15BCTS26Q00000003/0002 Page 1 of 35

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

1. CONTRACT ID CODE PAGE OF PAGES

1 35

2. AMENDMENT/MODIFICATION NUMBER

3. EFFECTIVE DATE 4. REQUISITION/PURCHASE REQUISITION NUMBER 5. PROJECT NUMBER (If applicable)

15BCTSCODE

Federal Bureau of Prisons Community Treatment Services Contracting 320 First Street NW Suite 901-5 Washington, DC 20534

Joo (Jan) Walker

(O) 318-561-5304 j15walker@bop.gov

6. ISSUED BY CODE7. ADMINISTERED BY (If other than Item 6)

9A. AMENDMENT OF SOLICITATION NUMBER

15BCTS26Q00000003

CODE FACILITY CODE

8. NAME AND ADDRESS OF CONTRACTOR (Number, street, country, state and ZIP Code) (X)

X 9B. DATED (SEE ITEM 11)

08/03/2026

10A. MODIFICATION OF CONTRACT/ORDER

NUMBER

10B. DATED (SEE ITEM 13)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X XThe above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers is extended, is not extended.

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods: (a) By completing items 8 and 15, and returning __1__copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted; or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NUMBER AS DESCRIBED IN ITEM 14.

CHECK ONE A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT

ORDER NUMBER IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return _______ copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

Amendment 2 is hereby issued to:

1. Correct the language in the cover letter to read “This Request for Quotation (RFQ) is to provide Virtual Community Reentry Peer Support Services for male and female inmates held under authority of the United States nationwide.” In addition, the response date on the cover letter has been corrected to August 24, 2026.

2. Change the performance period of the impending contract to: 09/10/2026-03/31/2027.

3. The combined to solicitation/synopsis language is be corrected to remove the following sentence: “All treatment services are to be provided by clinicians who currently hold a professional license to practice independently, without supervision.”

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print) 16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

Joo Walker Contracting Officer

(Signature of person authorized to sign)

15B. CONTRACTOR/OFFEROR 15C. DATE SIGNED

By (Signature of Contracting Officer)

16B. UNITED STATES OF AMERICA 16C. DATE SIGNED

Previous edition unusable STANDARD FORM 30 (REV. 11/2016) Prescribed by GSA FAR (48 CFR) 53.243

08/13/2026

08/13/2026

15BCTS26Q00000003/0002 Page 2 of 35

Table of Contents

Section Description Page Number

Solicitation/Contract Form 1 Commodity or Services Schedule 2 Contract Clauses

52.203-6 Alt I Restrictions on Subcontractor Sales to the Government (Jun 2020) - Alternate I (Nov 2021) 52.203-13 Contractor Code of Business Ethics and Conduct (Nov 2021) 52.204-13 (DEV) System for Award Management-Maintenance (Oct 2018) (DEVIATION NOV 2025) 52.204-19 Incorporation by Reference of Representations and Certifications (Dec 2014) 52.204-91 (DEV) Contractor Identification (DEVIATION NOV 2025) 52.209-6 (DEV) Protecting the Government's Interest When Subcontracting with Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded (Jan 2025)

(DEVIATION NOV 2025)

52.209-9 (DEV) Updates of Publicly Available Information Regarding Responsibility Matters (Oct 2018) (DEVIATION NOV 2025) 52.209-10 (DEV) Prohibition on Contracting With Inverted Domestic Corporations (Nov 2015)

(DEVIATION NOV 2025)

52.212-4 (DEV) Terms and Conditions-Commercial Products and Commercial Services (Nov

2023) (DEVIATION NOV 2025)

52.219-8 (DEV) Utilization of Small Business Concerns (Jan 2025) (DEVIATION DEC 2025) 52.222-3 (DEV) Convict Labor (June 2003) (DEVIATION DEC 2025) 52.222-19 (DEV) Child Labor-Cooperation with Authorities and Remedies (Jan 2025)

(DEVIATION DEC 2025)

52.222-35 (DEV) Equal Opportunity for Veterans (Jun 2020) (DEVIATION DEC 2025) 52.222-36 (DEV) Equal Opportunity for Workers with Disabilities (Jun 2020) (DEVIATION

DEC 2025)

52.222-41 (DEV) Service Contract Labor Standards (Aug 2018) (DEVIATION DEC 2025) 52.222-50 (DEV) Combating Trafficking in Persons (Oct 2025) (DEVIATION DEC 2025) 52.222-54 (DEV) Employment Eligibility Verification (Jan 2025) (DEVIATION DEC 2025) 52.222-90 Addressing DEI Discrimination by Federal Contractors (APR 2026) 52.224-3 Privacy Training (Jan 2017) 52.232-33 Payment by Electronic Funds Transfer-System for Award Management (Oct 2018) 52.232-40 Providing Accelerated Payments to Small Business Subcontractors (Mar 2023) 52.233-3 (DEV) Protest after Award (Aug 1996) (DEVIATION NOV 2025) 52.233-4 (DEV) Applicable Law for Breach of Contract Claim (Oct 2004) (DEVIATION NOV 2025) 52.240-91 (DEV) Security Prohibitions and Exclusions (DEVIATION NOV 2025) 52.242-13 Bankruptcy (July 1995) 52.242-15 Stop-Work Order (Aug 1989) 52.252-6 Authorized Deviations in Clauses (Nov 2020) 52.253-1 (DEV) Computer Generated Forms (Jan 1991) (DEVIATION NOV 2025) 52.204-12 Unique Entity Identifier Maintenance (Oct 2016) 52.216-18 Ordering (Aug 2020) 52.216-19 Order Limitations (Oct 1995) 52.219-8 Utilization of Small Business Concerns (Feb 2024) 52.219-28 Post-Award Small Business Program Rerepresentation (Feb 2024) 52.222-37 (DEV) Employment Reports on Veterans (Jun 2020) (DEVIATION DEC 2025) 52.224-1 Privacy Act Notification (Apr 1984) 52.237-7 (DEV) Indemnification and Medical Liability Insurance (Jan 1997) (DEVIATION NOV 2025) 52.239-1 Privacy or Security Safeguards

15BCTS26Q00000003/0002 Page 3 of 35

52.240-93 (DEV) Basic Safeguarding of Covered Contractor Information Systems

(DEVIATION NOV 2025)

BOP 2852.201-71 Contracting Officer's Representative (COR) (June 2012)

BOP 2852.242-71 EVALUATION OF CONTRACTOR PERFORMANCE UTILIZING CPARS

(APR 2011)

BOP DOJ-05 DEVIATION BOP-05 Security of Department Information and Systems (January 2025) DOJ-01 Whistleblower Information Distribution (Oct 2021) DOJ-02 Contractor Privacy Requirements (JAN 2022) DOJ-03 Personnel Security Requirements For Contractor Employees (Nov 2021) DOJ-08 Continuing Contract Performance During a Pandemic Influenza or other National Emergency (OCT 2007)

3 List of Attachments 4 Solicitation Provisions

52.203-11 Certification And Disclosure Regarding Payments to Influence Certain Federal Transactions (Sept 2024) 52.203-18 Prohibition on Contracting with Entities that Require Certain Internal Confidentiality Agreements or Statements--Representation (Jan 2017) 52.204-7 (DEV) System for Award Management-Registration (Nov 2024) (DEVIATION NOV 2025) 52.212-1 (DEV) Instructions to Offerors-Commercial Products and Commercial Services (Sep

2023) (DEVIATION NOV 2025)

52.212-2 (DEV) Evaluation-Commercial Products and Commercial Services (Nov 2021)

(DEVIATION NOV 2025)

52.219-4 (DEV) Notice of Price Evaluation Preference for HUBZone Small Business Concerns (Oct 2022) (DEVIATION DEC 2025) 52.229-11 (DEV) Tax on Certain Foreign Procurements--Notice and Representation (Jun

2020) (DEVIATION AUG 2025)

52.216-1 (DEV) Type of Contract (Apr 1984) (DEVIATION DEC 2025) 52.217-5 Evaluation of Options (July 1990) 52.240-90 (DEV) Security Prohibitions and Exclusions Representations and Certifications

(DEVIATION NOV 2025)

2852.233-70 Protests Filed Directly with the Department of Justice (NOV 2020)

15BCTS26Q00000003/0002 Page 4 of 35

Section 1 - Commodity or Services Schedule

SCHEDULE OF SUPPLIES/SERVICES

CONTINUATION SHEET

ITEM NO. SUPPLIES/SERVICES EST.

QUANTITY

UNIT UNIT PRICE AMOUNT

0001 CRPSS-Basic (1030)

10 Units Guaranteed Minimum; 1015 Units Estimated Maximum

Use the Estimated Maximum Quantity when developing the total amount.

09/10/2026 - 03/31/2027

PSC: G004

Delivery Schedule:

Quantity: 1,015.000000

Place of Performance Address:

Federal Bureau of Prisons Mid Atlantic Regional Office 302 Sentinel Drive Suite 200 Annapolis Junction, MD 20701

Previous :

1,015

Change: 0

Current :

1,015

EA $________ $_________________

ITEM NO. SUPPLIES/SERVICES EST.

QUANTITY

UNIT UNIT PRICE AMOUNT

0002 CRPSS-Standard (1040)

5 Units Guaranteed Minimum; 600 Units Estimated Maximum

Use the Estimated Maximum Quantity when developing the total amount.

09/10/2026 - 03/31/2027

PSC: G004

Delivery Schedule:

Quantity: 600.000000

Place of Performance Address:

Federal Bureau of Prisons Mid Atlantic Regional Office 302 Sentinel Drive Suite 200 Annapolis Junction, MD 20701

Previous :

Change: 0

Current :

EA $________ $_________________

ITEM NO. SUPPLIES/SERVICES EST.

QUANTITY

UNIT UNIT PRICE AMOUNT

0003 CRPSS-Enhanced (1050)

3 Units Guaranteed Minimum; 250 Units Estimated Maximum

Previous :

EA $________ $_________________

15BCTS26Q00000003/0002 Page 5 of 35

Use the Estimated Maximum Quantity when developing the total amount.

09/10/2026 - 03/31/2027

PSC: G004

Delivery Schedule:

Quantity: 250.000000

Place of Performance Address:

Federal Bureau of Prisons Mid Atlantic Regional Office 302 Sentinel Drive Suite 200 Annapolis Junction, MD 20701

Change: 0

Current :

Section 2 - Contract Clauses

A.1 ADDENDUM TO FAR 52.212-4, Terms and Conditions-Commercial Products and Commercial Services (Nov

2023) (DEVIATION NOV 2025)

The terms and conditions for the following clauses are hereby incorporated into this solicitation and resulting contract as an addendum to FAR clause 52.212-4.

Clauses By Reference

52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es): www.acquisition.gov

Clause Title Fill-ins (if applicable)

52.203-6 Alt I Restrictions on Subcontractor Sales to the Government

(Jun 2020) - Alternate I (Nov 2021)

52.203-13 Contractor Code of Business Ethics and Conduct (Nov

2021)

52.204-13 (DEV) System for Award Management-Maintenance (Oct 2018)

(DEVIATION NOV 2025)

52.204-19 Incorporation by Reference of Representations and

Certifications (Dec 2014)

52.204-91 (DEV) Contractor Identification (DEVIATION NOV 2025)

52.209-6 (DEV) Protecting the Government's Interest When

Subcontracting with Contractors Debarred, Suspended, 15BCTS26Q00000003/0002 Page 6 of 35

Clause Title Fill-ins (if applicable)

Proposed for Debarment, or Voluntarily Excluded (Jan

2025) (DEVIATION NOV 2025)

52.209-9 (DEV) Updates of Publicly Available Information Regarding

Responsibility Matters (Oct 2018) (DEVIATION NOV

2025)

52.209-10 (DEV) Prohibition on Contracting With Inverted Domestic

Corporations (Nov 2015) (DEVIATION NOV 2025)

52.212-4 (DEV) Terms and Conditions-Commercial Products and

Commercial Services (Nov 2023) (DEVIATION NOV

2025)

52.219-8 (DEV) Utilization of Small Business Concerns (Jan 2025)

(DEVIATION DEC 2025)

52.222-3 (DEV) Convict Labor (June 2003) (DEVIATION DEC 2025)

52.222-19 (DEV) Child Labor-Cooperation with Authorities and Remedies

(Jan 2025) (DEVIATION DEC 2025)

52.222-35 (DEV) Equal Opportunity for Veterans (Jun 2020) (DEVIATION

DEC 2025)

52.222-36 (DEV) Equal Opportunity for Workers with Disabilities (Jun

2020) (DEVIATION DEC 2025)

52.222-41 (DEV) Service Contract Labor Standards (Aug 2018)

(DEVIATION DEC 2025)

52.222-50 (DEV) Combating Trafficking in Persons (Oct 2025)

(DEVIATION DEC 2025)

52.222-54 (DEV) Employment Eligibility Verification (Jan 2025)

(DEVIATION DEC 2025)

52.222-90 Addressing DEI Discrimination by Federal Contractors

(APR 2026)

52.224-3 Privacy Training (Jan 2017)

52.232-33 Payment by Electronic Funds Transfer-System for

Award Management (Oct 2018)

15BCTS26Q00000003/0002 Page 7 of 35

Clause Title Fill-ins (if applicable)

52.232-40 Providing Accelerated Payments to Small Business

Subcontractors (Mar 2023)

52.233-3 (DEV) Protest after Award (Aug 1996) (DEVIATION NOV 2025)

52.233-4 (DEV) Applicable Law for Breach of Contract Claim (Oct 2004)

(DEVIATION NOV 2025)

52.240-91 (DEV) Security Prohibitions and Exclusions (DEVIATION NOV

2025)

52.242-13 Bankruptcy (July 1995)

52.242-15 Stop-Work Order (Aug 1989)

52.252-6 Authorized Deviations in Clauses (Nov 2020)

52.253-1 (DEV) Computer Generated Forms (Jan 1991) (DEVIATION

NOV 2025)

Clauses By Full Text

52.204-12 Unique Entity Identifier Maintenance (Oct 2016)

(a) Definition. "Unique entity identifier," as used in this clause, means a number or other identifier used to identify a specific commercial, nonprofit, or Government entity. See www.sam.gov for the designated entity for establishing unique entity identifiers.

(b) The Contractor shall ensure that the unique entity identifier is maintained with the entity designated at the System for Award Management (SAM) for establishment of the unique entity identifier throughout the life of the contract. The Contractor shall communicate any change to the unique entity identifier to the Contracting Officer within 30 days after the change, so an appropriate modification can be issued to update the data on the contract. A change in the unique entity identifier does not necessarily require a novation be accomplished.

(End of clause)

52.216-18 Ordering (Aug 2020)

(a) Any supplies and services to be furnished under this contract shall be ordered by issuance of delivery orders or task orders by the individuals or activities designated in the Schedule. Such orders may be issued from the first day of the contract's effective period through the last day of the contract's effective period. [insert dates].

(b) All delivery orders or task orders are subject to the terms and conditions of this contract. In the event of conflict between a delivery order or task order and this contract, the contract shall control.

(c) A delivery order or task order is considered "issued" when--

(1) If sent by mail (includes transmittal by U.S. mail or private delivery service), the Government deposits the order in the mail;

(2) If sent by fax, the Government transmits the order to the Contractor's fax number; or

15BCTS26Q00000003/0002 Page 8 of 35

(3) If sent electronically, the Government either--

(i) Posts a copy of the delivery order or task order to a Government document access system, and notice is sent to the Contractor; or

(ii) Distributes the delivery order or task order via email to the Contractor's email address.

(d) Orders may be issued by methods other than those enumerated in this clause only if authorized in the contract.

(End of clause)

52.216-19 Order Limitations (Oct 1995)

(a) Minimum order. When the Government requires supplies or services covered by this contract in an amount of less than $1.00 [insert dollar figure or quantity], the Government is not obligated to purchase, nor is the Contractor obligated to furnish, those supplies or services under the contract.

(b) Maximum order. The Contractor is not obligated to honor--

(1) Any order for a single item in excess of the estimated quantities identified on the SF-1449 (Block 21, Quantity) within the current contract performance period. [insert dollar figure or quantity];

(2) Any order for a combination of items in excess of the estimated quantities identified on the SF-1449 (Block 21, Quantity) within the current contract performance period. [insert dollar figure or quantity]; or

(3) A series of orders from the same ordering office within the estimated quantities identified on the SF-1449 (Block 21, Quantity) within the current contract performance period. days that together call for quantities exceeding the limitation in paragraph (b)(1) or (2) of this section.

(c) If this is a requirements contract (i.e., includes the Requirements clause at subsection 52.216-21 of the Federal Acquisition Regulation (FAR)), the Government is not required to order a part of any one requirement from the Contractor if that requirement exceeds the maximum-order limitations in paragraph (b) of this section.

(d) Notwithstanding paragraphs (b) and (c) of this section, the Contractor shall honor any order exceeding the maximum order limitations in paragraph (b), unless that order (or orders) is returned to the ordering office within 7 days after issuance, with written notice stating the Contractor's intent not to ship the item (or items) called for and the reasons. Upon receiving this notice, the Government may acquire the supplies or services from another source.

(End of clause)

52.219-8 Utilization of Small Business Concerns (Feb 2024)

(a) Definitions. As used in this contract--

HUBZone small business concern means a small business concern that meets the requirements described in 13 CFR 126.200, certified by the Small Business Administration (SBA) and designated by SBA as a HUBZone small business concern in the Dynamic Small Business Search (DSBS) and SAM.

Service-disabled veteran-owned small business (SDVOSB) concern means a small business concern--

(1)(i) Not less than 51 percent of which is owned and controlled by one or more service-disabled veterans or, in the case of any publicly owned business, not less than 51 percent of the stock of which is owned by one or more service-disabled veterans; and

(ii) The management and daily business operations of which are controlled by one or more service-disabled veterans or, in the case of a service-disabled veteran with permanent and severe disability, the spouse or permanent caregiver of such veteran; or

15BCTS26Q00000003/0002 Page 9 of 35

(2) A small business concern eligible under the SDVOSB Program in accordance with 13 CFR part 128 (see subpart 19.14).

(3) Service-disabled veteran, as used in this definition, means a veteran, as defined in 38 U.S.C. 101(2), with a disability that is service-connected, as defined in 38 U.S.C. 101(16), and who is registered in the Beneficiary Identification and Records Locator Subsystem, or successor system that is maintained by the Department of Veterans Affairs' Veterans Benefits Administration, as a service-disabled veteran.

Service-disabled veteran-owned small business (SDVOSB) concern eligible under the SDVOSB Program means an SDVOSB concern that--

(1) Effective January 1, 2024, is designated in the System for Award Management (SAM) as certified by the Small Business Administration (SBA) in accordance with 13 CFR 128.300; or

(2) Has represented that it is an SDVOSB concern in SAM and submitted a complete application for certification to SBA on or before December 31, 2023.

Service-disabled veteran-owned small business (SDVOSB) Program means a program that authorizes contracting officers to limit competition, including award on a sole-source basis, to SDVOSB concerns eligible under the SDVOSB Program.

Small business concern means a concern, including its affiliates, that is independently owned and operated, not dominant in its field of operation and qualified as a small business under the criteria and size standards in 13 CFR part 121, including the size standard that corresponds to the NAICS code assigned to the contract or subcontract.

Small disadvantaged business concern, consistent with 13 CFR 124.1001, means a small business concern under the size standard applicable to the acquisition, that--

(1) Is at least 51 percent unconditionally and directly owned (as defined at 13 CFR 124.105) by--

(i) One or more socially disadvantaged (as defined at 13 CFR 124.103) and economically disadvantaged (as defined at 13 CFR 124.104) individuals who are citizens of the United States; and

(ii) Each individual claiming economic disadvantage has a net worth not exceeding the threshold at 13 CFR 124.104(c)(2) after taking into account the applicable exclusions set forth at 13 CFR 124.104(c)(2); and

(2) The management and daily business operations of which are controlled (as defined at 13.CFR 124.106) by individuals, who meet the criteria in paragraphs (1)(i) and (ii) of this definition.

Veteran-owned small business concern means a small business concern--

(1) Not less than 51 percent of which is owned and controlled by one or more veterans (as defined at 38 U.S.C.101(2)) or, in the case of any publicly owned business, not less than 51 percent of the stock of which is owned by one or more veterans; and

(2) The management and daily business operations of which are controlled by one or more veterans.

Women-owned small business concern means a small business concern-

(1) That is at least 51 percent owned by one or more women, or, in the case of any publicly owned business, at least 51 percent of the stock of which is owned by one or more women; and

(2) Whose management and daily business operations are controlled by one or more women.

(b) It is the policy of the United States that small business concerns, veteran-owned small business concerns, service-disabled veteran-owned small business concerns, HUBZone small business concerns, small disadvantaged business concerns, and women-owned small business concerns shall have the maximum practicable opportunity to participate in performing contracts let by any Federal agency, including contracts and subcontracts for subsystems, assemblies, components, and related services for major systems. It is further the policy of the United States that its prime contractors establish procedures to ensure the timely payment of amounts due pursuant to the terms of their subcontracts with small business concerns, veteran-owned small business concerns, service-disabled veteran-owned small business

15BCTS26Q00000003/0002 Page 10 of 35 concerns, HUBZone small business concerns, small disadvantaged business concerns, and women-owned small business concerns.

(c)(1) A joint venture qualifies as a small business concern if--

(i) Each party to the joint venture qualifies as small under the size standard for the solicitation; or

(ii) The protégé is small under the size standard for the solicitation in a joint venture comprised of a mentor and protégé with an approved mentor-protégé agreement under a SBA mentor-protégé program. (See 13 CFR 125.9(d).);

(2) A joint venture qualifies as a HUBZone small business concern if it complies with the requirements in 13 CFR 126.616(a) through (c).

(d) The Contractor hereby agrees to carry out this policy in the awarding of subcontracts to the fullest extent consistent with efficient contract performance. The Contractor further agrees to cooperate in any studies or surveys as may be conducted by the United States Small Business Administration or the awarding agency of the United States as may be necessary to determine the extent of the Contractor's compliance with this clause.

(e)(1) The Contractor may accept a subcontractor's written representations of its size and socioeconomic status as a small business, small disadvantaged business, veteran-owned small business, service-disabled veteran-owned small business, or a women-owned small business if the subcontractor represents that the size and socioeconomic status representations with its offer are current, accurate, and complete as of the date of the offer for the subcontract.

(2) The Contractor may accept a subcontractor's representations of its size and socioeconomic status as a small business, small disadvantaged business, veteran-owned small business, service-disabled veteran-owned small business, or a women-owned small business in the System for Award Management (SAM) if--

(i) The subcontractor is registered in SAM; and

(ii) The subcontractor represents that the size and socioeconomic status representations made in SAM are current, accurate and complete as of the date of the offer for the subcontract.

(3) The Contractor may not require the use of SAM for the purposes of representing size or socioeconomic status in connection with a subcontract.

(4) In accordance with 13 CFR 121.411, 126.900, 127.700, and 128.600, a contractor acting in good faith is not liable for misrepresentations made by its subcontractors regarding the subcontractor's size or socioeconomic status.

(5) The Contractor shall confirm that a subcontractor representing itself as a HUBZone small business concern is certified by SBA as a HUBZone small business concern by accessing SAM or by accessing DSBS at https://web.sba.gov/pro-net/ search/dsp_dsbs.cfm. If the subcontractor is a joint venture, the Contractor shall confirm that at least one party to the joint venture is certified by SBA as a HUBZone small business concern. The Contractor may confirm the representation by accessing the System for Award Management or contacting SBA. Options for contacting the SBA include--

(i) HUBZone small business database search application web page at http://dsbs.sba.gov/dsbs/search/ dsp_searchhubzone.cfm; or http://www.sba.gov/hubzone;

(ii) In writing to the Director/HUB, U.S. Small Business Administration, 409 3rd Street, SW., Washington, DC 20416; or

(iii) The SBA HUBZone Help Desk at hubzone@sba.gov.

(End of clause)

52.219-28 Post-Award Small Business Program Rerepresentation (Feb 2024)

(a) Definitions. As used in this clause--

Long-term contract means a contract of more than five years in duration, including options. However, the term does not include contracts that exceed five years in duration because the period of performance has been extended for a

15BCTS26Q00000003/0002 Page 11 of 35 cumulative period not to exceed six months under the clause at 52.217-8, Option to Extend Services, or other appropriate authority.

Small business concern--

(1) Means a concern, including its affiliates, that is independently owned and operated, not dominant in its field of operation, and qualified as a small business under the criteria in 13 CFR part 121 and the size standard in paragraph (d) of this clause.

(2) Affiliates, as used in this definition, means business concerns, one of whom directly or indirectly controls or has the power to control the others, or a third party or parties control or have the power to control the others. In determining whether affiliation exists, consideration is given to all appropriate factors including common ownership, common management, and contractual relationships. SBA determines affiliation based on the factors set forth at 13 CFR 121.103.

(b) If the Contractor represented that it was any of the small business concerns identified in 19.000(a)(3) prior to award of this contract, the Contractor shall rerepresent its size and socioeconomic status according to paragraph (f) of this clause or, if applicable, paragraph (h) of this clause, upon occurrence of any of the following:

(1) Within 30 days after execution of a novation agreement or within 30 days after modification of the contract to include this clause, if the novation agreement was executed prior to inclusion of this clause in the contract.

(2) Within 30 days after a merger or acquisition that does not require a novation or within 30 days after modification of the contract to include this clause, if the merger or acquisition occurred prior to inclusion of this clause in the contract.

(3) For long-term contracts--

(i) Within 60 to 120 days prior to the end of the fifth year of the contract; and

(ii) Within 60 to 120 days prior to the date specified in the contract for exercising any option thereafter.

(c) If the Contractor represented that it was any of the small business concerns identified in 19.000(a)(3) prior to award of this contract, the Contractor shall rerepresent its size and socioeconomic status according to paragraph (f) of this clause or, if applicable, paragraph (h) of this clause, when the Contracting Officer explicitly requires it for an order issued under a multiple-award contract.

(d) The Contractor shall rerepresent its size status in accordance with the size standard in effect at the time of this rerepresentation that corresponds to the North American Industry Classification System (NAICS) code(s) assigned to this contract. The small business size standard corresponding to this NAICS code(s) can be found at https://www.sba.gov/ document/support--table-size-standards.

(e) The small business size standard for a Contractor providing an end item that it does not manufacture, process, or produce itself, for a contract other than a construction or service contract, is 500 employees, or 150 employees for information technology value-added resellers under NAICS code 541519, if the acquisition--

(1) Was set aside for small business and has a value above the simplified acquisition threshold;

(2) Used the HUBZone price evaluation preference regardless of dollar value, unless the Contractor waived the price evaluation preference; or

(3) Was an 8(a), HUBZone, service-disabled veteran-owned, economically disadvantaged women-owned, or women-owned small business set-aside or sole-source award regardless of dollar value.

(f) Except as provided in paragraph (h) of this clause, the Contractor shall make the representation(s) required by paragraph (b) and (c) of this clause by validating or updating all its representations in the Representations and Certifications section of the System for Award Management (SAM) and its other data in SAM, as necessary, to ensure that they reflect the Contractor's current status. The Contractor shall notify the contracting office in writing within the timeframes specified in paragraph (b) of this clause, or with its offer for an order (see paragraph (c) of this clause), that the data have been validated or updated, and provide the date of the validation or update.

15BCTS26Q00000003/0002 Page 12 of 35

(g) If the Contractor represented that it was other than a small business concern prior to award of this contract, the Contractor may, but is not required to, take the actions required by paragraphs (f) or (h) of this clause.

(h) If the Contractor does not have representations and certifications in SAM, or does not have a representation in SAM for the NAICS code applicable to this contract, the Contractor is required to complete the following rerepresentation and submit it to the contracting office, along with the contract number and the date on which the rerepresentation was completed:

(1) The Contractor represents that it __ is, __ is not a small business concern under NAICS Code ____________ assigned to contract number ____________________.

(2) [Complete only if the Contractor represented itself as a small business concern in paragraph (h)(1) of this clause.] The Contractor represents that it __ is, __ is not, a small disadvantaged business concern as defined in 13 CFR 124.1001.

(3) [Complete only if the Contractor represented itself as a small business concern in paragraph (h)(1) of this clause.] The Contractor represents that it __ is, __ is not a women-owned small business concern.

(4) Women-owned small business (WOSB) joint venture eligible under the WOSB Program. The Contractor represents that it __ is, __ is not a joint venture that complies with the requirements of 13 CFR 127.506(a) through (c). [The Contractor shall enter the name and unique entity identifier of each party to the joint venture:

(5) Economically disadvantaged women-owned small business (EDWOSB) joint venture. The Contractor represents that it __ is, __ is not a joint venture that complies with the requirements of 13 CFR 127.506(a) through (c). [The Contractor shall enter the name and unique entity identifier of each party to the joint venture: _________________________.]

(6) [Complete only if the Contractor represented itself as a small business concern in paragraph (h)(1) of this clause.] The Contractor represents that it __ is, __ is not a veteran-owned small business concern.

(7) [Complete only if the Contractor represented itself as a veteran-owned small business concern in paragraph (h)(6) of this clause.] The Contractor represents that it __ is, __ is not a service-disabled veteran-owned small business concern.

(8) Service-disabled veteran-owned small business (SDVOSB) joint venture eligible under the SDVOSB Program. The Contractor represents that it __ is, __ is not an SDVOSB joint venture eligible under the SDVOSB Program that complies with the requirements of 13 CFR 128.402. [The Contractor shall enter the name and unique entity identifier of each party to the joint venture: ____________________.]

(9) [Complete only if the Contractor represented itself as a small business concern in paragraph (h)(1) of this clause.] The Contractor represents that--

(i) It __ is, __ is not a HUBZone small business concern listed, on the date of this representation, on the List of Qualified HUBZone Small Business Concerns maintained by the Small Business Administration, and no material changes in ownership and control, principal office, or HUBZone employee percentage have occurred since it was certified in accordance with 13 CFR part 126; and

(ii) It __ is, __ is not a HUBZone joint venture that complies with the requirements of 13 CFR part 126, and the representation in paragraph (h)(9)(i) of this clause is accurate for each HUBZone small business concern participating in the HUBZone joint venture. [The Contractor shall enter the names of each of the HUBZone small business concerns participating in the HUBZone joint venture: ____________________.] Each HUBZone small business concern participating in the HUBZone joint venture shall submit a separate signed copy of the HUBZone representation.

[Contractor to sign and date and insert authorized signer's name and title.]

(End of clause)

52.222-37 (DEV) Employment Reports on Veterans (Jun 2020) (DEVIATION DEC 2025)

15BCTS26Q00000003/0002 Page 13 of 35

(a) Definitions. As used in this clause, "active duty wartime or campaign badge veteran," "Armed Forces service medal veteran," "disabled veteran," "protected veteran," and "recently separated veteran," have the meanings given in Federal Acquisition Regulation (FAR) 22.1301.

(b) Unless the Contractor is a State or local government agency, the Contractor must report at least annually, as required by the Secretary of Labor, on-

(1) The total number of employees in the contractor’s workforce, by job category and hiring location, who are protected veterans (i.e., active duty wartime or campaign badge veterans, Armed Forces service medal veterans, disabled veterans, and recently separated veterans);

(2) The total number of new employees hired during the period covered by the report, and of the total, the number of protected veterans (i.e., active duty wartime or campaign badge veterans, Armed Forces service medal veterans, disabled veterans, and recently separated veterans); and

(3) The maximum number and minimum number of employees of the Contractor or subcontractor during the period covered by the report.

(c) The Contractor must report the above items by filing the VETS-4212 "Federal Contractor Veterans’ Employment Report" (see "VETS-4212 Federal Contractor Reporting" and "Filing Your VETS-4212 Report" at http://www.dol.gov/vets/ vets4212.htm).

(d) The Contractor must file VETS-4212 Reports no later than September 30 of each year.

(e) The employment activity report required by paragraphs (b)(2) and (b)(3) of this clause must reflect total new hires, and maximum and minimum number of employees, during the most recent 12–month period preceding the ending date selected for the report.

(f) The number of veterans reported must be based on data known to the contractor when completing the VETS-4212.

The contractor’s knowledge of veterans status may be obtained in a variety of ways, including an invitation to applicants to self-identify (in accordance with 41 CFR 60-300.42), voluntary self-disclosure by employees, or actual knowledge of veteran status by the contractor. This paragraph does not relieve an employer of liability for discrimination under 38 U.S.C. 4212.

(g) The Contractor must insert the terms of this clause in subcontracts valued at or above the threshold specified in FAR 22.1302-1(b) on the date of subcontract award, unless exempted by rules, regulations, or orders of the Secretary of Labor.

52.224-1 Privacy Act Notification (Apr 1984)

The Contractor will be required to design, develop, or operate a system of records on individuals, to accomplish an agency function subject to the Privacy Act of 1974, Public Law 93-579, December 31, 1974 (5 U.S.C. 552a) and applicable agency regulations. Violation of the Act may involve the imposition of criminal penalties.

(End of clause)

52.237-7 (DEV) Indemnification and Medical Liability Insurance (Jan 1997) (DEVIATION NOV 2025)

(a) It is expressly agreed and understood that this is a nonpersonal services contract, under which the professional services rendered by the Contractor are rendered in its capacity as an independent contractor. The Government may evaluate the quality of professional and administrative services provided, but retains no control over professional aspects of the services rendered, including by example, the Contractor's professional medical judgment, diagnosis, or specific medical treatments. The Contractor shall be solely liable for and expressly agrees to indemnify the Government with respect to any liability producing acts or omissions by it or by its employees or agents. The Contractor shall maintain during the term of this contract liability insurance issued by a responsible insurance carrier of not less than the following amount(s) per specialty per occurrence: $1 million .

15BCTS26Q00000003/0002 Page 14 of 35

(b) An apparently successful offeror, upon request by the Contracting Officer, shall furnish prior to contract award evidence of its insurability concerning the medical liability insurance required by paragraph (a) of this clause.

(c) Liability insurance may be on either an occurrences basis or on a claims-made basis. If the policy is on a claims-made basis, an extended reporting endorsement (tail) for a period of not less than 3 years after the end of the contract term must also be provided.

(d) Evidence of insurance documenting the required coverage for each health care provider who will perform under this contract shall be provided to the Contracting Officer prior to the commencement of services under this contract. If the insurance is on a claims-made basis and evidence of an extended reporting endorsement is not provided prior to the commencement of services, evidence of such endorsement shall be provided to the Contracting Officer prior to the expiration of this contract. Final payment under this contract shall be withheld until evidence of the extended reporting endorsement is provided to the Contracting Officer.

(e) The policies evidencing required insurance shall also contain an endorsement to the effect that any cancellation or material change adversely affecting the Government's interest shall not be effective until 30 days after the insurer or the Contractor gives written notice to the Contracting Officer. If during the performance period of the contract the Contractor changes insurance providers, the Contractor must provide evidence that the Government will be indemnified to the limits specified in paragraph (a) of this clause, for the entire period of the contract, either under the new policy, or a combination of old and new policies.

(f) The Contractor shall insert the substance of this clause, including this paragraph (f), in all subcontracts under this contract for health care services and shall require such subcontractors to provide evidence of and maintain insurance in accordance with paragraph (a) of this clause. At least 5 days before the commencement of work by any subcontractor, the Contractor shall furnish to the Contracting Officer evidence of such insurance.

52.239-1 Privacy or Security Safeguards

52.239-1 Privacy or Security Safeguards (Aug 1996)

(a) The Contractor shall not publish or disclose in any manner, without the Contracting Officer's written consent, the details of any safeguards either designed or developed by the Contractor under this contract or otherwise provided by the Government.-

(b) To the extent required to carry out a program of inspection to safeguard against threats and hazards to the security, integrity, and confidentiality of Government data, the Contractor shall afford the Government access to the Contractor's facilities, installations, technical capabilities, operations, documentation, records, and databases.-

(c) If new or unanticipated threats or hazards are discovered by either the Government or the Contractor, or if existing safeguards have ceased to function, the discoverer shall immediately bring the situation to the attention of the other party.

(End of clause)

52.240-93 (DEV) Basic Safeguarding of Covered Contractor Information Systems (DEVIATION NOV 2025)

(a) Definitions. As used in this clause—

Covered contractor information system means an information system that is owned or operated by a contractor that processes, stores, or transmits Federal contract information.

Federal contract information—

(1) Means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government; but

(2) Does not include information provided by the Government to the public (such as on public websites) or simple transactional information (such as information necessary to process payments).

Information means any communication or representation of knowledge such as facts, data, or opinions, in any medium or form, including textual, numerical, graphic, cartographic, narrative, or audiovisual (Committee on National Security Systems Instruction (CNSSI) 4009).

15BCTS26Q00000003/0002 Page 15 of 35

Information system means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information (44 U.S.C. 3502).

Safeguarding means measures or controls that are prescribed to protect information systems.

(b) Safeguarding requirements.

(1) Basic requirements. The Contractor shall safeguard its covered contractor information systems by implementing, at minimum, the following security controls:

(i) Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems).

(ii) Limit information system access to the types of transactions and functions that authorized users are permitted to execute.

(iii) Verify and control/limit connections to and use of external information systems.

(iv) Control information posted or processed on publicly accessible information systems.

(v) Identify information system users, processes acting on behalf of users, or devices.

(vi) Authenticate (or verify) the identities of those users, processes, or devices, as a prerequisite to allowing access to organizational information systems.

(vii) Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse.

(viii) Limit physical access to organizational information systems, equipment, and the respective operating environments to authorized individuals.

(ix) Escort visitors and monitor visitor activity; maintain audit logs of physical access; and control and manage physical access devices.

(x) Monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems.

(xi) Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks.

(xii) Identify, report, and correct information and information system flaws in a timely manner.

(xiii) Provide protection from malicious code at appropriate locations within organizational information systems.

(xiv) Update malicious code protection mechanisms when new releases are available.

(xv) Perform periodic scans of the information system and real-time scans of files from external sources as files are downloaded, opened, or executed.

(2) Other requirements. This clause does not relieve the Contractor of any other specific safeguarding requirements specified by Federal departments and agencies relating to covered contractor information systems generally or other Federal safeguarding requirements for controlled unclassified information (CUI) as established by Executive Order 13556.

(c) Subcontracts. The Contractor shall include the substance of this clause, including this paragraph (c), in subcontracts under this contract (including subcontracts for the acquisition of commercial products, other than commercially available off-the-shelf items, or commercial services), in which the subcontractor may have Federal contract information residing in or transiting through its information system.

15BCTS26Q00000003/0002 Page 16 of 35

BOP 2852.201-71 Contracting Officer's Representative (COR) (June 2012)

(a)Program Oversight Team 1 ,Jeanine Stank, Supervisory Community Treatment Coordinator, jstank@bop.gov, 202-451-7224, Tracia Brown, Community Treatment Oversight Specialist, t23brown@bop.gov, 202-923-1339, Sharhonda Carpenter, CTOS, s1carpenter@bop.gov, 202-451-7704, Sheena Carter, CTOS, s8carter@bop.gov, 202-305-7885, Rick Dooley, CTOS, rdooley@bop.gov, 202-451-7607, Sabrina Thompson, CTOS, sthompson@bop.gov, 202-598-0273, Rachel Winters, CTOS, rwinters@bop.gov, 202-924-1908 , [Location],Mid Atlantic Regional Office, 302 Sentinel Drive, Suite 200, Annapolis Junction, MD 20701, is hereby designated as the Contracting Officer's Representative (COR) under this contract.

(b) The COR is responsible, as applicable, for: receiving all deliverables, inspecting and accepting the supplies or services provide hereunder in accordance with the terms and conditions of this contract; providing direction to the contractor which clarifies the contractor effort, fills in details or otherwise serves to accomplish the contractual Scope of Work; evaluating performance; and certifying all invoices/vouchers for acceptance of the supplies or services furnished for payment.

(c) The COR does not have the authority to alter the contractor's obligations under the contract, and/or modify any of the expressed terms, conditions, specifications, or cost of the agreement. If as a result of technical discussions it is desirable to alter/change contractual obligations or the Scope of Work, the Contracting Officer shall issue such changes.

BOP 2852.242-71 EVALUATION OF CONTRACTOR PERFORMANCE UTILIZING CPARS (APR 2011)

The services, although not directly supervised, shall be reviewed by Federal Bureau of Prisons (BOP) staff to ensure contract compliance. The contractor's performance will be evaluated in accordance with FAR 42.15. Contract monitoring reports will be prepared by the Contacting Officer's Representative (COR) and maintained in the contract file.

In accordance with FAR 42.1502 and 42.1503, agencies shall prepare an evaluation of contractor performance and submit it to the Past Performance Information Retrieval System (PPIRS). The BOP utilizes the Department of Defense (DOD) web-based Contractor Performance Assessment Reporting System (CPARS) to provide contractor performance evaluations. The contractor shall provide and maintain a current e-mail address throughout the life of the contract. The contractor will receive an e-mail from the Focal Point thru the following website addresswebptsmh@navy.milwhen the contract is registered in CPARS. The e-mail will contain a "user ID" and temporary password to register in the CPARS system. The contractor must be registered to access and review its evaluation and/or provide a response. If assistance is required when registering, please contact the Contracting Staff/Focal Point.

(End of Clause)

BOP DOJ-05 DEVIATION BOP-05 Security of Department Information and Systems (January 2025)

The vendor is required to complete Attachment 8 , Federal Bureau of Prisons Vendor Cybersecurity Attestation Form, addressing the security measures they rely upon to protect any DOJ Information and/or DOJ Information Systems for which they come into contact within the course of performing services under contract/agreement with DOJ.

The vendor shall submit the Federal Bureau of Prisons Vendor Cybersecurity Attestation Form, along with supporting documentation, at the time of solicitation response, annually, and when significant changes to the provided services, operating environment, or data processed occur.

DOJ-01 Whistleblower Information Distribution (Oct 2021)

Within 30 days of contract award, the contractor and its subcontractors must distribute the “Whistleblower Information for Employees of DOJ Contractors, Subcontractors, Grantees, or Sub-Grantees or Personal Services Contractors” (“Whistleblower Information”) document to their employees performing work in support of the products and services delivered under this contract

15BCTS26Q00000003/0002 Page 17 of 35

(https://oi…