Enterprise Document Management System — Metro Regional Transit Authority

Apex Digital Solutions is pleased to submit this proposal in response to RFP MRTA-2026-0047 for the design, development, and implementation of a cloud-based Enterprise Document Management System (EDMS) for the Metro Regional Transit Authority. With over 12 years of experience delivering document management solutions to government agencies — including the Port Authority of New York & New Jersey, CalTrans, and the DC Metro — we bring deep domain expertise in transit authority workflows, compliance requirements, and multi-site deployments. **Our proposed solution** leverages Microsoft Azure Government Cloud with FedRAMP Moderate authorization, ensuring full compliance with MRTA's security requirements from day one. Our proprietary migration engine has processed over 8 million documents across previous engagements, with a 99.97% accuracy rate in OCR and metadata extraction. **Key differentiators of our approach:** - **Proven transit authority experience**: Successfully deployed EDMS for 3 regional transit agencies, each with 10+ office locations - **Intelligent document classification**: Our ML-powered classification engine auto-tags documents with 96% accuracy, reducing manual indexing effort by 80% - **Zero-downtime migration strategy**: Phased rollout across MRTA's 12 offices with parallel operation, ensuring no disruption to daily operations - **Native SAP/Maximo integration**: Pre-built connectors for SAP ERP and Maximo asset management, tested and deployed in production environments We propose a 14-month implementation timeline with a total investment of $985,000 for initial deployment and $156,000/year for ongoing maintenance — well within MRTA's stated budget parameters.

## Architecture Overview Our solution is built on a modern microservices architecture deployed on Azure Government Cloud (FedRAMP Moderate), providing the scalability, security, and reliability that MRTA requires. **Core Platform Components:** 1. **Document Ingestion Service** — Handles physical scanning (via TWAIN-compatible scanners), digital upload, email capture, and bulk import. Supports PDF, Word, Excel, images, and 40+ additional file formats. OCR processing uses Azure AI Document Intelligence with custom-trained models for transit authority document types (maintenance logs, inspection reports, procurement forms). 2. **Classification & Indexing Engine** — ML-powered auto-classification trained on 2.3M transit authority documents. Extracts metadata fields automatically: document type, date, author, department, project code, asset ID. Reduces manual indexing from 3 minutes/document to 15 seconds with human-in-the-loop verification. 3. **Search & Retrieval** — Azure Cognitive Search with full-text indexing across all document types. Supports natural language queries ("find all maintenance reports for Station 7 from Q3 2025"), faceted filtering, and saved search templates. Sub-second response time for queries across 5M+ documents. 4. **Workflow Engine** — Configurable approval routing supporting up to 5-tier chains as specified. Visual workflow designer for business users. Built-in templates for common transit workflows: procurement approval, change order review, safety incident documentation, and regulatory submission. 5. **Integration Layer** — Pre-built REST API connectors for SAP ERP (purchase orders, vendor master, asset records) and Maximo (work orders, asset hierarchy, maintenance schedules). Real-time bidirectional sync with conflict resolution. Additional connectors available for SharePoint, Outlook, and Teams. **Mobile Application:** - Native iOS and Android apps using React Native - Offline-capable with intelligent sync (field inspectors in subway tunnels/rail yards) - Photo capture with automatic GPS and timestamp metadata - Barcode/QR scanning for asset identification - Push notifications for approval requests and deadlines **Security Architecture:** - Azure Government Cloud (US data residency, FedRAMP Moderate) - Azure Active Directory SSO integration - Role-based access control (RBAC) with department and project-level granularity - AES-256 encryption at rest, TLS 1.3 in transit - Comprehensive audit logging (who accessed what, when, from where) - Data loss prevention (DLP) policies for sensitive documents **Availability:** - 99.97% uptime SLA (exceeding MRTA's 99.95% requirement) - Active-passive failover across Azure regions (East US / East US 2) - Automated daily backups with 30-day retention - Recovery Point Objective (RPO): 1 hour | Recovery Time Objective (RTO): 4 hours - Annual disaster recovery testing with MRTA participation

## Project Leadership **Sarah Chen, PMP — Project Director** (20 years experience) - Led document management implementations for CalTrans ($2.1M), Port Authority NY/NJ ($1.8M), and DC Metro ($950K) - Certified PMP, ITIL v4, Azure Solutions Architect - Former VP of Professional Services at OpenText - Averaged 97% client satisfaction rating across 14 government EDMS projects **Marcus Rivera — Technical Architect** (15 years experience) - Azure Government Cloud certified architect - Designed document management solutions processing 50M+ documents - Previously: Senior Architect at Microsoft Federal, Booz Allen Hamilton - Published author on federal cloud compliance frameworks - SOC 2 and FedRAMP audit experience **Dr. Lisa Wong — Data Migration Lead** (12 years experience) - Specialized in large-scale document migration (8M+ documents in single engagement) - Developed our proprietary OCR accuracy validation framework - PhD in Information Science, University of Maryland - Previously: Lead Data Architect at Iron Mountain Government Solutions ## Delivery Team | Role | Count | Key Qualifications | |------|-------|--------------------| | Senior Developers | 4 | Azure, .NET, React Native, 8+ yrs avg | | Integration Specialists | 2 | SAP, Maximo, REST APIs | | QA Engineers | 2 | Government compliance testing, Section 508 | | UX Designer | 1 | WCAG 2.1 AA, transit app experience | | OCR/ML Engineer | 1 | Azure AI, custom model training | | DevOps/Security | 1 | FedRAMP, Azure Government, CI/CD | ## Company Profile **Apex Digital Solutions** — Founded 2014, 85 employees - GSA Schedule holder (SIN 54151S) - SOC 2 Type II certified (annual audit) - 8(a) Business Development Program graduate - $12M average annual revenue (government sector: 68%) - 23 government EDMS implementations completed - Zero contract terminations or performance deductions

## 14-Month Implementation Plan ### Phase 1: Discovery & Design (Months 1-2) - Stakeholder interviews across all 12 MRTA offices - Current state assessment and document inventory - Requirements validation and gap analysis - Solution architecture design and security review - Document classification taxonomy development - SAP/Maximo integration mapping - **Deliverables:** Requirements Specification, Architecture Design Document, Project Plan ### Phase 2: Core Platform Build (Months 3-5) - Azure Government environment provisioning and security hardening - Core EDMS platform development (document store, search, RBAC) - Workflow engine configuration with MRTA-specific templates - Azure AD SSO integration and Section 508 compliance implementation - OCR model training on MRTA document samples - **Deliverables:** Development Environment, Core Platform (UAT-ready) ### Phase 3: Integration & Migration (Months 6-8) - SAP ERP bidirectional connector development and testing - Maximo integration build and validation - Physical document scanning pilot (2 offices, ~200K documents) - Digital document migration tooling and dry-run - Mobile app development (iOS + Android) - **Deliverables:** Integration Test Results, Migration Tool, Mobile App Beta ### Phase 4: Pilot Deployment (Months 9-10) - Pilot deployment at 3 MRTA offices (HQ + 2 regional) - User acceptance testing with 50+ end users - Performance and load testing (simulating 12-office scale) - Security penetration testing by independent third party - Training material development and train-the-trainer sessions - **Deliverables:** Pilot Deployment Report, UAT Sign-off, Training Materials ### Phase 5: Full Rollout (Months 11-13) - Phased rollout to remaining 9 offices (3 offices per wave, 1 wave/month) - Parallel operation period (legacy + new system) for each wave - Full physical document scanning and migration (~2.2M remaining) - On-site training at each office (2-day sessions) - **Deliverables:** Rollout Status Reports, Migration Completion Certificate ### Phase 6: Stabilization & Handoff (Month 14) - 30-day hypercare support with dedicated on-site team - Performance optimization based on production usage patterns - Knowledge transfer to MRTA IT team - Documentation finalization (admin guide, user manual, API docs) - Transition to ongoing support contract - **Deliverables:** Final Acceptance, Operations Handover Document **Key Milestones:** | Milestone | Target Date | Dependency | |-----------|-------------|------------| | Architecture Approved | Month 2 | MRTA review | | Core Platform UAT | Month 5 | — | | SAP/Maximo Integration Complete | Month 8 | API access from MRTA | | Pilot Go-Live (3 offices) | Month 10 | UAT sign-off | | Full Deployment Complete | Month 13 | Pilot success | | Final Acceptance | Month 14 | Stabilization complete |

## Reference Project 1: CalTrans Document Management Modernization **Client:** California Department of Transportation (CalTrans) **Contract Value:** $2,100,000 | **Period:** 2022-2024 **Contact:** James Morrison, IT Director — james.morrison@dot.ca.gov **Scope:** Cloud-based EDMS replacing 15-year-old FileNet system. Migration of 3.8M documents across 12 district offices. Integration with SAP ERP and CalTrans project management tools. **Results:** - Completed 2 months ahead of schedule - 99.97% OCR accuracy on scanned documents (target was 99%) - 73% reduction in document retrieval time (from 4.2 min to 1.1 min average) - FedRAMP Moderate certification achieved on first audit attempt - 94% user satisfaction rating in post-deployment survey --- ## Reference Project 2: Port Authority NY/NJ Engineering Records System **Client:** Port Authority of New York & New Jersey **Contract Value:** $1,800,000 | **Period:** 2023-2025 **Contact:** Diana Patel, VP Information Technology — dpatel@panynj.gov **Scope:** EDMS for 2.4M engineering drawings, inspection reports, and maintenance records across bridges, tunnels, airports, and transit facilities. Mobile app for field inspectors. Integration with Maximo asset management. **Results:** - 2.4M documents migrated with zero data loss - Mobile app adopted by 340+ field inspectors within 3 months - 85% reduction in paper-based processes - Passed independent security audit (SOC 2 Type II) with zero critical findings - Ongoing maintenance contract renewed through 2028 --- ## Reference Project 3: DC Metro Compliance Document System **Client:** Washington Metropolitan Area Transit Authority (WMATA) **Contract Value:** $950,000 | **Period:** 2024-2025 **Contact:** Robert Kim, Chief Compliance Officer — rkim@wmata.com **Scope:** Compliance-focused EDMS for FTA safety documentation, training records, and regulatory submissions. Automated workflow routing for safety incident reports. Section 508 accessible throughout. **Results:** - Reduced FTA compliance report preparation time from 3 weeks to 2 days - Automated safety incident documentation workflow (previously 100% manual) - Section 508 VPAT achieved AA conformance level - System handles 1,200+ document uploads per day during peak periods - 98% user satisfaction rating from compliance team

## Requirements Compliance Summary **Overall Compliance Score: 94%** **Mandatory Requirements: 100% (5/5 fully addressed)** | # | Requirement | Type | Status | Response | |---|-------------|------|--------|----------| | 1 | Cloud-based EDMS replacing legacy paper processes | Mandatory | Fully Compliant | Azure Government Cloud deployment with automated paper-to-digital pipeline. Multi-site architecture supporting all 12 offices with centralized management. | | 2 | Migration of 2.4 million existing documents | Mandatory | Fully Compliant | Proven migration methodology used on 8M+ documents across previous engagements. OCR processing via Azure AI Document Intelligence with custom-trained models. 99.97% accuracy rate. | | 3 | Role-based access control with Azure AD SSO | Mandatory | Fully Compliant | Native Azure AD integration with SAML 2.0/OIDC. RBAC with department, project, and document-level granularity. Supports MRTA's existing AD group structure. | | 4 | Automated workflow routing (up to 5-tier chains) | Mandatory | Fully Compliant | Visual workflow designer supporting unlimited approval tiers. Pre-built templates for transit authority workflows. Conditional routing based on document type, value, department. | | 5 | Full-text search across all document types | Mandatory | Fully Compliant | Azure Cognitive Search with sub-second response on 5M+ documents. Natural language query support, faceted filtering, saved search templates. Supports PDF, Word, Excel, images. | | 6 | Mobile application (iOS and Android) | Desirable | Fully Compliant | React Native app with offline capability. Photo capture, GPS metadata, barcode scanning. Optimized for field use in low-connectivity areas (tunnels, rail yards). | | 7 | SAP ERP and Maximo integration | Mandatory | Fully Compliant | Pre-built REST API connectors with bidirectional real-time sync. Tested in production environments at CalTrans (SAP) and Port Authority (Maximo). Conflict resolution included. | | 8 | 99.95% uptime SLA with disaster recovery | Mandatory | Exceeds | We offer 99.97% uptime SLA. Active-passive failover across Azure regions. RPO: 1 hour, RTO: 4 hours. Annual DR testing included. | | 9 | FedRAMP Moderate or equivalent security | Mandatory | Fully Compliant | Azure Government Cloud holds FedRAMP Moderate authorization. Our application layer is SOC 2 Type II certified. Independent penetration testing included in deployment plan. | | 10 | 5+ years government document management experience | Mandatory | Exceeds | 12 years experience, 23 completed government EDMS projects. Includes 3 transit authority implementations directly comparable to MRTA's requirements. | | 11 | SOC 2 Type II certification | Mandatory | Fully Compliant | Current SOC 2 Type II certification (last audit: October 2025). Annual re-certification maintained. Audit reports available upon request. | | 12 | Section 508 accessibility compliance | Mandatory | Fully Compliant | VPAT with AA conformance level. Tested with JAWS, NVDA, and VoiceOver. WCAG 2.1 AA compliance verified by third-party accessibility auditor. | | 13 | US data residency | Mandatory | Fully Compliant | Azure Government Cloud data centers in Virginia and Texas. All data processing and storage within continental US. No offshore access to production data. | | 14 | 24/7 support with 2-hour response SLA | Mandatory | Fully Compliant | US-based NOC staffed 24/7. Severity 1: 30-min response. Severity 2: 2-hour response. Dedicated MRTA support channel via phone, email, and portal. | ## Pricing Summary | Component | Cost | |-----------|------| | Initial Implementation (14 months) | $985,000 | | Annual Maintenance & Support (Year 1) | $156,000 | | Annual Maintenance & Support (Years 2-5) | $156,000/year | **Total 5-Year Cost of Ownership: $1,765,000**