RFP & Procurement Process
The end-to-end procurement lifecycle: needs assessment, market scan, RFP, evaluation, negotiation, implementation, and ongoing performance management.
Procurement process timeline
1. Needs Assessment
Define program scope, eligible population, clinical objectives, and success metrics.
2. Market Scan & Vendor Identification
Survey the market for integrated GLP-1, clinical platform, and care navigation vendors.
3. RFP Issuance & Proposal Collection
Issue RFP to shortlisted vendors; collect and validate proposals.
4. Evaluation & Scoring
Score proposals on clinical capability, cost, technology, and service quality.
5. Contract Negotiation
Negotiate fee structure, at-risk terms, SLAs, and data governance provisions.
6. Implementation & Onboarding
Vendor onboarding, system integration, eligibility file setup, and pilot launch.
7. Ongoing Performance Management
Quarterly business reviews, SLA monitoring, outcome tracking, and contract renewal decisions.
RFP evaluation criteria
ObservedEvidence-based protocols, provider network, demonstrated outcomes
Per-member cost, at-risk structure, ROI projection
Platform features, API integration, data export, reporting
Response times, fulfillment rates, member satisfaction guarantees
HIPAA, SOC 2, data governance, privacy controls
Vendor comparison matrix
Measured| Vendor | Clinical | Cost | Tech | Service | Compliance | Total |
|---|---|---|---|---|---|---|
PayRX (Selected) | 92 | 85 | 90 | 88 | 95 | 90.2 |
Vendor B | 84 | 90 | 78 | 82 | 88 | 84.4 |
Vendor C | 88 | 72 | 85 | 80 | 90 | 83.8 |
Vendor D | 78 | 88 | 82 | 85 | 85 | 82.6 |
Integrated platform, value-based pricing, strongest outcomes data
Lower cost but fragmented — separate pharmacy and clinical vendors
Strong clinical but higher cost and limited integration
Good service but weaker clinical evidence base
Procurement summary
Employee Privacy Protected by Design
Employer reporting is designed to present aggregate workforce and health-program insights without exposing individual clinical records. Small-group reporting restrictions help reduce the risk of employee identification.
Aggregated information is not described as HIPAA-de-identified unless applicable de-identification requirements have been satisfied and verified.
