The Vendor is required to provide for Drupal content management system (CMS) support, development, and maintenance services.
- Provide to enter into an agreement with an enterprise web application hosting service provider to host and maintain availability of the county’s public-facing Drupal and WordPress websites.
- Services include:
• Service Level Agreement (SLA) for hosting environment
• Technical support contact channels and response times.
• Detailed technical support service offerings and tiers.
• Itemized cost breakdown and detailed descriptions of the recommended hosting environment and features necessary to support the websites, features and requirements described in this RFP.
• Data center locations and backend hosting providers, if applicable (e.g. AWS, GCP, Azure, etc.).
• Any WordPress plugins or Drupal modules that are unsupported or not allowed in your environment.
• A sample project plan and estimated timeline for full migration and go-live activity support for 30 WordPress websites.
• Detailed outline of onboarding and migration services included with your proposal.
• Any additional features included with your proposal that are not mentioned in the requirements outlined below. Be sure to include all relevant details, including any additional costs, limitations, terms, or restrictions.
• Disaster recovery response plan in the event of a major disaster affecting the primary data center.
• Fixed-price cost of adding future WordPress websites during the contract term.  - Drupal Hosting Requirements
• Development, Test and Production environments
• Include web servers, database servers, and file servers
• SSL/TLS certificate management and support
• Git based code development workflows and deployments
• SSH access to hosting environments
• Drush command-line tool support
• Ability to create snapshots / full backups of all databases, file system contents, application code
• Automatic daily backups, kept for a minimum of 30 days.
• All environments must be restorable within 12 hours in the event of a data center failure or regional disaster.
• The primary data center must be located in the continental United States, preferably on the west coast.
• There must be a fully redundant secondary data center located within the continental States but in a separate geographical location to maintain uptime in the event of a regional disaster.
• Data center must be capable of providing high availability to the software application and databases with minimum guaranteed uptime of 99.95%.
• Provide environment monitoring dashboards for monitoring system status and resource utilization
• Ability to access and review environment syslog’s for errors
• 500 GB of file system storage
• The system must scale automatically to handle sudden, unexpected spikes in traffic.
• The system must provide reports detailing user login history, including date and time of the attempted login, IP address of the user and if the login attempt was successful or not.
• The system must support multi-factor authentication (MFA) and/or SAML SSO for authenticated administrator access.
• Email for Drupal notification and transactional emails
• Content Delivery Network (CDN) & Web Application Firewall (WAF)
• Web-based control panel for management, configuration and administration of the hosting environment(s).
• Application performance monitoring to monitor, investigate and troubleshoot application performance issues.
- Provide enterprise level account management features and support
• Support role-based access control (RBAC) with various permission levels (e.g. admin, editor, viewer)
• 24/7 support desk for problem investigation/resolution and technical assistance
- Hosting and Infrastructure
• 35 WordPress installs.
• Included staging sites for each WordPress production install.
• Scalable to handle unexpected traffic spikes.
• Data residency within the continental US (preferably on the west coast).
• Minimum 500,000 monthly user sessions/site visits (combined total for all WordPress installs).
• Minimum 80GB storage (combined total for all WordPress installs).
• Ability to send system emails (for system emails, such as password resets, etc.)
• The managed WordPress hosting solution must have a user-friendly interface to support administrators and website content managers with varying levels of technical proficiency.
- Security and Administration
• Automatic or managed core and security updates for WordPress.
• Automatic or managed PHP updates.
• Automatic or managed updates of WordPress plugins and themes for all production sites.
• Monitoring and notification of known security vulnerabilities (CVEs) for all installed plugins and themes.
• Real-time threat monitoring and detection, including malware detection and removal.
• Built-in support for free SSL certificates and automatic renewal (e.g., Let’s Encrypt).
• The system must support multi-factor authentication (MFA) and/or SAML SSO for authenticated administrator access.
• Automatic daily backups, kept for a minimum of 30 days.
• Simple rollback/previous version restoration functionality.
• Support for single-site and multi-site WordPress installs.
• Support multiple domain names per website/application.
• SFTP and SSH access.
• Role based access control with granular permissions for hosting environment access and administration.
- Onboarding and Support
• Onboarding, migration and go-live services for all existing WordPress sites.
○ Migration of all existing WordPress sites into the new hosting solution.
○ Testing of migrated WordPress websites to ensure functionality was not degraded by the migration into the new hosting environment.
○ Ensure all plugins and themes migrated successfully without any errors.
○ Ensure all hosted media items and files (images, documents, etc.) migrated successfully.
○ Project management services for all migration and go-live activities to ensure tasks are assigned to the appropriate party, completed on-schedule and the scheduled go-live dates are not delayed.
○ Go-live support for domain/DNS cutovers on go-live dates.
○ Technical support services for migration and go-live related activities to ensure any issues are promptly resolved.
• 24/7 technical support for all platform users and website administrators.
• Training and documentation for platform users and website administrators.
• Dedicated account manager.
- Contract Period/Term: 3 years
- Pre-Proposal Meeting (Non-Mandatory) Date: May 6, 2025
- Questions/Inquires Deadline: May 9, 2025