EAMS SSIA 2_Redacted.pdf

Sole Source (Including Brand Name) Justification - Simplified Procedures for Certain Commercial Items

CONTROLLED UNCLASSIFIED INFORMATION

March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 2 of 8March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 2 of 8

Sole Source (Including Brand Name) Justification - Simplified Procedures for Certain Commercial Items

March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 3 of 8March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 3 of 8

Sole Source (Including Brand Name) Justification - Simplified Procedures for Certain Commercial Items

March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 4 of 8March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 4 of 8

The CLIN structure will not include separately priced CLINs for intellectual property (IP), IP rights and data rights.

Air Force Manpower, Personnel & Services, Plans and Integration (AF/A1X), Digital Transformation Activity (A1/DTA) and A3 Operations Digital Enterprise Division (AF/A3DX) has a Memorandum of Agreement (MOA) with SalesForce Software Licensing & Professional Support to establish a HAF-wide Enterprise Agreement (ELA). AF/A3DX is responsible for all associated costs of their licensing and will submit funding via Form-9, directly to the contracting authority. Incremental funding shall only be accepted if approved by the Master Aggregator (Carahsoft) and the AFDW/PK Contracting Officer. (MOA paragraph 7.2 AF/A3DX)

Carahsoft awarded a new DOD Enterprise Software Initiatives to expand access to technology solutions. The agreement allows Carahsoft to provide Salesforce licenses and other software solutions to DoD agencies. Salesforce's Government Cloud, which is FedRAMP-authorized, is designated to meet the specific needs of government agencies. Through General Services Administration (GSA) schedule contracts, Carahsoft offers Salesforce licenses, which also allow for streamlined procurement of end-to-end Salesforce solutions. For continuation of services, FedRAMP-authorized, and ATO is required to continue operations.

As stated in Section III, the Government requires access to a DoD IL4 compliant airlift scheduling management cloud application with ATO. The airlift scheduling management cloud application must encompass Application Data Aggregation with secure data management, managed by either Air Force Cloud One or the AWS Government Cloud to align with the stringent cybersecurity standards required by the DOD in addition to the application functionality, and Application Impact Level 4 (IPL) compliance.

Tripplanning.biz met all of these requirements as follows:

Application Data Aggregation: Application meets all of the data aggregation requirements.

Application Functionality: Application meets all of the functionality requirements (listed in Section F of the MRR).

Application Impact Level 4 (IL4) Compliance: Tripplanning.biz meets this requirement. This application is hosted on the Salesforce platform which meets FedRAMP certification requirements (See Section VI) and is native to the Salesforce platform.

In addition to meeting the above requirements, Tripplanning.Biz is an innovative integrated and comprehensive solution that simplifies internal workflow and standardizes and automates the entire

Sole Source (Including Brand Name) Justification - Simplified Procedures for Certain Commercial Items

March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 5 of 8March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 5 of 8 trip planning process from scheduling and dispatching to trip planning, to payments, and to collecting invoices for corporate flight departments. Traditionally, lack of such self-serve tools has forced flight departments to either outsource international trip planning to external service providers or manage complex logistics in-house with checklists, spreadsheets, emails and paper folders. Tripplanning.Biz is the first in the industry to address this problem and has built a service that integrates scheduling and trip planning (with an option to integrate with your flight planning service) which enables flight departments to efficiently manage this complex workflow in-house and eliminate repetitive and laborious tasks that are prone to human errors. The Tripplanning.Biz application is built on SalesForce.com platform and is 100% native to Salesforce. Tripplanning.Biz relies on Salesforce.com's Government Cloud Plus to provide the DoD IL4 cybersecurity framework. Each customer gets its own dedicated organization hosted on Salesforce.com's cloud infrastructure, with its own instance of Tripplanning.Biz application installed in that organization. Individual customer's data resides inside its own organization. In this case, it will be hosted in the Government Cloud Plus. The mobile app is built on iOS and Android platforms and is independent of the main application hosted on Salesforce.com. However, it requires the same authentication process that Salesforce requires for the main application.

CARAHSOFT is a prominent Master Government Aggregator and distributor for leading IT manufacturers, that play a crucial role in supporting the DoD with technology solutions. As TRIPPLANNING.biz is a cloud-based application that lives on the Customer Relationship Management (CRM) platform Salesforce, and tripplanning.biz is the only application that meets the requirements for the minimum viable product.

Carahsoft Technology has an ATO coupled with the use of Tripplanner.biz application, both stand as the sole airlift scheduling management cloud application meet the needs of the requirement. The Government requires access to a DoD IL4 compliant airlift scheduling management cloud application.

This system must handle 66 active DoD aircraft, totaling around 20,000 flight hours yearly, and accommodate an extra 70 notional DoD aircraft or utilize a forecasting scheduling tool. It should sustain an average of 515 total active login accounts annually, with approximately 15 active users possessing mission command and control oversight, including create and update privileges monthly.

The ATO is required and has an authorization granted to vendors to use the Air Force cloud space and operating system. The process to acquire an ATO is costly and time consuming and requires a minimum of six months to years to acquire depending on the vulnerability of the application/ system with the Air Force cybersecurity environment.

Attendance at the National Business Aviation Association Convention and Exhibition (NBAA) conventions in 2021 and 2023, combined with continuous market monitoring and research in 2024, has provided valuable insights into the current landscape of aviation scheduling applications. In addition to Tripplanning.biz, the mission partner evaluated three additional companies with findings as follows:

1. Vendor 1 was assessed from the following factors:

Application Data Aggregation: Application meets most of the data aggregation requirements, but data is not stored at the security level required by mission standards

Sole Source (Including Brand Name) Justification - Simplified Procedures for Certain Commercial Items

March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 6 of 8March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 6 of 8

Application Functionality: Application meets most of the functionality requirements (listed below).

Application Impact Level 4 (IL4) Compliance: Vendor 1 does not meet this requirement. It does not meet FedRAMP certification/strict security requirements and is not native to the Salesforce platform. Federal Risk and Authorization Management Program. FedRAMP is a US government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. FedRAMP key benefits includes reducing duplicative efforts (minimized the need for agencies to conduct their own assessments) and is cost efficiency (streamlined processes help reduce costs associated with security assessments).

2. Vendor 2 was assessed from the following factors:

Application Data Aggregation: Application meets most of the data aggregation requirements, but data is not stored at the security level required by mission standards

Application Functionality: Application meets most of the functionality requirements (listed below).

Application Impact Level 4 (IL4) Compliance: Vendor 2 does not meet this requirement. It does not meet FedRAMP certification/strict security requirements and is not native to the Salesforce platform.

Currently inactive SAM Registration.

3. Vendor 3 was assessed from the following factors:

Application Data Aggregation: Application meets most of the data aggregation requirements, but data is not stored at the security level required by mission standards.

Application Functionality: Application meets very little of the functionality requirements and requires integration with TRIPPLANNING.BIZ. Current application focuses on ground operations.

Application Impact Level 4 (IL4) Compliance: Vendor 3 does not meet this requirement. It does not meet FEDRAMP certification/strict security requirements and is not native to the Salesforce platform.

In addition to the above evaluations completed by the mission partner, on 5 August 2024 additional market research in accordance with FAR Part 10 was conducted by posting Sources Sought Synopsis for the proposed acquisition, advising industry of the pending acquisition and soliciting inquiries from interested parties. Five responses were received to include four

(4) small businesses and one (1) large business; of the responses received none had the ATO and only one (1) was cloud based as well as had the IL4 compliance. This information has

Sole Source (Including Brand Name) Justification - Simplified Procedures for Certain Commercial Items

March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 7 of 8March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 7 of 8 been detailed in the market research report.

With the Very Important Person Special Air Mission (VIPSAM) task for Government officials and the systems strict Department of Defense directives, policies and cybersecurity guidelines for the requirement, these two aspects significantly minimize the talent pool for this requirement. The current system (CampSystem) is web based with limited functionality that prevents cloud-based operation and expansion of services. The Carahsoft Tripplanning solution is the single option that meet the needs of the requirement and prevents mission failure.

Market research indicates that there is only one vendor capable of satisfying the requiring entities needs of being cloud based and IL4 compliant, Tripplanning.biz, which CARAHSOFT is the only avenue.

Currently, Carahsoft Technology is the only authorized vendor who can provide the license for Salesforce, Tripplanning.biz and other capabilities for EAMS continuation of operations. It is the Air Force's intent to continue its survey of the market, as well as reviewing EAMS requirements to evaluate the possibility of competing future requirements. The Government received emails from eight interested sources that provided information of company capabilities as it relates to this requirement

1 - WOSB

2 - SDVOSB

2 - Small 3 - Large

Sole Source (Including Brand Name) Justification - Simplified Procedures for Certain Commercial Items

March 2023 CONTROLLED UNCLASSIFIED INFORMATION Page 8 of 8