Request for Information: Commercial Off-the-Shelf (COTS) Electronic Records M...

REQUEST FOR INFORMATION (RFI) RFI Title:  Commercial Off-the-Shelf (COTS) Electronic Records Management (ERM) System for the Office of General Counsel (OGC) Issuing Office:  The Department of Energy Office of General Counsel  Date of Issuance:  June 2, 2026  Response Due Date:  June 17, 2026 at 12PM EDT 1. Introduction  The Office of General Counsel (OGC) for the Department of Energy is conducting market research to identify Commercial Off-the-Shelf (COTS) Electronic Records Management (ERM) systems capable of meeting its electronic records management needs. The OGC currently maintains records in various formats and locations, including local drives, individual staff computers, and SharePoint files. Our objective is to procure a NARA-compliant ERM solution that centralizes, manages, and ensures the long-term accessibility and integrity of our electronic records. This RFI is issued for information and planning purposes only and does not constitute a solicitation. Responses will be used to inform our acquisition strategy. 2. Background  As a federal agency, the OGC is committed to adhering to all federal records management regulations and guidelines, particularly those set forth by the National Archives and Records Administration (NARA). This includes compliance with DOD 5015.2-STD, NARA Universal ERM Requirements, and directives such as OMB/NARA M-19-21 and M-23-07. The current decentralized storage of electronic records presents challenges in terms of compliance, discoverability, efficiency, and long-term preservation. Furthermore, the OGC recognizes a significant gap in its current handling of case-related information, which is largely dispersed across email and individual systems. A key objective for this ERM solution is to significantly improve how the OGC manages, accesses, and utilizes its case-related records. 3. Requested Information (Vendor Questions)  Vendors are requested to provide comprehensive responses to the following questions. Please organize your response according to the numbering below. 3.1. Company and Product Overview Provide a brief overview of your company, including its history, core competencies, and experience with federal government clients, especially legal or general counsel offices. Describe your primary COTS ERM product(s) or solution(s) that address the requirements outlined in this RFI. What is your product's current version, and what is your typical release cycle for updates and new features? Outline your product's general architecture ( e.g., cloud-based, on-premise, hybrid) and underlying technologies. 3.2. NARA and Federal Compliance Does your ERM system hold DOD 5015.2-STD certification? If so, please provide details of the certification (e.g., version, date, type of records supported). How does your system address NARA's Universal ERM Requirements (Capture, Maintenance and Use, Disposal, Transfer, Metadata, Reporting)? Provide specific examples for each category. Describe how your solution helps agencies comply with OMB/NARA M-19-21 and M-23-07 directives, particularly regarding the management of permanent electronic records and associated metadata. How does your system ensure the authenticity, reliability, integrity, and usability of electronic records over time, including during data migrations or system upgrades? Detail your system's capabilities for generating audit trails and ensuring the immutability of records. 3.3. Functional Requirements   Ingestion & Capture: How does your system support the ingestion of existing records from various sources ( e.g., network drives, individual workstations, SharePoint, email systems, structured databases)? Describe the methods ( e.g., bulk import, API integration, manual upload, automated capture). Describe mechanisms for capturing records in different formats ( e.g., documents, spreadsheets, presentations, audio, video). Can your system automatically capture metadata upon ingestion? Classification & Metadata: How does your system support the creation and application of NARA-compliant file plans and retention schedules? Describe your system's metadata management capabilities, including the ability to apply, modify, and manage descriptive, technical, and preservation metadata. Can the system enforce mandatory metadata fields? Search & Retrieval: Detail the search functionalities ( e.g., full-text search, metadata-based search, advanced queries, federated search). How quickly can records be retrieved? Can the system generate reports on search results or record inventories? Access Control & Security: How does your system manage user authentication and authorization ( e.g., integration with Active Directory, LDAP, role-based access control)? Describe your system's security features for protecting CUI (Controlled Unclassified Information) and other sensitive data, including encryption in transit and at rest. How does the system prevent unauth