This is not a bid solicitation. This RFI will not necessarily result in any procurement action. A contract will not result from this activity.
The Canada Revenue Agency (CRA) is seeking feedback from the vendor community on the availability of a Secure Drop Zone solution that provides a secure method for individuals to transfer files to the CRA. In support of policies and governance processes related to the reception of files from the public, the CRA is interested in a solution that would permit one-off and ad hoc receipt of files from external parties.
Vendors are requested to provide specific responses to the product questions outlined herein. Vendors are requested to provide product whitepapers, if available.
The objective of this Request for Information (RFI) is to gather the most current information possible from industry on the different Secure Drop Zone solutions as it relates to the CRA’s business requirements.
The key objectives of the RFI include:
1. Receive responses from the vendor community about available solutions
2. Get a better understanding of the current and future trends
3. Vendors who establish, via their response to the RFI, how their products(s) meet the detailed solution requirements may be invited to provide an interactive demonstration and discuss in detail how their solutions meet the listed requirements.
PURPOSE OF THE SOLUTION
The solution's services and capabilities must include:
A public web portal accessible to external parties, with one-time-use credential capabilities for login/authentication
A clear and customizable public GUI
Rapid, multiple file upload capabilities
An administrator portal for CRA employees to generate one-time use keys or credentials, to be provided to external parties for secure portal/upload access
Back-end, secure CRA access for retrieving delivered files, or file delivery to CRA
Monitoring, auditing and logging of uploaded files that will enable the Agency totrack the delivery of data, its origin and any related metadata
Reporting, both operational and administrative, to generate reports on user activity, system utilization, delivery monitoring, real-time notifications and routing
Security technologies that provide end-to-end encryption
Content filtering to enable the blocking and/or reporting of unsolicited contentThe solution must satisfy the following functional requirements:
The ability to securely receive files from external sources
The ability to manage, deliver and/or store received files from external sources
The ability to create and distribute one-time-use credentials for external upload access
The ability to host a public portal for external upload access
The ability to manage alerts and notifications relating to file delivery
The ability to manage transmission metadata
The ability to provide transmission related reporting
The ability to create/maintain transmission history and audit trail information
