Specifications include, but are not limited to: The University is seeking Applicants with the ability to provide one or more of the following services and solutions: (1) Storage of electronic Records, CDs, DVDs, and other digital media that includes storage in boxes or open-shelf storage. (2) Storage of hard-copy Records, including paper. (3) Storage of audio and video tapes, micrographics, X-rays. (4) Electronic data storage (storing and backing-up electronic data). (5) Tracking and accounting system for Records. (6) Option for Bates unique serial number to be affixed electronically or manually. (7) Indexing services for file-by-file indexing custom designed to University’s specifications. (8) Individual self-storage space. (9) Transportation of Records. (10) Routine delivery (on the same day of the request) and rush/emergency delivery (with expedited delivery on the same day of the request) of Records to various University locations (see Section 2.6: University Locations). Available after-hours and holiday delivery. (11) Regular retrieval and re-filing (within 48 hours) and rush retrieval and re-filing (same day) of Records from various University locations (see Section 2.6: University Locations). (12) Option for University authorized representative to pick-up Records at the vendor’s facility. (13) Shredding and document destruction, including certification to authenticate destruction of Records. (14) Scanning and digital imaging of hard-copy Records. (15) Technology solutions, such as a vendor-hosted website and secure online web-based access to University’s electronic data. (16) Secure data migration services. (17) Various methods in which the University can make requests for service (phone, email, etc.). (18) Storage supplies (e.g. boxes, folders). (19) Other storage solutions and support, such as filing, repackaging/re-boxing, and generating reports. (20) Customer service support. (21) Other related activities that support the work of the University. Depending on the nature of the project, Qualified Vendors may be expected to access, create, receive, maintain or transmit “personally identifiable information,” which includes but is not limited to, personal information (as defined in Mass. Gen. Laws c. 93H or other applicable breach notification laws), protected health information (as defined in 45 CFR 160.103), personal data (as defined in Mass. Gen. Laws c. 66A), federal tax information, or educational records (as defined in the Family Educational Rights and Privacy Act (“FERPA”) 20 U.S.C. 1232g (a)(4)). Each Qualified Vendor will be required to enter into a Business Associate Agreement acceptable to the University. The Business Associate Agreement is included as an attachment to this RFA (see Section 6, Exhibit 2). Each Qualified Vendor is expected to provide all services in accordance with the privacy and security requirements contained in the Business Associate Agreement. A Qualified Vendor shall be responsible for the unauthorized collection, receipt, transmission, storage, disposal, use, and disclosure of Personal Information (as defined in the Business Associate Agreement) under its control or in its possession. Under no circumstances may University Records or data be relocated, transmitted, hosted or stored outside the United States in connection with any services provided under any MSA entered under this RFA, either directly by the Qualified Vendor or by its subcontractors.