tender_20817 - Enterprise Road Mapping Tool License

Mandatory Requirements:
M1 The proposed solution must be delivered as Software as a Service (SaaS) solution with out-of-the-box functionality.

M2 The Respondent must submit one (1) of the following with the response as its relations to the proposed solution:
- Annual SOC2 Type II Report within the last 12 months: or
- ISO 27001 – Certificate, Scope, and Statement of Applicability (or similar), and Annual Surveillance report if the Certification is more than a year old; or
- HITRUST r2 certification – Assessor's validated Assessment Report, and Annual Interim Assessment report if the certification is more than year old.

M3 The proposed solution must have the capabilities to integrate with Ontario Health’s existing authentication and authorization infrastructure to support Web Single Sign On (SSO), including integration with OAuth 2.0, Active Directory Federation Services using SAMLv2, Entra ID.

M4
Not a U.S. business Responses will be considered if the Proponent is not a U.S. business, where ‘U.S. business’ means a supplier, manufacturer, or distributor of any business structure (including a sole proprietorship, partnership, corporation, or other business structure) that:
1. has its headquarters or main office located in the U.S., and
2. has fewer than 250 full-time employees in Canada at the time of the applicable procurement process.
3. If a Proponent is a subsidiary of another corporation, part 1 of the definition above is met if that Proponent is controlled by a corporation that has its headquarters or main office located in the U.S.

If the Proponent has not demonstrated eligibility with a "Yes" response, Ontario Health reserves the right to disqualify the Proponent.