DBM Billing and COBRA Administration System

The State of Maryland’s Department of Budget and Management (DBM) is seeking a qualified vendor to provide third‑party administration services for employee health insurance billing and COBRA compliance. The contract will include implementation, ongoing operation, technical support, data backup, disaster recovery, security compliance (HIPAA, PCI, SOC 2, FIPS, etc.), and regular reporting. The vendor must supply all required hardware/software, maintain U.S.‑based data centers, and adhere to strict security and accessibility standards. Deliverables are submitted electronically to the Contract Manager and must meet detailed quality criteria. The engagement will be governed by a double‑envelope RFP process with extensive documentation and certification requirements. • Scope: billing processing, COBRA eligibility tracking, premium collection, and related reporting. • Required IT services: cloud‑based SaaS platform, help‑desk support, 2‑hour response for critical issues, backup retention (daily 1 mo, weekly 2 yr, annual 10 yr). • Security: background checks, CJIS clearance, encryption, SOC 2 Type II audits, compliance with Maryland IT security policies. • Accessibility: WCAG 2.1 AA compliance, non‑visual access support. • Contract term: not specified (likely multi‑year). • Submission deadline: 28 Aug 2026, double‑envelope format.