The Contractor must provide a custom branded mobile Smartphone Application App Package (App) for the Department of Health and Welfare, Division of Children, Youth and Family Services (Department) for up to five thousand (5,000) users. The App must have been in use for a minimum of two (2) years. The App must be available in both the Apple App Store for iPhone and Google Play Store for Android. The Contractor must adhere to Department requirements for Protections and Disclosure of Department records IDAPA 16.05.01. All setup, hosting, and management of any off-site development must be performed and hosted within the United States. All entities, licensees and servers that access the Department databases must be located within the continental United States and no data must be shared with offshore/overseas entities, servers, or databases, nor must remote offshore/overseas access be allowed per the restrictions and regulations of the Internal Revenue Service (IRS), Social Security Administration (SSA), and National Institute of Standards and Technology (NIST). The Contractor must immediately report to the Department any data or security breach. Notification must include all relevant details and a contact number of the individual who can provide additional relevant details of the incident. The App must comply with the NIST Security and Privacy Controls, Federal Information Processing Standards (FIPS) 140-2 Encryption standards, and meet the IRS Publication 1075 Security Safeguards and Controls. The Contractor must assure reliability, redundancy, and security. The Contractor must not issue news releases pertaining to any aspect of the services being provided under this Contract or publish any data developed under the Contract without the prior written consent of the Department. The Contractor must provide technical support, maintenance, and updates with their fully burdened rate throughout the term of the Contract. All over-the-phone technical support must be provided from within the continental United States. The Contractor must provide acknowledgement of protocol updates. The Contractor must be responsible for any work or product that is produced and delivered to the Department under this Contract whether produced solely or in part by the Contractor or subcontractor. The Contractor must be the sole point of contact regarding all contractual matters. The Department will only pay the Contractor and will not pay subcontractors directly.
