1.5.1-SSJ_Redacted.pdf

OFFICE OF ACQUISITION MANAGEMENT

ICE Acquisition Manual 3006.301-90

SOLE SOURCE JUSTIFICATION FOR SIMPLIFIED ACQUISITIONS NOT EXCEEDING

THE SIMPLIFIED ACQUISITION THRESHOLD (INCLUDING BRAND NAME)

level course in forensic recovery and analysis of application data from smartphone extractions. The CASA Inseyets class leverages Inseyets Physical Analyzer capabilities to explore database contents, and uses third-party, open-source tools and Python scripting to decode information not commonly decoded by forensic tools. Examiners decode both iOS and Android specific applications to perform pattern-of-life analysis and validate findings.

4. Identification of Statutory Authority Permitting Other Than Full and Open

Competition.

This action is being taken under the authority of Simplified Procedures for Commercial Items, 41 U.S.C. 1901 as implemented by RFO 12.102.

5. Identification of Exception to the Buy American Statute.

Not Applicable.

6. Demonstration that the proposed contractor’s unique qualifications or the nature of the acquisition requires use of the authority cited.

Cellebrite provided a sole source letter dated January 1, 2026, stating that they are the sole developer and provider of the Cellebrite Certification Training and accompanying certifications deliverable in both the Instructor Led and Online formats.

C3 intends to procure Cellebrite certification training utilized by C3 for its digital forensics hardware and software tool capabilities. This instructor-led training certification will support the expertise in data extraction from numerous mobile devices and operating systems (i.e. cellular phones, tablets, and unmanned aerial vehicles). Additionally, this training certification will codify knowledge, skills and abilities of the CFA to assist with criminal investigations and prosecutions that result from non-cooperative subjects currently under investigation by HSI for criminal activity violations.

HSI faces increasing challenges in extracting and analyzing digital evidence from mobile devices, which are often encrypted and protected by advanced security measures. The proliferation of new device models, operating systems, and encryption technologies has rendered many legacies forensic tools obsolete. The HERO student participants who are in training to become a certified CFA will benefit from this certification training as Cellebrite Inseyets is uniquely qualified to address these challenges as follows:

1. To ensure Inseyets are effective against evolving encryption, security, and data protection, Cellebrite invests heavily into research and development (R&D) to enable adaption to newer device models, operating systems, and security features.

2. Inseyets leverages Cellebrite’s technologies to bypass device locks, access encrypted data, and recover deleted or hidden information. These techniques are not publicly available, giving Inseyets a distinct advantage in extracting data from

SOLE SOURCE JUSTIFICATION FOR SIMPLIFIED ACQUISITIONS NOT EXCEEDING

even the most challenging devices.

3. The ability to support a wide range of devices, including both current and legacy models across iOS, Android, and other platforms. The broad compatibility allows HSI to extract data from virtually any device encountered in the field.

Cellebrite mobile forensic products are the most widely utilized and deployed computer forensic tool within HSI, supporting approximately 300 domestic and international offices combined. Cellebrite products are also the only tool deployed outside the CFP and provides the only computer forensic capabilities for HSI’s international offices.

When conducting this extraction process, the CFAs will gain an understanding of how Cellebrite’s software bypasses security mechanisms and encryption layers through various methods to include After-First-Unlocking (AFU) or brute forcing the device passcode.

Due to its longstanding, widespread, and continuous usage, there are more personnel trained in its usage than any other tool, including every CFA and hundreds of additional Special Agents and Criminal Analysts. There are no other mobile forensic product suites that offer equivalent capabilities, deployability, or usability for the CFP, and losing access to Cellebrite products would result in a critical loss of ability to recover digital evidence in support of HSI investigations.

Cellebrite Inseyets are the only solution that meets all technical, operational, and legal requirements. Its proprietary extraction methods allows HSI to 1) access raw memory of a device to retrieve all data, including deleted and hidden files; 2) use the device’s operating system to copy accessible data like contacts, messages, and photos; and 3) retrieve data by accessing the device’s file system, including app files and system logs; and device compatibility, and forensic standards are unmatched in the industry. Cellebrite’s ongoing research and development ensure support for new devices and encryption technologies, maintaining the agency’s ability to respond to evolving threats.

Alternatives:

Other vendors such as and often lack comprehensive device coverage, forensic reliability, and integration capabilities required by HSI.

offers robust solutions for digital evidence acquisition and analysis, particularly in the areas of computer and cloud forensics. While and its partnership with provide strong capabilities for iOS device unlocking and analysis, their support for Android and other mobile devices is limited compared to Cellebrite Inseyets. extraction methods do not cover the full spectrum of devices encountered in federal investigations, especially encrypted or legacy devices. Furthermore, tools lack Cellebrite’s proprietary technique to bypass device security, unlock devices, and access encrypted or deleted data, as mentioned in the previous paragraph.

Additionally, comprehensive device coverage is necessary to ensure timely, reliable, and legally

SOLE SOURCE JUSTIFICATION FOR SIMPLIFIED ACQUISITIONS NOT EXCEEDING

defensible evidence extraction. As a result, cannot fully meet the agency’s operational, technical, and evidentiary requirements for mobile device forensics.

provides digital forensic tools with support for a variety of mobile devices, cloud services, and drones. However, does not offer the same device compatibility, depth of extraction, or frequency of updates as Cellebrite Inseyets. The product’s ability to bypass advanced security measures and extract data from encrypted or newly released devices is limited, which poses significant challenges for federal law enforcement investigations. Additionally, lacks the extensive validation, chain-of-custody documentation, and widespread acceptance in U.S. courts that Cellebrite Inseyets provides. Consequently, is unable to satisfy the agency’s critical requirements for comprehensive, reliable, and legally defensible mobile device evidence extraction.

These deficiencies would compromise the integrity of investigations and the admissibility of evidence. Cellebrite’s ability to perform logical, file system, physical, and password extractions across over 15,000 devices, combined with its unique unlocking capabilities, makes it indispensable. Its widespread use within HSI ensures personnel are already trained, reducing operational disruptions and retraining costs. Alternatives would require multiple tools to achieve similar functionality, increasing complexity, costs, and the risk of delays in critical investigations. For these reasons, Cellebrite remains the only tool that fully satisfies the government’s needs.

If Cellebrite Inseyets training certification for HERO student participants is not acquired, HSI will not be able to deploy more effective CFAs in the field to conduct operative digital forensic investigations, which results in loss of evidence, having investigations compromised, and inability to meet mission objectives. This would severely harm HSI operational effectiveness, legal compliance, and ability to protect public safety and national security.

7. Description of Efforts Made to Ensure that Offers are Solicited from as Many Potential Sources as is Practicable.

A notice of intent to solicit from a single source was posted on SAM.gov on May 6, 2026, with a closing date of May 13, 2026, allowing parties to express their interest in writing to the Contracting Officer. No parties, other than Cellebrite, expressed interest.

OAQ intends to make this justification publicly available pursuant to RFO 6.301 on SAM.gov 14 days after award, along with the award notice.

8. Determination by the Contracting Officer that the Anticipated Cost to the Government will be Fair and Reasonable.

The Contracting Officer determined that the anticipated price(s) will be fair and reasonable based on market research and published catalog pricing. The Contracting Officer may base

SOLE SOURCE JUSTIFICATION FOR SIMPLIFIED ACQUISITIONS NOT EXCEEDING

the determination on: market research, comparison of the proposed price with prices found reasonable on previous purchases; current price lists, catalogs, advertisements, comparison with similar items in a related industry; the Contracting Officer’s personal knowledge of the item being purchased, comparison to an independent Government estimate; and/or any other reasonable basis to determine that the price at the time of award represents the overall best value for the Government and is fair and reasonable.

9. Description of Market Research.

C3 conducted market research in February 2026 to determine if there was any other training that could meet their requirements. To ensure continuity with existing products and services where Cellebrite products services have supported the HSI law enforcement mission since approximately 2011, Cellebrite Certification Training is the only training can meet the training certification to support the HERO program that provides current mobile forensics certification. As part of the forensics training, it is required for certification purposes that the Cellebrite Training be provided to meet the requirement for Basic Computer Evidence Recovery Training (BCERT) certification. This will provide participants the same certification that existing CFAs hold to enable them to assist with forensics analysis during investigations.

The required classroom instruction training is only provided by Cellebrite, as they are the sole proprietor for these certification classes that support the HERO computer forensic analyst intern trainee certification. Cellebrite provided a sole source letter dated January 1, 2026, stating they are the sole developer and provider of the Cellebrite certification training and accompanying certifications deliverable in both the Instructor Led and Online formats.

This training certification is being hosted by HSI CFP and has no room for errors in delivery.

Cellebrite provided a sole source letter dated January 1, 2026, stating that they are the sole developer and provider of the Cellebrite Certification Training and accompanying certifications deliverable in both the Instructor Led and Online formats.

A notice of intent to solicit from a single source was posted on SAM.gov on May 6, 2026, with a closing date of May 13, 2026. No parties, other than Cellebrite, expressed interest.

Published pricing was reviewed to assist with making the price reasonableness determination.

10. Any Other Facts Supporting the Use of Other Than Full and Open Competition.

Not Applicable.

11. A Listing of the Sources, if Any That Expressed, in Writing, an Interest in the

Acquisition.

A notice of intent to solicit from a single source was posted on SAM.gov on May 6, 2026, with a closing date of May 13, 2026, allowing parties to express their interest in writing to the Contracting Officer. No other parties, other than Cellebrite, expressed interest.

SOLE SOURCE JUSTIFICATION FOR SIMPLIFIED ACQUISITIONS NOT EXCEEDING

12. A Statement of the Actions, if Any, the Agency May Take to Remove or Overcome Any

Barriers to Competition Before Any Subsequent Acquisition for Supplies or Services Required.

DHS C3 will continue to monitor the market for new entrants and products in the field that can meet this requirement.

13. Technical/Requirements Personnel Certification. I certify this requirement meets the Government’s minimum need and that the supporting data, which forms a basis for this justification, is complete and accurate.

Contracting Officer Representative Date

14. Contracting Officer’s Certification and Approval. I certify that the data supporting the recommended use of other than full and open competition is accurate and complete to the best of my knowledge and belief.

Michelle Levine Contracting Officer

Date

KIMBERLY L WRIGHT-WHITSON

Digitally signed by KIMBERLY L WRIGHT-

WHITSON

Date: 2026.05.13 11:57:04 -04'00'

MICHELLE E LEVINE

Digitally signed by MICHELLE E

LEVINE

Date: 2026.05.13 11:02:50 -05'00'