# City of Columbus #RFQ033854

Columbus Public Health Managed Hosting, Migration, Development, and Messaging Services

**Posted:** October 12, 2026
**Respond By:** October 19, 2026
**Identifier:** RFQ033854
**NAICS:** 518210, 541511, 541512, 541519

Columbus Public Health is seeking a managed web-hosting and web-services provider for its public-facing websites and related applications.
- **Government buyer:** City of Columbus, Ohio — Columbus Public Health (CPH).
- **OEMs and vendors:** No specific hosting, development, or transactional-messaging vendor is named. The requirements reference cPanel/WHM, Linux or Ubuntu LTS, an Apache-family web stack, a MySQL-compatible database, and PHP 8.3 or later as platform technologies or examples.
- **Hosting and operations:** Provide a dedicated single-tenant server or approved equivalent with at least 8 CPU cores, 32 GB RAM, 1 TB redundant NVMe/SSD storage, 10 TB monthly data transfer, two dedicated IPv4 addresses, and IPv6 support. Hosting and data must be U.S.-based, with data kept in the continental United States.
- **Security and reliability:** Maintain PCI DSS service-provider validation and HIPAA-aligned safeguards under a Business Associate Agreement. Include patching, 24/7 monitoring and support, firewall and DDoS protection, malware/intrusion detection and remediation, daily off-server backups retained at least 30 days, restoration testing, compliance reporting, and at least 99.9% monthly network and hardware availability.
- **Migration and development:** Migrate websites, databases, TLS certificates, and DNS; modernize the stack and test compatibility. Provide consulting and custom development through approved task orders, such as forms, data-collection tools, dashboards, service-request features, integrations, accessibility and user-experience improvements, and web strategy or security advice. Custom work must meet WCAG 2.1 AA and secure-development requirements; the City owns the work product.
- **Transactional messaging:** Include up to 50,000 transactional emails and 10,000 transactional SMS messages per month, with authentication, delivery reporting, and SMS campaign registration. Unused volume does not roll over; overage rates must be itemized.
- **Optional services:** Separately price a managed WAF and/or CDN, a geographically separate warm disaster-recovery replica, and a production-mirroring staging/test environment.
- **Pricing and term:** The listed solicitation line item is one year of Managed Hosting Services. The initial term is one year with two optional one-year renewals. Price hosting, migration, consulting and development, messaging and overages, and optional services separately. Migration is required within 30 days of award; renewal pricing is subject to mutual agreement and a maximum 5% increase over the prior year.

### Description

Columbus Public Health is soliciting proposals for managed web hosting services, including consulting and custom web development for its public-health-related web services. The scope includes PCI DSS-validated, HIPAA-capable hosting; migration of existing websites and databases to a supported software stack; managed operations, security, backups, and transactional email and SMS services. Proposals must include the completed Pricing Schedule, with hosting and professional services priced separately. The contract is scheduled to begin in November 2026 for one year, with options for two additional one-year renewals.

[View original listing](https://columbusvendorservices.powerappsportals.com/OpenRFQs/)
