Ordinance No. 15,786 ORDINANCE NO. 15,786
AN ORDINANCE OF THE CITY COUNCIL OF THE CITY OF BAYTOWN, TEXAS,
AUTHORIZING A PROFESSIONAL SERVICES AGREEMENT BETWEEN
HOUSTON HIDTA AND RECRUITFUL LLC,FOR CREATING AND MAINTAINING
A LICENSE PLATE READER("LPR")DATABASE; AUTHORIZING PAYMENT BY
THE CITY OF BAYTOWN IN AN AMOUNT NOT TO EXCEED TWO HUNDRED
EIGHTY-THOUSAND TWO HUNDRED EIGHTY-SEVEN AND NO 100 DOLLARS
($280,287.00); MAKING OTHER PROVISIONS RELATED THERETO; AND
PROVIDING FOR THE EFFECTIVE DATE THEREOF.
*************************************************************************************
BE IT ORDAINED BY THE CITY COUNCIL OF THE CITY OF BAYTOWN,TEXAS:
Section 1: That the City Council of the City of Baytown, Texas, hereby authorizes and directs
the City Manager to execute a Professional Services Agreement between Houston HIDTA and Recruitful
LLC,for creating and maintaining an LPR database. A copy of said agreement is attached hereto as Exhibit
"A" and incorporated herein for all intents and purposes.
Section 2: That the City Council of the City of Baytown authorizes payment to Recruitful LLC,
in an amount not to exceed TWO HUNDRED EIGHTY-THOUSAND TWO HUNDRED EIGHTY-
SEVEN AND NO/100 DOLLARS ($280,287.00) for professional services in accordance with the
agreement authorized in Section 1 hereinabove.
Section 3: That the City Manager is hereby granted general authority to approve a decrease or
an increase in costs by FIFTY THOUSAND AND NO'100 DOLLARS ($50,000.00) or less.
Section 4: This ordinance shall take effect immediately from and after its passage by the City
Council of the City of Baytown.
INTRODUCED, READ and PASSED by thaDON;C;APETILLO,
. City Council of the City of
Baytown this the 25`h day of April, 2024.
A EST: pY7c�o�!.1
ayor
0 0
A ELA C SON,C I'erk :a
tp
ar�V
APPROVED S O FO ' of
�L
SCOTT L OND, City Attorney
R:Vance Hinds Ordinances\2024\2024.04.25\Professional Services Agreement for Houston HIDTA for Recruitful LPR.docx
E-A-D Recruitful LLC
r e c r u i t f u l 401 E. Las Olas Blvd.Suite 130
Fort Lauderdale, FL 33301
EXHIBIT A
STATEMENT OF WORK
This is a Work Order("STATEMENT OF WORK")is attached to and made part of the Consulting Services Agreement,
dated April 27, 2023 ("AGREEMENT') between Recruitful LLC, ("RECRUITFUL") which has offices at 401 E. Las
Olas Blvd.Suite 130, Fort Lauderdale FL 33301,and Houston HIDTA,("CLIENT')which has offices at 15311 Vantage
Pkwy W.,Suite 286, Houston,TX 77032.
Project Details
Project Name National License Plate Reader Platform-Phase 2&3
CLIENT Resource Manager Name Mike McDaniel(fmcdaniel@houstonhidta.net)
Total Project Budget $280,287.00
Start Date 04/01/2024
Project Description To deliver enhancements to the CLIENTS's National
License Plate Reader Platform.RECRUITFUL will apply 1
best practices in all phases of the project,from design to
deployment,ensuring the delivery of a fully integrated
SaaS solution.
Project Scope
• Phase 2-Platform Development
• Administrative Interface:Abilities for various roles to be able to create and maintain user accounts,
post communications,and run reports specific to their role. i
• Audit Reporting:Produce audit reports on user log on,search,and account activity.
• LPR Application Access Request:Allow users to request access through the LPR website.
• LPR Application"Self-Help"Password Reset:Allow users to reset their passwords using security
standards in place without requiring an administrator to Intervene.
• Two Factor Authentication:Require users to use Google Authenticator for 2FA when logging in to the
platform.
• Mongo DB Transition:Transition the application-side database to run on a standalone server in
CLIENT's AWS GovCloud environment.
• Production Database Transition:Refactor the application-side codebase to retrieve LPR data from
CLIENT's production database.
• Image Server Transition:Refactor the application-side codebase to retrieve LPR images from j
CLIENT's Image server. I
• Stress&Load Testing:Upon conclusion of the development and deployment updates the system will
have a series of stress and load tests run to get a better understanding of overall performance.
• User Interviews !
i
• Phase 2-Production Database i
• Database Development:Develop the production database follow guidelines set by Steve Paynter. !
• Transition Database:Transition the platform to utilize the production database and sunset the
connection to the test database.
www.recruitful.com
Document Ref:WC78Z-T8TDI-CH8BK-3Y92A
Recruitful LLC
r e c r u i t f u l 401 E. Las Olas Blvd.Suite 130
Fort Lauderdale,FL 33301
Project Scope(Cont'd)
I
• Phase 3-Production Database i
i
• Security-CJIS Updates:
• Password Simple:Aligned to in the CJIS documentation on Minimum Password Complexity,
Rotating Passwords&Unique Passwords Only.
• Limit Failed Login Attempts:Requires enforcing a limit of 5 invalid failed logins and then locking
the account for 10 minutes,allowing an admin to unlock the account during the 10-minute period.
• Confirm System Use on Login:Requires that a message is displayed to users when they login
telling them what the acceptable use of the system Is,and requiring they confirm the message I
before getting into the app.
• Logging Required Events:Requires that our app logs all the required events(outlined in the doc,
things like successful and unsuccessful logins,password changes,etc.)We currently log events but
we are missing a few.
• Ability to Rollback:Requires the ability to rollback changes.
• Automatic Patch Updates:Automatically with patches without a human having to do anything
manually.
• Identifier Management:Disable users after a specified period of Inactivity.
• Session Lock:The information system shall prevent further access to the system by Initiating a
session lock after a maximum of 30 minutes of inactivity,and the session lock remains in effect until
the user reestablishes access using appropriate identification and authentication procedures.
• Security Alerts and Advisories:Setup 3rd party software to handle automatic security scans and
alerts.
I
• Security-Infrastructure Updates:
• Build&Set Up CVCD Infrastructure:To maintain the current site and allow for automatic
deployments in the future.
• Migrate SSH Security Keys to Cloud:Remove SSH security keys from the developer's i
environment to a secure cloud storage.
• Centralized Logging-App:Setup centralized logging for the application in the AWS Cloud I
infrastructure.
• Centralized Logging-Database:Setup centralized logging for the database in the AWS Cloud
Infrastructure
• User Onboarding Process
• Admin Invites locks user to the Invited org:A user cannot change their organization when they I
are requested to join the platform by an organization admin. !
I
i
• Training 1
• 20 Hours New User&Admin&Training Material:20 Hours of new user training&create material
for User Guides on How to Search for a License Plate&User Requested Access
• AWS Deepdive+Best Practices:Recruitful team to give the HIDTKs Steve Painter a deep dive
training and best practices overview of the AWS platform. '
• UAT&Load Testing
• Miscellaneous Expenses }
www.recruitful.com
Document Ref WC78Z-T9TDI-0H89K-3Y92A
Recruitful LLC
r e c r u i t f u l 401 E. Las Olas Blvd.Suite 130
Fort Lauderdale, FL 33301
• Phase 4-Alerting
• Alerting Frontend(User+Admin)-Create a user friendly interface for where the user can setup their
alerts and an admin page to adjust the various settings of the altering feature.
• Alerting Backend(DB-Logic+Failure Handling)-Develop a robust backend to handle alerts and i
failures.
• Duplicate Alert Monitoring(+Notification)-Develop a system share duplicate alerts and notify users
of similar alerts.
- Phase 4-Services Status
• Develop Endpoints for Status-The endpoint where users can get updates on the status of the j
HIDTALPR.net system.
• Develop Services Status Page-Integrate 3rd party alerting software to drive alerts based on setup.
• Phase 4-Notification Center
• Email Engine-Send Mass Messages to Users and/or Orgs
• Notification Center -Alerts,Access Requests,. Duplicate Alert+Toggle for email
• Phase 4-Streaming
• Streaming ELSAG Data-Develop a prototype to mimmic the production environment except the data
is streamed via ELSAG APIs rather than stored on the production database.
Invoicing Details
• RECRUITFUL submits weekly invoices.
AUTHORIZED REPRESENTATIVES OF THE PARTIES HAVE EXECUTED THIS AGREEMENT AS OF THE
EFFECTIVE DATE BELOW TO EXPRESS THE PARTIES'AGREEMENT TO ITS TERMS.
Recruitfu/LLC
CLIENT Name Company Name
/,"olo,."i---
Signature Signature
Amit Dharmani&Managing Director
Printed Name&77t/e Printed Name&77tle
03/26/2024
Date Date
www.recruitful.com
Document Ref:.WC78Z TSTDI-CH8SK-3Y92A