Assessment
University of Virginia, Electronic Medical Records System for Student Health and Wellness (RFP Event ID# 1238897)
Recommendation: do not bid.
solicitation 67 and asked you to register on the UVA portal and attend the pre-proposal conference. That note was written without the RFP, which was then behind what looked like a supplier login. The full document set is now in hand: the 24 page RFP and all seven attachments, downloaded from UVA's public posting portal without an account. The requirements it contains reverse the recommendation.
UVA is not buying a college counselling system. It is buying a full student health clinic platform, and four of its required functions are things Carepatron does not do.
The answer to the check
The check asked for four facts: SIS, accessibility and inventory requirements, and staff numbers. All four are now answered from the document.
RFP also states approximately 30,000 students represented in the EMR, 24,000 of them currently eligible for services. Annual encounters run to 62,000, split as 19,000 CAPS, 40,000 Medical Services and 3,000 across other areas. Annual claims volume is 3,500, all to a single University-approved student insurance carrier.
Supply Chain Management, requires real-time inventory tracking across locations, par level management with automated alerts, ordering, receiving and reconciliation workflows, lot number and expiration tracking, and usage reporting. Inventory is also one of the eight scenarios UVA may require bidders to demonstrate live.
University's Student Information Systems (SIS)" as billing functionality, because student health charges post to student accounts. Section II.I repeats it as an integration requirement. The method is flexible, and secure file-based exchange is explicitly allowed.
D, requires conformance with the Virginia Information Technology Access Act, Code of Virginia §§ 2.2-3500 to 2.2-3505. A supplier that cannot certify full conformance must supply a supplier-paid Accessibility Conformance Report and a supplier-paid Vendor Accessibility Roadmap with a remediation timeline per nonconforming area. The RFP also states that accessibility information "must be exempt from any non-disclosure request", so Carepatron's conformance position would become a public record.
What the University is buying, in its own words
The University seeks proposals from qualified Firms to provide, implement, and support an integrated Electronic Medical Record (EMR) and operational system (the "Services") to support Student Health and Wellness operations across multiple functional areas. The Services must support a broad range of clinical, operational, financial, and administrative functions in a unified or tightly integrated solution environment.
The system serves five service lines: Care and Support Services, Student Disability Access Center, Well-Being Services, Counseling and Psychological Services, and Medical Services. Medical Services is described as "comprehensive outpatient healthcare including primary care, preventive services, reproductive health, travel medicine, immunizations, laboratory services, and treatment of acute and chronic health conditions".
That last line is the whole problem. Counselling is 19,000 of the 62,000 annual encounters. The other 43,000 sit in a primary care clinic with a laboratory, a vaccine fridge and a state immunisation reporting obligation.
The incumbent is Medicat, including the Medicat Immunization Compliance Module, which the RFP calls "a critical component of the University's current operations". The migration covers roughly ten years of history in a Medicat Legacy environment approaching one terabyte.
The requirements that kill it
Section IV.D requires the bidder to classify every Section II requirement as Standard, Configurable, Custom, Third Party, Planned or Not Available. Carepatron would have to answer "Not Available" to the following, quoted from the RFP.
| RFP requirement, quoted | Section | Carepatron position |
|---|---|---|
| "Real-time inventory tracking across locations", "Par level management and automated alerts", "Lot number and expiration tracking" | II.E | No claim exists in the library. Carepatron has no inventory module. |
| "Medication management, including interaction and allergy checking" | II.A | known-gap-no-clinical-decision-support: no clinical decision support, drug interaction or allergy checking, or clinical alerting. |
| "Ordering, such as referrals, imaging, and labs, and results tracking" | II.A | known-gap-no-lab-integration: no lab ordering or results interface. |
| "Immunization tracking and registry integration" | II.C | known-gap-no-hl7-fhir: no immunization registry reporting. |
| "Virginia Immunization Information System (VIIS)", "Verivax", "Epic / UVA Health", "Epic Care Everywhere", "LabCorp", "Prescription Monitoring Program (PMP)" | II.I | known-gap-no-hl7-fhir: no HL7 or FHIR interfaces, ADT feeds, or lab order and result interfaces. |
| "University identity management and authentication services, including Single Sign-On (SSO)" | II.I | sso-no-saml-scim: no SAML or OIDC enterprise SSO, no SCIM provisioning. |
| "University Student Information System (SIS), through direct integration and/or secure file-based exchange" | II.D, II.I | known-gap-no-sis-integration: no native SIS connector. |
| "Secure SQL access for authorized University data analysts, including read-only access to production data or a replica of production data" | II.I | known-gap-api-client-endpoints-only: the API covers client endpoints. Reporting is filterable CSV export (reporting-custom-reports-via-export). |
| ICT must "conform with 'accessibility', as that term is defined in Virginia Code § 2.2-3501" | Att. 2, D | known-gap-no-wcag-conformance: WCAG conformance not specifically implemented. |
| "Text messaging/SMS services to support student communications" | II.I | known-gap-two-way-sms: in development, no confirmed date. Outbound reminders are supported. |
Why this is a no bid
The rubric already bars a PURSUE at two stated-mandatory gap frictions, and this solicitation carries at least six. That alone caps it.
What moves it from a capped REVIEW to a decided no bid is Section II.E. Inventory management is a whole required scope section with no Carepatron product behind it. No claim in the library can answer it, and UVA can require a live demonstration of it. Add drug interaction and allergy checking, lab ordering and results, and immunisation registry reporting. Carepatron cannot serve the 40,000 Medical Services encounters that make up most of the workload.
The evaluation puts 40% on responsiveness to requirements and 25% on higher-education references comparable to UVA. The closest Carepatron reference is Beacon College at 20 staff and 750 students, against UVA's 225 users and 30,000 students.
Under the Virginia Freedom of Information Act every proposal becomes public after award. Pricing may not be marked confidential, and the accessibility position may not be withheld. A bid here is not a near miss that builds a relationship. It is a public document listing what Carepatron cannot do, filed with the purchasing consortium for every public university in Virginia.
What Carepatron would answer well
Worth recording, because it is the shape of the deal that would fit. Section IV.G asks a full set of questions on artificial intelligence: clinical documentation assistance, note generation, coding assistance, AI governance, and whether university data trains models. The AI Scribe answers all of that from strength, and it is included on every paid plan with no per-seat fee (ai-scribe-included-no-per-seat). Scheduling, self-scheduling, digital intake, secure messaging, the client portal, appointment reminders, counselling documentation, treatment planning and standardised instruments are all core platform. Carepatron holds SOC 2 Type II and signs a BAA. Unlimited client records mean the 30,000 student population adds no licence cost.
Two smaller points, in fairness. E-prescribing is available through DoseSpot at $39 per clinician per month (integrations-eprescribing), so that requirement is answerable as Third Party. UVA asks for CCMH and CCAPS instruments specifically; the library confirms GAD-7, PHQ-9, PCL-5, DASS-21 and AUDIT, but not CCAPS.
Score: 42 of 100
| Dimension | Weight | Score | Reason |
|---|---|---|---|
| Product fit | 35 | 10 | Core clinical, scheduling and portal fit is real. Six documented gaps plus a missing inventory module against stated requirements. |
| Buyer fit | 20 | 17 | A university student health and counselling centre displacing an incumbent is the sweet spot on buyer type. |
| Size fit | 15 | 7 | 225 users and 150 clinicians sit above the 20 to 100 clinician range Carepatron states (enterprise-no-practical-seat-ceiling). Under the 500 seat disqualifier. |
| Winnability | 15 | 2 | Incumbent mid-transition, 25% of the score on comparable higher-ed references, no HECVAT or VPAT held. |
| Feasibility | 15 | 6 | Documents were fully public. Submission needs a Workday Strategic Sourcing supplier account, which is your call, not mine. |
Below 45, so the verdict is SKIP and the recommendation is do not bid. Both source ids for this solicitation have been recorded as SKIP, so the board no longer shows the superseded 3 September recommendation.
The strategic cost, which is worth knowing
The award creates a VASCUPP cooperative contract. Under Attachment 2, Provision R, the selected firm may be asked to supply other Virginia colleges and state agencies on the same terms. UVA also "reserves the right to decline an Award Agreement to Firms already under existing VASCUPP cooperative contracts to avoid duplication". The term is three years with up to seven renewal years.
Whoever wins becomes the default student health EMR for Virginia public higher education for up to a decade. Smaller VASCUPP campuses that would otherwise be Beacon-sized Carepatron opportunities will buy off that contract instead of running their own procurements. Not bidding is still correct, because Carepatron cannot meet the scope. The cost is worth naming rather than discovering later.
What would change the call
Three things, in order of likelihood.
- UVA splits the counselling scope. If CAPS is ever procured separately, that is 19,000 encounters of counselling work with no inventory, no laboratory, no immunisation registry and no Epic interface. That is a genuine Carepatron opportunity and it is the Beacon pattern at scale.
- A product decision from Glen on inventory management, SIS integration, SAML SSO and WCAG conformance. Those four are what stand between Carepatron and the whole US college student health segment, not just this deal. Nothing about this RFP needs deciding by 6 October, but the four questions are worth answering on their own timeline.
- Watch the award. Initial notice is anticipated by January 2027. Knowing who wins tells you who Carepatron competes against at every other VASCUPP campus.
Facts worth keeping
Procurement contact, printed in the RFP: Heather C. Hite, Procurement Category Manager, [email protected]. Subcontracting and reporting questions go to Shannon Wampler, Business Analyst, [email protected]. The phone number 434 982 5077 appears on aggregator listings and in the 3 September note, but it is not printed in any UVA document I read, so treat it as unconfirmed.
| Event | When |
|---|---|
| Optional pre-proposal conference, virtual, RSVP by 11 Sept 3:00 pm ET | 14 September 2026, 1:00 pm ET |
| Questions deadline, by email only | 21 September 2026, 5:00 pm ET |
| Proposals due | 6 October 2026, 2:00 pm ET |
| Anticipated award | January 2027 |
| Term | 3 years, renewable for up to 7 more |
Evaluation weights: responsiveness and proposal quality 40%, higher-education experience and references 25%, approach and methodology 15%, price 10%, small business status or subcontracting plan 10%.
Documents read: the RFP, Award Agreement, Contractual Provisions, Data Protection Addendum, Business Associate Addendum, and the Goods and Services Proposal and Fees template. All were downloadable from the public posting portal without an account.
Machine-written first pass against the verified claim library. Not reviewed by a person unless the status says so.