Sole Source - Bi2 Technologies, LLC

Statement of Objectives (SOO)

This document outlines the U.S. Immigration and Customs Enforcement's (ICE) requirement for services to provide immediate access to over 5.025 million booking records across the United States via a secure, encrypted, real-time national criminal justice data sharing network. This network utilizes advanced iris biometric technology for rapid authentication of subject identities and supports Presidential Proclamations and Executive Orders related to border security by enhancing ICE's capability to identify individuals encountered during operations.

• The core of the requirement is access to Bi2 Technologies' Inmate Recognition and Identification System (IRIS) and Mobile Offender Recognition & Identification System (MORIS).

• IRIS is described as the nation's only secure, encrypted, real-time national criminal justice data sharing network based on iris biometric technology.

• MORIS works in conjunction with IRIS, allowing law enforcement to authenticate identities and access information within the IRIS database.

• The solution will grant ICE access to over 5 million booking records for over 1.5 million unique individuals enrolled by more than 247 agencies.

• Annual access license for unlimited enterprise licenses for a 12-month period to the IRIS and MORIS solutions.

• Supply of 1,570 IRIS biometric devices for deployment nationwide within 30 days of award.

• Maintenance of operational capability of these systems throughout the award duration.

• Support for identification/verification against images from ISO 19794-6 and ISO 29794-6 compliant devices.

• Immediate 24/7/365 electronic access to IRIS database records on agnostic platforms (Microsoft, Apple, Android) for unlimited users and queries/bulk downloads.

• Provision of complete identity and booking records upon authenticated identities.

• Immediate 24/7/365 mobile access via MORIS on any platform.

• Support to configure recurring real-time alerts based on defined criteria.

• Premium help desk support, annual maintenance plan with patch/emergency fixes, and annual software upgrades.

• Preservation of monitoring/packet capture data for at least 180 days.

• Provision of a Draft Security Plan as part of the proposal, including a plan to work towards FedRamp certification.

• Adherence to ICE Systems Lifecycle Management process.

• Maintenance of a test environment for ICE's Test and Evaluation Team.

• The mobile application must identify and safeguard Law Enforcement Sensitive (LES) and Personally Identifiable Information (PII).

• Compliance with specified security standards, including data encryption, authentication, authorization, and access controls.

• Integration with Role-Based Access Controls (RBAC), ICE Identity and Access Management (IAM) systems, and Multi-Factor Authentication (MFA).

• Undergoing security vulnerability scanning and addressing vulnerabilities.

• Compliance with federal laws and regulations related to data security, privacy, accessibility, and transparency.

• Compatibility with all mobile devices and operating systems within the ICE enterprise.

• Compliance with ICE Mobile Device Management and Mobile Application Management frameworks.

• Base period of performance: 12 months.

• Licenses will be accessible nationwide, ensuring seamless integration and availability across all ICE locations.

• The contractor shall not use agency data for its own purposes or share it with other entities.

• Images submitted by ICE will be immediately deleted after processing for potential matches.

• Data from ICE queries will not be used for commercial purposes.

• Users must provide affirmative consent to rules of behavior upon logon.

• License access instructions and keys to be delivered within 20 calendar days of award.

• Program Manager: Erica D. Steele (erica.d.steele@ice.dhs.gov)

• Contracting Officer: Miranda Collins (miranda.collins@ice.dhs.gov)

• Contract Specialist: Michelle L. Taylor (michelle.l.taylor@ice.dhs.gov)

• Alternate Contracting Officer Representative: Lakisha W. Mack (lakisha.w.mack@ice.dhs.gov)

• Alternate Contracting Officer Representative: Jimmy Hackett (jimmy.hackett@ice.dhs.gov)

• Vendors must register on www.IPP.gov to submit invoices and receive payments.

Solicitation / RFP / RFQ

This document is a solicitation for a Firm-Fixed-Price (FFP) sole source contract with Bi2 Technologies, LLC. It procures licenses and support for the Inmate Identification and Recognition System (I.R.I.S.TM) and the Mobile Offender Recognition & Information (MORISTM) systems for the Immigration and Customs Enforcement (ICE) Enforcement and Removal Operations (ERO).

• Item 0001: Inmate Recognition and Identification System (IRIS) licenses.

• Item 0002: Mobile Offender Recognition & Identification System (MORIS) licenses.

• Item 0003: A 12-month enterprise license providing unlimited user access and search capabilities for the IRIS database using MORIS or IRIS software.

• Item 0004: Up to three (3) on-site "Train the Trainer" sessions.

• Item 0005: 24/7/365 telephone and online U.S. support by technical staff, including patch and emergency fixes, and periodic/annual software upgrades.

• Item 0006: A one-year (12-month) warranty on all hardware, IRIS and MORIS software, mounting devices, and cables, including 24-hour shipment of replacement hardware.

• Contract Type: Firm-Fixed-Price (FFP)

• Period of Performance: 06/01/2026 to 05/31/2027

• Solicitation Number: 70CTD026R00000007

• NAICS Code: 541519

• Offer Due Date: 05/12/2026 at 0900 EST.

• Invoice Instructions: Beginning December 9, 2024, all invoicing procedures will be conducted via www.IPP.gov. Vendors must be registered on www.IPP.gov to receive payment. Invoices will not be accepted by any other method. Specific invoice requirements are detailed, including matching information in SAM, providing UEI numbers, invoice dates/numbers, contract details, item descriptions, shipping information, discount terms, and remit-to address.

• This acquisition is set aside 100.00% for Small Business.

• The solicitation incorporates FAR 52.212-1, 52.212-3, and 52.212-4 by reference. FAR 52.212-5 is attached.

• The contractor must be active in the System for Award Management (SAM.gov) for invoice processing.

Form / Attachment / Pricing Sheet

This document, "Attachment D: Terms and Conditions," outlines the contractual terms and conditions that will govern any resulting contract. It incorporates numerous Federal Acquisition Regulation (FAR) clauses by reference, as well as some Homeland Security Acquisition Regulation (HSAR) clauses.

This document is extensive and details various clauses related to:

• FAR Clauses Incorporated by Reference: A comprehensive list of FAR clauses covering topics such as restrictions on subcontractor sales, contractor code of business ethics, whistleblower rights, system for award management, subcontracting limitations, labor standards, small business concerns, and more. Many clauses are listed with specific dates and deviations.
• FAR Clauses Incorporated in Full Text: Includes clauses such as "Solicitation Provisions Incorporated by Reference," "Authorized Deviations in Provisions," "Prohibition on Contracting With Inverted Domestic Corporations-Representation," and "Information Regarding Responsibility Matters."
• Homeland Security Acquisition Regulation (HSAR) Clauses: Includes clauses related to contractor disclosure of violations, advertisements, publicizing awards, contractor employee access, and safeguarding of controlled unclassified information.
• Definitions: Provides definitions for numerous terms relevant to the contract, including "Administrative proceeding," "Covered article," "Critical technology," "FASCSA order," "Intelligence community," "Kaspersky Lab-covered article," "National security system," and "Sensitive compartmented information."
• Prohibitions and Exclusions: Details restrictions on providing or using specific products or services, including prohibitions related to covered telecommunications equipment, Kaspersky Lab-covered articles, FASC-prohibited unmanned aircraft systems, and transactions with certain foreign entities (e.g., Iran, Sudan).
• Security Requirements: Outlines requirements for information technology security awareness training, rules of behavior, and safeguarding of controlled unclassified information (CUI).

This document is critical for bidders as it defines the legal and contractual obligations that will apply if awarded the contract. Bidders must review these terms and conditions carefully to understand their responsibilities, potential restrictions, and compliance requirements. Failure to comply with these terms can have significant consequences. Specific attention should be paid to clauses related to representations, certifications, security, and any prohibitions or exclusions that may impact their ability to perform the contract.

Form / Attachment / Pricing Sheet

This document, "Attachment C: Performance Work Statement Addendum," provides supplementary requirements and language to be incorporated into a contract. It details specific clauses related to privacy, data management, Section 508 accessibility, and cybersecurity.

• Privacy Requirements: Outlines limitations on accessing sensitive information, prohibitions on performing work outside government facilities, requirements for subcontractor approval, and separation checklists for employees. It also details contractor responsibilities regarding privacy leads and compliance with the Privacy Act of 1974.
• OCIO/Data Management Unit (DMU) - Data Ownership: Specifies that all program data is government-owned and must be accessible within 24 hours. It defines "program data" and "associated with this acquisition," and outlines minimum data access capabilities, including machine-readable formats and clear data element definitions. Enhanced access capabilities via APIs are preferred.
• Section 508 Language: Mandates compliance with Section 508 of the Rehabilitation Act for all Information and Communications Technology (ICT) products, services, and technology. This includes requirements for accessibility conformance reports (ACRs) using the Voluntary Product Accessibility Template (VPAT).
• General Cybersecurity Contract Requirements: Addresses Supply Chain Risk Management, requiring contractors to provide manufacturer and component details, maintain a risk management plan, and ensure the use of new Original Equipment Manufacturer (OEM) parts. It also covers transit, storage, and delivery procedures, and privacy expectations for government-provided devices.
• ICE Artificial Intelligence (AI) Contract Language: Details requirements for AI systems, including compliance with federal laws and policies, AI use limitations, traceability, auditability, transparency, data rights, prevention of vendor lock-in, and security, testing, evaluation, and continuous monitoring. Specifics include human-in-the-loop oversight, AI guardrails, and logging of AI inputs and outputs.

This addendum is crucial for bidders as it defines critical compliance and performance standards that will be incorporated into the contract. Understanding these requirements is essential for developing accurate proposals and ensuring successful contract execution, particularly concerning data handling, accessibility, cybersecurity, and the use of AI technologies.

Solicitation / RFP / RFQ

This is a combined synopsis/solicitation for commercial products or services, issued as a streamlined request for proposal (RFP). It seeks proposals for licenses for the Inmate Identification and Recognition System (IRIS) and the Mobile Offender Recognition & Information (MORIS) for Enforcement and Removal Operations (ERO). This acquisition is set-aside for small business concerns.

• IRIS Licenses (1,570 units)

• MORIS Licenses (1 unit)

• 12-month enterprise license for IRIS/MORIS software (unlimited users)

• Up to three (3) on-site Train the Trainer sessions and up to twenty (20) remote training sessions

• 24/7/365 telephone and online U.S. support

• One-year (12-month) warranty on hardware, IRIS/MORIS software, mounting devices, and cables

• Delivery of license access instructions and license keys within 20 calendar days from award.

• Contract Type: Firm Fixed Price (FFP)

• Period of Performance: 12 months

• Proposals due: May 12, 2026, at 9:00 AM Eastern Time.

• Submission Method: Electronically to ice-ero-procurements@ice.gov.

• Proposal Contents:

  • Cover Letter (including RFP number, contractor info, validity period, assumptions)
  • Performance Work Statement (PWS) addressing Attachment B: Statement of Objectives
  • PWS Addendum (Attachment C) to be incorporated without changes
  • Completed Terms and Conditions (Attachment D)
  • Draft Security Plan (response to Attachment E: RTM NIST High)
  • End User License Agreement (EULA) for IRIS and MORIS licenses
  • Pricing Summary and Narrative (Attachment F) with supporting documentation for fair and reasonable pricing.

• Evaluation Criteria: Proposals will be evaluated for technical acceptability and fair and reasonable pricing. The government intends to award a single FFP contract.

• Set-aside for small business concerns.

• The full text of provisions and clauses may be accessed electronically at www.acquisition.gov.

• Attachment A: SF 1449 (Streamlined RFP)

• Attachment B: Statement of Objectives

• Attachment C: PWS Addendum

• Attachment D: Terms and Conditions

• Attachment E: Requirement Traceability Matrix (RFM) NIST High

• Attachment F: Pricing Summary and Narrative

Form / Attachment / Pricing Sheet

This document is an Excel spreadsheet serving as a pricing template for the "Inmate Recognition and Identification System (IRIS)" opportunity. Bidders are instructed to complete the yellow-highlighted cells.

• Period of Performance: 12 Months after Award.
• CLINs (Contract Line Item Numbers) and Descriptions:
  • 0001: Inmate Recognition and Identification System (IRIS) - Quantity: 1570 Each.
  • 0002: Mobile Offender Recognition & Identification System (MORIS) - Quantity: 1 Each.
  • 0003: 12-month enterprise license (includes unlimited users for IRIS/MORIS access) - Quantity: 12 Months.
  • 0004: Up to three (3) on-site "Train the Trainer" sessions and up to twenty (20) remote training sessions - Quantity: 12 Months.
  • 0005: 24/7/365 telephone and online U.S. support (Marietta, GA based) including patches, fixes, and software upgrades - Quantity: 12 Months.
  • 0006: One-year (12-month) warranty on all hardware, IRIS/MORIS software, mounting devices, and cables (includes 24-hour replacement shipment) - Quantity: 12 Months.
• Pricing Fields: Unit Price and Total Price columns are provided for each CLIN.
• Total Value: A field for the overall total value is indicated.

This attachment requires bidders to provide detailed pricing for the specified CLINs, including the IRIS and MORIS systems, licenses, training, support, and warranty. Completing this template accurately is crucial for proposal submission and evaluation.