Request For Information - 3rd Party Airline Travel Information

The Department of Homeland Security United States Secret Service is seeking information on existing capabilities or the feasibility of developing an online investigative searching tool or application that would function as an intermediary between airlines and third-party travel agencies such as Orbitz, Expedia, and Travelocity. This Request for Information (RFI) number 70US0926ES0001 is designed to identify vendors who possess established data-sharing agreements with airlines and online travel agencies and maintain existing databases currently used for law enforcement purposes. The tool must enable search functionality for airline ticket information including passenger names, ticket numbers, departure and destination airports, and payment methods, with results delivered through secure API-driven or portal-based solutions rather than encrypted email. Vendors must demonstrate compliance with the Privacy Act of 1974, applicable DHS/USSS law enforcement authorities, and implement FIPS 140-2/140-3 encryption standards. The deadline for submitting questions was March 2, 2026 at 9:00 a.m. EST, with all RFI responses originally due by 4:00 p.m. EST on March 5, 2026, and the notice was amended on March 6, 2026 with additional questions and answers provided.

This procurement carries no set-aside designations and does not identify any current incumbents or contractors. The RFI explicitly states that this is for planning and market research purposes only and does not constitute an obligation, solicitation, or guarantee of future contract award, with the Government declining to pay for responses or demonstrations. No specific budget range or award value has been disclosed in this pre-solicitation notice. Qualified vendors must provide near-real-time access to travel data covering major U.S. and international carriers with fuzzy matching and alias searching capabilities, deliver results via vendor-hosted solutions within five working days for standard requests and eight hours for exigent law enforcement requests available 24/7, and ensure all delivered data resides within Government-controlled infrastructure to maintain evidentiary chain-of-custody requirements. Responses must include company name, GSA Schedule Contract Number, Company Unique Entity Identifier (UEI), point of contact information, business size classification, and applicable NAICS codes.