VOL IV · Nº 207FRIDAY · MAY 15 · 20261 FLAG OPEN

· RFPs· Questions· Library· Reviewers· AuditActing as · Nina Vega

RFP · Westfield Health

RFP-2031 — Westfield Health vendor evaluation

Westfield Health is consolidating their workforce + claims platforms. Marquee RFP, all 42 questions approved, exec sign-off pending.

Open packet →Export security CSV

Status

Awaiting executive approval

Manager Marcus Sterling

Questions approved

42 / 42

All approved

Due

May 30, 2026

overdue 85 days

Account

Westfield Health

Westfield Health platform consolidation

AI drafting + library reuse

On import, the proposal manager clicked "AI draft answers". 32 of 42 questions matched library entries verbatim or with minor edits; 10 were assigned to human authors. Each AI draft emits an ai_draft_created audit row.

Drafted

From library

Human authored

Reviewer chain

SE → security → legal → exec

Questions (44)

Grouped by category. Click a code to open the question detail.

Security · 12 questions

Q-2031-S01How is customer data encrypted at rest?Approved
Q-2031-S02How is data encrypted in transit?Approved
Q-2031-S03Are you SOC 2 Type II certified?Approved
Q-2031-S04Describe your access control model.Approved
Q-2031-S05Do you support SAML SSO?Approved
Q-2031-S06What is your incident response process?Approved
Q-2031-S07Are you ISO 27001 certified?Approved
Q-2031-S08How is MFA enforced?Approved
Q-2031-S09What is your penetration testing cadence?Approved
Q-2031-S10How are administrative actions logged?Approved
Q-2031-S11Do you support customer-managed encryption keys?Approved
Q-2031-S12Describe your network segmentation.Approved

Technical · 16 questions

Q-2031-T01Describe your deployment architecture.Approved
Q-2031-T02Do you offer multi-region failover?Approved
Q-2031-T03What is your published uptime SLA?Approved
Q-2031-T04Do you have a public API?Approved
Q-2031-T05What webhooks are supported?Approved
Q-2031-T06Do you support Salesforce integration?Approved
Q-2031-T07What is your data residency story?Approved
Q-2031-T08Describe your API rate limits.Approved
Q-2031-T09How do you handle large attachments?Approved
Q-2031-T10Do you have a sandbox environment?Approved
Q-2031-T11What is your release cadence?Approved
Q-2031-T12Do you support custom fields?Approved
Q-2031-T13Do you have an event/audit stream?Approved
Q-2031-T14Do you support Slack?Approved
Q-2042How are integrations scoped and supported for our scale (1500 users)?Approved
Q-2050What is your maximum recommended throughput?Awaiting review

Pricing · 6 questions

Q-2031-P01How is your pricing structured?Approved
Q-2031-P02Are there volume discounts?Approved
Q-2031-P03What is included in the Enterprise tier?Approved
Q-2031-P04Are price increases capped at renewal?Approved
Q-2031-P05Do you accept purchase orders?Approved
Q-2031-P06What is included in support pricing?Approved

Compliance · 10 questions

Q-2031-C01Are you GDPR compliant?Approved
Q-2031-C02Where is data stored?Approved
Q-2031-C03Do you support data residency in the EU?Approved
Q-2031-C04Are you HIPAA compliant?Approved
Q-2031-C05What is your data retention policy?Approved
Q-2031-C06How are sub-processors managed?Approved
Q-2031-C07Do you have a SOC 2 report?Approved
Q-2031-C08How do you handle data subject requests?Approved
Q-2031-C09Schrems II — Standard Contractual Clauses?Approved
Q-2031-C10Are you CCPA compliant?Approved

Acting as Nina Vega · VP salesswitch role →