Privacy Monitoring Software

UT Health San Antonio is soliciting proposals under RFP 745-25-P22 for enterprise Privacy Monitoring Software designed to perform periodic access reviews and provide real-time auditing and alerting for applications processing Protected Health Information and Personally Identifiable Information. The selected vendor will provide a solution to detect unauthorized workforce access to patient records, with a contract term of three years starting from the effective date. The procurement is designated as a Historically Underutilized Business set-aside, requiring a mandatory HUB Subcontracting Plan for advancement to the evaluation stage. Technical eligibility is heavily weighted toward security compliance, requiring vendors to submit a SOC 2 Type II certification or a completed Information Security Initial Security Posture Assessment. Proposers must also certify compliance with Texas Risk and Authorization Management Program Level II requirements for cloud services and complete a vendor self-assessment for ICT accessibility. Deliverables include system interconnectivity diagrams, identity management procedures, and incident response plans. Payments are processed via ACH on a net 30 basis following electronic invoice submission.