Point of sale (POS) Inventory Software Annual Maintenance.

The contract involves the procurement of annual maintenance services for the Texas Department of Criminal Justice's Point of Sale (POS) Inventory Software, with an estimated value between $50,000 and $200,000. While the solicitation encourages offers from all qualified vendors, it acknowledges that certain items may be proprietary to a specific vendor under relevant Texas statutes. The scope emphasizes strict compliance with a comprehensive set of data management, security, and privacy standards, including adherence to federal regulations such as NIST 800-53, FERPA, HIPAA, IRS Publication 1075, PCI DSS, and CJIS, as well as state laws governing data retention, classification, and confidentiality. Contractors must implement robust cybersecurity measures, including encryption, vulnerability scanning, penetration testing, and incident reporting, and must complete mandatory cybersecurity training and sign non-disclosure agreements. Use of artificial intelligence in the system requires prior approval, and all data must be securely stored within U.S. borders unless otherwise authorized. The contractual framework incorporates numerous statutes and standards as binding terms, with no explicit FAR clauses or federal clause numbers referenced. Instead, the contract relies on direct citations to state laws, federal regulations, and TDCJ policies, notably the IRSP based on NIST 800-53. Data ownership remains with TDCJ, and contractors are responsible for secure data handling, disposal, and transfer upon contract termination. Security and data management requirements are central, with provisions for disaster recovery, data availability, and continuous monitoring. The contract does not specify a formal evaluation or award methodology, nor does it include detailed proposal submission instructions, page limits, or specific delivery schedules. Instead, it emphasizes compliance with security standards and data policies as prerequisites for consideration, with the primary point of contact being Hailey Burgess at TDCJ. Overall, the agreement underscores a high-security, compliance-driven approach focused on data integrity, confidentiality, and system security, with detailed oversight and reporting obligations for the contractor.