Technology Solution for GAMMA Research Study

INTRODUCTION: Texas A&M AgriLife Research is seeking bids for the purchase of a technology solution for a health behavior research study (GAMMA [Glucoxe, Activity, and Mood - Mobile Assessment]). Bidders shall offer a unit price response for each line item in this bid. Please read the terms and conditions carefully. If you would like additional information concerning our purchasing procedures, please contact: Steven Amazeen, CTCD Buyer Phone: +1 (555) 000-0000 Email: contact@example.gov IMPORTANT DATES: HUB Subcontracting Pre-Bid Webinar: Friday, August 29, 2025, at 10:00 AM CST Questions Deadline: Wednesday, September 3, 2025, at 3:00 PM CST Bid Closing/Bid Submission Deadline: Wednesday, September 10, 2025, at 3:00 PM CST BID OPENING INFORMATION: Bids will be opened at the date and time specified. Bidders and/or their representative may attend the bid opening if desired. The bid opening will be held at 578 John Kimbrough Blvd., Room #413, College Station, Texas 77843. Paid visitor parking is located in the first row of Lot 97. After the bids have been evaluated, the vendor receiving a bid award from this solicitation will be issued a purchase order. TERMS AND CONDITIONS: By submitting a bid, the bidder agrees to comply with all Agency terms and conditions. These supersede any other terms and conditions issued by the bidder. Additional federal terms and conditions are attached. GOVERNING LAW: Any contract resulting from this bid solicitation shall be construed and governed by the laws of the State of Texas. PAYMENT TERMS: Net 30 days upon receipt and acceptance of item or correct invoice, whichever is later. PROJECT COMPLETION TIME: Any bid submitted should include estimated time to project completion for the item(s) being offered. QUESTIONS DEADLINE: Any/all questions should be addressed in writing to Steven Amazeen via the Q&A Board for this invitation to bid or email at contact@example.gov. All questions must be received on or before Wednesday, September 3, 2025, at 3:00 PM CST. When deemed appropriate by the Agency, questions will be answered by bid addendum. SPECIFICATIONS: Specifications or brand names given are meant to be descriptive rather than restrictive. Other manufacturer’s exact equivalents will be considered. If bidding other than specified, please submit full descriptive literature and technical specifications with your bid response. HOSTING SEVER SECURITY REQUIREMENTS: The web hosting site/server should meet these minimum environmental requirements. These should be common practice for most web site hosting vendors. Ensure an anti-virus solution is deployed and active. Ensure logging is enabled for all logins and services (i.e. SFTP, SSH, etc.). Ensure all remote console functions are managed through secured VPN services. Perform regular security scans with a tool similar to Nessus to assure no security deficiencies exist. Ensure directory transversal has been disabled in the web service configuration. Confirm web statistics are only viewable to those requiring the information. Verify that directory indexing is turned off. Provide for data backup, testing and annual disaster recovery testing. Ensure that all test and development software code has been removed from the production server. Maintain latest security patches for operating system, application frameworks, and other utilized services. (Systems that do not have critical patches made within 30 days are removed from the TAMU network per TAMU IT Policy.) Ensure that all remote RDP sessions are two-factor enabled. WEB APPLICATION SECURITY REQUIREMENTS: The following requirements apply to the web application or software. Verify that all authentications for web forms use encrypted protocols and auto-fill is turned off (i.e. a site SSL certificate should be installed and functional). Verify that form field validation is implemented to prevent buffer overflows. All user account passwords should be stored as encrypted data. Unsuccessful login attempts to the web application should be logged and accounts locked out upon 6 unsuccessful login attempts within a 15 minute period. A method for end users to reset or change passwords should be provided (i.e. a self-service account password management functionality). Provide high level documentation of the framework and overall configuration for the web application environment (i.e. Application framework and version, database/version, etc.). ACCESSIBILITY: The following accessibility compliance requirements apply to the web application for purposes of meeting State accessibility standards. Standards are based upon WCAG 2.1 (Level AA) and those standards are listed on the following link: http://webaim.org/standards/wcag/checklist Before the work can be paid for or accepted, the site must have been run through an accessibility scanner. The vendor should run the checker on all unique pages using the WCAG 2.1 (Level AA) setting. A PDF version of the report per unique page should be provided to AgriLife accessibility coordinator for review. AWARD BASED ON BEST VALUE: Texas A&M AgriLife Research reserves the right to accept or reject any or all bids, to waive informalities and technicalities, to accept the offer considered most advantageous and award the bid based on best value criteria. In determining what is the best value to the Agency, the Agency shall consider any or all of the following: Purchase price The reputation of the vendor and the vendor's goods or services. The quality of the vendor's goods or services. The extent to which the goods or services meet the agency's needs. The vendor’s past relationship with the Agency. The total long-term cost to the Agency in acquiring the vendor’s good or services. The length and coverage of the vendor's warranty. The delivery time. The completion and deployment date of the technology solution (mobile application).