Request for Proposal: ALERT IMMUNIZATION INFORMATION SYSTEM (ALERT IIS)

The Oregon Department of Administrative Services, State Procurement Services (DAS SPS), on behalf of the Oregon Health Authority (OHA), is requesting proposals to replace the ALERT Immunization Information System with a modern, cloud-based platform under RFP S-DASOBO-00012374, with proposals due August 3, 2026. Note: The original solicitation number S-DASOBO-00012374 was cancelled due to technical issues and replaced with S-DASOBO-00017475; all terms remain unchanged. A pre-proposal conference was held June 25, 2026, and questions were due June 29, 2026.

The scope encompasses a fully functioning immunization information system solution consolidating legacy systems (ALERT IIS, IRIS, and POST) into a single cloud-hosted platform. The solution must accommodate approximately 8.2 million patient records, 105 million immunizations, and 206,000 daily electronic data exchange transactions. Key deliverables include project management, solution architecture and design, system customization, data conversion and migration (with 99 percent accuracy and completeness standards), infrastructure setup, integrations with CDC IZ Gateway and VTrckS, digital accessibility compliance (WCAG 2.2 Level AA), organizational change management, testing including third-party penetration testing, training with train-the-trainer components, and go-live activities. The solution must meet Oregon's Level 3 Restricted security standards aligned with NIST SP 800-53 r5, incorporate HIPAA safeguards, support FERPA compliance for school immunization modules, and comply with Oregon cloud-forward policy. Proposers must demonstrate a minimum of two years' comparable experience with similar-sized IT implementations and PMP certification for project managers.

The contract term is 5–10 years initially with renewal options available, with target go-live of December 31, 2027 (though timelines up to two years post-contract signing are acceptable). The estimated scope includes approximately 832 functional and non-functional requirements across 12 functional areas. Professional liability insurance of not less than $10 million is required. Currently, ALERT IIS has approximately 24,572 active users. The state will not provide Tier 1 Help Desk services under the new contract. Remote work is permitted provided it complies with Oregon information security requirements.

Round 1 proposals must not exceed 150 pages and include administrative, technical, and preliminary price components. Evaluation criteria total 5,000 points: organizational strengths and staffing (250 points), scope of work response including project management, solution design, data conversion, operations support, testing, implementation, and change management (3,300 points), solution requirements (1,250 points), and overall proposal quality (100 points). Experience with school immunization modules is scored rather than mandatory. The state may conduct multiple evaluation rounds including interviews, demonstrations, sandbox testing, and best and final offers. Certified disadvantaged, minority-owned, woman-owned, service-disabled veteran-owned, and emerging small businesses are encouraged to participate; subcontractor diversity information is not scored but ensures equal opportunity for certified firms.