RFI_DoD SAFE Modernization_FINAL.docx

REQUEST FOR INFORMATION (RFI)

Defense Information Systems Agency (DISA), Services Program Executive Office (SD) is modernizing a file transfer system. The modernized solution will update the Department of Defense (DoD) Secure Access File Exchange (SAFE). DoD SAFE is a DoD Common Access Card (CAC)-enabled, DISA enterprise secure file exchange platform hosted on Non-classified Internet Protocol Router Network (NIPRNet) that is accessible via NIPRNet and the Secret Internet Protocol Router Network (SIPRNet).

Current challenges include: performance limitations during peak use, security vulnerabilities due to weak authentication, inadequate data loss prevention, restricted integration with external systems, and usability constraints from file size limits and inflexible retention policies.

The new solution should:

· Enhance Scalability: Ensure the platform can handle fluctuating demands automatically.

· Strengthen Security: Implement robust security measures like multi-factor authentication and data loss prevention to protect sensitive information.

· Improve Accessibility: Provide secure access options for users outside of the DoD.

· Increase File Size Capacity: Support larger file transfers, ideally reaching 40GB.

· Empower User Control: Give users the ability to customize data retention policies for their uploads.

THIS IS A RFI NOTICE ONLY. THIS IS NOT A REQUEST FOR PROPOSALS (RFP). NO SOLICITATION IS AVAILABLE AT THIS TIME.

1. Overview/Purpose/Description of Procurement:

The DoD SAFE system facilitates the secure transfer of files for authorized users, including CAC holders and guest users with limited access privileges. These secure file transfer capabilities enable the expedited delivery of essential data to mission partners both within and external to the DoD. The implementation of DoD SAFE mitigates the risks, costs, and logistical delays associated with the physical transmission of sensitive documentation.

DoD SAFE enables secure file sharing and transfer through its core and supporting components. Users interact directly with the core components, while the supporting components handle access, control, administration, configuration, security, and troubleshooting.

DoD SAFE is comprised of three main functional areas. It provides file sharing capabilities via a web-based interface client, file sharing/transfer server, file storage server, and database logging server. It utilizes Network Operations (NetOps) tools and services for software provisioning, application deployment, analytics, configuration management, and a central dashboard. Robust access control is maintained through identity and access management systems and access control gateways.

2. Scope of Effort

DoD SAFE currently supports 1.5 million users globally, providing essential file transfer tools to DoD personnel in the Contiguous United States and abroad, as well as to internal and external mission partners. The scope of this modernization effort encompasses addressing limitations in scalability, security, and usability through architectural changes, enhanced security features, improved data management, and expanded user access options. The effort spans across file sharing, network operations, and access control functionalities. Please see the required technical characteristics in more detail below.

3. Solution / Information Requested:

The Government seeks a solution to meet the attached technical requirements while addressing the challenges listed above.

Please provide a white paper with your solution that addresses the following challenges while complying with the attached technical requirements:

1. Enhances Scalability: Ensure the platform can handle fluctuating demands automatically.

2. Strengthens Security: Implement robust security measures like multi-factor authentication and data loss prevention to protect sensitive information.

3. Improves Accessibility: Provide secure access options for users outside of the DoD.

4. Increases File Size Capacity: Support larger file transfers, ideally reaching 40GB.

5. Empowers User Control: Give users the ability to customize data retention policies for their uploads.

RESPONSE GUIDELINES:

Interested parties are requested to respond to this RFI with a white paper. Submissions cannot exceed 14 pages, single spaced, 12-point type with at least one-inch margins on 8 1/2” X 11” page size. The response should not exceed a 5 MB e-mail limit for all items associated with the RFI response. Oral communications are not permissible. SAM.gov will be the sole repository for all information related to this RFI.

Submission Details. Responses shall include:

1. Business name and address

2. Name of company representative and their business title

3. Company Business Size and Small Business Socio-economic status (if small)

4. UEI and CAGE Code

5. White paper should include Rough Order of Magnitude (ROM) pricing information for executing the modernization requirements outlined in Technical Characteristics attachment.

Companies who wish to respond to this RFI should send responses via email no later than January 13, 2026, at 4 PM eastern time to korrina.l.taitano.civ@mail.mil and elizabeth.a.bono.civ@mail.mil.

INDUSTRY DISCUSSIONS:

DISA representatives may choose to meet with potential offerors and hold one-on-one discussions. Such discussions would only be intended to obtain further clarification of potential capability to meet the requirements, including any development and certification risks.

QUESTIONS:

Questions regarding this announcement shall be submitted in writing by e-mail to korrina.l.taitano.civ@mail.mil and elizabeth.a.bono.civ@mail.mil. Verbal questions will NOT be accepted. Answers to questions will be posted to SAM.gov. The Government does not guarantee that questions received after January 6, 2026, at 4 PM eastern time will be answered. The Government will not reimburse companies for any costs associated with the submissions of their responses.

DISCLAIMER:

This RFI is not a Request for Proposal (RFP) and is not to be construed as a commitment by the Government to issue a solicitation or ultimately award a contract. Responses will not be considered as proposals nor will any award be made as a result of this synopsis.

All information contained in the RFI is preliminary as well as subject to modification and is in no way binding on the Government. FAR clause 52.215-3, “Request for Information or Solicitation for Planning Purposes”, is incorporated by reference in this RFI. The Government does not intend to pay for information received in response to this RFI. Responders to this invitation are solely responsible for all expenses associated with responding to this RFI. This RFI will be the basis for collecting information on capabilities available. This RFI is issued solely for information and planning purposes. Proprietary information and trade secrets, if any, must be clearly marked on all materials. All information received in this RFI that is marked “Proprietary” will be handled accordingly. Please be advised that all submissions become Government property and will not be returned nor will receipt be confirmed. In accordance with FAR 15.201(e), responses to this RFI are not offers and cannot be accepted by the Government to form a binding contract.

Page | 2