Riftur

Additional Use Cases

Public use case

BOP Medical Transport Quote Compliance Review and Gap Analysis

Solicitation

Non-Emergent BLS/ACLS Medical Transportation Services

Industry

NAICS 62 – Health Care and Social Assistance

Executive Summary

This output maps solicitation_text.docx requirements (submission instructions, SOW performance requirements, pricing/rates, reporting/invoicing, compliance clauses, and special contract requirements) against statements made in input_proposal.docx. Requirements were extracted as discrete, testable obligations and then evaluated for coverage as: Covered (explicitly addressed), Partially Covered (addressed but missing required specificity, evidence, or flow-down), Gap (not addressed), or Potential Conflict (draft language may contradict or dilute a solicitation requirement). Emphasis was placed on Section L submission compliance, SOW operational constraints (securement, no-stops, incident reporting, dispatch/ETA rules), credentialing, vehicle specifications, and DOJ-02/DOJ-05/DOJ-03 security and privacy obligations. Where the draft asserts compliance broadly (e.g., “will comply with all laws/clauses”), the mapping treats it as partial unless the proposal includes the specific evidence or procedural commitment the solicitation requires (e.g., NC paratransit certification at quote submission, DOJ-02 NDA/Rules-of-Behavior handling, incident report within 24 hours). Risks were identified for any gaps that could cause non-responsiveness, award ineligibility, performance default, payment denial, or security/privacy noncompliance. Recommendations focus on concrete additions to input_proposal.docx to improve alignment and auditability without proposing implementation timelines.

Score Breakdown

Review output

Net Score

69%

Top Score Constraints

These are the three stage-level categories costing the most recoverable score percentage. The percentage estimates how much the score could improve if that constraint were fully resolved.

Compliance

66%

5.1% recoverable

Estimated from 33 status signals across 4 published compliance tables.

Evaluation Readiness

67%

5% recoverable

No dedicated published table was available, so the overall findings estimate is used.

Evidence

67%

5% recoverable

No dedicated published table was available, so the overall findings estimate is used.

Requirement Coverage

67

reqs

Covered: 63% (42)

Partially Covered: 25% (17)

Missing: 12% (8)

Unclear: 0% (0)

Risk Heatmap

Shows how many Risk Register findings fall into each severity and likelihood combination. Likelihood means the estimated chance that the issue will affect evaluation, submission acceptance, or delivery if it is not fixed.

Likelihood

Severity

Low

Medium

High

High

0

3

0

Medium

0

2

0

Low

0

0

0

What Would Improve My Score

Add explicit statement and evidence that the company is a certified paratransit provider in NC by NC DMV at time of quote submission (include certification number/copy).

+5.5% possible

Details

Owner

Proposal team

Requirement

SOW compliance list item 1 (NC DMV paratransit certification)

Solicitation Source

SOW compliance list item 1 (NC DMV paratransit certification)

Proposal Evidence

See the published use-case finding and supporting evidence.

Source Tables

Recommendations to Enhance Alignment (Actionable Additions to input_proposal.docx)

Finding

Reduces high risk of non-responsiveness/eligibility failure.

Completion Standard

Update the proposal so this recommendation is directly evidenced: Add explicit statement and evidence that the company is a certified paratransit provider in NC by NC DMV at time of quote submission (include certification number/copy).

Add a DOJ-02 compliance subsection covering: (a) NDA + DOJ Privacy Rules of Behavior signing prior to start; (b) annual privacy/cybersecurity/records training + annual email verification to COR; (c) separation checklist process; (d) billing PII restriction (no sensitive PII in invoices/admin systems without SCOP permission).

+4.4% possible

Details

Owner

Proposal team

Requirement

DOJ-02(A)(4), DOJ-02(B)(1)(3)(4); FAR 52.224-3 privacy training reference

Solicitation Source

DOJ-02(A)(4), DOJ-02(B)(1)(3)(4); FAR 52.224-3 privacy training reference

Proposal Evidence

See the published use-case finding and supporting evidence.

Source Tables

Recommendations to Enhance Alignment (Actionable Additions to input_proposal.docx)

Finding

Converts general statements into auditable, clause-aligned commitments.

Completion Standard

Update the proposal so this recommendation is directly evidenced: Add a DOJ-02 compliance subsection covering: (a) NDA + DOJ Privacy Rules of Behavior signing prior to start; (b) annual privacy/cybersecurity/records training + annual email verification to COR; (c) separation checklist process; (d) billing PII restriction (no sensitive PII in invoices/admin systems without SCOP permission).

Clarify data handling architecture for trip logs and monthly Excel reports: where stored, encryption at rest/in transit, access control, retention, approved transmission channels, and whether any contractor-owned devices are used (and if so, confirm DOJ-05/DOJ-02 approvals and FIPS 140-2 encryption).

+3.3% possible

Details

Owner

Proposal team

Requirement

DOJ-05 IV(F)(G)(H)(J); DOJ-02 safeguarding; SOW reporting requirements

Solicitation Source

DOJ-05 IV(F)(G)(H)(J); DOJ-02 safeguarding; SOW reporting requirements

Proposal Evidence

See the published use-case finding and supporting evidence.

Source Tables

Recommendations to Enhance Alignment (Actionable Additions to input_proposal.docx)

Finding

Reduces DOJ-05 applicability ambiguity and breach exposure.

Completion Standard

Update the proposal so this recommendation is directly evidenced: Clarify data handling architecture for trip logs and monthly Excel reports: where stored, encryption at rest/in transit, access control, retention, approved transmission channels, and whether any contractor-owned devices are used (and if so, confirm DOJ-05/DOJ-02 approvals and FIPS 140-2 encryption).

Update incident reporting commitment to exactly match SOW: (1) notify COR/designee within 1 hour by phone; (2) submit detailed incident report within 24 hours for injury incidents; (3) report all motor vehicle accidents even if no apparent injury; (4) provide written next-business-day report when requested.

+2.2% possible

Details

Owner

Proposal team

Requirement

SOW Orders incident reporting paragraphs

Solicitation Source

SOW Orders incident reporting paragraphs

Proposal Evidence

See the published use-case finding and supporting evidence.

Source Tables

Recommendations to Enhance Alignment (Actionable Additions to input_proposal.docx)

Finding

Reduces default risk and ensures procedural compliance.

Completion Standard

Update the proposal so this recommendation is directly evidenced: Update incident reporting commitment to exactly match SOW: (1) notify COR/designee within 1 hour by phone; (2) submit detailed incident report within 24 hours for injury incidents; (3) report all motor vehicle accidents even if no apparent injury; (4) provide written next-business-day report when requested.

Add explicit insurance limits and types, including medical malpractice coverage (if applicable per solicitation), and confirm COI will be re-provided at award and at start of each option year.

+1.5% possible

Details

Owner

Proposal team

Requirement

Section G Schedule of Insurance; Section G Medical Malpractice; SOW item 5

Solicitation Source

Section G Schedule of Insurance; Section G Medical Malpractice; SOW item 5

Proposal Evidence

See the published use-case finding and supporting evidence.

Source Tables

Recommendations to Enhance Alignment (Actionable Additions to input_proposal.docx)

Finding

Improves responsibility determination confidence and reduces post-award disputes.

Completion Standard

Update the proposal so this recommendation is directly evidenced: Add explicit insurance limits and types, including medical malpractice coverage (if applicable per solicitation), and confirm COI will be re-provided at award and at start of each option year.

Requirements

83%

Details

Estimated from 34 status signals across 3 published requirements tables.

Compliance

66%

Details

Estimated from 33 status signals across 4 published compliance tables.

Evaluation Readiness

67%

Details

No dedicated published table was available, so the overall findings estimate is used.

Strategy

67%

Details

No dedicated published table was available, so the overall findings estimate is used.

Evidence

67%

Details

No dedicated published table was available, so the overall findings estimate is used.

Management

60%

Details

Estimated from 18 status signals across 2 published management tables.

Past Performance

67%

Details

No dedicated published table was available, so the overall findings estimate is used.

Risk

47%

Details

Estimated from 19 status signals across 2 published risk tables.

Production

67%

Details

No dedicated published table was available, so the overall findings estimate is used.

Score Equation

Details

The overall score is a weighted average of stage-level proposal categories. Detailed tables are rolled up into Requirements, Compliance, Evaluation Readiness, Strategy, Evidence, Management, Past Performance, Risk, and Production so the summary reflects the full report without duplicating overlapping findings. Each category receives a 0-100 score, that score is weighted by proposal impact, and the weighted results are added and rounded to the final score. The largest weighted influence currently comes from Requirements, Compliance, Evaluation Readiness. Top Score Constraints are the weighted categories with the largest recoverable point loss.

Scoring Caveats

  • Scores reflect the published solicitation and proposal content available to this review.
  • Categories without a dedicated source table use the average of the available status signals.

Requirements

Authoritative requirement inventory and taxonomy.

3 tables

SOW – Operational Performance Requirements Coverage

17 rows
SOW RequirementReference Location (solicitation_text.docx)Draft Document Evidence (input_proposal.docx)Coverage StatusNotes / Risk

Provide non-emergent BLS/ACLS transport 24/7/365 incl. federal holidays

SOW Scope; Passenger Transportation

Explicitly commits to 24/7/365 including holidays

Covered

—

Majority requests 6am–6pm Mon–Fri; maintain readiness after-hours

Passenger Transportation

Addresses predominant window and after-hours readiness

Covered

—

Appropriate number of vehicles to provide services timely

SOW Scope

Commits to appropriate number of vehicles; continuity plan

Partially Covered

No fleet sizing/capacity statement (number/type of units, surge coverage). Risk: evaluators may question adequacy.

Receive requests only from authorized personnel; otherwise at contractor risk/cost

Orders

States will accept requests only from authorized FCC personnel

Covered

—

Pick-up/drop-off locations: BOP/hospital lobby vs door-to-door at other facilities; occasional clinic/room pickup

Passenger Transportation

States lobby/designated transfers at BOP/associated hospitals; door-to-door at non-BOP; acknowledges occasional room pickup

Covered

—

All inmates attended by authorized correctional staff at all times

Passenger Transportation

Explicitly states inmates always attended by authorized correctional staff

Covered

—

Hand-off requirement: inform caregiver/medical staff upon arrival; transfer to next responsible person

Passenger Transportation

Commits to required hand-off communications

Covered

—

Observe inmate during transport; communicate significant change to 911 as needed

Passenger Transportation

Commits to observe and call 911 as needed

Covered

—

Diversions only with authorization (COR/Clinical Director/Warden/designee); all diversions reported

Passenger Transportation

Commits to diversion only when authorized and immediate reporting

Covered

—

No non-emergent stops for any reason during transport

Passenger Transportation

Multiple explicit statements of no non-emergent stops

Covered

—

Only authorized drivers/attendants/escorting officers allowed in vehicle; no unauthorized riders

Passenger Transportation

Explicitly states no unauthorized riders

Covered

—

Number of riders must not exceed number of approved restraints installed

Passenger Transportation

Commits to not exceed restraints installed

Covered

—

Missed appointments due to pickup delay: reschedule at no cost; additional contractor charges borne by contractor

Orders – Missed Appointments

Explicitly acknowledges and accepts

Covered

—

Add-on trip requests via phone; furnish within reasonable time (45 minutes); over 100 miles may allow flexibility; excess cost exposure

Orders – Add-on trips

Commits to 45-minute response and notes >100 mile flexibility; acknowledges alternate source discretion

Covered

—

Inclement weather go/no-go mutual decision

Orders – Inclement weather

Explicitly acknowledges mutual decision

Covered

—

Provide ETA notifications for vehicle en route and inmate-loaded en route; notify at least 1 hour in advance if cannot meet time frame

Orders – ETA / 1-hour notice

Commits to ETA updates and 1-hour advance risk notification

Covered

—

Immediately notify BOP of any incident/accident involving injury; accidents reported even with no apparent injury; detailed incident report within 24 hours (and immediate notification)

Orders – injury incidents; motor vehicle accidents

Commits to unusual events reporting within 1 hour by phone and written next working day if requested

Partially Covered

Solicitation also requires detailed incident report within 24 hours for injury incidents and MVAs must be reported even if no apparent injury. Draft should explicitly commit to 'within 24 hours detailed incident report' and 'report all MVAs regardless of injury.'

Vehicle, Accessibility, Equipment, and Maintenance Requirements

15 rows
Vehicle/Equipment RequirementReference Location (solicitation_text.docx)Draft Document Evidence (input_proposal.docx)Coverage StatusNotes / Risk

Comply with 49 CFR Parts 27, 37, 38 (disabilities transportation)

SOW Vehicles (equipment required by 49 CFR Parts 27/37/38)

Explicitly commits to comply

Covered

—

Wheelchair vehicle holds minimum 2 wheelchair passengers; all positions forward-facing; no side-mounted seats for inmate transport

SOW Vehicles (wheelchair van requirements)

Explicitly commits to minimum 2 wheelchair positions, forward-facing, no side-mounted seats

Covered

—

Minimum 4-point restraints for all wheelchair positions; acceptable tie-down with safety catch; prevent motion

SOW Vehicles

Commits to four-point restraints and seat belts; does not describe tie-down leverage lock/safety catch

Partially Covered

Add explicit tie-down system compliance statement to reduce inspection/default risk.

Seat belt restraint for wheelchair occupants at all times when vehicle in motion

SOW Vehicles

Explicitly commits to seat belts / securement; refusal -> no transport

Covered

—

Portable oxygen tank holders required

SOW Vehicles

Explicitly commits to portable oxygen tank holders

Covered

—

Lift requirements: safety bar/rollback stop; controls positioned to keep one hand on wheelchair; operator rides lift; lift parallel; rear or passenger side; slip-proof; minimum 28 inches

SOW Vehicles; Passenger Transportation

Addresses rollback stops, operator riding lift, lift parallel, slip-proof surfaces; does not explicitly confirm minimum 28 inches and rear/passenger-side position

Partially Covered

Add explicit minimum 28-inch platform and lift position requirement confirmation.

Motorized scooters not transported on lift; must transfer to seat

Passenger Transportation

Explicitly commits

Covered

—

Direct communication capability at all times between drivers and BOP staff; provide numbers/codes to Travel Section

SOW Vehicles; Passenger Transportation

Commits to 24/7 comms and direct crew comms via cellular/dispatch radio; does not explicitly mention providing special access codes/devices to Travel Section

Partially Covered

Add explicit 'provide numbers/access codes/devices to Travel Section' language.

HVAC adequate; do not place vehicle into service if cannot protect from unsuitable temperatures

SOW Vehicles

Commits to functional HVAC and safety/comfort

Covered

—

Equipment: secured fire extinguishers, first aid kits, two operable flashlights, minimum two sanitary blankets

SOW Vehicles

Explicitly commits all items

Covered

—

Vehicles smoke-free; patients and contractor prohibited from smoking in vehicles

SOW Drivers/Authorized Attendants; Vehicles

Commits vehicles smoke-free; mentions tobacco prohibition for personnel; does not explicitly address patient smoking prohibition

Partially Covered

Add explicit 'patients prohibited from smoking in vehicles' statement.

Daily maintenance/safety checklist; maintain at establishment; available for inspection; preventive maintenance documented; records provided upon request

SOW Vehicles

Commits to preventive maintenance documentation and daily safety checklists retained and available

Covered

—

Vehicle registration permits made available upon request

SOW (compliance list item 6)

Explicitly commits

Covered

—

Contracting Officer may prohibit vehicles based on documented evidence

SOW Vehicles

Acknowledges CO right to prohibit vehicles

Covered

—

Bariatric patients >400 lbs may require more than one person to lift; contractor must transport those authorized by BOP

SOW Vehicles (bariatric requirement)

Mentions bariatric patients >400 lbs and lifting needs; commits to qualified staffing

Partially Covered

Should explicitly commit to transporting bariatric patients as authorized and describe lift/crew policy to ensure capability.

Continuity / Contingency / Pandemic Performance Expectations

2 rows
RequirementReference Location (solicitation_text.docx)Draft Document Evidence (input_proposal.docx)Coverage StatusNotes / Risk

Contingency/backup plan required

SOW Passenger Transportation

Provides documented contingency/backup plan commitment

Covered

Consider summarizing triggers, alternate assets, mutual aid agreements (if any), and dispatch redundancy specifics.

DOJ-08 continuing performance during pandemic/emergency; cross-train; communications; telework where applicable; notify CO if anticipate nonperformance

DOJ-08

Acknowledges DOJ-08 and staffing resilience; does not address CO notification pathway specifically (CO vs COR) during anticipated nonperformance

Partially Covered

Add explicit commitment to notify CO (and alternate contracting office contact) if performance risk anticipated.

Compliance

Required documents, instructions, forms, certifications, and package checks.

4 tables

Section L – Quote Submission Compliance (Responsiveness Checklist)

10 rows
Solicitation Requirement (Reference Criteria)Reference Location (solicitation_text.docx)Draft Document Evidence (input_proposal.docx)Coverage StatusGap / Notes / Risk

Submit quote by deadline (05/22/2026 10:00 CT) to sburke@bop.gov

Page 1 SF1449 Block 8; Cover letter; Section L instructions

States submitted in response; acknowledges email PDF submission; does not restate due date/time or confirm delivery method/address in a compliance statement

Partially Covered

Not required to restate, but adding an explicit compliance line reduces risk of clerical noncompliance (wrong email/format).

Submit electronically via email in PDF format only; no fax/hand delivery

Cover letter; Section L

Explicitly states PDF email submission; states fax/hand-delivered not accepted

Covered

—

Include UEI and be registered in SAM for 'All Awards' with NAICS 621910

Cover letter; Section L (SAM Registration); SF1449 line item area

States SAM registered for 'All Awards' under NAICS 621910; UEI provided in forms

Covered

Consider explicitly placing UEI in proposal body and SF1449 Block 17a field to avoid omission.

Provide completed SF1449 page 1 with Blocks 17a and 20 completed

Section L documentation item (1)

States included as attachment; not shown in body

Partially Covered

Cannot verify completion. Risk of non-responsiveness if blocks incomplete.

Provide completed Schedule of Supplies/Services (pricing continuation sheet)

Section L documentation item (2); Section B continuation sheet

States included; describes pricing construct

Partially Covered

Cannot verify numbers populated (unit price, aggregate total, mileage rate).

Complete Business Management Questionnaire (professional references) in entirety

Section L documentation item (3); questionnaire text

States submitted; references professional references

Partially Covered

Cannot verify all required fields: work distribution %, 3 contracts, bank reference, self-performance %, UEI, parent UEI (if applicable).

Provide Certificate of Liability Insurance (COI) with quote

Section L documentation item (4)

States COI included

Partially Covered

Cannot verify coverage limits meet required minimums and malpractice coverage requirement.

FOIA marking instructions for confidential/proprietary content (if applicable)

Section L FOIA

Acknowledges FOIA guidance; states will mark proprietary information

Covered

—

Offeror signs SF1449 (Blocks 30 etc., as applicable)

SF1449 instructions

Not addressed explicitly

Gap

If signature is required for quotation acceptance in this procurement context, omission could risk non-responsiveness. Ensure SF1449 signature/blocks per instructions.

Funds not presently available; Government may cancel without reimbursement

Section L

Not acknowledged

Gap

Not typically mandatory to acknowledge, but could be added to show understanding; low risk.

Pricing / Rates / Charges Alignment (Section B + 'RATES' + Billing for Services)

7 rows
Pricing RequirementReference Location (solicitation_text.docx)Draft Document Evidence (input_proposal.docx)Coverage StatusNotes / Risk

Firm-fixed unit price per transport (capitated) regardless of level of service/cost

Billing for Services

Explicitly commits

Covered

—

Mileage: one-way only up to 20 miles; beyond 20-mile radius paid as base rate + per-mile beyond threshold

RATES

Explicitly acknowledges construct

Covered

—

Cancellation / no-transport: if canceled after dispatch and contractor arrives before cancellation OR cannot perform pickup for reasons beyond contractor control -> pay 100% base rate one-way + authorized mileage beyond threshold

RATES

Explicitly acknowledges

Covered

—

Other charges: prices inclusive of ferry/bridge/tunnel/road tolls; must not bill separately

Other Charges

Explicitly commits to include and not bill separately

Covered

—

When multiple inmates transported concurrently: reimbursement not exceeding cost of single patient; may claim only longest distance; schedule to be most economical

Passenger Transportation; Orders

Explicitly commits and describes rule

Covered

—

Evaluation: aggregate total base + all option years

Section G admin data; Section L price

Explicitly acknowledges evaluation method

Covered

—

Most favored customer pricing concept (prices charged must be equal or lower than those charged to most favored customers for comparable quantities/terms, incl discounts)

Section G admin data (Prices paid...)

Not addressed

Gap

Potential contractual compliance risk post-award; include acknowledgment and confirm commercial pricing policy/discount handling.

Trip Logs, Monthly Reporting, and Invoicing Requirements

8 rows
RequirementReference Location (solicitation_text.docx)Draft Document Evidence (input_proposal.docx)Coverage StatusNotes / Risk

Maintain trip record for all trips (scheduled and add-on) and provide printed report with inmate name, date/time, mileage, authorized additional charges; printed report accompanies invoice

Orders – Recordkeeping

Commits to maintain records and provide printed report with monthly invoice

Covered

—

Provide breakdown no later than 5th of each month: prior month trips and costs per patient (mileage, pickup, drop-off); Excel emailed to COR; fax/mail if email not possible

Orders – Monthly Excel report

Commits to 5th-of-month Excel report; email/fax/mail fallback

Covered

—

Submit itemized, consolidated monthly bill; paid via EFT

Billing for Services; Section G invoice terms

Commits to itemized consolidated invoice monthly and EFT

Covered

—

Proper invoice elements: contractor name/address; contract number; invoice date/number; discount terms; POC for defective invoice; dates of service & itemized list

Section G – Delivery Tickets and Invoices

Mentions itemized invoice and monthly submission; does not list all 'proper invoice' data elements

Partially Covered

Add explicit assurance that invoices will include all required data elements to avoid payment delays/defective invoice risk.

Invoices submitted to Accounting/Financial Management address and BUF-BusinessOffice-S@bop.gov

SF1449 Block 18a; Section G invoice address

States invoices submitted to address/email identified in solicitation

Partially Covered

Add explicit address/email to remove ambiguity.

Upon request, supply individual run sheets and itemized bills

Billing for Services; Section G

Commits to provide upon request

Covered

—

Payment denial if service does not support charges or deemed not necessary/appropriate

Section G

Acknowledges possible denial of payment and commits to transparent records

Covered

—

Privacy restriction: contractor invoicing/billing records not authorized to regularly store/include sensitive PII without SCOP permission

DOJ-02(B)(4)

States invoicing will not include sensitive PII beyond what is necessary; references DOJ privacy/BAA

Partially Covered

DOJ-02 is stricter: 'not authorized to regularly store or include any sensitive PII' without written SCOP permission. Add explicit DOJ-02 billing restriction compliance and describe redaction/minimization approach.

Mandatory Certifications / Eligibility / Compliance (Material to Award or Performance)

8 rows
RequirementReference Location (solicitation_text.docx)Draft Document Evidence (input_proposal.docx)Coverage StatusNotes / Risk

Contractor must be certified provider of paratransit services in NC by NC DMV at time of quote submission

SOW compliance list item 1

States compliance with NC ambulance statutes and laws; does not explicitly state paratransit certification held at time of quote submission nor provide proof

Gap

High risk of elimination/non-responsiveness if certification is required at submission. Must explicitly confirm certification status and include documentation/identifier.

Maintain insurance and provide certificate upon award and at beginning of each option year; meet minimum limits (GL $500k/occ, Auto $200k/$500k BI and $20k PD, workers comp, employer liability $100k, etc.)

SOW item 5; Section G Schedule of Insurance

Commits to maintain required coverages and provide COI; does not cite specific limits or explicitly mention medical malpractice insurance

Partially Covered

Add explicit policy limits meeting/exceeding solicitation minimums and include malpractice coverage commitment (explicitly required in Section G medical malpractice).

Medical malpractice insurance (as applicable) maintained during contract

Section G – Medical Malpractice

Not explicitly addressed

Gap

Could be deemed material depending on interpretation of 'healthcare provider status' section; add explicit coverage statement.

E-Verify: enroll within 30 days; begin verification within 90 days of enrollment

Cover letter; clause list; Section L letter

Explicitly commits

Covered

—

Comply with WD 2015-4403 Rev 33 and SCLS clause requirements

Section G wage determination; clause 52.222-41

Explicitly commits to comply with WD and fringe benefits

Covered

—

Attend all training required by BOP for contract workers; not permitted to attend staff meetings/recalls/training for institution staff

Section G – Service Contracting Information

Not addressed

Gap

Add acknowledgment to reduce future disputes over training/attendance expectations.

Indemnify Government for liability-producing acts/omissions (non-personal healthcare provider status section)

Section G – Healthcare Provider Status

Not addressed

Gap

Important contractual obligation; add acknowledgment (without altering clause).

Pending litigation/administrative proceedings affecting medical license: disclose within five calendar days to COR/CO

Section G – Medical malpractice/pending litigation disclosure

Not addressed

Gap

May be less applicable to transportation vendor unless employing licensed clinicians; but solicitation states requirement for contractor employee providing services under this contract. Add conditional acknowledgment.

Management

Management approach, staffing, roles, and execution ownership.

2 tables

Staffing, Credentials, Training, and Conduct (SOW + Related Clauses)

9 rows
RequirementReference Location (solicitation_text.docx)Draft Document Evidence (input_proposal.docx)Coverage StatusNotes / Risk

Drivers/attendants wear contractor photo ID badge with name and company OR CO-acceptable uniform

SOW Drivers/Authorized Attendants

Commits to photo ID or uniform acceptable to CO

Covered

—

Drivers and attendants: approved first aid course; current certificate renewable every 3 years; available upon request

SOW Drivers/Authorized Attendants

Commits to first aid, renewal every 3 years, documentation available

Covered

—

Authorized attendants: approved BLS/ACLS; current certificate renewed annually; available upon request

SOW Drivers/Authorized Attendants

Commits to annual BLS/ACLS renewal and documentation

Covered

—

Drivers maintain valid operator/chauffeur license per NC; provide copies upon request

SOW Drivers/Authorized Attendants

Mentions credentials/certifications generally; does not explicitly mention NC operator/chauffeur licensing copies upon request

Partially Covered

Add explicit statement to avoid doubt on licensing compliance.

Documented safety training for loading/unloading; made available

Passenger Transportation (training must be documented)

States training and periodic refresh; does not explicitly state 'documented and made available' for loading/unloading training

Partially Covered

Add explicit documentation/availability language aligned to SOW.

Text messaging while driving prohibited (FAR 52.226-8/52.212-15 reference in SOW)

SOW Drivers/Authorized Attendants; Clause list

States prohibition on text messaging while driving

Covered

—

PPE should be donned as required; provided/maintained by contractor

SOW Drivers/Authorized Attendants

Does not explicitly address PPE provision/maintenance

Gap

Could be raised in performance discussions; add policy statement.

Conduct prohibitions (intoxicants, gambling, smoking/tobacco, weapons, violence, profanity, personal stops, tips, fraternization, etc.)

SOW Drivers/Authorized Attendants; Contractor Conduct

Lists many prohibitions (intoxicants, gambling, tobacco, weapons, profanity/threats, fraternization, unauthorized stops, tips, text messaging)

Partially Covered

Does not explicitly mention: leaving vehicle with key in ignition; contacting dispatcher/supervisor via radio in disputes; specific smoking prohibition for patients; 'personal business/excessive restroom' phrasing. Low/medium risk—add full alignment list.

BOP reserves right to bar drivers for unsafe practices; contractor must replace promptly

SOW Drivers/Authorized Attendants

Explicitly acknowledges and commits to replacement

Covered

—

DOJ-02 Privacy + DOJ-05 Security + DOJ-03 Personnel Security – Applicability Mapping for This Service

9 rows
Control/RequirementReference Location (solicitation_text.docx)Draft Document Evidence (input_proposal.docx)Coverage StatusNotes / Risk

DOJ-02 privacy training at outset and annually; maintain certificates; annual email verification to COR

DOJ-02(B)(1)

States privacy training will be provided and documented; does not mention annual recurrence and annual email verification to COR

Partially Covered

Add explicit annual training cadence + annual verification email obligation.

DOJ-02 NDA requirement + DOJ IT Rules of Behavior signed prior to commencing work; maintain signed copies; provide copies to CO before employee commences work

DOJ-02(B)(3)

Mentions DOJ rules of behavior compliance; does not explicitly commit to signed NDA/ROB and providing copies to CO pre-start

Gap

High compliance risk if personnel will access DOJ information/PII in trip documentation/invoicing.

Report actual/suspected PII breach within 1 hour to SOC/JSOC, COR, CO; written report within 24 hours with required contents

DOJ-02(B)(5); DOJ-05 incident reporting

Commits to reporting breaches within one hour and cooperating; does not mention written report within 24 hours with enumerated content

Partially Covered

Add explicit 24-hour written report requirement and required elements.

DOJ-02 separation checklist for departing employees; verify return/disposition of PII and termination of access; notify CO within 24h for adverse separations

DOJ-02(A)(4)

Not addressed

Gap

Important operational control for privacy compliance.

DOJ-02 prohibition on regularly storing sensitive PII in billing/admin systems without SCOP written permission

DOJ-02(B)(4)

States minimize PII; no explicit SCOP permission concept

Gap

Add explicit compliance and describe invoice data minimization (e.g., inmate identifier redaction if allowed).

DOJ-05: limit access to DOJ information/systems to authorized users; MFA/HSPD-12 where applicable; audit logging; baseline configs; vulnerability mgmt; contingency planning

DOJ-05 Section IV

States will comply with DOJ-05 as applicable; does not describe specific controls for any electronic systems used (scheduling, dispatch records, billing spreadsheets)

Partially Covered

If any contractor IT stores/transmits DOJ information (even email spreadsheets), DOJ-05/DOJ-02 restrictions may trigger. Add statement clarifying where data resides and controls (encryption, access control, retention, approved channels).

DOJ-05 prohibition on using contractor-owned laptops/removable media for DOJ info unless CO (and SCOP for PII) approves; encryption FIPS 140-2; erase extracts within 90 days

DOJ-05 IV(F), (G)

Not addressed

Gap

Material if contractor uses its own devices for logs/invoicing/spreadsheets.

DOJ-03 personnel security: background checks/forms; favorable credit report; no one starts until written authorization; comply with 8 CFR 274a (employment of aliens)

DOJ-03; Section G security clearance requirements

Acknowledges suitability/security processes and facility access limits; does not address favorable credit report, no-start-before-written-authorization, or specific form set

Partially Covered

Add explicit acknowledgment that staff will not start until written authorization; and understanding of favorable credit requirement and listed forms/fingerprinting.

Whistleblower information distribution within 30 days; confirm within 45 days

DOJ-01

Explicitly commits

Covered

—

Risk

Risk register findings, assumptions, exceptions, and deviations.

2 tables

Key Gaps and Potential Conflicts (Consolidated)

9 rows
Gap/IssueTypeReference Location (solicitation_text.docx)Current Draft Posture (input_proposal.docx)Risk/Impact

NC DMV paratransit provider certification required at time of quote submission (and proof)

Responsiveness / Eligibility

SOW compliance list item 1

Not stated/proven

High: potential elimination as non-responsive/noncompliant.

DOJ-02 NDA + Privacy Rules of Behavior signed; provide copies to CO before work begins

Security/Privacy Compliance

DOJ-02(B)(3)

Not addressed explicitly

High: privacy noncompliance; potential access denial or termination risk.

Incident reporting: detailed incident report within 24 hours; report all MVAs even without apparent injury

Operational Compliance

Orders – incident reporting

Partly addressed (1-hour phone; written next business day if requested)

Medium/High: default risk; disputes over reporting timeliness/format.

Medical malpractice insurance requirement and explicit limits for required coverages

Insurance/Responsibility

Section G Medical Malpractice; Schedule of Insurance

General statement without limits; malpractice not explicit

Medium/High: responsibility determination concerns; post-award compliance risk.

DOJ-02 billing restriction on sensitive PII without SCOP permission

Privacy Compliance

DOJ-02(B)(4)

Minimization stated but SCOP permission not addressed

Medium: risk of privacy finding; corrective action demands.

DOJ-03 personnel security specifics (favorable credit, no-start w/o written authorization, form package awareness)

Personnel Security

DOJ-03; Section G security requirements

General acknowledgment only

Medium: onboarding delays; staffing unavailability; performance start risk.

Most-favored-customer pricing commitment

Contract Administration / Pricing

Section G pricing statement

Not addressed

Low/Medium: potential dispute if requested by CO; compliance exposure.

Vehicle lift dimensional/position requirements (min 28 inches; rear/passenger-side receipt) and tie-down latch detail

Technical Compliance

SOW Vehicles

Partially addressed

Medium: vehicle rejection risk; default grounds language in SOW elevates severity.

PPE provision/maintenance commitment

Safety/Operations

SOW Drivers/Authorized Attendants

Not addressed

Low/Medium: operational/safety audit finding risk.

Risk Assessment Matrix (Solicitation Noncompliance and Performance Exposure)

5 rows
Risk IDRisk DescriptionCause (Gap)LikelihoodImpact SeverityOverall RiskMitigation (Recommendation Summary)

R-01

Quote deemed non-responsive or eliminated

No explicit NC paratransit certification at submission; incomplete SF1449 blocks/signature uncertainty

Medium

High

High

Add explicit certification statement and attach proof; confirm SF1449 blocks completed and signed as required.

R-02

Vehicle rejected / default exposure

Partial mapping to detailed lift/tie-down specs; SOW states noncompliance grounds for default

Medium

High

High

Add explicit line-by-line vehicle compliance statement and provide spec sheets/photos for lift width, tie-down type, configuration.

R-03

Privacy/security noncompliance finding or access suspension

Missing DOJ-02 NDA/ROB flow; unclear device/network handling; breach written-report details absent

Medium

High

High

Add DOJ-02/DOJ-05 operating model: where data is stored, encryption, access controls, NDAs, ROB, incident reporting workflow.

R-04

Delayed onboarding / inability to staff due to DOJ-03 clearance requirements

General acknowledgment only; no plan for favorable credit / forms / written authorization gate

Medium

Medium

Medium

Add security onboarding plan narrative and commitment that no staff start without written authorization.

R-05

Payment delays/denials due to defective invoices

Not all 'proper invoice' elements explicitly assured; address/email not explicitly stated

Medium

Medium

Medium

Add invoice format compliance statement and include required data elements and submission routing.

Recovery

Prioritized fixes, clarification candidates, and recovery actions.

1 tables

Recommendations to Enhance Alignment (Actionable Additions to input_proposal.docx)

12 rows
RecommendationMapped Requirement(s)Where to Add in DraftExpected Alignment Benefit

Add explicit statement and evidence that the company is a certified paratransit provider in NC by NC DMV at time of quote submission (include certification number/copy).

SOW compliance list item 1 (NC DMV paratransit certification)

Section 2 (Understanding) + Attachments list

Reduces high risk of non-responsiveness/eligibility failure.

Add a DOJ-02 compliance subsection covering: (a) NDA + DOJ Privacy Rules of Behavior signing prior to start; (b) annual privacy/cybersecurity/records training + annual email verification to COR; (c) separation checklist process; (d) billing PII restriction (no sensitive PII in invoices/admin systems without SCOP permission).

DOJ-02(A)(4), DOJ-02(B)(1)(3)(4); FAR 52.224-3 privacy training reference

Section 11 (Privacy, HIPAA, and DOJ Information Security)

Converts general statements into auditable, clause-aligned commitments.

Clarify data handling architecture for trip logs and monthly Excel reports: where stored, encryption at rest/in transit, access control, retention, approved transmission channels, and whether any contractor-owned devices are used (and if so, confirm DOJ-05/DOJ-02 approvals and FIPS 140-2 encryption).

DOJ-05 IV(F)(G)(H)(J); DOJ-02 safeguarding; SOW reporting requirements

Section 8 + Section 11

Reduces DOJ-05 applicability ambiguity and breach exposure.

Update incident reporting commitment to exactly match SOW: (1) notify COR/designee within 1 hour by phone; (2) submit detailed incident report within 24 hours for injury incidents; (3) report all motor vehicle accidents even if no apparent injury; (4) provide written next-business-day report when requested.

SOW Orders incident reporting paragraphs

Section 14 (Acceptance/POC) + Section 5 (Patient Safety)

Reduces default risk and ensures procedural compliance.

Add explicit insurance limits and types, including medical malpractice coverage (if applicable per solicitation), and confirm COI will be re-provided at award and at start of each option year.

Section G Schedule of Insurance; Section G Medical Malpractice; SOW item 5

Section 10 (Insurance) + Attachments

Improves responsibility determination confidence and reduces post-award disputes.

Add explicit statement that drivers maintain valid NC operator/chauffeur licenses appropriate to vehicle class and copies will be provided upon request.

SOW Drivers/Authorized Attendants – license requirement

Section 4 (Staffing/Credentials)

Closes a documentation-specific compliance gap.

Add explicit confirmation of lift requirements not yet stated: minimum 28-inch lift platform and lift positioned to receive wheelchair from rear or passenger side; plus tie-down safety-catch compliance statement.

SOW Vehicles lift specs; tie-down specs

Section 6 (Vehicles/Equipment)

Reduces vehicle rejection/default grounds risk.

Add PPE policy statement: required PPE will be provided and maintained by contractor; describe typical PPE used (gloves, masks/eye protection as appropriate) consistent with infection control expectations.

SOW Drivers/Authorized Attendants – PPE

Section 4 or Section 5

Improves safety compliance and operational credibility.

Add acknowledgment of 'proper invoice' elements and explicitly state submission routing to BUF-BusinessOffice-S@bop.gov and PO Box 999 address.

Section G invoice requirements; SF1449 Block 18a

Section 8 (Invoicing)

Reduces defective invoice/payment delay risk.

Add explicit acknowledgment of BOP training requirement for contract workers and restrictions on attending staff-only meetings/training.

Section G Service Contracting Information

Section 2 or Section 14

Prevents future operational misunderstandings.

Add a short DOJ-03 onboarding acknowledgement: no employee will begin until written authorization is received; awareness of favorable credit report requirement; readiness to complete listed forms/fingerprinting/NCIC checks.

DOJ-03; Section G investigative procedures list

Section 10 (Compliance) or Section 11

Reduces onboarding friction and performance start risk.

Add acknowledgment of the solicitation’s 'most favored customer' pricing clause and how discounts (if any) will be applied.

Section G pricing statement

Section 9 (Pricing)

Reduces contract administration/compliance ambiguity.

Riftur’s Impact

Riftur surfaced that this submission is largely aligned on day-to-day transport operations, but risk concentrates in a few compliance-critical items that drive eligibility and evaluability. It revealed a missing NC DMV paratransit provider certification statement and proof at quote submission, which is a direct eliminator if treated as a material condition. It also flagged unresolved offer-form commitments such as SF1449 completion and signature uncertainty, which can make the quote nonresponsive even when technical coverage is strong. On DOJ controls, it identified absent clause acknowledgments and commitments around DOJ-02 NDA and Rules-of-Behavior execution, DOJ-02 separation checklist handling, and the specific restriction on routinely storing sensitive PII in billing systems without SCOP permission. It further highlighted partial incident reporting coverage (24-hour detailed report requirement and reporting all MVAs) and incomplete insurance specificity, including medical malpractice coverage and limits, which affect responsibility, onboarding, and audit defensibility. These are higher leverage than narrative refinements because they determine whether the Government can accept, verify, and administer the offer under mandatory terms, and they clarify where the submission is already solid versus where compliance exposure is concentrated.

© 2025 Riftur — All Rights Reserved