PADOH ERP Gateway

Each vendor is responsible for submitting their response for approval with a permittee sponsor included.

Full approval is granted after following five mandatory sequential steps:

1. Vendor submits information in its entirety on behalf of ONE Permittee that wishes to benefit from that vendor
   1. Vendor MUST have a client sponsor in order to submit a response
   2. Permit Number & Program Defined Name must be listed on form
   3. See Section A under “Prerequisites to Approval” for further detail on how to enter a submission
   4. See Section B under “Prerequisites to Approval” for further detail on the mandatory vendor requirements that must be met prior to submission
2. An oversight committee compromised of staff from Leaf Data Systems will review the information
3. If the vendor is authorized by the committee, Leaf Data Systems will grant approval
4. Vendor agreement is provisioned to integrate
   1. See Section C under “Prerequisites to Approval” for further detail

Note: If vendor wishes to engage further with other permittees, permittees are required to send a copy of the approval with the vendor cc’d to pagatewaysupport@leafdatasystems.com.

The only way to submit a request is by following the steps as listed below.

All requests must be made by vendors with a permittee sponsor. No requests by permittees or by vendors without permittee sponsors will be accepted.

1. Navigate to bottom of this page to review application requirements
2. Complete the form in its entirety, including providing relevant information on your permittee sponsor
   1. Note: only one permittee sponsor per submission is allowed
3. Receive an automated email confirming your submission
4. Receive a follow up email from our team outlining one of the following options:
   1. A request for more information
   2. An approval by Leaf Data Systems
   3. A denial, complete with decision reasoning

To gain access to the PADOH ERP Gateway, a vendor must meet all of the following requirements without exception:

• SOC1 and/or SOC2 Type I (Type II preferred, but not required)
• Follows the guidelines and standards of FedRAMP
• Virus protection
• Roll and permission restrictions
• Data encryption
• NIST 800-53 Moderate Control (National Institute of Standards and Technology 800-53)
• Follows all practices listed on https://www.oa.pa.gov/Policies/Pages/itp.aspx
• Transaction Per Second limits in place

Once approved you will receive access to the appropriate gateway documentation.

Vendors must adhere the following obligations and restrictions without exception:

• No Personal Identifiable Information (PII) data shall be exchanged or brokered
• PADOH Leaf Data System will and must remain the system of record for all state compliance
• PADOH Leaf Data System will and must remain the reporting system of record for all state compliance
• Vendors shall not use other means such as user accounts or other front end interface access to subvert the restriction of data available in the Gateway

Contact our team directly for pricing.

If you have further questions, please contact Support at  pagatewaysupport@leafdatasystems.com.