Salesforce DevOps and Automated Testing Tool Solution

Background
The State of Tennessee, through its Finance and Administration, Strategic Technology Solutions (STS), is seeking to identify a partner for a Salesforce DevOps and automated testing tool solution.

Salesforce is increasingly being adopted by various state agencies, necessitating a dedicated DevOps platform to manage multiple sandboxes for Development, QA, System Integration Testing (SIT), and User Acceptance Testing (UAT) prior to production.

The goal is to streamline development cycles, enhance deployment efficiency, and ensure consistent quality through direct integration with Salesforce while preventing regression through automated testing.

Work Details
The State is looking for software solutions that meet specific business requirements outlined in Table 3.1 of the RFI. Key functional requirements include:

- Continuous Integration (automated builds and code analysis)
- Continuous Delivery/Deployment (automated deployment pipelines)
- Pipeline Management (version-controllable configurations)
- Work Item Tracking (management tools for tasks)
- Traceability (end-to-end tracking from requirements to releases)
- Reporting (real-time dashboards for sprint progress)
- Scalability (support for large teams and high-frequency deployments)
- Centralized management of Build and Release Artifacts.

Technical requirements include integration with Git for source code management, support for Infrastructure as Code tools like Terraform or Ansible, containerization support with Docker and Kubernetes, automated testing frameworks within CI/CD pipelines, security scanning capabilities, observability tools for application performance monitoring, telemetry for deployment success rates, and native automated testing tools.

Support requirements emphasize user training, service uptime commitments, technical support options, knowledge base access, accessibility compliance, and adherence to security protocols including role-based access controls and data encryption.

Period of Performance
The RFI was issued on March 24, 2026. Specific timelines for responses include a deadline for written questions by March 31, 2026; state responses by April 8, 2026; and final RFI response submissions by April 16, 2026.

Place of Performance
The services or products must comply with the requirement that all State data remains within the United States during processing, storage, in-transit or at rest.

Bidder Requirements
Vendors must ensure compliance with security policies that restrict data access to US-based resources only. Any software development can occur outside the US but must adhere to strict guidelines regarding foreign adversaries as defined by US regulations.

Vendors should also provide documentation on their security measures including role-based access control (RBAC), multi-factor authentication (MFA), data encryption practices, compliance with privacy frameworks such as SOC 2 and FedRAMP certifications.