Cloud-Based Technical Skills Assessment and Micro-Credentialing Platform

Texas seeks a secure, cloud platform to support technical skills assessment, workforce competency validation, and micro-credential issuance for continuing education and academic programs.

Provide a secure, cloud-based technical skills assessment and micro-credentialing platform
Allow other Institutions of Higher Education to use the contract terms
Communicate any exceptions to contract terms at submission
Purchase parking passes for vehicles on campus
Ensure proposals remain valid for a minimum of 120 days after the submittal deadline
Submit the 'Execution of Offer' signed by an authorized representative
Submit questions via the e-Procurement System by March 13, 2026
Submit proposals only through the e-Procurement System
Provide Qualification Criteria Responses, Pricing Proposal, Signed Execution of Offer, and Non-Collusion Affidavit
If procurement includes software, desktop application, or cloud storage, provide Information Security and Accessibility Standards Exhibit (TX Ramp), HECVAT, VPAT, and Data Diagram
Submit all electronic documents in Microsoft Office or PDF format, and image files in .jpg, .gif, .bmp, or .tif format
Demonstrate company profile and experience relevant to skills assessment and credentialing
Demonstrate expertise in skills assessment, including performance-based technical, coding, and durable skills trainings and workforce-aligned/competency-based skills validation
Demonstrate experience in higher education or continuing education, including prior engagements with universities and familiarity with non-credit education models
Demonstrate assessment development and validation expertise, including content development, maintenance, and use of subject-matter experts/industry input/psychometric processes
Demonstrate organizational capacity and staffing, including qualifications of key personnel and ability to support multiple programs at scale
Disclose any litigation, contract terminations, or compliance issues, and provide certifications/attestations relevant to data security and privacy
Provide descriptions of at least three relevant projects completed within the last 3–5 years
Provide 3-5 university references with contact information and service descriptions
Provide evidence of successful implementation at scale and key metrics (learners assessed, credentials issued, programs launched)
Provide documentation of employer adoption of assessment results in hiring/workforce decision-making processes and list partnerships with industry/employers
Describe methodology, technical approach, and understanding of the scope of work
Meet functional requirements for secure, cloud-based delivery, competency-based assessment environments, and multi-language/multi-skill support
Meet security and privacy requirements for data security controls, encryption, FERPA compliance, audit logs, and access controls
Meet scalability and integration requirements for scaling across programs and compatibility with Canvas LMS and Parchment credentialing platform
Meet reporting and analytics requirements for automated scoring, administrative analytics dashboards, and exportable results/data access
Meet accessibility and usability requirements for WCAG compliance and universal learner populations
Include pricing model details (licensing, volume-based, assessment/usage fees, implementation/onboarding, support/maintenance, optional/add-on services)
Provide pricing for scenarios of 100, 300, and 500 concurrent users annually, including total annual cost, itemized services/assumptions, and usage thresholds/overage fees
Comply with Texas Risk and Authorization Management Program (TX-RAMP) requirements
Provide a valid Accessibility Conformance Report (ACR) for review (Federal 508 Refresh, TAC 206, TAC 213)
Comply with FERPA, HIPAA, GLBA, and PCI DSS
If processing confidential information via website/mobile application, provide vulnerability and penetration test results by an independent third party
If processing confidential information via website/mobile application, provide logical architecture description, data flow description, and authentication mechanisms description
Maintain security controls conforming to an industry-accepted cybersecurity framework (e.g., NIST SP 800-53, NIST SP 800-171, ISO 27001, CIS Critical Security Controls)
Maintain commercially reasonable information security protections, including network firewalls, intrusion detection/prevention, and periodic vulnerability/penetration testing by a qualified third party
Maintain secure environments that are patched and up to date with information security updates
Implement appropriate measures for confidentiality and security of Confidential Information
Ensure Requesting Institution owns all data processed, stored, and transmitted
Use data only for the purpose of the Agreement
Provide a description of all Requesting Institution data to which Contractor has access and notify changes in writing within 30 days
Within 30 days of termination, return all data in usable electronic form, erase/destroy all data to prevent physical reconstruction, and certify completion in writing
Transmit or exchange system application data using secure, authenticated, and industry-accepted strong encryption mechanisms
Store, process, and maintain Requesting Institution's data solely on Contractor information systems as designated in the Agreement
Do not store or transfer data to end-user computing devices or portable storage media unless for designated backup/recovery processes
Contain all servers, storage, backups, and network paths within the United States unless specifically agreed to in writing
Store all Requesting Institution's data, including backup and recovery data, in encrypted form
Store encryption keys using industry-accepted methods on information systems separate from the data they decrypt
Use data exchanged solely for the purposes enumerated in the Agreement; do not distribute, repurpose, or share data across other applications/environments/business units
Do not reveal, transmit, exchange, or pass data to other vendors or interested parties except on a case-by-case basis as specifically agreed
Safeguard all keys, access codes, combinations, access cards, PINs, identifiers, passwords, or other authenticators issued to Contractor's employees/agents/subcontractors
Require employees to report a lost or stolen device or information within 24 hours
Record audit logs for application-specific user activities, exceptions, information security events, privileges, log-on failed/success attempts, log-off, data accessed, administrative configuration changes, and advanced privileges
Make audit logs available to Requesting Institution promptly upon request, containing user/process identifiers, timestamps, source/destination addresses, and action/event descriptions
Treat Requesting Institution data in test or development environments as production data, subject to the same safeguards
Make a development instance separate from the production instance available to Requesting Institution
Provide a link to a demonstration of the EIR for accessibility testing
Ensure user accounts provisioned inside the Contractor's service are unique and individually assigned
Use federated authentication services (e.g., SAML, ADFS, or CAS) where applicable
Comply with institution password policies for non-federated accounts unless a written exception is approved
Provide updated contact information to Requesting Institution within ten business days
Comply with all applicable state and federal laws requiring notification of individuals in the event of unauthorized release of personally identifiable information
Notify Requesting Institution's breach notification address and Authorized Agents without unreasonable delay, no later than 48 hours after breach discovery
Include specific information in breach notification: impacted products/services, breached data fields, number of records, date of breach (suspected/known), date of discovery, method of breach, information security contact, and remediation status
Assume responsibility for informing all affected individuals in accordance with applicable law
Provide written notice without unreasonable delay if compelled by law to disclose Confidential Information
Indemnify, protect, defend, and hold harmless University and TSUS from claims arising from the Agreement or services, to the extent caused by Contractor's acts/omissions/misconduct
Indemnify, protect, defend, and hold harmless University and TSUS from claims arising from infringement of intellectual property rights
Hold University Records in strict confidence and not use or disclose except as permitted/required by Agreement or law
Safeguard University Records according to reasonable administrative, physical, and technical standards (NIST, CIS, PCI DSS)
Provide written notice to University within one day of discovery of impermissible use or disclosure of University Records
Return all University Records to University or destroy them within 30 days after Agreement expiration/termination, with prior written notice of destruction
Secure written permission from University before disclosing University Records to subcontractors/agents and require them to comply with same restrictions
Do not make press releases, public statements, or advertisements referring to the Work or University without prior written approval
Make information created or exchanged with the state available in a public-accessible format
Comply with all applicable federal, state, and local laws, regulations, codes, ordinances, and orders (e.g., Title VI, EO 11246, VEVRA, Rehabilitation Act, ADA, OSHA, Immigration Act)
Comply with all University Policies (e.g., on-campus driving/parking, smoking, fire safety, hazardous materials, drug-free workplace, sexual harassment/discrimination)
Comply with all federal and state laws prohibiting discrimination, harassment, and sexual misconduct
Conduct background checks (sex offender, criminal history, credit history) on employees working on campus, with students, or in security-sensitive areas
Provide a letter certifying compliance with background check requirements
Comply with the Immigration and Nationality Act (8 United States Code 1324a) regarding employment eligibility verification (I-9 Form)
Be an equal opportunity employer
Pay all applicable taxes or assessments
Ensure electronic and information resources (EIRs) comply with TAC Section 213 and TAC Section 206, Rule §206.70 (Federal 508 Refresh, WCAG 1.0 and 2.0AA)
Provide all Voluntary Product Accessibility Templates (VPAT)
Ensure employees with credentials to University's computer system complete a certified cybersecurity training program
Verify completion of cybersecurity training in writing within the first 30 calendar days of the term and any renewal period
Deem all work products as 'works for hire' and relinquish all claims to copyright and intellectual property rights to the University
Indemnify University against claims of patent, trademark, copyright, trade secret, or other proprietary rights violations
Do not use University's logos, trademarks, service marks, or name without prior written approval
Do not reference University in any form of marketing or media
Have no actual or potential conflicts of interest and avoid the appearance of impropriety
Do not subcontract, assign, delegate, or transfer interest in this Agreement without University's written permission
Certify that Contractor is not ineligible to receive payments under the Texas Family Code Child Support Certification (Section 231.006)
Certify that Contractor is not ineligible to receive payments under Texas Government Code Sections 2155.004 and 2155.006
Agree that payments may be applied toward any debt or delinquency owed to the State of Texas
Certify that Contractor is not currently delinquent in franchise tax payments or is exempt
Purchase products and materials produced in Texas when available at comparable price and delivery time
Cooperate with the State Auditor’s Office for audits or investigations
Certify that Contractor is not majority owned/controlled by or headquartered in China, Iran, North Korea, Russia, or other designated countries (Critical Infrastructure Affirmation)
Certify that all articles and services meet or exceed OSHA safety standards
Certify that Contractor has not employed a former state officer/employee involved in University procurement within two years after their state service ceased (if applicable)
Certify compliance with Executive Order GA-48 (2024) regarding foreign adversaries lists
Certify that Contractor is not listed in the prohibited vendors list (Executive Order No. 13224)
Certify that Contractor is not engaged in business with Iran, Sudan, or a foreign terrorist organization
Certify that Contractor does not boycott Israel
For orders exceeding $100,000, certify that Contractor does not discriminate against a firearm entity or firearm trade association
For agreements exceeding $100,000, certify that Contractor does not boycott energy companies
Certify that Contractor does not require customers to provide COVID-19 vaccination or post-transmission recovery documentation
Ensure payments are not prohibited by Texas Government Code Sections 556.005 or 556.0055 (Lobbying Prohibition)
If providing consulting services, disclose prior state employment if applicable
If providing employment/professional/consulting services, ensure no former University employees within 12 months prior to agreement execution
If having custody of Vital State Records, provide business continuity and disaster recovery plans
If the agreement value is at least $1M, comply with Texas Government Code Section 2261.251(a) and 2261.252 regarding financial interest of Regents/Chancellor/President/Director of Procurement
If the agreement value is at least $1M, submit a Disclosure of Interested Parties to the University

$100,000 – $500,000

Open: March 6, 2026 5:00 PM CST

Question Deadline: March 13, 2026 5:00 PM CST

Close: March 27, 2026 12:00 PM CDT

Sealed Until: March 27, 2026 12:00 PM CDT

Contract Start: On or before May 1, 2026

Proposal Validity Period: 120 days after submittal deadline

Texas State University

Organization overview and procurement intelligence available on paid plans.

The procuring entity seeks a vendor to provide a secure, cloud-based platform for technical skills assessment and micro-credentialing. This platform must support continuing education and extension programs, offering scalable performance-based skills development, objective competency assessment, and the issuance of validated micro-credentials.

The solution should enable both self-paced education and integration with academic course delivery—including support for LMS/LTI integrations. Key features include automated, objective scoring, generation of standardized technical skill scores suitable for external sharing and cross-cohort comparison, the ability to scale across numerous programs and cohorts, and comprehensive reporting tools for administrators and instructors. The platform must support a variety of technical disciplines, programming languages, and durable skills domains.

Cloud-Based Technical Skills Assessment and Micro-Credentialing Platform

Overview

Fit Score

SUMMARY

KEY REQUIREMENTS

BUDGET

CONTRACT DURATION

TIMELINE

QUESTION DEADLINE

Issuing Agency

DESCRIPTION

Similar RFPs