Request for Information - Cloud-Native DRM Solution

The Library of Congress issued a Request for Information (RFI) under solicitation number 2026-CIO-0275 to gather market intelligence on cloud-native Digital Rights Management (DRM) solutions capable of securing and controlling access to its extensive digital collections, including audio, video, text, and Office files, within a hybrid cloud environment. The RFI seeks vendors with solutions that enforce persistent usage rights, provide AES-256 encryption at rest and in transit, and support customer-controlled key management via Bring Your Own Key (BYOK) without storing customer data on vendor systems. The solution must integrate securely with Library systems using RESTful APIs, support single sign-on via MS Entra ID or login.gov using SAML 2.0 and OpenID Connect, and comply with FIPS 140-2/3 validation standards. Vendors are required to submit a Voluntary Product Accessibility Template (VPAT) to demonstrate accessibility compliance, and responses must be formatted as a single 25-page PDF sent via email by the deadline of May 20, 2026. Data residency mandates require all information to remain within U.S. jurisdictions, and metadata must adhere to ONIX and BIBFRAME standards for discoverability and interoperability. The procurement is not set aside for any socioeconomic category, and no formal contract clause or evaluation criteria are defined since this is strictly a market research tool to inform future acquisition strategy. The contract performance location is formally designated as Washington, D.C., though the solution will operate entirely in cloud infrastructure such as AWS or Azure. Primary points of contact are Veronica Price and Stefanie Fitte, who oversee submissions and technical inquiries; no Contracting Officer’s Representative or technical representative is named. The RFI does not request UEI or CAGE codes, size status certifications, or pricing estimates, reflecting its nature as a non-binding inquiry to assess vendor capabilities and alignment with Library requirements before potential future procurement.