When is the submission deadline?

This RFP closed on March 18, 2026 and is no longer accepting submissions.

What is the budget for this RFP?

Settle estimates the budget at $50,000 – $200,000. The issuer has not published an official figure.

It was issued by Executive Office of Technology Services and Security. The work is located in Boston, Massachusetts, United States.

Remote Sensing and Image Processing Software (Closed)

Seeking a one-year contract for remote sensing and image processing software featuring raster processing, classification, analytics, and advanced image enhancement capabilities.

Bidder must be on Statewide Contracts ITS60 or ITS75
Solution must include remote sensing and image processing software
Software must offer raster processing and mosaicking capabilities including compositing, resampling, bit depth conversion, band stacking, and seamless mosaic generation with batch/scripting automation
Software must offer image classification and analytics including supervised/unsupervised classification, OBIA segmentation, and integrated deep learning/AI model deployment for feature extraction
Software must offer advanced analysis capabilities including PCA and multidimensional/hyperspectral analysis
Software must offer image enhancement capabilities including pan-sharpening, change detection (including zonal), and format conversion (MrSID, JPEG2000, GeoTIFF, COGs)
Preferred capabilities include advanced LiDAR processing (QL0 point cloud densities)
Preferred capabilities include photogrammetry (stereo analysis, terrain extraction, orthorectification)
Nice-to-have enhancements include 3D visualization and analysis, street-level imagery, and drone and oblique imagery processing pipelines
Solution must include setup, implementation, configuration services
Solution must include support and maintenance services
Solution must include training services
Compliance with all applicable legal and regulatory requirements for identified data types (PII, PCI, FERPA, PHI, Federal Tax Return Information, CORI, CJI, SSA Data)
Compliance with EOTSS Enterprise Use and Development of Generative Artificial Intelligence Policy
Disclosure of GenAI use and components in bid response and during contract term
GenAI data use for training/tuning/testing requires Agency written consent and option to opt-out
Ability to opt out of or disable GenAI without materially affecting performance/functionality
Disclosure of GenAI access/use of Agency Data (production/non-production)
Disclosure of derivative data creation from Agency Data and its purpose/limits
Disclosure of type and frequency of GenAI accuracy/bias testing and results
Compliance with Enterprise Information Security Standards and Policies
Compliance with Commonwealth's Digital Accessibility Standards (WCAG 2.1 level A and AA)
No reference to Agency or Commonwealth in promotional materials without prior written approval
No pending litigation that may impair or interfere with Agency's right to use the solution
Authorization for Agency to make reasonable machine-readable copies of core software components for testing, backup, or archival purposes
Inclusion of licenses for a second instance of core software components for disaster recovery purposes
Indication of system audits or assessments (e.g., SOC 2) conducted and their frequency
Provision of all warranties required by the applicable Statewide Contract
Solution must be provided in accordance with applicable State and Federal laws and industry standards
Personnel performing services must be qualified and act with due diligence and care
Minimum six-month warranty period for solution conformity to specifications (or entire subscription term)
No shrink-wrap, click-through, or online terms without authorized Agency signatory
Solution must not infringe on any existing intellectual property rights of third parties
Solution must not contain any virus, Trojan horse, worm, or other unauthorized code
Provision of all necessary authorization codes for installation and reauthorization codes for functionality during the term
Support and maintenance rates fixed for three years following initial term, then maximum 3% annual increase
Cloud solutions must provide technical support via online helpdesk and toll-free phone number during business hours or 24x7x365
Cloud solutions must include an SLA with at least 99.9% guaranteed uptime (excluding scheduled maintenance/Force Majeure)
Cloud solutions scheduled maintenance limited to 10 hours per month with 2 business days' advance notice, not during business hours
Cloud solutions SLA must include response/resolution times, defect classifications, and industry-standard metrics
Cloud solutions SLA must include remedies for failure to meet metrics (fee reductions, credits, extensions)
Cloud solutions repeated/consistent SLA failures result in refund and root cause analysis/corrective action plan
Cloud solutions uptime less than 98.0% three times or below 90% at any time allows Agency to terminate with pro-rated refund
Cloud solutions provider must provide written reports of performance metrics as requested
Cloud solutions provider must provide regular status reports during unscheduled downtime and root cause analysis within 30 days
Cloud solutions provider may not change solution in a manner that adversely affects Agency or degrades service levels without written approval
Cloud solutions provider must make updates and upgrades available at no additional cost
Cloud solutions provider must notify Agency 60 days in advance of major updates/upgrades and 5 business days for minor updates/upgrades (except emergencies)
Cloud solutions updates/upgrades may not decrease functionality, adversely affect use/access, or increase cost
Agency retains full right and title to Agency Data
Cloud solutions provider will not collect, retain, access, or use Agency Data except as strictly necessary for providing the solution
Agency Data must remain within the United States; provider must disclose identity/location of third-party hosts/processors
Agency may export Agency Data at any time during term and for 3 months post-termination in agreed format
Cloud solutions provider must destroy/erase all Agency Data and Confidential Information 3 months post-termination or upon request, with written certification
Cloud solutions provider must comply with all applicable data privacy and security laws
Cloud solutions provider must obtain and maintain FedRAMP certification for the solution
Cloud solutions provider will not access Agency user accounts or Agency Data except for data center operations, service/technical issues, or Agency's written request
Cloud solutions provider will not share Agency Data with affiliates or third parties without express written consent
Cloud solutions provider must disclose if solution accesses sensitive data prior to contract execution
Cloud solutions provider must provide a secure environment for Agency Data and hardware/software, utilizing information security best practices
Cloud solutions provider must encrypt personal and non-public Agency Data in transit and at rest
Cloud solutions provider must partition Agency Data from other data to prevent impact from third-party actions
Cloud solutions provider must promptly notify Agency (within 24 hours) of any Security Incident or imminent threat
Cloud solutions provider must investigate Security Incidents, identify impacted data, and inform Agency of actions taken
Cloud solutions provider is responsible for breach notification to data owners in coordination with Agency if sensitive data is compromised
Cloud solutions provider must maintain and follow a disaster recovery plan to maintain access and prevent data loss
Cloud solutions provider must review and test disaster recovery plan at least twice annually
Cloud solutions provider must back up Agency Data in an off-site 'hardened' facility within the United States
Cloud solutions provider must restore Cloud Solution and Agency Data with loss of no more than 12 hours of data/transactions in case of service failure
Cloud solutions provider must maintain accurate, detailed records for payment claims and service levels for a minimum of six years
Agency or its agent has the right to audit, review, and copy all relevant records at no cost
Cloud solutions provider must reasonably cooperate with Agency for transition assistance, including exporting/extracting Agency Data
Cloud solutions provider must cooperate to document a transition plan if necessary, 60 days prior to termination/expiration
Cloud solutions provider must perform annual penetration testing and remediate identified vulnerabilities
Cloud solutions provider must establish an incident response capability
Cloud solutions provider must manage the security life cycle of applications/systems
Cloud solutions provider must evaluate subcontractors for Agency data protection
Cloud solutions provider must maintain a security awareness program for its workforce
Cloud solutions provider must operate processes for comprehensive network monitoring and defense
Cloud solutions provider must establish and manage network devices to prevent attacks
Cloud solutions provider must maintain data recovery practices to restore assets to a pre-incident state
Cloud solutions provider must actively work on improving protections and detections of email and web threats
Cloud solutions provider must collect, alert, review, and retain audit logs
Cloud solutions provider must continuously assess and track vulnerabilities of its assets
Cloud solutions provider must use processes to manage access credentials and privileges
Cloud solutions provider must ensure access to the Cloud Solution is restricted to users with correct credentials
Cloud solutions provider must establish and maintain a secure configuration of its assets and software
Cloud solutions provider must develop processes to identify, classify, handle, retain, and dispose of data securely
Cloud solutions provider must actively manage all assets connected to its infrastructure
Cloud solutions provider must actively manage all software on its network to ensure only authorized software is installed/executed
Cloud solutions provider must provide Agency with access to a console for tracking entitlements and deployments
Cloud solutions provider must implement Multi-Factor Authentication (MFA) for remote and admin access
Cloud solutions provider must promptly replace end-of-life systems and applications
Services are preferred to be provided by resources located in the United States
Solution must be hosted in the United States
Compliance with EOTSS Identity and Access Management (SSO)

$50,000 – $200,000

RFQ Posted: February 26th, 2026

Bidder Questions Due: March 5th, 2026

Commonwealth Responses posted to COMMBUYS (estimated date): March 11th, 2026

RFQ Response Due: March 18th, 2026

Bidder Demonstrations Scheduled (estimated date): March 25th, 2026

Bidder Demonstrations (estimated date): March 30th, 2026-March 31st, 2026

Notice of Apparent Successful Bidder(s) posted (estimated date): April 13th, 2026

Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

The organization is seeking a vendor to provide remote sensing and image processing software. The required software must support raster processing and mosaicking tasks including compositing, resampling, bit depth conversion, band stacking, and seamless mosaic generation, all with robust batch and scripting automation capabilities.

The software should facilitate image classification and analytics, enabling supervised and unsupervised classification, OBIA segmentation, and integrated deployment of deep learning or AI models for feature extraction. Advanced analysis features such as principal component analysis (PCA), multidimensional and hyperspectral analysis are also necessary.

Additionally, image enhancement functionalities such as pan-sharpening, change detection (including zonal detection), and format conversion are required. The contract is expected to last for one year. Questions about the RFP must be submitted by March 5, 2026.

Remote Sensing and Image Processing Software

Overview

Fit Score

SUMMARY

KEY REQUIREMENTS

BUDGET

CONTRACT DURATION

TIMELINE

QUESTION DEADLINE

CONTACTS

Issuing Agency

DESCRIPTION

Similar RFPs

Frequently asked questions

Stop missing winnable RFPs