Request for Information - Oracle User Productivity Kit (UPK) Replacement Effort

Request for Information (RFI)

This RFI is issued by the U.S. Air Force Defense Enterprise Accounting and Management System (DEAMS) Program Management Office (PMO) to identify Commercial-Off-the-Shelf (COTS) solutions capable of replacing the Oracle User Productivity Kit (UPK). The UPK tool is nearing its end-of-life and is no longer supported by the manufacturer. The DEAMS program requires a modern Digital Adoption Platform (DAP) to provide in-application training and performance support for its Oracle-based financial management system, which serves over 26,000 users across 170+ installations.

The government is seeking a DAP that offers:

• Content Authoring & Development: No-code content creation, multi-format recording, rich content editing, multiple output formats, and localization.
• Agile Content Lifecycle Management & Governance: Centralized content library, agile lifecycle support (DevSecOps integration), version control, CI/CD pipeline integration, testing in non-production environments, automated change detection, role-based access control, and content reusability.
• Content Delivery & End-User Experience: In-application guidance, user segmentation, cross-application and desktop support, AI-powered assistance, and proactive change management.
• System & Technical Requirements: Preference for FedRAMP Moderate or High authorized SaaS hosting, proven integration with Oracle E-Business Suite, scalability to support a large user base, and comprehensive analytics/reporting.
• Security, Compliance, and Supply Chain Risk Management (SCRM): Compliance with FedRAMP, CMMC, DoW security requirements (DISA STIGs, CAC/PKI authentication), Section 508 of the Rehabilitation Act, ADA, Secure Software Development Lifecycle (SSDLC), and the ability to provide a Software Bill of Materials (SBOM). Vendors must also comply with FAR 52.204-25 (Section 889) and be free of Kaspersky Lab products and Section 1260H List (Chinese Military Companies).

This RFI is for market research purposes and is not a solicitation, RFP, or RFQ. The government is not obligated to award a contract. Information gathered will inform a future acquisition strategy, potentially using a best-value tradeoff analysis against a comprehensive Total Cost of Ownership (TCO).

Respondents are requested to provide information structured into specific sections: Company Information, Solution Overview, Security, Compliance, and SCRM Questionnaire, Past Performance & Experience, and Rough Order of Magnitude (ROM) Pricing. Responses are due by March 30, 2026. A "Capability Matrix" attachment is also required.

Primary NAICS Code: 513210 (Software Publishers). Secondary NAICS Codes: 611420 (Computer Training) or 541519 (Other Computer Related Services). The final determination on NAICS code will be made by the DEAMS PMO & Contracting Office.

• Responders should describe their pricing model and provide a cost breakdown for a 26,000+ user environment.
• Responses should not exceed 20 pages and must be submitted in PDF format via email.

Form / Attachment / Pricing Sheet

This document is a Capability Matrix (Attachment 1) that requires bidders to detail their solution's compliance with specific requirements related to content authoring, lifecycle management, delivery, technical aspects, and security. It serves as a structured way for vendors to present their capabilities and for the government to evaluate them.

• Company Information: Requires Name, Address, Website, and Point of Contact (Name, Title, Email, Phone).
• Solution Offered: Vendors must describe their proposed solution.
• Capability Matrix: A detailed table with specific requirements across five areas:
  1. Content Authoring & Development: Focuses on no-code creation, multi-format recording, rich content editing, localization, and migration from Oracle UPK.
  2. Agile Content Lifecycle Management & Governance: Covers centralized libraries, DevSecOps integration, version control, role-based access, and content reusability.
  3. Content Delivery & End-User Experience: Includes in-application guidance, user segmentation, cross-application support, AI assistance, and proactive change management.
  4. System & Technical Requirements: Addresses hosting (FedRAMP preference), integration with Oracle EBS, scalability, analytics, and sandbox capabilities.
  5. Security, Compliance, and SCRM: Details requirements for FedRAMP, CMMC, DoW compliance, accessibility (Section 508, WCAG), secure development, SBOM, and statutory/regulatory compliance (FAR clauses, NDAA).
• Compliance Status: Vendors must indicate "Fully Compliant," "Partially Compliant," "Not Compliant," or "On Roadmap" for each requirement.
• Industry Comments: A section for vendors to provide details, clarifications, or explanations for their compliance status.

This matrix is critical for bidders to demonstrate how their proposed solution meets the government's specific technical, functional, and security requirements. Completing this accurately and thoroughly is essential for proposal evaluation and will directly inform the government's assessment of vendor capabilities.