19GR1026Q0016-P00001 Amendment.pdf

NSN 7540-01-152-8070 Standard Form 30 (revised 10/83)

Prescribed by GSA FAR (48 CFR) 53.243

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

1. CONTRACT ID CODE

PAGES

2. AMENDMENT/MODIFICATION NO.

P00001

3. EFFECTIVE DATE

March 12, 2026

4. REQUISITION NO.

PR15849837

5. PROJECT NO. (If applicable)

6. ISSUED BY CODE

7. ADMINISTERED BY (if either than item

6) CODE

American Embassy – GSO

91 Vas. Sophias Avenue

101 60 Athens

8. NAME AND ADDRESS OF CONTRACTOR (NO., street,city,county,State,&ZIP Code)

X 9a. AMENDMENT OF SOLICITATION

NO. 19GR1026Q0016

9b. DATED (SEE ITEM 11)

February 26, 2026

10a. MODIFICATION OF

CONTRACT/ORDER NO.

10b. DATED (SEE ITEM 13)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

[ X ] The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers is X extended, [] is not extended. Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods: (a) By completing Items 8 and 15 and returning 1 copy of the amendment;(b) By acknowledging receipt of this amendment on each copy of the offer submitted; or(c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers.

FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS

PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS, IT MODIFIES THE CONTRACT/ORDER NO. AS

DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN

THE CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b)

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor [] is not, [X] is required to sign this document and return __1_ copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

The purpose of this amendment is to add the DOSAR Clauses attached.

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

16A. NAME OF CONTRACTING OFFICER

Dresden A. Kalin

15B. NAME OF CONTRACTOR/OFFEROR

BY

(Signature of person authorized to sign)

15C.DATE SIGNED 16B. UNITED STATES OF AMERICA

BY s

(Signature of Contracting Officer)

16C.DATE SIGNED

DOSAR 652.239-801 DISCLOSURE OF AI USE CLAUSE (DEVIATION) (SEP

2025)

(a) Definitions. As used in this clause:

Artificial Intelligence (AI): The term "artificial intelligence" has the meaning provided in Section 238(g) of the John S. McCain National Defense Authorization

Act for Fiscal Year 2019.

i. This definition of AI encompasses, but is not limited to, the AI technical subfields of machine learning (including deep learning as well as supervised, unsupervised, and semi-supervised approaches), reinforcement learning, transfer learning, and generative AI.

ii. This definition of AI does not include robotic process automation or other systems whose behavior is defined only by human-defined rules or that learn solely by repeating an observed practice exactly as it was conducted.

iii. For this definition, no system should be considered too simple to qualify as covered AI due to a lack of technical complexity (e.g., the smaller number of parameters in a model, the type of model, or the amount of data used for training purposes).

iv. This definition includes systems that are fully autonomous, partially autonomous, and not autonomous, and it includes systems that operate both with and without human oversight.

(b) Disclosure of AI Use in Contract Performance. When the Contractor or any of its subcontractors, vendors, or agents intends to incorporate AI into the performance of the contract, the Contractor shall provide the following disclosures in its offer:

Disclose the intended use of AI and provide a description of the AI system or capability and its purpose within the contract scope; specify whether the system was developed internally, acquired from a third party, or is publicly/commercially available; indicate if the AI system will process PII or be used in ways that may affect privacy, civil rights, safety, or public interaction; detail the governance, oversight, and human-in-the-loop mechanisms to be applied; and describe any applicable testing, evaluation, risk management, or bias mitigation measures that have been or will be implemented.

These disclosures must be updated promptly to the Contracting Officer during the period of performance upon any new use of AI or significant material change to the existing AI capability, its functionality, its use case, or its data inputs/outputs during the life of the contract.

The Government reserves the right to review the proposed AI use, request additional safeguards or controls, and/or disallow its use if it is deemed inconsistent with agency policy, legal requirements, or federal AI governance standards.

(End of Clause)

DOSAR 652.239-802 VENDOR LOCK-IN PROVISION (DEVIATION) (SEP

2025)

(a) Definitions. As used in this provision-

Vendor Lock-In-The term vendor lock-in refers to a situation in which the

Government’s ability to operate, maintain, or transition a system, data, software, or related capability is limited due to dependency on proprietary technologies, formats, or services controlled by a specific contractor. This includes restrictions on access to models, training data, source code, documentation, or technical interfaces that would prevent or burden the Government’s ability to transition to alternative solutions or providers.

(b) Vendor Lock-In Mitigation. The Government requires that offers submitted in response to this solicitation that incorporate AI technologies include terms that reduce vendor lock-in risk, such as requirements regarding knowledge transfer, clear data and model portability practices, clear licensing terms, and pricing transparency.

This applies to all prime contractors and subcontractors performing AI-related work under this contract and must be flowed down accordingly.

(End of Provision)

DOSAR 652.239-803 ARTIFICIAL INTELLIGENCE CLAUSE (DEVIATION)

(SEPT 2025)

Artificial Intelligence (Sep 2025)

(a) Definitions. As used in this clause Artificial Intelligence (AI): The term

"artificial intelligence" has the meaning provided in Section 238(g) of the John S.

McCain National Defense Authorization Act for Fiscal Year 2019.

i. This definition of AI encompasses, but is not limited to, the AI technical subfields of machine learning (including deep learning as well as supervised, unsupervised, and semi-supervised approaches), reinforcement learning, transfer learning, and generative AI.

ii. This definition of AI does not include robotic process automation or other systems whose behavior is defined only by human-defined rules or that learn solely by repeating an observed practice exactly as it was conducted.

iii. For this definition, no system should be considered too simple to qualify as covered AI due to a lack of technical complexity (e.g., the smaller number of parameters in a model, the type of model, or the amount of data used for training purposes).

iv. This definition includes systems that are fully autonomous, partially autonomous, and not autonomous, and it includes systems that operate both with and without human oversight.

AI Incident: The term “AI incident” refers to a violation or immediate threat of violation of AI policies, acceptable use policies for the AI system or service, or standard AI practices. Examples of AI incidents include:

i. An AI system malfunctions due to a bug or development flaw, creating a potential harm to an individual’s rights or safety, a potential harm to property, or a potential disruption to the management and operation of critical infrastructure;

ii. An AI service generates harmful, false, inappropriate, or erroneous outputs, impacting or potentially impacting individuals or a group of people; and

iii. A user employs an AI system in ways that violate ethical guidelines or

Department acceptable use policies, such as using a facial recognition system for unauthorized surveillance.

Non-Public Information-Non-Public Information refers to any data, materials, or knowledge that is not publicly available or accessible, including but not limited to proprietary business information, technical data, personally identifiable information (PII), trade secrets, internal communications, and any information protected under applicable laws and regulations. This information must be handled in accordance with all relevant international, federal, and local privacy and security requirements applicable to the global scope of this contract.

Significant Modification-The term significant modification refers to an update to an AI application or to the conditions or context in which it is used, such as through changing its functionality, underlying structure, or performance, that meaningfully alters the AI’s impact, rendering prior evaluations, training, or documentation misleading to users, overseers, or individuals affected by the system. This includes significantly changing the context, scope, or intended purpose in which the AI is used. In case there is any doubt or ambiguity as to whether an event constitutes a significant modification for purposes of this clause, the contractor will present the issue to the contracting officer, whose decision on the matter will be final.

(b) Use of Government Data and AI Outputs. The Contractor shall ensure that its employees, subcontractors, affiliates, and agents do not use any nonpublic information, data, or content provided by the Government under this contract— whether inputted by the agency into an AI-enabled system or generated as an output of such a system—to train, fine-tune, or improve any publicly or commercially available AI system or model, including but not limited to foundation models, large language models (LLMs), or general-purpose AI tools without written authorization from the Contracting Officer in consultation with the

AI Investment Management Group (AIM Group).

(c) Privacy Compliance in AI Systems Involving Personally Identifiable

Information (PII). The Contractor shall ensure full compliance with all applicable

Federal privacy laws, regulations, executive orders, and agency-specific privacy policies when developing, deploying, operating, or maintaining any AI system or service under this contract that will create, collect, use, process, store, maintain, disseminate, disclose, or dispose of Federal information containing personally identifiable information.

1. Incident Reporting. During the performance of this contract, the Contractor must comply with 12 FAM 550 Security Incident Program. Additionally, the Contractor shall report all AI incidents to CIRT@state.gov. CIRT will review and assess to determine if the reported event is a potential cybersecurity and/or AI incident.

Based on the cause of the event, nature and scope of the potential threat, and other operational impacts, the event may be classified as a cybersecurity and/or serious AI incident and escalated for subsequent reporting, analysis, and the coordination of incident response actions, which will require the

Contractor to provide additional details regarding the reported incident. In all AI incidents, contractors must notify the Responsible AI Official via RAIO@state.gov and follow Incident Response Processes. In instances when PII is involved in actual or suspected AI incidents, contractors are also responsible for adhering to 5

FAM 465. Contractors must report the AI incident to the Privacy Office using the

Department’s Breach Incident Form (access to this online form will be provided after contract award) or contacting PRVIncidents@state.gov

2. The obligations in this clause apply to all prime contractors, subcontractors, vendors, and third parties who handle PII on behalf of the Contractor and must be flowed down to all relevant subcontracts.

(d) Compliance with Minimum Risk Management Standards The Contractor shall comply with the minimum AI risk management practices for high-impact use cases as required by OMB M-25-21. These include but are not limited to the following:

1. Applying the NIST AI Risk Management Framework;

2. Supporting agency-led impact assessments;

3. Ensuring transparency of system design, data lineage, and decision logic.

(e) Evaluation and Monitoring of AI System Performance. The Contractor shall allow the agency to perform quarterly or biannual evaluations of AI system performance, risks, and effectiveness.

1. The Government anticipates that independent testing will use internal datasets to reflect real-world operational use cases as closely as possible. These datasets:

• Will remain confidential and will not be shared with the Contractor; and

• Will be used solely for the purpose of evaluating system performance.

2. Within 10 business days of the Government’s notice to conduct independent testing, the Contractor shall provide the agency with access to necessary documentation, system resources and operational time. If testing is performed by the Contractor, the Government reserves the right to: -

• Independently reproduce or verify test results; and

• Review and access all test methodologies and outcomes to ensure transparency and accuracy.

3. Within 10 business days of a Government request, the Contractor shall provide detailed documentation of internal testing procedures and collaborate with the agency to ensure alignment with evaluation objectives. The Government mailto:PRVIncidents@state.gov anticipates issuing these requests no more than two times per year. The Contractor agrees that testing results and methodologies may be used internally by the agency for performance assessments and operational improvements, while safeguarding proprietary information and intellectual property.

(f) Performance Monitoring and Remediation Requirements. The Contractor shall regularly:

1. Monitor the AI system’s performance in operational environments;

2. Identify and rectify unacceptable system behavior;

3. Ensure any new AI version meets predefined performance thresholds before deployment;

4. Rollback to a previous version if performance degradation is detected.

(g) New AI Feature Integration Notification. The Contractor shall provide written notification to the Contracting Officer or their designated representative at least ten business days before implementing any of the following proposed changes to

High-Impact AI use cases, or when functionality newly meets the High-Impact threshold:

• Material changes to the AI system;

• Addition of new AI algorithms or features;

• Significant Modifications to underlying models or data sources.

The notification shall include:

• A clear description of the proposed change;

• Anticipated impacts on system performance, security, or compliance;

• Risk mitigation strategies; and

• Documentation demonstrating continued adherence to applicable federal standards, including OMB M-25-21 and M-25-22.

The Government will review the proposed changes to ensure alignment with operational requirements, compliance standards, and risk management protocols.

Approval or disapproval by a designated representative to the Contracting Officer will be communicated prior to deployment.

(h) Maximize Use of American-Made AI. The Vendor shall disclose whether the

Artificial Intelligence (AI) system provided under this Agreement was developed and is maintained entirely within the United States. If any portion of the AI system was developed or is maintained outside the United States, the Vendor shall disclose the foreign jurisdiction(s) involved and describe the nature and extent of such development or maintenance activities. This disclosure shall be provided to ensure compliance with federal policies governing AI systems and applicable. National security requirements pursuant to OMB Memorandum M-25-22, Section 3(c).

(End of Clause)