Email Security Platform

The City of Saskatoon is soliciting proposals for an enterprise-grade, fully managed cloud-based email security platform for the Saskatoon Police Service (SPS). The platform must protect approximately 840 mailboxes against phishing, malware, business email compromise, account takeover, and domain spoofing, while integrating seamlessly with Microsoft 365 in hybrid and multi-domain environments. The contract includes an initial three-year term starting in November 2026, with options for two additional one-year renewals. Key deliverables encompass architecture design, domain onboarding, migration assistance, administrator training, and ongoing managed monitoring and threat remediation. To ensure suitability for a municipal policing environment, the contract mandates that all production systems, backups, logs, and metadata remain within Canadian cloud regions. Critical security requirements include a minimum 12-month log retention period, privacy breach notifications within 24 hours of discovery, and the provision of third-party audit evidence upon request. As pre-conditions for the award, the successful proponent and its personnel must pass police security clearances and provide proof of general liability insurance. The final agreement will be based on the proponent's Master Services Agreement, subject to negotiation by the SPS Legal Department and the application of specific supplemental conditions. The selection process follows a multi-stage evaluation involving mandatory submission and technical reviews, followed by a rated evaluation of non-price and price criteria. Proponents must submit their responses via the City's electronic bidding system by October 20, 2026. Required submission materials include a completed functional requirements matrix, supporting technical evidence, a copy of the proponent's Master Services Agreement, and a detailed pricing form covering both initial setup and annual managed services.