Computerized Criminal History and CJIS Data Collections Systems

The Florida Department of Law Enforcement (FDLE) is seeking pre-procurement input through Request for Information FDLE-RFI-2643 to evaluate potential solutions for modernizing its Computerized Criminal History and Data Collections Systems. The RFI, disseminated on April 30, 2026, requires vendor responses by June 10, 2026, at 12:00 PM Eastern Time, with questions due by May 13, 2026. All submissions must be sent as a single electronic document via email to Angela Githens, the Procurement Officer, and must follow a structured format across four tabs: introduction, responses to requested information, budgetary pricing ranges (no specific quotes permitted), and additional value-added information. Responses are limited to 50 pages and must include a fully redacted version for confidential or proprietary content. The solicitation does not result in an award but aims to inform a future procurement. Vendors must demonstrate capability to deliver a cloud-based SaaS solution compliant with FBI CJIS Security Policy, housed exclusively in a U.S.-based GovCloud or equivalent environment, with all data stored within the continental United States. FDLE retains full ownership of all data at all times. Technical requirements include multi-factor authentication, single sign-on, end-to-end encryption, granular role-based access controls, comprehensive audit logging, and SOC 2 or SOC 3 compliance reporting, with SOC 3 accepted as an alternative to SOC 2. Vendors must provide a detailed cloud exit strategy, disaster recovery plan compliant with Florida Administrative Code Rule 60GG-2, and annual audit reports prepared by an independent CPA firm. All personnel with access to systems must undergo fingerprint-based criminal history checks, background investigations, drug screening, and CJIS security training. Contractors are required to maintain visitor logs for five years after contract termination and immediately notify FDLE of any security incident or breach within one business day. Enforcement of security protocols is stringent: FDLE reserves the right to conduct unannounced audits of contractor systems and facilities, and any unauthorized access or security violation will result in immediate removal of affected personnel and reporting to the Administrative Contracting Officer. Media sanitization, either through overwriting, degaussing, or physical destruction, is mandatory upon contract completion or if equipment is returned. Cloud service exceptions require approval from FDLE’s Chief Information Officer, and the system must ensure 24/7 availability, automated data correction and cleansing, AI-enabled reporting,