Opportunity
Empire State Development #CFARedesign-and-Hosting-RFP-52226
Cloud-Based Redesign and Hosting of New York's Consolidated Funding Application System
Posted
May 22, 2026
Respond By
July 01, 2026
Identifier
CFARedesign-and-Hosting-RFP-52226
NAICS
541512, 518210, 541513
Empire State Development (ESD) is seeking a vendor to redesign and host its Consolidated Funding Application (CFA) system, transitioning from a legacy ColdFusion 22 platform to a modern, cloud-based solution. - Government Buyer: - Empire State Development (ESD), New York State Urban Development Corporation, REDC Team - Products/Services Requested: - Development and hosting of a turnkey, cloud-based CFA portal - Migration from ColdFusion 22 legacy system - Ongoing support, including 99.9% uptime and 24/7/365 critical issue response - End-of-contract transition services - Features: program and question management, user roles, reporting, API integration, bulk upload/download, PDF generation, disaster recovery - Unique/Notable Requirements: - Must comply with ISO 27001, 27005, 27035, GDPR, New York State and federal cybersecurity standards - Security Management Plan, AI usage compliance, multifactor authentication, vulnerability management - Accessibility standards: Section 508, WCAG AA - Diversity goals: 30% MWBE and 6% SDVOB participation - Minimal IT support required for administration - No specific OEMs or vendors are named in the solicitation - Place of Performance: - Albany, New York (primary location for system delivery and support)
Description
Empire State Development (ESD) is seeking proposals for the redesign and hosting of the Consolidated Funding Application (CFA) system. The current CFA system, built in ColdFusion 22, is at its end-of-useful life and the new system should be a cloud-based, turnkey application supporting the creation, management, and submission of applications. The system should require minimal to no IT support once implemented and must comply with various IT security standards and diversity practices. The RFP includes detailed IT project deliverables, security standards, and requirements for MWBE and SDVOB subcontractor participation.