The Commonwealth of Pennsylvania is procuring a vendor‑hosted Software‑as‑a‑Service (SaaS) solution that will track every stage of the medical‑marijuana lifecycle—from seed germination through cultivation, processing, testing, and patient dispensing—in full compliance with Pennsylvania’s Medical Marijuana Act. The contract is a firm‑fixed‑price, four‑year base term with four optional one‑year renewals, and includes stringent Small Disadvantaged Business (26 %) and Veteran‑Owned Business Enterprise (3 %) participation goals. The awardee must deliver the system, integrate it with multiple state platforms, provide 24/7 support, meet rigorous service‑level agreements, and satisfy extensive security, accessibility, and data‑privacy requirements.
• End‑to‑end tracking of seed, plant, harvest, processing, testing, and dispensing activities.
• Two‑way API integration with the Medical Marijuana Registry, MMAP, laboratory information systems, and other state agencies.
• Availability ≥98 % during core hours, transaction response <3 seconds, backup and disaster‑recovery (RPO < 1 hr, RTO < 24 hr).
• Full implementation services: discovery, configuration, testing, training, and ongoing maintenance.
• Mandatory compliance with FedRAMP‑moderate, SOC 2/ISO 27001, WCAG 2.1 AA, and small‑business participation goals.