Unified Data Dissemination Project - OIT

The Colorado Department of Public Health and Environment (CDPHE), Air Pollution Control Division (APCD), in collaboration with the Office of Information Technology (OIT), is issuing RFP 2026000125 for the development and implementation of a unified data dissemination web application to centralize access to publicly available air quality data across multiple platforms. The project requires the development of a comprehensive web-based platform featuring an Overview tab with customizable maps and filtering functionality, a personalized "My Air Quality" tab enabling location-based customization, and five hot-topic tabs addressing criteria pollutants, air toxics, greenhouse gases, ozone, and methane, along with integration of OnBase textual data and optional artificial intelligence functionality. Key deliverables include a project plan and technology architecture diagram, completed dashboard tabs, user guidance documentation including internal and external manuals and video tutorials, monthly progress summaries, and comprehensive knowledge transfer materials to enable CDPHE staff to independently manage and expand the system. The application must be hosted in Amazon Web Services (AWS), integrate with Azure DevOps and the State's Single Sign-On solution, achieve a minimum 99.9% annual uptime service level, support up to 5,000 concurrent users, and implement real-time data integration with maximum latency of five minutes for air quality data. Mandatory minimum qualifications include AWS hosting capability, three years of experience developing web applications with large environmental datasets, successful completion of at least three similar projects within the past five years, current certifications in Amazon Web Services and related technologies, WCAG 2.1 Level AA accessibility compliance, SOC 2 Type II or equivalent security certification, and demonstrated financial stability. The written inquiry deadline is March 19, 2026, at 2:00 PM MST, and proposals are due April 22, 2026, at 2:00 PM MST, with oral presentations and best and final offers anticipated thereafter. Evaluation criteria prioritize mandatory minimum requirements, executive summary, experience and key personnel, performance measures, business and technical requirements, data integration, disaster recovery, system configuration, training and documentation, technical support, project management, security, accessibility, and price proposals. Proposals must be submitted electronically through BidNet Direct at www.bidnetdirect.com/cdphe or physically delivered to the CDPHE Mail Room at 4300 Cherry Creek Drive South, Denver, CO 80246-1530, addressed to Darla Wear, Purchasing Unit Supervisor, with a submission package clearly marked with the offeror's name, solicitation number and title, and proposal due date and time.

There are no specific set-aside designations restricting participation; however, proposers must disclose whether their organization qualifies as a Disadvantaged Business Enterprise, Minority Business Enterprise, or Women's Business Enterprise on the RFP signature page. All pricing must be firm and include all costs for project management, system development, OnBase integration, optional AI layer functionality, annual maintenance and support, and operational costs, with the total allocated budget for the project at $2,075,000 covering system development, implementation, deployment, and two years of maintenance and support through October 8, 2030. The initial contract period runs from July 1, 2026, through October 8, 2028, with four optional one-year extension terms available for a potential total contract term of five years, contingent upon continued funding. The successful vendor must comply with all Colorado OIT security policies, including requirements for SOC 2 Type II audits, vulnerability scanning, penetration testing, static analysis, and manual code review based on OWASP standards, as well as comprehensive System Security Plan documentation. The contract incorporates the State of Colorado Office of Information Technology master contract framework with extensive information security, data handling, and compliance obligations aligned with HIPAA, IRS Publication 1075, PCI Data Security Standards, and Colorado statutes, requiring contractors to maintain cyber liability insurance of $5,000,000/$10,000,000 depending on records volume and workers' compensation, general liability, professional liability, and crime insurance. No incumbent vendors or current contractors are referenced in the procurement documents, indicating this represents a new development initiative requiring integration with existing CDPHE systems and datasets including ONGAIER 2.0, CAERS, and HB-1189 mobile deployment data.