REPOST - CNB Investigative Background Check Services RFR

The Massachusetts Cannabis Control Commission is requesting responses on investigative background check services for marijuana establishment applicants and licensees under RFR BD-27-2018-CNB-CNB-134206 (repost of BD-26-2018-CNB-CNB-129084), with responses due October 13, 2026 at 12:00 p.m. through COMMBUYS. This is a single-award procurement with the possibility of adding additional contractors if necessary.

Vendors must demonstrate at least three years of experience providing investigative background check services in the cannabis industry or similar regulated industries including gaming, alcohol, pharmaceuticals, healthcare, financial services, insurance, and workers' compensation. The scope covers comprehensive background due diligence investigations for individuals and entities with direct or indirect control or ownership interests in marijuana establishments, including criminal history searches, warrant checks, court records, sex offender registry searches, sanctions database searches, licensing history verification, and entity/business verification. International searches are conducted only when relevant and subject to prior Commission approval. All data must remain within the United States, encrypted in transit and at rest, with the Commission maintaining full access to all collected data. Bidders must demonstrate cybersecurity compliance through applicable certifications, security controls, policies, and practices; no specific mandated certifications such as NIST v1.1, SOC 2, HITRUST, or FedRAMP are required.

The estimated current volume is approximately 199 individual and 117 entity background checks for fiscal year 2026, though the Commission makes no guarantee of minimum purchase volume. All costs for standard background investigations must be included in the proposed per-investigation unit price, with additional investigative services billable at an approved hourly rate only when requested in advance by the Commission. Vendors must propose a maximum annual price increase not exceeding three percent for subsequent contract years, subject to Commission approval and funding availability.

The initial contract duration is 12 months with two optional 12-month renewal periods for a maximum total of 36 months, with an anticipated start date of January 1, 2027. Evaluation criteria (100 points total) include investigative methodology (20 points), cybersecurity and data protection (15 points), company experience (15 points), cannabis industry knowledge (15 points), key personnel and staffing (15 points), cost proposal (15 points), and ongoing account management (5 points). Vendors must provide three business references and submit responses using the required Microsoft Word template through COMMBUYS; responses in PDF or using altered templates are subject to rejection. Responses must include certifications accepting Commonwealth terms, disclosure of litigation or adverse situations, authorized representatives and contract managers, and details on subcontractors and third-party providers.