RFI 26-002 - eDiscovery.pdf

Request For Information

RFI # 26-002

Modern eDiscovery Platform with Secure AI Supported Capabilities

James

Request for Information Number: 26-002 RFI Issued: 7/22/2026

RFI Description:

Modern eDiscovery Platform with Secure AI Supported Capabilities

Contract Period:

Not Applicable

Due Dates and Times (ET):

Issuance of Request for Information: 7/22/2026 Submission of Questions: 7/24/2026 OAG Issuance of Answers: 7/31/2026 RFI Responses Due Date: 8/11/2026

Regions of Service:

Provided in New York State (Albany Capital Region).

In compliance with Procurement Lobbying Law, contacting anyone other than designated herein may result in rejection of responses.

Primary Designated Contact:

Ashley Brown Contract Management Specialist Trainee 2 Budget and Fiscal Management Bureau Office of the New York Attorney General State Capitol, Albany, New York 12224-0341 Telephone: (518) 776-2168 E-Mail: purchase@ag.ny.gov

In the event the Primary designated contact is not available:

Alternate Designated Contact:

Christopher Reksc Contract Management Specialist 3 Budget and Fiscal Management Bureau Office of the New York Attorney General State Capitol, Albany, New York 12224-0341 Telephone: (518) 776-2138 E-Mail: purchase@ag.ny.gov

Questions regarding this announcement shall be directed to the person on the cover page via email only and shall adhere to the above deadline. Verbal questions will NOT be accepted. THIS IS A REQUEST FOR INFORMATION (RFI) ONLY. This RFI is issued solely for information and planning purposes, and it does not constitute a Request for Proposal (RFP) or a promise to issue an RFP in the future. This request for information does not commit the OAG to contract for any service whatsoever. Further, the OAG is not seeking proposals and will not accept unsolicited submissions. Vendors are advised that OAG will not pay for any information or administrative costs incurred in response to this RFI; all costs associated with responding to this RFI will be solely at the interested party's expense. Not responding to this RFI does not preclude participation in any future RFP, if any is issued. If a solicitation is released, it will be posted on the New York State Contract Reporter website and the OAG website. It is the responsibility of the potential responders to monitor these sites for additional information about this requirement. The OAG encourages responders to register with the New York State Contract Reporter (NYSCR) at https://www.nyscr.ny.gov/agency/index.com to receive notifications about this Solicitation. Navigate to the "I want to find contracts to bid on" page to register for your free account. To receive e-mail notifications regarding updates to the content or status of a particular ad, you must “bookmark the ad” on the upper right-hand side of the ad, then return to your Account, view your list of bookmarked ads, and then select the “send me notification updates” option listed to the right of the ad. Any updates to the RFI documents will also be posted and released through the NYSCR. If you do not opt-in to receive notification updates regarding a specific ad, you will not receive email notifications regarding updates, including email notifications regarding the questions and answers, documents, and updates to Solicitation documents.

mailto:purchase@ag.ny.gov mailto:purchase@ag.ny.gov https://www.nyscr.ny.gov/agency/index.cfm

Table of Contents

1. Agency Background

2. Purpose of this Request for Information (RFI)

3. Requested Information from Respondents

3.1 Platform Functional Capabilities

3.2 Secure AI Supported Capabilities

3.3 Security, Privacy & Compliance

3.4 Administration & Governance

3.5 Integration Requirements

3.6 Accessibility & Usability

3.7 Implementation & Support

3.8 Cost-Structure (Non-Binding)

4. RFI Questions and RFI Response Submission

4.1 RFI Questions/Inquiries and/or Clarifications

4.2 RFI Response Format and Content

5. Demonstrations/Presentations

1. Agency Background As head of the Department of Law, the Attorney General is both the "People's Lawyer" and the State's chief legal officer. As the "People's Lawyer," the Attorney General serves as the guardian of the legal rights of the citizens of New York, its organizations, and its natural resources. In fulfilling the duties of the State's chief legal counsel, the Attorney General advises the Executive branch of State government and defends actions and proceedings on behalf of the State.

The Office of the Attorney General (OAG) serves all New Yorkers in numerous matters affecting their daily lives. The Attorney General's Office is charged with the statutory and common law powers to protect consumers and investors, charitable donors, the public health and environment, civil rights, and the rights of wage-earners and businesses across the State.

The Attorney General's authority also includes the activities and investigations of the State Organized Crime Task Force and Medicaid Fraud Control Unit. While the Attorney General acts independently of the Governor, the Governor or a state agency may request the Attorney General to undertake specific criminal investigations and prosecutions.

The legal functions of the Department of Law are divided primarily into five major divisions: Appeals and Opinions, State Counsel, Criminal Justice, Economic Justice, and Social Justice.

Over 2,000 employees, including over 700 attorneys and forensic accountants, legal assistants, scientists, investigators, and support staff, serve in the Office of the Attorney General in many locations across New York State.

2. Purpose of this Request for Information (RFI) The Office of the New York State Attorney General (OAG) is seeking information from qualified vendors who can:

1. Obtain vendor input on modern, secure eDiscovery platforms that support intake, processing, review, analytics, production, and FOIL/public records workflows.

2. Provide solutions that incorporate advanced, secure AI capabilities in alignment with New York State technology, security, privacy, procurement, and accessibility standards.

The primary objectives are to:

• Understand available technologies supporting civil, criminal, administrative, and regulatory use cases.

• Evaluate secure AI enabled capabilities suitable for privileged and sensitive legal material.

• Understand integration capabilities with the OAG’s enterprise systems and data governance requirements.

• Inform future requirements, specifications, and a potential competitive solicitation.

The information received from this RFI may be used to issue a Request for Proposal (RFP) to procure a cloud-based EAM solution, including implementation services. This issuance does not constitute a commitment to issue a bid, award a contract, or pay any costs incurred in preparation for a response to this request. The State expects a formal Restricted Period to be announced in the Contract Reporter upon determining that procurement(s) will result from this RFI.

3. Requested Information from Respondents

3.1 Platform Functional Capabilities

Please describe capabilities across the EDRM lifecycle including:

• Ingestion and processing of large complex data sets including but not limited to email, collaborative content, chat messages, cloud repositories, file systems, mobile/cloud forensic sources, media files, and structured datasets.

• Review features (search, filtering, deduplication, near duplicate detection, threading, clustering, concept search, entity identification).

• Production features (Bates stamping, redaction including AI assisted redaction, export in EDRM formats, external secure sharing).

• FOIL/public records workflows: high-volume review, automated PII/sensitive data detection, bulk redaction, audit logs.

• Chain of custody, audit trails, and litigation hold support.

3.2 Secure AI Supported Capabilities

OAG requires detailed information on:

• Full description of AI models used (classification, TAR/CAL, summarization, transcription, entity detection, image/video analysis).

• Whether vendor or third-party AI models train on customer content by default; opt-in/opt-out controls.

• Data isolation, dataflow diagrams, and content handling.

• Explainability, transparency, and auditability features.

• On prem, sovereign cloud, private tenant, or hybrid deployment options.

• Alignment with NYS privacy, security, confidentiality, and litigation hold requirements.

3.3 Security, Privacy & Compliance

Please describe:

• FedRAMP, SOC 2, CJIS, ISO 27001, NIST 800-53 alignment.

• Encryption, access control, MFA, SSO/SAML/SCIM integration.

• Chain of custody, logging, audit trails, and export controls.

• Malware scanning for file ingestion

• Third-party data sharing/access

• Data retention, destruction guarantees, and disaster recovery/business continuity

3.4 Administration & Governance

• Administrative roles, permissions, workspace isolation, and multi-tenant handling,

• Policy management for review workflows, tagging, redaction, privilege review, and production standards

• Reporting, audit logging, dashboards, metrics.

• Support for large distributed legal teams and external guest reviewers.

3.5 Integration Requirements

Vendors should outline integration support with:

• Microsoft 365 (Exchange, SharePoint/Purview, OneDrive, Teams) in a GCC-moderate G5 environment.

• Case management systems, ticketing systems, and archives.

• APIs/SDKs, event-based triggers, ingestion automation.

• Identity governance capabilities consistent with Identity Governance RFP requirements and discussions (e.g., integration with Entra ID, provisioning/deprovisioning).

3.6 Accessibility & Usability

• Accessibility compliance posture (WCAG 2.1, Section 508).

• Usability for attorneys, investigators, records officers, and technical personnel.

3.7 Implementation & Support

Provide information on:

• Deployment models; configuration and migration strategies.

• Service structure, support tiers, SLAs.

• Training and change management for large, distributed offices.

• Professional services options and estimated effort ranges.

3.8 Cost-Structure (Non-Binding)

The OAG seeks a high-level overview of typical pricing models, such as:

• User based, data volume, processing based, module based, or hybrid licensing.

• Estimated cost ranges, 5-year TCO and government procurement vehicles available.

• Professional services, support, hosting, and optional, included AI modules.

(Do not provide formal pricing or binding quotes.)

4. RFI Questions and RFI Response Submission

4.1 RFI Questions/Inquiries and/or Clarifications

All questions/inquiries and clarifications concerning this RFI shall be addressed to the Office of the Attorney General (OAG) designated contact. All questions should be submitted by email to purchase@ag.ny.gov with the subject line: “RFI 26-002 - Q&A Modern eDiscovery Platform – [Vendor Name]." Cite the RFI section and paragraph number the question relates to.

Questions/inquiries and requests for clarification are only accepted via email.

Official answers to questions will be provided via an addendum posted to the OAG website:

(https://ag.ny.gov/budget-and-fiscal-management-bureau-procurement) and the NYS Contract Reporter: (https://www.nyscr.ny.gov/agency/index.cfm).

The deadline for submitting questions will be as stated on the cover page of this document.

4.2 RFI Response Format and Content

Responses should be no longer than twenty-five (25) pages in either Microsoft Word or Adobe Acrobat formats. Responses must be submitted via email to purchase@ag.ny.gov with the subject line “RFI 26-002 - Response to Modern eDiscovery Platform – [Vendor Name].” All materials shall be attached, clearly labeled, and sent via email in a manner to allow for ease of separation in reviewing responses. The OAG is interested in responses from vendors who currently provide Modern eDiscovery Platform with Secure AI Supported Capabilities.

The OAG will not acknowledge receiving recommendations delivered by mail, fax, or in person.

The following information should be included for a complete response:

https://ag.ny.gov/budget-and-fiscal-management-bureau-procurement https://www.nyscr.ny.gov/agency/index.cfm

4.2.1 Cover Letter

• Company name, address, primary contact, and signature

4.2.2 Company Overview

• Experience with government, law enforcement, legal, regulatory agencies

4.2.3 Technical Response

• Responses to Sections 3.1-3.8

4.2.4 Security & Compliance Documentation

• Summaries acceptable for RFI stage

4.2.5 References

• Government or public sector clients (if permitted)

4.2.6 Optional Attachments

• Product sheets, architecture diagrams, sample redaction or AI audit reports

5. Demonstrations/Presentations OAG representatives may request that vendors provide a presentation and demonstration of their solution for further clarification of their response or to define their potential capability further to meet the OAG requirements. However, the OAG may move forward with a solicitation without demonstrations or presentations.

Space below intentionally left blank.