Vendor Verification Software RFP

Hugh L. Carey Battery Park City Authority is requesting proposals for a vendor verification software solution to automate vendor onboarding, compliance validation, risk screening, and payment fraud controls, with proposals due October 23, 2026 at 3:00 p.m. New York State-certified Minority-Owned Business Enterprises, Women-Owned Business Enterprises, and Service-Disabled Veteran-Owned Business Enterprises are encouraged to submit proposals, though there is a 0% overall MWBE participation goal. Proposers are restricted from contact with anyone other than the Designated Contacts during the Restricted Period from publication through contract approval; failure to comply may result in a finding of non-responsibility.

The solution must be a cloud-hosted SaaS platform with a secure, mobile-responsive self-service portal supporting multi-factor authentication and single sign-on. Core capabilities include automated compliance verification with IRS Taxpayer Identification Number matching, Certificate of Insurance validation using optical character recognition, and sanctions/debarment screening; NACHA-compliant vendor banking information verification; audit trail and FOIL-ready reporting; and robust cybersecurity with AES-256 encryption at rest and TLS 1.3 in transit. The platform must integrate with BPCA's current Microsoft Dynamics Great Plains environment and support future architecture via RESTful APIs and webhooks.

Minimum qualifications require three consecutive years developing and supporting enterprise SaaS vendor onboarding platforms with successful implementation for at least three comparable client organizations, including at least one public sector entity. All proposers must hold a current SOC 2 Type II report and demonstrate compliance with New York State Information Security Policies. The anticipated contract term is three years with two one-year renewal options exercisable at BPCA's sole discretion, with an anticipated start date of December 2026. Selection will weight technical evaluation (75%) against cost proposal evaluation (25%), with award to the highest technically rated responsive proposer offering best value. Questions are due October 8, 2026, with substantive responses by October 15, 2026. Insurance requirements include Commercial General Liability ($1,000,000 per occurrence / $2,000,000 general aggregate), Automobile Liability ($1,000,000 combined single limit), Workers' Compensation at statutory limits, Data Breach and Privacy/Cyber Liability ($1,000,000), and Technology Errors and Omissions ($1,000,000).