Integrations & security
The platform exchanges data with departmental systems over documented REST APIs and federated sign-on.
RFI 2027001 · §2.12 Integration, Hosting & Security
Connected systems
Configured by system administrators.
- Connected
Keycloak (OIDC / OAuth 2.0)
Administrator single sign-on
- Connected
People First / HR roster
Staff coordinator provisioning
- Connected
FDLE / Live Scan vendor
Level 1 & Level 2 background screening
- Not configured
MyFloridaMarketplace
Award & recognition procurement
- Connected
REST / Open API
Statewide dashboards & data exchange
- Connected
Twilio SMS gateway
Text check-in and reminders
Security posture
Represented for demonstration purposes.
- FedRAMP-authorized hosting in US regions, with data residency in the continental United States.
- TLS 1.3 in transit and AES-256 at rest; screening results stored in a restricted enclave.
- Multi-factor authentication required for all staff roles; volunteer accounts support MFA optionally.
- Role-based access with quarterly access reviews and automatic deprovisioning from the HR roster.
- Annual third-party penetration test and continuous vulnerability scanning.
- Nightly encrypted backups, 4-hour RTO, 1-hour RPO, and documented disaster recovery testing.
- Records retained and disposed per Florida GS1-SL retention schedules.