Sources Sought / Request for Information (RFI) 26-047 Unstructured Data Environment Scanning

Project ID: RFI_26_047 FederalOpportunitiesSources Sought

Overview

Agency	Department of Energy
Deadline	05/06/26
Posted	04/17/26
Estimated Value	Not Provided
Set Aside	None
NAICS	513210 - Software Publishers
PSC	DA10 - IT And Telecom - Business Application/Application Development Software As A Service
Location	Princeton, NJ 08540 United States

Description

Primary Latest Change

Unstructured Data Environment Scanning

This is a Sources Sought Notice ONLY. This notice is issued solely for market research and acquisition planning purposes; it does not constitute a Request for Quote (RFQ), Invitation for Bid (IFB), or Request for Proposal (RFP), nor does it promise a future solicitation. Responses are strictly voluntary, and no reimbursement will be provided for costs associated with responding to this notice. Princeton Plasma Physics Laboratory (PPPL) is under no obligation to award a contract or expend appropriated funds based on this inquiry.

Background and Objective

Princeton Plasma Physics Laboratory (PPPL), a Department of Energy (DOE) National Laboratory, is soliciting information from qualified sources regarding Unstructured Data Environment Scanning solutions. The goal is to identify solutions capable of scanning, discovering, analyzing, and classifying unstructured data across enterprise repositories. Interested vendors must be prepared to address functional, security, and compliance requirements and may be invited to participate in technical demonstrations to show how their solution satisfies PPPL's needs.

Small Business and Socioeconomic Consideration

PPPL is seeking capability statements from all interested parties, including Large Businesses, Small Businesses, and all socioeconomic categories (SDB, 8(a), WOSB, SDVOSB, EDWOSB, HUBZone), as well as HBCU/MIs. This information will be used to determine the appropriate level of competition and establish small business subcontracting goals. PPPL reserves the right to consider specific set-asides based on the responses received.

Submission Requirements

Interested firms are requested to submit a Capabilities and Qualifications Statement and must address the Technical Capabilities Questions. This document must be UNCLASSIFIED and provide more than generic marketing brochures. Please include:

Administrative Information

- Firm Name and Address.

Business Size and Status

(Large, Small, SDB, 8(a), WOSB, SDVOSB, EDWOSB, HUBZone, or HBCU/MI).

Affiliate Information

Parent company, joint venture partners, and potential teaming partners. - Role: Indicate whether your firm would perform as a prime subcontractor or a lower-tier subcontractor. 2. Technical Capability Questions

Company Profile

An organizational overview highlighting expertise in large-scale unstructured data scanning, discovery, classification, and migration. Please include relevant client references from similar engagements.

Technical Response

A detailed explanation of how the solution fulfills the functional and compliance requirements. This must cover capabilities for identifying sensitive data (PII/CUI), detecting ROT data, and mapping data ownership, access, and risk.

Deployment Model

A description of available architectures (e.g., SaaS, on-premises, or hybrid) and the solution's ability to scan diverse repositories, including network shared drives, cloud environments (e.g., Google Drive), and endpoints. - Security & Compliance: Documentation of security controls, data protection protocols, and relevant certifications (e.g., FedRAMP). Please specify how the solution maintains the integrity and confidentiality of sensitive data during the analysis phase.

Demonstration Availability

Confirmation of the vendor's ability to participate in a virtual demonstration showcasing end-to-end discovery, classification, and reporting within a realistic environment. - Pricing & Licensing:

Published Pricing

Current catalogs or price lists, including costs for any necessary add-on modules, integrations, or configurations.

Licensing Overview

A breakdown of the licensing structure (e.g., per user, by data volume, or subscription-based) and how costs scale as data volume or environment complexity increases.

Response Instructions

All responses must be submitted electronically via email to Cheryl Colan at ccolan@pppl.gov. - Deadline: Wednesday, May 6, 2026, by 4:30 PM (EST). - Reference: Please include "RFI 26-047 Unstructured Data Environment Scanning" in the subject line. Inquiries: All technical and procurement questions should be directed to the Point of Contact (POC) listed above.

General Information

Responses will not be returned, and respondents will not be notified of evaluation results. The information obtained may be used to develop an acquisition strategy and future RFP. If a solicitation is released, it will be posted on www.SAM.gov. It is the responsibility of potential offerors to monitor SAM.gov for any amendments or official solicitation documents.

Summary (Newest Update)

Background Princeton Plasma Physics Laboratory (PPPL), a Department of Energy (DOE) National Laboratory, is soliciting information from qualified sources regarding Unstructured Data Environment Scanning solutions. The goal is to identify solutions capable of scanning, discovering, analyzing, and classifying unstructured data across enterprise repositories. Interested vendors must be prepared to address functional, security, and compliance requirements and may be invited to participate in technical demonstrations to show how their solution satisfies PPPL’s needs. Work Details The contract involves providing solutions for scanning, discovering, analyzing, and classifying unstructured data across various enterprise repositories. Vendors must demonstrate capabilities in identifying sensitive data (PII/CUI), detecting Redundant, Obsolete, and Trivial (ROT) data, mapping data ownership, access permissions, and overall risk profiles. The solution should support diverse deployment models (SaaS, on-premises, or hybrid) and ensure compliance with security protocols such as FedRAMP. Vendors may be required to conduct virtual demonstrations showcasing end-to-end discovery and classification processes. Additionally, vendors must provide detailed technical responses addressing their organizational expertise in large-scale unstructured data management and include relevant client references.

Contacts