Statewide Victim-Centered Information System

The State of Utah Department of Criminal Justice is requesting statements of qualifications for a Statewide Victim-Centered Information System design professional service provider under Utah Procurement Code 63G-6a Part 15, with qualifications due November 10, 2026. This is a qualifications-based selection (RFSQ) — no pricing is submitted during the qualifications phase; the highest-ranked vendor will be selected to negotiate compensation determined to be fair and reasonable, with the state retaining the right to proceed with negotiations with the next highest-ranked vendor if agreement cannot be reached with the top-ranked firm.

The scope encompasses designing and implementing a comprehensive, trauma-informed Automated Victim Notification system integrating with existing state infrastructure including Jail and Correctional Management Systems, Offender Management Systems, Court Management Systems, and the Board of Pardons and Parole. Key deliverables include near-real-time offender release notifications delivered via text, email, phone, app, and secure portal; a toll-free statewide victim access number and website; 98% multilingual translation capability; victim impact statement submission functionality; blackout-date and quick-exit safety features; unified victim accounts supporting multiple offenders; and 24/7 call center support with detailed Service Level Agreements. The system must achieve GovRAMP certification compliance, CJIS compliance, WCAG accessibility standards, and implement UtahID single sign-on with multi-factor authentication.

The contract term is 10 years. The contractor must comply with NIST 800-53 Rev. 5, maintain three separate environments (development, test, production), secure cyber insurance of $2,000,000 to $10,000,000 aggregate, store all data within the United States, conduct Federal Criminal Background Checks and drug testing for personnel with data access, implement NIST-compliant encryption, and certify no data mining, sharing, or commercial use without written state authorization. The state retains ownership of all custom deliverables and data.

Vendors must submit qualifications through the U3P portal, certify anti-boycott compliance under Utah Code 63G-27, and comply with FedRAMP or GovRAMP requirements. Submission includes both redacted and non-redacted versions for confidentiality claims under Utah Code 63G-2-305 and 63G-2-309.