Attachment 2- DevExpress Specifications.pdf

US Department of Agriculture (USDA)

Specifications

Dev Express Licenses

Project Title Dev Express Licenses

General Information

1.0 Background and Purpose

The National Agricultural Statistics Service requires Dev Express licenses as Standardizing on DevExpress provides a strong foundation for building modern, consistent, and maintainable web applications across the agency. By using a unified set of enterprise-grade components, we ensure that every application shares the same visual language, interaction patterns, and behavior, which significantly reduces the learning curve for users and allows them to move between systems with ease. This consistency not only improves usability but also strengthens accessibility and overall user satisfaction. For developers, DevExpress offers robust, feature-rich controls that eliminate the need for custom UI development, reducing complexity, minimizing defects, and accelerating delivery. Centralized theming and styling make it possible to update the look and feel across all applications from a single point, simplifying maintenance and ensuring long-term sustainability. Because DevExpress provides regular updates, security patches, and alignment with the latest .NET and Blazor standards, the agency benefits from reduced vulnerabilities and a more secure application ecosystem.

Overall, adopting DevExpress and standardizing the UI enables faster development, easier maintenance, improved security, and a more intuitive experience for users, supporting both operational efficiency and long-term modernization goals.

2.0 Definitions

AoA Analysis of Alternatives ASE App Services Environment CI/CD Continuous integration and continuous delivery or deployment.

CIPEA

Confidential Information Protection and Statistical Efficiency Act, which is a law that protects the confidentiality of information gathered by federal agencies for statistical purposes.

COR Contracting Officer's Representative DMS Database Migration Service FAR Federal Acquisition Regulation FedRAMP Federal Risk and Authorization Management Program FIPS Federal Information Processing Standards FIPS PUB Federal Information Processing Standards Publication FISMA Federal Information Security Modernization Act GenAI Generative artificial intelligence GPT Generative Pre-trained Transformer HSPD-12 Homeland Security Presidential Directive-12 IaaS Infrastructure as a Service ICT Information and Communication Technology ISA Information Security Awareness ITI Information Technology Industry Council LAMP Linux, Apache, MySQL, and PHP ML Machine Learning NASS National Agricultural Statistics Service NEAC NASS Enterprise Architecture Council NICE NASS Integrated Cloud Environment NIST National Institute of Standards and Technology NLP Natural Language Processing

OMB Office of Management and Budget PaaS Platform-as-a-Service PAM Project Administration Manual PMBOK Project Management Body of Knowledge PMI Project Management Institute PMO Project Management Office RACI Responsible, Accountable, Consulted, and Informed REE Research, Education, and Economics RFP Request For Proposal ROB Rules of Behavior SEO Search Engine Optimization SOP Standard Operating Procedures UI User Interface USDA United States Department of Agriculture UX User Experience VPAT Voluntary Product Accessibility Template WYSIWYG What You See Is What You Get

Contractor Requirements

3.0 Technical Requirements / Tasks

The software must be capable of sampling geospatial datasets with both independent and dependent variables to develop inputs for classifier models that are used for both continuous and thematic land cover modeling. The software must be able to filter overlapping areas identified within the independent training datasets. Additional software tools must provide an interface for weighting classes while establishing a minimum mapping unit, an accuracy assessment modeler, and percent area modeler. Smart Eliminate function from within the NLCD Toolkit must work in the new AVD environment for resampling of CDL mapping products. These tools must be integrated with external commercial image classifier software (Rulequest Research Inc.) that provide the foundation for CDL modeling and production to the analyst.

4.0 Deliverable / Schedule

Key Deliverables

The software must be capable of providing regular updates, security patches, and alignment with the latest .NET and Blazor standards, the agency benefits from reduced vulnerabilities and a more secure application ecosystem. Overall, adopting DevExpress and standardizing the UI enables faster development, easier maintenance, improved security, and a more intuitive experience for users, supporting both operational efficiency and long-term modernization goals.

CS-DXA-252-610R 7 DevExpress ASP.NET and Blazor 25.2 (with DevExtreme Complete) -

Subscription Renewals - 1 Developer License (Min Qty: 6) Sources P3467507 / P3467507 / P3529110

CS-DXD-252-1R 1 DevExpress Office File API 25.2 - 1 Developer License Subscription Renewal

- Includes 12 months Subscription for minor and major updates

CS-DXF-252-25R 3 DevExpress WinForms 25.2 - 1 Developer License Subscription Renewal (Min Qty: 2) - Includes 12 months Subscription for minor and major updates

CS-DXA-252-11R 11 DevExpress ASP.NET and Blazor 25.2 (with DevExtreme Complete) - 1 Developer License Subscription Renewal (Min Qty: 11) - Includes 12 months Subscription for minor and major updates

CS-DXA-252-25 9 DevExpress ASP.NET and Blazor 25.2 (with DevExtreme Complete) - New Perpetual Licenses - 1 Developer License (Min Qty: 2)

5.0 Government Furnished

N/A

6.0 Travel

Travel costs is not expected nor reimbursed. Any and all travel cost associated with performing the duties of this task order will be borne by the Contractor.

7.0 Contractor’s Key Personnel

N/A

8.0 Security Requirements

N/A

10.0 Data Rights

• General Rights and Obligations Regarding Data - The contractor shall ensure that all data produced, furnished, acquired, or used in meeting the requirements of this contract, including but not limited to reports, source code, documentation, images, videos, and meeting notes, is the property of the United States Government (the Government). The contractor shall comply with all applicable data rights and security regulations, including those pertaining to the handling, use, storage, and dissemination of such data.

• Use of Government-Provided Equipment and Networks - The contractor shall ensure that all work performed under this contract will be executed solely using Government-provided equipment. The contractor shall not use any personal or contractor-owned devices for the purpose of executing, storing, or processing contract-related work.

• Prohibition on Copying or Storing Data Outside Government Systems - The contractor shall ensure that no data or code generated, received, or acquired during the performance of this contract may be copied, transferred, or stored on any personal or contractor-owned device, system, or network. All data, code, and documentation must be stored exclusively on Government-provided equipment and infrastructure. This prohibition includes all forms of data, including written notes, electronic files, source code, and any form of media (e.g., screenshots, videos, audio recordings).

• Storage and Management of Meeting Materials - All materials captured or recorded during meetings, including but not limited to meeting notes, screenshots, videos, audio recordings, and any other forms of documentation, shall be stored exclusively on Government-provided equipment and within Government-controlled systems. The contractor shall ensure that no meeting materials are stored, shared, or transmitted via personal or contractor-owned devices, networks, or systems.

• Access to Government Systems and Code Repositories - The contractor’s access to the Government's code repository, network, or any other Government-provided systems is strictly limited to the United States. Access from any location outside the U.S. is prohibited unless explicitly authorized in writing by the Government.

• Restrictions on Data Disclosure - The contractor shall not disclose, share, or allow access to Government data, code, or systems to any third party, subcontractor, or other personnel without explicit prior written approval from the Government. This includes all data captured in meetings, as well as any materials related to the code repository or other Government-owned systems.

• Security and Compliance - The contractor shall adhere to all security protocols and data handling requirements set forth by the Government, including compliance with applicable laws, regulations, and policies regarding data protection, privacy, CIPSEA, and security. The contractor shall implement and maintain appropriate safeguards to ensure that all data produced, acquired, or used under this contract is secure from unauthorized access, modification, or disclosure.

• Return and Disposal of Government Equipment & Materials- Upon completion of the contract or upon request by the Government, the contractor shall immediately return government provided equipment, data, code, and materials.

• Bypassing sleep or power-saving features - The use of technology or hardware to keep government-furnished equipment awake is strictly prohibited. Such practices, which may involve bypassing sleep mode or power-saving features, pose significant security risks by potentially leaving devices unattended and vulnerable to unauthorized access. Agency policies are in place to ensure that all equipment operates in compliance with strict security protocols, including automatic power management features designed to protect sensitive data. Allowing devices to remain active unnecessarily could compromise these protocols, undermine monitoring systems, and violate both internal and external governance standards. Any attempt to use unauthorized technology or hardware for this purpose is a direct violation of agency policies and may result in disciplinary action.

11.0 Confidentiality Certification and Nondisclosure Agreement N/A

12.0 Section 508 - Electronic and Information Technology Standards This contract vehicle is subject to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 749d) as amended by the Workforce Investment Act of 1998 (P.L. 105-220). The Revised Section 508 Standards, which consist of 508 Chapters 1 and 2 (Appendix A), along with Chapters 3 through 7 (Appendix C), contain scoping and technical requirements for information and communication technology (ICT) to ensure accessibility and usability by individuals with disabilities. Compliance with these standards is mandatory for Federal agencies subject to Section 508 of the Rehabilitation Act of 1973, as amended (29 U.S.C. 794d).

Each ICT product or service furnished under this contract shall comply with the Revised Section 508 ICT Accessibility Standards at a minimum, as specified in the contract. If any furnished product or service is determined to be noncompliant, the Contracting Officer will notify the Contractor in writing. The Contractor shall, without charge to the Government, remediate or replace the noncompliant products or services within a specified timeframe as determined by the Government in writing. If such remediation or replacement is not completed within the time specified, the Government shall have the following recourses:

1. Cancellation of the contract, delivery, task order, purchase, or line item without termination liabilities; or

2. In the case of custom ICT being developed by a contractor for the Government, the

Government shall have the right to have any necessary changes made or repairs performed by itself or by another firm for the noncompliant ICT, with the contractor liable for reimbursement to the Government for any expenses incurred thereby.

The contractor must ensure all noncompliant ICT products and services are provided pursuant to extensive market research and exhibit the highest level of compliance while satisfying the contract requirements.

For every ICT product or service accepted under this contract by the Government that does not comply with the Revised Section 508 Accessibility Standards, the contractor shall, at the discretion of the Government, remediate or upgrade the item with a compliant equivalent product or service, if commercially available and cost neutral, on either a contract specified refresh cycle for the product or service, or on a contract effective option/renewal date, whichever shall occur first.

Section 508 Compliance Vendors, contractors, and their respective ICT products and services shall comply with the following standards, policies, and procedures. In the event of conflicts between the referenced documents and this contract vehicle, the contract vehicle shall take precedence.

1. Revised Section 508 ICT Accessibility Standards

2. Section 508 of the Rehabilitation Act as amended (29 U.S.C. 794d)

3. Federal Acquisition Regulation (FAR) Subpart 39.2 https://www.access-board.gov/ict/#about-the-ict-accessibility-standards https://www.access-board.gov/law/ra.html#text-of-section-508-of-the-rehabilitation-act-of-1973-as-amended-29-usc-794d https://www.acquisition.gov/sites/default/files/current/far/html/Subpart%2039_2.html

4. USDA Section 508 Departmental Regulation

Additionally, all contract deliverables are subject to these standards.

All ICT products and services, regardless of format, must conform to the applicable Section 508 standards to allow Federal employees and members of the public with disabilities equivalent access to and use of information and data provided to those without disabilities.

All contractors, sub-contractors, and consultants are responsible for preparing or posting content must comply with the applicable Section 508 accessibility standards and, where applicable, those set forth in the referenced policy or standards document. Remediation of any noncompliant ICT or materials as set forth in this contract vehicle shall be the responsibility of the contractor, sub-contractor, or consultant.

According to the Access Board’s Section 508 Scoping Requirements The following Section 508 provisions apply to the products and/or services identified in this contract vehicle:

• C202 Functional Performance Criteria: Where the requirements in Chapters 4 and 5 do not address one or more functions of telecommunications or customer premises equipment, the functions not addressed shall conform to the Functional Performance Criteria specified in Chapter 3.

• C203 Electronic Content: Electronic content that is integral to the use of telecommunications or customer premises equipment shall conform to the most current Web Content Accessibility Guidelines (WCAG) Level A and Level AA Success Criteria and Conformance Requirements.

• C204 Hardware: Where components of telecommunications equipment and customer premises equipment are hardware, and transmit information or have a user interface, those components shall conform to applicable requirements in Chapter 4.

• C205 Software: Where software is integral to the use of telecommunications functions of telecommunications equipment or customer premises equipment and has a user interface, such software shall conform to C205 and the applicable requirements in Chapter 5.

WCAG Conformance: User interface components, as well as the content of platforms and applications shall conform to the most current WCAG Level A and Level AA Success Criteria and Conformance Requirements.

• C206 Support Documentation and Services: Where support documentation and services and provided for telecommunications equipment and customer premises equipment, manufacturers shall ensure that such documentation and services conform to Chapter 6 and are made available upon request at no additional charge.

In addition, vendors and contractors shall comply with the standards, policies, and procedures below for all ICT pursuant to this contract:

• For Custom ICT Development Services, the vendor or contractor shall ensure the ICT fully conforms to the applicable Revised Section 508 standards prior to delivery and before final acceptance.

• For Installation, Configuration, and Integration Services, the vendor or contractor shall not install, configure, or integrate the equipment and software in a way that reduces the level of conformance with the applicable Revised Section 508 standards.

• For Maintenance, Upgrades, and Replacements, the vendor or contractor shall ensure maintenance upgrades, substitutions, and replacements do not reduce the original level of conformance with the applicable Revised Section 508 standards at the time of the contract award.

• Service Personnel are ensured by the vendor or contractor to possess the knowledge, skills, and ability necessary to address the applicable Revised Section 508 standards and shall provide http://www.ocio.usda.gov/document/departmental-regulation-4030-001 https://www.access-board.gov/ict/#508-chapter-2-scoping-requirements https://www.access-board.gov/ict/#C202-functional-performance-criteria https://www.access-board.gov/ict/#C203-electronic-content https://www.access-board.gov/ict/#C204-hardware https://www.access-board.gov/ict/#C205-software https://www.access-board.gov/ict/#C206-documentation-services supporting documentation upon request.

• When providing Hosting Services, the vendor or contractor shall not reduce the existing level of conformance of the electronic content with the applicable Revised Section 508 standards.

• When purchasing ICT where 1) Section 508 validation is not possible prior to award, 2) the ICT will be changed after the award, or 3) ICT will be hosted in a third-party environment, the vendor or contractor shall test and validate the ICT solution for conformance to the Revised Section 508 standards, in accordance with the required testing methods as defined by the agency.

• The vendor or contractor shall document and maintain information regarding the measures taken to ensure compliance with the applicable requirements. This documentation includes but is not limited to testing records, product demonstrations, and reported defects by end users and testers.

• Prior to acceptance, the vendor or contractor shall provide an Accessibility Conformance Report (ACR) for each ICT item that is developed, updated, and/or configured for the agency, and when product substitutions are offered. The ACR should be based on the latest version of the Voluntary Product Accessibility Template (VPAT) provided by the Information Technology Industry Council (ITI).

To be considered for award, an ACR must be submitted for each ICT item, and must be completed according to the instructions provided by the ITI.

Note: A supplemental ACR may be required if the agency has additional or stricter accessibility requirements than what is outlined in the VPAT.

• Prior to acceptance, the agency reserves the right to require a full working demonstration of the completed ICT item to demonstrate conformance to the agency’s accessibility requirements in addition to independent testing to validate.

• In the case of non-compliance where the vendor or contractor claims its products and/or services satisfy the applicable Revised Section 508 standards specified in the contract vehicle, the contracting officer will promptly inform the vendor or contractor in writing of the non-compliance. The vendor or contractor shall, at no cost to the agency, repair or replace the non-compliant products or services within the period specified by the contracting officer.

All Information and Communications Technology (ICT) subject to the Revised Section 508 standards will be evaluated for Section 508 conformance and usability. The test must be administered by a Federal Section 508 Testing Center. All maintenance for ICT that requires upgrades, modifications, installations, repairs, and purchases shall adhere to the Revised Section 508 standards.

13.0 Performance Requirement Measures

• Systems Development & Modernization: Development and Modernization of mission-critical business functions.

• Maintenance & Operational Efficiency: Maintenance, Improved system performance and scalability of mission-critical applications.

• User Satisfaction: Positive feedback from agency stakeholders on the effectiveness of cloud-native applications.

• Compliance: Full compliance with security standards, regulatory requirements, and data privacy protocols.

• Knowledge Transfer: Successful knowledge transfer to agency staff, enabling self-sufficiency in managing the

AI models and cloud-native applications.

https://www.section508.gov/sell/vpat https://www.section508.gov/sell/vpat http://www.itic.org/policy/accessibility