upon 60 days written notice. All vendors must register in the eVA electronic procurement solution portal and pay applicable vendor transaction fees: one percent of order value, capped at $500 for DSBSD-certified small businesses and $1,500 for others. A small business subcontracting plan requiring good-faith efforts to maximize small business participation is mandatory.