Request for Proposal Integration System July 8, 2015
Introduction and Executive Summary The Hawai i Health Information Exchange (Hawai i HIE) is a 501(c)(3) non- profit established in 2006 by leading health care stakeholders in Hawai i for the purpose of improving health care delivery throughout the state through seamless, effective, and safe health information exchange. In September 2009, Hawai i HIE was designated by the state to develop and implement a statewide health information exchange that will ultimately feed into the national health information network. Hawai i HIE has a strong and representative composition of broad stakeholders who are determined to transform the current state of healthcare in Hawai i into one that coordinates care, reduces costs (for patients and providers), addresses the needs of the aging population, and encourages patients to take a more proactive approach to their care. Currently, Hawai i HIE purchases interfaces from its Electronic Health Record (EHR) vendor Medicity, and uses it to connect between Medicity and the target vendor for another hospital, health system, ambulatory clinic or client s EHR system. These interfaces are customized from the sending point to the receiving point and may be one- directional or bi- directional. With an Interface Integration Engine in place at Hawai i HIE, we will be able to leverage some of these individual interfaces and instead of purchasing multiple interfaces to support different use cases, we will be able to clone the single input message, and depending on the requirements, translate and or transform the messages from the single input data stream to multiple output and different destinations Hawai i HIE has developed this request for proposal (RFP) for the purpose of seeking a vendor to provide such an Interface Integration engine. By using an interface engine, health providers can leverage the added capabilities and realize the benefits of existing legacy information systems without major re- investment in new technologies, lowering costs and extending the life and efficiencies of current systems. Page 2 of 6
A. Business Overview & Background Hawai i HIE provides health information exchange (HIE) services to health care providers and other HIPAA covered entities throughout the State of Hawaii, and in other U.S. Pacific territories, in its role as the State s designated entity to establish HIE within this geographic scope. In this role, Hawai i HIE is administering computing systems related to its Health enet suite of services that are used to exchange and store PHI. B. Interface Integration Engine System Criteria The system should: 1. Leverage disparate data sources, including labs, hospitals and health systems for different output through secure connection, with reliable, real- time or batch message delivery. 2. Be high performance, with the ability to translate, transform and re- queue messages processed. 3. Provide an embedded backup mechanism that can perform configurable full and incremental backups. 4. Provide a mechanism for remote, web- based monitoring. 5. Provide a versatile graphical user interface for creating and editing interface instances and managing engine configuration. 6. Support industry- standard communication and data transport protocols for connectivity of interfaces and delivery of messages through user interface. 7. Provide message filters used to modify messages. 8. Provide full user control to determine the direction and flow of messages through the route to delivery end- point(s). 9. Ability to search, read, and manipulate message data for testing, trouble- shooting and re- queuing through an efficient user- interface. Page 3 of 6
10. Ability to create the definition of the EDI messages being parsed or created and send out to end- points through one or more routes. 11. Provide field and content mapping translation and transformation within a message thread/route. 12. Provide predefined templates for common transformations required in different versions of HL7 messaging, including v2.3 and above. 13. Provide configurable user- managed lookup tables of databases/datasets which are embedded in the interface engine. 14. Provide the ability to receive and send through built- in web services and/or use external web services. 15. Provide role- based access control to configure and monitor the interface engine via a secure login and password. 16. Provide a message library of standard message definitions, including HL7, XML, CCD and EDI messages. 17. Provide advanced, automated functionality and alerts/notifications for managing and monitoring interface communications. 18. Allow system messages, interface alerts and other pertinent notifications to be sent to users via e- mail or via SMS (text message) or other communication routes. C. Candidate Minimum Qualifications Candidates shall: 1. Have experience working with health information systems (e.g. electronic health record systems, HIE systems); 2. Currently meet the requirements of HIPAA related to business associate subcontractors, as defined and specified in 45 CFR Subparts A through E, including: Have a formally designated privacy official/officer and security official/officer (one person may fulfill both roles); and Be ready, willing and able, in good faith, to enter into a subcontractor Page 4 of 6
business associate agreement with Hawaii HIE. Have business associate agreements in place with any downstream subcontractors with access to PHI; and Have written policies and procedures in place related to incident response and breach notification. 3. Have ability to provide Hawai i HIE secure hosting for the proposed Interface Integration system in facilities that have been audited to be in compliance with SSAE 16 standards Be able to provide current SOC 1 Type 2 and SOC 2 Type 2 reports upon request Page 5 of 6
D. Candidate Preferred Qualifications Candidates ideally will: 1. Have experience working with non- profit health care organizations; 2. Have experience working with health information organizations (HIO s), e.g. HIE s and/or regional health information organizations (RHIO s); and 3. Have experience integrating interfaces to Medicity ProAccess (version 5.x or later) system. E. Proposal Submission Criteria, Terms and Conditions Your proposal should be brief (less than thirty [30] pages) and must include: 1. Description of the Integration System you propose to provide Hawai i HIE, including details and diagrams on how you plan the meet Hawai i HIE s Interface Integration system criteria, including the system architecture in a hosting environment; 2. A cost proposal. Include all costs associated with the Integration system solution design, development, implementation, maintenance and hosting. Cost proposals should be itemized, with one- time and recurring costs/fees specified; 3. Biographical information of proposed key staff members; and 4. Two or more references, i.e. similar HIE Integration system customers. Please submit 5 paper copies in response to this RFP or acceptable electronic submissions. Acceptable electronic submissions will meet the following document file standards: 1. Must be in Microsoft Word format 2. File name must end with.doc or.docx All submissions for responding to this RFP must be submitted to Hawai i HIE s office, mailing/delivery addresses as follows: Mail: Hawai i Health Information Exchange Attention: Executive Director 900 Fort Street Mall, Suite 1305 Honolulu, Hawaii 96813 Email: yjones@hawaiihie.org Page 6 of 6
All submissions must be postmarked, arrived via email, or hand delivered no later than July 24, 2015 at 5 p.m. Hawaii time. Proposals will be evaluated immediately thereafter. During this time we may require interviews at our office or via conference call, on or about August 14, 2015. You will be notified if this is requested. F. Selection Process and Criteria Proposals that meet the mandatory requirements, as stated above, will be evaluated based on the following: 1. Suitability of the Proposal. The proposed solution meets the needs and criteria set forth in the RFP; 2. Suitability of the Proposed Interface Integration Engine. Candidate s system and services must meet regulatory and Hawai i HIE compliance program requirements; 3. Candidate Experience. Candidate has successfully completed similar projects and has the qualifications necessary to undertake this project; 4. Value/Pricing Structure and Price Levels. The price is commensurate with the value offered by the candidate. As a non- profit institution, Hawai i HIE is able to accept in- kind contributions to the full extent allowed by the Internal Revenue Service (26 USC 170), if such contributions are warranted and applicable; 5. Depth and Breadth of Staff. Candidate has appropriate staff to develop, implement, maintain and provide ongoing timely support to Hawai i HIE regarding the Privacy Breach Detection Services; and 6. Proposal Presentation. The information in the response to the RFP is presented in a clear, logical manner and is well organized. Upon receiving candidates submitted proposals: 1. Hawai i HIE expects to select the Integration/Interface Engine provider by September 4, 2015. 2. Hawaii HIE expects to notify all other candidates of their non- selection on or before September 28, 2015. 3. Negotiations regarding contract terms and conditions will begin immediately with the successful candidate upon selection, and should conclude no later than September 25, 2015. All contracts are subject to review by Hawai i HIE s legal counsel, management and committees chaired by members on the board of directors. Page 7 of 6