Amendment 02 Questions and Answers.pdf

Question Number

Question SAA Response

Approximately how many bookable spaces (desks, offices, and conference rooms) and end users are expected to be in scope for the base year?

Approximately 350 Bookable spaces Approximately 2000 end users

Requirement 99 requires a SOC 2 Type II or similarly recognized audit completed within 18 months prior to contractor evaluation. If the proposed COTS/SaaS OEM holds the current SOC 2 Type II report and the Offeror serves as the authorized reseller/integrator, may the OEM's audit satisfy this requirement?

Yes, so long as the Offeror can provide sufficient evidence for the protection of any Senate and customer data that resides and is processed in their environment.

Attachment 8 requires cloud services to be authorized at FedRAMP Moderate or High. For a commercial SaaS/COTS solution, does this requirement apply to the SaaS offering itself, the underlying cloud service provider/infrastructure, or both?

Both, The SaaS and CSP/Infrastructure

The Past Performance section states that the Offeror must submit information “for both the Offeror and Subcontractors” and requires three project references. Does SAA require three references for the Offeror and three for each proposed subcontractor, or three references total across the proposed team?

Three references in total

Attachment 1 provides Integration CLIN 0002 only in the base year, while Option Years 1–4 contain only Software Solution License CLINs.

Should ongoing maintenance and technical support required by Requirements 104–108 be included in each option-year software license price, or may offerors add separate support/maintenance line items?

Should be included in each option-year, any additional support/maintenance can be included as "O" for optional add ons for buyer to consider. The pricing table has been updated to reflect the change.

For Requirement 105, is the four-business-hour on-site service response measured as physical arrival at the applicable Senate facility? If so, what Senate locations should offerors plan to cover under this requirement?

Response on site only if an on-prem solution is being offered.

Otherwise, response and repair time for helpdesk support would be the same.

Pricing Table, CLIN 0001, Software Solution licenses. Quantity and unit of measure are not stated, and the requirements matrix does not identify a user population. Would the SAA provide the estimated number of named users, the number of bookable resources (offices, desks, conference rooms, workspaces) to be managed, and the number of buildings and individual floor plans to be loaded at go-live? Does the SAA prefer pricing expressed per named user, per bookable resource, or as an enterprise license?

Approximately 350 Bookable spaces Approximately 2000 end users Enterprise license is preferred if there is a cost benefit for over the metrics provided in this response. Please be sure to clarify in response on which pricing (per named user, per bookable resource, or as an enterprise licens) is being provided.

Delivery Schedule, Phase 2, "Custom Module Development."

The requirements matrix does not identify a function that requires custom development, and this is a firm-fixed-price award. Would the SAA describe the custom modules it anticipates, or confirm that this deliverable is a placeholder to be scoped during Phase 1 discovery and satisfied within the awarded price?

The SAA expects a COTS product with the understanding that all COTS products are developed differently. The selected COTS product may require some customization to meet Senate needs and that deliverable is reserved for any possible customization needed.

Solicitation 2026-R-062 Questions Answers

Question SAA Response

Solicitation 2026-R-062 Questions Answers

Data migration. The RFQ describes replacement hoteling software, but migration is not addressed in the requirements matrix or the delivery schedule. Is migration of existing reservation, space-assignment, or floor plan data from the current system within the scope of this award?

If so, would the SAA describe the approximate data volume and the export capability of the current system?

No, data migration is not required for the turnover of these systems.

Requirements Matrix, Privacy and Data Security, "SOC2 Type II or similarly recognized audit completed within eighteen months prior to date of contractor evaluation." Would the SAA clarify what it will accept as a "similarly recognized audit"?

Specifically, would a solution whose underlying cloud infrastructure holds a current FedRAMP authorization at Moderate or High, as required by SOP Section 14.3.13.2.1.1, combined with an independent third-party security assessment and penetration test completed within the preceding eighteen months, satisfy this requirement? If not, would the SAA accept a commitment to complete a SOC 2 Type II examination within a defined period following award?

We would accept a FedRAMP Moderate/High coupled with an independent third-party assessment and penetration test. We would also accept a bridge letter from the 3PAO if the company is between audits (the company has already achieved a SOC2 Type II report, it will be expiring soon, and the new SOC2 Type II audit is nearing completion, but is not complete)

Question SAA Response

Solicitation 2026-R-062 Questions Answers

Technical Quotation page limit. Instruction 9 limits the technical approach to 10 pages, and SOP Section 14.2 requires a comprehensive Contractor Cybersecurity Plan in the proposal. Would the SAA confirm whether the Contractor Cybersecurity Plan counts against the 10-page limit, or whether it may be submitted as a separate attachment?

The 10 page limit does not include the Contractor Cybersecurity Plan and can be submitted as a separate attachment.

Past Performance. Will Factor 2 be evaluated on relevance to hoteling and space-scheduling systems specifically, or more broadly on the delivery and implementation of comparable web-based software-as-a-service solutions for federal or legislative branch customers?

Per RFQ instructions, Offerors must submit three (3) project references completed and/or ongoing within the last five (5) years for work or services similar to the solicitation requirements. Yes, it will be evaluated on relevance to hoteling and space scheduling systems.

Desks: “Desk” subscriptions are typically hoteling or flex-space locations that have no services or approval routing requirements. However, a “Desk” subscription may be associated with any type of resource that employees need to search for and reserve - parking spots, lockers, lab or IT equipment, etc. No approval workflows are included with Desk subscriptions.

2. Rooms: “Room” subscriptions are typically associated with Conference Rooms. “Rooms” can be associated with any corporate resource that requires services (catering, AV services, etc.) and/or approval routing capabilities.Does SAA have an estimated count of Desk and Room licenses that will be needed?

If as defined as suggested, approximately 20 "rooms" with integration into AV systems required. Approximately 330 "desks"

Does it need to be a FedRAMP certified solution for hoteling. I did not see anything about FedRAMP in the documentation, but I wanted to make sure since most all federal agencies use FedRAMP solutions

We would accept a FedRAMP Moderate/High coupled with an independent third-party assessment and penetration test. We would also accept a bridge letter from the 3PAO if the company is between audits (the company has already achieved a SOC2 Type II report, it will be expiring soon, and the new SOC2 Type II audit is nearing completion, but is not complete)

Can you provide the total number of “bookable spaces”? Approximately 350 Bookable spaces

Sheet1