Management of Information, Licensing, and Enforcement System (MILES)

The Florida Gaming Control Commission is seeking information on modern, cloud-based enterprise solutions to support the Management of Information, Licensing, and Enforcement System (MILES), a comprehensive system designed to streamline regulatory, licensing, and enforcement operations. This Request for Information (RFI), issued under solicitation number FGCC 25/26-13, is not a solicitation for contracts but a planning tool to gather vendor capabilities and market intelligence for potential future procurement. Responses must be submitted via email by July 23, 2026, with strict formatting requirements including a specified subject line and file naming convention. The system must function as a fully configurable, scalable system of record with no-code/low-code business rules, leveraging artificial intelligence, IVR, and self-help tools to enhance user support. It must manage electronic and physical licenses through dynamic templates, support customizable checklist configurations based on background checks, discipline, or fingerprinting, integrate application fees with financial management, and deliver robust reporting and dashboards with export functionalities to PDF, Excel, and CSV formats. Advanced analytics, KPI and SLA tracking, and customizable visualizations via scorecards and plots are required to support operational and executive decision-making. The solution must comply with an extensive set of security, privacy, and operational standards, including FedRAMP, GDPR, HIPAA, FIPA, NIST SP 800-145, CJIS 6.0, and PCI-DSS. Data must be encrypted both in transit and at rest, with strict adherence to the State of Florida Cybersecurity Act 60GG-4 requiring US-only data residency and prohibiting all non-CONUS access. The system must support multi-factor authentication aligned with NIST 800-63-4, single sign-on via SAML, role-based access control managed by IT administrators, and IP allow/deny configurations to restrict record access. Audit trails must capture user IDs, timestamps, and modification types for all activities, and built-in disaster recovery capabilities are mandatory. The solution must be ADA-compliant, integrate seamlessly with existing systems through documented APIs, and demonstrate scalability for future growth. Vendors are required to provide detailed business information, technical specifications, compliance certifications, project management plans covering methodology, schedule, change management, and data migration, as well as comprehensive pricing models including one-time, subscription, and per-user costs. All submissions are subject to Florida’s Public Records Act, and any information claimed as confidential must be clearly marked and accompanied by a redacted