# Oregon Buys #S-44300-00017084

Oregon Health Authority HEDIS and non-HEDIS measurement, reporting, and cloud analytics services

**Posted:** September 29, 2026
**Respond By:** November 06, 2026
**Identifier:** S-44300-00017084
**NAICS:** 541512, 541519, 541611

Oregon Health Authority is seeking an NCQA-certified provider for Oregon Health Plan quality measurement and cloud analytics services.
- **Buyer:** Oregon Health Authority (OHA), Health Policy & Analytics Division, Quality Measurement, Surveys, and Reporting team; the procurement is issued by the State of Oregon. OHA’s Health Analytics team and Health Analytics Library are part of the operating context.
- **Named organizations:** The National Committee for Quality Assurance (NCQA) is the required certifying organization, not a proposed supplier. Oregon Health Plan coordinated care organizations (CCOs) and the Centers for Medicare & Medicaid Services (CMS) are reporting recipients. No commercial OEM, vendor, or product brand is named.
- **Requested services:** Produce, validate, and report approximately 30 HEDIS measures and 14 non-HEDIS measures; integrate claims, enrollment, and other OHA data; perform quarterly refreshes and recalculations; and support quarterly reporting to OHA and CCOs and annual reporting to CMS.
- **Implementation and operations:** Onboarding, configuration, data validation, measure logic confirmation, quality control, error remediation, cloud hosting and storage, analytics and measure-engine licensing, user support, and SLA-based service. Hybrid measure operations, including chart retrieval and abstraction, may apply; optional work includes custom measures, supplemental data integration, and custom analytics or coding.
- **Important requirements:** Maintain NCQA certification and HIPAA compliance; achieve at least a 97% quality match for non-HEDIS measures before vendor-led reporting; meet accessibility requirements; and protect state data. The solution must address Statewide IT Control Standards and NIST SP 800-53 Rev. 5-aligned controls, with U.S.-based hosting and data access and protections for Level 3 information. A 90-day stabilization period is specified after rollout.
- **Pricing and term:** Price mandatory services across the five-year pricing period, including onboarding in Year 0, and separately identify optional work and pricing assumptions. The anticipated initial term is five years, with renewal options up to a cumulative maximum of 10 years. No contract dates or estimated value are provided.

### Description

The Oregon Health Authority is seeking an NCQA-certified vendor to produce, certify, and report 30 HEDIS and 14 non-HEDIS measures for the Oregon Health Plan. The RFP describes services including measure production, data ingestion, reporting, and certification support; the sample contract identifies cloud-based analytics capabilities. The response deadline is November 6, 2026, at 12:00 PM. The solicitation also includes a pre-proposal conference, but its date, time, and location are not provided in the source.

[View original listing](https://oregonbuys.gov/bso/external/bidDetail.sda?docId=S-44300-00017084&external=true&parentUrl=close)