# MODIFIABLE REQUEST FOR PROPOSALS (RFP) TEMPLATE
## Project Title: Legacy .NET WinForms & ASP.NET WebForms (.aspx) Migration to Oracle APEX 24.2
- **RFP Document Reference**: `VNA-RFP-006` (Companion to Solution Brief `VNA-SB-006`)
- **Issuing Organization**: `[INSERT ORGANIZATION / COMPANY NAME]`
- **Issue Date**: `[2026-10-27]`
- **Proposal Due Date**: `[INSERT DATE, e.g., +30 Calendar Days]`
- **Reference Architecture Portal**: https://dotnet-winforms-to-apex.web.app/
- **Template Attribution**: This site is designed by Viscosity.AI

---

## SECTION 1: ISSUING ORGANIZATION PROFILE & PROCUREMENT SCHEDULE (MODIFIABLE)

> **Instructions for RFP Author**: Replace all bracketed placeholders (`[...]`) below with your organization's specific dates, contacts, and environment metrics before issuing to prospective bidders.

| Procurement Milestone | Target Date / Entry (Modifiable) |
|---|---|
| Issuing Organization Name | `[Insert Legal Entity Name]` |
| Primary Procurement / Technical Contact | `[Insert Name, Title, Email]` |
| RFP Issue Date | `[2026-10-27]` |
| Vendor Written Questions Due | `[Insert Date - Week 2]` |
| Organization Responses to Vendor Q&A | `[Insert Date - Week 3]` |
| Final Vendor Proposals & Pricing Due | `[Insert Date - Week 4]` |
| Technical Architecture Demos / Oral Presentations | `[Insert Date - Week 5]` |
| Target Contract Award & Phase 0 Kickoff | `[Insert Date - Week 6]` |

### 1.1 Executive Summary & Business Objectives
`[INSERT COMPANY NAME]` ("Organization") is soliciting competitive proposals from qualified enterprise architecture and engineering firms to modernize and transition our current **.NET Framework 2.0-4.8 (WinForms, WebForms .aspx, WCF, C# / VB.NET)** environment to **Oracle APEX 24.2, ORDS REST APIs, PL/SQL & OCI Cloud Native**.

Our primary business and technical objectives are:
- Legacy .NET Framework 2.0-4.8 applications rely on ASP.NET WebForms (`.aspx` with bloated ViewState payloads and Telerik/DevExpress third-party controls) or WinForms thick clients distributed via ClickOnce.
- Microsoft's modern .NET 8/9 core runtime does not support ASP.NET WebForms or WCF Server natively, forcing IT leaders into an expensive full-stack rewrite just to get off end-of-life Windows Server hosts.
- In data-driven enterprise apps, 75% of the C# or VB.NET codebase consists of repetitive ADO.NET / Entity Framework plumbing, DTO mapping, and grid binding.

---

## SECTION 2: CURRENT ENVIRONMENT BASELINE INVENTORY (MODIFIABLE)

Bidders must size their technical delivery plan and fixed-fee milestone pricing against the baseline inventory table below:

| Inventory Dimension | Current Baseline Count / Footprint (Modifiable) | Target Modernization SLA / Objective |
|---|---|---|
| Legacy Source Stack (`Stack X`) | .NET Framework 2.0-4.8 (WinForms, WebForms .aspx, WCF, C# / VB.NET) | Full retirement / modernization |
| Target Architecture (`Stack Y`) | Oracle APEX 24.2, ORDS REST APIs, PL/SQL & OCI Cloud Native | Production-grade HA/DR & security |
| WinForms / .ASPX Screens | `[Insert Count, e.g., 150 forms]` | 100% functional parity & optimization |
| RDLC / Crystal Reports & Data Access Classes | `[Insert Count, e.g., 280 reports/DAOs]` | Automated AST & schema uplift |
| Query Fan-Out Rationalization (Core SQL Views + Runtime/Inference Filters) | `[Insert Count, e.g., 75 % fan-out reduction]` | `[Target Rationalization / SLA]` |
| Target Cutover Downtime Window | `[e.g., < 15 Minutes / Near-Zero Downtime]` | Rehearsed parallel run + rollback plan |
| Security, Compliance & Identity | `[e.g., SSO/MFA via Entra ID / Okta, Row-Level VPD, Audit Logs]` | Zero critical/high CVEs at Go-Live |

---

## SECTION 3: MANDATORY TECHNICAL SCOPE OF WORK & DELIVERABLES (MODIFIABLE)

The selected partner shall execute the project across four gated phases (**Phase 0: AST Discovery & Architecture Blueprint**, **Phase 1: Core Foundation & Data/Code Conversion**, **Phase 2: Integration, Runtime Filtering & UAT**, and **Phase 3: Parallel Run, Cutover & Hypercare**).

### 3.1 Core Architectural Requirements
1. **[MODIFIABLE REQUIREMENT 1]**: Roslyn AST & SQL Dependency Extraction: We analyze your Visual Studio `.sln` / `.csproj` / `.vbproj` repositories, mapping every WinForms screen, `.aspx` page, WCF contract, and `Oracle.ManagedDataAccess` / `SqlClient` query.
2. **[MODIFIABLE REQUIREMENT 2]**: Data-Tier Pushdown to PL/SQL & Views: Multi-tier C#/VB.NET data orchestration loops that pull thousands of rows over the network are rewritten as high-performance, set-based Oracle SQL views and PL/SQL packages executing at zero network latency.
3. **[MODIFIABLE REQUIREMENT 3]**: WebForms / WinForms to APEX 24.2 Universal Theme: Third-party Telerik, Infragistics, and DevExpress grids are replaced with native APEX 24.2 Interactive Grids, Faceted Search, and Smart Filters.
4. **[MODIFIABLE REQUIREMENT 4]**: WCF SOAP to ORDS OpenAPI 3.1: Legacy WCF `.svc` endpoints and Windows Services are replaced by stateless Oracle REST Data Services (ORDS) handlers and `DBMS_SCHEDULER` background jobs.
5. **[MODIFIABLE REQUIREMENT 5]**: Query Fan-Out Rationalization & Runtime/Inference Filtering: Instead of migrating cloned reports and DataWindows 1-for-1, our AST SQL parser clusters queries by their canonical core JOIN graph, builds governed Oracle 23ai views only for those core queries, and generates dynamic WHERE clauses, faceted filters, and ad-hoc report variations at runtime and via AI inference (APEX 24.2 Smart Filters & Select AI).

### 3.2 Component-Level Conversion & Deliverable Matrix
Bidders must confirm compliance with each component conversion requirement below:

| Req ID | Legacy Artifact / Baseline Workload | Required Target Architecture | Engineering Method & Acceptance Criteria | Priority (Modifiable) |
|---|---|---|---|---|
| REQ-01 | ASP.NET WebForms (`.aspx` + `.aspx.cs` ViewState) | APEX 24.2 Pages + Stateless AJAX Dynamic Actions | Declarative Region & Page Item Synthesis | `[Mandatory / Optional]` |
| REQ-02 | WinForms `DataGridView` / Telerik `RadGrid` | APEX 24.2 Interactive Grid & Interactive Report | Native Grid Configuration & Saved Report Views | `[Mandatory / Optional]` |
| REQ-03 | ADO.NET / Entity Framework / Dapper DAL | Direct In-Database SQL & PL/SQL Package APIs | Elimination of Middle-Tier ORM Serialization | `[Mandatory / Optional]` |
| REQ-04 | WCF Services (`.svc`) & ASMX Web Services | Oracle REST Data Services (ORDS) OAuth2 APIs | AutoREST & PL/SQL REST Handler Migration | `[Mandatory / Optional]` |
| REQ-05 | SSRS Reports (`.rdl`) / Crystal Reports (`.rpt`) | APEX Interactive Reports + APEX Office Print (AOP) | SQL Query Migration & Native Export Templates | `[Mandatory / Optional]` |
| REQ-06 | Cloned Reports / Queries Differing Only by WHERE Clause or Group-By (Query Fan-Out) | Canonical Core SQL View + APEX 24.2 Runtime / AI Inference Filters | AST Join-Graph Clustering (75-90% Report Count Reduction) | `[Mandatory / Optional]` |

### 3.3 Mandatory Platform & Tooling Standards
- Oracle APEX 24.2 & Universal Theme 42
- Oracle REST Data Services (ORDS) for high-throughput JSON REST APIs
- Viscosity AMP for Active Directory / Microsoft Entra ID OIDC single sign-on
- Oracle SQLcl Liquibase & Azure DevOps / GitHub Actions CI/CD integration

---

## SECTION 4: VENDOR TECHNICAL Q&A QUESTIONNAIRE & SCORING RUBRIC

Bidders must provide direct, concise written responses to each question below. The Issuing Organization's evaluation committee will grade responses using the embedded benchmark criteria.

### Vendor Question 1: Can we keep our existing Azure DevOps or GitHub Actions CI/CD pipelines when moving from .NET to APEX?
- **Bidder Response Requirement**: Provide a concrete architectural explanation, reference toolset, and verifiable production proof. Generic marketing statements will be scored zero.
- **Evaluation Benchmark (What High-Scoring Responses Must Demonstrate)**: Yes. Using Oracle SQLcl Projects and Liquibase, every APEX page, shared component, and PL/SQL package is exported as readable YAML/SQL files into Git and deployed automatically via Azure DevOps or GitHub Actions.
- **Evaluator Score (0 to 10 Points)**: `[   / 10 ]`

### Vendor Question 2: How do you integrate APEX with Microsoft Entra ID (Azure AD) and Office 365?
- **Bidder Response Requirement**: Provide a concrete architectural explanation, reference toolset, and verifiable production proof. Generic marketing statements will be scored zero.
- **Evaluation Benchmark (What High-Scoring Responses Must Demonstrate)**: Oracle APEX 24.2 supports native OpenID Connect (OIDC) authentication with Microsoft Entra ID out of the box, and our AMP framework integrates directly with Microsoft Graph REST APIs for SharePoint, Outlook, and Teams automation.
- **Evaluator Score (0 to 10 Points)**: `[   / 10 ]`

### Vendor Question 3: What is included in the downloadable PDF Solution Brief?
- **Bidder Response Requirement**: Provide a concrete architectural explanation, reference toolset, and verifiable production proof. Generic marketing statements will be scored zero.
- **Evaluation Benchmark (What High-Scoring Responses Must Demonstrate)**: The PDF Solution Brief includes the .NET WinForms/WebForms-to-APEX architectural comparison, ORM-to-PL/SQL latency benchmarks, and an Azure DevOps SQLcl Liquibase pipeline blueprint.
- **Evaluator Score (0 to 10 Points)**: `[   / 10 ]`

### Vendor Question 4: How do you prevent report and query fan-out bloat, and how do you guarantee zero vendor lock-in?
- **Bidder Response Requirement**: Detail your methodology for clustering redundant legacy queries/reports into canonical core SQL views with runtime or AI-inference filtering, and specify customer code/data ownership upon project completion.
- **Evaluation Benchmark (What High-Scoring Responses Must Demonstrate)**: Bidder must demonstrate deterministic AST SQL clustering (collapsing 75%-90% of cloned reports into core database views with runtime predicates), 100% customer ownership of all DDL, PL/SQL, application source code, and Terraform scripts, and zero proprietary runtime lock-in.
- **Evaluator Score (0 to 10 Points)**: `[   / 10 ]`

### Vendor Question 5: Describe your automated regression testing, parallel run, and zero-downtime cutover methodology.
- **Bidder Response Requirement**: Specify how data parity, business-rule equivalence, and rollback safety are verified prior to production cutover.
- **Evaluation Benchmark (What High-Scoring Responses Must Demonstrate)**: Bidder must provide automated row-count and cryptographic hash reconciliation, automated unit/UI test suites (e.g., utPLSQL, Playwright), and a rehearsed cutover runbook with sub-minute rollback capability.
- **Evaluator Score (0 to 10 Points)**: `[   / 10 ]`

---

## SECTION 5: COMMERCIAL PRICING & LICENSING MATRIX (MODIFIABLE)

Bidders must complete the fixed-price milestone table below and disclose all recurring software or cloud consumption assumptions.

| Milestone / Cost Category | Deliverable & Acceptance Gate | Fixed Fee / Annual Cost (USD) | Estimated Duration (Weeks) |
|---|---|---|---|
| **Phase 0: Discovery & AST Code/Schema X-Ray** | Verified inventory, dead-code manifest, core SQL fan-out map, and final blueprint | `$[Insert]` | `[2 - 3 Weeks]` |
| **Phase 1: Target Environment & Automated Uplift** | Provisioned target stack, schema migration, and core business logic conversion | `$[Insert]` | `[4 - 8 Weeks]` |
| **Phase 2: UI, Integrations, Reporting & UAT** | Completed application/portal screens, runtime reports, AOP templates, and UAT sign-off | `$[Insert]` | `[3 - 6 Weeks]` |
| **Phase 3: Production Cutover & Hypercare** | Rehearsed cutover, reconciliation sign-off, documentation, and 30-day hypercare | `$[Insert]` | `[2 - 3 Weeks]` |
| **Optional: Annual Managed Services / Support** | 24x7 monitoring, patching, DBA performance tuning, and quarterly enhancements | `$[Insert / yr]` | `[12 Months]` |

---

## SECTION 6: PROPOSAL EVALUATION SCORECARD (MODIFIABLE)

| Evaluation Criterion | Weight (%) | Description |
|---|---|---|
| **1. Technical Architecture & Automation Tooling** | `35%` | Depth of AST automation, query fan-out rationalization, database/cloud architecture, and zero lock-in. |
| **2. Verifiable Production Experience & References** | `25%` | Proven track record delivering identical `.NET WinForms & WebForms to Oracle APEX` engagements with measurable outcomes. |
| **3. Cutover Safety, Testing & Compliance** | `20%` | Rigor of data reconciliation, automated regression testing, security/compliance controls, and rollback safety. |
| **4. Commercial Value & Total Cost of Ownership (TCO)** | `20%` | Transparent fixed-fee milestone pricing and 3-to-5 year software/cloud licensing savings. |
| **TOTAL** | **`100%`** | |

---
*Template Reference: `VNA-RFP-006` | Companion Portal: https://dotnet-winforms-to-apex.web.app/ | This site is designed by Viscosity.AI*