Description
Columbus Public Health is seeking a qualified vendor to provide fully managed, single‑tenant web hosting, ongoing operational support, compliance (PCI‑DSS and HIPAA), migration, and optional consulting/custom development services. The contract starts November 2026, with a one‑year base term and two one‑year renewal options at the City’s discretion. The vendor must maintain PCI‑DSS service‑provider validation, SOC 2/ISO 27001 data‑center certification, and execute a Business Associate Agreement. Core deliverables include a dedicated Linux server (or equivalent virtual environment) meeting specified performance specs, 24×7 monitoring, backup/restore, DDoS mitigation, and transactional email/SMS messaging. Migration must be completed within 30 days of award, with a detailed plan submitted within 15 business days. Ongoing reporting, SLA adherence (≥99.9 % uptime), and a task‑order process for custom development are required. Pricing is submitted via a separate schedule covering three years, with firm annual rates and a maximum 5 % increase on renewals.