Enterprise Point of Sale (EPOS) Solution

Amendment / Modification

• The quotation due date has been extended to Wednesday, January 28, 2026, at 11:00 AM ET.

• This amendment modifies the original solicitation.

• The deadline for submitting quotations has been extended.

Form / Attachment / Pricing Sheet

This document is a Company Non-Disclosure Agreement (NDA) required by the Executive Office of the President (EOP). It outlines the terms and conditions under which a company and its employees will handle sensitive, non-public EOP information accessed during the performance of a contract or agreement.

• Confidentiality Obligation: Companies and their employees must protect EOP information from unauthorized disclosure, whether inadvertent or intentional.
• Prohibited Actions: Companies are specifically prohibited from publishing, reproducing, or divulging such information to unauthorized persons.
• Protection Measures: Companies must take reasonable measures to protect information from unauthorized disclosure and restrict access to those with a bona fide need.
• Referral of Requests: All questions regarding information sensitivity or disclosure, including Freedom of Information Act (FOIA) requests, Congressional requests, and litigation-related requests, must be referred to the EOP Contracting Officer (CO).
• EOP Control: EOP retains full legal control over submitted information and may request its withdrawal.
• Consistency with Law: The agreement is consistent with and does not supersede existing statutes or Executive orders related to classified information, communications to Congress, reporting violations, or whistleblower protections.
• Penalties: Violation of the agreement may subject the company and its employees to criminal penalties under Title 18 of the United States Code.

Bidders must understand and agree to the terms of this NDA if they are to be granted access to sensitive EOP information during contract performance. Completion and signature by an authorized company official are required. Failure to comply can result in significant penalties.

Form / Attachment / Pricing Sheet

This document outlines the Data Security Requirements for the EOP (Enterprise Operations Platform) data, which is considered moderate risk. It details the security standards the contractor must adhere to.

• Access Management: Contractor must allow customer management of user access (creation, modification, termination, reviews).
• Account Management: Enforce unique identifiers traceable to users.
• Authentication: Support multifactor authentication (MFA), including SSO, phishing-resistant MFA, or standard MFA with two factors.
• Contingency Plan: Maintain and annually exercise a contingency plan for backup and recovery.
• Data Location: Store and process EOP data exclusively within the United States, with work performed by US citizens or permanent residents.
• Encryption: Enforce encryption for data in transit and at rest, using AES-256 for high-risk data and AES-128 for other data, referencing NIST SP 800-131.
• Endpoint Security: Implement malicious code protection, device encryption, and data loss prevention controls for third-party user endpoints.
• Incident Notification: Notify the customer of security incidents within 48 hours of discovery and provide updates until resolution.
• Incident Response Planning: Establish and provide evidence of an incident response plan.
• Incident Response Testing: Test the plan at least annually for moderate risk.
• Log Details: Capture specific event details (type, location, time, source, success/failure, associated individuals/systems, duration).
• Log Retention: Retain logs for 12 months of active storage and 18 months of cold storage.
• Logged Events: Implement logging and monitoring for security events, including logins, account changes, data access, audit log modifications, and administrative actions.
• Patching and Support: Use supported OS and software versions, applying security patches at least monthly.
• Roles and Permissions: Implement least privilege principles for user access.

This document specifies critical security requirements that potential bidders must be able to meet. Compliance with these data security standards is essential for performing work related to the EOP data and will likely be a key factor in proposal evaluation and contract performance.

Form / Attachment / Pricing Sheet

This document is a contractor's statement required to address Executive Order 14173, "Ending Illegal Discrimination and Restoring Merit-Based Opportunity." It must be completed and returned with the proposal to be considered in compliance with the request.

• Compliance with Anti-Discrimination Laws: Contractors must affirm that their compliance with all applicable Federal anti-discrimination laws is material to the government's payment decisions.
• DEI Programs Certification: Contractors must certify that they do not operate any Diversity, Equity, and Inclusion (DEI) programs that violate applicable Federal anti-discrimination laws.
• Veteran and Randolph-Sheppard Act Preferences: Contractors must acknowledge that compliance with anti-discrimination laws does not impact lawful Federal or private-sector employment and contracting preferences for veterans or individuals protected by the Randolph-Sheppard Act.

Bidders must complete and return this statement with their proposal. Failure to do so may result in non-compliance with the proposal requirements. The responses to the included questions are critical for proposal consideration.

Form / Attachment / Pricing Sheet

This document is Appendix A, the Quality Assurance Surveillance Plan (QASP) for the EOP Enterprise Point of Sale (EPOS) Solution. It outlines the government's plan to monitor contractor performance and provides a framework for the Contracting Officer's Representative (COR) to ensure contract compliance. It also includes templates for Performance Assessment Reports (PAR), Customer Complaint Records (CCR), and Corrective Action Reports (CAR).

• QASP Overview: Defines the purpose of the QASP, its role in avoiding deficient performance, and its status as a living document subject to revision.
• Performance Measurement: Emphasizes user success as the critical measure, with metrics to be collaboratively determined post-award, likely involving Jira SLAs and dashboards.
• Roles and Responsibilities: Details the roles of the Delivery Manager (DM), Contracting Officer (CO), and Contracting Officer's Representative (COR) in surveillance and performance assessment.
• Surveillance Method: Primarily Periodic Sampling.
• Performance Standards: Outlines Acceptable Quality Levels (AQLs) for Sustainment Tasks and Break/Fix Scenarios, including response times, status updates, resolution requirements (same-day for Severity 1/2), and After-Action Reports (AARs) for both normal and after-hours support.
• Appendix A.1 (PAR): A template for reporting contractor performance, including sections for deficiencies, services reviewed, detailed assessment, contractor validation, and corrective actions.
• Appendix A.3 (CCR): A template for recording customer complaints, including source, nature of complaint, contract reference, and actions taken.
• Appendix A.4 (CAR): A template for documenting corrective actions, including deficiency details, impact, contractor response, and COR determination.

This QASP provides critical insight into how the government will measure and evaluate the contractor's performance. Bidders should pay close attention to the performance standards, response times for break/fix scenarios, reporting requirements (AARs), and the overall surveillance methodology. Understanding these expectations is crucial for developing a compliant and competitive proposal and for successful contract execution. The included templates (PAR, CCR, CAR) highlight the types of documentation and reporting that will be required.

Questions & Answers / Clarifications

This document provides instructions and an example for vendors submitting questions and comments regarding Solicitation Number 11316026Q0002OAS - Web Hosting and Development Professional Services. It also outlines the process for government responses.

• Submission Format: Vendors must use the provided spreadsheet format and not alter it. Blue text is sample language to be deleted.
• Column B (Page): Reference the specific page number from the solicitation.
• Column C (Section/Paragraph): Provide the applicable section and paragraph number from the solicitation.
• Column D (CLIN/Clause/Other): Insert CLIN, Clause, Provision, Appendix, or Attachment numbers (e.g., CLIN 0001, 52.217-8, Appendix A).
• Column E (Questions/Comments): Start questions/comments by referencing the topic (e.g., Minimum Qualifications Checklist) followed by the question.
• Submission Method: Issues must be submitted to the email address specified in the solicitation.
• Government Response Columns (F/G/H): These columns are for government use only.

An example provided shows a vendor question regarding the proposal due date, which resulted in a change to the solicitation. This indicates that submitted questions can lead to modifications of the solicitation document, including deadlines and specific text.

Form / Attachment / Pricing Sheet

This document is a pricing worksheet template for the EOP Enterprise Point of Sale (EPOS) Solution solicitation. Bidders are instructed to complete this worksheet to provide their pricing for hardware, software, maintenance, and professional services.

• Solicitation Title: EOP Enterprise Point of Sale (EPOS) Solution
• Contractor Name: 11316026Q0005OAS
• Base Period Pricing: Includes costs for Hardware (POS Screens, printers, KDS), Software (terminals, kitchen software), Maintenance (hardware, API services), and Professional Services (implementation, labor).
• Option Period Pricing (Periods 1-4): Details recurring costs for Hardware Maintenance, Software licenses, and Ongoing Maintenance Release Support.
• Notes: The template represents the Government's best estimate. Offerors may add rows/columns/tabs as needed. Detailed information on labor categories, rates, and hours is required for "White Glove Professional Services Implementation Costs."

This worksheet is critical for bidders to accurately price their proposed solution according to the government's requirements and format. It outlines the specific components and services for which pricing is requested across the base and option periods, directly impacting proposal submission and evaluation.

Form / Attachment / Pricing Sheet

This document is the "Past Performance Information Sheet" and is to be completed by the Offeror. Failure to accurately complete this form may negatively impact the evaluation of the Offeror's proposal/quotation under the Solicitation. Only one contract/order or subcontract is permitted per sheet.

• Contract/Order Identification Number: Applicable contract or subcontract identification number.
• Description of Products or Services: Brief statement about the nature of products/services rendered.
• Contract/Order Status: Selection required.
• Contractor Role: Selection required.
• Awarding Agency: Identity of the agency that issued the prime contract/order, or both awarding agency and prime contractor if the offeror was a subcontractor.
• Contractor Identification: Name, address, and DUNS No. of the performing entity, with explanation of relationships if different from the Offeror.
• Contract/Order Type: Selection required.
• Contract/Order Dollar Value: Estimated dollar value of the contract/order or subcontract.
• Period of Performance: Start date and actual or potential expiration date.
• Primary Agency Point of Contact: Name, address, telephone number, and email of the responsible Government official or prime contractor representative.
• Description of Work / Explanations: A description of the product or services provided, and an explanation of why the performance is relevant to the Solicitation. This section also requires identification and explanation of any adverse past performance.

This form is crucial for bidders to provide detailed information about their past performance on relevant contracts or subcontracts. Accurate and thorough completion is essential for proposal evaluation, as stated in the instructions. It requires bidders to describe their work, explain its relevance, and address any past performance issues.