Cloudflare Maintenance Services IFB

The North Carolina Department of Information Technology has issued a solicitation for Cloudflare Maintenance Services, with a posted date of October 8, 2025, and a response deadline of October 20, 2025. The contract aims to secure ongoing support and maintenance of Cloudflare’s cloud-based security, performance, and reliability solutions across the State’s digital infrastructure, with an estimated contract value between $500,000 and $2 million. The procurement emphasizes compliance with federal, state, and agency-specific terms, including FAR clauses related to commercial software, data security, and intellectual property rights, as well as North Carolina’s addenda that override conflicting vendor terms. The contract incorporates detailed security requirements such as third-party assessments (ISO, SOC, FedRAMP), breach notification within 48 hours, and safeguards for sensitive data, especially for Medium and High Risk classifications. It also mandates vendor disclosures on work performed outside the U.S., E-Verify compliance, and participation encouragement for Historically Underutilized Businesses (HUBs). The scope encompasses provision, maintenance, and support of Cloudflare services, including enterprise plans, data transfer, DNS management, bot mitigation, and technical support, with performance standards like 99% uptime and initial acceptance testing before services go live. Deliverables are primarily electronic, with no explicit physical packaging or marking requirements specified. The contract term begins on the effective date, initially for one year with options to extend for two additional years, and delivery is generally FOB Destination, with notification procedures for delays. The award will be based on a best value approach, considering technical acceptability and lowest price among responsive proposals, with potential for Best and Final Offers. Payment terms are net 30 days after receipt and acceptance of correct invoices, contingent upon funds availability, with detailed administrative and invoicing procedures outlined. Proposal submissions must be electronic via the Ariba Sourcing Module, signed by an authorized representative, and received by the deadline; late or non-compliant offers will be rejected. The solicitation also emphasizes strict confidentiality, conflict of interest avoidance, and compliance with applicable laws, with contact information provided for procurement inquiries and technical support.