ADDENDUM NO. 1

SafeConnect Technology Development RFP Issued October 15, 2026 Date of Addendum: 10/19/2026 United States Contractor, Work Location, Hosting, and Data Access Requirements The YWCA Greater Harrisburg hereby amends the SafeConnect Technology Development RFP to establish the following mandatory requirements:

1. Contractor eligibility The prime contractor must be a business legally formed under U.S. law, including a corporation, limited liability company, partnership, or sole proprietorship, with established business operations within the United States. A Pennsylvania office or separate commercial office space is not required. U.S.-based home offices, shared workspaces, and remote operating arrangements are acceptable. The work site must support ongoing business operations and remain operational throughout the contract term.

Registration to conduct business in the United States alone does not satisfy this requirement. A registered-agent address, mailing address, post office box, virtual office, temporary accommodation, or temporary project location does not constitute an established business office for purposes of this solicitation.

Proposals must identify the U.S. business office address, describe its ongoing operations and staffing, and explain its role in project delivery and support. The YWCA reserves the right to request supporting documentation to verify compliance..

2. Location of project work All work under the contract must be performed by personnel physically located within the United States, including development, testing, implementation, maintenance, technical support, and system administration. This requirement applies to the prime contractor, subcontractors, consultants, and third-party providers performing work or providing services under the contract. Offshore performance is prohibited, including development or testing using synthetic, fictional, or anonymized data.

3. Hosting and data location All SafeConnect development, testing, staging, and production environments must be hosted within the United States. All YWCA and client information, including backups, logs, attachments, and other copies containing such information, must be stored and processed within the United States. Proposed third-party services must meet these requirements.

4. Access restrictions Access to SafeConnect project environments or YWCA and client information from outside the United States is prohibited, including remote development, support, and system administration. Contractors must implement controls to prevent unauthorized access from outside the United States.

5. Proposal disclosures and certification Offerors must identify the prime contractor’s jurisdiction of organization, proposed work locations, hosting locations, and relevant subcontractor and third-party arrangements. Proposals must include written confirmation of compliance with this addendum. Any proposed exception must be expressly disclosed; a proposal taking exception to these mandatory requirements will be considered nonresponsive.

6. Continuing compliance These requirements apply throughout the contract term. The prime contractor is responsible for ensuring compliance by its personnel, subcontractors, consultants, and applicable third-party providers.

These requirements concern organizational eligibility and the physical location of work, hosting, and access; they do not establish a U.S. citizenship requirement for individual personnel.

This addendum supersedes any conflicting solicitation language or prior clarification concerning international staffing, offshore work, hosting, or overseas access. All other RFP terms remain unchanged.

Proposal deadline: UNCHANGED—NOVEMBER 16, 2026, AT 4:00 P.M. EASTERN TIME Offerors must acknowledge this addendum in their proposals.