DMV License Production Addendum 1

Location: Vermont
Posted: Jun 22, 2026
Due: Jul 17, 2026
Agency: State of Vermont
Type of Government: State & Local
Category:
  • B - Special Studies and Analyses - Not R&D
Publication URL: To access bid details, please log in.
TITLE QUESTIONS DUE ANSWERS POSTED DUE DATE NO POSTING AFTER
DMV License Production
Bidder Response Form
Addendum 1

06/04/2026 04:30PM
Q&A_-_DMV Drivers License ID Production. (06/22/2026)
07/17/2026 04:30PM

Attachment Preview

State of Vermont Bidder Response Form

Request for Proposal Name: DRIVER'S LICENSE/ID CARD PRODUCTION

Vendor Instructions:

Provide the information requested in this form and submit it to the State of Vermont as part of your Request for Proposal (RFP) response. All answers must be provided within the form unless otherwise specified.

Important: This form must be completed and submitted in response to this RFP for your proposal to be considered valid. The submission must also include the eight (8) additional artifacts requested within this form (denoted by underlined green font).

See the RFP for full instructions for submitting a bid. Bids must be received by the due date and at the location specified on the cover page of the RFP.

Direct any questions you have concerning this form or the RFP to:

Kyle Emerson, State Purchasing Agent

State of Vermont

Office of Purchasing & Contracting

E-mail Address:

Part 1: VENDOR PROFILE

Complete the table below.

Provide a brief overview of your company including number of years in business, number of employees, nature of business, and description of clients. Identify any parent corporation and/or subsidiaries.

Is your organization currently or has it previously provided solutions and/or services to any agency or entity of the Vermont State government within the past five years? If so, include a complete list of the State entities, the solutions and/or services provided, and the dates your organization provided the State with these services in the last five years.

Provide a Financial Statement* for your company and label it Attachment #1. This requirement can be filled by:

A current Dun and Bradstreet Report that includes a financial analysis of the firm;

An Annual Report if it contains (at a minimum) a Compiled Income Statement and Balance Sheet verified by a Certified Public Accounting firm; or

Tax returns and financial statements including income statements and balance sheets for the most recent 3 years, and any available credit reports.

A confidentiality statement may be included if this financial information is considered non-public information

*Some types of procurements may require bidders to provide additional or specific financial information. Any such additional requirements will be clearly identified and explained within the RFP and may include supplemental forms in addition to this Bidder Response Form.

Disclose any judgments, pending or expected litigation, or other real potential financial reversals, which might materially affect the viability or stability of your company or indicate below that no such condition is known to exist. A confidentiality statement may be included if this information is considered non-public information

Provide a list of three references similar in size and industry (preferably another governmental entity). References shall be clients, other than the State of Vermont, who have implemented your Solution within the past 48 months.

Part 2: Vendor Proposal/Solution

Provide a description of the technology solution you are proposing.

Provide a description of the capabilities of the technology solution you are proposing.

If specific software is being proposed, provide a description of the:

Standard features and functions of the software:

The software licensing requirements for the solution:

Maximum number of concurrent users:

Give a brief description of the evolution of the system/software solution you are proposing. Include the date of the first installed site and major developments which have occurred (e.g. new versions, new modules, specific features).

List the total number of installations in the last 3 years by the year of installation.

Provide the total number of current users for the proposed system and indicate what version they are using.

Have you implemented the proposed solution for other government entities? If so, tell us who, when, and how that implementation went?

Provide a Road Map that outlines the company's short term and long-term goals for the proposed solution/software and label it Attachment #2. (A confidentiality statement may be included if this information is considered non-public information)

Provide PowerPoint (minimum of 1 slide and maximum of 10 slides) that provides an Executive level summary of your proposal to the State. Label it Attachment #3.

Describe any infrastructure, equipment, network or hardware required to implement and/or run the solution.

What is your recommended way to host this solution?

Describe how your solution can be integrated to other applications and if you offer a standard-based interface to enable integrations.

Respond to the following questions about the solution being proposed:

Part 3: Functional Requirements

The table below lists the State's Functional Requirements. Indicate the "Availability" for each requirement for your proposed solution. Use the "Vendor Comments" column to provide any additional information or explanations.

A - Feature is available in the core ("out-of-the-box") solution.

D - Feature is currently under development (indicate anticipated date of availability in the Vendor comments column).

C - Feature is not available in the core solution, but can provided with customization.

N - Feature is not available.

Part 4: Non- Functional Requirements

The tables below list the State's Non-Functional Requirements. Indicate if your proposed solution complies in the "Comply" column.

Yes = the solution complies with the stated requirement.

No = the solution does not comply with the stated requirement.

N/A = Not applicable to this offering.

Describe how the requirement is met in the "Vendor Description of Compliance" column.

4.1 Hosting

4.2 Application Solution

Security

As a solution vendor, you must have documented and implemented security practices for the following and have a process to audit/monitor for adherence. Indicate "Yes" or "No" in the "Comply" column or "N/A" if the requirement is not applicable to this offering. Use the "Vendor Description of Applicable Security Processes" column to describe how you meet the requirement and the "Audit/Monitor" column to indicate how you monitor for compliance. (A confidentiality statement may be included if this information is considered non-public information)

4.4 Other Non-Functional Requirements

For each requirement listed, indicate if and how you comply or type "N/A" if it is not applicable to your offering.

4.5 Data Compliance

Vendors and their solutions must adhere to applicable State and Federal standards, policies, and laws based on the type of data that will be stored, accessed, transmitted and/or controlled by the solution. If the "Type of Data" column is checked below, respond "Yes" or "No" in the "Comply" column and provide an explanation on how you comply in the "Vendor's Description of Compliance" column.

4.6 State of Vermont Cybersecurity Standard Update

Bidder shall certify by checking the box below the Solution shall not include, incorporate, rely on, utilize or be supported by any products or services subject to the limitations provided under State of Vermont Cybersecurity Standard Update, which Bidder acknowledges has been provided to it, and is available on-line at the following URL:

Bidder hereby certifies that in connection with the Request for Proposal, none of the applicable products or services will be included in or used to support State systems in a manner prohibited under the Standard.

Part 5: IMPLEMENTATION/Project Management Approach

Describe the approach you would recommend for project managing this engagement.

Provide a list of the standard project management deliverables that you would normally produce for this type of engagement.

Provide a proposed list of project phases, major milestones, and an implementation time-line. Label this Attachment #4.

What types of difficulties have other clients experienced with implementation of the proposed solution?

Describe the experience and qualifications of the Project Manager you would offer as the resource for this engagement. Provide a copy of their resume and label it Attachment #5.

Part 6: TECHNICAL Services

Describe the technical services included in your proposal (e.g., business analysis, configuration, testing, implementation, etc.).

Provide a list of the standard deliverables for the technical services described above.

Provide a description of the roles/services/tasks the State will be expected to cover as part of this engagement. Describe any additional roles/services/tasks that are optional, but would be beneficial for the State to provide.

Describe your typical conversion plan to convert data from existing systems to your proposed solution (if applicable).

Describe and attach your typical Implementation Plan (label it Attachment #6), which shall include planning for the transition to maintenance and operations.

Describe the experience and qualifications of the technical resources proposed for this engagement. Provide their resume(s) and label them Attachment #7.

Describe the training that is included in your proposal.

Describe the system, administrator, and/or user documentation that is included in your proposal.

Part 7: Maintenance and Support Services

Provide answers to the questions below regarding your company's Maintenance and Support Services:

Describe how adherence to your service levels is measured and what remedies you would provide the State when performance doesn't meet the standard?

Part 8: PRICING

Submit pricing for your proposed solution in the table below. Fill in only the lines that are applicable to your proposal. Insert lines for additional costs, but do not delete or rename any lines in the Table. Total each column and provide a total of all columns in the "Total Implementation, plus 5 Year Costs" box on the next page.

Describe any assumptions you have made in relation to the above cost and pricing information.

Provide pricing information for any volume discounts that are available based on the number of software licenses purchased or support years purchased.

Provide pricing for any Functional Requirements marked as "C" (feature is not available in the core solution, but can be provided with customization).

Part 9: Terms and Conditions

Exceptions to the States standard terms, conditions, and templates is strongly discouraged. Accordingly, exceptions may result in a determination that a bidders proposal is not in the best interest of the State. However, if a bidder does wish to take exception to the State's terms, conditions, or templates they must indicate those objections in the table below. Add lines to the table below as needed. The State considers contractor documents the bidder wishes to append to the contract as exceptions.

Part 10: CERTIFICATE OF COMPLIANCE/Authorized Company Signature

A. NON COLLUSION: Bidder hereby certifies that the prices quoted have been arrived at without collusion and that no prior information concerning these prices has been received from or given to a competitive company. If there is sufficient evidence to warrant investigation of the bid/contract process by the Office of the Attorney General, bidder understands that this paragraph might be used as a basis for litigation.

B. CONTRACT TERMS: Bidder hereby acknowledges that is has read, understands and agrees to the terms of this RFP, including Attachment C: Standard State Contract Provisions, and any other contract attachments included with this RFP.

C. Worker Classification Compliance Requirement: In accordance with Section 32 of The Vermont Recovery and Reinvestment Act of 2009 (Act No. 54), the following provisions and requirements apply to Bidder when the amount of its bid exceeds $250,000.00.

Self-Reporting. Bidder hereby self-reports the following information relating to past violations, convictions, suspensions, and any other information related to past performance relative to coding and classification of workers, that occurred in the previous 12 months.

Subcontractor Reporting. Bidder hereby acknowledges and agrees that if it is a successful bidder, prior to execution of any contract resulting from this RFP, Bidder will provide to the State a list of all proposed subcontractors and subcontractors' subcontractors, together with the identity of those subcontractors' workers compensation insurance providers, and additional required or requested information, as applicable, in accordance with Section 32 of The Vermont Recovery and Reinvestment Act of 2009 (Act No. 54), and Bidder will provide any update of such list to the State as additional subcontractors are hired. Bidder further acknowledges and agrees that the failure to submit subcontractor reporting in accordance with Section 32 of The Vermont Recovery and Reinvestment Act of 2009 (Act No. 54) will constitute non-compliance and may result in cancellation of contract and/or restriction from bidding on future state contracts.

D. Executive Order 05 - 16: Climate Change Considerations in State Procurements Certification

Bidder certifies to the following (Bidder may attach any desired explanation or substantiation. Please also note that Bidder may be asked to provide documentation for any applicable claims):

1. Bidder owns, leases or utilizes, for business purposes, space that has received:

Energy Star(R) Certification

LEED(R), Green Globes(R), or Living Buildings ChallengeSM Certification

Other internationally recognized building certification:

____________________________________________________________________________

2. Bidder has received incentives or rebates from an Energy Efficiency Utility or Energy Efficiency Program in the last five years for energy efficient improvements made at bidder's place of business. Please explain:

_____________________________________________________________________________

3. Please Check all that apply:

Bidder can claim on-site renewable power or anaerobic-digester power ("cow-power"). Or bidder consumes renewable electricity through voluntary purchase or offset, provided no such claimed power can be double-claimed by another party.

Bidder uses renewable biomass or bio-fuel for the purposes of thermal (heat) energy at its place of business.

Bidder's heating system has modern, high-efficiency units (boilers, furnaces, stoves, etc.), having reduced emissions of particulate matter and other air pollutants.

Bidder tracks its energy consumption and harmful greenhouse gas emissions. What tool is used to do this? _____________________

Bidder promotes the use of plug-in electric vehicles by providing electric vehicle charging, electric fleet vehicles, preferred parking, designated parking, purchase or lease incentives, etc..

Bidder offers employees an option for a fossil fuel divestment retirement account.

Bidder offers products or services that reduce waste, conserve water, or promote energy efficiency and conservation. Please explain:

____________________________________________________________________________

____________________________________________________________________________

4. Please list any additional practices that promote clean energy and take action to address climate change:

_____________________________________________________________________________

____________________________________________________________________________

_____________________________________________________________________________

Executive Order 02 - 22: Solidarity with the Ukrainian People

By checking this box, Bidder certifies that none of the goods, products, or materials offered in response to this solicitation are Russian-sourced goods or produced by Russian entities. If Bidder is unable to check the box, it shall indicate in the table below which of the applicable offerings are Russian-sourced goods and/or which are produced by Russian entities. An additional column is provided for any note or comment that you may have.

Certification Regarding Use of Contract Funds for Lobbying. The following provision is applicable to the Contractor for contracts over $100,000.00, and Contractor shall include this clause in all its subcontracts over $100,000.00.

1. The prospective contractor certifies, to the best of his or her knowledge and belief, under the penalties of perjury under the laws of the State of Vermont and the United States that on behalf of the person, firm, association, or corporation he or she represents, that:

a. No Federal appropriated funds have been paid or will be paid, by or on behalf of the undersigned, to any person for influencing or attempting to influence an officer or employee of any Federal agency, a Member of Congress, an officer or employee of Congress, or an employee of a Member of Congress in connection with the awarding of any Federal contract, the making of any Federal grant, the making of any Federal loan, the entering into of any cooperative agreement, and the extension, continuation, renewal, amendment, or modification of any Federal contract, grant, loan, or cooperative agreement.

b. If any funds other than Federal appropriated funds have been paid or will be paid to any person for influencing or attempting to influence an officer or employee of any Federal agency, a Member of Congress, an officer or employee of Congress, or an employee of a Member of Congress in connection with this Federal contract, grant, loan, or cooperative agreement, the undersigned shall complete and submit Standard Form-LLL, "Disclosure Form to Report Lobbying," in accordance with its instructions.

2. This certification is a material representation of fact upon which reliance was placed when this transaction was made or entered into. Submission of this certification is a prerequisite for making or entering into this transaction imposed by 31 U.S.C. 1352. Any person who fails to file the required certification shall be subject to a civil penalty of not less than $10,000 and not more than $100,000 for each such failure.

3. The prospective contractor also agrees that they shall require that the language of this certification be included in all lower tier subcontracts, which exceed $100,000 and that all such recipients shall certify and disclose accordingly.

For your bid to be considered valid, this Bidder Response Form must be signed by a duly authorized representative of the bidder, and submitted as part of the response to the proposal.

I am authorized to submit a proposal to the State of Vermont in response to this RFP on behalf of my organization. The information provided as part of my organization's response is a true and accurate representation of my organization's ability to meet the State of Vermont's business needs as expressed in this RFP.

Item Detail
Company Name: [insert the name that you do business under]
Physical Address: [if more than one office - put the address of your head office]
Postal Address: [e.g. P.O Box address]
Business Website: [url address]
Type of Entity (Legal Status): [sole trader/partnership/limited liability company or specify other]
Primary Contact: [name of the person responsible for communicating with the Buyer]
Title: [job title or position]
Email Address: [email]
Phone Number: [landline]
Fax Number: [fax]
Reference 1 Detail Detail
Reference Company Name: [insert the name that you do business under] [insert the name that you do business under]
Company Address: [address] [address]
Type of Industry: [industry type: e.g., government, telecommunications, etc.] [industry type: e.g., government, telecommunications, etc.]
Contact Name: [if applicable] [if applicable]
Contact Phone Number: [phone] [phone]
Contact Email Address: [email] [email]
Description of system(s) implemented: [description] [description]
Date of Implementation: [date] [date]
Reference 2 Reference 2 Detail
Reference Company Name: Reference Company Name: [insert the name that you do business under]
Company Address: Company Address: [address]
Type of Industry: Type of Industry: [industry type: e.g., government, telecommunications, etc.]
Contact Name: Contact Name: [if applicable]
Contact Phone Number: Contact Phone Number: [phone]
Contact Email Address: Contact Email Address: [email]
Description of system(s) implemented: Description of system(s) implemented: [description]
Date of Implementation: Date of Implementation: [date]
Reference 3 Detail
Reference Company Name: [insert the name that you do business under]
Company Address: [address]
Type of Industry: [industry type: e.g., government, telecommunications, etc.]
Contact Name: [if applicable]
Contact Phone Number: [phone]
Contact Email Address: [email]
Description of system(s) implemented: [description]
Date of Implementation: [date]
Question Yes or No Vendor Response/Explanation
Does the solution use Service Oriented Architecture for integration?
Does the solution use a Rules Engine for business rules?
Does the solution use any Master Data Management?
Does the solution use any Enterprise Content Management software?
Does the solution use any Case Management software?
Does the solution use any Business Intelligence software?
Does the solution use any Database software?
Does the solution use any Business Process Management software?
Is this a browser based solution and if so what browsers do you support?
Does the solution include an API for integration?
ID # Functional Requirement Description Availability Vendor Comments
1 The ability to print IDs, driver, nondriver, REAL ID, Learners' permits, and enhanced licenses will be required. RFID number development, data retention and security policies. Please expand on RFID policies. 1 The ability to print IDs, driver, nondriver, REAL ID, Learners' permits, and enhanced licenses will be required. RFID number development, data retention and security policies. Please expand on RFID policies. 1 The ability to print IDs, driver, nondriver, REAL ID, Learners' permits, and enhanced licenses will be required. RFID number development, data retention and security policies. Please expand on RFID policies. 1 The ability to print IDs, driver, nondriver, REAL ID, Learners' permits, and enhanced licenses will be required. RFID number development, data retention and security policies. Please expand on RFID policies.
Bidder Response: Bidder Response: Bidder Response: Bidder Response:
2 The Bidder's solution shall allow for images to be exempt from Facial Recognition (FR) checks (IE: When undercover DL/ID's are produced). 2 The Bidder's solution shall allow for images to be exempt from Facial Recognition (FR) checks (IE: When undercover DL/ID's are produced). 2 The Bidder's solution shall allow for images to be exempt from Facial Recognition (FR) checks (IE: When undercover DL/ID's are produced). 2 The Bidder's solution shall allow for images to be exempt from Facial Recognition (FR) checks (IE: When undercover DL/ID's are produced).
Bidder Response: Bidder Response: Bidder Response: Bidder Response:
3 The Bidder's solution must provide both standard and ad hoc reporting capabilities; Bidders shall provide sample reports as part of their proposal as well as describe capabilities for ad hoc reporting. 3 The Bidder's solution must provide both standard and ad hoc reporting capabilities; Bidders shall provide sample reports as part of their proposal as well as describe capabilities for ad hoc reporting. 3 The Bidder's solution must provide both standard and ad hoc reporting capabilities; Bidders shall provide sample reports as part of their proposal as well as describe capabilities for ad hoc reporting. 3 The Bidder's solution must provide both standard and ad hoc reporting capabilities; Bidders shall provide sample reports as part of their proposal as well as describe capabilities for ad hoc reporting.
Bidder Response: Bidder Response: Bidder Response: Bidder Response:
4 The Bidder's solution shall print and ship cards from the central issuance facility no later than three (3) business days following transmission of DL/ID card data from VT DMV to the central issuance facility. Shipped means transferred to the shipping provider, not transferred to a third-party mail processing contractor. 4 The Bidder's solution shall print and ship cards from the central issuance facility no later than three (3) business days following transmission of DL/ID card data from VT DMV to the central issuance facility. Shipped means transferred to the shipping provider, not transferred to a third-party mail processing contractor. 4 The Bidder's solution shall print and ship cards from the central issuance facility no later than three (3) business days following transmission of DL/ID card data from VT DMV to the central issuance facility. Shipped means transferred to the shipping provider, not transferred to a third-party mail processing contractor. 4 The Bidder's solution shall print and ship cards from the central issuance facility no later than three (3) business days following transmission of DL/ID card data from VT DMV to the central issuance facility. Shipped means transferred to the shipping provider, not transferred to a third-party mail processing contractor.
Bidder Response: Bidder Response: Bidder Response: Bidder Response:
5 The Bidder's solution shall use next day service for shipping cards that are not printed and shipped within three business days, at no additional cost. 5 The Bidder's solution shall use next day service for shipping cards that are not printed and shipped within three business days, at no additional cost. 5 The Bidder's solution shall use next day service for shipping cards that are not printed and shipped within three business days, at no additional cost. 5 The Bidder's solution shall use next day service for shipping cards that are not printed and shipped within three business days, at no additional cost.
Bidder Response: Bidder Response: Bidder Response: Bidder Response:
6 The Bidder's solution must allow users real-time access regarding the tracking of credential transactions that should include but not limited to: System process being performed Credentials produced Status of credential transaction Date shipped Process problems or failures Data transfer failure 6 The Bidder's solution must allow users real-time access regarding the tracking of credential transactions that should include but not limited to: System process being performed Credentials produced Status of credential transaction Date shipped Process problems or failures Data transfer failure 6 The Bidder's solution must allow users real-time access regarding the tracking of credential transactions that should include but not limited to: System process being performed Credentials produced Status of credential transaction Date shipped Process problems or failures Data transfer failure 6 The Bidder's solution must allow users real-time access regarding the tracking of credential transactions that should include but not limited to: System process being performed Credentials produced Status of credential transaction Date shipped Process problems or failures Data transfer failure
Bidder Response: Bidder Response: Bidder Response: Bidder Response:
ID # Non-Functional Requirement Description Comply Vendor's Description of Compliance
H1 Any technical solution must be hosted in a data center.
H2 Any hosting provider must provide for back-up and disaster recovery models and plans as needed for the solution.
H3 Any hosting provider will abide by ITIL best practices for change requests, incident management, problem management and service desk.
A1 Any solutions vendor must provide for the backup/recover, data retention and disaster recovery of a contracted/hosted application solution.
A2 Any solutions vendor must provide for application management and design standard of all technology platforms and environments for the application solution (Development, Staging, Productions, DR, etc.)
ID # Non-Functional Requirement Description Comply Vendor's Description of Compliance
A3 Any solutions vendor must engage the State of Vermont using Service Level Agreements for system and application performance, incident reporting and maintenance.
A4 The State owns any data they enter, migrate, or transmit into the solution and the vendor shall allow the State to pull or copy this data at any time free of charge.
A5 As a contract deliverable, the vendor shall supply an up-to-date data dictionary that represents all data respective of the solution it will provide. The data dictionary must contain the following attributes: The technology (RDBMS platform) that hosts the data source, i.e. Oracle, SQL Server, MySQL, DB2, etc. The location where the data source is hosted Thorough descriptions of each table in the data source Thorough descriptions of each column within each table in the data source. In addition to business definitions, column descriptions must include the following detail: schema names; file group names (if applicable); data types; lengths; primary and foreign key constrains; applied formatting; applied calculations; applied aggregations; NULL-ability; default values.
ID # Non-Functional Requirement Description Comply Vendor's Description of Applicable Security Processes Audit/Monitor Process
S1 Input validation
S2 Output encoding
S3 Authentication and password management
S4 Session management
S5 Access control
S6 Cryptographic practices
S7 Error handling and logging
S8 Data protection from unauthorized use, modification, disclosure or destruction (accidental or intentional).
S9 Communication security
S10 System configuration
S11 Database security
S12 File management
S13 Memory management
S14 Fraud detection
S15 General coding practices
S16 POA&M management
S17 Risk Assessment Practices including but not limited to vulnerability assessment and pen testing
S18 Incident response planning and testing
S19 System Security Plan delivery
Requirement Number Non-Functional Requirement Description Comply
1 Bidders shall propose a solution that has the ability to securely interface with the DMV's VT TRIPS API including weekly reports showing productions status.
Bidder Response: Bidder Response: Bidder Response:
2 The Bidder shall provide the End-of-Life Cycle for proposed software.
Bidder Response: Bidder Response: Bidder Response:
3 The Bidder shall produce cards at a secure US based manufacturing facility with materials that may be sourced outside of the United States. Provide location of primary and secondary facility for the Card Production Services.
Bidder Response: Bidder Response: Bidder Response:
4 The Bidder shall provide an overview of security procedures for protecting card integrity.
Bidder Response: Bidder Response: Bidder Response:
5 The Bidder shall identify all anticipated or potential future software and hardware upgrades and describe their upgrade process, specifically addressing their deployment and installation process. 5 The Bidder shall identify all anticipated or potential future software and hardware upgrades and describe their upgrade process, specifically addressing their deployment and installation process.
Bidder Response:idd er Res Bidder Response:idd er Res Bidder Response:idd er Res
6 The Bidder shall be responsible for ensuring hardware and consumables are available to meet the requirements of this contract. 6 The Bidder shall be responsible for ensuring hardware and consumables are available to meet the requirements of this contract.
Bidder Response: Bidder Response: Bidder Response:
7 The Bidder 's system solution availability must be 99.9% uptime requirement, except for agreed upon maintenance window. Solution must provide real-time reporting and alerts of all interruptions in services and processes. Service interruption(s) must be reported in real time to DMV Interface Support Group. 7 The Bidder 's system solution availability must be 99.9% uptime requirement, except for agreed upon maintenance window. Solution must provide real-time reporting and alerts of all interruptions in services and processes. Service interruption(s) must be reported in real time to DMV Interface Support Group.
Bidder Response: Bidder Response: Bidder Response:
8 The Bidder's solution shall be compliant with AAMVA standards (2025) see (Exhibit 1). Preferred security features include: UV-A dull substrate material Tamper evident card body Taggant substances for genuine authentication Card core inclusions Embossed surface pattern Embedded thread, fiber or planchette No CMYK colors and at least 2 special colors Guilloche design Anti-scan pattern Duplex security pattern Deliberate error into the design or microprint Use of non-standard type-fonts UV fluorescent ink in security background printing Optical effect pigments (other than UV or IR pigments) IR-fluorescent ink Phosphorescent ink Tagged ink Printing dynamic data elements using digital imaging technologies Laminate, overlay, coating, or production method for surface and embedded printed data and portrait PDF-417 Bar code Security background overlapping the portrait image area Redundant personalized data Personalized tactile elements Ghost image Covert Device - Readable and Storage Technology Visible security device overlapping the portrait Magnetic media fingerprinting 8 The Bidder's solution shall be compliant with AAMVA standards (2025) see (Exhibit 1). Preferred security features include: UV-A dull substrate material Tamper evident card body Taggant substances for genuine authentication Card core inclusions Embossed surface pattern Embedded thread, fiber or planchette No CMYK colors and at least 2 special colors Guilloche design Anti-scan pattern Duplex security pattern Deliberate error into the design or microprint Use of non-standard type-fonts UV fluorescent ink in security background printing Optical effect pigments (other than UV or IR pigments) IR-fluorescent ink Phosphorescent ink Tagged ink Printing dynamic data elements using digital imaging technologies Laminate, overlay, coating, or production method for surface and embedded printed data and portrait PDF-417 Bar code Security background overlapping the portrait image area Redundant personalized data Personalized tactile elements Ghost image Covert Device - Readable and Storage Technology Visible security device overlapping the portrait Magnetic media fingerprinting
Bidder Response: Bidder Response: Bidder Response:
9 The Bidder's solution must be in compliance with federal requirements for EDL issuance including RFID technology. 9 The Bidder's solution must be in compliance with federal requirements for EDL issuance including RFID technology.
Bidder Response: Bidder Response: Bidder Response:
10 The Bidder shall allocate 200 hours per year for the purpose of changes to card formats or other changes necessary for DMV operations after implementation. Unused time shall be rolled over into the following year and will expire at the end of the contract. 10 The Bidder shall allocate 200 hours per year for the purpose of changes to card formats or other changes necessary for DMV operations after implementation. Unused time shall be rolled over into the following year and will expire at the end of the contract.
Bidder Response: Bidder Response: Bidder Response:
11 The Bidder's System will be able to detect security-relevant events (as defined in NIST 800-53 moderate baseline, rev 5.2.0) that it mediates and generates audit records for them. At a minimum, the events will include, but not be limited to: a) Start/stop b) User login/logout c) Session timeout d) Account lockout e) Member record created/viewed/updated/deleted f) Scheduling g) Query h) Order i) Node-authentication failure j) Signature created/validated k) Personally Identifiable Information (PII) export l) PII import m) Security administration events n) Backup and restore o Audit event types listed in IRS 1075 11 The Bidder's System will be able to detect security-relevant events (as defined in NIST 800-53 moderate baseline, rev 5.2.0) that it mediates and generates audit records for them. At a minimum, the events will include, but not be limited to: a) Start/stop b) User login/logout c) Session timeout d) Account lockout e) Member record created/viewed/updated/deleted f) Scheduling g) Query h) Order i) Node-authentication failure j) Signature created/validated k) Personally Identifiable Information (PII) export l) PII import m) Security administration events n) Backup and restore o Audit event types listed in IRS 1075
Bidder Response: Bidder Response: Bidder Response:
12 The application will leverage virtualization to expedite disaster recovery and will have the ability to support a real time production replication disaster recovery design. 12 The application will leverage virtualization to expedite disaster recovery and will have the ability to support a real time production replication disaster recovery design.
Bidder Response: Bidder Response: Bidder Response:
13 The Bidder's System will provide procedures for managing an environment that supports both high availability and disaster recovery. 13 The Bidder's System will provide procedures for managing an environment that supports both high availability and disaster recovery.
Bidder Response: Bidder Response: Bidder Response:
14 The Bidder's System will securely maintain DMV data from receipt to credential shipment and data transfers to the DMV system. Upon completion, data will be deleted. 14 The Bidder's System will securely maintain DMV data from receipt to credential shipment and data transfers to the DMV system. Upon completion, data will be deleted.
Bidder Response: Bidder Response: Bidder Response:
15 The service provider must resolve severe (defined as those issues or defects which completely prevent printing and shipment of drivers' licenses/identification cards) requests within 4 (four) clock hours. 15 The service provider must resolve severe (defined as those issues or defects which completely prevent printing and shipment of drivers' licenses/identification cards) requests within 4 (four) clock hours.
Bidder Response: Bidder Response: Bidder Response:
16 The Bidder must resolve any other defects within an average of 1 (one) day, but no more than a maximum of 2 (two) business days. 16 The Bidder must resolve any other defects within an average of 1 (one) day, but no more than a maximum of 2 (two) business days.
Bidder Response: : Bidder Response: : Bidder Response: :
17 The Bidder's interfaces will secure and protect the data and the associated infrastructure from a confidentiality, integrity and availability perspective. 17 The Bidder's interfaces will secure and protect the data and the associated infrastructure from a confidentiality, integrity and availability perspective.
Bidder Response: Bidder Response: Bidder Response:
18 The Bidder's System will provide the functionality that provides reliability for applications, services and messages flows. Such as Load Balancing, High Availability, Fault Tolerance, Failover, In-Order Delivery, Transaction Support, Execution Support, Message Prioritization etc. Note: Test for High Availability and Failover must be completed prior to the release to UAT. 18 The Bidder's System will provide the functionality that provides reliability for applications, services and messages flows. Such as Load Balancing, High Availability, Fault Tolerance, Failover, In-Order Delivery, Transaction Support, Execution Support, Message Prioritization etc. Note: Test for High Availability and Failover must be completed prior to the release to UAT.
Bidder Response: Bidder Response: Bidder Response:
19 The Bidder's System will have the ability to use standards-based communication protocols, such as TCP/IP, HTTP, HTTP/S and SMTP. 'Protocol bridging: The ability to convert between the protocol native to the messaging platform and other protocols, such as Remote Method Invocation (RMI), IIOP and .NET remoting. 19 The Bidder's System will have the ability to use standards-based communication protocols, such as TCP/IP, HTTP, HTTP/S and SMTP. 'Protocol bridging: The ability to convert between the protocol native to the messaging platform and other protocols, such as Remote Method Invocation (RMI), IIOP and .NET remoting.
Bidder Response: Bidder Response: Bidder Response:
20 The Bidder's System will seamlessly work with DMV API (VT TRIPS). 20 The Bidder's System will seamlessly work with DMV API (VT TRIPS).
Bidder Response: Bidder Response: Bidder Response:
21 The Bidder's System will comply with all applicable State security policies and adhere to all legal, statutory, and regulatory requirements, as determined by Vermont leadership. See also standards mentioned in State of Vermont IT Attachment D. 21 The Bidder's System will comply with all applicable State security policies and adhere to all legal, statutory, and regulatory requirements, as determined by Vermont leadership. See also standards mentioned in State of Vermont IT Attachment D.
Bidder Response: Bidder Response: Bidder Response:
22 The Bidder will implement security controls in accordance with all Federal and State security policy and regulations. 22 The Bidder will implement security controls in accordance with all Federal and State security policy and regulations.
Bidder Response: Bidder Response: Bidder Response:
23 The Bidder will adhere to the principle of "Fail Safe" to ensure that a system in a failed state does not reveal any sensitive information or leave any access controls open for attacks. 23 The Bidder will adhere to the principle of "Fail Safe" to ensure that a system in a failed state does not reveal any sensitive information or leave any access controls open for attacks.
Bidder Response: Bidder Response: Bidder Response:
24 The Bidder will maintain a level of security that is commensurate with the risk and magnitude of the harm that could result from the loss, misuse, disclosure, or modification of information. 24 The Bidder will maintain a level of security that is commensurate with the risk and magnitude of the harm that could result from the loss, misuse, disclosure, or modification of information.
Bidder Response: Bidder Response: Bidder Response:
25 The Bidder will provide the ability to identify certain information as confidential (e.g. PII, PHI, etc.) and only make that accessible by appropriately authorized users. 25 The Bidder will provide the ability to identify certain information as confidential (e.g. PII, PHI, etc.) and only make that accessible by appropriately authorized users.
Bidder Response: Bidder Response: Bidder Response:
26 The Bidder will restrict access to summarized information according to organizational policy, scope of practice, and jurisdictional law. 26 The Bidder will restrict access to summarized information according to organizational policy, scope of practice, and jurisdictional law.
Bidder Response: Bidder Response: Bidder Response:
27 The Bidder will provide the ability for authorized administrators to assign restrictions or privileges to users or groups. 27 The Bidder will provide the ability for authorized administrators to assign restrictions or privileges to users or groups.
Bidder Response: Bidder Response: Bidder Response:
28 The Bidder will support removal of a user's privileges without deleting the user to ensure history of the user's identity and actions. 28 The Bidder will support removal of a user's privileges without deleting the user to ensure history of the user's identity and actions.
Bidder Response: Bidder Response: Bidder Response:
29 The Bidder will provide the capability to monitor events on the information system, detect attacks, and provide identification of unauthorized use. 29 The Bidder will provide the capability to monitor events on the information system, detect attacks, and provide identification of unauthorized use.
Bidder Response: Bidder Response: Bidder Response:
30 The Bidder will provide the capability to identify and report on inappropriate access to information. 30 The Bidder will provide the capability to identify and report on inappropriate access to information.
Bidder Response: Bidder Response: Bidder Response:
31 The Bidder will not transmit or store any Personally Identifiable Information (PII) using publicly available storage over the Internet or any wireless communication device. 31 The Bidder will not transmit or store any Personally Identifiable Information (PII) using publicly available storage over the Internet or any wireless communication device.
Bidder Response: Bidder Response: Bidder Response:
32 The Bidder will ensure that all credentials are produced in a highly secure facility located within the Continental United States. 32 The Bidder will ensure that all credentials are produced in a highly secure facility located within the Continental United States.
Bidder Response: Bidder Response: Bidder Response:
33 The Bidder will ensure that all employees with access to the system, system components, State data, or responsible for the production of identification cards have undergone a background check. 33 The Bidder will ensure that all employees with access to the system, system components, State data, or responsible for the production of identification cards have undergone a background check.
Bidder Response: Bidder Response: Bidder Response:
34 The Bidder will advise the State and Contractor management of progress in meeting goals and schedules contained in the work plans as well as any risks and issues during weekly progress meetings attended by the Bidder and the State. These may include walkthroughs of selected deliverables as requested by State staff.. 34 The Bidder will advise the State and Contractor management of progress in meeting goals and schedules contained in the work plans as well as any risks and issues during weekly progress meetings attended by the Bidder and the State. These may include walkthroughs of selected deliverables as requested by State staff..
Bidder Response: Bidder Response: Bidder Response:
35 The Bidder will develop and provide written progress reports to the State. Reports shall contain status meeting agenda items Progress of each task/activity Action items and decisions from the previous meeting Problems encountered, proposed resolutions, and projected completion dates for problem resolution Planned activities for the next two reporting periods Status of contractually defined deliverables, milestones, and walkthroughs scheduled in the project schedule Frequency of periodic reports can be adjusted during the course of project as a greed by the State and Contractor 35 The Bidder will develop and provide written progress reports to the State. Reports shall contain status meeting agenda items Progress of each task/activity Action items and decisions from the previous meeting Problems encountered, proposed resolutions, and projected completion dates for problem resolution Planned activities for the next two reporting periods Status of contractually defined deliverables, milestones, and walkthroughs scheduled in the project schedule Frequency of periodic reports can be adjusted during the course of project as a greed by the State and Contractor
Bidder Response: Bidder Response: Bidder Response:
36 If the Bidder must substitute key staff during the project, the Bidder will submit to the State, in writing, the reason for the change and provide a completed staff experience reference form and resume for the substitute personnel. The State will either approve or reject the substitution. 36 If the Bidder must substitute key staff during the project, the Bidder will submit to the State, in writing, the reason for the change and provide a completed staff experience reference form and resume for the substitute personnel. The State will either approve or reject the substitution.
Bidder Response: Bidder Response: Bidder Response:
37 The Bidder will develop a technical infrastructure document which describes all of the system software and tools necessary for the environments proposed. 37 The Bidder will develop a technical infrastructure document which describes all of the system software and tools necessary for the environments proposed.
Bidder Response: Bidder Response: Bidder Response:
38 The Bidder will assist the State with testing and release preparation in the pre-production environment. 38 The Bidder will assist the State with testing and release preparation in the pre-production environment.
Bidder Response: Bidder Response: Bidder Response:
39 The Bidder must produce and execute an Implementation Support Plan. 39 The Bidder must produce and execute an Implementation Support Plan.
Bidder Response: Bidder Response: Bidder Response:
40 The Bidder must provide support staffing information such as the proposed number, ratios, duration, and roles/responsibilities for on-going support (as identified in previously submitted implementation approach and plan). 40 The Bidder must provide support staffing information such as the proposed number, ratios, duration, and roles/responsibilities for on-going support (as identified in previously submitted implementation approach and plan).
Bidder Response: Bidder Response: Bidder Response:
Type of Data Applicable State & Federal Standards, Policies, and Laws Comply Vendor's Description of Compliance
Publicly available information NIST 800-171
Confidential Personally Identifiable Information (PII) State law on Notification of Security Breaches State Law on Social Security Number Protection State law on the Protection of Personal Information National Institute of Standards & Technology: NIST SP 800-53 Revision 4 "Moderate" risk controls Privacy Act of 1974, 5 U.S.C. 552a.
Payment Card Information Payment Card Industry Data Security Standard (PCI DSS) v 3.2
Federal Tax Information Internal Revenue Service Tax Information Security Guidelines for Federal, State and Local Agencies: IRS Pub 1075
Personal Health Information (PHI) Health Insurance Portability and Accountability Act of 1996: HIPAA The Health Information Technology for Economic and Clinical Health Act HITECH Code of Federal Regulations 45 CFR 95.621
Type of Data Applicable State & Federal Standards, Policies, and Laws Comply Vendor's Description of Compliance
Affordable Care Act Personally Identifiable Information (PII) Internal Revenue Service Tax Information Security Guidelines for Federal, State and Local Agencies IRS Pub 1075 Minimum Acceptable Risk Standards for Exchanges MARS-E 2.0 (Scroll down the page)
Medicaid Information Medicaid Information Technology Architecture MITA3.0 Code of Federal Regulations 45 CFR 95.621
Prescription Information State law on the Confidentiality of Prescription Information
Student Education Data Family Educational Rights and Privacy Act: FERPA
Personal Information from Motor Vehicle Records Driver's Privacy Protection Act (Title XXX) ("DPPA") 18 U.S.C. Chapter 123, 2721 - 2725
Criminal Records Criminal Justice Information Security Policy: CJIS
Other sensitive data Data that does not fit into the above categories but is sensitive and requires additional protection.
Questions Vendor Response
Service: Customer Phone &/or Email Support Service: Customer Phone &/or Email Support
What is the method for contacting technical support?
What are the hours of operation for support?
What is the turnaround time for responses?
What is the escalation process for support issues?
Who comprises the support team and what are their qualifications?
Define your response resolution metrics and how you capture and report them.
Service: Incident/Security Breach Notification and Process Service: Incident/Security Breach Notification and Process
Describe your identification and notification process for security breaches.
Service: Data Management Service: Data Management
Describe how data is stored, retained and backed-up (including frequency).
Service: Hosting Service: Hosting
Describe the hosting service and associated service levels.
Questions Vendor Response
Service: Scheduled Maintenance/Downtime Service: Scheduled Maintenance/Downtime
What is the frequency of scheduled maintenance and downtime?
What is the notification process for scheduled maintenance and downtime?
Describe how "maintenance" updates are tested with customers prior to installing them in their live environments.
Service: System Upgrades Service: System Upgrades
Are software upgrades provided as part of the software support contract?
Describe your software upgrade process.
How often are new versions released?
Is documentation and training provided for system upgrades?
Are there additional costs for upgrades and/or new releases?
Describe how and when the State will have an opportunity to test system upgrades/releases prior to live installation.
Describe how the State will validate post installation and how changes will be backed out in the event that a problem is encountered.
Questions Vendor Response
Service: Bug Fixes and Minor Enhancements Service: Bug Fixes and Minor Enhancements
Describe the frequency and process for providing, testing, and installing bug fixes and minor enhancements.
Service: Disaster Recovery Service: Disaster Recovery
Describe the disaster recovery services included in this proposal for any non-state hosted services.
What is your standard RPO and RTO?
Describe the plan your company has in place for its own disaster recovery of any sites that may be involved in support of this proposal.
Cost Type One Time (Implementation) Year 1 Year 2 Year 3 Year 4 Year 5
Software
Enterprise Application: License Fees $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Maintenance &/or License Fee Add-Ons $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Subscription cost $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Storage Limitations and/or Additional Fees $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Database Software: License Fees $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Middleware Tools: License Fees $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Operating System Software: License Fees $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Upgrade Costs for Later Years $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Support and Maintenance Fees $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
$0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Implementation Services
Project Management $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Requirements $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Design (Architect Solution) $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Development (Build, Configure or Aggregate)/Testing $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
System Testing $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Defect Removal $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Implement/Deploy or Integrate $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Quality Management $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Cost Type One Time (Implementation) Year 1 Year 2 Year 3 Year 4 Year 5
Implementation Services Continued
Training $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
$0.00 $0.00 $0.00 $0.00 $0.00 $0.00
$0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Telecom $0.00
Bandwidth $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
$0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Hardware $0.00
Computing Hardware $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Storage and Backup Hardware $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Network Hardware $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Facilities/Data Center $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
$0.00 $0.00 $0.00 $0.00 $0.00 $0.00
$0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Hosting $0.00
Hosting Fees $0.00 $0.00 $0.00 $0.00 $0.00 $0.00
$0.00 $0.00 $0.00 $0.00 $0.00 $0.00
Total Base Costs $0.00
Total Implementation plus Five Year Costs $ 0.00
Clause Location Exception Proposed Verbiage
[indicate RFP, exhibit, attachment or addendum, section & page number] [briefly describe your concern about this clause] [describe your suggested alternative wording for the clause or your solution]
[indicate RFP, exhibit, attachment or addendum, section & page number] [briefly describe your concern about this clause] [describe your suggested alternative wording for the clause or your solution]
[indicate RFP, exhibit, attachment or addendum, section & page number] [briefly describe your concern about this clause] [describe your suggested alternative wording for the clause or your solution]
Summary of Detailed Information Date of Notification Outcome
Provided Equipment or Product Note or Comment
Signature:
Full name:
Title:
Company:
Date:
This is the opportunity summary page. It provides an overview of this opportunity and a preview of the attached documentation.
Daily notification on new contract opportunities

With GovernmentContracts, you can:

  • Find more opportunities and win more business
  • Receive daily alerts for all new bid opportunities
  • Get contract opportunities matched to your business
ONE WEEK FREE TRIAL

See also

Roadway Line Striping and Markings Request Date: 7/24/2026 2:23:32 PM Open Date: Closing

State Government of Vermont

Bid Due: 8/19/2026

Bid Title: Roadway Line Stripings and Markings Category: RFPs, RFQs and Bids Status:

City of Winooski

Bid Due: 8/19/2026

SOS Next Generation Licensing Platform O&M Support Request Date: 7/27/2026 11:48:48 AM Open

State Government of Vermont

Bid Due: 8/28/2026

TITLE QUESTIONS DUE ANSWERS POSTED DUE DATE NO POSTING AFTER SOS Next Generation

State of Vermont

Bid Due: 8/28/2026

* Disclaimer: Information regarding bids, requests for proposals (RFPs), or requests for qualifications (RFQs) is provided on this website only for convenience and does not constitute official public notice. Persons wishing to respond to or inquire about bids, RFPs, or RFQs should contact the appropriate government department.