North Carolina DHHS Controlled Substance Reporting System RFI (30-270047-DMH)
The North Carolina Department of Health and Human Services (NC DHHS), Division of Mental Health, Developmental Disabilities and Substance Use Services (DMH/DD/SUS), has an open Request for Information No. 30-270047-DMH for a third-party-hosted Controlled Substance Reporting System (CSRS) solution supporting North Carolina’s Prescription Drug Monitoring Program. The eVP/Ariba sourcing document number is Doc2365935872.
Deadline and value
Responses are due September 21, 2026 at 5:00 p.m. Eastern Time. This is market research rather than a grant or contract award. NC DHHS does not state an award value; instead, respondents are asked to provide estimated implementation, licensing, operating, support, and total-cost-of-ownership information to support future budget and procurement planning. Match or cost share is not applicable.
Requested solution
NC DHHS is seeking information on a cloud-based Software as a Service solution capable of supporting more than 95,000 registered users; tracking Schedule II-V controlled substances and drugs of concern; handling daily data ingestion with high data quality; supporting reporting and SFTP data transfer; maintaining 99.5% availability and 24×7 help-desk support; integrating with electronic health record and electronic medical record systems; and maintaining interoperability with ASAP standards, NABP PMP InterConnect, and NC HealthConnex.
The RFI also asks respondents to address privacy, security, disaster recovery, testing, and compliance requirements including HIPAA, HITECH, 42 CFR Part 2, the North Carolina Controlled Substances Reporting System Act, NC DHHS privacy/security requirements, statewide information-security policies, and GovRAMP. The RFI states that an annual third-party assessment is required and identifies GovRAMP as required.
Response package and submission
NC DHHS requests concise, detailed, point-by-point responses to Sections 1.0 through 1.6 rather than brochures or boilerplate. The response should address the proposed solution and services, architecture/network information, total cost of ownership, implementation approach and timeline, company background, relevant customers and comparable state-agency implementations, experience, and lessons learned. A signed transmittal/execution component is required, and respondents should identify deviations and proprietary information.
Submit one signed original electronic response through the Ariba Sourcing Module using document Doc2365935872. Files may be PDF, JPEG, DOC, or XLS and may not be password protected. If confidential/proprietary information is included, submit a signed original and a signed redacted copy. The RFI instructs vendors to include all RFI pages with the EXECUTION section completed and signed. Multiple truly unique comprehensive responses may be submitted separately.
Questions, contact, and amendments
The written-question deadline was August 31, 2026 at 5:00 p.m. Eastern Time through the Ariba Sourcing Tool. The RFI says general clarification questions and answers will be issued as an addendum in the North Carolina Electronic Vendor Portal. During this verification, the official public eVP page remained open but its Addenda/attachment panes were not exposed in read-only access, and no separate publicly indexed addendum was located. Respondents should therefore recheck the official eVP/Ariba record immediately before submitting.
Contract specialist: Kathryn Brown, (919) 855-4093, kathryn.brown@dhhs.nc.gov.
Atlas assessment
Atlas Opportunity Score: 48/100. This is useful North Carolina healthcare-IT procurement intelligence and may shape a future competitive acquisition, but the current action is only an RFI with no award, and the technical/operational requirements are substantial.
N9+ Fit: 0/100. The RFI concerns an enterprise prescription-drug-monitoring SaaS platform, data ingestion, interoperability, security, analytics, and statewide operations. It does not establish a legitimate remote physical examination, telehealth-device, or N9+ deployment use case. Dr. Miltie/QC Healthcare should not force a fit. A direct response would only be appropriate for a vendor that can credibly demonstrate the requested statewide PDMP SaaS, security/compliance, interoperability, support, and comparable implementation capabilities.
Official source
North Carolina Electronic Vendor Portal — Solicitation Details