What an analysis looks like

City of Yakima — Merchant Services RFP 12306P

A real, publicly posted municipal RFP (28 pages, closed in 2023), analyzed for a fictional vendor called Meridian Payments: an 85-person processor holding PCI-DSS Level 1 and SOC 2 Type II. Nothing below was edited by hand. Click any page marker to open the original PDF at that page.

PURSUE
⚠AI-assisted output — verify with human review before acting on this analysis
12306P_MerchantServices_FINAL.pdf

The City of Yakima, WA Utility Services Division (RFP 12306P) is seeking a merchant services provider to process consumer credit and debit card payments across internet, IVR, point-of-sale, kiosk and bill presentment channels, with integration to the City's utility billing and cashiering back office. The award covers a hosted, fully PCI-compliant payment system with 24-hour settlement, single-source reporting, ACH return and chargeback reporting, convenience-fee support, and project management/implementation services, on a 3-year term extendable to 5 years.

DeadlineMarch 3, 2023, 11:00:00 a.m. PST
View source document ↗
82
Overall Score
PURSUE
This is a near-exact match to Meridian's core business — a mid-size municipal utility needing hosted card, IVR, POS and bill-presentment acceptance with PCI Level 1 evidence, all of which Meridian already holds — and the main risks are commercial (price-weighted scoring, small transaction base) rather than capability gaps.
Regulatory & Standard Flags Detected
PCI_DSSACHVISA_MC_RULESOTHEROTHER
PCI_DSS — PCI compliance is a mandatory system requirement at all levels, the most recent PCI audit must be submitted with the cost proposal, and the questionnaire probes compliance program, third-party assessor certification, merchant PCI support and PCI DSS training. Meridian's existing PCI-DSS Level 1 status directly satisfies this and should be evidenced with the AOC.
“System must be fully PCI compliant”p. 10 ↗
ACH — Online ACH returns reporting is a required system function alongside chargeback reporting; Meridian's in-house ACH origination capability supports this natively. Note the scope is reporting on returns rather than full ACH/e-check acceptance — clarify whether e-check acceptance is in or out of scope.
“Online Automated Clearing House (ACH) returns and credit card chargeback reporting.”p. 10 ↗
VISA_MC_RULES — The City currently accepts MasterCard and Visa in person, online and via kiosk and requires support for all major credit cards and branded debit cards, with daily gross credit and monthly discount-fee billing — network operating rules govern convenience-fee structures, surcharging limits and settlement timing, and interchange changes must be reconciled against the 18-month firm-price clause.
“The City Utility Services Division currently accepts MasterCard and Visa credit cards in person, on-line and via kiosk.”p. 10 ↗
OTHER — Washington Public Records Act (RCW 42.56) governs the entire submission: all responses are public records intended for online posting after contract signing, blanket confidentiality marking is grounds for rejection, and the proposer bears all cost and litigation risk of defending nondisclosure of items such as the PCI audit and CPA financials.
“Washington State Public Disclosure Act (RCW 42.56 et seq.) requires public agencies in Washington to promptly make public records available for inspection and copying”p. 6 ↗
OTHER — Contractual PII/confidential-information regime: obligations to limit use, apply commercially reasonable security, maintain confidentiality for three years post-termination, and return or destroy data on City direction; failure to protect PII is enumerated as a breach permitting termination. No specific state breach-notification SLA is stated, so Meridian should propose one.
“Contractor shall not use Confidential, Proprietary or Personally Identifiable Information of City for any purpose other than the limited purposes set forth in this Contract”p. 23 ↗
Strategic Fit
92
Technical Feasibility
88
Revenue Potential
58
Timeline Realism
80
Compliance Complexity
38
Key Milestones
—RFP Issued: February 3, 2023
—Deadline for Written Questions/Answers: February 10, 2023
—Proposal Submittal Due: 11:00 a.m. PST on March 3, 2023 (sealed hardcopy + flash drive to City Clerk; public opening in Council Chambers)
—Evaluation of Submittals by City: March 6-10, 2023
—Notification of Shortlist/Interviews or Vendor Presentations: March 13-17, 2023
—Recommendation of Intent to Negotiate: March 22-24, 2023
—Anticipated Contract Award by City Council: April 2023
—Implementation: April – May 2023
—Assumption of Merchant Services (sooner if possible, no later than): February 1, 2024
—Contract term: 3 years with City option for up to 2 additional years (5 total); pricing firm 18 months
—Proposal irrevocable for 90 days following the submission deadline
Analyzed 9/8/2026, 6:38:38 PMModel claude-opus-5Effort high75,094 in / 7,173 out tokensSource document not storedCalibrated on 0 past outcomes
Your RFPs, with your company’s profile and track record.

Five analyses a month free. Your documents stay private, every claim cites its source, and scoring learns from the bids you win and lose.

Get Started Free →How we handle your documents