RFP Requirements

Please be advised that this RFP should be considered a condition of doing business with
Burlington. The information in this request should be considered confidential and no portion
of this document may be reproduced without prior written consent of Burlington and Aon.
The contents of the material should not be discussed with anyone outside your organization.
Any breach of this confidentiality may result in immediate disqualification of your
organization from this process.

Burlington reserves the absolute right to withdraw this RFP by written notice or to reject any
or all proposals submitted in response to this RFP. Burlington further reserves the right to
accept proposals from and award business to one or more prospective vendors or to decide
not to award business to any prospective vendor. Burlington shall not incur any liability
whatsoever by reason of such withdrawal, rejection, or acceptance.

Burlington assumes no obligation regarding confidentiality of all or any portion of a proposal

or any other material except the portion that a prospective vendor clearly designates as
containing proprietary information by indicating "do not disclose" in the section that contains
such proprietary information. In such event, the sole responsibility of Burlington shall be
limited to maintaining confidentiality of such information to the same extent that it maintains
its own proprietary information.

Is your organization compliant with the HIPAA Privacy Rules, Unsecured Protected Health
Information Breach Notification Rule, and Security Rule issued by the U.S. Department of
Health and Human Services?
Organizational Experience
Is your company public or privately held?
Provide mergers, acquisitions, spin-off's and significant organizational changes in past 2
years.

Describe anticipated changes in ownership or business developments, including but not

limited to mergers, stock issues, and the acquisition of new venture capital.

Describe your organizations experience working with three (3) companies similar to
Burlington in terms of size and industry. Provide examples of services, participation rates
and outcomes.

Provide three (3) client references including: company name, location, contact name,
contact title, phone number, email, description of services and length of contract. At a
minimum, two (2) references should be clients similar to Burlington (in size and industry) and
at least one (1) should be a client you have recently lost, excluding accounts closed due to
mergers.

Provide the names of any outside third-party vendors (including multiple vendor options) that
could be involved in the delivery of wellbeing services to Burlington.
Notification Management

How often the clients are notified about the policy changes

How often your security policies are updated

How often product releases are made
Onsite Program Management
Describe your organizations capabilities for staffing a full-time wellbeing program manager
Describe your organization's hiring/onboarding processes for the onsite wellbeing program
manager
Provide the job description/core responsibilities for the onsite wellbeing program manager as
well as the background on an ideal candidate.
How many wellbeing program managers have you staffed within your book of business
Does your organization agree to allowing the onsite wellbeing manager to support all of
Burlington wellbeing programs, services and initiatives, including those not delivered by your
organization ?
Health Assessment
Is your HA a proprietary tool? If not, is it proprietary to another entity? Whom?
On average, how many questions is the HA? How long does it take to complete?
Can the HA be completed via mobile phone, tablet or other device? (Please answer yes or
no and explain)
Does your HA address all pillars of wellbeing (emotional, social, financial, physical)?
Do you provide an overall risk score to individuals who complete the HA (please answer yes
or no)? If yes, explain how the risk score is used for the individual, targeted outreach,
aggregate reporting and evaluation/measurement.
Describe how you will offer, administer and collect paper HA's? What's the turnaround
processing time?

Provide a copy of your paper version Health Assessment for review.

Response Additional Comments

Response Additional Comments

Response Additional Comments

Response Additional Comments

Response Additional Comments

Incentive Tracking Response
Describe the degree of flexibility and customization
related to the incentive management system and it's
options.
Can your incentive management functions link employee
activities to spouse requirements (please answer yes or
no)?
Describe how you will report and provide an incentive
achievement file to Burlington, based on incentive
requirements? Turnaround time?
Describe how your organization supports sending
reminders, push communications, outbound calls and
tracking participation for incentive purposes.
Platform Response
Does your organization provide incentive fulfillment
(please answer yes or no)? Describe the process.
Document your web portal access requirements (user ID
and password requirements, SSO requirements), and
supported browsers and versions.
List additional security measures in place to ensure data
security.
List all mobile technology, devices and apps that can be
utilized with your system.
Provide demo access to your portal and ability to
complete the online Health Assessment.
Communications Response

Describe your year round communications approach and

support for Burlington on an on-going basis. Include
examples/ideas specific to Burlington. List the modalities
of communication used. Be sure to articulate how you
will promote the program.
Articulate your communication expectations for
Burlington and how you will work with their internal
communications team.
What is your suggested approach, tools, and resources
for employee communication at Burlington? Please detail
standard vs. cutsom branding capabilities as well as
distribution methods.
Do you have the ability to administer and deliver targeted
communications to certain populations (please answer
yes or no)?
Do you have the ability to administer and deliver targeted
incentive deadline communications to non-participants
(please answer yes or no)?
Implementation Response
Outline a detailed implementation plan for official
program roll out. Please clearly define tasks and
responsibilities for both your organization and Burlington.
Be sure to include your data requirements (source,
purpose and frequency).
Outline a detailed implementation plan for official
program roll out. Please clearly define tasks and
responsibilities for both your organization and Burlington.
Be sure to include your data requirements (source,
purpose and frequency).
Outline a detailed implementation plan for official
program roll out. Please clearly define tasks and
responsibilities for both your organization and Burlington.
Be sure to include your data requirements (source,
purpose and frequency).
Outline a detailed implementation plan for official
program roll out. Please clearly define tasks and
responsibilities for both your organization and Burlington.
Be sure to include your data requirements (source,
purpose and frequency).
Security Response
Is your company certified to information security or
auditing standards, such as ISO27001 or SSAE16
Have you been independently audited in any other way?
Does your company have a security policy?
Is your security policy signed off by a senior executive or
equivalent?
Are security policies kept current? How frequently are
they
Doesreviewed?
your company have a security awareness
program?
Does your company have a specific Information Security
team?
Additional Comments

Additional Comments

Additional Comments

Additional Comments
Additional Comments