RFP and vendor due diligence
If you are evaluating AI vendors against an RFP, an RFI, or a due diligence questionnaire, this page answers the standard requirements point by point. CloudNSite builds custom AI agents around your existing systems, deploys private LLMs for regulated data, puts human review and escalation paths into every production workflow, tests with evaluation suites, and sets code ownership in the agreement before build work begins, including a structure where you own the production source code, the prompt configurations, and the deployment runbooks. Pricing is published. There is no seat-based pricing and no vendor lock. Paid discovery comes first, at a fixed price of $999. Every answer below links to the page that defines it, in the same words, so you can verify each claim.
Review the requirements| Requirement in your RFP | Our answer | Defined at |
|---|---|---|
| Custom AI agents built on our existing systems | We build around your current stack. No replacement platform. | /workflow-automation |
| Private LLM deployment for regulated data | Models run inside an environment you control. Data does not leave it. | /solutions/private-ai |
| HIPAA or SOC 2 alignment | HIPAA-ready architecture with BAA scope confirmed in discovery. Controls mapped per workflow. | /solutions/hipaa-compliant-ai |
| Human review and escalation paths | Every production workflow names the decisions a human approves and where exceptions escalate. | /automation-builds |
| Evaluation and acceptance testing | Every build has a defined acceptance test. Operations-scale builds ship an evaluation and regression suite. | /automation-builds |
| Ownership of the work product | Ownership is set in the agreement before build work begins. By default CloudNSite owns and operates the codebase as a managed service. The agreement can instead be structured so you own the production source code, the prompt configurations, and the deployment runbooks. | this page, Ownership |
| No vendor lock-in | Build and operations are separate contracts and separate prices. Handover support is scoped into every contract. | /automation-builds, /managed-operations |
| Post-launch support | Managed Care from $1,500 per month. Managed Operations $4,000 to $7,500 per month. | /managed-operations |
| Transparent commercial terms | Published prices, one-time builds, no seat-based pricing, no platform fee. | /pricing |
| A scoped discovery phase before build | Current State Assessment: $999 fixed, 3 to 5 business days, two documents, a go or no-go recommendation. | /current-state-assessment |
We write custom code against the systems you already run: your CRM, EHR, ERP, ticketing, document stores, and phone system. There is no CloudNSite platform between you and your data. Typical delivery is 4 to 8 weeks. If your RFP says the vendor must not replace existing systems, we meet that requirement by default.
Regulated data can run on a private LLM deployment inside an environment you control, and the data does not leave that boundary. Healthcare architecture is HIPAA-ready: built to support a BAA and the associated controls, with scope confirmed during discovery. Controls map to the framework you already operate under: HIPAA, SOC 2, NIST, GLBA, or PCI. Compliance is a property of a specific deployment and its agreements, and we scope it upfront, not after the build.
Every production workflow defines which decisions require human approval and where exceptions go. Review points are written into the statement of work, not added after an incident. Operations-scale builds include permissions, human review, and audit trails as standard scope.
Every build ships against a defined acceptance test. Focused builds include workflow-specific evaluation. Operations-scale builds ship an expanded evaluation and regression suite that runs before releases. The suite transfers to you with the rest of the work product.
Ownership is set in the agreement before build work begins. By default CloudNSite owns and operates the codebase as a managed service, and the agreement can instead be structured so you own the production source code, the prompt configurations, the evaluation suite, and the deployment runbooks. Build pricing and operations pricing are separate pages because they are separate decisions. You can buy the build and run it with your own team, or keep us on to operate it under a monthly agreement. Both are normal. Handover support is scoped into every contract, so moving the system to your team or to a new vendor is planned, documented work. We do not disappear after launch, and we do not hold your code to keep a retainer.
After launch you choose. Managed Care, from $1,500 per month, covers bounded business-hours care. Managed Operations, $4,000 to $7,500 per month, owns production reliability and releases. Critical Managed Operations runs on a custom service schedule. Or your team operates the system with the runbooks and a scoped handover.
Prices are published. The Current State Assessment is $999 fixed. A Defined Automation Build starts at $8,000. Focused Custom Automation runs $12,000 to $20,000. Operations Automation runs $25,000 to $60,000. Business-critical work and work that needs private infrastructure get a custom proposal. Regulated work is quoted from the same published lanes. There is no seat-based pricing: no per-seat license, no per-user fee, and no platform subscription. A build is a one-time price. Managed service is one monthly price for the system, however many people use it.
Discovery comes before any build and has a fixed price. The Current State Assessment is $999, delivered in as little as 3 to 5 business days, and hands over two documents together: the current-state map of how the workflow runs today, and the Automation NSite with the proposed build, the architecture, and the proposal. It ends in a defensible go, no-go, or defer recommendation, and the $999 is credited toward an implementation SOW of $12,000 or more signed within 30 days. RFPs name this step Phase 0, paid discovery, or a discovery sprint; ours is the Current State Assessment. Organizations still deciding where AI should operate start instead with the AI Readiness + Governance Sprint, from $7,500.
We do not resell licenses or place contractors. We do not claim certifications we do not hold: HIPAA-ready describes the architecture, and compliance attaches to a specific deployment and its agreements. We do not quote a price for unassessed scope. We do not run more concurrent builds than a small senior team can deliver.
Shipped implementations by industry are at /case-studies, including healthcare, real estate, retail, and professional services work. Named principals lead delivery; they are listed at /about. To score us against your RFP, send it: book a free 30-minute AI Strategy Call at /book.
Book a free 30-minute AI Strategy Call