IFB 38414 Electronic Verification Services

The California Department of Public Health, through the Department of General Services Procurement Division, is soliciting bids for Electronic Verification Services under IFB 38414 to support the electronic identity authentication of individuals applying for certified vital records such as birth, death, and marriage certificates. The contract requires the selected bidder to implement and operate a secure digital system that verifies applicant identities in compliance with Health and Safety Code Section 103526 and CDPH’s Information Privacy and Security Requirements. All work is performed in a remote, digital environment with no physical delivery location specified, and the service involves the transmission and processing of sensitive personal data in accordance with NIST SP 800-53 Rev 5, HIPAA, OWASP standards, and CDPH’s internal policies. The contract structure is defined as a zero-dollar agreement where the contractor does not receive payment from CDPH; instead, the bidder will collect and remit certificate fees directly to the state, with pricing submitted by the bidder in a Cost Worksheet that includes line items across a five-year term with optional years. Bids must strictly follow the State’s required forms and submission guidelines, including the completed Minimum Qualifications Worksheet, Narrative Response, and Cost Worksheet, all submitted electronically via email to [email hidden] by May 22, 2026, at 10:00 AM PT. Submissions exceeding 10 MB may be split across multiple emails but must be clearly labeled. The award will follow a Lowest Price Technically Acceptable (LPTA) methodology, prioritizing the lowest evaluated cost among responsive and responsible bidders who meet mandatory minimum qualifications in vital records services and customer experience. Compliance with information security standards is critical, requiring encryption of all transportable media using CDPH-approved solutions, proper labeling of classified information at the document, database, and email level, and adherence to a six-year record retention policy. Special requirements include prior approval for any subcontract over $5,000, insurance with an AM Best rating of A- or higher, compliance with the Darfur and Iran Contracting Acts, mandatory disclosure of any use of generative AI in deliverables, and certification of socioeconomic status for Small Business, Disabled Veteran Business Enterprise, or Target Area Contract Preference Act claims. The contractor assumes full responsibility for subcontractor performance, data security, and legal compliance, with CDPH retaining inspection rights and the authority to reject non-compliant bids without negotiation.