ADAPT Page | 1

U.S. Department of State (DOS)

Bureau of International Narcotics and Law Enforcement (INL)

CFN

Advanced Digital Analysis Platform and Technology

ADAPT – Wiretapped Room

(Digital Legal Interception System)

ADAPT Page | 2

PERFORMANCE WORK STATEMENT

Bureau of International Narcotics and Law Enforcement Affairs (INL)

Advanced Digital Analysis Platform and Technology

FGR/UCTC ADAPT - Wiretap Room

1.0 GENERAL

The Contractor shall provide all labor, shipment services, materials, equipment, transportation, supervision, inventory, and all requirements necessary to accomplish the efforts described in this

Performance Work Statement (PWS).

2.0 BACKGROUND

The Bureau of International Narcotics and Law Enforcement Affairs (INL) leads the Department of State’s efforts to combat international crime and counter narcotics. INL’s mission is to reduce the impact of transnational crime and illegal drugs on the United States, its citizens, and partner nations by delivering effective foreign assistance and promoting global cooperation. INL works closely with host nations to support stabilization efforts and strengthen their security institutions, infrastructure, and technological capabilities.

3.0 OBJECTIVES

Through binational collaboration, INL Mexico will provide hardware, specialized software, and training to enable Government of Mexico (GoM) law enforcement agencies to integrate digital intelligence and legally obtained communications into a unified data warehouse. This system will allow investigators to query, analyze, map, visualize, and report digital evidence in legally admissible formats to support criminal investigations and prosecutions.

4.0 SCOPE

The contractor shall design, supply, install, configure, and support a comprehensive Digital

Legal Interception System for mobile communications that complies with relevant international standards. The system shall enable the lawful interception, monitoring, analysis, and secure storage of communications data and be capable of integrating with multiple telecommunications providers.

The contractor shall deliver all necessary hardware, software, network infrastructure, structured cabling (server to rack), storage solutions, software licenses, 140 workstations, current-generation servers, and evidence recording systems. The contractor shall provide implementation services, comprehensive training, and a two-year warranty. The contractor shall also provide two years of maintenance and 24/7/365 technical support from the date of system acceptance.

The system must be scalable, secure, reliable, and efficient. The system must produce output files in formats that are interoperable with the PLX platform used by other U.S. government

ADAPT Page | 3 agencies to enable sharing digital evidence and intelligence between the Government of Mexico and U.S. agencies during joint criminal investigations and prosecutions.

5.0 REQUIREMENTS

5.1 The Contractor shall provide a Digital Legal Interception System for Mobile

Communications, including all necessary hardware, software, and specialized labor, that meets the following requirements:

5.1.1 User Capacity. The system must support at least 140 simultaneous users with access to the platform.

5.1.2 Analysis and Monitoring. The system shall include a dedicated data analysis and exploitation software for monitoring and analysis, to be operated from a

Monitoring Center.

5.1.3 Legal Interception Standards. The system shall support lawful interception in accordance with relevant international standards and shall be capable of receiving digital information from multiple service providers, in compliance with applicable international legal standards and technical frameworks, including but not limited to ETSI, 3GPP, CALEA, and ATIS.

5.1.4 Target Configuration. The system shall support configuration of up to 1,500 targets using 3G, 4G, 5G, and future generation technologies, for voice, SMS text messages, MMS multimedia messages, and data communications.

5.1.5 Concurrent Call Recording. The system shall be capable of intercepting and recording two hundred (200) concurrent calls.

5.1.6 Server Requirements. The system shall operate with current-generation servers.

5.1.7 Data Storage. The system shall provide storage for all communications and information processed on the platform for a period of 365 days, using a Storage

Area Network (SAN) solution.

5.1.8 Provider Integration. The system shall be capable of interacting and integrating with other telecommunications providers, including concessionaires, Mobile

Virtual Network Operators (MVNOs), and providers of convergent services or other legal interception technologies, such as R2 MFC.

5.1.9 Scalability. The system shall be scalable to accommodate future requirements.

The platform shall support expansion of processing and storage capacity and the incorporation of new network elements and information sources.

5.2 The contractor shall provide active network components; provision of routers, switches, and firewalls to support the Digital Legal Interception System, including appropriate security mechanisms.

5.3 The contractor shall provide 140 workstations. Each workstation shall include: a desktop computer, latest -generation CPU, desktop computer with at least 32 GB RAM, a 512 GB solid-state drive (SSD), and an Intel® Core™ Ultra 5 235T processor (13 TOPS NPU, 14 cores, up to

5.0 GHz), 24-inch dual monitor, one Spanish-language keyboard, and one mouse. In addition, the contractor shall provide 200 high-fidelity wired headsets.

5.4 The contractor shall provide structured cabling installation from servers to rack. The contractor shall supply and provide installation of cabling for 140 workstation connections.

ADAPT Page | 4

5.5 The contractor shall provide evidence recording system: Provision of a system for recording evidence to disk (CD/DVD/BR). Contractor shall consider to include four tower units with three drives each, or a technically superior arrangement to meet this requirement.

5.6 The contractor shall provide all required perpetual licenses for the technological platform for legal interception of private communications, including operating systems, storage equipment, telecommunications, and security.

5.7 The contractor shall configure all hardware and software in accordance with the integrated system solution to be delivered.

5.8 The contractor shall perform implementation services such as supply, installation, configuration, commissioning, functional testing, and operation of the Legal Interception

Platform. The contractor shall provide continuous technical support, assistance with system configuration, and guidance during validation testing to ensure that the platform operates according to the established requirements. The contractor shall guarantee the operation of this platform between UCTC and various concessionaires.

5.8.1 The contractor shall perform connectivity tests with the concessionaires to establish and verify the interconnection of the Digital Legal Interception System with each concessionaire. This process shall include, but not be limited to, configuring connection parameters, verifying interoperability, validating data exchange, and conducting functional tests.

5.8.2 The contractor shall provide technical support on infrastructure matters in coordination with the technical teams of each operator. This support shall include analyzing connectivity requirements, defining interconnection parameters, reviewing the available network infrastructure, and assisting in configuring the elements necessary to establish secure and reliable communication between the systems. These activities shall ensure that integration with each concessionaire operates correctly and in accordance with the established requirements.

5.9 The Contractor shall acquire, ship, transport, deliver, and inventory all items to comply with the requirements listed in the Appendix A – Equipment and Software List with Training

Requirements to the location provided in Section 7.2, of this document. All items SHALL be new and meet or exceed the minimum specifications.

5.10 As part of project acceptance, the contractor is required to provide built documentation, configuration baselines, and complete administrative credential handover.

5.8 The Contractor shall conduct training listed in Appendix A – Equipment /Software List &

Training Requirements.

5.9 The Contractor must wait to receive INL written confirmation before delivering training.

5.10 NOTE: All participants must have current and valid vetting at the time of the training. The program will manage the vetting process for GoM participants. The Contractor shall receive the

ADAPT Page | 5 list of vetted participants prior to the start of training. Training is strictly prohibited for non-vetted participants.

5.11 Proposal Requirements: Implementation Plan and Technical Details

As part of the proposal, the contractor shall provide:

• A written Implementation and Installation Plan for the GOM-DIGITAL LEGAL

INTERCEPTION SYSTEM. The plan shall: (1) describe the installation approach, sequence of activities, dependencies, and expected installation timeline; (2) include a detailed list of all hardware, software, and network components; (3) provide timelines for the supply, installation, configuration, commissioning, and functional testing of the system to be delivered; (4) describe how the contractor will perform all necessary software and hardware adjustments for commissioning; (5) include a description of the database engine that will be used to store the application’s information, including version and key technical characteristics; and (6) include a description of the router(s) and firewall(s) that will be used as security mechanisms for connectivity with each

Concessionaire in the construction of the VPN, including main technical specifications and security capabilities.

• A detailed cost breakdown, at a minimum disaggregated into the following categories:

Hardware, software and training.

• Appendix A – Equipment and Software List with Training Requirements is provided as a baseline for ADAPT. The contractor shall validate delivery requirements and propose alternatives or improvements to its proposal.

6.0 WARRANTY, MAINTENANCE AND SUPPORT

6.1 In-Country Warranty

For all Digital Legal Interception System delivered under this request, the contractor shall provide a two (2) year in-country warranty valid and applicable in Mexico. The warranty period shall commence upon delivery and acceptance of each system by the Government of Mexico.

The contractor shall also provide maintenance and 24x7x365 mission‑critical technical support in Spanish for a period of two (2) years from delivery and acceptance.

6.2 Maintenance and Technical Support – General

The contractor shall provide maintenance and technical support in Mexico for all Digital Legal

Interception System delivered under this request to ensure their correct operation, availability, and performance.

6.3 Scope of Maintenance and Technical Support

Maintenance and technical support shall include, but not be limited to, the following:

• Continuous technical support 24 hours per day, 365 days per year (24x7x365) through a team of technical specialists and established support channels.

ADAPT Page | 6

• Specialized technical support to address and resolve incidents or inquiries related to system operation.

• Diagnosis and resolution of failures at the software level and in components associated with the system.

• Software updates and patches to keep the platform secure, stable, and aligned with manufacturer improvements.

• Technical advice and operational support to ensure correct system functioning.

• Assistance with configuration activities and minor adjustments necessary to maintain service continuity.

• Continuous follow‑up on reported incidents, prioritizing those that may affect system operation, with the goal of restoring service as quickly as possible and ensuring the availability and stability of the platform.

6.4 Designated Technical Support Team

The contractor shall provide a designated technical support team to ensure timely attention to and follow‑up on technical requirements, in order to maintain stable operation of the GOM-Digital

Legal Interception Systems delivered.

6.5 Proposal Requirement: Warranty, Maintenance, and Support Plan

As part of its proposal, the contractor shall include:

• A Warranty, Maintenance, and Support Plan that specifies at a minimum: The scope of the warranty, including covered items and exclusions; and specific response and resolution times for maintenance and technical support services.

7.0 PLACE OF PERFORMANCE AND DELIVERY

7.1 No item can be delivered at destination without previous authorization and coordination with

INL Mexico Logistics, and/or INL Program/GTM/COR. Contractor must wait to receive INL confirmation before delivering equipment. Once the Contractor gets written approval, a specific delivery date will be established. Any action taken from contractor without writing confirmation will be considered under clause 9 Nonpayment for unauthorized work.

7.2 All equipment/hardware under this contract shall be delivered to INL at INL warehouse in

Brownsville as follows:

INL Warehouse

225 South Vermillion Rd., Brownsville, TX., 78521

POC TBD

7.3 The contractor shall ensure all items are prepared for safe transportation once confirmation is received. The Contractor shall replace lost or damaged items during transportation and/or unloading.

7.4 Partial deliveries are not allowed. The contractor’s personnel must be present at the time of delivery to conduct the inventory of all hardware required for ADAPT project (listed in

Appendix A), in coordination and in presence of INL Logistics or INL COR/GTM/Program.

ADAPT Page | 7

7.5 All delivery information, including the packing list and a Technical Specifications/Data sheet of all equipment shall be forwarded to INL Program/COR/GTM and INL Mexico Logistics

(MexicoCityINLLogistics@state.gov) two (2) weeks in advance of delivery to the delivery location detailed in section 7.2. The packing list shall include but is not limited to: Item

Description, Name of Manufacturer, Model Number, Serial Numbers, Delivered Quantity, Unit

Price, Extended Price, and Warranty Expiration Date for all hardware. Upon final delivery at

Brownsville, the contractor shall provide detailed equipment specifications (including part numbers) with unit prices to INL Program/COR/GTM and GoM PoC for GoM inventory purposes.

7.6 NOTE: INL will support the GoM in importing all equipment into Mexico and will be responsible for transporting it to the end user, FGR/UCTC. Upon delivery to the final location, INL must document the corresponding hardware through the appropriate donation process. The contractor must wait no fewer than 7 working days and no more than 30 working days to receive written confirmation from INL that the equipment has been delivered and donated to the end user, before proceeding with the corresponding installation, testing, and final delivery of

ADAPT/ Digital Legal Interception System.

7.7. For the delivery of software and licenses, no transfer shall take place until approved by INL

Logistics and coordinated with the designated GoM point of contact. The contractor shall be able to transfer the licenses through a link for use by the GoM. Before installation at the final location, INL must complete and document the appropriate donation process for the corresponding software and licenses.

7.8 All labor under this contract, including installation, testing, training, and final delivery of the

ADAPT/Digital Legal Interception System, shall be performed and delivered at Mexico’s

Attorney General’s Office/Technical Control Unit (FGR/UCTC) in the following location:

FGR/UCTC

7.10 Once ADAPT/Digital Legal Interception System has been installed, the licenses registered, patches applied, network configuration established, and concessionaires integrated, the contractor shall conduct system testing in the presence of FGR/UCTC personnel. The contractor shall verify that all technical and performance requirements have been met and shall coordinate with the designated end user for formal acceptance and ongoing technical support.

7.11 The contractor shall provide user and administrator training to designated FGR/UCTC personnel prior to final acceptance. As part of the proposal, the contractor shall provide a detailed in-person training plan that includes curriculum for end users and administrators, training schedule and duration. See section 9.6

7.12 The contractor shall also provide all associated deliverables, including technical documentation, installation and configuration records, license information, and training materials in Spanish, to the designated end user and INL in accordance with the Deliverables 9.0 section of this PWS.

mailto:MexicoCityINLLogistics@state.gov

ADAPT Page | 8

8.0 PERIOD OF PERFORMANCE

8.2 The contractor shall complete delivery within 120 calendar days after contract award. This

120-day period includes all waiting time for importation and transportation conducted by INL and

GOM.

9.0 DELIVERABLES

Once awarded, the contractor shall arrange a kickoff meeting within ten (10) calendar days. This meeting shall include the Contracting Officer, the INL Contracting Officer’s Representative

(COR), the INL Government Technical Monitor (GTM), INL Logistics, the INL Program, and the

GoM. The purpose of the kickoff meeting is to establish points of contact. During this meeting, the contractor shall present a detailed schedule and timeline for all activities to be carried out under this PWS.

9.1 System Design and Configuration Documentation. The contractor shall provide detailed

System Design and Configuration Documentation, to include network diagrams, system architecture, configuration parameters, IP schemes, security configurations, and integration points with concessionaires.

9.2 Installation Completion Report. Upon completion of installation, the contractor shall provide an Installation Completion Report documenting all installed components (hardware and software), locations, serial numbers, configuration settings, and any deviations from the approved Implementation Plan.

9.3 License Inventory and Registration Report. The contractor shall provide a License

Inventory and Registration Report listing all software/licenses provided under this contract, including product names, versions, quantities, license keys, activation dates, expiration dates (if applicable), and the registration status for each license.

9.4 Warranty and Support Plan. The contractor shall provide a Warranty and Support Plan describing warranty coverage, duration, response times, escalation procedures, and points of contact for technical support, including procedures for reporting and resolving incidents and defects.

9.5 Operations and Maintenance Manual. The contractor shall provide an Operations and

Maintenance Manual that includes standard operating procedures, backup and restore procedures, routine maintenance tasks, patch management procedures, and troubleshooting guides.

9.6 Training Materials and Attendance Report. The contractor shall provide training materials in Spanish (slides, manuals, job aids) for end user and administrator training, and an

Attendance Report listing all FGR/UCTC and GoM personnel trained, training dates, and training topics covered.

ADAPT Page | 9

9.7 Test Plan and Test Results Report. The contractor shall provide a Test Plan outlining functional, performance, and integration tests to be conducted. After testing, the contractor shall provide a Test Results Report documenting test procedures, results, identified issues, and corrective actions taken.

9.8 Final Acceptance Package. The contractor shall provide a Final Acceptance Package, including:

✓ Signed installation and testing documentation;

✓ Confirmation that all requirements have been met;

✓ Confirmation that licenses are active and registered;

✓ Confirmation of warranty start dates; and

✓ A proposed Final Acceptance Certificate for review and signature by the

Government of Mexico.

Note: Any original hard copy available shall be delivered to the GOM.

Table One – Deliverables List

Item

Language Description

Time

Deliver To

D1

System Design and

Configuration

Documentation.

Spanish/

English Digital

Upon completion

GOM

INL COR/GTM

D2 Installation

Completion Report.

Spanish/

English Digital

Upon completion

GOM

INL COR/GTM

D3

License Inventory and Registration

Report.

Spanish/

English Digital

Upon completion

GOM

INL COR/GTM

D4 Warranty and

Support Plan.

Spanish/

English Digital

Upon completion

GOM

INL COR/GTM

D5 Operations and

Maintenance Manual

Spanish/

English Digital

Upon completion

GOM

INL COR/GTM

D6

Training Materials and Attendance

Report

Spanish/

English Digital

Upon completion

GOM

INL COR/GTM

D7 Test Plan and Test

Results Report.

Spanish/

English Digital

GOM

INL COR/GTM

D8 Final Acceptance

Package.

Spanish/

English Digital

GOM

INL COR/GTM

10. QUALITY ASSURANCE PLAN

As part of the proposal the contractor shall submit a Quality Assurance Plan that includes:

• Performance metrics – Specific, measurable performance standards for system uptime, response time, data processing capacity, and report generation

ADAPT Page | 10

• Testing protocols – Detailed functional, integration, and user acceptance testing procedures

• Acceptance criteria – Clear criteria for system acceptance at each phase (installation, commissioning, go-live)

• Issue resolution procedures – Process for identifying, documenting, and resolving defects or performance issues

• Compliance verification – Methods for verifying compliance with GOM technical requirements and legal standards for evidence handling

• Monitoring and reporting – Ongoing system performance monitoring and regular reporting to INL and GOM stakeholders

11. NONPAYMENT FOR UNAUTHORIZED WORK

No payments will be made for any unauthorized supplies or services or for any unauthorized changes to the work specified herein. This includes any services performed by the Contractor of his own volition or at the request of an individual other than a duly appointed CO.

Only a duly appointed CO is authorized to change the specifications, terms, and/or conditions of this task / delivery order.

ADAPT Page | 11

Appendix A

Equipment/Software List with Training Requirements

End User: FGR/UCTC

a) Intercept Software, Hardware, and Training Requirements

Line

Qty Unit Item Description Type

1 1 Lot PLX SOFTWARE LICENSE - INTERCEPT

EDITION (PHONE). Intercept, analyze, and map real-time telco pen register data. Autoload, analyze, and map CDRs, cell tower data, and cell phone forensics data. Includes:

140 PLX licenses

1500 Target licenses

1 Oracle Instance for 100

140 Cellphone Forensics

License

2 1 Lot Last Generation HARDWARE

1 PLX server

2 Recording servers - Quad E1 Cards

1 DG Server

2 AD Servers

1 SAN

2 25G Switch

1 1G Switch Servers

140 Workstations (WS (dual 24” Monitors), OS

(Spanish), Office (Spanish), A/V, Netop, Keyboard

(Spanish), Headphones (Wired), Pedals.

1 Rack

4 Printers

4 BDRs

4 Rimages

8 Rimage Media

1 Time Server

1 VPN

1 Misc Cabling

Hardware

3 1 Lot 3 day PenLink basic training class for up to 140 end users (no more than 30 people per class session) to be delivered in person. 5 Classes

Training

4 1 Lot 2 day Penlink Administrator training for up to

10 participants. 1 Class

Training

5 1 Lot PBX System Hardware

ADAPT Page | 12

b) Analysis Licenses and Training Requirements

Line

Qty Unit Item Description Type

6 200 Each PLX SOFTWARE LICENSE - PROFESSIONAL

EDITION (PHONE)

Autoload, analyze, and map CDRs, cell tower data, and cell phone forensics data.

Software

7 200 Each PLX SOFTWARE LICENSE - SEARCH

WARRANT EDITION (IP) to be combined with

PROFESSIONAL or INTERCEPT EDITION

(TELEPHONE)

Autoload and analyze historical internet protocol data from social media, email, and other internet sources.

Software

8 200 Each CELL PHONE FORENSICS FOR PLX

SOFTWARE LICENSE - PROFESSIONAL

EDITION (TELEPHONE)

Autoload and analyze cell phone forensic data.

Software

9 200 Each PEN-PROXY FOR PLX SOFTWARE LICENSE

- PROFESSIONAL EDITION

(TELEPHONE)

Connect to third-party data providers.

Software

10 200 Each PLX CONNECT (Search/Participate) - Tier 1

(Subscription)

(1) Connection, Search and Participate

Software

11 1 Lot Training class for up to 200 end users (no more than 30 students per class session) to be delivered in person. 7 classes.

Training

All items SHALL be new and meet or exceed the minimum specifications.

All the consumables (disks/Blu-rays) required for this system must be available in Mexico so that the Government of Mexico can purchase them independently.