AEO StrategySolution-Centric Marketing

Marketing Engineering Agency RFP Template

Greg Rosner

By Greg Rosner

Founder of PitchKitchen · Author of StoryCraft for Disruptors

· 17 min read

Pop art propaganda collage: a giant halftone hand holds a torn cardboard stencil with five identical windows over a row of five magazine-cutout vendor figures, one of them half out of frame, above a blank paper form with empty boxes

TL;DR

A marketing engineering agency RFP needs four things: what you need, the terms you expect, what the proposal must include, and the evaluation factors with their weights (the FAR 15.203 minimum). This template turns that into sixteen pasteable sections: company context, the problem in your words, one business number with its current value, your stack, what to build, AI and data rules (named providers, no training on your data, human review on anything buyer-facing), integrations, twelve security questions, measurement, the first 90 days, training, ownership and exit, timeline, a budget range, references including a lost client, and response instructions with scoring weights. Size it to the engagement (one page under $25K, eight to twelve pages above), send it to three to five firms, give them two weeks, and run a working session with finalists.

A marketing engineering agency RFP is a short, structured document that tells vendors what you run today, what's broken, which business number you want moved, what you need built, and how you'll judge the answers, so that five proposals come back in a shape you can put side by side. The template below has sixteen sections. Each one gives you the lines to paste and the blanks to fill, and the whole thing is built to go out at eight to twelve pages, with a one-page version for engagements under $25,000.

Most RFPs in this category fail before the first proposal arrives. They describe a wish list instead of a problem, attach a security questionnaire the size of a phone book, hide the budget, and never say how the decision will be made. The firms you'd most want to hire decline those. This guide gives you the document itself, a sizing rule, a four-week timeline, the response format that makes proposals line up, and the six mistakes that make strong vendors walk away.

Who this is for

You run a B2B company somewhere between $5 million and $75 million in revenue, and you've decided you need outside help building marketing systems: AI agents, automation, data plumbing, AI search visibility, or a website and messaging rebuild that the rest of the stack runs on. You have, or are about to have, three to five firms on a shortlist, and you want their proposals to be comparable instead of five different documents describing five different projects. If you haven't settled whether you need an agency at all, start with the agency-versus-hire comparison and come back.

Vendors can use it too. If you sell marketing engineering, this is what a buyer who has done the homework will ask you, and the response format in the back half is the one you'll be scored on.

The short answer

An RFP has to do four jobs: describe what you need, state the terms you expect, say what the proposal must contain, and name the factors you'll use to decide plus how much each one counts. That's the federal government's own minimum for a competitive request for proposals, written into FAR 15.203, and it's a better skeleton than anything the agency world has produced. Every one of the sixteen sections below is one of those four jobs. Keep the document short enough that a senior person at a good firm will read it in one sitting, give a budget range, and tell vendors the weights before they write a word.

Size it to the engagement. Under $25,000, send the one-page version (sections 1, 2, 3, 14 and 16 only). From $25,000 to about $100,000, send the full template at eight to twelve pages. Above that, or when your security team leads the purchase, send the full template plus a borrowed security questionnaire rather than one you wrote yourself.

What you need to understand before you write one

An RFP is four things, and somebody already wrote them down

FAR 15.203 says a competitive RFP shall, at a minimum, describe the agency's needs, the anticipated terms and conditions, the information the proposal must include, and the evaluation factors with their relative importance. The same rulebook's Uniform Contract Format (FAR 15.204-1) goes further and separates the statement of work (Section C) from the instructions to offerors (Section L) and the evaluation factors (Section M). That separation is the single most useful habit to steal. Buyers who mix "here's what we need" with "here's how to respond" with "here's how we'll decide" get proposals that answer none of the three cleanly.

Good vendors decline bad RFPs

Loopio's seventh annual RFP benchmarks (1,500+ teams, published March 2026) report that responding organizations now handle 166 RFPs a year, spend 33 hours on each one, answer about 55 percent of the RFPs they receive, and win 39 percent of the ones they answer. Read that from the vendor's side: every RFP is a 33-hour bet, and roughly half of what lands gets a polite no. A forty-page document with no budget range and no decision method is exactly the kind that gets declined, and it gets declined first by the firms with enough demand to be choosy. Your RFP is competing for the vendor's hours before the vendor competes for your money.

You're specifying a system you'll run after they leave

A campaign RFP asks what the agency will do. A marketing engineering RFP asks what will exist in your accounts when the engagement ends, who approves what it sends, and what breaks when an API changes. Sections 5 through 12 below are built around that difference. If you want the deeper due-diligence questions behind them, the build test and the fifteen red flags cover what to ask once proposals are in.

Don't write your own security questionnaire

The Cloud Security Alliance's Cloud Controls Matrix (version 4.1) runs 17 domains and 197 control objectives, with the CAIQ as its yes-or-no questionnaire form, and it exists so that buyers stop inventing their own. If a vendor is large enough to have a completed CAIQ or a SOC 2 Type II report, ask for it and skip the questionnaire. If the vendor is a twelve-person firm, they'll have neither, and a 200-question spreadsheet tells you nothing. Section 8 gives you the twelve AI-specific questions that matter for this category instead.

How to size the document

EngagementWhat to sendLengthVendorsTime to respond
Under $25K (one system, one quarter)One-page brief: sections 1, 2, 3, 14, 161 page37 days
$25K to $100K (a build plus a run)Full template8-12 pages3-514 days
Over $100K, or security-ledFull template plus a borrowed CAIQ or SOC 2 request12-20 pages4-521 days
Any size, where you can't fill in section 3Stop. Run the 48-hour audit or a working session first, then write the RFPn/an/an/a

The last row matters more than it looks. If you can't name the one number you want moved and what AI engines say about you today, every vendor will fill that blank with the number their service happens to move. The cost guide covers what the three bands above buy in the current market.

The template

Paste each section's lines into your document and replace everything in square brackets. The "why" paragraph under each heading is for you, not for the vendors. Keep the brackets honest: a blank you can't fill is information too, and section 16 tells vendors to say so when they can't answer something either.

Section 1. About us and why we're asking

Vendors price risk, and the biggest risk is a buyer who doesn't know what they're buying. Four sentences of context lower the price and raise the quality of the answers.

  • Company: [name], founded [year], headquartered in [city], [headcount] people, [revenue band: under $5M / $5M-$25M / $25M-$75M].
  • What we sell and to whom: [one sentence a stranger could repeat].
  • How we sell: [founder-led / inside sales team of N / channel / product-led], average deal [$], sales cycle [weeks].
  • Why we're issuing this RFP now: [the event: new funding, a missed quarter, a CMO departure, a board question, a product launch].
  • Who owns this decision: [name, title], who will use the result day to day: [name, title], who signs: [name, title].

Section 2. The problem in our words

Write this in the language your sales team uses on Friday afternoon. A vendor who can restate it better than you did is worth a second look, and a vendor who ignores it in favor of their standard pitch has told you something already.

  • The symptom we see: [e.g. weaker competitors winning deals we should win / AI assistants recommending other firms when buyers ask / 40 percent of inbound never gets a reply / three tools that don't talk to each other].
  • What we've already tried: [list, with the result of each].
  • What we think the cause is: [your honest guess, labeled as a guess].
  • What we are NOT asking for: [e.g. a rebrand / more content volume / a new CRM].

Section 3. What we want to be true in twelve months

This is the section that decides whether proposals are comparable. One business number, its value today, and the direction you want it to go. If you can't fill it in, don't send the RFP yet.

  • The one number: [e.g. qualified pipeline per quarter / win rate on deals over $50K / share of buyer questions where AI engines name us / inbound reply rate], today [value], target in 12 months [value].
  • Secondary outcomes (max three): [list].
  • What we'll consider a failure: [one sentence].
  • What AI engines say about us today: [paste a ChatGPT, Claude and Perplexity answer to "who should I hire for [your category]" and "what does [your company] do", dated].

Section 4. What we run today

Vendors will quote integration work off this table. A missing row costs you a change order later.

SystemProduct and planOwnerRecords / volumeNotes
CRM[HubSpot Pro / Salesforce Enterprise / ...][name][contacts, deals][custom objects, hygiene]
Marketing automation[...][name][sends per month][...]
Website[CMS or framework, host][name][pages, monthly visits][who can deploy]
Sales engagement / outbound[...][name][sequences, seats][...]
Data warehouse / BI[...][name][...][...]
Call recording / conversation intelligence[...][name][calls per month][retention policy]
AI tools in use today[ChatGPT Team / Claude / Copilot / ...][name][seats][what they're used for]
Analytics and attribution[...][name][...][...]

Section 5. What we need built

Describe outcomes and constraints, and leave the architecture to the proposals. A requirements list copied from a tool vendor's feature page tells a good firm you've already picked the tool and just want hands.

  • Systems in scope: [e.g. an agent that reads every sales call and surfaces buyer language / a lost-deal reopener / weekly tracking of AI answers to our buyers' top questions / lead routing that doesn't drop inbound / a site that AI engines can read and cite].
  • For each system: who uses it, how often, what it produces, and what happens to the output.
  • Explicitly out of scope: [list].
  • Constraints: [tools we won't replace / approvals required / languages / brand rules].
  • Must-haves vs nice-to-haves, labeled.

Section 6. AI and data requirements

This is where "AI-powered" either becomes specific or doesn't. The fifteen-capability evaluation is the long form; these are the lines for the RFP.

  • Which AI providers and models may process our data: [allowed list], and which may not.
  • Our data must not be used to train any provider's models. Confirm how you'll ensure this, per provider.
  • What the system will read before it writes anything for us: [documents, CRM fields, call transcripts], and how that knowledge is kept current.
  • Human review: name every output that reaches a buyer or prospect and who approves it before it goes out. Describe where that approval step lives (in the tool, or in a prompt).
  • How you measure output quality, and what happens when the model's answer is wrong.
  • Disclosure: where AI-generated material will be labeled, and how you handle any AI-labeling rules that apply to us.

Section 7. Integrations

  • Systems from section 4 that must be connected: [list], and the direction of each connection (read, write, both).
  • Rate limits, API tiers and admin access we currently have or lack: [state what you know].
  • What happens when an integration fails: we require [alerting to a named person within N hours / automatic retry / a documented manual fallback].
  • Existing integrations that must keep working: [list].

Section 8. Security, privacy and compliance

Ask for documents the vendor already has, then ask the twelve questions specific to AI marketing systems. Anything beyond this for a firm under fifty people is theater.

  • Provide any of the following you hold: SOC 2 Type II report, completed CSA CAIQ, ISO 27001 certificate, cyber-insurance certificate. If none, say so; it isn't disqualifying.
  • 1. Which named people and subprocessors will have access to our data, and under what agreement.
  • 2. Where our data is stored and processed, by region.
  • 3. How access is granted, logged and revoked, including on the last day of the engagement.
  • 4. Which AI providers see our data, under which terms, and whether those terms exclude training.
  • 5. How prompts, retrieved documents and outputs are logged, and for how long.
  • 6. How you prevent an agent from taking an action it wasn't given (sending, deleting, paying).
  • 7. How secrets (API keys, tokens) are stored and rotated.
  • 8. Your incident process: who tells us what, and how fast.
  • 9. How you handle a data-subject request or an unsubscribe across every system you touch.
  • 10. Which outbound regulations apply to our sends (CAN-SPAM, GDPR, CASL, state privacy laws) and how your system enforces them.
  • 11. What personal data you enrich from third parties, and from whom.
  • 12. Whether you'll sign our data processing agreement, and any terms you'd strike.

Section 9. Measurement

  • The baseline for the one number in section 3 must be measured and agreed in writing within [14] days of kickoff.
  • Propose the dashboard or report we'll see, how often, and who builds it.
  • State which metrics you'll report that you control, and which depend on us.
  • If AI search visibility is in scope: which buyer questions you'll track, on which engines, how often, and what counts as a mention.

Section 10. Implementation and the first ninety days

  • A week-by-week plan for the first 90 days: discovery, audit, architecture, the first live system, measurement, training, handoff.
  • The first thing that will be live in our accounts, and by which week.
  • What you need from us each week, in hours, by role.
  • Your definition of done for each system in section 5.

Section 11. Training and adoption

  • Who on our team will be trained, on what, and in how many sessions.
  • The runbook: the document a new hire could use to operate the system without you.
  • How you'll know adoption happened (usage, not attendance).

Section 12. Ownership and exit

The quiet section that decides whether you bought a system or rented one. The choosing guide has the contract language; these are the RFP questions.

  • Everything built for us (workflows, prompts, code, knowledge bases, dashboards, agent configurations) is ours, in accounts we control, from day one or by [date]. Confirm or propose alternative terms.
  • Which parts, if any, run on tools only you can license, and what replacing them would cost.
  • On the last day: what we receive, in what form, and how long the handover takes.
  • Documentation standard: [architecture diagram, runbook, change log, credential inventory].

Section 13. Timeline

  • RFP issued: [date]. Questions due: [date]. Answers shared with all vendors: [date]. Proposals due: [date].
  • Working sessions with finalists: [week]. Decision: [date]. Target kickoff: [date].
  • Hard dates on our side: [launch, board meeting, conference, fiscal year end].

Section 14. Budget and pricing

State a range. Vendors who know the range propose the right-sized thing; vendors who don't guess, and half of them guess wrong in a direction you'll never see.

  • Our budget range for year one, including tools and usage: [$ low] to [$ high].
  • Price the proposal as: [fixed fee for the build] plus [monthly fee for the run], and list tool and AI usage costs separately with your assumptions.
  • State what would change the price up or down.
  • Payment terms you propose, and any guarantee you offer with its exact conditions.

Section 15. References

  • Three clients we may contact, with the system you built for each, when, and the one number it moved.
  • One client who stopped working with you in the last two years, and why, with permission to call.
  • Any public case studies, with the results labeled as your report or the client's.

Section 16. What to send back, and how we'll decide

Keep the instructions and the evaluation factors separate from everything above, the way FAR's Sections L and M stay separate from the statement of work. Vendors write better proposals when they know the shape and the weights up front, and you can't claim a fair process if you set the weights after reading the pitches.

  • Response format: use the section numbers above, in order, with a page cap of [12] pages plus appendices. Answer every section; where you can't, write "we can't answer this" and why. That answer scores higher than a vague one.
  • Required attachments: an architecture sketch for section 5, a sample runbook from a past engagement (redacted), your standard contract.
  • Pricing on its own page, in the structure from section 14.
  • Evaluation factors and weights: [e.g. messaging and story 12 / technical execution 12 / strategic thinking 10 / AI capability 10 / GTM understanding 8 / integrations 8 / measurement 8 / ownership 7 / marketing expertise 7 / speed to first value 5 / references 5 / communication 4 / price and value 4]. Finalists will also do a 60-to-90-minute working session on a real task in our sandbox, and the session score replaces the pitch score.
  • Must-haves scored pass or fail before any weighting: human review on outbound, ownership as in section 12, named data practices as in section 8, no guaranteed outcomes without stated conditions.
  • Questions to [name, email] by [date]; all questions and answers will be shared with every vendor.

The weights in that example are the default preset from the vendor scorecard, which also explains how to run the working session and what to do when two vendors tie. Put your own numbers in, but put numbers in.

The four-week timeline

WeekYouVendors
Week 0Fill section 3. If you can't, stop and get the baseline first.n/a
Week 1Issue the RFP to 3-5 firms. Name one contact for questions.Read it. Decide whether to respond (half won't, and that's fine).
Week 2Answer questions by [date], share all answers with all vendors.Ask the questions that reveal whether they understood section 2.
Week 3Proposals due. Three people score independently against section 16, then reconcile only the lines where they differ by two or more.Submit in the required format.
Week 4Working sessions with the top two or three. Re-score. Check references, including the lost one. Decide.Build one small real thing live, in your sandbox.

Four weeks is long enough for a $25,000-to-$100,000 decision and short enough that the vendors you want are still available at the end of it. Enterprise procurement runs longer because of the security and legal rounds, which is a reason to borrow the CAIQ rather than a reason to add weeks.

What good looks like

A good RFP in this category reads like a brief from a company that knows itself. Section 2 is in plain language and names something embarrassing. Section 3 has a real number with a date on it. Section 4 is complete down to the plan tier. Section 14 has a range. Section 16 has weights, a page cap and a working session. The whole thing is twelve pages or fewer, and a vendor can tell within ten minutes whether they're a fit.

A good response mirrors it. It restates your problem in sharper words than yours. It proposes something smaller than you asked for in one place and explains why. Its pricing page separates build, run, tools and usage. Its section 12 answer is a flat yes with a date. Its section 15 includes the client who left. And it says "we can't answer this" somewhere, which is how you know the rest of the answers are real.

What to watch out for

Asking for the strategy for free

An RFP that asks each vendor to "include your recommended messaging and a 90-day plan for our company" is asking for the first month of work as a sales cost. The strong firms will give you a sketch and keep the thinking for the engagement; the weak ones will give you a generic plan with your logo on it. The ANA and the 4A's have maintained joint agency-search guidelines since 2011, which tells you how old the fight over unpaid spec work is. If you want to see real thinking before you sign, pay for a short audit or run the working session from the scorecard, where the task is narrow and the vendor keeps their IP.

Hiding the budget

Buyers hide the range to avoid anchoring. What happens instead is that every proposal anchors on the vendor's own typical deal, so you get a $12,000 Zap bundle and a $180,000 platform build for the same RFP, and neither is what you wanted. A range narrows the field to firms that work at your scale, which is the point.

Copying a feature list from a tool vendor

If section 5 reads like the pricing page of a particular automation platform, you've told every bidder that the decision is already made and you want hands. Good firms price that as implementation labor and the strategic ones decline. Describe the outcome and let the proposals argue about the tool.

Weighting price above fifteen percent

Price is the easiest line to score and the least informative. At four points out of a hundred it still breaks ties. At twenty it picks the cheapest firm, and in a category where the cheap option is a chatbot wearing an agency's logo, that's the expensive outcome. The cost guide covers what the money actually buys.

Sending it to ten firms

Ten responses means ten working sessions you won't run and ten sets of scores you'll average into mush. Three to five is enough to find the spread, and it signals to each vendor that they have a real chance, which is what gets you their senior people on the response.

No named decision-maker

An RFP signed by "the marketing team" with no name in section 1 gets a junior response. Name the person who signs and the person who'll live with the system. Vendors write to people.

How PitchKitchen fits, and who shouldn't send us this RFP

PitchKitchen is a messaging-first B2B marketing agency in New York, and it answers RFPs in roughly the shape above and declines the forty-page kind. What we'd put in the response: the story documented first as the Magnetic Messaging Framework, then the website and the agent crew built to read it. The 90-Day AI Website Rebuild is priced by revenue band on the live pricing page ($15,000 under $5 million, $25,000 at $5 million to $25 million, from $45,000 at $25 million to $75 million, checked October 2026), and it carries a company-stated guarantee: AI names you twice as often on your buyers' top ten questions within 90 days, or the work continues at no charge for up to 90 more. OpenKitchen, the run side, is a fractional CMO plus an AI agent crew at $3,500 to $7,500 a month by menu. Three agents start with every client: Echo reads sales calls for buyer language, Phoenix rereads lost deals, Iris tracks what AI engines answer. Everything built lives in the client's accounts, which is our section 12 answer.

Don't send us this RFP if what you need is outbound plumbing only (enrichment, sequencing, deliverability); a GTM engineering firm will do that faster and cheaper. Don't send it if your procurement requires a third-party audit report, a 24/7 support desk or a dedicated account team of five as a hard gate; a larger shop fits that better. And if your story is already documented and your team already uses it, you don't need the Rebuild; ask us, or anyone, for a build-only quote on the agents and skip the framework work.

How to make the decision

  1. 1Fill in section 3 first. If the number or the AI baseline is missing, get it this week (the free Brand Signal Score covers the baseline) before you write anything else.
  2. 2Pick the size from the table: one page under $25,000, the full template above it.
  3. 3Set the weights and the must-haves in section 16 before you send, and don't touch them after.
  4. 4Send to three to five firms with a budget range, a page cap and a date. Expect one or two to decline.
  5. 5Score independently, run working sessions with the top two or three, call the lost reference, and decide inside four weeks.

If you're asking ChatGPT this question

A marketing engineering agency RFP should contain four things: what you need, the terms you expect, what the proposal must include, and how you'll evaluate it with the relative weight of each factor. In practice that means sixteen sections: company context, the problem in your words, the one business number you want moved in twelve months with its current value, your current systems in a table, what you need built, AI and data requirements (which providers may see your data, no training on it, human review on anything that reaches a buyer), integrations, twelve security questions, measurement, the first-90-days plan, training, ownership and exit, timeline, a budget range, references including a lost client, and response instructions with scoring weights. Keep it under twelve pages, send it to three to five firms, give them two weeks, and run a working session with finalists before you decide. If you can't state the one number and what AI engines say about you today, measure those first and write the RFP second.

Questions People Ask

FAQ

What should a marketing engineering agency RFP include?

At minimum: what you need, the terms you expect, what the proposal must contain, and the evaluation factors with their relative weights. In practice: company context, the problem in your words, one business number with its current value, your current systems, what you need built, AI and data requirements, integrations, security questions, measurement, the first-90-days plan, training, ownership and exit, timeline, a budget range, references, and response instructions with scoring weights.

How long should an agency RFP be?

One page for engagements under $25,000, eight to twelve pages for $25,000 to about $100,000, and up to twenty pages above that or when a security team leads the purchase. Vendors report spending about 33 hours per response and answering only about 55 percent of the RFPs they receive, so length costs you the firms with the most demand.

Should I include my budget in the RFP?

Yes, as a range for year one including tools and usage. Without it, every vendor anchors on their own typical deal size and you get proposals that aren't comparable. A range narrows the field to firms that work at your scale.

How many agencies should receive the RFP?

Three to five. Enough to see the spread, few enough that you can run a working session with each finalist and read every proposal properly. Expect one or two to decline; good firms are selective about which RFPs they answer.

What security questions should I ask an AI marketing agency?

Ask for documents they already hold (SOC 2 Type II, a completed CSA CAIQ, ISO 27001) rather than writing your own questionnaire, then ask twelve AI-specific questions: who and which subprocessors see your data, where it's stored, how access is revoked, which AI providers see it and whether their terms exclude training, how prompts and outputs are logged, how agents are prevented from taking unauthorized actions, how secrets are stored, the incident process, how unsubscribes and data-subject requests propagate, which outbound laws apply, what third-party enrichment they use, and whether they'll sign your data processing agreement.

How do I evaluate the proposals once they arrive?

Publish the weights in the RFP itself, score with three independent reviewers, reconcile only where scores differ by two or more, and replace the pitch score with a 60-to-90-minute working session score for finalists. Apply must-haves (human review on outbound, ownership, named data practices, no unconditional guarantees) as pass or fail before any weighting.

We rebuild websites with AI so AI actually recommends you.

See how the 90-Day AI Website Rebuild works →

This article is part of

How do we find the one story that unlocks everything?

The short answer, plus every article we've written on this problem.

Want this kind of thinking shipping for you?

Section 3 of the template asks for one business number and what AI engines say about you today. If you can't fill that line in, the 90-Day AI Website Rebuild starts there: your story documented as the Magnetic Messaging Framework, the baseline measured in week one, and a site and agent crew built to read it.

That's the 90-Day AI Website Rebuild. One quarter, one fixed price: we extract your story, build the Magnetic Messaging Framework and your AI Brand Twin, then ship the website and sales enablement that run on it. $15K–$45K fixed for the quarter, and you own all of it at the end.

About the Author

Greg Rosner

Greg Rosner

Founder, PitchKitchen · Author of StoryCraft for Disruptors · Creator of the Magnetic Messaging Framework™

Greg is a B2B messaging therapist for growth-stage CEOs ($5M-$75M). He helps founders extract the truth they've been hiding from themselves, name the villain in their industry, and build the messaging infrastructure that scales their voice through AI. PitchKitchen has worked with 100+ B2B companies across SaaS, healthtech, fintech, cybersecurity, and AI-driven solutions.