California publishes its state IT contract pipeline in public, by name, one to three years before the RFP exists. The California Department of Technology’s PAL IT Project Proposal Tracking list shows every reportable state IT project moving through approval, with the department, project number, project name, criticality rating, and current stage. As of September 2026 it held 58 active proposals. If you sell technology to the State of California and you are finding these deals on Cal eProcure, you are meeting them at the end.
Quick answer: Watch the PAL tracker, not the bid board. A project sitting in Stage 1 is 18 to 36 months from solicitation. A project in Stage 3 is having its RFP written right now, and by then the requirements are already set.
How does California actually buy IT?
Every reportable state IT project clears four gates before anyone can bid on it. The framework is the Project Approval Lifecycle, defined in Statewide Information Management Manual Section 19, and each stage produces a document CDT must approve before the next stage begins.
| PAL stage | What the department produces | Typical duration | What it means for you |
|---|---|---|---|
| Stage 1: Business Analysis | S1BA. Business problem, drivers, statutes, stakeholder impact, objectives | Varies | The need is real and funded enough to write up. No solution named yet. |
| Stage 2: Alternatives Analysis | S2AA. Market research, three viable alternatives, cost benefit proposal, roadmap, acquisition strategy | About 9 months | The window that decides the solution shape. Market research happens here. |
| Stage 3: Solution Development | S3SD. Business requirements and the actual procurement documents, developed with CDT’s statewide technology procurement office | About 3 months | The RFP is being written. Requirements are hardening. |
| Stage 4: Project Readiness and Approval | S4PRA. Rebaselined cost, schedule, scope, vendor negotiations, contract signature | Varies | Solicitation is out or awarded. |
Full PAL approval runs 18 to 36 months for most projects. Former state CIO staff and consultants working inside the process argue the practical figure is three to five years for large modernizations. Either number tells you the same thing. California state IT contracts are the slowest-telegraphed opportunities in the state, and the telegraph is public.
Which California IT projects go through CDT approval, and which do not?
A project is reportable to CDT, and therefore lands on the public tracker, when it meets any one of four criteria in State Administrative Manual section 4819.37:
- Starting the project depends on a decision made during development or enactment of the Governor’s Budget.
- The project is required by legislative mandate or is subject to special legislative review under budget control language.
- The anticipated cost exceeds the department’s project cost delegation assigned by CDT.
- CDT or the department’s Agency Information Officer has flagged criticality or risk factors warranting continued CDT oversight.
That third criterion is the one that decides visibility. Under SAM 4819.39 and SIMM 15, CDT assigns each department a project cost delegation tier: $500,000, $1 million, $2 million, or $5 million. Anything at or below a department’s tier is approved internally and never appears on the PAL list. A $900,000 system at a Tier 1 department is public a year out. The same system at a Tier 4 department is invisible until the solicitation posts.
Practical consequence: build two lists. Tier-heavy departments you monitor through the PAL tracker, and lower-delegation departments where you have to work relationships and Cal eProcure alerts because the pipeline never surfaces.
What is actually in the California IT project pipeline right now?
The 58 active proposals on the tracker in September 2026 skew hard toward one agency and one stage.
| Agency | Active PAL proposals |
|---|---|
| Health and Human Services (HHSA) | 22 |
| Environmental Protection (EPA) | 9 |
| Transportation (TRANS) | 8 |
| Business, Consumer Services and Housing (BCS) | 5 |
| Elected officials and constitutional offices | 4 |
| General Government | 3 |
| Education (CDE) | 3 |
| Government Operations (GovOps) | 2 |
| Natural Resources (NRA) | 1 |
| Labor and Workforce Development (LWDA) | 1 |
By stage, 39 proposals sit in Stage 1, 8 in Stage 2, and 9 in Stage 3. That distribution is the whole strategic picture. Nine projects are having their RFPs drafted this quarter. Thirty-nine are still at the business-case stage, which is where a vendor can still influence what “good” looks like before requirements exist.
Named Stage 3 proposals in September 2026 included the Water Board’s Water Technical Access Portal (WaterTAP), Caltrans’ California Advanced Transportation Management System (CATMS) and Enterprise Data Governance Technology Solution (EDGTS), CDPH’s Centralized Application Branch Online project, the Department of Cannabis Control’s Laboratory Information Management System Replacement and Cannabis Systems Integration, the Board of Equalization’s IT Modernization, CARB’s Building Embodied Carbon Reporting Tool, and the Board of Pilot Commissioners’ IT Modernization Project. Those are named solicitations in progress, published by the state, months before they hit a bid board.
How big are California state IT contracts?
Large, and concentrated. CDT’s approved project tracker listed 35 projects in flight in September 2026 with a combined total project cost of $7,413,355,086.
| Project | Department | Total project cost |
|---|---|---|
| CWS-CARES (child welfare) | CHHS Agency | $1,711,011,443 |
| California State Payroll System (CSPS) | State Controller | $1,240,698,857 |
| EDDNext ICMS/IDM | Employment Development Department | $817,579,560 |
| Enterprise Data to Revenue 2 (EDR2) | Franchise Tax Board | $801,537,129 |
| Digital Experience Platform (DXP) | Department of Motor Vehicles | $767,138,511 |
| Continuum Electronic Health Record | Department of State Hospitals | $460,356,108 |
The tail matters more than the head for most bidders. The same list includes the High-Speed Rail Inspector General’s audit software at $1.27 million and the Department of Managed Health Care’s CAP Modernization at $11.25 million. Mid-size California state IT contracts in the $5 million to $50 million range are where a firm without a nine-figure past-performance record can genuinely compete.
Do these projects succeed, and why does that matter to a bidder?
CDT publishes outcomes, and the numbers are blunt. Its statewide IT project outcomes page covering 2021 through 2025 lists 31 completed projects worth roughly $1.06 billion: 16 successful, 14 challenged, 1 failed. CDT defines successful as delivered within 10 percent of cost, schedule, and scope targets while delivering the expected value.
Slightly better than a coin flip. That is not a reason to avoid California state IT work. It is a reason to write proposals that speak directly to the failure modes the state has publicly catalogued. When 45 percent of completed projects are challenged, an evaluation panel is primed to reward a bidder who names the schedule risk, the data conversion risk, and the organizational change risk in specific terms, and who prices realistically instead of buying the job.
Six of the 35 active projects carried a red Independent Project Oversight Report rating in September 2026, including Fish and Wildlife’s Environmental Review and Permitting Project, Cal/OSHA’s Data Management System, CalRecycle’s Integrated Information System, CWS-CARES, and CERS NextGen. Red-rated projects generate remediation work, replacement solicitations, and staff augmentation buys. Watch them.
What do the AI rules mean for IT vendors selling to California?
If any part of your offering touches generative AI, you have a compliance layer that did not exist three years ago.
Every GenAI procurement, regardless of assessed risk level, must include a completed SIMM 5305-F Generative Artificial Intelligence Risk Assessment, updated August 2025. Departments also run a SIMM 5310-C Privacy Threshold Assessment. The department fills these out, but it cannot fill them out without vendor-supplied detail on data flows, training data, model provenance, and human oversight controls.
On top of that, Executive Order N-5-26, signed March 30, 2026, directed DGS and CDT to develop new AI vendor certification criteria within 120 days, covering safeguards against illegal content, harmful bias, and civil rights violations. Legal analysts describe it as California using procurement power to set AI policy rather than waiting on statute.
The practical move: assemble a standing AI disclosure package now. Data flow diagram, model and training data provenance, bias testing methodology, human-in-the-loop controls, retention and deletion terms. Firms that can hand that to a department in week one of a procurement will clear the risk assessment while competitors are still drafting it.
How should a capture team work the PAL pipeline?
Match the play to the stage.
| Stage the proposal is in | Your move | What you cannot do |
|---|---|---|
| Stage 1 | Get on the department’s radar. Respond to RFIs, attend forecast and industry days, publish reference material on the problem. | Nothing to bid on. Do not pitch a product. |
| Stage 2 | This is the market research stage. Respond to every RFI and market survey the department issues. Alternatives and acquisition strategy are decided here. | Do not expect requirements to be shareable. Respect the department’s communication rules. |
| Stage 3 | Finalize teaming, subcontractors, and past performance. Confirm your certifications and contract vehicles are current. | Requirements are largely locked. Influence has closed. |
| Stage 4 and solicitation | Bid. Watch the Cal eProcure posting and the protest clock. | Do not start capture here and expect to win. |
Two housekeeping items that decide whether you can even transact. First, confirm your vehicle. Many California state IT buys route through a Leveraged Procurement Agreement rather than an open solicitation, and the IT Consulting and TDDC master service agreements carry a $1,500,000 single-order limit including amendments unless a department’s delegated authority says otherwise. If you are not on a vehicle, CMAS is usually the fastest route in.
Second, know the IT protest clock, because it is shorter than you think. Under Public Contract Code section 12102.2, an IT protest must be filed within five working days of the notice of intent to award, with the detailed written statement due to DGS within 10 calendar days. Miss the five-day window and the protest is gone. Our California bid protest guide walks the full timeline.
How FindBids fits
Pipeline visibility and bid triage are different problems. The PAL tracker tells you what is coming. It does not tell you which of the hundreds of California IT solicitations actually posting this week are worth your proposal team’s hours.
FindBids reads what your business actually does and matches it to live California contracts by meaning rather than keywords, across 400+ state and local procurement portals in one daily feed. Vector semantic search compares your company and service description against live bid titles, then Gemini Pro runs document-level analysis and scoring on the shortlist. An automated agent pulls the full bid documents down from gated portals that normally require a manual login, so a solicitation posted behind a registration wall at a department you have never worked with still reaches you with the attachments intact. Legacy tools make you pick NAICS codes and keywords, then leave you downloading documents by hand.
For teams working California state IT, that means the PAL tracker sets your two-year capture plan and FindBids catches the near-term solicitations, including the mid-size buys and the staff augmentation task orders that never make a pipeline forecast.
Want to see it? Send us a description of what your company does and we will send back a list of live California bids that match you right now, free.
Frequently asked questions
Where can I see upcoming California state IT contracts before they are advertised?
On CDT’s public PAL IT Project Proposal Tracking list at projecttracking.technology.ca.gov/PAL. It names every state IT project proposal currently in CDT approval with the department, project number, project name, estimated start date, criticality rating, and PAL stage. It carried 58 active proposals in September 2026. A companion page tracks 35 approved projects already underway worth $7.41 billion.
What is the California Project Approval Lifecycle?
The four-stage gate process every reportable California state IT project clears before procurement. Stage 1 Business Analysis defines the business problem, Stage 2 Alternatives Analysis picks a solution and sets acquisition strategy, Stage 3 Solution Development writes the solicitation package, and Stage 4 Project Readiness and Approval baselines cost and schedule before contract signature. It is defined in SIMM Section 19.
How long does the PAL process take?
Typically 18 to 36 months for full approval, with Stage 2 running about nine months and Stage 3 about three. Practitioners inside California government put the figure at three to five years for large modernizations. That interval is your capture window, not a delay to complain about.
Which California IT projects have to go through CDT approval?
Under SAM 4819.37, a project is reportable if it depends on a Governor’s Budget decision, is required by legislative mandate or special budget control language, exceeds the department’s assigned project cost delegation, or is flagged by CDT or the Agency Information Officer for risk or criticality. SIMM 15 delegation tiers are $500,000, $1 million, $2 million, and $5 million, so the same project can be public at one department and invisible at another.
Do AI vendors face extra requirements on California state contracts?
Yes. Every GenAI procurement must carry a completed SIMM 5305-F Generative AI Risk Assessment regardless of risk level, alongside a SIMM 5310-C Privacy Threshold Assessment. Executive Order N-5-26, signed March 30, 2026, directed DGS and CDT to develop AI vendor certification and disclosure standards on a 120-day clock, covering safeguards against illegal content, harmful bias, and civil rights violations.
How do I find the actual solicitation once a project reaches Stage 4?
State IT solicitations post on Cal eProcure. See our Cal eProcure guide for registration, UNSPSC coding, and alert setup. Non-delegated IT procurements are run or overseen by CDT’s statewide technology procurement office rather than the department’s own buyers, which changes who you talk to and how questions get answered.
Cover photo by Taylor Vick on Unsplash.
Frequently Asked Questions
Where can I see upcoming California state IT contracts before they are advertised?
On the California Department of Technology's public PAL IT Project Proposal Tracking list at projecttracking.technology.ca.gov/PAL. It names every state IT project proposal currently moving through CDT approval, with the department, project number, project name, estimated start date, criticality rating, and current PAL stage. As of September 2026 it carried 58 active proposals. A companion page tracks 35 approved projects already in flight worth $7.41 billion.
What is the California Project Approval Lifecycle?
The PAL is the four-stage gate process every reportable California state IT project must clear before it can be procured. Stage 1 Business Analysis defines the business problem, Stage 2 Alternatives Analysis picks a solution and sets the acquisition strategy, Stage 3 Solution Development writes the actual solicitation package, and Stage 4 Project Readiness and Approval baselines cost and schedule before contract signature. It is defined in Statewide Information Management Manual Section 19.
How long does the PAL process take?
Full PAL approval typically runs 18 to 36 months depending on project size, with Stage 2 the longest single stage at roughly nine months and Stage 3 around three months. Critics inside California government put the real end-to-end figure at three to five years for large projects. That gap is the capture window.
Which California IT projects have to go through CDT approval?
Under State Administrative Manual section 4819.37, a project is reportable to CDT if it depends on a Governor's Budget decision, is required by legislative mandate or special budget control language, exceeds the department's assigned project cost delegation, or is flagged by CDT or the Agency Information Officer for risk or criticality. Delegation tiers published in SIMM 15 run $500,000, $1 million, $2 million, and $5 million, so a $900,000 project is reportable at a Tier 1 department and delegated at a Tier 2 one.
Do AI vendors face extra requirements on California state contracts?
Yes, and the requirements are expanding. Every GenAI procurement must carry a completed SIMM 5305-F Generative Artificial Intelligence Risk Assessment regardless of risk level. Executive Order N-5-26, signed March 30, 2026, directed DGS and CDT to build new AI vendor certification and disclosure standards covering safeguards against illegal content, harmful bias, and civil rights violations, on a 120-day clock.