SRD License Key System

The National Institute of Standards and Technology seeks a Standard Reference Data License Key System via request for quotation with a total small business set-aside, with quotations due September 15 at 10:00 AM EST (moved from September 11) and questions due September 8. NIST is establishing its first-ever licensing and entitlement management system to manage approximately 80 SRD products, with initial priority on roughly 20 paid products spanning approximately 100 SKUs and multiple licensing modes; this is a new initiative, not a replacement platform.

Place of performance is Gaithersburg, Maryland. The base contract runs 12 months from award with four optional one-year continuation periods through FY30. The system must achieve FedRAMP Moderate-level authorization or equivalent Federal Agency ATO and deliver 17 technical specifications including Salesforce API integration using a NIST-provided sandbox, unique license key generation for multiple formats, encryption per NIST SP 800-52, geographic fencing to block prohibited regions, network-based activation heartbeat checks at minimum every six months, Active Directory and PIV authentication integration for backend administration, and API mechanisms for distributor license issuance and sales tracking. Critical security patches must be deployed within 30 days of discovery. The contractor must perform remote installation and configuration, train up to 20 NIST personnel on backend administration and Salesforce integration, and complete NIST functional testing for one week. The system must not store customer identifying information and must support flexible workflows for Tier 3 free products. NAICS code is 513210 (Software Publishers); PSC is 7A21 (IT and Telecom—Business Application Software, Perpetual License). Evaluation criteria are technical compliance with the Statement of Work, past performance using up to three recent relevant references, and price; award goes to the responsible quoter providing best value, not the lowest price alone.