Description
Columbus Public Health seeks a qualified vendor to provide a comprehensive managed web‑hosting solution that meets PCI‑DSS and HIPAA requirements. The contract is a fixed‑price, three‑year term (initial one‑year term with two optional one‑year renewals) and includes dedicated server hosting, 24×7 managed services, backup and disaster‑recovery, compliance reporting, migration of existing sites, and optional consulting or custom development. Bidders must submit a detailed three‑year pricing schedule and demonstrate current SOC 2 Type II or ISO 27001 data‑center certification, as well as a PCI‑DSS service‑provider AOC.
• Provide a single‑tenant dedicated server (≥8 CPU cores, 32 GB RAM, 1 TB SSD) hosted in a U.S. data center with SOC 2/ISO 27001 certification.
• Deliver managed services: patch management, 24×7 monitoring, daily backups (≥30‑day retention), RPO ≤24 h, RTO ≤8 h, and 24/7 U.S. support.
• Ensure PCI‑DSS and HIPAA compliance (AOC, BAA, breach notification ≤24 h) and migrate all existing web assets within 30 calendar days of award.
• Offer optional consulting, custom web development, transactional email/SMS services, and optional add‑ons such as WAF/CDN, disaster‑recovery replica, or staging environment.