Attachment_1_PWS_9531CB27P0001_HeinOnline.docx

Purchase Order 9531CB27P0001 | HeinOnline U.S. Core+ for Government Subscription

ATTACHMENT 1 TO SAM.GOV NOTICE 9531CB27P0001

PERFORMANCE WORK STATEMENT

HeinOnline U.S. Core+ for Government Enterprise Subscription

1.0 GENERAL INFORMATION. The purpose of this Performance Work Statement (PWS) is to obtain enterprise-wide access to the HeinOnline U.S. Core+ for Government electronic subscription, published by William S. Hein & Co., Inc. (Hein). The subscription covers a 12-month base period and three 12-month option periods.

2.0 BACKGROUND. Consumer Financial Protection Bureau (CFPB or Bureau) staff need authoritative, true-to-print legal and government research materials to support the Bureau’s rulemaking, supervision, enforcement, and litigation work. The U.S. Core+ for Government subscription contains the full text of more than 3,300 law and law-related journals, access to U.S. federal and state case law, thousands of classic legal treatises, and a wide range of government publications. It provides complete coverage of the U.S. Statutes at Large, U.S. Code, Federal Register, Code of Federal Regulations, and Congressional Record.

3.0 SCOPE AND PLACE OF PERFORMANCE. This PWS covers an electronic subscription only. It does not include custom development, data migration, or on-site services. No travel is required. The Contractor performs at its own facilities. Bureau users access the service over the internet.

4.0 PERIOD OF PERFORMANCE. The base period is November 16, 2026 through November 15, 2027. Option Period 1 is November 16, 2027 through November 15, 2028. Option Period 2 is November 16, 2028 through November 15, 2029. Option Period 3 is November 16, 2029 through November 15, 2030. Each option period begins only if the Contracting Officer exercises it in writing.

5.0 REQUIREMENTS. The Contractor shall provide the following for the base period and each exercised option period.

5.1 Enterprise License. The Contractor shall provide access for all Authorized Users. Authorized Users are Bureau employees, and the contractors, detailees, and interns the Bureau authorizes, wherever they are located. There shall be no limit on the number of Authorized Users, simultaneous sessions, searches, or downloads. The only exception is a limit Hein applies to all customers to protect the service from automated abuse.

5.2 Authentication and Remote Access. (a) The Contractor shall provide Internet Protocol (IP) address authentication for the Bureau IP address ranges that the Contracting Officer’s Representative (COR) provides after award. The Contractor shall update those ranges within three business days after a COR request. (b) The Contractor shall provide remote access for Authorized Users who are outside the Bureau network. Remote access shall use Security Assertion Markup Language (SAML) 2.0 single sign-on with the Bureau’s identity provider, or another remote access method that the COR approves in writing. (c) Authorized Users shall not be required to create a personal account to search or read content. Optional personal features, such as saved searches and alerts, may require a voluntary account.

5.3 Content. The Contractor shall provide the full U.S. Core+ for Government collection as Hein offers it during each period. This includes content Hein adds to the collection during the period, at no additional cost. If Hein permanently removes a title or a significant body of content from the collection, the Contractor shall notify the COR within 30 calendar days.

5.4 Permitted Uses. Consistent with copyright law, Authorized Users may search, view, print, download, and save content. They may cite and quote content in Bureau work product. They may share reasonable portions of content with other Authorized Users, and with courts, parties, and other government agencies, for official Bureau business. Official Bureau business includes rulemaking, supervision, enforcement, and litigation.

5.5 Administration and Usage Reports. The Contractor shall provide administrative access for the COR and one designee. The Contractor shall provide usage statistics at least quarterly, or on demand through an administrative portal. Usage statistics shall follow the Counting Online Usage of Networked Electronic Resources (COUNTER) Release 5 standard where Hein supports it.

5.6 Technical Support and Training. The Contractor shall provide Hein’s standard technical support by telephone and email during normal business hours, Eastern Time. The Contractor shall provide online training materials and, on COR request, at least one live online training session in each period, at no additional cost.

5.7 Service Availability. The service shall be available 24 hours a day, seven days a week, except for scheduled maintenance. The Contractor shall give the COR advance notice of scheduled maintenance that will last more than four hours between 8:00 a.m. and 6:00 p.m. Eastern Time on a business day. The Contractor shall notify the COR of any unscheduled outage that lasts more than four hours.

5.8 Privacy of User Activity. The Contractor shall not sell, rent, or disclose search queries, search histories, or usage data that identify an Authorized User. The Contractor shall not use that information for advertising, or to train artificial intelligence (AI) models made available to other customers. The Contractor shall promptly notify the Contracting Officer of any legal demand for Bureau user information, unless the law prohibits that notice.

5.9 Accessibility. The Contractor shall provide Hein’s current Accessibility Conformance Report (ACR) for the HeinOnline platform on request.

6.0 DELIVERABLES. The Contractor shall deliver the following to the COR, with a copy to the Contracting Officer:

(a) Activation confirmation, no later than November 16, 2026, and at the start of each exercised option period. It shall show the account number, the collection, and the period start and end dates.

(b) Access instructions for IP address authentication and remote access, no later than November 16, 2026.

(c) Administrative account credentials, no later than November 16, 2026, sent through a secure method the COR approves.

(d) Usage statistics, as described in paragraph 5.5.

7.0 ACCEPTANCE. The COR will accept each period after confirming that access works from the Bureau network and through remote access, and that the account shows the correct collection and term. The COR will notify the Contractor of any discrepancy within five business days after activation. The Contractor shall correct any discrepancy within five business days after notification.

8.0 LICENSE TERMS. The following minimum terms apply to this Purchase Order:

(a) Order of precedence. Hein’s license agreement or subscription terms apply only to the extent they are consistent with this Purchase Order, FAR 52.212-4, and FAR 52.232-39.

(b) No automatic renewal. The subscription shall not renew automatically. A new period begins only if the Contracting Officer exercises an option in writing.

(c) No indemnification. Any term that requires the Government to indemnify the Contractor, Hein, or any other party is unenforceable against the Government.

(d) Governing law and disputes. Federal law governs this Purchase Order. Disputes are resolved under FAR 52.233-1, Disputes. Any term that selects state law, a venue, or arbitration does not apply.

(e) No unilateral changes. A change to the license terms during a period that reduces the Government’s rights does not apply unless the Contracting Officer agrees to it by written modification.

(f) Click-through terms. A click-through, browse-wrap, or similar agreement accepted by an Authorized User does not bind the Government.

(g) Fixed prices. The price of each period is fixed at award. The Contractor shall not charge any amount above the price stated in the Purchase Order for any period.

(h) Public disclosure. The Government may disclose this Purchase Order and its prices as required by the Freedom of Information Act (FOIA) and other law.

9.0 SECURITY. The Bureau will not load Bureau data into HeinOnline. The Contractor shall not require the Bureau to provide information beyond its IP address ranges, its identity provider configuration, and administrative contact information. Section II, clause 1.1 applies to that information.

10.0 POINTS OF CONTACT. The COR is Gwendolyn Trowell. The Contracting Officer is Patrick Sisk, patrick.sisk@cfpb.gov.

11.0 CONTRACT TYPE. Firm-fixed-price.

Purchase Order 9531CB27P0001 | Page