25-Q-80.pdf

FHF-25-Q-0080

This is a combined synopsis/solicitation and request for quotations (RFQ) for commercial products or commercial services in accordance with the procedures of Federal Acquisition Regulation (FAR) part 12 - Acquisition of Commercial Products and Commercial Services and FAR part 13 - Simplified Acquisition Procedures, with FAR part 12 taking precedence per FAR 13.500(b)’s reference to FAR 12.102(c). This announcement constitutes the only solicitation with quotes requested.

This requirement is considered unrestricted under NAICS code 524114 (Direct Health and Medical Insurance Carriers) with no size standard; therefore, any qualified, responsible vendor may submit a quote.

Questions, Suggested Alternate Terms, and Answers Quoters are invited to submit any questions or suggested alternate terms (including changes to the solicitation, contract clauses, statement of assumptions, or other terms). FHFA will consider all input and attempt to balance the needs of all parties.

Questions or other suggested changes must be submitted via email by 9am ET 11/20/2025 to Natalie.Wallace@fhfa.gov. Questions, any written responses, or amendments will be posted at the Contract Opportunities webpage (please see https://sam.gov/content/opportunities for more information).

FAR References Any FAR clauses or provisions referenced may be obtained at www.acquisition.gov/far. Also, any reference to offeror or offer has the same meaning as quoter or quotation for this solicitation.

The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular FAC 2025-06, October 1, 2025.

Submission Instructions Quoters shall be registered in the System for Award Management (SAM) when submitting a quotation and at time of award as stated in FAR 52.204-7(b)(1).

Therefore, FAR 52.204-7 and FAR 52.204-16 are hereby incorporated by reference into the solicitation.

A Quoter that is not actively registered in SAM at the time of quote submission will not have its quote considered and will not be eligible for award.

Each Quoter shall submit an electronic quotation (Volumes I and II in separate files) to Natalie.Wallace@fhfa.gov.

The electronic quotation shall include any scanned copies of signatures associated with the quotation mailto:Natalie.Wallace@fhfa.gov https://sam.gov/content/opportunities http://www.acquisition.gov/far mailto:Natalie.Wallace@fhfa.gov

Each email quotation including attachments cannot exceed 50MB because it may be rejected by FHFA’s server. If your entire quotation exceeds 50MB in size, please divide your quotation into appropriate smaller emails.

If a Quoter chooses to submit a quotation, the quotation must remain valid for a minimum of 60 calendar days.

Quotations are due no later than 9am Eastern Time, on 12/5/25. Late submissions, modifications, and revisions will be managed in accordance with FAR 52.212-1(f).

All quotations must include a cover page addressing the following information:

1. RFQ Number

2. Quoter’s Name

3. Subcontractor Name(s), If Applicable

4. Quoter System for Award Management (SAM) Unique Entity Identifier (UEI)

5. Contact Name

6. Contact Email address

7. Contact telephone number

8. Complete business mailing address

9. The following statement “The Quoter takes no exception and completely accepts all the terms and conditions in the RFQ and subsequent amendments.”

Volume I: Technical Quotation The Quoter’s technical submission should demonstrate the firm’s capability to perform the work requirements outlined in the Attachment A. Volume I shall include separate sections within the volume outlining the following items:

a) Technical Approach Thoroughness, clarity, and soundness of the proposed approach in providing services as outlined in the work requirements. Each task should be identified separately using the tasks identified in the work requirements. Quoters shall describe approach, methodology, technique, or plan to accomplish each task.

The quoter shall structure and order its proposal to separately address each of the Performance Work Statement requirements in Section 4, “Tasks” and Section 5, “Deliverables”.

For the technical approach, a recitation or paraphrasing of the requirements already identified in the work requirements will not improve the quotation.

b) Quality Assurance Plan (QAP) This will be an evaluation criterion AND incorporated into the contract. The quoter shall complete Attachment F.

c) Conformance with Information and Communication Technology (ICT) Accessibility

Requirements (Section 508)

Provide an Accessibility Conformance Report (ACR) for each commercially available Information and Communication Technology (ICT) item that will be developed, procured, maintained, or used under this contract.

1. Create the ACR using the Voluntary Product Accessibility Template (VPAT®) Version

2.1 or later, located at https://www.itic.org/policy/accessibility/vpat.

2. Complete each ACR in accordance with the instructions provided in the VPAT® template. Each ACR must address the applicable Section 508 requirements referenced in the Statement of Work/Performance Work Statement/Specifications.

3. Address each standard individually and with specificity, and clarify whether conformance is achieved throughout the entire ICT Item (for example - user functionality, administrator functionality, and reporting), or only in limited areas of the ICT Item. Each ACR shall state exactly how the ICT meets the applicable standards in the remarks/explanations column, or through additional narrative. All "Not Applicable" responses must be explained in the remarks/explanations column or through additional narrative.

4. Provide a description of the evaluation methods used to support Section 508 conformance claims. The Agency reserves the right, prior to making an award decision, to perform testing on some or all of the Vendor’s proposed ICT items to validate Section 508 conformance claims made in the ACR.

d) Past Performance The Government will evaluate recent and relevant past performance of each Vendor as submitted in the Past Performance Information Retrieval System via the Contractor Performance Assessment Reporting System. FHFA may also use any data available, including FHFA knowledge, in the evaluation of past performance, including data concerning any subcontractors.

Page Limitation. Excluding cover pages, the QAP, and Conformance with ICT Accessibility Requirements (Section 508) the technical quote (including all non-price factors and other attachments) is limited to 10 pages. The font and format should be of readable quality.

Excessively small font may be rejected or not evaluated at the Contracting Officer’s discretion.

Quoters shall not include any price information in the technical quotation. For the overall technical quotation, a recitation or paraphrasing of the requirements already identified in the work requirements will not improve the quotation.

Volume II- Price Quotation Each Quoter shall submit a price quotation separate from the technical quotation (Volume I).

The price quotation shall include the completion of Attachment B: Enter the fixed inclusive unit price for all CLINs in the highlighted fields; the Worksheet will automatically calculate all other needed fields.

https://www.itic.org/policy/accessibility/vpat

FHFA will evaluate the total quoted price for reasonableness. FHFA reserves the right to conduct a price realism analysis to assess whether the quoted prices are unrealistically low.

Unrealistically low prices may be considered a negative attribute to the extent that they reflect a lack of technical understanding or a risk inherent in the proposed approach.

Page Limitation. There is no page limitation on the price quotation submission.

Evaluation and Selection Process

FHFA’s Contracting Officer reserves the right to conduct a compliance review and reject any quotation as non-compliant if the quotation takes exception to any of the terms of the RFQ, includes assumptions, or does not conform to the RFQ’s submission instructions.

Since this award is made under the policies of FAR part 12 in conjunction with FAR part 13 procedures, the evaluation process is streamlined, and FHFA has considerable flexibility in its award decision. FHFA will evaluate the quotation considering positive attributes, negative attributes, and potential risk of the overall quotation.

During the evaluation process, FHFA may or may not conduct exchanges. If FHFA conducts exchanges, such exchanges may be with one, several, or all Quoters. Exchanges may vary based on FHFA’s need to understand or give Quoters an opportunity to improve their quotations, but all exchanges will be fair and equitable.

Only Quoters whose quotes receive an overall technical rating of Some Confidence or higher will be considered for award. Following an evaluation and, if necessary, tradeoff analysis, FHFA may make one award based on the quotation that is evaluated to be the best value and determined responsible

FHFA reserves the right to make an award based on other than the lowest quoted price.

Technical (Volume I) is more important than price (Volume II); however, the importance of price as a factor could become greater if competing quotations are evaluated as technically equal.

Contractor Support Notification Contractors are advised that employees of the firm identified below may assist the Contracting Officer and technical evaluators during the acquisition process. These employees will not participate as voting members of the evaluation team (FAR 7.503(c)(12)). Further, these employees shall not rank or recommend one quote over another or otherwise act in a decision-making capacity. This firm is expressly prohibited from competing for the award(s).

C Evans Consulting, LLC 11939 Riders Ln Reston, VA 20191-4250 703.718.5527

In accomplishing their duties related to the acquisition process, employees of the above firm may require access to proprietary information contained in the quotes. Such employees are required to sign a Non-Disclosure Agreement mandating compliance with strict confidentiality restrictions.

If a quote is submitted in response to this RFQ, FHFA will consider the submission as consent that the quote may be reviewed by employees of the above firm who have signed a Non- Disclosure Agreement.

List of Attachments

Attachment A Work Requirements: Performance Work Statement Attachment B Price Quotation Worksheet Attachment C Breakdown of paid premium, claims paid, number of claims, and number of enrollees by enrollment categories for calendar years 2019-

Attachment D Breakdown of enrollment numbers for 2019-2025 Attachment E Breakdown of FHFA employee locations within the United States by zip codes Attachment F Quality Assurance Plan (QAP)

PERFORMANCE WORK STATEMENT (PWS) Attachment A

1.0 BACKGROUND:

The Federal Housing Finance Agency (FHFA) was created by the Housing and Economic Recovery Act of 2008 (HERA) to regulate and supervise Fannie Mae, Freddie Mac, and the 11 Federal Home Loan Banks (jointly, the “regulated entities”). HERA combined three organizations, the Office of Federal Housing Enterprise Oversight, the Federal Housing Finance Board, and a group from the Department of Housing and Urban Development, which collectively had previously regulated these regulated entities. These institutions play critical roles in supporting our nation’s housing finance system. Fannie Mae and Freddie Mac guarantee mortgage-backed securities (MBS) and hold mortgages and MBS’ for investment. The Federal Home Loan Banks lend money to banks and other financial institutions using mortgages as collateral and also invest in mortgage-related assets. In 2008, FHFA placed Fannie Mae and Freddie Mac in conservatorships, where they remain.

The FHFA is a non-appropriated federal financial regulatory agency headquartered in Washington, DC with the authority to offer its employees agency-sponsored benefit programs to supplement the federal programs. Currently, FHFA has approximately 600 employees comprising both FHFA and FHFA's Office of Inspector General. Approximately 80% of the population is located in the Washington, DC Metro area, with 20% of the population located throughout the continental United States.

Currently, the FHFA contracts with Avesis LLC to administer its vision care benefits insurance program. The 10-year contract ends on December 31, 2025.

2.0 SCOPE:

FHFA will offer a vision plan to its eligible employees and their dependents. The program shall consist of a single benefit option that provides both in and out of network benefits. The program shall include plan development, communication plan, claims processing, and reporting. The cost of vision plan premiums for eligible employees and their covered dependents will be fully paid by FHFA. The vision plan will only be available to active eligible employees (not retirees nor individuals who otherwise leave FHFA employment). The Contractor is required to meet all of the requirements identified in this Performance Work Statement. FHFA will not accept any deviation to benefits that result in a reduction of benefits to the plan design below:

SERVICES/ITEMS

VISION PLAN

In-Network Out-of-Network

Exams 1 every 12 months

Contact Lens Fittings 1 every 12 months

Frames 1 every 12 months Eyeglass Examination $0 copay Up to $55 Eyeglass Materials (lenses and frames)

• Eyeglass Frame

• Single Vision Lenses

• Bifocal Lenses

• Trifocal Lenses

• Lenticular Lenses

• Level 1 Progressive Lenses

• Level 2 Progressive Lenses

• Level 3 and higher Progressive Lenses

• Youth Polycarbonate

• Adult Polycarbonate

• Polarized Lenses

• PGX/PBX Lenses

• Transition Lenses

• Standard Scratch Resistant Coating

• Ultra-Violet Coating

• Solid or Gradient Tints

• Standard Anti-Reflective Coating

• All other Lens Options

$10 copay

Up to $150 retail plus 20% off overage after copay

Covered in full Covered in full Covered in full Covered in full $75 copay $110 copay Up to $50 plus 20% off retail Covered in full Covered in full $75 copay $40 copay $70 copay for Single Vision/$80 copay for Multi-Focal

Covered in full Covered in full Covered in full Covered in full 20% off retail

Up to $80

Up to $30 Up to $50 Up to $65 Up to $80 Up to $50 Up to $50 Up to $50 Up to $10.00 Up to $10.00 N/A N/A N/A

Up to $5 Up to $6 Up to $4 Up to $24 N/A

Contact Lenses (in lieu of eyeglasses)

• Examination/Fitting and Evaluation

• Elective Lenses

• Medically Necessary Lenses

$50 copay for standard/ $75 copay for premium

Up to $150 for lens (fitting and evaluation).

$0 copay (covered in full)

Up to $150

Up to $250

Laser Vision Correction Onetime/lifetime $150 allowance Onetime/lifetime $150 allowance Extra Discounts and Savings

Glasses and Sunglasses:

• 20% off additional glasses and sunglasses, including lens options, within 12 months of the last vison exam.

Covered

Not Covered

3.0 OBJECTIVES:

The FHFA is seeking an experienced and qualified contractor capable of providing and administering vision care benefits for eligible employees and their dependents.

4.0 TASKS:

The contractor shall have all the necessary measures in place to support the full implementation of a vision care program as of the day following the expiration of FHFA’s current vision care contract, which is March 31, 2025. The contractor shall agree, at a minimum, to provide the following services for the FHFA vision care program:

a. Administrative and Enrollment Service Requirements:

i. Administer a vision program that is mutually agreed upon by the FHFA and the contractor through the execution of the contract.

ii. Make available an internet web site in support of the FHFA’s vision benefits program.

iii. Design, produce and distribute to the FHFA, subject to the approval of the COR, ID cards or service cards and program brochures or pamphlets based on the plan document agreed to by the FHFA and contractor at the time of contract award, and all other required forms/documents necessary to administer the program.

iv. Provide an electronic means for transmitting and processing eligibility data.

v. Provide electronic files of forms and materials e.g., vision care enrollment form, Summary Plan Description, schedule of benefits, and any other materials which can be, at FHFA’s discretion, placed on the FHFA Intranet for employee use.

vi. Provide a vision care provider network sufficient to give each employee access to a network provider within 35 driving miles of their primary residence.

vii. Ensure compliance with federal requirements to protect the privacy of individually identifiable health information. Complies with the Health Insurance Portability and Accountability Act (HIPPA) and all applicable HIPAA regulations.

b. Eligibility:

FHFA will determine eligibility. All FHFA employees eligible for Federal Employees Health Benefits (FHFB) may enroll in the vision care program. They will remain eligible to participate in the program as long as they remain employed by the FHFA and are eligible for Federal Employees Health Benefits.

Eligible dependents include the employee’s spouse or domestic partner, unmarried dependent children up to age 26, children legally adopted, stepchildren, foster children who depend on the employee for support and maintenance, children over age 26 if disabled prior to their twenty-second birth date. The standards for determining whether a child is disabled, and incapable of self-support are outlined in Title 5, Code of Federal Regulations, Part 890, Section 890.302.

For the purpose of the FHFA vision care program, “domestic partners” are defined as an eligible employee and one other person of the same or opposite sex who share in a committed and exclusive relationship which includes the following:

• Have shared the same regular and permanent residence for at least (6) months

• Are in a relationship of mutual support, caring and commitment; and intend to remain so indefinitely

• Share the common necessities of life and are financially interdependent

• Are not related by blood

• Are not married or in any other domestic partnership and have not been so for the last six

(6) months

• Are each eighteen years of age or older and otherwise competent to enter a contract; and

• Have signed an FHFA Affidavit of Domestic Partnership Status

c. Enrollment and Coverage Effective Dates

Coverage is effective on the first day of the month following receipt of the completed vision care election form by Human Resources. Coverage for employees will terminate either on the last day of the month the employee separates from the agency, the last day of the month the employee elects to voluntarily cancel their participation in the program, or the day the group policy terminates, whichever happens first. If employees decide to continue coverage into retirement, they must complete the enrollment process 31 days prior and up to 60 days after retirement from the agency. Enrolled retirees are responsible for premium payment and will receive pricing based on the agency’s negotiated rates. In the event the agency terminates the contract with the vendor, the retiree is eligible to maintain coverage as an individual participant at the agency's final premium rate.

Enrollment changes must be made by completing a new vision care election form and submitting it to Human Resources.

Coverage is effective on the first day of the month following enrollment.

d. Claim Processing and Customer Service Requirements

i. Process all FHFA claims on a direct claims verification and payment basis.

ii. Establish and maintain a claim processing turnaround time of 15 calendar days or less as well as prompt turnaround time for providing employees with written correspondence regarding claim decisions and additional information requests.

iii. Maintain current, complete and confidential records for each covered person and provide a description of the plan in place for compliance with the Health Insurance Portability and Privacy Act (HIPPA).

iv. At a minimum, maintain a customer service unit with hours of operation for personal contact from 8:00 a.m. until 6:00 p.m. Eastern Time, Monday through Friday (excluding Federal holidays).

v. Provide a toll-free telephone service that has the capability to place calls on hold and queue during peak calling hours. A toll-free telephone number shall be available to all FHFA employees 24-hours a day, seven days a week, and there shall be a messaging device to handle after-hours calls.

vi. Provide an internet portal for customer claims tracking and out-of-network claim submission.

vii. Establish a claims dispute process and communicate that process to FHFA.

viii. Provide service personnel who are accessible and knowledgeable in all aspects of the FHFA vision care program.

ix. Prepare a customized administrative manual (i.e., policies and procedures, forms, etc.)

to be used by FHFA human resources staff.

e. Management Information Systems (MIS)/Reporting and Service Monitoring Requirements

The contractor shall link claim records, utilization data, billing and enrollment data to provide accurate costs and utilization data on a per capita basis.

f. Account Manager

The contractor shall appoint a qualified Account Manager to respond to plan administration issues and to serve as a liaison with the COR. The Account Manager shall perform, but not be limited to, the following:

i. Have direct communication with FHFA human resources staff.

ii. Contact FHFA on a monthly basis to review the status of the overall operation of the vision care program.

iii. Provide prompt and complete answers to all questions and requests raised by the FHFA and establish mutually agreed upon dates for responses.

iv. Resolve plan performance issues with the COR.

g. Privacy Practices

The contractor shall provide copies of privacy policies, privacy impact assessments and/or other documentation that demonstrates that the Offeror’s systems either have been certified and accredited to protect information, or that they comply with the Privacy Act.

Under this contract, the Contractor will operate a system of records on behalf of the government that is subject to the requirements of the Privacy Act of 1974 (5 U.S.C. 552a). As such, Contractor and its employees are considered employees of the agency for purposes of the criminal penalties of the Privacy Act. See FAR 52.224-1, 52.224-2, and 52.224-3 for additional details regarding the Contractor’s obligations under the Privacy Act.

The relevant system of records notice (SORN) is FHFA-10, “Employee Benefits Records,” which is available on FHFA’s website at: https://www.federalregister.gov/documents/2011/06/08/2011- 14057/privacy-act-of-1974-system-of-records. Additional information about FHFA’s Privacy Program, including FHFA’s Privacy Act regulations and FHFA’s Use and Protection of Personally Identifiable Information Policy are available on FHFA’s privacy website:

https://www.fhfa.gov/about/privacy. As provided in FHFA clause 6.208d, “IT Security Clause for Acquisitions of Information Systems Operated by a Contractor on Behalf of FHFA,” Contractor shall fully cooperate and assist in any Government security controls assessment, including those related to privacy. This includes, but is not limited to, providing the information requested by FHFA to prepare a privacy impact assessment for the contractor-operated system.

h. Transition Plan

The contractor shall provide a transition plan as part of its quote depicting how the contractor shall ensure services will commence on April 1, 2026.

5.0 DELIVERABLES:

The contractor shall ensure that all written correspondence relating to this contract is (including the required reports below), at a minimum, addressed to the CO with copies sent to the COR.

All references to days in this section are calendar days unless otherwise specified.

The contractor shall provide the following reports:

Specifically Dated Reports: These following reports must be created by the contractor and received by the FHFA on the dates specified below:

a. Provide file specifications for transmitting eligibility data and any other electronic data needs to the FHFA within 15 days of contract award.

b. Prepare and deliver to the FHFA all communications material applicable to the program for the upcoming plan each year by December 15.

c. Enrolled participants must be provided with written notice of any modifications to coverage, plan structure, or premium rates no fewer than 14 days prior to the scheduled implementation date.

d. Distribute identification cards or service cards, along with program information (welcome packet) via online portal and, upon request, mailed to the employee’s home address within 10 business days of receiving enrollment data.

https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.federalregister.gov%2Fdocuments%2F2011%2F06%2F08%2F2011-14057%2Fprivacy-act-of-1974-system-of-records&data=05%7C02%7CNatalie.Wallace%40fhfa.gov%7Cdc09e120c9454249cb3b08de1329bb56%7C0aebef204ba040eb93d637c168a45667%7C0%7C0%7C638969267133182746%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=K%2FPeVsNMaVA%2FjDVh4UUuHXJt9d5agQXyMU60KERJiNM%3D&reserved=0 https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.federalregister.gov%2Fdocuments%2F2011%2F06%2F08%2F2011-14057%2Fprivacy-act-of-1974-system-of-records&data=05%7C02%7CNatalie.Wallace%40fhfa.gov%7Cdc09e120c9454249cb3b08de1329bb56%7C0aebef204ba040eb93d637c168a45667%7C0%7C0%7C638969267133182746%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=K%2FPeVsNMaVA%2FjDVh4UUuHXJt9d5agQXyMU60KERJiNM%3D&reserved=0 https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.fhfa.gov%2Fabout%2Fprivacy&data=05%7C02%7CNatalie.Wallace%40fhfa.gov%7Cdc09e120c9454249cb3b08de1329bb56%7C0aebef204ba040eb93d637c168a45667%7C0%7C0%7C638969267133218309%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=pSKVokcm1tO7ic%2F0s17UPkSrDwlmm3AVykvSAY28mWE%3D&reserved=0

e. Provide an annual accounting (detailing the financial experience) for the contract to the COR 90 days before plan ends each year.

f. Provide retroactive reimbursement for any employee premium payments determined to be ineligible or erroneous.

Monthly Reports: These following reports must be created by the contractor and received by the FHFA on or before the 20th of the month following the reporting period:

a. Financial Report – current and cumulative year-to-date information regarding network vs.

out-of-network claims (reflect network savings).

b. Claims Report – paid claims and premiums received by month and year-to-date.

c. Contested Claims Report - denied or partially paid claims.

d. Premium invoice statements to reflect premium adjustments in the active employee population due to reconciling enrollments.

e. Employee Separations Report

f. Claims Turnaround Report – from date of receipt to date reimbursement check generated.

Annual Reports: These reports must be created by the contractor and received by the FHFA on or before October 15th of each year:

a. Claim Lag Study showing month of service and payment date for out-of-network claims.

b. Year-end Financial Summary with detailed breakdown of retention components or administrative expenses.

6.0 GOVERNMENT-FURNISHED PROPERTY:

The FHFA shall provide the contractor with enrollment data no later than 30 days from the date the employee initiates their coverage election.

7.0 SECURITY:

Requirements for solutions that may be COTS or externally hosted Software as a Service (SaaS)

a. The solution supports encryption of data at rest and data in transit using FIPS 140-2 approved algorithms;

b. The solution implements role-based access control to allow for a least privilege access model;

c. The solution audits user-activity and allows FHFA privileged users to view audit reports;

d. The solution supports single sign-on using FHFA’s system login credentials via Security

Assertion Markup Language (SAML) 2.0 and function in a “Service Provider” or “Relying Party” type role where FHFA serves as the Identity Provider.

a. If the single sign-on is not supported, the solution shall require complex passwords that meet the following requirements:

i. 12 characters in length;

ii. Requires both uppercase and lowercase letters;

iii. Requires at least one number and one special character;

iv. Cannot be identical to the last 24 passwords;

v. Are disabled every 60 days;

vi. User accounts are locked after 5 failed logon attempts;

e. The solution supports the termination of user sessions after 15 minutes of inactivity or a time period to be defined by FHFA;

f. The solution undergoes periodic penetration testing and the vendor tracks and reports on the remediation of identified vulnerabilities;

g. All data in use and at rest, and data backups/storage must reside within the U.S.;

h. Only authorized contractor personnel (including subcontractor personnel) with appropriate background investigations and authorization shall access FHFA data and backups.

8.0 Information Communication Technology (ICT) Accessibility (Section 508) Section 508 of the Rehabilitation Act, as amended by the Workforce Investment Act of 1998 (P.L.

105-220) requires that when Federal agencies develop, procure, maintain, or use information and communication technology (ICT), it shall be accessible to people with disabilities. Federal employees and members of the public who have disabilities must have access to, and use of, information and data that is comparable to people without disabilities. As such, the following requirements apply to this solicitation:

1) Products, platforms and services delivered as part of this work statement that are ICT, or contain ICT, must conform to the Revised 508 Standards, which are located at 36 C.F.R. §

1194.1 & Apps. A, C & D, and available at https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines

2) E102 / 702.10 – Web Content Accessibility Guidelines (WCAG) success criteria level A & AA are incorporated as a requirement. The referenced WCAG criteria is available at http://www.w3.org/TR/WCAG20/

3) E206 – ICT Hardware that transmits information or has a user interface, such components shall conform the requirements of Chapter 4, parts 402 through 415.

The following items are identified as containing ICT: Vendor customer Web-portal and submitted electronic documents/reports*

Applicable Functional Performance Criteria: All functional performance criteria apply when using an alternative design or technology that achieves substantially equivalent or greater accessibility and usability by individuals with disabilities than would be provided by conformance to one or more of the requirements in Chapters 4-6 of the Revised 508 Standards, or when Chapters 4-6 do not address one or more functions of ICT.

Applicable requirements for Web products and electronic documents:

• E205.4 – WCAG Level A & AA Success Criteria

• E302 – Functional Performance Criteria

• E501 – Software/Web (client Web portal) https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines http://www.w3.org/TR/WCAG20/

9.0 PLACE OF PERFORMANCE:

All work shall be performed at the vendor’s site.

10.0 PERIOD OF PERFORMANCE:

Transition: Date of Award – 3/31/2025 Base Period: 4/1/2026 - 12/31/2026 Option Years 1-9: 1/1/2027 – 12/31/2035

Executive Order (EO) Compliance

In accordance with EO 14173, Ending Illegal Discrimination and Restoring Merit-Based Opportunity, E.O. 14168, Defending Women from Gender Ideology Extremism and Restoring Biological Truth to the Federal Government, E.O. 14148, Initial Rescissions of Harmful Executive Orders and Actions, and Section 2 of E.O. 14208, Ending Procurement and Forced Use of Paper Straws, as well as the Civilian Agency Acquisition Council’s (CAAC) Consultation Letters 2025- 01, 2025-02, and associated supplements:

a. The Contractor agrees that its compliance in all respects with all applicable Federal anti-discrimination laws is material to the government's payment decisions for purposes of section 3729(b)(4) of title 31, United States Code.

b. The Contractor certifies it does not operate any programs promoting DEI that violate any applicable Federal anti-discrimination laws.

CLAUSES

FAR Clauses Included by Reference 52.204-13 – System for Award Management Maintenance (Oct 2018) 52.204-18 – Commercial and Government Entity Code Maintenance (Aug 2020) 52.204-21 – Basic Safeguarding of Covered Contractor Information Systems (Nov 2021)

FAR Clauses Included in Full Text

52.212-4 CONTRACT TERMS AND CONDITIONS - COMMERCIAL PRODUCTS AND

COMMERCIAL SERVICES (NOV 2023) - FHFA DEVIATION (see paragraphs (d) and (s))

(a) Inspection/Acceptance. The Contractor shall only tender for acceptance those items that conform to the requirements of this contract. The Government reserves the right to inspect or test any supplies or services that have been tendered for acceptance. The Government may require repair or replacement of nonconforming supplies or reperformance of nonconforming services at no increase in contract price. If repair/replacement or reperformance will not correct the defects or is not possible, the Government may seek an equitable price reduction or adequate consideration for acceptance of nonconforming supplies or services. The Government must exercise its post-acceptance rights-

(1) Within a reasonable time after the defect was discovered or should have been discovered; and

(2) Before any substantial change occurs in the condition of the item, unless the change is due to the defect in the item.

(b) Assignment. The Contractor or its assignee may assign its rights to receive payment due as a result of performance of this contract to a bank, trust company, or other financing institution, including any Federal lending agency in accordance with the Assignment of Claims Act ( 31 U.S.C. 3727). However, when a third party makes payment (e.g., use of the Governmentwide commercial purchase card), the Contractor may not assign its rights to receive payment under this contract.

(c) Changes. Changes in the terms and conditions of this contract may be made only by written agreement of the parties.

(d) RESERVED – Refer to FHFA clause 6.202 Disputes (April 2013).

(e) Definitions. The clause at FAR 52.202-1, Definitions, is incorporated herein by reference.

(f) Excusable delays. The Contractor shall be liable for default unless nonperformance is caused by an occurrence beyond the reasonable control of the Contractor and without its fault or negligence such as, acts of God or the public enemy, acts of the Government in either its sovereign or contractual capacity, fires, floods, epidemics, quarantine restrictions, strikes, unusually severe weather, and delays of common carriers. The Contractor shall notify the Contracting Officer in writing as soon as it is reasonably possible after the commencement of any excusable delay, setting forth the full particulars in connection therewith, shall remedy such occurrence with all reasonable dispatch, and shall promptly give written notice to the Contracting Officer of the cessation of such occurrence.

(g) Invoice.

(1) The Contractor shall submit an original invoice and three copies (or electronic invoice, if authorized) to the address designated in the contract to receive invoices.

An invoice must include-

(i) Name and address of the Contractor;

(ii) Invoice date and number;

(iii) Contract number, line item number and, if applicable, the order number;

(iv) Description, quantity, unit of measure, unit price and extended price of the items delivered;

(v) Shipping number and date of shipment, including the bill of lading number and weight of shipment if shipped on Government bill of lading;

(vi) Terms of any discount for prompt payment offered;

(vii) Name and address of official to whom payment is to be sent;

(viii) Name, title, and phone number of person to notify in event of defective invoice;

and

(ix) Taxpayer Identification Number (TIN). The Contractor shall include its TIN on the invoice only if required elsewhere in this contract.

(x) Electronic funds transfer (EFT) banking information.

(A) The Contractor shall include EFT banking information on the invoice only if required elsewhere in this contract.

(B) If EFT banking information is not required to be on the invoice, in order for the invoice to be a proper invoice, the Contractor shall have submitted correct EFT banking information in accordance with the applicable solicitation provision, contract clause (e.g., 52.232- 33, Payment by Electronic Funds Transfer-System for Award Management, or 52.232-34, Payment by Electronic Funds Transfer-Other Than System for Award Management), or applicable agency procedures.

(C) EFT banking information is not required if the Government waived the requirement to pay by EFT.

(2) Invoices will be handled in accordance with the Prompt Payment Act ( 31 U.S.C.3903) and Office of Management and Budget (OMB) prompt payment regulations at 5 CFR Part 1315.

http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/52.202-1#FAR_52_202_1 https://www.acquisition.gov/far/52.232-33#FAR_52_232_33 https://www.acquisition.gov/far/52.232-33#FAR_52_232_33 https://www.acquisition.gov/far/52.232-34#FAR_52_232_34 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3

(h) Patent indemnity. The Contractor shall indemnify the Government and its officers, employees and agents against liability, including costs, for actual or alleged direct or contributory infringement of, or inducement to infringe, any United States or foreign patent, trademark or copyright, arising out of the performance of this contract, provided the Contractor is reasonably notified of such claims and proceedings.

(i) Payment.-

(1) Items accepted. Payment shall be made for items accepted by the Government that have been delivered to the delivery destinations set forth in this contract.

(2) Prompt payment. The Government will make payment in accordance with the Prompt

Payment Act ( 31 U.S.C.3903) and prompt payment regulations at 5 CFR Part 1315.

(3) Electronic Funds Transfer (EFT). If the Government makes payment by EFT, see 52.212-5(b) for the appropriate EFT clause.

(4) Discount. In connection with any discount offered for early payment, time shall be computed from the date of the invoice. For the purpose of computing the discount earned, payment shall be considered to have been made on the date which appears on the payment check or the specified payment date if an electronic funds transfer payment is made.

(5) Overpayments. If the Contractor becomes aware of a duplicate contract financing or invoice payment or that the Government has otherwise overpaid on a contract financing or invoice payment, the Contractor shall-

(i) Remit the overpayment amount to the payment office cited in the contract along with a description of the overpayment including the-

(A) Circumstances of the overpayment (e.g., duplicate payment, erroneous payment, liquidation errors, date(s) of overpayment);

(B) Affected contract number and delivery order number, if applicable;

(C) Affected line item or subline item, if applicable; and

(D) Contractor point of contact.

(ii) Provide a copy of the remittance and supporting documentation to the Contracting Officer.

(6) Interest.

(i) All amounts that become payable by the Contractor to the Government under this contract shall bear simple interest from the date due until paid unless paid within 30 days of becoming due. The interest rate shall be the interest rate established by the Secretary of the Treasury as provided in 41 U.S.C. 7109, which is applicable to the period in which the amount becomes due, as provided in (i)(6)(v) of this clause, and then at the rate applicable for each six-month period as fixed by the Secretary until the amount is paid.

(ii) The Government may issue a demand for payment to the Contractor upon finding a debt is due under the contract.

(iii) Final decisions. The Contracting Officer will issue a final decision as required by 33.211 if–

(A) The Contracting Officer and the Contractor are unable to reach agreement on the existence or amount of a debt within 30 days;

(B) The Contractor fails to liquidate a debt previously demanded by the Contracting Officer within the timeline specified in the demand for payment unless the amounts were not repaid because the Contractor has requested an installment payment agreement; or

(C) The Contractor requests a deferment of collection on a debt previously demanded by the Contracting Officer (see 32.607-2).

http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/52.212-5#FAR_52_212_5 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/33.211#FAR_33_211 https://www.acquisition.gov/far/32.607-2#FAR_32_607_2

(iv) If a demand for payment was previously issued for the debt, the demand for payment included in the final decision shall identify the same due date as the original demand for payment.

(v) Amounts shall be due at the earliest of the following dates:

(A) The date fixed under this contract.

(B) The date of the first written demand for payment, including any demand for payment resulting from a default termination.

(vi) The interest charge shall be computed for the actual number of calendar days involved beginning on the due date and ending on-

(A) The date on which the designated office receives payment from the Contractor;

(B) The date of issuance of a Government check to the Contractor from which an amount otherwise payable has been withheld as a credit against the contract debt; or

(C) The date on which an amount withheld and applied to the contract debt would otherwise have become payable to the Contractor.

(vii) The interest charge made under this clause may be reduced under the procedures prescribed in FAR 32.608-2 in effect on the date of this contract.

(j) Risk of loss. Unless the contract specifically provides otherwise, risk of loss or damage to the supplies provided under this contract shall remain with the Contractor until, and shall pass to the Government upon:

(1) Delivery of the supplies to a carrier, if transportation is f.o.b. origin; or

(2) Delivery of the supplies to the Government at the destination specified in the contract, if transportation is f.o.b. destination.

(k) Taxes. The contract price includes all applicable Federal, State, and local taxes and duties.

(l) Termination for the Government’s convenience. The Government reserves the right to terminate this contract, or any part hereof, for its sole convenience. In the event of such termination, the Contractor shall immediately stop all work hereunder and shall immediately cause any and all of its suppliers and subcontractors to cease work. Subject to the terms of this contract, the Contractor shall be paid a percentage of the contract price reflecting the percentage of the work performed prior to the notice of termination, plus reasonable charges the Contractor can demonstrate to the satisfaction of the Government using its standard record keeping system, have resulted from the termination. The Contractor shall not be required to comply with the cost accounting standards or contract cost principles for this purpose. This paragraph does not give the Government any right to audit the Contractor’s records. The Contractor shall not be paid for any work performed or costs incurred which reasonably could have been avoided.

(m) Termination for cause. The Government may terminate this contract, or any part hereof, for cause in the event of any default by the Contractor, or if the Contractor fails to comply with any contract terms and conditions, or fails to provide the Government, upon request, with adequate assurances of future performance. In the event of termination for cause, the Government shall not be liable to the Contractor for any amount for supplies or services not accepted, and the Contractor shall be liable to the Government for any and all rights and remedies provided by law. If it is determined that the Government improperly terminated this contract for default, such termination shall be deemed a termination for convenience.

(n) Title. Unless specified elsewhere in this contract, title to items furnished under this contract shall pass to the Government upon acceptance, regardless of when or where the Government takes physical possession.

(o) Warranty. The Contractor warrants and implies that the items delivered hereunder are merchantable and fit for use for the particular purpose described in this contract.

https://www.acquisition.gov/far/32.608-2#FAR_32_608_2

(p) Limitation of liability. Except as otherwise provided by an express warranty, the Contractor will not be liable to the Government for consequential damages resulting from any defect or deficiencies in accepted items.

(q) Other compliances. The Contractor shall comply with all applicable Federal, State and local laws, executive orders, rules and regulations applicable to its performance under this contract.

(r) Compliance with laws unique to Government contracts. The Contractor agrees to comply with 31 U.S.C. 1352 relating to limitations on the use of appropriated funds to influence certain Federal contracts; 18 U.S.C. 431 relating to officials not to benefit; 40 U.S.C. chapter 37, Contract Work Hours and Safety Standards; 41 U.S.C. chapter 87, Kickbacks; 49 U.S.C. 40118, Fly American; and 41 U.S.C. chapter 21 relating to procurement integrity.

(s) Order of precedence. [Refer to FHFA clause 6.212a Order of Precedence – FHFA Contracts (JAN 2022) for additional details regarding any potential inconsistencies between FHFA clauses and FAR clauses.] Any inconsistencies in this solicitation or contract shall be resolved by giving precedence in the following order:

(1) The schedule of supplies/services.

(2) The Assignments, Disputes, Payments, Invoice, Other Compliances, Compliance with

Laws Unique to Government Contracts, and Unauthorized Obligations paragraphs of this clause;

(3) The clause at 52.212-5.

(4) Addenda to this solicitation or contract, including any license agreements for computer software.

(5) Solicitation provisions if this is a solicitation.

(6) Other paragraphs of this clause.

(7) The Standard Form 1449.

(8) Other documents, exhibits, and attachments.

(9) The specification.

(t) [Reserved]

(u) Unauthorized Obligations.

(1) Except as stated in paragraph (u)(2) of this clause, when any supply or service acquired under this contract is subject to any End User License Agreement (EULA), Terms of Service (TOS), or similar legal instrument or agreement, that includes any clause requiring the Government to indemnify the Contractor or any person or entity for damages, costs, fees, or any other loss or liability that would create an Anti-Deficiency Act violation (31 U.S.C. 1341), the following shall govern:

(i) Any such clause is unenforceable against the Government.

(ii) Neither the Government nor any Government authorized end user shall be deemed to have agreed to such clause by virtue of it appearing in the EULA, TOS, or similar legal instrument or agreement. If the EULA, TOS, or similar legal instrument or agreement is invoked through an "I agree" click box or other comparable mechanism (e.g., "click-wrap" or "browse-wrap" agreements), execution does not bind the Government or any Government authorized end user to such clause.

(iii) Any such clause is deemed to be stricken from the EULA, TOS, or similar legal instrument or agreement.

(2) Paragraph (u)(1) of this clause does not apply to indemnification by the Government that is expressly authorized by statute and specifically authorized under applicable agency regulations and procedures.

https://www.acquisition.gov/far/52.212-5#FAR_52_212_5 https://www.gsa.gov/forms-library/solicitationcontractorder-commercial-items

(v) Incorporation by reference. The Contractor’s representations and certifications, including those completed electronically via the System for Award Management (SAM), are incorporated by reference into the contract.

(End of Clause)

52.212-5 -- Contract Terms and Conditions Required to Implement Statutes or Executive Orders -- Commercial Products and Commercial Services (Oct 2025) (DEVIATION FEB 2025)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (Jan 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities (DEC 2023) (Section 1634 of Pub. L. 115-91).

(3) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) (Section 889(a)(1)(A) of Pub. L. 115-232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (Nov 2015)

(5) 52.232-40, Providing Accelerated Payments to Small Business Subcontractors (Mar 2023) (31 U.S.C. 3903 and 10 U.S.C. 3801)

(6) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(7) 52.233-4, Applicable Law for Breach of Contract Claim (OCT…