User Interface Permits Modernization - OIT

The Colorado Department of Public Health and Environment (CDPHE) and Office of Information Technology (OIT) are seeking a qualified vendor to develop a comprehensive User Interface Permits Modernization system for the Water Quality Control Division. This Request for Proposal (RFP 2025-0282) aims to create a cloud-based permit management system with a user-friendly interface supporting approximately 92 permit processes across the state. The primary deliverables include building public-facing permit application forms, constructing an internal workflow user interface, creating a permit dashboard, and developing an API to query and update an Amazon Web Services database. Key project objectives include increasing permit processing efficiency, providing transparency to permittees and the public, and supporting complex permitting workflows. The RFP requires vendors to demonstrate capabilities in system integration, security compliance, and user support, with technical requirements including 99% system uptime, comprehensive disaster recovery plans, and adherence to accessibility standards. Proposals are due by August 11, 2025, at 2:00 PM MST, with potential oral presentations and best and final offers to be determined after initial submission. The single point of contact for this solicitation is Darla Wear, who can be reached at Darla.wear@state.co.us.

The solicitation encourages responses from vendors that can qualify as Disadvantaged Business Enterprises (DBE), Minority Business Enterprises (MBE), or Women's Business Enterprises (WBE), with specific provisions for verifying vendor qualifications through VSS registration. The initial contract term is set for approximately one year, from December 15, 2025, to December 14, 2026, with options to extend for up to nine additional one-year terms, not exceeding a total of ten years. CDPHE has allocated $495,000 for the initial contract period, with anticipated annual funding of approximately $100,000 for subsequent years. The project requires integration with existing enterprise systems, including Amazon Web Services, and adherence to stringent security, accessibility, and data privacy requirements. Vendors must be prepared to provide a modular, scalable solution capable of adapting to changing federal and state standards, with comprehensive system configuration and support. The system must also comply with 100% CIS level-1 benchmarks and include provisions for vulnerability scanning, penetration testing, and code review. A Data Use Agreement template is included, emphasizing strict protocols for data protection and confidentiality.