A19 SF18 RFQ 75D301-26-Q-79197.pdf

REQUEST FOR QUOTATIONS

(THIS IS NOT AN ORDER)

THIS RFQ X IS IS NOT A SMALL BUSINESS SET-ASIDE.

PAGE OF PAGES

1 33

1. REQUEST NO.

75D301-26-Q-79197

2. DATE ISSUED

3. REQUISITION/PURCHASE REQUEST NO.

00HCAJSH-2026-95787

4. CERT. FOR NAT. DEF.

UNDER BDSA REG. 2

AND/OR DMS REG. 1

RATING

5a. ISSUED BY Centers for Disease Control and Prevention Chamblee Campus Building 102, MS S102-4 4770 Buford Hwy Atlanta GA 303413717

6. DELIVERY BY (Date)

5b. FOR INFORMATION CALL (No collect calls)

NAME TELEPHONE NUMBER

AREA CODE NUMBER

Aleesha Butler (770) 488-5245 x

8. TO: 9. DESTINATION

a. NAME b. COMPANY a. NAME OF CONSIGNEE

c. STREET ADDRESS b. STREET ADDRESS

c. CITY

d. CITY e. STATE f. ZIP CODE d. STATE e. ZIP CODE

10. PLEASE FURNISH QUOTATIONS TO

THE ISSUING OFFICE IN BLOCK 5a ON OR BEFORE CLOSE OF BUSINESS (Date)

IMPORTANT: This is a request for information, and quotations furnished are not offers. If you are unable to quote, please so indicate on this form and return it. This request does not commit the Government to pay any costs incurred in the preparation of the submission of this quotation or to contract for supplies or services.

Supplies are of domestic origin unless otherwise indicated by quoter. Any representations and/or certifications attached to this Request for Quotations must be completed by the quoter.

11. SCHEDULE (Include applicable Federal, State and local taxes)

ITEM NO.

(a)

SUPPLIES/SERVICES

(b)

QUANTITY

(c)

UNIT

(d)

UNIT PRICE

(e)

AMOUNT

(f)

“See Continuation Page”

12. DISCOUNT FOR PROMPT PAYMENT a. 10 CALENDAR DAYS

b. 20 CALENDAR DAYS

c. 30 CALENDAR DAYS

d. CALENDAR DAYS

NUMBER PERCENTAGE

NOTE: Additional provisions and representations are are not attached.

13. NAME AND ADDRESS OF QUOTER 14. SIGNATURE OF PERSON AUTHORIZED TO

SIGN QUOTATION

15. DATE OF

QUOTATION

a. NAME OF QUOTER

b. STREET ADDRESS 16. SIGNER

a. NAME (Type or print) b. TELEPHONE

c. COUNTY AREA CODE

d. CITY e. STATE f. ZIP CODE c. TITLE (Type or print) NUMBER

AUTHORIZED FOR LOCAL REPRODUCTION STANDARD FORM 18 (REV. 6-95)

Previous edition not usable Prescribed by GSA FAR (48 CFR) 53.215-1(a)

7. DELIVERY

FOB

DESTINATION

OTHER

(See Schedule)

This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in Federal Acquisition Requirements (FAR) Subpart 12.202, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; proposals are being requested.

The solicitation number for this requirement is 75D301-26-Q-79197 and is hereby issued as a Request for Quote (RFQ) using FAR Subpart 12 - Acquisition of Commercial Products and Commercial Services.

The Centers for Disease Control and Prevention intends to award a firm-fixed-price contract, see the attached RFQ for more details and instructions to offerors. See the CLIN(s) and FAR Clauses and Provisions associated with this combined synopsis/solicitation in the attached RFQ.

Period of Performance: Base: Award + 12 months and Option Periods: (4) 12-Month

Questions due by COB Thursday, August 06, 2026

Place of Performance: Center for Disease Contron and Prevention (CDC)

Clifton/Roybal Campus 1600 Clifton Rd NE Building 21 Atlanta, GA 30329

The quote format is at the discretion of the offeror.

It is the offeror's responsibility to be familiar with the applicable clauses and provisions. Clauses and provisions may be accessed via the Internet at website FAR | Acquisition.GOV.

This acquisition is under North American Industry Classification System (NAICS) code 513210

– Software Publishers. A Firm-Fixed Price purchase order will be issued in writing to the successful offeror. To be eligible to receive an award resulting from this solicitation, contractor must be registered in the System for Award Management (SAM) at the time of quote submission.

FAR Provision 52.212-1, Instructions to Offerors-Commercial Products and Commercial Services, applies to this acquisition.

FAR clause 52.212-4, Contract Terms and Conditions-Commercial Products and Commercial Services, applies to this acquisition.

No telephonic quotes will be processed. All responses must be received no later than 3:00 P.M., Eastern Standard Time on, August 11,2026. Please send any questions and quotes to Aleesha Butler, Contracting Officer at xvw1@cdc.gov.

CONTINUATION OF SF18

ITEM SUPPLIES / SERVICES QTY / UNIT UNIT PRICE EXTENDED PRICE

0001 i2 Analyst's Notebook Concurrent User License

3 Each

0002 i2 Analyst Notebook Concurrent User Annual Subscription & Support

Option Year 1 Items:

1001 i2 Analyst's Notebook Concurrent User License

1002 i2 Analyst Notebook Concurrent User Annual

6 Each

Option Year 2 Items:

2001 i2 Analyst Notebook Concurrent User Annual

Option Year 3 Items:

3001 i2 Analyst Notebook Concurrent User Annual

Option Year 4 Items:

4001 i2 Analyst Notebook Concurrent User Annual

Section C - Description/Specification/Work Statement

Title: Network Analysis Tool

Period of performance:

Base: Award + 12 months and Option Periods: (4) 12-Month

PROCUREMENT POINT OF CONTACT (POC) INFORMATION

COR/POC: Kent Sisk Telephone Number: 770-488-1754 E-mail Address: eqc8@cdc.gov Preferred method of communication: Email

SECTION 1 – BACKGROUND

The Centers for Disease Control and Prevention's (CDC) Public Health Intelligence Office (PHIO) analyzes numerous complex datasets, often under compressed timelines, in direct support of mission-essential functions and senior-level decision-making. These functions include, but are not limited to, supply chain risk management (SCRM) operations, sensitive national security-related matters, and emerging global health issues. PHIO’s mission is to safeguard CDC’s critical infrastructure, mission-essential functions, and sensitive global health research by identifying and mitigating operational vulnerabilities through all-source analysis. The mission is currently constrained by reliance on labor-intensive, manual analytic methods, which reduce the Agency’s ability to efficiently identify and communicate the complex patterns, trends, and linkages required to produce timely, consistent, and actionable analytical products. To address these constraints, the Agency seeks a mature, commercially available visual analytic software capability with demonstrated operational use to replace manual workflows, improve analytic rigor and consistency, and reduce production timelines without increasing operational risk.

SUBSECTION A – DEFINITIONS

N/A

SECTION 2 – PURPOSE/OBJECTIVE

The purpose of this acquisition is to obtain a mature, commercially available visual analytic software capability that enables Agency analysts to efficiently perform mission-critical analysis across complex datasets. The capability shall support integration and visualization of Government-authoritative data sources to improve the clarity, consistency, and timeliness of analytic products.

The objective is to improve analytic efficiency and standardization by replacing labor-intensive manual workflows with a proven visual analytics toolset that supports constrained analytic teams without increasing operational risk. The capability shall enhance analysts’ ability to identify patterns, trends, relationships, and indicators relevant to SCRM, global health operations, and sensitive research activities, while maintaining Government control over all analytic judgments, determinations, and final outputs.

SECTION 3 – SCOPE OF WORK

The Contractor shall provide subscription-based access to a mature, commercially available visual analytics software capability designed to support a range of visual analytic workflows. This action is a brand-name or equivelent acquisition for i2 Analyst’s Notebook. The Government requires i2 Analyst’s Notebook to meet its minimum requirements for a dedicated link analysis and visualization capability installed on Government devices, including native link/relationship charting, structured analytic object management, time-oriented views, and exportable analytic products without custom development or enterprise platform implementation. The solution shall provide data visualization and relationship-analysis features that enable Agency analysts to efficiently structure, visualize, and analyze complex information without reliance on manual chart construction using general office productivity tools.

The solution shall support analyst-driven creation and maintenance of standardized analytical objects (e.g., entities, relationships, events, attributes, and source references), enabling consistent, repeatable, and updateable visual analytic products over time. The solution shall enable relationship-driven, trend-based, and time-oriented analysis (e.g., link analysis, timelines, and other visual analytic views) to reduce manual workflows and improve analytic rigor and consistency.

The solution shall be capable of supporting cross-domain analysis use cases relevant to mission requirements, including SCRM, global health operations, and sensitive research activities. The solution shall support ingestion/import and export of information from common formats used by the Agency and shall enable production of shareable outputs suitable for internal reporting and senior-level decision support.

The scope of work includes system access, software licensing entitlements, general maintenance, and standard commercial support services, during the period of performance.

SECTION 4 – TASKS TO BE PERFORMED

Task 1: Visual Analytics Software Access and Core Capability The Contractor shall provide subscription-based access to a commercially available visual analytics software capability for authorized Government users.

a. Provide access consistent with the Government’s operating constraints, using standard commercial methods and without requiring custom development by the Government.

b. Provide the core visual analytics functions necessary to replace manual workflows, including creation and maintenance of analytical objects (e.g., entities, relationships, events, and attributes) and production of visual analytic products (e.g., link/relationship charts, timelines, and other views.).

c. Provide the ability to import and export information in common formats used by the Government and support generation of shareable outputs suitable for internal reporting and senior-level decision support.

d. Provide role-based access controls and account administration capabilities appropriate for Government operational use.

e. Maintain software availability and performance consistent with standard commercial enterprise service levels and the applicable support tier.

Task 2: Licensing Administration and Sustainment (Maintenance/Support) The Contractor shall provide licensing entitlements and sustainment for the software capability throughout the period of performance.

a. Provide and manage licensing entitlements for users.

b. Provide OEM-backed maintenance/support at the required tier, including access to updates/patches made generally available to commercial customers during the period of performance.

c. Ensure updates/patches do not degrade core functionality required by the Government, including creation, maintenance, and export of visual analytic products.

d. Provide continuity of service and licensing entitlement throughout the period of performance, including support for license reassignment or administrative changes approved by the Contracting Officer.

Task 3: Implementation Support and Customer Support

The Contractor shall provide standard commercial customer support and implementation assistance to enable effective Government use of the software capability.

a. Respond to Government inquiries regarding configuration, functionality, licensing, and troubleshooting.

b. Provide onboarding support to transition analysts from manual workflows to operational use of the software capability after the award.

SECTION 5 – GOVERNMENT FURNISHED PROPERTY

No Government-Furnished Property (GFP) will be provided.

SECTION 6 – PLACE OF PERFORMANCE AND CONTRACT SUPPORT HOURS

SUBSECTION A – PLACE OF PERFORMANCE

Government personnel will access the software with approved GFP from various Government locations.

No onsite contractor presence at Government facilities is required.

SUBSECTION B – CONTRACT SUPPORT HOURS

Contractor support shall be provided during standard commercial business hours, consistent with the Contractor’s published support policies, except as otherwise specified in the contract. No routine night or weekend support is required.

SECTION 7 – TRAVEL

No travel is required under this contract.

SECTION 8 – DELIVERABLES/REPORTING SCHEDULE

This contract is for a commercial visual analytics software subscription. Deliverables are limited to those necessary to demonstrate contract performance (i.e., provision of access, licensing entitlements, and support access information). No recurring technical or financial reports are required.

Task Deliverable Quantity/Format Due Date Deliver To Task 1 Visual

Analytics Software Access

Subscription access (electronic access credentials/entitlement)

At start of performance

COR

SUBSECTION A – PERFORMANCE MATRIX

PERFORMANCE

OBJECTIVE

STANDARD PERFORMANCE

THRESHOLD

ACCEPTABLE

QUALITY

LEVELS (AQLs)

METHOD OF

SURVEILLANCE

PRS#1 – Software Availability and User

The Contractor shall provide access to the

≥ 99% availability during the period of

Periodic Inspection

PERFORMANCE

OBJECTIVE

STANDARD PERFORMANCE

THRESHOLD

ACCEPTABLE

QUALITY

LEVELS (AQLs)

METHOD OF

SURVEILLANCE

Access (PWS Section 4, Task 1) commercial visual analytics software capability for authorized Government users in accordance with standard commercial enterprise service levels and the contracted support tier.

performance [excluding scheduled maintenance consistent with the Contractor’s published maintenance windows].

PRS#2 – Customer Support Responsiveness (PWS Section 4, Task 3)

The Contractor shall provide standard commercial customer support to address access, licensing, configuration, and usage issues in accordance with the contracted support tier.

≥ 95% of support requests acknowledged within the Contractor’s published support timeframes for the contracted support tier.

Customer Feedback

SECTION 9 – REFERENCE MATERIALS

No reference materials are required for performance of this contract. All requirements are fully described within this Statement of Work.

SECTION 10 – MINIMUM VENDOR QUALIFICATIONS

The Contractor shall be the provider of a mature, commercially available visual analytics software capability with demonstrated operational use supporting Federal Government or similarly regulated analytical missions involving complex data analysis and production of analytic products under time constraints.

The Contractor shall be the OEM of the proposed software or an OEM-authorized reseller/distributor with documented authorization to provide licensing entitlements and OEM-backed maintenance/support at the required support tier.

The Contractor shall possess the technical infrastructure and operational maturity necessary to provide the software capability and associated support in a production Government environment, including the ability to provision access, administer licenses, and provide updates/patches consistent with the license agreement and support tier.

The Contractor shall demonstrate prior experience providing customer support and implementation/onboarding assistance for the proposed software The Contractor shall provide standard commercial support services, including documented support channels and escalation procedures.

No Government-specific professional licenses or accreditations are required beyond those customarily associated with the provision and support of commercial software subscriptions, unless otherwise specified by the Contracting Officer.

SECTION 11 – ADDITIONAL REQUIREMENTS

Information Security and Privacy

This acquisition is subject to information security review and clearance by the Information System Security Officer (ISSO). All applicable information security and privacy requirements will be addressed through the ISSO clearance process.

Section 508 Compliance

Section 508 accessibility requirements apply to this acquisition. A Section 508 Accessibility Clearance Request has been submitted and is under review. Approved accessibility language will be incorporated prior to contract award.

Part A – Provision

Reference HHSAR 352.239-73[8] Electronic Information and [Communication] Technology Accessibility Notice.

(Deviation)

(a) Any offeror responding to this solicitation must comply with established HHS Information and Communication Technology (ICT) accessibility standards. Information about Section 508 is available at https://www.hhs.gov/web/section-508/index.html.

(b) The Section 508 accessibility standards applicable to this solicitation are stated in the clause at 352.239-79 Information and Communication Technology Accessibility. In order to facilitate the Government’s determination whether proposed ICT supplies, products, platforms, information, and documentation meet applicable Section 508 accessibility standards, offerors must submit an appropriate HHS Section 508 Accessibility Conformance Checklist (see https://www.hhs.gov/web/section- 508/accessibility-checklists/index.html) or an Accessibility Conformance Report (ACR) (based on the Voluntary Product Accessibility Template (VPAT) see https://www.itic.org/policy/accessibility/vpat), in accordance with the completion instructions. The purpose of the checklists and conformance reports are to assist HHS acquisition and program officials in determining whether proposed ICT supplies, products, platforms, information, and documentation conform to applicable Section 508 accessibility standards.

Checklists and ACRs evaluate—in detail—whether the ICT conforms to specific Section 508 accessibility standards and identifies remediation efforts needed to address conformance issues.

(c) If an offeror claims its supplies or services meet applicable Section 508 accessibility standards, and it is later determined by the Government, i.e., after award of a contract or order, that supplies, products, platforms, information, documentation, or services support delivered do not conform to the described accessibility standards, remediation of the supplies, products, platforms, information, documentation, or services support to the level of conformance specified in the contract will be the responsibility of the Contractor at its expense.

(d) In order to facilitate the Government's determination whether proposed ICT supplies meet applicable Section 508 accessibility standards, offerors must submit an Accessibility Conformance Report, in https://www.hhs.gov/web/section-508/index.html https://www.hhs.gov/web/section-508/accessibility-checklists/index.html https://www.hhs.gov/web/section-508/accessibility-checklists/index.html https://www.itic.org/policy/accessibility/vpat accordance with its completion instructions and tailored to the requirements in the solicitation. The purpose of the Report is to assist HHS acquisition and program officials in determining whether proposed ICT supplies conform to applicable Section 508 accessibility standards. The template allows offerors or developers to self-evaluate their supplies and document, in detail, whether they conform to a specific Section 508 accessibility standard, and any underway remediation efforts addressing conformance issues.

Instructions for preparing the Template are available at https://www.section508.gov/.

(e) Additionally, offerors must provide enough information to assist the Government in determining that the ICT services conform to Section 508 accessibility standards, including any underway remediation efforts addressing conformance issues.

(f) Respondents to this solicitation must identify any inability to conform to Section 508 requirements. If an offeror claims its supplies or services meet applicable Section 508 accessibility standards, and it is later determined by the Government, i.e., after award of a contract or order, that supplies or services delivered do not conform to the described accessibility standards, remediation of the supplies or services to the level of conformance specified in the contract will be the responsibility of the Contractor at its expense.

(g) Items delivered as electronic content must be accessible to HHS acceptance criteria. Checklist for various formats are available at http://508.hhs.gov/. Materials, other than items incidental to contract management, that are final items for delivery should be accompanied by the appropriate checklist, except upon approval of the Contracting Officer or Contracting Officer’s Representative.

Part B - Clause

HHSAR 352.239-74[9] Electronic, Information, and Communication Technology Accessibility.

(Deviation)

(a) Pursuant to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d), as amended by the Workforce Investment Act of 1998, all information and communication technology (ICT) supplies, products, platforms, information, documentation, and services, or support developed, acquired, maintained or delivered under this contract or order must comply with the Revised 508 Standards, which are located at 36 C.F.R. 1194.1 and Appendices A, B, and C, and are available at https://www.access-board.gov/ict/. Information about Section 508 is available at https://www.hhs.gov/web/section- 508/index.html.

(b) Additional Section 508 accessibility standards applicable to this contract or order are identified as follows:

205 WCAG 2.0 Level A & AA Success Criteria 302 Functional Performance Criteria 502 Inoperability with Assistive Technology 503 Applications 504 Authoring Tools 602 Support Documentation 603 Support Services

If it is determined by the Government that ICT supplies, products, platforms, information, documentation, and services support provided by the Contractor do not conform to the described accessibility standards in the contract, remediation of the supplies, products, platforms, information, documentation, or services https://www.section508.gov/ https://www.access-board.gov/ict/ https://www.access-board.gov/ict/ https://www.hhs.gov/web/section-508/index.html support to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(c) In the event of a modification(s) to this contract or order, which adds new ICT supplies or services or revises the type of, or specifications for, supplies, products, platforms, information, documentation, or services support, the Contracting Officer shall require that the Contractor submit a completed HHS Section 508 Accessibility Conformance Checklist (see https://www.hhs.gov/web/section- 508/accessibility-checklists/index.html) or an Accessibility Conformance Report (ACR) (based on the Voluntary Product Accessibility Template (VPAT) see https://www.itic.org/policy/accessibility/vpat), and any other additional information necessary to assist the Government in determining that the ICT supplies or services conform to Section 508 accessibility standards. If it is determined by the Government that ICT supplies, products, platforms, information, documentation, and services support provided by the Contractor do not conform to the described accessibility standards in the contract, remediation of the supplies, products, platforms, information, documentation, or services support to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(d) If this is an Indefinite-Delivery type contract, a Blanket Purchase Agreement or a Basic Ordering Agreement, the task/delivery order requests that include ICT supplies, products, platforms, information, documentation, or services support will define the specifications and accessibility standards for the order.

In those cases, the Contractor shall be required to provide a completed HHS Section 508 Accessibility Conformance Checklist (see https://www.hhs.gov/web/section-508/accessibility-checklists/index.html) or an ACR (based on the VPAT see https://www.itic.org/policy/accessibility/vpat), and any other additional information necessary to assist the Government in determining that the ICT supplies, products, platforms, information, documentation, or services support conform to Section 508 accessibility standards. If it is determined by the Government that ICT supplies and services provided by the Contractor do not conform to the described accessibility standards in the provided documentation, remediation of the supplies, products, platforms, information, documentation, or services support to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(e) The contractor shall identify to the Contracting Officer any perceived exception or exemption to Section 508 requirements for review by the agency Section 508 Program.

Printing No printing requirements apply to this acquisition.

https://www.hhs.gov/web/section-508/accessibility-checklists/index.html https://www.hhs.gov/web/section-508/accessibility-checklists/index.html https://www.itic.org/policy/accessibility/vpat

FAR SOURCE TITLE AND DATE

52.203-17 Contractor Employee Whistleblower Rights (Nov 2023) 52.203-19 Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (Jan

2017) 52.204-13 System for Award Management Maintenance (Nov 2025) 52.204-19 Incorporation by Reference of Representations and Certifications (DEC 2014) 52.209-6 Protecting the Government's Interest When Subcontracting With Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded (Nov 2025) 52.209-10 Prohibition on Contracting with Inverted Domestic Corporations (Nov 2025) 52.212-4 Contract Terms and Conditions—Commercial Products and Commercial Services

(DEVIATION) (RFO APR 2026)

52.222-3 Convict Labor (DEVIATION) (RFO APRIL 2026) 52.222-19 Child Labor-Cooperation with Authorities and Remedies(DEVIATION) (RFO APRIL 2026) 52.222-36 Equal Opportunity for Workers with Disabilities (Nov 2025) 52.222-50 Combating Trafficking in Persons (DEVIATION) (RFO APRIL 2026)

52.222.53 Exemption from Application of the Service Contract Labor Standards to Contracts for Certain

Services-Requirements (DEVIATION)( RFO APRIL 2026) 52.222-90 Addressing DEI Discrimination by Federal Contractors (DEVIATION) (RFO APRIL 2026) 52.223-23 Sustainable Products and Services (DEVIATION)(FEB 2025)

52.225-3 Buy American-Free Trade Agreements-Israeli Trade Act (DEVIATION DATE)(RFO APRIL 2026)

52.226-8 Encouraging Contractor Policies to Ban Text Messaging While Driving (MAY 2024)

52.232-1 Payments (APR 1984)

52.232-33 Payment by Electronic Funds Transfer-System for Award Management (Oct 2018) 52.232-39 Unenforceability of Unauthorized Obligations (Jun 2013) 52.232-40 Providing Accelerated Payments to Small Business Subcontractors (Mar 2023) 52.233-3 Protest after Award (DEVIATION) (RFO APRIL 2026) 52.233-4 Applicable Law for Breach of Contract Claim (Nov 2025)

FAR clauses incorporated in full text:

52.217-8 Option to Extend Services (Nov 1999)

The Government may require continued performance of any services within the limits and at the rates specified in the contract. These rates may be adjusted only as a result of revisions to prevailing labor rates provided by the Secretary of Labor. The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months. The Contracting Officer may exercise the option by written notice to the Contractor within 1 day of the contract expiration date.

(End of clause)

HHSAR 352.204-72 Records management (FEB 2024) (DEVIATION)

(a) Applicability. This clause applies to contracts that include Federal records, as defined in paragraph (b).

(b) Definition. As used in this clause—

Federal record means all recorded information, regardless of form or characteristics, made or received by a Federal agency under Federal law or in connection with the transaction of public business and preserved or appropriate for preservation by that agency or its legitimate successor as evidence of the organization, functions, policies, decisions, procedures, operations, or other activities of the United States Government or because of the informational value of data in them. See 44 U.S.C. 3301.

(1) The term Federal record—

• Includes HHS records;

(ii) Does not include personal materials;

(iii)Applies to records created, received, or maintained by Contractors pursuant to their contract;

And

(iv) May include deliverables and documentation associated with deliverables.

(a) Recorded information means all traditional forms of records, regardless of physical form or characteristics, including information created, manipulated, communicated, or stored in digital or electronic form. (See 44 U.S.C. 3301.)

(b) Personal materials means documentary materials belonging to an individual that are not used to conduct agency business. Personal files are excluded from the definition of Federal records and are not owned by the Government. (See 36 CFR 1220.18.)

(c) Requirements.

(2) The Contractor shall comply with all applicable records management laws and regulations, as well as National Archives and Records Administration (NARA) records policies, including but not limited to the Federal Records Act (44 U.S.C. chapters 21, 29, 31, 33), NARA regulations at 36 CFR chapter XII subchapter B, and those policies associated with the safeguarding of records covered by the Privacy Act of 1974 (5 U.S.C. 552a). These policies include the preservation of all Federal records, regardless of form or characteristics, mode of transmission, or state of completion.

(3) In accordance with 36 CFR 1222.32, all data created for Government use and delivered to, or falling under the legal control of, the Government are Federal records subject to the provisions of 44 U.S.C.

chapters 21, 29, 31, and 33, the Freedom of Information Act (FOIA) (5 U.S.C. 552), and the Privacy Act of 1974 (5 U.S.C. 552a), and must be managed and scheduled for disposition only as permitted by statute or regulation.

(4) In accordance with 36 CFR 1222.32, the Contractor shall maintain all Federal records created for Government use or created in the course of performing the contract and/or delivered to, or under the legal control of the Government and must be managed in accordance with Federal law. Electronic records and associated metadata must be accompanied by sufficient technical documentation to permit understanding and use of the records and data.

(5) The Contractor is responsible for preventing the alienation or unauthorized destruction of Federal records, including all forms of mutilation. Federal records may not be removed from the legal custody of HHS or destroyed except for in accordance with the provisions of the agency records schedules and with the written concurrence of the Contracting Officer. Willful and unlawful destruction, damage or alienation of Federal records is subject to the fines and penalties imposed by 18 U.S.C. 2701. The Contractor shall report to the Contracting Officer any unlawful or accidental removal, defacing, alteration, or destruction of Federal records.

(6) The Contractor shall immediately notify the Contracting Officer upon discovery of any inadvertent or unauthorized disclosures of information, data, documentary materials, records or equipment. Disclosure of non-public information is limited to authorized personnel with a need-to-know as described in the contract. The Contractor shall ensure that appropriate personnel are trained to adhere to these contract requirements, and that applicable, administrative, technical, and physical safeguards are established to ensure the security and confidentiality of information, data, documentary material, Federal records and/or equipment is properly protected. The Contractor shall not remove Federal Records from Government facilities or systems, or facilities or systems operated or maintained on the Government’s behalf, without the express written permission of the Contracting Officer. When information, data, documentary material, Federal records and/or equipment are no longer required, it shall be returned to HHS control or the Contractor must hold it until otherwise directed. Items returned to the Government shall be hand carried, mailed, emailed, or securely electronically transmitted to the Contracting Officer or as otherwise directed by the Contracting Officer. Destruction of Federal records is expressly prohibited unless in accordance with paragraph (c)(4).

(7) The Contractor shall only use Government information technology equipment for purposes specifically authorized by the contract and in accordance with HHS policy.

(10) The Contractor shall not create or maintain any Federal records containing any non-public HHS information that are not specifically authorized by the contract.

(a) The Contractor shall not retain, use, sell, or disseminate copies of any deliverable that contains information covered by the Privacy Act of 1974 or that which is generally protected from public disclosure by an exemption to the Freedom of Information Act.

(b) All Contractor employees assigned to this contract handle Federal records are required to take HHS-provided records management training. The Contractor is responsible for confirming training has been completed according to agency policies, including initial training and any annual or refresher training.

(d) Subcontract flowdown. The Contractor shall incorporate the substance of this clause, its terms and requirements including this paragraph, in all subcontracts under this contract.

(End of clause)

HHSAR 352.232-71 Electronic Submission of Payment Requests (Feb 2022)

(a) Definitions. As used in this clause—

(1) “ Payment request” means a bill, voucher, invoice, or request for contract financing payment with associated supporting documentation. The payment request must comply with the requirements identified in FAR 32.905(b), “Content of Invoices” and the applicable Payment clause included in this contract.

(b) Except as provided in paragraph (c) of this clause, the Contractor shall submit payment requests electronically using the Department of Treasury Invoice Processing Platform (IPP) or successor system. Information regarding IPP, including IPP Customer Support contact information, is available at www.ipp.gov or any successor site.

(c) The Contractor may submit payment requests using other than IPP only when the Contracting Officer authorizes alternate procedures in writing in accordance with HHS procedures.

(d) If alternate payment procedures are authorized, the Contractor shall include a copy of the Contracting Officer's written authorization with each payment request.

(End of Clause)

HHSAR 352.239-79 Information and Communication Technology Accessibility Notice (Feb 2024) (Deviation)

(a) Pursuant to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d), as amended by the Workforce Investment Act of 1998, all information and communication technology (ICT) supplies, products, platforms, information, documentation, and services support developed, HHSAR Conformed Copy Part 352 (eCFR copy date 03/06/2025) Last Updated: 04/28/2025 Status: DEVIATED HHSAR 352-111 Navigate to: HHSAR Part 352 TOC | Notes | Summary of HHSAR CDs | Structure of HHSAR acquired, maintained or delivered under this contract or order must comply with the Revised 508 Standards, which are located at 36 C.F.R. 1194.1 and Appendices A, B, and C, and are available at https://www.access-board.gov/ict/. Information about Section 508 is available at https://www.hhs.gov/web/section-508/index.html.

(b) Additional Section 508 accessibility standards applicable to this contract or order may be identified in the specification, statement of work, or performance work statement. If it is determined by the Government that ICT supplies, products, platforms, information, documentation, and services support provided by the Contractor do not conform to the described accessibility standards in the contract, remediation of the supplies, products, platforms, information, documentation, or services support to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(c) In the event of a modification(s) to this contract or order, which adds new ICT supplies or services or revises the type of, or specifications for, supplies, products, platforms, information, documentation, or services support, the Contracting Officer shall require that the Contractor submit a completed HHS http://www.ipp.gov/

Section 508 Accessibility Conformance Checklist (see https://www.hhs.gov/web/section- 508/accessibility-checklists/index.html) or an Accessibility Conformance Report (ACR) (based on the Voluntary Product Accessibility Template (VPAT) see https://www.itic.org/policy/accessibility/vpat), and any other additional information necessary to assist the Government in determining that the ICT supplies or services conform to Section 508 accessibility standards. If it is determined by the Government that ICT supplies, products, platforms, information, documentation, and services support provided by the Contractor do not conform to the described accessibility standards in the contract, remediation of the supplies, products, platforms, information, documentation, or services support to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(d) If this is an Indefinite-Delivery type contract, a Blanket Purchase Agreement or a Basic Ordering Agreement, the task/delivery order requests that include ICT supplies, products, platforms, information, documentation, or services support will define the specifications and accessibility standards for the order.

In those cases, the Contractor shall be required to provide a completed HHS Section 508 Accessibility Conformance Checklist (see https://www.hhs.gov/web/section-508/accessibility-checklists/index.html) or an ACR (based on the VPAT see https://www.itic.org/policy/accessibility/vpat), and any other additional information necessary to assist the Government in determining that the ICT supplies, products, platforms, information, documentation, or services support conform to Section 508 accessibility standards. If it is determined by the Government that ICT supplies and services provided by the Contractor do not conform to the described accessibility standards in the provided documentation, remediation of the supplies, products, platforms, information, documentation, or services support to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(e) The contractor shall identify to the Contracting Officer any perceived exception or exemption to Section 508 requirements.

(End of clause)

CDCG.02 Contracting Officer’s Representative (COR) (Jul 2017)

Performance of the work hereunder shall be subject to the technical directions of the designated COR for this contract.

As used herein, technical directions are directions to the Contractor which fill in details, suggests possible lines of inquiry, or otherwise completes the general scope of work set forth herein. These technical directions must be within the general scope of work and may not alter the scope of work or cause changes of such a nature as to justify an adjustment in the stated contract price/cost, or any stated limitation thereof.

In the event that the Contractor believes full implementation of any of these directions may exceed the scope of the contract, he or she shall notify the originator of the technical direction and the Contracting Officer, immediately or as soon as possible, in a letter or e-mail separate of any required report(s). No technical direction, nor its fulfillment, shall alter or abrogate the rights and obligations fixed in this contract.

The Government COR is not authorized to change any of the terms and conditions of this contract.

Contract changes shall be made only by the Contracting Officer through properly written modification(s) to the contract.

The Government will provide the Contractor with a copy of the COR delegation memorandum upon request.

CDCG.03 Contracting Officer (Jul 1999)

a. The Contracting Officer is the only individual who can legally commit the Government to the expenditure of public funds. No person other than the Contracting Officer can make any changes to the terms, conditions, general provisions, or other stipulations of this contract.

b. No information, other than that which may be contained in an authorized modification to this contract, duly issued by the Contracting Officer, which may be received from any person employed by the United States Government, or otherwise, shall be considered grounds for deviation from any stipulation of this contract.

CDCG.07 Payment by Electronic Funds Transfer (Jan 2026)

a. The Government shall use electronic funds transfer to the maximum extent possible when making payments under this contract. FAR 52.232-33, Payment by Electronic Funds Transfer –System for Award Management, requires the contractor to designate in writing a financial institution for receipt of electronic funds transfer payments.

b. In the case that EFT information is not within the System of Award Management, FAR 52.232-

34, Payment by Electronic Funds Transfer-Other than System for Award Management, requires mandatory submission of Contractor’s EFT information directly to the office designated in this contract to receive that information (hereafter: “designated office”); see below. The contractor shall submit the EFT information within the form titled “ACH Vendor/Miscellaneous Payment Enrollment Form” to the address indicated below. Note: The form is either attached to this contract (see Section J, List of Attachments) or may be obtained from the CDC Office of Financial Resources at 678-475-4500 or cpbapinv@cdc.gov.

c. In cases where the contractor has previously provided such information, i.e., pursuant to a prior contract/order, and been enrolled in the program, the form is not required unless the designated financial institution has changed.

d. The completed form shall be mailed or sent via facsimile after award, but no later than 15 calendar days before an invoice is submitted, to the following address:

The Centers for Disease Control and Prevention Office of Financial Resources (OFR) P.O. Box 15580 Atlanta, GA 30333

CDCH.10 Artificial Intelligence Compliance and Risk Management Plan (May 2026) The use of Artificial Intelligence (AI), including GenAI, is prohibited without an approved AI Compliance and Risk Management Plan. The contractor is responsible for updating the AI Compliance and Risk Management Plan throughout the life of the contract as changes occur. If a change to AI use, AI functionality, AI model, or deployment configuration is anticipated, the contractor must notify the contracting officer and Contracting Officer’s Representative (COR) immediately and provide a revised plan. The government will issue approval or disapproval before AI can be incorporated. The offeror must identify whether the planned or potential AI use may involve a high-impact AI use case (as defined in defined in Appendix A of OMB-M-25-21) and must provide sufficient descriptive information for the Government to complete any required AI impact or high-impact assessment.

mailto:cpbapinv@cdc.gov

The AI Compliance and Risk Management Plan must:

1. Identify the specific tasks or functions where AI will be used.

2. Explain how logs, audits, or other forms of AI generated data will be stored, used, retained, or deleted.

3. State whether the AI technologies are open-source, proprietary, or any other type.

4. Include applicable model cards or system documentation describing the AI technologies used.

5. Describe how bias in AI models and outputs will be identified, monitored, and mitigated, including the origin, quality, and weighting of data.

6. Explain the AI safeguards in place, including compliance and risk management practices, protections against unauthorized data access, and steps taken to manage bias and reduce risk in alignment with applicable AI policies and directives.

7. Describe internal policies governing AI use, including transparency, accountability, data integrity, accuracy, protection of sensitive or proprietary information, foreseeable risks, and potential social impacts.

8. Explain how the contractor will assess and prevent unfair or disparate impacts, address privacy, civil rights, and civil liberties concerns, and prevent misuse, unauthorized use, or corruption of AI systems.

9. Confirm that the AI solution will not make or support decisions based on unlawful discrimination in violation of federal civil rights laws, including Title VII of the Civil Rights Act, the Americans with Disabilities Act (ADA), and the Age Discrimination in Employment Act (ADEA).

10. Describe how applicable technological or voluntary consensus standards will be incorporated to reduce acquisition and operational risk

11. The plan must describe how Government data, outputs, prompts, logs, and outputs be accessed, used, protected, retained, deleted, and transferred, and identify any proposed limitations on Government rights, access, or reuse.

12. The AI Compliance and Risk Management Plan will be reviewed by the Government and an approval or disapproval issued.

CDCH.14 Records Management Obligations (Jun 2020)

A. Applicability The following applies to all Contractors whose employees create, work with, or otherwise handle Federal records, as defined in Section B, regardless of the medium in which the record exists.

B. Definitions “Federal record” as defined in 44 U.S.C. § 3301, includes all recorded information, regardless of form or characteristics, made or received by a Federal agency under Federal law or in connection with the transaction of public business and preserved or appropriate for preservation by that agency or its legitimate successor as evidence of the organization, functions, policies, decisions, procedures, operations, or other activities of the United States Government or because of the informational value of data in them.

The term Federal record:

1. includes Centers for Disease Control and Prevention (CDC) records.

2. does not include personal materials.

3. applies to records created, received, or maintained by Contractors pursuant to their CDC contract.

4. may include deliverables and documentation associated with deliverables.

C. Requirements

1. Contractor shall comply with all applicable records management laws and regulations, as well as National Archives and Records Administration (NARA) records policies, including but not limited to the Federal Records Act (44 U.S.C. chs. 21, 29, 31, 33), NARA regulations at 36 CFR Chapter XII Subchapter B, and those policies associated with the safeguarding of records covered by the Privacy Act of 1974 (5 U.S.C. 552a). These policies include the preservation of all records, regardless of form or characteristics, mode of transmission, or state of completion.

2. In accordance with 36 CFR 1222.32, all data created for Government use and delivered to, or falling under the legal control of, the Government are Federal records subject to the provisions of 44 U.S.C.

chapters 21, 29, 31, and 33, the Freedom of Information Act (FOIA) (5 U.S.C. 552), as amended, and the Privacy Act of 1974 (5 U.S.C. 552a), as amended and must be managed and scheduled for disposition only as permitted by statute or regulation.

3. In accordance with 36 CFR 1222.32, Contractor shall maintain all records created for Government use or created in the course of performing the contract and/or delivered to, or under the legal control of the Government and must be managed in accordance with Federal law. Electronic records and associated metadata must be accompanied by sufficient technical documentation to permit understanding and use of the records and data.

4. CDC and its contractors are responsible for preventing the alienation or unauthorized destruction of records, including all forms of mutilation. Records may not be removed from the legal custody of CDC or destroyed except for in accordance with the provisions of the agency records schedules and with the written concurrence of the Head of the Contracting Activity. Willful and unlawful destruction, damage or alienation of Federal records is subject to the fines and penalties imposed by 18 U.S.C. 2701. In the event of any unlawful or accidental removal, defacing, alteration, or destruction of records, Contractor must report to the Contracting Officer and the Contracting Officer’s Representative. The agency must report promptly to NARA in accordance with 36 CFR 1230.

5. The Contractor shall immediately notify the appropriate Contracting Officer upon discovery of any inadvertent or unauthorized disclosures of information, data, documentary materials, records or equipment. Disclosure of non-public information is limited to authorized personnel with a need-to-know as described in the contract. The Contractor shall ensure that the appropriate personnel, administrative, technical, and physical safeguards are established to ensure the security and confidentiality of this information, data, documentary material, records and/or equipment is properly protected. The Contractor shall not remove material from Government facilities or systems, or facilities or systems operated or maintained on the Government’s behalf, without the express written permission of the Head of the Contracting Activity. When information, data, documentary material, records and/or equipment is no longer required, it shall be returned to CDC control or the Contractor must hold it until otherwise directed. Items returned to the Government shall be hand carried, mailed, emailed, or securely electronically transmitted to the Contracting Officer or address prescribed in the contract. Destruction of records is EXPRESSLY PROHIBITED unless in accordance with Paragraph (4).

6. The Contractor is required to obtain the Contracting Officer's approval prior to engaging in any contractual relationship (sub-contractor) in support of…