RFP Cardholder Merchant Card Electronic Check Processing

Transcription

The City of New YorkDepartment of FinanceRequest for ProposalsForCardholder Present and Not-Present Merchant Card &Electronic Check ProcessingProcurement Identification Number (E-PIN): 83620P0002Authorized Agency Contact PersonProposers are advised that the Authorized Agency Contact Person for all matters concerningthis Request for Proposals is:Jenelle FraserEmail: bids@finance.nyc.govPhone: (212) 291- 456259 Maiden Lane, 32nd FloorNew York, NY 10038Printed on paper containing 30% post-consumer material0RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

TABLE OF CONTENTSPartContentPageSection IEstimated Timetable2Section IISummary of the Request for Proposals3Section IIIScope of Services5Section IVFormat and Content of the Proposal13Section VProposal Evaluation and Contract Award Procedures26Section VIGeneral Information to Proposers27Attachment AProposal Cover Letter33Attachment BAcknowledgment of Addenda34Attachment CFormat for Price Proposal35Attachment DAffirmation36Attachment EDoing Business Data Form and FAQs37Attachment FNotice to Vendors: Electronic Funds Transfer Memo; and Form41Attachment GConfidentiality Agreement43Attachment HM/WBE Notice to Prospective Contractors (Local Law 1)55Attachment IWhistleblower Protection Expansion Act Rider65Attachment JIran Divestment Act Rider67Attachment KSubcontractor Compliance Notice70Attachment LSchedule B – M/WBE Utilization Plan71Attachment MPaid Sick Leave Rider76Attachment NHire NYC Rider80Attachment OBroker’s Certificate84Appendix AGeneral Provisions Governing Contracts for Consultants,Professional and Technical Services86Appendix BPricing Worksheet1541RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

SECTION I – ESTIMATED TIMETABLEA. Release Date of this Request for Proposals: 07/30/2020B. All questions shall be addressed to the Authorized Agency Contact Person:Jenelle FraserContract ManagerEmail: bids@finance.nyc.govPhone: (212) 291- 456259 Maiden Lane, 32nd FloorNew York, NY 10038The deadline for submitting questions is 08/17/2020.Pre-Proposal Conference:C. A pre-proposal conference will be held on August 13, 2020 at 3 pm. The conferencebridge for the pre-proposal conference is (888) 278-0254, participant code is 9767693. .Attendance at the conference is voluntary but strongly recommended.D. Proposal Due Date, Time and Location:Date: 09/21/2020Time: 3:00 PM EDTProposals to be emailed to the following:Bids@finance.nyc.gov; fraserj@finance.nyc.govProposals received at this Location after the Proposal Due Date and Time arelate and shall not be accepted by the agency, except as provided under New YorkCity’s Procurement Policy Board Rules. The agency will consider requests madeto the Authorized Agency Contact Person to extend the Proposal due Date andTime prescribed above. However, unless the agency issues a written addendumto this RFP which extends the Proposal Due Date and Time for all proposers, theProposal Due Date and Time prescribed above shall remain in effect.Proposers may submit hard copy proposals for this RFP. Vendors who intend tosubmit proposals by mail or in-person must contact the Authorized AgencyContact Person by email at least seven (7) days before the Proposal Due Date.2RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

SECTION II - SUMMARY OF THE REQUEST FOR PROPOSALSA.Background on DOF CityPayThe New York City Department of Finance (“DOF” or “Department”) initiated the CityPayplatform in 2011 as a shared service for City agencies to process payments securely andefficiently, while leveraging cost efficiencies enabled by the scale of overall revenues to theCity. By offering a centralized payments platform, where compliance and risk management arepackaged with best in class payment offerings, agencies are relieved of the need to developtheir own in-house payments expertise and can focus on their core missions. In addition,customers are offered a uniform payment experience when transacting with the City.B.Purpose of RFPDOF seeks a well-qualified vendor with extensive experience with large-scale and public-sectormerchants to supply both cardholder present and cardholder not-present merchant card &Automated Clearinghouse (“ACH”) Electronic Check (“E-Check”) processing, and eCheckaccount validation services. A qualified vendor must be able to process MasterCard and Visadebit and credit card transactions and correctly route Discover and American Expresstransactions and provide standalone credit card terminals for in-person card presenttransactions. The vendor must also be able to process E-Check transactions. Support for digitalwallet options (e.g. ApplePay) and contactless in-person payments is expected.Anticipated Contract TermIt is anticipated that the term of the contract awarded from this RFP will be five (5) years withan option to renew for an additional two (2) year term. The department reserves the right,prior to contract award, to determine the length of the initial contract term and each option torenew, if any.Anticipated Available FundingIt is anticipated that funding to pay all card association interchange, fees and assessmentstogether with vendor transaction (including E-Check) fees will be derived from the collection ofconvenience fees.Anticipated Payment StructureIt is anticipated that the payment structure of the contract(s) awarded from this RFP will bebased on:1. The direct pass through of card association interchange, fees, fines and assessmentswithout mark-up2. Card and E-Check transaction and associated service fees assessed by the vendor.3. Payment gateway fees.4. Point of Sale device fees.3RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

The vendor will produce a monthly invoice delivered to DOF reflecting volumes, card and ECheck transaction types, associated services, gateway and point of sale fees.The Department of Finance will consider proposals to structure payments in a different mannerand reserves the right to select any payment structure that is in the City’s best interest.The Department of Finance will allow certain services within this solicitation to besubcontracted but would expect at a minimum that the prime will directly provide paymentprocessing and reporting services.Minimum Qualification RequirementsThe following are the Minimum Qualification Requirements of this RFP. Proposals that fail tomeet these requirements will be rejected.No.1.2.Minimum Qualification RequirementsYes/NoProposer meets all statutory and regulatory standards for data security (PCIDSS, Gramm-Leach and any other federal and state laws and regulations)and will maintain that compliance annually; additionally, proposer will beable to demonstrate its current compliance with PCI-DSS at the time ofresponding to this RFP.Proposer will either be (i) an approved MasterCard/Visa Acquirer/Processoror (ii) certified as an authorized Processor for one or more approvedMasterCard/Visa Acquirers; proposed solution will accept card paymenttransactions for cards branded Visa, MasterCard, Discover and AmericanExpress.4RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

SECTION III - SCOPE OF SERVICESA.Agency Goals and Objectives for this RFPThe DOF’s goals and objectives for this RFP are to contract for the services of a highly competentmerchant card, credit card payment terminal supplier and E-Check processor that will efficiently: Integrate a secure gateway into DOF’s internally managed CityPay, online paymentacceptance service;Integrate and support credit card processing for standalone and semi-integrated POScredit card payment terminal transaction processing for Visa, Mastercard, AmericanExpress, and Discover cards;Source terminal hardware for standalone and semi-intergrated POS credit card payments;Credit gross credit and debit card and E-Check transaction receipts to the correct Agencybank accounts;Process separate and/or bundled convenience fee transactions and credit or enablereconciliation by DOF of those transactions to a DOF controlled bank account;Provide the capability to implement real-time account validation services for E-Checktransactions;Provide complete, accurate and timely reporting of credit and debit card and E-Checktransactions;Support City management of adjustments, reversals and chargebacks;Ensure and maintain the City’s compliance with all applicable card association rules(including but not limited to EMV- Europay, Mastercard, Visa and American Express);Support each Agency’s annual PCI-DSS compliance activities;Invoice the DOF monthly for total card association interchange, fees, assessments plusthe vendor’s card & E-Check transaction fees.Provide full test (and provide evidence of testing) all systems and product enhancementsbefore activating for use by the City and/or the City’s customers.Support a secure payment gateway between CityPay and card/E-Check processingProduce a daily E-Check file and transmit that file to the City’s depository financialinstitution using a “commercially reasonable security procedure” deemed acceptable tothe City’s depository financial institutionThe estimated volume of credit card transactions (and signature debit card transactions) isreported in Exhibit I below. This represents current state and these volumes may increase ordecrease based on NYC business needs. A small number of Agencies process PIN-debittransactions but volumes are, compared to total signature-based transactions, negligible.Estimated E-Check volumes are provided in Exhibit I below.5RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

EXHIBIT I - CITY OF NEW YORK ANNUALIZED CARD and E-CHECK PROCESSING VOLUMESExhibit I6RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

3.4Department Assumptions Regarding Contractor ApproachDOF’s assumptions regarding which approach will most likely achieve the goals and objectivesset out above are:a. ExperienceThe vendor would have: Minimum of five (5) years’ experience providing payment gateway services that can beintegrated with DOF’s CityPay service; Minimum of five (5) years’ experience processing credit and debit card transactions forcorporate and government clients having volumes equal to or exceeding that in Exhibit Iabove. At least three (3) years’ experience providing services to at least 3 government clients Minimum of five (5) years’ experience processing E-Check transactions for corporate andgovernment clients having volumes equal to or exceeding that in Exhibit I above. Aminimum of three (3) government client references will be required; At least five (5) government clients for which the vendor has enrolled the merchant in thecard associations’ Government and Higher Education Payment programs; At least five (5) merchant clients for which the vendor has processed convenience feetransactions and credited those fees to the merchant directly; Experienced senior management; Experience as an Acquirer or as a processor certified by an Acquirer approved by DOF; Experience integrating with cardholder present and not-present payment gateways; Demonstrable, continuous compliance with all PCI-DSS requirements with no meaningfuldisqualifying events, for each of the last five (5) years. Demonstrate current, direct experience providing the in-scope services for merchantcustomers with multiple MIDS who are processing at least 5 million card transactionsannuallyb. Organizational CapabilityThe vendor would have: Adequate, verifiable financial condition to support current and future product deliveryand development; Proposer will deliver 3-years audited financial statements on CD or by secure URL link. Ability to, at the City’s request, deliver periodic audited financial statements on no morethan a quarterly basis by paper, on CD, USB drive or by URL link. Ability to provide and deliver timely all user and technical documentation required by Cityemployees; Legal standing as a qualified processor for MasterCard and Visa transactions; Ability to route transactions to American Express and Discover;7RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

Sufficient processing capacity to execute the City’s volumes with no delays orinterruptions; being available to accept payment instructions from City clients 24 X 7 X365/366 per year with a minimum uptime of 99.9999%Seasoned relationship management team able to respond to DOF inquiries and providevaluable assistance/advice on how to improve credit and debit card & E-Check processing.This includes competent interpretations of card association and National AutomatedClearinghouse Association (“NACHA”) rules, PCI requirements, federal and State laws andregulations;Commitment to strong, continuous product development and an ability to respondpromptly and affirmatively to any/all card association and NACHA rule and productchanges, and all other legal and regulatory changes;Complete Business Resumption Plan (“BRP”) with evidence of it being satisfactorily testedwithin the past 12 months.Provide a highly detailed sample service level agreement for a client of similar size andscope to NYC, with the expectation that this would be subject to negotiation by NYC uponcontract award; SLA would include:o Documented procedures to resolve high priority technical issues including systemoutages and file transmittal issues, that notify the City within one (1) hour of anydisruption. Status updates on any outage will be provide no less frequently thanevery three hours.o Dedicated customer service support team available by telephone from 7:00am to7:00pm ET every day, that responds to BAU DOF and individual Agency telephoneand e-mail inquiries within one (1) business day.o Dedicated relationship support team with an experienced project manager assingle point of contact to respond to all BAU telephone or e-mail inquiries fromthe City within one (1) business dayo Set of tools to track issues and provide on-demand status reporting on issuesreported by the City.No current negative regulatory actions pending against it (limited to the Proposer’sproposed Product Classes).c. Proposed ApproachThe vendor would: Provide a thorough implementation/conversion plan including DOF and Agency training; Provide a payment gateway integrated to CityPay; Process both cardholder present and not-present transactions 24/7/365; Process E-Check transactions 24/7/365; Provide system controls that prohibit access by unauthorized external and internalpersons/system. Agree that the City will be the Merchant of Record and own all Merchant IDs.8RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

Support the City’s convenience fee program in which the City determines theconvenience fee rate and collects that convenience fee directly from cardholders’accounts.Process ad valorem convenience fee transactions separate from individualpayment/purchase transactions;Compute and present the full amount owed by a City client including, when required, aService or Convenience Fee to the customer at “check-out.”For transactions on which Service Fees are to be applied, Proposer will apply thefollowing rules:o The paying client will be clearly advised of the service/convenience fee to beapplied to the transaction amounto The service/convenience fee will be processed as a separate transaction to thepaying client’s credit card statementEach month, the Proposer will charge its fees to the City’s designated bank account(s)into which the services/convenience fees have been credited.Verify that E-Check originations are processed against an authorized bank account;Verify and authenticate card and E-Check payors in accordance with the requirementsof the Card Association Operating Rules and the Operating Regulations of the NationalAutomated Clearinghouse Association.Proposer to direct E-Check entries to the City’s contracted Automated Clearinghouse(“ACH”) Originating Depository Financial Institution (“ODFI”), presently CitibankModify currently deployed card swipe devices or, as needed, replace such equipment toenable card present transactions;Enable currently deployed PIN devices or, as needed, replace such equipment to enablePIN debit transactions or Chip transactions should the industry require PINs in thefuture;Direct credit of gross card & E-Check receipts each day to each Agency’s designatedbank account;Provide online transaction reporting system that operates with all popular webbrowsers (with support for previous versions) that allows the City to:o Generate ad hoc reports and arrange data based on pre-established parametersestablished by the City. (Examples: reports that group data bydepartment/agency, payment category, payment type).o Download daily and historical data sets and integrate or export the data to othersystems and processes in use at the DOF, collaborating with the DOF AND /orthird-party vendors to create customized data feeds as required.o Report, by Agency/MID, daily and historical card & E-Check transactioninformation Report aggregate City daily and historical card & E-Check transactioninformationDefend each Agency against improper chargebacks ensuring timely and accuratehandling of such transactions;Provide support, tools and technology to support annual Agency/MID PCI-DSScompliance duties.9RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

Support the City’s participation in Visa’s and Master Card’s Government & HigherEducation Tax Payments and any other special pricing programs for which the City is ormay be eligible.3.5Participation by Minority-Owned and Women-Owned BusinessEnterprises in City ProcurementIf the contract resulting from this Request for Proposals will be subject to M/WBE participationrequirements under Section 6-129 of the Administrative Code of the City of New York, asindicated by the inclusion of Schedule B – M/WBE Utilization Plan (Attachment L) and theParticipation Goals indicated in Part I thereof, proposers must complete the Schedule B – M/WBEUtilization Plan and submit it with their proposal. Please refer to the Schedule B – M/WBEUtilization Plan and the Notice to All Prospective Contractors (Attachment H) for information onthe M/WBE requirements established for this solicitation and instructions on how to completethe required forms. If the proposer intends to seek a full or partial waiver of the ParticipationGoals on the grounds described in Section 10 of the Notice to All Prospective Contractors,including but not limited to, proposer’s intention to use its own forces to perform any or all ofthe required contract work would result in a failure to attain the Participation Goals, the proposermust request and obtain from the Agency a full or partial waiver of the Participation Goals(M/WBE Utilization Plan, Part III) in advance of proposal submission and submit the waiverdetermination with the proposal. Please note that if a partial waiver is obtained, the proposeris required to submit a completed Schedule B-M/WBE Utilization Plan based on the revisedParticipation Goals to be found responsive.3.6Compliance with Local Law 34 of 2007Pursuant to Local Law 34 of 2007, amending the City's Campaign Finance Law, the Cityestablished a computerized database containing the names of any "person" that has "businessdealings with the city" as such terms are defined in the Local Law. For the purposes of thedatabase, proposers are required to complete the attached Doing Business Data Form and returnit with this proposal and should do so in a separate envelope. (If the proposer is a proposed jointventure, the entities that comprise the proposed joint venture must each complete a Data Form.)If the City determines that a proposer has failed to submit a Data Form or has submitted a DataForm that is not complete, the proposer will be notified by the Agency and will be given four (4)calendar days from receipt of notification to cure the specified deficiencies and return a completeData Form to the Agency. Failure to do so will result in a determination that the proposal is nonresponsive. Receipt of notification is defined as the day notice is e-mailed or faxed (if theproposer has provided an e-mail address or fax number), or no later than five (5) days from thedate of mailing or upon delivery, if delivered.10RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

3.7Whistleblower Protection Expansion Act RiderLocal Law Nos. 30 and 33 of 2012, codified at sections 6-132 and 12-113 of the New York CityAdministrative Code, the Whistleblower Protection Expansion Act, protect employees of certainCity contractors from adverse personnel action based on whistleblower activity relating to a Citycontract and require contractors to post a notice informing employees of their rights. Pleaseread Section 4.07 of Appendix A, the Whistleblower Protection Expansion Act, carefully.3.8Compliance with the Iran Divestment ActPursuant to State Finance Law Section 165-a and General Municipal Law Section 103-g, the Cityis prohibited from entering into contracts with persons engaged in investment activities in theenergy sector of Iran. Each proposer is required to complete the attached Bidders Certificationof Compliance with the Iran Divestment Act, certifying that it is not on a list of entities engagedin investments activities in Iran created by the Commissioner of the NYS Office of GeneralServices. If a proposer appears on that list, the Agency/Department will be able to award acontract to such proposer only in situations where the proposer is takings steps to cease itsinvestments in Iran or where the proposer is a necessary sole source. Please refer to AttachmentJ for information on the Iran Divestment Act required for this solicitation and instructions on howto complete the required form and to http://www.ogs.ny.gov/About/regs/ida.asp for additionalinformation concerning the list of entities.3.9Subcontractor Compliance NoticeThe selected vendor will be required to utilize the City’s web-based system to identify allsubcontractors to obtain subcontractor approval pursuant to PPB Rule section 4-13 and will alsobe required to enter all subcontractor payment information and other related information insuch system during the contract term. Please read Attachment K, the subcontractor compliancenotice as it relates to competitive solicitations. The City’s new web-based subcontractorreporting system will be located on line at the Payee Information Portal at: 3.10 HIRENYC and Reporting RequirementsThe Hiring and Employment Rider shall apply to contracts valued at 1 million or more for allgoods, services and construction except human services contracts that are subject to the PublicAssistance Hiring Commitment Rider. The Rider describes the Hire NYC process and obligations,including reporting requirements throughout the life of the contract. The Hire NYC processrequires contractors to enroll with the Hire NYC system within thirty days after the registrationof the contract subject to this solicitation, to provide information regarding all entry to mid-leveljob opportunities arising from this contract and located in New York City, and to agree to11RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

interview qualified candidates from HireNYC for those opportunities. The Rider also includesreporting requirements unrelated to HireNYC. (See Attachment N)3.11 Paid Sick Leave Law Contract RiderThe Earned Sick Time Act, also known as the Paid Sick Leave Law (“PSLL”), requires coveredemployees who annually perform more than 80 hours of work in New York City to be providedwith paid sick time. Contractors of the City of New York [or of other governmental entities] maybe required to provide sick time pursuant to the PSLL. Section 4.06 of Appendix A, the Paid SickLeave Law, will be included in any contract awarded from this RFP and will incorporate the PSLLas a material term of such a contract. Please read Appendix A carefully.12RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

SECTION IV – FORMAT AND CONTENT OF THE PROPOSALInstructions: Proposers should provide all information required in the format below. Theproposal should be typed on both sides of 8 ½" X 11” paper. The City requests that all proposalsbe submitted on paper with no less than 30% postconsumer material content, i.e., the minimumrecovered fiber content level for reprographic papers recommended by the United StatesEnvironmental Protection Agency (for any changes to that standard please tm). Pages should be paginated. The proposal willbe evaluated based on its content, not length. In addition, proposers should submit a CD-ROMcontaining an electronic copy of all hardcopy documents submitted in response to this RFP.Failure to comply with any of these instructions will not make the proposal non-responsive.All responses to this RFP are to be prepared and submitted at the proposer’s expense. The Citywill not pay any costs incurred by proposers about site visits, printing of proposals, oralpresentations, proof of concept demonstrations or any other activities associated with thepreparation, submission, or evaluation of proposals solicited by this RFP.A vendor may submit more than one proposal, but each should satisfy the mandatoryrequirements of this RFP as applicable. Alternate proposals may be used to present differentproducts, different configurations of a given product, or functional enhancements not presentedin a vendor’s initial proposal. All alternate proposals should be presented as separate files andclearly identified and must be submitted together with the mandatory proposal.The City will base its evaluation entirely on information presented in each vendor’s writtenproposal and in any additional written or oral presentations and proof of concept demonstrationsthat may be requested from a given proposer. When preparing proposals, vendors shouldassume that the City has no previous knowledge of their products or capabilities. Proposers’descriptions of products and services should be clearly written and presented in sufficient detailto permit accurate evaluation by the City. Emphasis should be placed on clear, completepresentation of factual information.All sections of a vendor’s proposal should be prepared and submitted in a straightforward,economical manner. The first page of each proposal should be clearly labeled with the proposer’sname, the name of a contact person within the proposer’s organization, and the proposer’smailing address, telephone number, and email address.While the City does not impose a limit on the length of proposals, brevity is encouraged.Informative content and clarity of presentation are more important than quantity of pages.Embellishments that improve a proposal’s appearance without affecting its content are stronglydiscouraged.Proposers’ responses should be prepared specifically for this RFP and address the points raisedherein. Prewritten product descriptions and promotional materials, presented without reference13RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

to this RFP, are not acceptable. Technical specification sheets, product brochures, and similarmaterials, where provided, should be included in an appendix. Such materials should be includedonly to the extent that they directly pertain to information presented in the vendor’s proposal.4.1Proposal Format4.1.1 Proposal Cover LetterThe Proposal Cover Letter form (Attachment A) transmits the proposer’s Proposal Packageto the Department. It should be completed, signed and dated by an authorizedrepresentative of the proposer.4.1.2 Technical ProposalThe Technical Proposal is a clear, concise narrative which addresses the following:i.Executive SummaryUse this section to describe the proposer’s understanding of the scope and objectivesof the project, and summarize the proposer’s approach, proposed staff, andestimated project duration.a. Experience1. Describe your card processing business and its history. Describe your experienceproviding service to at least three government clients. Do you processMasterCard and Visa? Can you route American Express and Discover Cardtransactions? Are you an Acquirer and a Processor or only a Processor? Forwhich Acquirers do you process?2. Complete the following chart:Card AssociationAnnual TransactionsProcessedAnnual Dollars ProcessedMasterCard Visa American Express Discover Total 14RFP: Cardholder Present and Not-Present Merchant Card & Electronic Check Processing EPIN 83620P0002

3. Provide the following information:Number of merchant customersNumber of merchant customers with annualtransaction count of 3 million or moreNumber of merchant customers with annualprocessed dollars of 700 million or moreNumber of government merchant customers4. How many government merchants have you sponsored into the MasterCard andVisa Government and Higher Education Payment programs? How many of yourgovernment merchants now participate in this program?5. Do you offer a payment gateway and are you willing to integrate it with CityPay?To which other industry payment gateways (both cardholder present andcardholder not-present) are you presently certified? Would you be willing tocertify other gateways if required?6. Provide names, e-mail addresses, and phone numbers of three (3) current clientreferences, at least two of which are g

debit and credit card transactions and correctly route Discover and American Express transactions and provide standalone credit card terminals for in-person card present transactions. The vendor must also be able to process E-Check transactions. Support for digital wallet options (e.g. ApplePay) and contactless in-person payments is expected.