12. SOO FBOP Inmate Tablet Initiative.pdf

Department of Justice Federal Bureau of Prisons

STATEMENT OF OBJECTIVES FOR: INMATE

TABLET INITIATIVE

JANUARY 2026

Inmate Tablet Initiative Statement of Objectives

Executive Summary The FBOP Enterprise Tablet Initiative seeks to design, deploy, and sustain a secure, scalable, and compliant digital services platform that will provide approximately 150,000 users across 120 facilities nationwide with equitable access to education, healthcare, legal, religious, and communication resources. The program’s purpose is to enhance service delivery while maintaining strict adherence to federal IT security and accessibility standards.

The initiative encompasses the full lifecycle of planning, procurement, installation, configuration, and sustainment of tablet devices and supporting infrastructure. This includes extending wired and wireless network access to the housing unit bed level and designated service areas (visitation, education, medical, psychology, religious, and recreational spaces) with explicit prohibitions on wireless bridging.

All tablet devices will support modern Wi-Fi standards (IEEE 802.11a/b/g/n/ac, Wi-Fi 5, Wi-Fi 6, Wi-Fi 6E, and forward compatibility with Wi-Fi 7). All other equipment will support wired Ethernet connectivity (IEEE 802.3 over Cat6 cabling). Hosting will reside exclusively in GovCloud environments, with mandatory FedRAMP High certification and full FISMA compliance.

The solution must enable secure subscription-based access to streaming, downloadable content, and learning modules, while enforcing restrictions such as single-player gaming only. Additional services include AM/FM radio - television, mail scanning, and secure international and local calling capabilities.

Telehealth (psychology and medical visits), religious programming, legal, and educational visits will be proctored or confined to approved designated locations. To ensure adherence to FBOP IT Standards the vendor must enable FBOP administrative oversight through role-based access controls with nested group management up to five layers deep, ensuring granular control across devices, groups, locations, and content.

A seven-day Service Level Agreement (SLA) for device repair or replacement is required to minimize downtime, ensure service continuity, and minimize user volatility due to device failure. All software and firmware updates must be applied within 14 days of release, with vendors required to provide documentation, testing certifications, and ongoing interoperability validation. Accessibility remains a cornerstone of the program, with Section 508 compliance and features such as closed captioning, TTY integration, and note-taking functionality required to support users with disabilities.

Point of Contact Ryan Wynne, Section Chief Technology Procurement Section Phone: 202-616-5860 Email: rwynne@bop.gov mailto:rwynne@bop.gov

Contents Executive Summary

Point of Contact

Contents

1. Purpose

2. Scope

3. Period and Place of Performance

4. Background

5. Target Environment

5.1. Infrastructure and Installation

5.1.1. Compliance and Technical Standards:

5.1.2. Connectivity Performance Requirements:

5.2. Equipment Requirements

5.2.1. Tablets and Kiosks

5.2.2. Charging Stations

5.2.3. Networking Equipment

6. Objectives

6.1. Technical Objectives

6.1.1. Infrastructure and Network

6.1.2. Services

6.1.3. Optional Services

6.2. Security Objectives

6.3. Management Objectives

6.4. Performance Objectives (Required Results)

7. Requirements

7.1. Accessibility

7.2. Data Isolation Requirements or Hardware Sharing Restrictions

7.3. Meetings

7.10. Government Policy Requirements

7.11. Government Property/Equipment

7.12. Required Nongovernment Information/Documents

7.13. Deliverables & Compliance

1. Purpose The initiative enhances the Federal Bureau of Prisons (FBOP) rehabilitative mission by expanding digital access in a controlled, compliant environment. Tablets will serve as a unified delivery mechanism for educational modules, tele-health, family communication, legal resources, reentry programming, and approved leisure content. This initiative also strengthens institutional safety by digitizing forms, reducing paper handling, enabling controlled communication channels, and increasing transparency around user activity.

2. Scope The program includes enterprise-wide deployment of secure tablets and supporting wired back-end infrastructure with wireless connectivity to endpoint devices spanning to the housing unit bed level and all designated program areas. The solution must operate within FedRAMP-High GovCloud environments, comply with FISMA and DOJ cybersecurity directives, and integrate seamlessly with FBOP’s existing IT landscape. Vendors shall provide network architecture capable of supporting long-term expansion. The initiative seeks an enterprise solution that:

• Provides secure tablets and supporting network infrastructure reaching all designated areas, including housing units (bed-level), visitation, education, medical, psychology, religious, and recreational areas.

• Enables subscription-based leisure content, educational, recreational, religious and psychological resources, and controlled communication services.

• Supports tele-health, legal visits, educational sessions, and religious programming in designated locations only.

• Ensures strong administrative oversight using role-based access controls, nested security groups, content filtering, and usage controls.

• Includes enterprise-wide support services, hardware replacement SLAs, software/firmware update compliance, and performance reporting.

• Integrates AI-enabled analytics to improve intelligence gathering, anomaly detection, and operational insight while maintaining privacy and National Institute of Standards and Technology aligned safeguards.

3. Period and Place of Performance The Cumulative Period of Performance will be a base period of 48 months from the Notice to Proceed followed by three independently exercised 12-month option periods and one 6-month extension period. Services will be provided at All Federal Bureau of Prison Institutions (approx. 120 institutions as well as Satellite facilities (camps, and detention centers, etc.).

Service Level Agreement (SLA):

• Vendor must meet a 7-day repair/replacement SLA for any tablet, kiosk and/or charging device failures.

o SLA: Software:

Critical: 24 - 48 hours

Moderate: 7 Days

Low/Advisory: Normal maintenance windows (14 days post release of operating system update) o SLA: Endpoint Hardware

Low: Normal repair/replace window is 7 days post remittance.

o SLA: Networking Hardware

Critical: 24 – 48 hours o SLA: Backend System(s)

Critical: 24-48 hours

• Software and firmware updates: Apply all updates within fourteen (14) days of release.

• Critical vulnerabilities: Apply fixes for critical security vulnerabilities within twenty-four

(24) hours of identification.

• Accessibility: Fully comply with Section 508 accessibility standards.

Network Performance

• Maintain reliable network coverage for all designated operational areas.

• Conduct annual interoperability testing for all wireless and wired standards used.

• Host all production services within FedRAMP-high authorized GovCloud environments, such as AWS GovCloud (US) or Azure GovCloud (US), consistent with FBOP and DOJ security requirements. The Cloud system has been evaluated by a Third-Party Assessing Organization (“3PAO”) certified under FedRAMP; the Cloud system received FedRAMP high authorization;

the Contractor has provided the most current System Security Plan (“SSP”) and Security Assessment Report (“SAR”) to the BOP CO for consideration.

Data Management and Continuity

• Ensure all data is retained, searchable, and reportable at the user, group, facility, and enterprise levels.

• Align backup and restore procedures with FBOP continuity of operations (COOP) policies.

• Maintain full data retention, privacy, and records management compliance with OPCL and NARA requirements.

4. Background The Federal Bureau of Prisons (FBOP) requires a modern, secure, and unified digital services platform to replace fragmented legacy systems and provide consistent access to educational, healthcare, legal, religious, and communication resources across all institutions. This acquisition will establish an enterprise-managed tablet ecosystem supported by reliable wired and wireless infrastructure including bed-level access operating within a FedRAMP High-authorized cloud environment and fully compliant with FISMA, OPCL privacy requirements, and Section 508 accessibility standards. The effort addresses long-standing gaps in standardization, administrative oversight, and technological capability by enabling a controlled suite of approved services such as telehealth, educational streaming, legal and religious communication, while enforcing modern networking, patching, and service-level expectations. By advancing a secure, equitable, and scalable digital framework, this initiative strengthens institutional operations, enhances rehabilitative engagement, and aligns FBOP’s technology landscape with contemporary federal and correctional best practices.

5. Target Environment The target environment for this initiative requires a secure, resilient, and highly controlled technological ecosystem capable of supporting inmate tablets, kiosks, charging systems, and the network infrastructure that connects them. All components must operate reliably within correctional settings, withstand continuous use, and incorporate tamper‑resistant features that protect both equipment and institutional security. The environment must also support modern accessibility, authentication, and connectivity standards while integrating seamlessly with existing and future FBOP systems. The overall goal is to establish a durable, secure, and scalable foundation that enables communication, education, programming, and operational services for the inmate population.

5.1. Infrastructure and Installation

The contractor shall design, procure, and install a comprehensive infrastructure solution that ensures high-performance connectivity while maintaining the rigorous security and safety standards of the Federal Bureau of Prisons (FBOP). All physical components—including but not limited to conduit, junction boxes, enclosures, wiring, and fiber—must be installed in a manner that prevents tampering, unauthorized access, or interference with existing institution operations.

5.1.1. Compliance and Technical Standards:

All installation work shall strictly adhere to the current FBOP Technical Design Guidelines (TDGs). The contractor is responsible for ensuring all materials and workmanship meet or exceed the following specific TDG divisions, these will be available as attachments to the

SOO:

• 26 05 33: Raceways and Boxes for Electrical Systems

• 28 50 10: Security Electronics Raceways

• 28 50 20: Security Electronics Conductors

• 28 51 20: Security Electronics Fiber Optic Cable System

• 28 61 60: Security Electronics DV Distribution System Deviation from these criteria shall be specifically reviewed with the FBOP.

Changes shall not be made without approval from Chief, Facilities Management.

5.1.2. Connectivity Performance Requirements:

To support the Inmate Tablet Initiative’s bandwidth and reliability needs, the following infrastructure specifications are required:

• Copper Data Cabling: The vendor shall utilize Cat6a or greater cabling, engineered to support 10Gbps links.

• Distance Limitations: To maintain signal integrity, no individual cable run shall exceed

300 feet in length.

• Fiber Optics: All backbone or long-distance cabling shall utilize single-mode fiber.

• Termination and Segregation: All cabling must be terminated into dedicated patch panels located within designated secure building communications closets.

• Network Integrity: To prevent crosslinking or security breaches, patch panels must be clearly labeled and physically separated from existing FBOP network infrastructure.

5.2. Equipment Requirements

All IT equipment shall be Trade Agreements Act (TAA) compliant and meet FBOP security requirements.

5.2.1. Tablets and Kiosks

The vendor shall provide FBOP designated personnel with the ability to disable some or all services at the device, area, building, institution and agency level. All devices shall be section 508 and ADA compliant to support inmates with disabilities. All devices shall require MFA authentication utilizing biometrics.

5.2.1.1. Tablet Devices

The vendor shall deliver a secure tablet with a screen size of 8 to 12 inches. The device shall be durable, including a ruggedized design and possess weather resistant features with tamper monitoring to alert if the case is compromised. The device must be strengthened to resist wear and drop abuse and must prevent access to internal components (e.g., specialty screws which require custom, proprietary tools to remove them.) In addition, device should have a 3.5mm audio jack, an FM radio receiver and no external speaker. Device shall only have wireless, magnetic or cordless charging to prevent tampering and destruction of charging stations. The staff must have the ability to locate /track the tablets remotely anywhere in the facilities. Device tracking capabilities must work through metal and steel doors. The device shall have adaptive features to assist individuals with disabilities to include voice and Braille support, adjustable volume, and magnification. Devices shall require multi-factor authentication using biometrics for device login and authentication of the user. Device shall NOT have the following connections user accessible:

• USB Type A

• USB Type-C

• USB-3

• USB port B

• Micro USB

• Mini USB

• DisplayPort

• Ethernet

• HDMI

5.2.1.2. Inmate Use Kiosks

• The vendor shall provide kiosks and should have all hardware and software necessary to provide any related services the vendor provides. Should include locked down operating systems, security patches, remote monitoring and software upgrade, network security, application hosting on dedicated cloud services and secure data center.

• Kiosk should contain a touch screen; however, a durable security centered keyboard will also be considered especially supporting disabled inmates who could not access the kiosks.

• Kiosks should support networking connectivity via wired ethernet access and/or wireless networking.

• The kiosk enclosure/housing needs to be self-contained, rugged and secure. There shall be no crevices that can enable inmates to damage or spill into the enclosure and damage the kiosk.

• The kiosk enclosure must be of a neutral color and easily cleaned.

• Kiosks shall have a heavy-duty locking mechanism, hinges, door mechanisms capable of resisting inmate tampering and vandalism. Hardware must be contained in the kiosk enclosure.

• Kiosks shall utilize automated tamper detection and:

o Ring an audible shrill alarm for a designated period.

o Capable or deactivation by designated FBOP personnel.

• Kiosk monitors shall have a privacy filter on the monitor to block viewing from a side angle.

• The vendor should detail remote management capabilities to include but not limited to:

o Monitoring o Diagnostics o Error resolution o Software problem assistance o Intelligence reporting o Application and software updates and upgrades o Rebooting and controlling the remote kiosks from a central location

• Kiosks should be built with heavy-gauge (e.g., 14-gauge) welded steel housing to withstand significant physical abuse and prevent unauthorized access to internal components, or other suitably tamper resistant material with similar tamper resistant hardening.

• Utilize tamper-proof enclosures and fasteners, hardened steel push locks for internal access, and include secure mounting mechanisms (e.g., securely anchored to the floor or wall) to prevent theft or removal.

• Touchscreens must be sealed against dirt, dust, and liquids and made of impact-resistant material, such as 3mm or 4mm tempered glass.

• Any add-on components, like a corrections-grade handset or fingerprint biometrics module, should be robust and securely integrated.

• Access to external ports such as USB or other mass storage devices must be physically blocked and software-disabled to prevent the introduction of malware or unauthorized software.

• Kiosks must be placed along an accessible route, with a clear floor space (30x48 inches) for a forward or side approach for wheelchair users.

• Interactive controls and touch screens should be placed within accessible reach ranges, typically no more than 48 inches above the floor for an unobstructed approach.

• The number of kiosks provided must be adequate to serve the population, minimizing wait times and potential conflicts, especially in high-density housing areas. The number will vary based on the specific services offered (e.g., messaging, law library access, commissary orders).

5.2.2. Charging Stations

• The charging stations must be constructed with durable, high-strength materials (e.g., ruggedized casing) resistant to tampering, forced entry, and damage. Beyond standard forced-entry alerts, stations should ideally feature vibration and tilt sensors that trigger an automatic alarm if unusual motion patterns or tampering is detected.

• All accessible external screws must be proprietary security-head types, and internal components should be secured with additional internal locking screws to prevent disassembly if the outer shell is breached.

• Stations should feature heavy-duty steel enclosures with minimal hard edges and concealed hinges, or similar robust material.

• Charging cabinets/carts/stations must be able to be securely fastened or immobilized to prevent removal.

• The design should prevent the removal of internal components, especially charging cords

• The number of individual charging ports must be adequate to serve the population, minimizing wait times and potential conflicts, especially in high-density housing areas. It should be adequate to support charging needs of the population for a 24-hour period.

• Charging stations shall be provided and installed in common areas of housing units and support a minimum of 50% of the number of devices assigned to the area to charge simultaneously.

• Stations use magnetic charging, or proprietary charging connection method to eliminate the use of standard USB and data ports, which can be misused.

5.2.3. Networking Equipment

Active network devices shall be Trade Agreements Act (TAA) compliant and meet FBOP security requirements. Devices shall use industry standard wireless protocols and shall use wired standards for backhaul connections to WAN. Network devices that need external power and are not PoE powered must support use of standard 120 Volt power. Wireless access points are required to be placed in secure, tamper proof enclosures with only the antennas exposed. The wireless network must be configured in a manner to coexist with existing and future FBOP wireless networking deployment.

• Network Equipment shall be TAA compliant and configured in accordance with Federal, DOJ and FBOP polices/guidelines.

• Wireless access points should be housed in a secure enclosure to prevent tampering.

• Wireless access points shall maintain a minimum of 6 ft clearance of any existing FBOP access point or access point secure enclosure.

• Switches should be racked in designated secure communications closets.

• All equipment should be clearly labeled.

6. Objectives

The primary objective of this initiative is to provide a standardized, secure, and scalable tablet solution to approximately 150,000+ users across all Institutions, within the continental US, Hawaii and Puerto Rico. The program will establish an enterprise-wide platform that enhances access to education, tele-health, legal, religious, and communication services, while maintaining strict compliance with federal security and accessibility mandates. The deployment must ensure consistency of user experience, equitable access across all facilities, and integration with incumbent systems and resources.

6.1. Technical Objectives

6.1.1. Infrastructure and Network

Network to support devices shall be based on a primarily wireless design using industry standard wireless protocols to support device usage at Housing Unit bed level, Visitation Areas, Recreation Spaces, Medical Services, Psychology Services, Education, Religious Services and other designated areas. Wireless bridging is not permitted; infrastructure must be hard wired to prevent unauthorized signal expansion. In addition, the vendor shall develop a future infrastructure roadmap that anticipates evolving user demands, emerging technologies, and increased data throughput, ensuring that the network environment remains secure, resilient, and adaptable to future program expansion. All physical cabling, conduit, and passive network components installed as part of this initiative shall become and remain the property of FBOP upon installation and acceptance. Active components -including tablets, servers, access points, and associated vendor-supplied management systems - may remain under the vendor’s ownership unless otherwise specified in subsequent task orders or contract modifications. The Contractor shall document the complete as-built network configuration, identify all points of interconnection and provide detailed diagrams for both the current and proposed future infrastructure to facilitate ongoing maintenance and agency oversight. Wired connections between devices shall use industry standards and meet the requirements outlined in the FBOP Technical Design Guidelines (TDGs).

6.1.2. Services

These minimum required services must be provided to the tablet devices via the supplied network defined above. All services provided must ensure full compliance with federal IT security and accessibility standards. Host all production services within FedRAMP-high authorized GovCloud environments, such as AWS GovCloud (US) or Azure GovCloud (US), consistent with FBOP and DOJ security requirements. The Cloud system has been evaluated by a Third-Party Assessing Organization (“3PAO”) certified under FedRAMP; the Cloud system received FedRAMP authorization; the Contractor has provided the most current System Security Plan (“SSP”) and Security Assessment Report (“SAR”) to the BOP CO for consideration. Devices must also provide built-in note-taking functionality, deaf and hard-of-hearing accessibility features such as text to speech and speech to text, Tactile keyboard options for individuals with disabilities, and comply fully with Section 508 standards to ensure equitable access for all users.

6.1.2.1. Commissary Order Submission

Users shall be able to review current available items in the institution’s commissary and generate an order for items following FBOP limits on quantity and cost of items. Once completed the order shall be submitted to local commissary for order fulfillment. Items available for ordering shall be definable by institution and housing unit at a minimum.

Must be able to interface and communicate with the current inmate financial services platform.

6.1.2.2. Internal Agency Electronic Forms

Users shall be able to complete internal FBOP and other designated forms and submit them electronically to designated FBOP personnel.

6.1.2.3. Electronic Bulletin Board

Designated FBOP personnel should have access to post notices, messages, images and/or videos to the inmate population based on specific user, area/work/unit assignments, institution, region and/or entire agency.

6.1.2.4. Digitally Scanned Mail (Display)

Users shall be able to receive, access and display their personal digitally scanned mail from the FBOP’s designated provider.

6.1.2.5. Entertainment/Leisure

• Enable access to subscription-based programs, including streaming services, downloadable content, and interactive learning modules inherent to the device.

These services must be designed to scale across the enterprise and must be supported by sufficient bandwidth to ensure reliable streaming and download performance. Subscription models must allow for secure user authentication, while ensuring compliance with program restrictions such as single-player gaming only, no multiplayer capabilities, and access limitations based on facility rules. The solution must enable a user to purchase subscription-based leisure books, music, newspapers, magazines and entertainment to be loaded onto the device. Solution should provide access to a set of free books, magazines and newspapers. The solution must also provide inmates with the capability to print documents from wireless devices using a pay per copy method for printing. The vendor shall provide the FBOP monthly reports of inmates accessing subscription-based services including the inmate’s name, register number, book, movie, music title accessed and dates of access.

• The solution shall be able to interface and communicate with the current inmate financial services platform and shall facilitate the initiation and completion of purchases using a credits-based financial model. The solution shall authorize staff to generate and print transaction reports for any specified date range. These reports will be used to track inmate usage, calculate associated costs, and support Bureau of Prisons financial records, reconciliations, and audits.

• Consistent with Trust Fund policy, the vendor shall provide services directly to the Bureau of Prisons (BOP) and shall invoice the BOP for services based on actual usage in accordance with the contract pricing schedule. Trust Fund, as the sole authorized provider for the sale of items to the inmate population, shall apply an administrative markup to applicable items sold. Revenue generated from such markup shall be used to satisfy payment obligations to the contractor for services rendered.

• Payments for services shall be deducted from the inmate trust account. Deposits from external sources into media accounts are not authorized.

6.1.2.6. Social Video Visiting

• Enable users to have social visits with outside users with both audio and video connection. Video shall be limited to only the face, and all other areas shall be obfuscated during the call. Calls shall only be allowed to be made with contacts approved on a calling list. Location based security shall only allow calls in defined locations and times.

• Shall allow FBOP designated staff to manage visitation hours, time slots, scheduling, recording & monitoring rules and policies.

• System shall have the ability to record visitations.

• System shall have the ability to:

o Allow designated FBOP staff to monitor real-time visits and terminate the visit as needed.

o Prevent 3-way video calls.

o Prevent incoming calls o Allow calls only to approved persons at approved times as designated by approved FBOP personnel.

o May not display a call history or call log to inmates

• Have automated announcement to called party to inform called party that the call is from a correctional facility and that calls may be monitored and recorded o Display on screen message to inmate that video calls may be monitored and recorded.

• The system should include integrated biometrics to prevent device handoffs.

• The system should leverage artificial intelligence (AI), natural language processing (NLP), and advanced analytics to automatically transcribe, translate, and analyze inmate communications, and to correlate those communications with other available inmate communications and intelligence related data sources. The objective is to improve detection of criminal activity, contraband smuggling, gang communication and coordination, acts of terrorism, financial fraud, human trafficking, and other illicit activity conducted through inmate communications.

• The system should be able to interface and communicate with the current inmate financial services platform. Funds shall be drawn from the inmate’s trust account, converted to service credits, and debited accordingly for video services.

• The system shall authorize staff to generate and print transaction reports for any specified date range. These reports will be used to track inmate usage, calculate associated costs, and support Bureau of Prisons financial records, reconciliations, and audits.

• Compliance with FCC inmate calling service rules (rate caps, fee limits).

• Visitation software is designed to automatically terminate sessions if any display of nudity, sexual behavior, or disruptive emotionalism is detected.

• Security protocols strictly prohibit or block the taking of screenshots, photographs, or external recordings of any portion of the visit.

• Restrict calls to only those on a pre-approved visitor list.

• The system identifies and prohibits attempts to provide access to non-participants, such as by displaying a second phone or internet device during the video session.

• Visitors/Users are required to be in a stable, private location; background participants or groups are prohibited to ensure only the approved individual is present.

• Facility administrators can set enforced limits on the frequency and duration of visits.

• Visits are automatically started and stopped based on scheduled blocks, and staff retain "interrupt" options to manually cut a feed if a violation occurs.

• Should incorporate biometric identification of user to prevent unauthorized use and access and automatically terminate if anomalous identity use is attempted.

• Staff require a unified interface to view all active video sessions and tablet activity across the facility, with the ability to "silent drop-in" to any live feed without alerting the participants.

• Systems must automatically transcribe audio and flag specific security-relevant keywords (e.g., "contraband," "hit," "snitch," or gang-specific slang) for immediate administrative review.

• Investigators require the ability to set "watch lists" that send automated SMS or email alerts to staff the moment a high-risk inmate initiates a video visit or sends a message.

• Every video session must be stored in a tamper-proof, cloud-based repository with a chain-of-custody log for legal evidence.

• Monitoring logs should include GPS location (for remote visitors), IP addresses, device IDs, and inmate account numbers linked to every interaction to facilitate criminal prosecutions.

6.1.2.7. Education, Psychology and Religious Programming

Users shall have access to educational opportunities through a Learning Management System (LMS) with self-paced study for GED testing, life skills, Adult Continuing Education courses and other learning content. The devices shall be configured to stream FBOP provided lessons via provided URL or locally synchronize programs, and services for institution departments to include but not limited to: Education, Medical, Recreation, Psychology, Religious Services, Reentry, and Unit Management. The device shall allow access to a digital library service, with access to educational material. The device shall allow access to FBOP approved URL’s and can resume studies when devices go on and offline. The devices shall have the capability for inmates who were enrolled in the programs to provide program feedback, convey interests, and relay lessons learned to instructors and/or Education staff.

6.1.2.8. Forms, Surveys & Common Apps

Provided solution shall have a digital equivalent to a “Bulletin Board” where information can be posted by the FBOP. The content seen by the user should include both general posted info, as well as customized info assigned to the user. Solution shall have the capability to build custom “forms” that can be completed and submitted to the appropriate FBOP staff. These forms may consist of examples such as a commissary order form, medication refill form, Sick Call request, survey on satisfaction of a provided service (Medical/Food), etc. These forms should be able to be built and made available to individual users or groups of users, as needed. Forms sent to groups of users should allow for data to be summarized and statistics from responses generated for summary review. Additionally, these forms should allow for a “signature” to be attached by the user. Solution shall also provide common “apps” like language translation, clock and calendar with ability to have alarms and reminders.

6.1.2.9. Attorney/Privileged Video Visits

Enable users to have video visits with Attorneys and other Privileged contacts when scheduled by Unit team staff. Video and audio feed shall NOT be recorded during these calls but meta data such as called number and length of call shall be recorded. Location based security shall only allow these calls in defined locations and times.

6.1.2.10. Video Relay Service

• System shall include an option for Video Relay Service (VRS) separate from video visitation for hearing impaired/inmates. Video visitation capabilities should include but not limited to:

• Integrated into wall-mounted kiosks

• Allow inmate to initiate call to approved visitor

• Specify service provider of sign language interpreters

• Option for VRS application to be available to specific users based on inmate PIN

• Automatically route VRS calls through a VRS interpreter for calls placed to a non-VRS registered phone number. Must have the capability of making a direct connection to a called party without the need for an interpreter when calling a VRS registered phone number.

• Allow inmate to choose English or other language speaking video relay interpreter

• Allow option for Voice Carry Over

• Have live monitoring of VRS calls

• Record VRS calls.

• Have automated announcement to called party / interpreter to inform called party that the call is from a correctional facility and that calls may be monitored and recorded:

• Display on screen message to inmate that video calls may be monitored and recorded.

• The solution shall be able to interface and communicate with the current inmate financial services platform. Funds shall be drawn from the inmate’s trust account, converted to service credits, and debited accordingly for video services.

• The system shall authorize staff to generate and print transaction reports for any specified date range. These reports will be used to track inmate usage, calculate associated costs, and support Bureau of Prisons financial records, reconciliations, and audits.

• Compliance with FCC inmate calling service rules (rate caps, fee limits).

6.1.2.11. Inmate Telephone System

• Enable users to make audio phone calls to national and international PSTN phone numbers of approved contacts on users’ account. Calls shall be recorded and system available for review and monitoring of recordings.

• Have automated announcement to the called party to inform the called party that the call is from a correctional facility and that calls may be monitored and recorded.

• The system shall provide a no-cost method for called parties to block or prevent inmate calls, with prompt activation and without inmate consent.

• Must offer collect, debit, and pre-paid services. The solution shall be able to interface and communicate with the current inmate financial services platform.

• The system shall authorize staff to generate and print transaction reports for any specified date range. These reports will be used to track inmate usage, calculate associated costs, and support Bureau of Prisons financial records, reconciliations, and audits. All reports must be exportable in formats compatible with federal financial systems and retained in accordance with federal records-management requirements.

• The ITS shall not directly debit an inmate’s trust account. All calling funds shall be obtained either through the purchase of credits via the Inmate Financial System or through the transfer of funds to an external ITS account designated for telephone services. The ITS shall verify the availability of sufficient phone account funds prior to call initiation, deduct applicable charges during call progression, and immediately post final charges upon call completion. Under no circumstances shall the system permit a negative phone account balance.

• System should provide clear prompts, announcing call costs and remaining balance.

• Ability to support free or reduced cost calls for indigent inmates.

• The ITS systems must be capable of clearly identifying and differentiating between inmate-paid calls and calls provided to inmates at no cost as part of incentive or administrative programs. Each call must be accurately tagged by call type to ensure correct billing treatment. The system must generate separate and distinct billing documents and reports for inmate-paid calls and free/incentive calls, clearly showing all costs charges associated with each category.

• Compliance with FCC inmate calling service rules (rate caps, fee limits).

• The system should leverage artificial intelligence (AI), natural language processing (NLP), and advanced analytics to automatically transcribe, translate, and analyze inmate communications, and to correlate those communications with other available inmate communications and intelligence related data sources. The objective is to improve detection of criminal activity, contraband smuggling, gang communication and coordination, acts of terrorism, financial fraud, human trafficking, and other illicit activity conducted through inmate communications.

• This system shall provide configurable applications and population specific communication controls to ensure appropriate, secure, and compliant management of specialized inmate populations.

• The system should include continued voice authentication to prevent device handoff.

• The system should incorporate keyword alerts – alerting employees of flagged terms or phrases.

6.1.2.12. Electronic Mail Messaging

• Enable users to send and receive text-based electronic messages with approved contacts in the users’ account. These messages shall be saved and made available for review and monitoring. Systems shall have a delay in delivery to allow for review and solution should have a feature that allows for inmates on Required Monitoring to have their mail held for staff review, prior to being delivered. Additionally, users should have the ability to send electronic messages to assigned groups with FBOP such as Health Services, Unit Team, Psychology, Education, etc. as defined per institution.

• For public messaging the system should be able to interface and communicate with the current inmate financial services platform and shall facilitate the initiation and completion of purchases using a credits-based financial model.

• The system shall authorize staff to generate and print transaction reports for any specified date range. These reports will be used to track inmate usage, calculate associated costs, and support Bureau of Prisons financial records, reconciliations, and audits.

6.1.2.13. Digital Law Library

Users shall have access to a Digital Law Library including primary law, deskbooks, code books, treaties and other relevant legal data.

6.1.3. Optional Services

The services below are options FBOP would like technical and cost information to consider for implementation under this procurement.

6.1.3.1. Atlas Application

The device shall provide access to The Change Companies, Atlas application. Devices will provide interactive journaling, that can notify program staff of risk-based behavior and targeted indicators. Devices will provide workbook activities focusing on education, mental health and spirituality programing. Devices shall provide access to evidence-based recidivism reduction programs and productive activities. Devices shall be capable of connecting FBOP hosted/moderated virtual group activities. Continuity when inmate transfers throughout FBOP with seamless transfer of learning records from facility to facility. Ability to have assignments flow between instructor and student for scoring and feedback.

6.1.3.1. Digital Mail Scanning

• Solution shall have a process to allow physical US Mail to be received at an off-site location, scanned and made available digitally on addressed recipients’ account.

Solution should have a feature that allows for inmates on Required Monitoring to have their mail held for staff review, prior to being delivered.

• Vendors must establish a workflow to receive, sort, and scan physical mail, including envelopes, letters, and photographs, converting them into high-definition color digital formats at an offsite location.

• Systems must ensure rapid electronic delivery, typically making scanned mail available within 24 to 48 hours of receipt at the processing center

• Facilities require a secure dashboard for staff to view, approve, or reject scanned mail and set alerts for specific high-risk individuals, or set delayed receipt until reviewed.

• Must have the ability to search all digitized mail by keyword, sender name, recipient ID, or date range to identify potential threats or patterns

• The system must provide a "Review Queue" where staff can inspect scanned mail and choose to Approve, Reject, or Flag items before they appear on an inmate's tablet

• Vendors must provide customizable alert systems that automatically flag mail containing specific prohibited words, phrases, or symbols associated with gang activity or illicit behavior

• Staff must be able to export scanned mail as PDF or image files for use in disciplinary hearings or criminal prosecutions

6.1.3.2. Telemedicine Video Visits

• Enable users to have video visits with medical providers when scheduled by authorized FBOP personnel. Video feed shall NOT be obfuscated during these calls to allow for display of all body parts as required for medical diagnosis. Location based security shall only allow these calls in defined locations and times.

• System should be able to communicate with FBOP’s Electronic Health Record to receive designated information.

6.1.3.3. Attorney/Privileged Phone Calls

• Enable users to make audio phone calls to national and international PSTN phone numbers of approved attorney and privileged contacts on users’ account. Calls shall not be recorded but metadata such as number dialed, length of call, etc. shall be saved and available for review. Location based security shall only allow these calls in defined locations and times.

• Provide configurable applications and population specific communication controls to ensure appropriate, secure, and compliant management of specialized inmate populations.

• The system should incorporate a platform that provides encrypted and PIN protected platform for inmates to communicate with their attorneys. This system should also incorporate a method for attorney verification/validation.

• Security protocols strictly prohibit or block the taking of screenshots, photographs, or external recordings of any portion of the visit.

• Visitors/Users are required to be in a stable, private location; background participants or groups are prohibited to ensure only the approved individual is present.

6.1.3.4. Artificial Intelligence (AI)

Solution should provide Artificial Intelligence (AI) capabilities that augment the FBOPs intelligence gathering and analytical capacity across the enterprise tablet ecosystem. AI solutions should assist with identifying patterns, detecting unusual activity, and connecting relevant data points in a way that supports informed decision-making. AI features must work with both structured and unstructured data, producing clear, actionable insights through dashboards and automated reports. All AI functions must align with DOJ privacy rules, OPCL requirements, and NIST security standards. The system must also use transparent and explainable methods, maintain complete audit logs, and include safeguards that ensure ethical use and protect sensitive information.

AI will be used as a tool to assist in discovery though will require FBOP staff review and concurrence prior to review and decision. AI live monitoring of phone calls, Scanned mail, Digital Messaging, user activity, etc. for any unusual activity, words, etc.

6.1.3.5. Translations Services

Device shall have the capability to provide real time audio translation between English to other languages as well as from other languages into English in near real-time with both audio sources being with the tablet as well as over any remote communications provided by other services offered. Device shall also have the capability to translate text between English and other languages and from other languages to English.

6.1.3.6. Group Video Meetings

Enable users to have video meetings with FBOP staff and other inmate tablets simultaneously in a group meeting environment with both audio and video connection.

Video shall be limited to only the face and all other areas shall be obfuscated during the call. Video Meetings shall only be accessible when scheduled or on demand by FBOP staff assigning the inmate user to the call.

6.2. Security Objectives

• Provide support and services in compliance and alignment with Federal Risk and

Authorization Management Program (FedRAMP) standardized security assessment, authorization, and continuous monitoring policies as required by the scope of the project.

Assessment and Authorization (A&A) activities will be included as part of the migration.

• The system must provide administrators with the ability to manage access rights at multiple levels, including by individual device, group, location, and content. Security groups must support nested group structures up to five layers, allowing for granular access control and simplified enterprise administration. Security assignments shall at a minimum allow for usage time limits, Time-of-Day (TOD) usage, location usage and content filtering. These capabilities will ensure compliance with organizational policies, support operational flexibility, and provide safeguards against unauthorized use.

• Provide a security plan focused on the integration points of end-user authentication (e.g.

LDAP), cloud environment management authentication (PIV card), and physical and logical security and certification (e.g. FedRAMP) delivering a single comprehensive solution that can be leveraged across the organization reducing end-user confusion and security management complexity. (Applies to situations where cloud services are part of the acquisition especially when systems integration services are required.

• Provide a trusted secure communication channel for cloud environment management to support the Government’s PIV Card authentication (dual factor method) of remote access in accordance with OMB M-11-11. (Applies only when IaaS cloud services are part of the acquisition.

• Contractor employees must comply with DOJ Order 0904 and other guidance published to the publicly available Office of Privacy and Civil Liberties (OPCL) Resources page[3] relating to the safeguarding of PII, including the use of additional controls to safeguard sensitive PII (e.g., the encryption of sensitive PII). This requirement flows down from the Prime Contractor to all Subcontractors and lower tiered subcontracts.

• Contractors must comply with OMB Memorandum M-21-31.

• Contractors must meet the background investigation requirement that is specified in DOJ-

03. Work performed under this contract will involve any one or more of the following:

access to DOJ Information, which may include Controlled Unclassified Information (CUI), i.e., unclassified, sensitive DOJ information, and/or access to DOJ Information Technology (IT) systems, and/or unescorted access to DOJ space or facilities. Contractor employees will occupy Public Trust Positions, unless clause alternates are applied.

• Contractors must meet FISMA, FedRAMP, Privacy Act 1974, DOJ Cyber Security Orders and

DOJ-05.

• Covered Contract is any contract, order or other agreement under which the contractor, or a subcontractor at any tier, including a cloud service provider, may access, collect, store, process, maintain, use, share, retrieve, disseminate, transmit, or dispose of DOJ Information (as defined below) in the course of providing a product or service to the Department, with the exception of acquisitions under the micro-purchase threshold. DOJ Information shall not process, store, or transmit using a Covered Information System without first obtaining an ATO for each Covered Information System. The ATO shall be signed by the Authorizing Official for the DOJ component responsible for maintaining the security, confidentiality, integrity, and availability of DOJ Information under this contract.

6.3. Management Objectives

• Allow the contractor maximum flexibility to innovatively manage program cost, schedule, performance, risks, warranties, contracts and subcontracts, vendors, and data required to deliver effective migration services.

• Maintain clear government visibility into program cost, schedule, technical performance, and risk, including periodic reporting.

• Provide meaningful reporting and analytics that provide the [Agency/Department] with up-to-date and comprehensive information regarding technical and management performance.

6.4. Performance Objectives (Required Results)

The performance objectives of this initiative articulate a comprehensive framework for delivering a secure, resilient, and forward-leaning digital services ecosystem that substantively advances the FBOPs capacity to administer educational, healthcare, legal, comprehensive communication, and rehabilitative resources across the enterprise. The envisioned solution must guarantee equitable and uninterrupted access for a population exceeding 150,000 users, while consistently demonstrating operational fidelity at enterprise scale under the rigor of federal cybersecurity, privacy, and accessibility mandates (e.g. FISMA, FedRAMP, OPCL, NARA, and Section 508). Achieving these outcomes necessitates a technologically robust architecture capable of sustaining high-performance network operations, meeting stringent update and vulnerability-remediation timelines, and supporting transparent, hierarchical administrative governance. The system must be architected to avoid proprietary lock-in through a tablet agnostic design that ensures interoperability with both incumbent and emergent technologies.

The initiative…