Mobile Forensic Distributed Solution RFI

The Federal Bureau of Investigation's Operational Technology Division is seeking a Mobile Forensic Distributed Solution that enables forensic mobile device extraction capabilities across the FBI's 400+ physical locations, including field offices, laboratories, resident agencies, and overseas deployments. The solution must support approximately 1,000 trained users with concurrent usage of approximately 300 licenses or devices, and should allow users to "check out" virtual licenses from a central management system for on-demand deployment rather than requiring permanent equipment and license purchases at each location. Key technical requirements include support for unlocking locked devices, full file system extraction for Android and iOS devices in both After First Unlock (AFU) and Before First Unlock (BFU) states, keystore and keychain decryption, offline operation, Section 508 compliance, and compatibility with non-proprietary COTS parsing tools. The Government is evaluating all available contracting vehicles including GSA, NASA SEWP V, and other GWACs, with a preference for base and option contract structures. Critical deadlines include March 9, 2026 for submission of questions using the RFI Question Template (with government responses provided by March 16, 2026) and March 30, 2026 at 12:00 PM Eastern Time for submission of complete RFI responses, limited to 15 pages and submitted to tbcutright@fbi.gov.

No set-aside designations have been applied to this procurement, and no incumbent contractor or current award value has been identified in the pre-solicitation notice. The RFI responses will inform the development of a formal solicitation anticipated for Fiscal Year 2027, when the capability is expected to become operational. The Government is open to flexible pricing models including enterprise, subscription, pooled licensing, and per-seat options, but explicitly opposes per-device licensing given the infrequent usage patterns at many remote locations. Solutions with open standards and published specifications are preferred, though industry-adopted standards such as Cellebrite's UFDR format are acceptable. The solution must function in both Azure Government cloud and on-premises environments in classified and unclassified settings without requiring direct internet connectivity, and must support encrypted connections, LDAP or Azure AD compatibility, and managed software updates with centralized license management.