RFQ 26-04329 On-Prem Data Storage Refresh

The Massachusetts Executive Office of Technology Services and Security (EOTSS) has issued RFQ 26-04329 to solicit bids for refreshing its on-premises data storage infrastructure. This procurement targets vendors already holding awards under the ITC73 statewide contract category, specifically aligned with NAICS code 423430 for computer and software wholesalers. The solicitation was posted on December 5, 2025, with a submission deadline of December 19, 2025, requiring electronic proposals via the COMMBUYS platform. The project involves a comprehensive upgrade of hardware and associated software supporting data storage at Agency premises in Massachusetts, with a strong emphasis on compliance with stringent data privacy, security, and regulatory standards. The scope, as detailed in the Statement of Work (SOW), mandates delivery of hardware, software, and related professional services on a fixed-price basis, incorporating clearly defined deliverables, acceptance criteria, and due dates. The work includes installation, configuration, and ongoing maintenance support with specific tasks governed by Massachusetts state security policies, federal laws such as HIPAA and IRS Publication 1075, and Commonwealth digital accessibility mandates. The contract requires strict adherence to standards including NIST, CJIS, PCI DSS, and FERPA, addressing protection of sensitive data such as Protected Health Information (PHI) and Criminal Justice Information (CJI). Inspection and acceptance of deliverables occur onsite at the Agency’s location, with designated Project Managers responsible for review and approval. The contract's evaluation focuses on technical merit, key personnel qualifications, data handling capabilities, and pricing, with award based on best value to the Commonwealth. Pricing details use a Hardware Asset Template that outlines unit and extended prices for various server models, components, software licenses, and maintenance terms, with estimated contract values ranging approximately from $88,000 to $114,470, depending on final configurations and renewals. Security and confidentiality are paramount, requiring contractors and subcontractors to execute Data Management and Confidentiality Agreements, undergo background checks for personnel accessing sensitive data, and comply with all applicable federal and state privacy laws. The contract provisions impose full liability on contractors for breaches arising from their or their subcontractors’ actions and mandate cooperation in obtaining necessary regulatory approvals. Additionally, contractors must provide transparent pricing assumptions, comply with all solicitation instructions including data submission formats and electronic delivery requirements, and acknowledge that failure to maintain compliance or meet contractual obligations constitutes material breach. The procurement excludes formal socioeconomic status certifications or entity registrations but binds bidders handling certain data types to mandatory reporting and certification requirements. Overall, the contract establishes a secure,