26Q0031_QandA.pdf

QUESTIONS AND ANSWERS

19PM0726Q0031 – Social Media Listening Dashboard and Strategic Intelligence Service

[2026-2027]

1. Question: Regarding the tool coverage requirements, if a single social media listening service (e.g., Sprout Social) provides coverage of all required source networks—X, Facebook, Instagram, YouTube, and TikTok—would this satisfy the requirement for a minimum of five integrations?

Answer – The requirement is for a minimum of five (5) distinct, internationally recognized social media listening tools/platforms. Collectively, the proposed tools must provide coverage of, at minimum, X, Facebook, Instagram, YouTube, and TikTok, including relevant comments and conversations. A single social media listening tool that covers all five source networks does not, by itself, satisfy the requirement for five distinct tools/platforms.

2. Question: Regarding the referenced Large Language Model (LLM), does the government expect the contractor to be responsible for the creation and hosting of this LLM?

Answer – No. The Government does not require the contractor to create or host a new Large

Language Model. The contractor may propose an existing commercial solution that incorporates AI or LLM capabilities, provided the proposed solution complies with all applicable solicitation requirements. As stated in the SOW, analytical outputs may not be generated exclusively through artificial intelligence or automated processing and must receive substantive review and validation by a qualified human analyst.

3. Question: The pricing provisions appear inconsistent. The pricing schedule provides only for a 12-month base period under CLIN 001 (Quantity 12, Unit: Month), while Section 4 states that the evaluated low price will include all options. In addition, FAR 52.217-

8, Option to Extend Services, is incorporated and permits the Government to extend services for up to six months.

Please clarify the governing pricing instructions for the FAR 52.217-8 extension.

Specifically, should offerors separately price the potential six-month extension, and will that amount be included in the evaluated price? If separate pricing is required, please identify the applicable CLIN(s), pricing methodology, and evaluation treatment, and provide a revised pricing schedule reflecting those requirements.

Answer: The solicitation provides for a 12-month base period, priced under CLIN 0001

(Quantity 12, Unit: Month). FAR 52.217-8, Option to Extend Services, is incorporated to preserve the Government's unilateral right, not obligation, to extend performance for up to six months beyond the base period, if needed (e.g., to bridge a gap while a follow-on action is completed).

Refer to the amendment that adds CLIN 0002 (6-month, FAR 52.217-8 extension) to the pricing schedule, priced using the same rate structure as base period CLIN 0001.

4. Question: The SOW states that the provider “should have a minimum of 5 years of experience … in the Panamanian digital landscape.” However, Section 3, A.3(4) permits offerors that have “not performed comparable services in Panama” to demonstrate relevant international experience.

Please clarify whether five years of Panama specific experience is a mandatory technical acceptability requirement or whether relevant international experience may fully satisfy this factor. If Panama specific experience is mandatory, please clarify how Section 3, A.3(4) should be interpreted and evaluated.

Answer – The requirement is for a minimum of five years of experience conducting social media listening intelligence and analysis that includes the Panamanian digital landscape. The experience does not need to have been performed exclusively in Panama. Regional or international experience may satisfy the requirement when the offeror demonstrates that its work included substantive social media listening and analysis of Panama during the required period.

5. Question: The C-SCRM go or no-go factor requires submission of the State Department

Secure Software Development Attestation Form for suppliers offering “critical software.”

Please clarify whether the Government considers the SaaS and dashboard solution required under this solicitation to constitute critical software for purposes of this requirement. If the attestation applies, please also confirm whether offerors must submit the completed form with their quote to receive a go rating or whether the form may be provided after award.

Answer: The SaaS/dashboard solution required under this solicitation constitutes

Information and Communication Technology (ICT). Accordingly, the C-SCRM Go/No-Go

Evaluation Factor and clause 652.239-800, Cybersecurity Supply Chain Risk Management

Requirements, apply to this acquisition.

Offerors are required to submit the following documents with their quote:

1. The completed C-SCRM Questionnaire (Attachment A); and

2. The completed C-SCRM Software Producer Attestation Form (Attachment B) for each applicable software producer.

Both documents must be completed in accordance with the applicable attachment instructions and submitted with the quote. The required C-SCRM documentation may not be submitted after award.

Failure to submit the required C-SCRM Questionnaire and C-SCRM Software Producer

Attestation Form with the quote, or failure to complete the forms, may result in the quote being determined non-responsive and not considered for further evaluation. (Attachment A

- page 42 and Attachment B – page #43).

Please, visit the following link for complete definition:

https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nist.gov%2Fi tl%2Fexecutive-order-14028-improving-nations-cybersecurity%2Fsoftware-supply-chain-https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nist.gov%2Fitl%2Fexecutive-order-14028-improving-nations-cybersecurity%2Fsoftware-supply-chain-security-guidance-26&data=05%7C02%7CReyesMA%40state.gov%7Cfb29b37447334f699abc08df150be20b%7C66cf50745afe48d1a691a12b2121f44b%7C0%7C0%7C639252813010659020%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Xj5Lv801p84W%2BLSg%2Fs4E9rcVbPUSmswuqWmffJbJqnk%3D&reserved=0 https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nist.gov%2Fitl%2Fexecutive-order-14028-improving-nations-cybersecurity%2Fsoftware-supply-chain-security-guidance-26&data=05%7C02%7CReyesMA%40state.gov%7Cfb29b37447334f699abc08df150be20b%7C66cf50745afe48d1a691a12b2121f44b%7C0%7C0%7C639252813010659020%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Xj5Lv801p84W%2BLSg%2Fs4E9rcVbPUSmswuqWmffJbJqnk%3D&reserved=0 security-guidance-

26&data=05%7C02%7CReyesMA%40state.gov%7Cfb29b37447334f699abc08df150be20 b%7C66cf50745afe48d1a691a12b2121f44b%7C0%7C0%7C639252813010659020%7CU nknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIs

IlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=

Xj5Lv801p84W%2BLSg%2Fs4E9rcVbPUSmswuqWmffJbJqnk%3D&reserved=0

6. Question: The SOW states that the number of monitored topics is “unlimited” and may be modified at the Embassy’s discretion, while the requirement is priced on a firm fixed price monthly basis. To support a consistent pricing basis across offerors, please provide the anticipated typical number of concurrent topics of interest, as well as the expected maximum or peak number that the contractor may be required to monitor at one time.

Answer – As stated in the SOW, the number of monitored topics is "unlimited" and therefore should not be constrained by a minimum or maximum figure. The provider should anticipate monitoring over 100 topics at a time, including various keywords under each topic, noting that this figure is an example and the provider should scale beyond this figure as needed.

7. Question: The SOW requires sentiment analysis of “100% of publications” associated with each monitored topic, rather than a representative sample, and requires human analyst validation of AI or algorithmic outputs. To allow offerors to appropriately determine the required level of effort, staffing, and firm fixed price, please provide the estimated monthly volume of posts, mentions, or publications expected to require analysis. If available, please also provide historical average and peak monthly volume ranges.

Answer – We cannot provide an estimated number of publications, as this figure will vary depending on the social listening activity and topics each month. No historical monthly average or baseline figures currently exist.

8. Question: The SOW requires a minimum of three user accounts with simultaneous access.

Please clarify whether three concurrent users represent the Government’s expected steady state requirement or only the minimum acceptable capacity. If the Government anticipates a larger number of Embassy users during performance, please provide the expected typical and maximum number of concurrent users so offerors can appropriately size and price the proposed solution.

Answer – As stated in the SOW, the service requires a minimum of three user accounts with simultaneous access, with the flexibility to scale up to six or more as needed.

9. Question: The SOW requires integration of at least five identified social listening tools or platforms and disclosure of each tool’s applicable security certifications “prior to contract award.” Please clarify whether offerors must submit the proposed tool list and associated security or compliance documentation with their quotes, or whether this information is required only from the apparent successful offeror prior to award. Please also identify what types of security documentation will satisfy this requirement, including any required certifications, attestations, audit reports, or compliance frameworks, and whether documentation must be current and issued by an independent third party.

https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nist.gov%2Fitl%2Fexecutive-order-14028-improving-nations-cybersecurity%2Fsoftware-supply-chain-security-guidance-26&data=05%7C02%7CReyesMA%40state.gov%7Cfb29b37447334f699abc08df150be20b%7C66cf50745afe48d1a691a12b2121f44b%7C0%7C0%7C639252813010659020%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Xj5Lv801p84W%2BLSg%2Fs4E9rcVbPUSmswuqWmffJbJqnk%3D&reserved=0 https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nist.gov%2Fitl%2Fexecutive-order-14028-improving-nations-cybersecurity%2Fsoftware-supply-chain-security-guidance-26&data=05%7C02%7CReyesMA%40state.gov%7Cfb29b37447334f699abc08df150be20b%7C66cf50745afe48d1a691a12b2121f44b%7C0%7C0%7C639252813010659020%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Xj5Lv801p84W%2BLSg%2Fs4E9rcVbPUSmswuqWmffJbJqnk%3D&reserved=0 https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nist.gov%2Fitl%2Fexecutive-order-14028-improving-nations-cybersecurity%2Fsoftware-supply-chain-security-guidance-26&data=05%7C02%7CReyesMA%40state.gov%7Cfb29b37447334f699abc08df150be20b%7C66cf50745afe48d1a691a12b2121f44b%7C0%7C0%7C639252813010659020%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Xj5Lv801p84W%2BLSg%2Fs4E9rcVbPUSmswuqWmffJbJqnk%3D&reserved=0 https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nist.gov%2Fitl%2Fexecutive-order-14028-improving-nations-cybersecurity%2Fsoftware-supply-chain-security-guidance-26&data=05%7C02%7CReyesMA%40state.gov%7Cfb29b37447334f699abc08df150be20b%7C66cf50745afe48d1a691a12b2121f44b%7C0%7C0%7C639252813010659020%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Xj5Lv801p84W%2BLSg%2Fs4E9rcVbPUSmswuqWmffJbJqnk%3D&reserved=0 https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nist.gov%2Fitl%2Fexecutive-order-14028-improving-nations-cybersecurity%2Fsoftware-supply-chain-security-guidance-26&data=05%7C02%7CReyesMA%40state.gov%7Cfb29b37447334f699abc08df150be20b%7C66cf50745afe48d1a691a12b2121f44b%7C0%7C0%7C639252813010659020%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Xj5Lv801p84W%2BLSg%2Fs4E9rcVbPUSmswuqWmffJbJqnk%3D&reserved=0 https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.nist.gov%2Fitl%2Fexecutive-order-14028-improving-nations-cybersecurity%2Fsoftware-supply-chain-security-guidance-26&data=05%7C02%7CReyesMA%40state.gov%7Cfb29b37447334f699abc08df150be20b%7C66cf50745afe48d1a691a12b2121f44b%7C0%7C0%7C639252813010659020%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Xj5Lv801p84W%2BLSg%2Fs4E9rcVbPUSmswuqWmffJbJqnk%3D&reserved=0

Answer – Offerors shall identify in their quotation the social media listening tools/platforms proposed to perform the requirement. Prior to contract award, the apparent successful offeror shall provide documentation demonstrating the applicable security and privacy certifications or compliance of the proposed tools. Acceptable evidence may include applicable ISO certifications, SOC reports or attestations, privacy/security compliance documentation, or equivalent evidence demonstrating compliance with recognized international data security and privacy standards.

10. Question: The RFQ requires “integration of a minimum of five (5) internationally recognized, secure social media listening tools/platforms.” Could the Government please clarify whether this refers to five distinct third-party social listening technology platforms that must be integrated into the contractor’s solution, or whether a single social listening environment that integrates data from the five required source networks (X, Facebook, Instagram, YouTube, and TikTok) would satisfy this requirement?

Answer: The requirement is for a minimum of five (5) distinct, internationally recognized social media listening tools/platforms. Collectively, the proposed tools must provide coverage of, at minimum, X, Facebook, Instagram, YouTube, and TikTok. A single social listening environment or technology platform that covers all five source networks does not satisfy the requirement for five distinct tools/platforms.

The contractor may integrate or consolidate data and analysis from the proposed tools into a single dashboard or environment provided to the Embassy.

11. Question: The RFQ requires identification of bot farms, suspected coordinated inauthentic behavior, anomalous amplification, bot-like activity, and paid/sponsored amplification.

Could the Government please clarify whether offerors are required to provide dedicated automated bot/coordinated influence detection technology, or whether this requirement may be satisfied through analyst-led identification and assessment using available account, engagement, amplification, network, and content signals, with the methodology and confidence level disclosed?

Answer: The purpose of identifying bot farms, suspected coordinated inauthentic behavior, anomalous amplification, bot-like activity, and paid/sponsored amplification is to exclude these publications from the overall analysis, ensuring the final report is not skewed by disinformation or promotional campaigns. The offeror must specify the methodology — whether automated, analyst-led, or a combination of both — it will use to meet this objective.

12. Question: The Statement of Work states that "The contractor should provide continuous support throughout the period of performance, responding to issues within 30 minutes of notification..." Please clarify the parameters of this 30-minute response requirement:

Hours of applicability: Does the 30-minute response window apply 24 hours a day, 7 days a week, or is it limited to the dashboard's stated maintenance/update hours of 6:00 a.m. to 9:00 p.m., Monday through Saturday, as specified in the same SOW paragraph?

Weekends: Does the 30-minute response requirement apply on Sundays, given that the dashboard update window in the SOW is defined as Monday through Saturday?

Holidays: Does the 30-minute response requirement apply on U.S. and/or Panamanian public holidays? If so, please identify which holiday calendar governs.

Definition of "notification": For the purpose of starting the 30-minute clock, how will the

Embassy transmit notifications (e.g., email, phone, dedicated portal), and is the clock measured from the time the notification is sent or from the time it is received/acknowledged during covered support hours?

Definition of "response": Does "responding within 30 minutes" require an acknowledgment of receipt within 30 minutes, or does it require substantive resolution/remediation of the issue within 30 minutes?

Answer: The 30-minute response requirement applies between 6:00 a.m. and 9:00 p.m., Monday through Saturday, including U.S. holidays.

The Embassy may transmit a notification by email, telephone, or designated messaging platform. The 30-minute period begins when the Embassy sends the notification.

For purposes of this requirement, “response” means acknowledgment of the issue and initiation of appropriate action within 30 minutes; it does not require complete resolution or remediation within 30 minutes.

Outside the stated monitoring period, the contractor is not required to maintain the same

30-minute response standard. However, in the event of breaking news or another highly sensitive situation, the Government may request support outside those hours, and the contractor should respond as soon as reasonably practicable.

13. Question: The RFQ states that all data, dashboards, findings, and derived intelligence products are to be shared exclusively with the Embassy and that Embassy-specific configurations and queries may not be reused for other clients. Can the Government please clarify whether the Government's intent is to obtain ownership of the Embassy-specific dashboard and associated deliverables, or simply exclusive rights to the Embassy-specific data, configurations, analyses, and outputs. Proposed solutions may utilize existing commercial platform and associated proprietary software, tools, methodologies, and underlying intellectual property. Please confirm that the contractor may retain ownership of its pre-existing commercial platform, software, technology, methodologies, and other background intellectual property, while providing the Embassy the required rights and exclusivity in Embassy-specific data, configurations, dashboards, analyses, and deliverables.

Answer: The Embassy-specific dashboard and associated deliverables — including data, analyses, and outputs — shall be exclusively for the Embassy's use and may not be shared with any other party under any circumstances. The offeror retains ownership of its pre-existing commercial technology, including platform and software.

14. Question: Five Social Listening Platforms: The SOW requires integration of a minimum of five internationally recognized social media listening tools/platforms and separately requires coverage of X, Facebook, Instagram, YouTube, and TikTok. Please confirm whether the

Government requires five distinct social listening tools/platforms, or whether a single enterprise platform providing integrated coverage across all five required social networks would satisfy this requirement.

Answer: The Government requires a minimum of five (5) distinct, internationally recognized social media listening tools/platforms. Collectively, those tools must cover, at minimum, X, Facebook, Instagram, YouTube, and TikTok. The Government does not require each individual tool to independently provide coverage of all five source networks.

A single enterprise platform covering all five source networks does not satisfy the requirement for five distinct social listening tools/platforms.

15. Question: Five Years of Panama-Specific Experience: The SOW states that the service provider should have a minimum of five years of experience in social listening intelligence and analysis within the Panamanian digital landscape, while Section 3 indicates that offerors without comparable services in Panama may provide international experience. Please confirm whether at least five years of comparable international social listening and intelligence experience may satisfy this requirement if Panama-specific past performance is unavailable.

Answer: The requirement is for a minimum of five years of social media listening intelligence and analysis experience that includes the Panamanian digital landscape. The experience does not need to have been performed exclusively in Panama. Relevant regional or international experience may satisfy the requirement if the offeror demonstrates that its work included substantive monitoring and analysis of Panama during the required period.

16. Question: Human Analyst Experience Requirement: Please confirm whether the requirement for a qualified human analyst with at least five years of experience may be satisfied through a team of qualified analysts meeting the experience requirement, or whether one specifically designated analyst must perform all validation activities throughout the period of performance.

Answer: The requirement of qualified human analyst with at least five years of experience may be satisfied through a team of qualified analysts as long as they comply with the minimum of five years of experience requirement and the offeror can provide evidence of this.

17. Question: 100% Sentiment Analysis: Please confirm whether the requirement to conduct sentiment analysis across 100% of publications applies to all relevant content successfully collected and available through the required platforms, subject to API access, data availability, licensing restrictions, private or deleted content, and other limitations outside the contractor’s control.

Answer: The analysis of 100% of publications applies to all content collected and available through the required social media listening tools and the dashboard provided in the service.

18. Question: Bot and Coordinated Activity Identification: Please confirm whether the

Government expects definitive determinations that accounts or activity are automated or coordinated, or whether identification based on analytical indicators, documented methodologies, and appropriate confidence levels is acceptable.

Answer: The purpose of identifying bot farms, suspected coordinated inauthentic behavior, anomalous amplification, bot-like activity, and paid/sponsored amplification is to exclude these publications from the overall analysis, ensuring the final report is not skewed by disinformation or promotional campaigns. The offeror must specify the methodology — whether automated, analyst-led, or a combination of both — it will use to meet this objective

19. Question: Ad Hoc Reporting Volume: For staffing and firm-fixed-price planning purposes, can the Government provide the historical or anticipated average number of ad hoc reports per week or month, as well as any maximum volume offerors should assume during periods of heightened activity?

Answer: The provider can anticipate approximately two ad hoc reports per month. This figure is illustrative and should be adjusted as needed.

20. Question: Real-Time Alert Coverage: Please confirm whether the 30-minute proactive notification requirement applies only during the stated 6:00 a.m. to 9:00 p.m., Monday through Saturday monitoring window, or whether continuous analyst monitoring and notification capability is expected outside those hours.

Answer: The 30-minute proactive notification requirement applies during the SOW's monitoring period of 6:00 a.m. to 9:00 p.m., Monday through Saturday, including U.S.

holidays. Continuous human analyst monitoring is not required outside those hours.

Outside the stated monitoring period, the contractor should notify the Embassy as soon as reasonably practicable if it identifies breaking news, a highly sensitive situation, or another significant development involving an Embassy-designated topic.

The dashboard itself must remain accessible to authorized Embassy users 24 hours a day, seven days a week.

21. Question: Unlimited Topics: For staffing and pricing purposes, can the Government provide an estimated average and anticipated maximum number of Embassy-designated topics expected to be monitored concurrently?

Answer: As stated in the SOW, the number of monitored topics is "unlimited" and therefore should not be constrained by a minimum or maximum figure. The provider should anticipate monitoring over 100 topics at a time, including various keywords under each topic, noting that this figure is an example and the provider should scale beyond this figure as needed.

22. Question: Expected Data Volume: Can the Government provide an estimated or historical monthly volume of social media posts, mentions, or other digital content expected to be collected and analyzed? If unavailable, an approximate range based on anticipated topics would assist offerors in developing comparable pricing.

Answer: We cannot provide an estimated number of publications, as this figure will vary depending on the social listening activity and topics each month. No historical monthly average or baseline figures currently exist.

The provider should anticipate monitoring over 100 topics at a time, including various keywords under each topic, noting that this figure is an example and the provider should scale beyond this figure as needed. As stated in the SOW, the number of monitored topics is "unlimited" and therefore should not be constrained by a minimum or maximum figure.

23. Question: Local Panama Licensing and Authorization: Please clarify whether a U.S.-based contractor providing the SaaS platform, monitoring, and analytical services remotely must establish a Panamanian legal entity, maintain a local business presence, or obtain specific

Panamanian licenses or permits to be eligible for award.

Answer: Offerors are not required to establish a Panamanian legal entity or maintain a physical business presence in Panama solely to be eligible for award.

However, the experience requirement remains applicable: the offeror must demonstrate a minimum of five years of social media listening intelligence and analysis experience that includes the Panamanian digital landscape. Regional or international experience may satisfy this requirement when the offeror demonstrates that its work included substantive monitoring and analysis of Panama during the required period.

24. Question: AI and LLM Requirements: Please confirm whether the LLM-specific requirements in DOSAR 652.239-804 through 652.239-806 apply when generative AI or

LLM functionality is embedded within a broader commercial social listening or analytical platform rather than procured as a standalone LLM product or service.

Answer: DOSAR 652.239-804 through 652.239-806 apply based on the function performed, not the packaging of the offering. Generally, AI/LLM-specific requirements are triggered when a solution incorporates generative AI or large language model capability that processes, generates, or acts on Department data or user inputs, regardless of whether that capability is marketed as a standalone AI product or is embedded as a feature within a broader commercial platform (e.g., a social listening or analytical tool with an integrated summarization, sentiment-generation, or natural-language query feature).

Offerors are encouraged to identify in their quotes any generative AI/LLM components embedded in their proposed solution, regardless of this clarification, so the Government can assess compliance during evaluation.

25. Question: C-SCRM Questionnaire: Please confirm whether Attachment B, C-SCRM

Questionnaire, must be completed and submitted with the initial quotation and whether all sections are applicable to a commercial SaaS social listening platform. Additionally, please clarify whether the questionnaire applies only to the prime contractor or also to subcontractors, third-party data providers, or integrated technology partners.

Answer: Attachment B, the C-SCRM Questionnaire, must be completed and submitted with the initial quotation. As a supply chain risk management evaluation tool, it informs the

Government's risk assessment prior to award and cannot be submitted after the fact; quotes that omit a completed Attachment B may be considered incomplete for evaluation purposes.

The questionnaire applies to the prime contractor and extends to any subcontractor, third-party data provider, or integrated technology partner that has access to Government data, contributes code or infrastructure to the delivered solution, or otherwise materially supports performance of the contract. This includes, for example, third-party APIs or data feeds integrated into the platform, cloud hosting providers, and any subcontracted development or support functions.

Offerors should identify all such subcontractors, data providers, or technology partners in their response to Attachment B, and address the relevant supply chain risk factors (e.g., data handling, foreign ownership/control/influence, software provenance) for each entity identified.

In lieu of a completed C-SCRM Questionnaire, the vendor may submit a third party authorizing official conducted assessment, such as ISO 27001, ISO 9000, System and

Organizational Controls (SOC) II, or FedRAMP authorization.

26. Question: Submission Deadline / Time Zone: The solicitation identifies a quotation deadline of September 24, 2026, at 10:00 a.m. local time. Please confirm the applicable time zone for determining timely receipt of quotations.

Answer: Quotations are due September 24, 2026, at 10:00 a.m. Panama time (UTC-5).

27. Question: Request for Submission Extension: Given the breadth of the technical, cybersecurity, AI governance, human-analysis, C-SCRM, and supporting documentation requirements, would the Government consider extending the quotation submission deadline from September 24, 2026, to October 1, 2026? This would provide offerors sufficient time to incorporate the Government’s responses to questions and prepare complete, technically compliant quotations.

Answer: The Government does not intend to extend the quotation deadline. Quotations remain due September 24, 2026, at 10:00 a.m. Panama time.

28. Question: The solicitation specifies acceptable file formats and a 30 MB file size limit but does not identify page limits for the required submission materials. Please confirm whether page limits apply to any of the proposal components required under Section 3, including the technical response, past performance information, resumes or key personnel information, and any supporting attachments. If page limits apply, please identify the applicable limit for each submission component and clarify whether cover pages, tables of contents, resumes, past performance documentation, and other attachments are included in or excluded from the page count.

Answer: Unless otherwise stated in the solicitation, the Government has not established page limits for the technical response, past performance information, resumes/key personnel information, or supporting attachments. Offerors should provide sufficient information to demonstrate compliance with the solicitation requirements while keeping submissions concise and relevant. All submission file-format and file-size limitations remain applicable.

29. Question: DOSAR 652.242-73 requires the contractor to obtain and maintain all licenses and permits necessary to perform in Panama, while FAR 52.229-11 and 52.229-12 address the 2 percent withholding applicable to certain foreign persons. For a U.S. based contractor performing the required services remotely from the United States, please clarify: (a) what, if any, Panamanian licenses, permits, registrations, or other local authorizations are required for contract performance; and (b) whether the contractor must establish or register a legal or business presence in Panama, or whether active SAM registration is sufficient for award and performance.

Answer: The Government does not require a U.S.-based contractor performing these services remotely to establish a Panamanian legal entity or maintain a local business presence solely as a condition of eligibility for award. Contractors remain responsible for obtaining and maintaining any licenses, permits, registrations, or authorizations legally required for their particular method of performance, consistent with DOSAR 652.242-73.

SAM registration and all other solicitation eligibility requirements remain applicable.

30. Question: Section 3, A.3(8) requires offerors to provide a “strategic plan for performing focus groups and nationwide polling services.” However, focus groups and polling do not appear in the PWS or SOW, which instead describes requirements for social media listening, dashboard support, monitoring, analysis, and intelligence reporting.

Please clarify what proposal response is required for Section 3, A.3(8). If the reference to focus groups and nationwide polling services was included in error, please confirm that offerors are not required to address those capabilities. If the requirement is intentional, please identify the corresponding PWS or SOW requirement and specify the information offerors should include in their proposals.

Answer: The reference to “focus groups and nationwide polling services” in Section 3, A.3(8) was included in error. This language does not correspond to any requirement in the

PWS/SOW, which describes the scope of work as social media listening, dashboard support, monitoring, analysis, and intelligence reporting. Focus groups and nationwide polling services are not part of the requirements under this solicitation.

Refer to the amendment, which corrects Section 3, A.3(8) to instead require a strategic plan addressing the offeror’s approach to the actual PWS/SOW requirements.