SW Development Tool RFI - Questions and Answers 5.12.2026.xlsx
XLSX spreadsheet 13 KB Posted
- Solicitation number
- 2026-CIO-0275
- Issued by
-
Library of Congress
About this file
This is a Questions and Answers document responding to an RFI for a Cloud-Native DRM (Digital Rights Management) Solution issued by the Library of Congress (Solicitation Number 2026-CIO-0275). The document addresses vendor inquiries regarding security requirements, system architecture, technical specifications, and integration capabilities for the proposed solution.
The Library of Congress is seeking a DRM solution that integrates directly into its existing cloud-native application stack hosted on AWS, which utilizes Python, Java, React, RDS databases, and ElasticSearch. The solution must manage digital asset lifecycle stages (Submission, Review, Archival/Preserve) and support metadata standards including ONIX and BIBFRAME. Key technical requirements include support for file sizes ranging from individual PDFs to full-length 4K video files with moderate compression, with no defined maximum file size limitation. Regarding security, FedRAMP certification is not a mandatory prerequisite for award; however, vendors without existing Authorization to Operate (ATO) must work with the Library to complete the ATO process by providing evidence of security control implementation. The document confirms the Library's flexibility on the FedRAMP timeline, recognizing that the authorization process is lengthy. This pre-solicitation RFI represents an information-gathering phase preceding a formal solicitation.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Request for Information.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Questions
| Questions and Answers to Request for Information - SW Development Tool | ||
| Reference Text | Questions or Other Observations | Library of Congress Response |
| Is there a hard requirement for an existing ATO or FedRAMP assessment by a 3PAO as a pre-requisite for award? | FedRAMP is not required; however, if its not in place, the vendor must work with the Library of Congress (Library) to complete the ATO - meaning the vendor will have to provide evidence of security control implementation. | |
| The FedRAMP authorization process is lengthy so I’d like to understand if completion of that must be in place or LOC is flexible in this regard? | FedRAMP is not required; however, if its not in place, the vendor must work with the Library to complete the ATO - meaning the vendor will have to provide evidence of security control implementation. | |
| The Library of Congress currently manages a large-scale repository of digital assets through a custom-built, workflow/case management solution. | Could you please provide some description about this custom-built, workflow/case management solution? | This custom-built, workflow/case management solution is a cloud native web app hosted in AWS. Primary technologies are Python, JAVA and React. RDS databases, ElasticSearch search engine. |
| The current tool manages asset lifecycle and metadata. | Could you please describe the asset lifecycle? | The asset lifecycle is Submission -> Review -> Archival/Preserve |
| The current tool manages asset lifecycle and metadata. | Could you please provide some examples of the metadata? | The frequently leverage the ONIX, or BIBFRAME standards. The Library does not have any defined use-vases around this, but are asking if the solutions allow for meta-data associated to the item being protected. |
| The LOC requires a DRM solution to integrate directly into its' existing application stack. | Could you please elaborate on the existing application stack? | The existing application stack is a cloud native web app hosted in AWS. Primary technologies are Python, JAVA and React. RDS databases, ElasticSearch search engine. |
| What is the typical size of the file? 10MB? | There really isn't a "typical" file size. The Library needs to support individual PDF files, as well as full length HD video files. | |
| What is the maximum size of the file? 3GB? | The Library doe not have a maximum file sized defined, but needs to support a full length 4k video file with moderate compression. |
File details come from the government source that posted it. Updated .