SaaS for Incident, Audit, and Risk Management

Solicitation summary: RFP No. IC-RFP-2027-003 Integral Care is requesting proposals for a Software as a Service (SaaS) solution with three modules: Incident Management: reporting, routing, investigation and analytics. It covers patient safety, complaints, abuse/neglect/exploitation, staff misconduct, cybersecurity, staff injury, infection control, medication errors and corporate compliance. Audit Management: tracking of third-party audits, deliverables and corrective action plans, with secure, limited access for external auditors. Risk Assessment and Response: automated inherent and residual risk scoring, with a task tracker for follow-up. A single solution covering all three modules is preferred. Proposals for one or two modules will also be accepted. The system must serve about 1,100 employees plus external contracted providers. It must be fully live, including migration of legacy data, by November 1, 2027, ahead of the current contract ending November 30, 2027. Award and budget. Integral Care may award one or more contracts starting on or about April 1, 2027. Each contract has a one-year initial term and two optional one-year renewals. The estimated budget is up to $100,000 per year across all contracts, or up to $300,000 over three years. Key dates: RFP posted: November 4, 2026 Questions due: December 7, 2026 Answers posted: December 14, 2026 Proposals due: January 8, 2027, 5:00 PM CST Demonstrations: January 25 – February 3, 2027 Selection: February 5, 2027 Evaluation. Proposals are scored out of 100 points: Functionality: 35 Pricing: 25 Security and compliance: 15 Implementation and support: 15 Experience and references: 10 The signed Assurances Document and the financial and risk review are pass/fail. Minimum requirements: All data hosted in the U.S. A HIPAA/42 CFR Part 2 Business Associate Agreement Encryption in transit and at rest 24-hour breach notification 99.9% uptime