Request for Offer-Dot Net Nuke (DNN) Software Maintenance

The Texas Education Agency is requesting offers for Dot Net Nuke (DNN) Software Maintenance services, with proposals due August 20, 2026. The procurement does not appear to contain specific set-asides for disadvantaged or small business enterprises, though vendors meeting applicable state certifications may be considered advantageous.

The scope includes comprehensive software maintenance and support for the DNN platform, encompassing bug fixes, patches, updates, security enhancements, and technical support services. Contractors must meet mandatory data security requirements including NIST SP 800-53 standards or full TX-RAMP compliance, quarterly vulnerability scanning and reporting, encryption of personally identifiable information using AES 128-bit compliance at minimum, TLS 1.2 or higher certificate authentication, and OWASP compliance for client-facing web applications. System breaches must be reported within 24 hours with resolution required within 72 hours. Contractors must conduct background checks for all personnel with access to PII, including subcontractors and third-party vendors, and submit a Service Organization Controls Report (SOC 2 - Type 2) annually or provide a Bridge Letter by the first business day after September 1st of each contract year. All contractors must maintain compliance with the state's Cloud Computing State Risk and Authorization Management Program under Texas Government Code Section 2054.0593.

Pricing is submitted according to a fee structure outlined in the RFO with all costs clearly itemized and justified. The contract term extends for an initial period with potential renewal options to be determined based on vendor performance and agency requirements. Funding will be provided through TEA's operational budget, with total contract value subject to negotiation upon vendor selection.

Bidders must submit financial statements and organizational documentation demonstrating capacity to execute the contract, disclose key contracting persons, and certify non-debarment and compliance with federal lobbying regulations. Insurance requirements specify minimum coverage across general liability, professional liability, cyber liability, and workers' compensation, with insurers rated A- or better by A.M. Best.