City of Columbus #RFQ033854

Columbus Public Health Managed Web Hosting, Migration, Development, and Messaging Services

Columbus Public Health is seeking a managed web platform and professional services to support its public-health websites and online services. - Government buyer: City of Columbus, Ohio — Columbus Public Health (CPH), Columbus Health Department; office-level buyer is identified as Columbus Public Health. - OEMs and vendors: No hosting, messaging, or development vendor is designated. The scope names cPanel/WHM and Apache, MySQL-compatible database, PHP 8.3 or later, and supported Linux or Ubuntu LTS as platform technologies, not as required suppliers. - Hosting and security: Provide single-tenant hosting or an approved equivalent with at least 8 CPU cores, 32 GB RAM, 1 TB redundant NVMe/SSD storage, 10 TB monthly data transfer, two dedicated IPv4 addresses, and IPv6 support. Hosting and data must remain in the United States, with continental-U.S. data residency; the service must provide at least 99.9% monthly network and hardware availability. - Managed operations: Include 24/7 monitoring and support, patching, firewall and DDoS protection, malware/intrusion detection and remediation, daily off-server backups retained at least 30 days, restoration testing, and compliance reporting. The provider must maintain PCI DSS service-provider validation and support HIPAA-aligned safeguards under a Business Associate Agreement (BAA). - Migration and onboarding: Migrate websites, databases, TLS certificates, and DNS; modernize the hosting stack and test compatibility. Provide a migration plan, parallel-run validation, and an approved cutover. Migration is expected within 30 days of award. Mailbox services must not be provisioned. - Consulting and development: Provide task-order web consulting and custom development, including forms, data-collection tools, dashboards, service-request features, integrations, accessibility and user-experience improvements, and strategy, analytics, and security advice. Work must meet WCAG 2.1 AA and secure-development requirements. The City owns custom work, with source code and documentation delivered and a 90-day defect warranty. - Transactional messaging: Include up to 50,000 transactional emails and 10,000 transactional SMS messages per month. Email requirements include SPF, DKIM, and DMARC alignment plus delivery reporting; SMS includes A2P 10DLC or equivalent registration, STOP opt-out handling, and delivery reporting. Itemize overage rates; unused monthly volumes do not roll over. - Optional separately priced services: Managed WAF and/or CDN; a geographically separate warm disaster-recovery replica with documented recovery targets; and a production-mirroring staging/test environment. - Pricing and term: Price hosting/managed operations separately from migration, consulting/development, messaging and overages, and options. The solicitation line item is one year of Managed Hosting Services, with two optional one-year renewals. No physical product part numbers or quantities are specified.

Description

Columbus Public Health is soliciting proposals for managed web hosting services, including consulting and custom web development for its public-health-related web services. The scope includes PCI DSS-validated, HIPAA-capable hosting; migration of existing websites and databases to a supported software stack; managed operations, security, backups, and transactional email and SMS services. Proposals must include the completed Pricing Schedule, with hosting and professional services priced separately. The contract is scheduled to begin in November 2026 for one year, with options for two additional one-year renewals.

View original listing