Loan and Portfolio Management Platform

The Vendor is required to provide a quasi-public agency and political subdivision of the state and is a conduit issuer of tax-exempt bonds issued on behalf of eligible non-profits in the state.
- The issuance of tax-exempt bonds can provide funds for construction and renovation projects, the refinancing of eligible existing debt, funding of debt service reserve funds (if applicable), and funding of issuance costs.
- The platform should include the following features:
•    Portfolio Dashboard that allows for tracking and maintenance of the existing portfolio, manage new transactions, track borrowers and working group participants
•    Management of ticklers and financial covenants at the transaction and borrower levels. Platform should allow users to build workflows, monitor current and past due requirements, track waivers, and organize applicable documentation
•    Client Portal that allows organizations to see covenant requirements related to outstanding transaction and securely submit requested documents
•    Reporting Capabilities, including summaries of portfolio and covenant requirements
- There may be future needs to integrate additional services, such services are expected to include:
•    Monitoring the use and investment of bond/loan proceeds,
•    Creation of accounting outputs and reports (trial balance/GL-style reporting)
•    Ability to invoice debt service payments for the direct lending program.
•    Provide journal entries and invoice details for upload into accounting system
- Platform must meet agency enterprise IT, security, and compliance standards. 
- The solution must support secure cloud or dedicated hosting with high availability, strong identity and access management (including Microsoft Entra SSO and MFA), role-based access controls, and comprehensive audit logging.
- Must demonstrate mature security and compliance practices (e.g., SOC 2/ISO), regular vulnerability testing, and a formal incident response and breach notification process.
- The platform must provide encrypted backups, defined disaster recovery objectives, and the ability to export data. Support for API integrations with other third-party applications.