Specifications include, but are not limited to: Audience The target audiences for this web application are workers who believe their employer violate(d) laws enforced by BOLI’s Wage and Hour and Civil Rights Division. Laws within BOLI’s enforcement authority include but not limited to: violations of breaks, meals, sick time and other laws within the Wage and Hour Division’s jurisdiction; worker’s alleging they are owed wages; violations involving public works projects and prevailing wage rate laws; unlawful employment discrimination, including discrimination based on protected classes and protected activities; housing discrimination; and discrimination in places of public accommodation. Content The application will be accessed through the BOLI website and hosted in an environment consistent with Department of Administrative Services’ Enterprise Information Services requirements. The web application will consist of an online portal that gathers information via web forms from individuals who want to file complaints, and employers who wish to submit information. This application will meet all security requirements specified by the Oregon State Chief Information Office and abide by all requirements set forth in the oversight process and documentation. Web Application Specifications Your proposal must account for these requirements: Compatibility with mobile browsers, as long as this does not conflict with other design goals; The Application must not require plug-ins as a default; Logins to the web application for administrative and/or routine tasks require multi-factor authentication (MFA) and must be logged, stored, and available for review. The server(s) hosting the web application must reside in the United States. BOLI retains ownership of all data gathered and processed by the application, including all meta data associated with the application. Vendor shall not retain or access any records obtained or processed by the application without the express written approval from BOLI. The server(s) hosting the application must receive timely installation of patches and software updates required to keep the system secure and stable. Must support multilingual text displayed to the end-user, at a minimum utilizing a browser’s built-in translation tools. Must include a maintenance mode to assure form data is not submitted if emergency or routine maintenance is performed on the system. When in maintenance mode, the end-user must see a message noting the system is down and explicitly state the maintenance window. The application must be built in accordance to the Web Content Accessibility Guidelines 2, provided by the W3C and should also be readily accessible to the novice as well as the experienced Internet user; End-to-end encryption of web-submitted data; Validation and sanitizing of publicly submitted data; Publicly submitted data must be delivered to BOLI DMZ for review by BOLI staff; Manual review and approval process of submitted data prior to digestion into BOLI case management application/database; Web app will not have direct connection to BOLI’s on-prem databases; All web application files, configuration, and stored data must be backed up on an agreed upon schedule with BOLI. Daily backups in place for on-prem databases/systems; and Source of truth is on-prem database/case management system. Testing of Web Application Testing of application on all applicable internet browsers in Mac OS, Windows OS, Android, and iOS to ensure the Web application works as promised. Browsers should include the current versions of Edge, Chrome, Firefox, and Safari. Organizational Capacity Briefly describe your firm’s organizational capacity to produce a web application (e.g. staff, equipment, software, physical space, office location, etc.).
