Our Suppliers
Ìý
Our centralized shared service organization, Enterprise Procurement, is dedicated to driving measurable and positive impact for our business stakeholders, members and the organization by optimizing supplier engagement.
We are committed to fostering inclusive representation as a key part of our procurement strategy. By working with local and diverse suppliers, we can tap into new ideas that add value to our businesses and help us provide innovative solutions to our members. Learn more about our Supplier Diversity program.
If you are interested in becoming a supplier for 51²è¹Ýapp, please register on our Supplier Portal.
Supplier Requirements
We expect our suppliers to provide high-quality goods and services that drive optimal performance and diligent oversight of compliance requirements.
51²è¹Ýapp’s suppliers are expected to meet our standard performance, operational, contract and legal/regulatory compliance requirements.
We provide resources to guide our delegates through compliance program requirements for working with our Managed Health Care Programs (e.g., Medicare, Medicaid, Marketplace). Delegates will participate in a pre-delegation audit, which consists of a review of the supplier’s policies for applicable services, compliance program and may include an evaluation of their information security program and financial solvency.Ìý
Access 51²è¹Ýapp’s standard terms and conditions for the procurement of goods and services. Additional contract documents may be required with 51²è¹Ýapp’s legal and compliance programs before commencing services. Ìý
51²è¹Ýapp uses the Coupa platform for interacting with existing suppliers, including requests for proposals (RFP) and transaction processing. Current suppliers may leverage the . Selected bidders invited to respond to an RFP should follow the invite instructions provided via email. Ìý
- Watch the .
Suppliers with potential access to 51²è¹Ýapp’s confidential data or systems are required to participate in our Third-Party Risk Management Program. This program includes assessment and validation of necessary certifications and ensures all potential suppliers maintain necessary processes in place to protect 51²è¹Ýapp confidential data and support other risk management activities. Required certifications and polices may include, but are not limited to: ÌýÌýÌýÌý
Certifications:ÌýÌýÌý
- Service Organization Control (SOC) Full Report 2, Type 1 or 2 report;ÌýÌýand/orÌý
- HiTrust CSF Validated Assessment Full Report; and/orÌý
- Federal Risk and Authorization Management Program (Fed Ramp); and/orÌý
- PCI DSS Certification; and/orÌý5. ISO 27001 Full ReportÌý
Organizational Policies (as applicable to the scope of services):ÌýÌýÌý
- Business Continuity PlanÌý
- Documented Information Security Policy/ProgramÌý
- Proof of background check policyÌý
- Documented Privacy Program or equivalentÌý
- HIPAA Evaluation (if available)Ìý
- Proof of data classification schemeÌý
- Incident Response PlanÌý
- Proof of network diagramsÌý
- Documented Physical Security ProgramÌý
- Proof of Employee Nondisclosure AgreementÌý
An annual review and attestation toÌý51²è¹Ýapp’s Code of ConductÌýmay also be required.
We may request suppliers to work closely with 51²è¹Ýapp’s performance management teams to support service level agreements, key performance indicators or address any issues.
Our standard payment term is 60 days or greater, with special considerations available for diverse and small businesses. Ìý
The Enterprise Procurement team manages the supplier onboarding process, which begins with the issuance of required documents via email.ÌýÌýÌýÌý
Onboarding Requirements:ÌýÌýÌý
- Supplier may not be excluded from working with healthcare payers. Our team will validate eligibility based on data from Office of the Inspector General, System for Award Management and Office of Foreign Asset Controls.Ìý
- Supplier is required to submit:ÌýÌý
a. W-9 Form
b. Payment Authorization Form
If ACH payment is preferred, a voided check or signed bank letter is needed.Ìý