II_1 SF1449 Solicitation.pdf

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

1. REQUISITION NUMBER PAGE 1 OF 40

2. CONTRACT NO. 3. AWARD/EFFECTIVE 4. ORDER NUMBER 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE

DATE

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME b. TELEPHONE NUMBER (No collect calls)

8. OFFER DUE DATE/

13b. RATING

14. METHOD OF SOLICITATION

CODE

15. DELIVER TO 16. ADMINISTERED BY CODE

18a. PAYMENT WILL BE MADE BY CODE17a. CONTRACTOR/

OFFEROR

CODE

FACILITY

CODE

CODE

TELEPHONE NO.

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

BELOW IS CHECKED

RFQ IFB RFP

SEE ADDENDUM

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED

29. AWARD OF CONTRACT: REF. OFFER

DATED . . YOUR OFFER ON SOLICITATION

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

31b. NAME OF CONTRACTING OFFICER (Type or print) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA - FAR (48 CFR) 53.212

10. THIS ACQUISITION IS UNRESTRICTED OR

NAICS:

SIZE STANDARD:

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

SET ASIDE: % FOR:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

ARE ARE NOT ATTACHED

ARE ARE NOT ATTACHED

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

8 (A)

EDWOSB

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SMALL BUSINESS

HASSAN VILLALBA 469-801-0778

9. ISSUED BY

OCPO - CI Section 1 4050 Alpha Rd Farmers Branch, TX 75244-4201 Attn: Hassan Villalba Email: hassan.a.villalba@irs.gov

Same as Block #9See Attached Delivery Schedule

Invoices must be submitted via the Invoice Processing Platform at www.ipp.gov

See Attached Schedule(s)

See Attached Schedule(s)

HASSAN VILLALBA

5000232901

09/08/2026

X

X X

DATE

2023H2-26-Q-5000232901

LOCAL TIME

09/15/2026

X

X

STANDARD FORM 1449 (REV. 2/2012) BACK

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

40. PAID BY

32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f. TELPHONE NUMBER OF AUTHORZED GOVERNMENT REPRESENTATIVE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

33. SHIP NUMBER 34. VOUCHER NUMBER 35. AMOUNT VERIFIED

CORRECT FOR

PARTIAL FINAL

37. CHECK NUMBER

38. S/R ACCOUNT NO. 39. S/R VOUCHER NUMBER

36. PAYMENT

COMPLETE PARTIAL FINAL

Internal Revenue Service

Office of the Chief Procurement Officer (OCPO) Special Operations Division, Criminal Investigations Branch, Section 1

Cellebrite Software Renewal

Request for Quote 2023H2-26-Q-5000232901

Table of Contents

SF1449

Section I – Line-Item Table

Section II – Statement of Work

Section III – Clauses

Section IV – Instructions to Quoter

Section I –Line-Item Table

The Contractor shall provide the below items in accordance with the Statement of Work and terms and conditions herein. All deliverables and other documentation under this order, as required by the performance work statements shall be provided by the Contractor at no additional cost to the Government. This contract is a Firm-Fixed-Price (FFP). The CLIN breakdown is as follows:

Line Item QTY Description Price

0001 60 Base Year: 09/30/2026 – 09/29/2027 Digital Collector Subscription

0001A 1 Base Year: 09/30/2026 – 09/29/2027 Digital Collector Subscription

0002 40 Base Year: 09/30/2026 – 09/29/2027 Inspector Subscription

0002A 1 Base Year: 09/30/2026 – 09/29/2027 Inspector Subscription

0003 1 Base Year: 09/30/2026 – 09/29/2027 Inseyets On-Prem Pro

0004 100 Base Year: 09/30/2026 – 09/29/2027 Upgrade to Inseyets On-Prem Pro

0005 100 Base Year: 09/30/2026 – 09/29/2027 Inseyets upgrade kit

0005A 1 Base Year: 09/30/2026 – 09/29/2027 Inseyets upgrade kit

0006 6 Base Year: 09/30/2026 – 09/29/2027 Inseyets On-Prem Unlimited Unlocks

0007 1 Base Year: 09/30/2026 – 09/29/2027 Inseyets Offline standalone

0008 1 Base Year: 09/30/2026 – 09/29/2027 Upgrade to Inseyets Offline standalone

0009 1 Base Year: 09/30/2026 – 09/29/2027 Inseyets Offline Unlimited Unlocks

0010 1940 Base Year: 09/30/2026 – 09/29/2027 CTSW - Cellebrite Training Services basic Wallet item

0011 1 Base Year: 09/30/2026 – 09/29/2027 Inseyets On-Prem Unlimited Advanced Unlocks

0012 2 Base Year: 09/30/2026 – 09/29/2027 Inseyets Online Pro

0012A 1 Base Year: 09/30/2026 – 09/29/2027 Inseyets Online Pro

0013 1 Base Year: 09/30/2026 – 09/29/2027 Upgrade to Inseyets Online Pro

0014 15 Base Year: 09/30/2026 – 09/29/2027 Inseyets Online Limited Unlocks subscription (optional)

0015 1 Base Year: 09/30/2026 – 09/29/2027 Inseyets upgrade kit - Hardware to be delivered on behalf of Cellebrite

0016 1 Base Year: 09/30/2026 – 09/29/2027 Shipping Fees

Section II – Performance Work Statement

INTERNAL REVENUE SERVICE CRIMINAL INVESTIGATION (IRS-CI)

CELLEBRITE SOFTWARE RENEWAL

SHOPPING CART # 5000232901

C.1 Introduction/Overview In support of its law enforcement investigative mission the Internal Revenue Service (IRS) Criminal Investigation (CI) Division has a need to purchase Cellebrite which includes software, training, and support on a 12-month firm fixed price contract as detailed in Section 3 Scope.

C.2 Background

Internal Revenue Service – Criminal Investigation (CI) is the law enforcement arm of the Internal Revenue Service. CI is charged with enforcing federal criminal tax statutes and investigating violations of the Internal Revenue Code. CI special agents also apply specialized financial investigative expertise to money laundering, narcotics-related financial activity, cyber-enabled crime, and other investigations conducted independently or in coordination with federal, state, local, and international law enforcement partners. Digital Forensics (DF) is responsible for the acquisition, processing, examination, and analysis of digital evidence associated with ongoing criminal investigations.

Digital Forensics requires continued access to Cellebrite mobile forensic capabilities, including Cellebrite Inseyets and associated Cellebrite products and services, to provide advanced lawful access, acquisition, extraction, processing, and analysis of evidence from mobile devices. Cellebrite capabilities used by CI include, but are not limited to:

• Advanced unlock and lawful-access capabilities for supported locked and encrypted iOS and Android devices, including passcode recovery and advanced access methods where technically supported.

• Full File System (FFS), physical, and other advanced forensic extraction methods for supported mobile devices.

• Extensive and continuously updated support for current and legacy iOS and Android devices, operating-system versions, chipsets, and mobile applications.

• Forensically sound acquisition and preservation of mobile-device evidence, including extraction metadata, hashing, validation, and audit information.

• Access to protected or encrypted device data, including credential stores such as the iOS Keychain, where technically supported.

• Advanced parsing, decoding, recovery, searching, filtering, and analysis of application data, communications, multimedia, location information, system artifacts, deleted data, and other recoverable evidence.

• Standalone and portable forensic acquisition capability for field and laboratory use without dependency on an IRS-managed enterprise server.

• Support for commonly encountered mobile-device interfaces and connectivity methods.

• API and programmatic integration capabilities supporting automation, workflow integration, and evidence-processing activities.

• The ability to save acquired evidence to Cellebrite acquisition hardware, Government-controlled external storage, or forensic workstations.

• Integrated processing, examination, reporting, and portable-review capabilities supporting the workflow from device acquisition through investigative review.

The purpose of this acquisition is to renew and sustain CI's existing Cellebrite mobile forensic ecosystem used by DF personnel nationwide. Mobile devices routinely contain significant investigative evidence, including communications, photographs, videos, financial information, location history, application data, authentication information, and other user- and system-generated artifacts. These devices are frequently seized pursuant to search warrants, obtained through consent searches, or otherwise lawfully acquired during CI investigations.

Modern mobile devices increasingly employ encryption, secure hardware, application-level protections, and evolving operating-system security mechanisms that can prevent access through conventional forensic methods. Cellebrite provides CI examiners with specialized capabilities to lawfully access supported locked and encrypted devices, perform advanced forensic extractions, recover deleted and protected artifacts, decode application and system data, and prepare evidence for forensic examination and investigative review.

This requirement is being acquired on a brand-name basis to maintain continuity with CI's existing Cellebrite forensic environment, examiner training and workflows, deployed hardware and software, established evidence formats, and active investigative casework. Continued use of the Cellebrite ecosystem also preserves interoperability across acquisition, processing, analysis, reporting, and evidence-review functions.

C.3 Scope The scope of the SOW encompasses purchasing the following:

Mfr. CLIN Item Model/Description Qty

C el le br ite

0001 B-BLB-01-019 Digital Collector Subscription 61 0002 B-BLB-01-022 Inspector Subscription 41 0003 B-CNR-06-001 Inseyets On-Prem Pro 0 0004 B-CNR-06-003 Upgrade to Inseyets On-Prem Pro 100 0005 F-UFD-06-005 Inseyets upgrade kit 101 0006 S-AIS-20-003 Inseyets On-Prem Unlimited Unlocks 6 0007 B-CNR-07-001 Inseyets Offline standalone 0 0008 B-CNR-07-003 Upgrade to Inseyets Offline standalone 1 0009 S-AIS-20-007 Inseyets Offline Unlimited Unlocks 1

0010 U-TRN-01-020

CTSW - Cellebrite Training Services basic Wallet item 1940

0011 B-CNR-06-004 Inseyets On-Prem Unlimited Advanced Unlocks 1 0012 B-CNR-05-001 Inseyets Online Pro 3 0013 B-CNR-05-003 Upgrade to Inseyets Online Pro 1

0014 S-AIS-20-001

Inseyets Online Limited Unlocks subscription (optional) 15

0015 F-UFD-06-005

Inseyets upgrade kit - Hardware to be delivered on behalf of Cellebrite 1

0016 SHP Shipping Fees 1

C.4 Delivery/Place of Performance Upon award, the contractor shall contact and register software to the DF software team at DF_Licenses@ci.irs.gov. If the licenses require end user information, the end users should all be listed as Greg Milne (703-986-2110, Alexander.Milne@ci.irs.gov) in addition to the DF_Licenses@ci.irs.gov email address. Any delivery schedule and tracking information should be sent to

DF_Licenses@ci.irs.gov.

Upon award, any items requiring shipping should be shipped directly to:

IRS CI Digital Forensics Attn: Greg Milne (Mobile Forensics Program) 3320 Noble Pond Way, Suite 206 Woodbridge, VA 22193 703-986-2110 DF_Licenses@ci.irs.gov

All Freight Dock shipping, delivery personnel must assist with unloading truck.

C.7 Period Of Performance

This procurement is for software renewal. The need date for this contract to be awarded is 09/28/2026.

The period of performance will be 09/30/2026-09/29/2027.

An earlier need by date is required to ensure there is no lapse in the renewal and continuation of licenses currently in place. The OEM to reseller activation period can take up to 48 hours.

C.8 Contract Administration Data The Contracting Officer for this requirement is:

Internal Revenue Service

Office of Procurement Name: Hassan Villalba Address: 4050 Alpha Rd, Farmers Branch TX, 75244 Voice: 469-801-0778 Email: Hassan.A.Villalba@irs.gov

Contracting Officer’s Representative (COR) Point of Contact The COR for this order is listed below:

Internal Revenue Service Criminal Investigation Name: Ariel Alexander Address: 3320 Noble Pond Way, Suite 206

Woodbridge, VA 22193 Phone: 703-986-2095 Email: Ariel.Alexander@ci.irs.gov

C.9 Government Furnished Property Access to Government property does not apply.

C.10 Government-Furnished Information Access to Government information does not apply.

C.11 Security Requirements Security requirement do not apply.

C.12 Section 508 Compliance

IRS‐CI has developed the following plan to mitigate the Revised Section 508 Accessibility shortcomings of this product. If any IRS employees have an accessibility issue at any time, they shall immediately contact Program Manager (PM) *CI-HQ-CFS-DF-Mobile or current DFL Management. They will provide accessibility assistance to the requestor. For example, he would arrange for another PRODUCT/SERVICE user to provide hands‐on assistance or alternative secure communications arrangements to be made, such as the IRS Teams application. Accommodations would be made, so the requestor’s job performance would not be hindered due to the Revised 508 Accessibility Non‐ conformance as indicated in the VPAT statement provided for the Cellebrite units.

Section III – Clauses

Clauses Incorporated by Reference.

52.202-1 Definitions (Jun 2020) 52.203-3 Gratuities (Apr 1984) 52.203-5 Covenant against Contingent Fees (May 2014) 52.203-7 Anti-Kickback Procedures (Jun 2020) 52.203-10 Price or Fee Adjustment for Illegal or Improper Activity (May 2014) 52.203-17 Contractor Employee Whistleblower Rights (Nov 2023) 52.203-19 Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (Jan

2017) 52.204-7 System for Award Management—Registration (Oct 2025) 52.204-10 Reporting Executive Compensation and First-Tier Subcontract Awards (Oct 2025) 52.204-13 System for Award Management—Maintenance (Oct 2025) 52.204-14 Service Contract Reporting Requirements (Oct 2025) 52.204-19 Incorporation by Reference of Representations and Certifications (Dec 2014) 52.209-10 Prohibition on Contracting with Inverted Domestic Corporations (Oct 2025) 52.212-4 Terms and Conditions—Commercial Products and Commercial Services (Oct 2025) 52.219-14 Limitations on Subcontracting (Oct 2025) 52.222-3 Convict Labor (Oct 2025) 52.222-19 Child Labor-Cooperation with Authorities and Remedies (Oct 2025) 52.222-41 Service Contract Labor Standards (Oct 2025) 52.222-50 Combating Trafficking in Persons (Oct 2025) 52.222-54 Employment Eligibility Verification (Oct 2025) 52.222-90 Addressing DEI Discrimination by Federal Contractors (Oct 2025) 52.223-23 Sustainable Products and Services (Oct 2025) 52.224-1 Privacy Act Notification (Apr 1984) 52.224-2 Privacy Act (Apr 1984) 52.227-1 Authorization and Consent (Jun 2020) 52.227-2 Notice and Assistance Regarding Patent and Copyright Infringement (Jun 2020) 52.229-3 Federal, State, and Local Taxes (Oct 2025) 52.232-1 Payments (Apr 1984) 52.232-11 Extras (Apr 1984) 52.232-17 Interest (May 2014) 52.232-18 Availability of Funds (Apr 1984) 52.232-23 Assignment of Claims (May 2014) 52.232-39 Unenforceability of Unauthorized Obligations (Jun 2013) 52.232-40 Providing Accelerated Payments to Small Business Subcontractors (Mar 2023) 52.233-1 Disputes (Oct 2025) 52.233-3 Protest after Award (Oct 2025) 52.233-4 Applicable Law for Breach of Contract Claim (Oct 2025) 52.242-13 Bankruptcy (Jul 1995) 52.242-15 Stop-Work Order (Aug 1989) 52.243-1 Changes—Fixed-Price (Oct 2025) Alternate II (Oct 2025) 52.252-2 Clauses Incorporated by Reference (Feb 1998)

Full Text:

52.203-12 Limitation on Payments to Influence Certain Federal Transactions (Jun 2020)

(a) Definitions. As used in this clause-

Agency means "executive agency" as defined in Federal Acquisition Regulation (FAR) 2.101.

Covered Federal action means any of the following actions:

(1) Awarding any Federal contract.

(2) Making any Federal grant.

(3) Making any Federal loan.

(4) Entering into any cooperative agreement.

(5) Extending, continuing, renewing, amending, or modifying any Federal contract, grant, loan, or cooperative agreement.

Indian tribe and "tribal organization" have the meaning provided in section 4 of the Indian Self- Determination and Education Assistance Act (25 U.S.C. 450b) and include Alaskan Natives.

Influencing or attempting to influence means making, with the intent to influence, any communication to or appearance before an officer or employee of any agency, a Member of Congress, an officer or employee of Congress, or an employee of a Member of Congress in connection with any covered Federal action.

Local government means a unit of government in a State and, if chartered, established, or otherwise recognized by a State for the performance of a governmental duty, including a local public authority, a special district, an intrastate district, a council of governments, a sponsor group representative organization, and any other instrumentality of a local government.

Officer or employee of an agency includes the following individuals who are employed by an agency:

(1) An individual who is appointed to a position in the Government under Title 5, United States Code, including a position under a temporary appointment.

(2) A member of the uniformed services, as defined in subsection 101(3), Title 37, United States Code.

(3) A special Government employee, as defined in section 202, Title 18, United States Code.

(4) An individual who is a member of a Federal advisory committee, as defined by the Federal Advisory Committee Act, Title 5, United States Code, appendix 2.

Person means an individual, corporation, company, association, authority, firm, partnership, society, State, and local government, regardless of whether such entity is operated for profit, or not for profit. This term excludes an Indian tribe, tribal organization, or any other Indian organization eligible to receive

Federal contracts, grants, cooperative agreements, or loans from an agency, but only with respect to expenditures by such tribe or organization that are made for purposes specified in paragraph (b) of this clause and are permitted by other Federal law.

Reasonable compensation means, with respect to a regularly employed officer or employee of any person, compensation that is consistent with the normal compensation for such officer or employee for work that is not furnished to, not funded by, or not furnished in cooperation with the Federal Government.

Reasonable payment means, with respect to professional and other technical services, a payment in an amount that is consistent with the amount normally paid for such services in the private sector.

Recipient includes the Contractor and all subcontractors. This term excludes an Indian tribe, tribal organization, or any other Indian organization eligible to receive Federal contracts, grants, cooperative agreements, or loans from an agency, but only with respect to expenditures by such tribe or organization that are made for purposes specified in paragraph (b) of this clause and are permitted by other Federal law.

Regularly employed means, with respect to an officer or employee of a person requesting or receiving a Federal contract, an officer or employee who is employed by such person for at least 130 working days within 1 year immediately preceding the date of the submission that initiates agency consideration of such person for receipt of such contract. An officer or employee who is employed by such person for less than 130 working days within 1 year immediately preceding the date of the submission that initiates agency consideration of such person shall be considered to be regularly employed as soon as he or she is employed by such person for 130 working days.

State means a State of the United States, the District of Columbia, or an outlying area of the United States, an agency or instrumentality of a State, and multi-State, regional, or interstate entity having governmental duties and powers.

(b) Prohibition. 31 U.S.C. 1352 prohibits a recipient of a Federal contract, grant, loan, or cooperative agreement from using appropriated funds to pay any person for influencing or attempting to influence an officer or employee of any agency, a Member of Congress, an officer or employee of Congress, or an employee of a Member of Congress in connection with any covered Federal actions. In accordance with 31 U.S.C. 1352, the Contractor shall not use appropriated funds to pay any person for influencing or attempting to influence an officer or employee of any agency, a Member of Congress, an officer or employee of Congress, or an employee of a Member of Congress in connection with the award of this contractor the extension, continuation, renewal, amendment, or modification of this contract.

(1) The term appropriated funds does not include profit or fee from a covered Federal action.

(2) To the extent the Contractor can demonstrate that the Contractor has sufficient monies, other than Federal appropriated funds, the Government will assume that these other monies were spent for any influencing activities that would be unallowable if paid for with Federal appropriated funds.

(c) Exceptions. The prohibition in paragraph (b) of this clause does not apply under the following conditions:

(1) Agency and legislative liaison by Contractor employees.

(i) Payment of reasonable compensation made to an officer or employee of the Contractor if the payment is for agency and legislative liaison activities not directly related to this contract. For purposes of this paragraph, providing any information specifically requested by an agency or Congress is permitted at any time.

(ii) Participating with an agency in discussions that are not related to a specific solicitation for any covered Federal action, but that concern-

(A) The qualities and characteristics (including individual demonstrations) of the person’s products or services, conditions or terms of sale, and service capabilities; or

(B) The application or adaptation of the person’s products or services for an agency’s use.

(iii) Providing prior to formal solicitation of any covered Federal action any information not specifically requested but necessary for an agency to make an informed decision about initiation of a covered Federal action;

(iv) Participating in technical discussions regarding the preparation of an unsolicited proposal prior to its official submission; and

(v) Making capability presentations prior to formal solicitation of any covered Federal action by persons seeking awards from an agency pursuant to the provisions of the Small Business Act, as amended by Pub.

L. 95-507, and subsequent amendments.

(2) Professional and technical services.

(i) A payment of reasonable compensation made to an officer or employee of a person requesting or receiving a covered Federal action or an extension, continuation, renewal, amendment, or modification of a covered Federal action, if payment is for professional or technical services rendered directly in the preparation, submission, or negotiation of any bid, proposal, or application for that Federal action or for meeting requirements imposed by or pursuant to law as a condition for receiving that Federal action.

(ii) Any reasonable payment to a person, other than an officer or employee of a person requesting or receiving a covered Federal action or an extension, continuation, renewal, amendment, or modification of a covered Federal action if the payment is for professional or technical services rendered directly in the preparation, submission, or negotiation of any bid, proposal, or application for that Federal action or for meeting requirements imposed by or pursuant to law as a condition for receiving that Federal action.

Persons other than officers or employees of a person requesting or receiving a covered Federal action include consultants and trade associations.

(iii) As used in paragraph (c)(2) of this clause, "professional and technical services" are limited to advice and analysis directly applying any professional or technical discipline (for examples, see FAR 3.803(a)(2)(iii)).

(iv) Requirements imposed by or pursuant to law as a condition for receiving a covered Federal award include those required by law or regulation and any other requirements in the actual award documents.

(3) Only those communications and services expressly authorized by paragraphs (c)(1) and (2) of this clause are permitted.

(d) Disclosure.

(1) If the Contractor did not submit OMB Standard Form LLL, Disclosure of Lobbying Activities, with its offer, but registrants under the Lobbying Disclosure Act of 1995 have subsequently made a lobbying contact on behalf of the Contractor with respect to this contract, the Contractor shall complete and submit OMB Standard Form LLL to provide the name of the lobbying registrants, including the individuals performing the services.

(2) If the Contractor did submit OMB Standard Form LLL disclosure pursuant to paragraph (d) of the provision at FAR 52.203-11, Certification and Disclosure Regarding Payments to Influence Certain Federal Transactions, and a change occurs that affects Block 10 of the OMB Standard Form LLL (name and address of lobbying registrant or individuals performing services), the Contractor shall, at the end of the calendar quarter in which the change occurs, submit to the Contracting Officer within 30 days an updated disclosure using OMB Standard Form LLL.

(e) Penalties.

(1) Any person who makes an expenditure prohibited under paragraph (b) of this clause or who fails to file or amend the disclosure to be filed or amended by paragraph (d) of this clause shall be subject to civil penalties as provided for by 31 U.S.C. 1352. An imposition of a civil penalty does not prevent the Government from seeking any other remedy that may be applicable.

(2) Contractors may rely without liability on the representation made by their subcontractors in the certification and disclosure form.

(f) Cost allowability. Nothing in this clause makes allowable or reasonable any costs which would otherwise be unallowable or unreasonable. Conversely, costs made specifically unallowable by the requirements in this clause will not be made allowable under any other provision.

(g) Subcontracts.

(1) The Contractor shall obtain a declaration, including the certification and disclosure in paragraphs (c) and (d) of the provision at FAR 52.203-11, Certification and Disclosure Regarding Payments to Influence Certain Federal Transactions, from each person requesting or receiving a subcontract under this contract that exceeds the threshold specified in FAR 3.808 on the date of subcontract award. The Contractor or subcontractor that awards the subcontract shall retain the declaration.

(2) A copy of each subcontractor disclosure form (but not certifications) shall be forwarded from tier to tier until received by the prime Contractor. The prime Contractor shall, at the end of the calendar quarter in which the disclosure form is submitted by the subcontractor, submit to the Contracting Officer within 30 days a copy of all disclosures. Each subcontractor certification shall be retained in the subcontract file of the awarding Contractor.

(3) The Contractor shall include the substance of this clause, including this paragraph (g), in any subcontract that exceeds the threshold specified in FAR 3.808 on the date of subcontract award.

(End of Clause)

52.216-1 Type of Contract (Oct 2025)

The Government contemplates award of a ___FFP___________ contract resulting from this solicitation.

(End of Provision)

52.217-8 Option to Extend Services (Nov 1999)

The Government may require continued performance of any services within the limits and at the rates specified in the contract. These rates may be adjusted only as a result of revisions to prevailing labor rates provided by the Secretary of Labor. The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months. The Contracting Officer may exercise the option by written notice to the Contractor within 60 days.

1052.201-70 Contracting Officer's Representative (COR) Appointment and Authority (APR 2015)

(a) The COR is TBD.

(b) Performance of work under this contract is subject to the technical direction of the COR identified above, or a representative designated in writing. The term “technical direction” includes, without limitation, direction to the contractor that directs or redirects the labor effort, shifts the work between work areas or locations, and/or fills in details and otherwise serves to ensure that tasks outlined in the work statement are accomplished satisfactorily.

(c) Technical direction must be within the scope of the contract specification(s)/work statement. The COR does not have authority to issue technical direction that:

(1) Constitutes a change of assignment or additional work outside the contract specification(s)/work statement;

(2) Constitutes a change as defined in the clause entitled “Changes”;

(3) In any manner causes an increase or decrease in the contract price, or the time required for contract performance;

(4) Changes any of the terms, conditions, or specification(s)/work statement of the contract;

(5) Interferes with the contractor's right to perform under the terms and conditions of the contract; or

(6) Directs, supervises or otherwise controls the actions of the Contractor's employees.

(d) Technical direction may be oral or in writing. The COR must confirm oral direction in writing within five workdays, with a copy to the Contracting Officer.

(e) The Contractor shall proceed promptly with performance resulting from the technical direction issued by the COR. If, in the opinion of the Contractor, any direction of the COR or the designated representative falls within the limitations of (c) above, the Contractor shall immediately notify the Contracting Officer no later than the beginning of the next Government workday.

(f) Failure of the Contractor and the Contracting Officer to agree that technical direction is within the scope of the contract shall be subject to the terms of the clause entitled ``Disputes.''

(End of clause)

IR1052.204-9002 IRS Specialized Information Technology (IT) Security Training (Role-Based) Requirements (Apr 2024)

(a) Consistent with the Federal Information Security Modernization Act of 2014 (FISMA), specialized information technology (IT) security training (role-based) shall be completed prior to access to Information Systems and annually thereafter by contractor and subcontractor personnel who have an IT security role or responsibility.

(b) Identifying contractor/subcontractor with a role or responsibility for IT security is completed by the Contractor, and verified by the COR, by completing the Risk Assessment Checklist (RAC). The roles listed in the RAC conform to those roles listed in the Internal Revenue Manual 10.8.1.3 that apply to contractor personnel. This process applies to new contractors/subcontractors, replacement personnel and for existing contractors/subcontractors whose roles change during their work on a contract. This includes, but is not limited to, having an approved elevated privilege to one or more IRS systems through the Business Entitlement Access Request System (BEARS).

(c) Prior to accessing any IT system, all contractor/subcontractor personnel must successfully complete all provisions of IR1052.204-9000 Submission of Security Forms and Related Materials.

(d) In keeping with the Security Orientation outlined in IR1052.224-9001, contractors/subcontractors designated on the Risk Assessment Checklist as performing a role shall complete approved training equal to the assigned hours within 5 business days of receiving the Personnel Security’s memo approving staff-like access.

(e) Annual Requirements: Thereafter, on an annual basis within a FISMA year cycle beginning July 1st of each year, contractor/subcontractor personnel performing under this contract in the role identified herein is required to complete specialized IT security, role-based training by June 1st of the following year.

(f) Training Certificate/Notice: The contractor shall use the Government system identified by Cybersecurity to annually complete specialized IT security training (role-based). The COR will track the courses, hours completed and the adhere to the established due dates for each contractor/subcontractor personnel. Alternatively, courses may be completed outside of the Government system. Any courses taken outside of the Government system must be pre-approved by IRS Cybersecurity’s FISMA Training Compliance team via the COR. Adequate information such as course outline/syllabus must be provided for evaluation. Once a course is approved, certificates of completion provided for each contractor/subcontractor shall be provided to COR in order to receive credit toward the required hours for the contractor/subcontractor personnel. Copies of completion certificates for externally completed course must be shared with the Contracting Officer upon request.

(g) Administrative Remedies: A contractor/subcontractor who fails to complete the specialized IT security training (role-based) requirements, within the timeframe specified, may be subject to suspension, revocation, or termination (temporarily or permanently) of staff-like access to IRS IT systems.

(h) Flow down of clauses. The contractor shall include and flow down, in its subcontracts (or arrangements or outsourced service agreements) that entails staff-like access to SBU information by a subcontractor, at any tier, the same Federal Acquisition Regulation (FAR) and local security or safeguard clauses or provisions for protecting SBU information or information systems that apply to and are incorporated in its prime contract with IRS.

IR1052.224-9000 Safeguards Against Unauthorized Disclosure of Sensitive But Unclassified Information (Apr 2024)

1. Treasury Directive Publication 15-71 (TD P 15-71), Chapter III – Information Security, Section 24 – Sensitive But Unclassified Information defines SBU information as ‘any information, the loss, misuse, or unauthorized access to or modification of which could adversely affect the national interest or the conduct of Federal programs, or the privacy to which individuals are entitled under Section 552a of Title 5, United States Code (USC) (the Privacy Act) but which has not been specifically authorized under criteria established by an executive order or an act of Congress to be kept secret in the interest of national defense or foreign policy.’ SBU may be categorized in one or more of the following groups—

• Federal Tax Information (FTI), including any information on or related to a tax return

• Returns and Return Information

• Sensitive Law Enforcement Information

• Employee and Personnel Information

• Personally Identifiable Information (PII)

• Information Collected or Created from Surveys

• Other Protected Information

2. Tax return or tax return information disclosed to the contractor can be used only for a purpose and to the extent authorized herein, and willful disclosure of any such tax return or tax return information for a purpose and to the extent unauthorized for provision of appraisal services to assist with the valuation of conservation easements constitutes a felony, punishable upon conviction by a fine of as much as $5,000 or imprisonment for as long as five (5) years, or both, together with the costs of prosecution. Any such knowing or negligent unauthorized disclosure of tax return or tax return information may also result in an award of civil damages in an amount not less than $1,000 plus costs with respect to each instance of unauthorized disclosure. These penalties are prescribed by the Internal Revenue Code, Sections 7213 and 7431; see also 26 CFR § 301.6103(n)-1.

3. Contractors who perform work at contractor (including subcontractor) managed sites using contractor or subcontractor managed IT resources shall adhere to the general guidance and specific privacy and security control requirements contained in Publication 4812, Contractor Security & Privacy Controls, IRM 10.23.2 - Personnel Security, Contractor Investigations, IRM 10.5.1 Privacy Policy, and IRM 10.8.1

- Information Technology (IT) Security, Policy and Guidance. Publication 4812 and IRM 10.5.1, 10.8.1 and 10.23.2 provide comprehensive lists of all security, privacy, information protection and disclosure controls and guidance.

4. Eligibility, Fitness and Suitability. Contractor (including subcontractor) personnel hired for work within the United States or its territories and possessions and who require staff-like access, wherever the location, to IRS-owned or controlled facilities or work on contracts that involve the design, operation, repair, or maintenance of information systems, and/or require staff-like access to SBU information, must meet the eligibility requirements under IRM 10.23.2, Personnel Security, Contractor Investigations, and shall be subject to security screening and investigative processing, commensurate with the position sensitivity level, and in accordance with IRM 10.23.2, and TD P 15-71. Contractor (including subcontractor) personnel must be found both eligible and suitable, and approved for staff-like access (interim or final) by IRS Personnel Security prior to starting work on the contract/order, and before being granted access to IRS information systems or SBU information.

5. General Conditions for Allowed Disclosure. Any SBU information, in any format, made available to or created by the contractor (including subcontractor) personnel shall be treated as confidential information and shall be used only for the purposes of carrying out the requirements of this contract. Inspection by or disclosure to anyone other than duly authorized officer or personnel of the contractor (including subcontractor) shall require prior written approval of the IRS. Requests to make such inspections or disclosures shall be addressed to the CO. Access to SBU information shall be provided on a “need to know” basis. SBU information shall never be indiscriminately disseminated, and no person shall be given access to (or allowed to retain) more SBU information than is needed for performance of their duties, and for which that individual has been authorized to receive as a result of having been successfully investigated, adjudicated, trained to receive, and what is strictly necessary to accomplish the intended business purpose and mission.

6. Nondisclosure Agreement. Consistent with TD P 15-71, Chapter II, Section 2, and IRM 10.23.2.15 - Nondisclosure Agreement for Sensitive but Unclassified Information, each contractor (including subcontractor) personnel who requires staff-like access to SBU information shall complete, sign, and submit to Personnel Security – through the CO (or COR, if assigned) — an approved Nondisclosure Agreement prior to being granted staff-like access to SBU information under any IRS contract or order.

7. Training. All Contractor personnel assigned to this contract with staff-like access to SBU information must complete IRS-provided privacy and security awareness training, including the Privacy, Information Protection, and Disclosure training, as outlined in IR1052.224-9001 Mandatory IRS Security Training for Information Systems, Information Protection and Facilities Physical Access. Contractor personnel required to take the Unauthorized Access to Taxpayer Data training must attest to understanding the penalties for unauthorized access, as instructed by the COR.

8. Encryption. All SBU information must be protected at rest, in transit, and in exchanges (i.e., internal and external communications). The contractor (including subcontractor) shall employ encryption methods and tools to ensure the confidentiality, integrity, and availability of SBU information.

9. Particularly relevant to this clause are the updated sections to IRM 10.8.1 and Publication 4812 regarding email and text messages, alternative work sites, and incident management:

• For email and text messaging, the contractor shall abide by IRM 10.8.1.4.17.2.2 “Electronic Mail (Email) Security”, IRM 10.5.1.6.8 “Email” plus all subsections, and IRM 10.8.2.2.1.18 “Contractor”; or Pub. 4812 section 28.3.1 “Electronic Mail (Email) Security,”. Included are requirements on encryption, subject line content, and restrictions on personal email accounts.

• For alternate work sites the contractor shall abide by IRM 10.8.1.4.11.16 “PE-17 Alternate Work Site” or Publication 4812 section 21.16 “PE-17 Alternate Work Site,”. Included are requirements for incident reporting, encryption, and secure access.

10. Incident and Situation Reporting. Contractors and subcontractors are required to report a suspected or confirmed breach in any medium or form, electronically, verbally or in hardcopy form immediately upon discovery. All incidents related to IRS processing, information or information systems shall be reported immediately upon discovery to the CO, COR, and CSIRC. Contact the CSIRC through any of the following methods:

CSIRC Contacts:

Telephone: 240.613.3606 E-mail to csirc@irs.gov

In addition, if the SBU information is or involves a loss or theft of an IRS IT asset, e.g., computer, laptop, router, printer, removable media (CD/DVD, flash drive, floppy, etc.), or non-IRS IT asset (BYOD device), or a loss or theft of hardcopy records/documents containing SBU data, including PII and tax information, the contractor shall report the incident/situation to the Treasury Inspector General for Tax Administration (TIGTA) hotline at (800) 366-4484.

11. Staff-Like Access to, Processing and Storage of Sensitive but Unclassified (SBU) Information. The contractor (including subcontractor) shall not allow contractor or subcontractor personnel to access, process, or store SBU on Information Technology (IT) systems or assets located outside the continental United States and its outlying territories.

Contractors (including subcontractors) utilizing their own IT systems or assets to receive or handle IRS SBU data shall not commingle IRS and non-IRS data.

12. Disposition of SBU Information. All SBU information processed during the performance of this contract, or to which the contractor (or subcontractor) was given staff-like access (as well as all related output, deliverables, or secondary or incidental by-products, information or data generated by the contractor or others directly or indirectly from the source material), regardless of form or format, shall be completely purged from all data storage components of the contractor’s or subcontractor facilities and computer systems, and no SBU/Personally Identifiable Information (PII) information will be retained by the contractor either--

• When it has served its useful, contractual purpose, and is no longer needed to meet the contractor’s (including subcontractor) other, continuing contractual obligations to the IRS or

• When the contract expires, or is terminated by the IRS (for convenience, default, or cause).

The contractor (including subcontractor) shall completely purge from its systems and any other storage, all SBU data, including PII and tax information (originals, copies, and derivative works) within 30 days of the point at which it has served its useful contractual purpose, or the contract expires or is terminated by the IRS (unless, the CO determines, and establishes, in writing, a longer period to complete the disposition of SBU data including PII and tax information).

The contractor shall provide to the IRS a written and signed certification to the COR that all SBU materials/information (i.e., case files, receipt books, PII and material, tax information, removable media (disks, CDs, thumb drives)) collected by, or provided to, the contractor have been purged, destroyed, or returned.

13. Records Management.

A. Applicability

This language applies to all Contractors whose personnel create, work with, or otherwise handle Federal records, as defined in Section B, regardless of the medium in which the record exists.

Contractor/subcontractor personnel are bound by the Records Management by Federal Agencies (44 U.S.C. Chapter 31) regarding the care and retention of federal records.

B. Definitions

"Federal record" as defined in 44 U.S.C. § 3301, includes all recorded information, regardless of form or characteristics, made or received by a Federal agency under Federal law or in connection with the transaction of public business and preserved or appropriate for preservation by that agency or its legitimate successor as evidence of the organization, functions, policies, decisions, procedures, operations, or other activities of the United States Government or because of the informational value of data in them.

The term Federal record:

1. includes [Agency] records;

2. does not include personal materials;

3. applies to records created, received, or maintained by Contractors pursuant to their [Agency] contract;

and

4. may include deliverables and documentation associated with deliverables.

C. Requirements

1. Contractor shall comply with all applicable records management laws and regulations, as well as National Archives and Records Administration (NARA) records policies, including but not limited to the Federal Records Act (44 U.S.C. chapters 21, 29, 31, 33), NARA regulations at 36 CFR Chapter XII Subchapter B, and those policies associated with the safeguarding of records covered by the Privacy Act of 1974 (5 U.S.C. 552a). These policies include the preservation of all records, regardless of form or characteristics, mode of transmission, or state of completion.

2. In accordance with 36 CFR 1222.32, all data created for Government use and delivered to, or falling under the legal control of, the Government are Federal records subject to the provisions of 44 U.S.C.

chapters 21, 29, 31, and 33, the Freedom of Information Act (FOIA) (5 U.S.C. 552), as amended, and the Privacy Act of 1974 (5 U.S.C. 552a), as amended and must be managed and scheduled for disposition only as permitted by statute or regulation.

3. In accordance with 36 CFR 1222.32, Contractor shall maintain all records created for Government use or created in the course of performing the contract and/or delivered to, or under the legal control of the Government and must be managed in accordance with Federal law. Contractors shall ensure that all IRS data and IRS-derived data are in commercially available or open and non-proprietary format for transition (back to IRS) in accordance with the National Archives and Records Administration (NARA) disposition guidance.

4. IRS and its contractors are responsible for preventing the alienation or unauthorized destruction of records, including all forms of mutilation. Records may not be removed from the legal custody of IRS or destroyed except for in accordance with the provisions of IRM 1.15.5, Relocating/Removing Records, the agency records schedules and with the written concurrence of the CO. Willful and unlawful destruction, damage or alienation of Federal records is subject to the fines and penalties imposed by 18 U.S.C. 2701.

In the event of any unlawful or accidental removal, defacing, alteration, or destruction of records, Contractor must immediately notify the appropriate CO. The CO must report the loss using the PII Breach Reporting Form. Privacy, Governmental Liaison and Disclosure (PGLD, Incident Management) will review the PII Breach Reporting Form and alert the Records and Information Management (RIM) Program Office that a suspected records loss has occurred. The agency must report promptly to NARA in accordance with 36 CFR 1230.

5. The Contractor shall immediately notify the appropriate CO immediately upon discovery of any inadvertent or unauthorized disclosures of information, data, documentary materials, records, or equipment. Disclosure of non-public information is limited to authorized personnel with a need-to-know as described in the [contract vehicle]. The Contractor shall ensure that the appropriate personnel, administrative, technical, and physical safeguards are established to ensure the security and confidentiality of this information, data, documentary material, records and/or equipment is properly protected. The Contractor shall not remove material from Government facilities or systems, or facilities or systems operated or maintained on the Government's behalf, without the express written permission of the Head of the Contracting Activity. When information, data, documentary material, records and/or equipment is no longer required, it shall be returned to IRS control, or the Contractor must hold it until otherwise directed. Items returned to the Government shall be hand-carried, mailed, emailed, or securely electronically transmitted to the CO or address prescribed in the [contract vehicle]. Destruction of records is EXPRESSLY PROHIBITED unless in accordance with Paragraph (4).

6. The Contractor is required to obtain the approval of the CO prior to engaging in any contractual relationship (sub-contractor) in support of this contract requiring the disclosure of information,…