SECURE DROP ZONE SOLUTION

This is not a bid solicitation. This RFI will not necessarily result in any procurement action. A contract will not result from this activity. The Canada Revenue Agency (CRA) is seeking feedback from the vendor community on the availability of a Secure Drop Zone solution that provides a secure method for individuals to transfer files to the CRA. In support of policies and governance processes related to the reception of files from the public, the CRA is interested in a solution that would permit one-off and ad hoc receipt of files from external parties. Vendors are requested to provide specific responses to the product questions outlined herein. Vendors are requested to provide product whitepapers, if available. The objective of this Request for Information (RFI) is to gather the most current information possible from industry on the different Secure Drop Zone solutions as it relates to the CRA’s business requirements. The key objectives of the RFI include: 1. Receive responses from the vendor community about available solutions 2. Get a better understanding of the current and future trends 3. Vendors who establish, via their response to the RFI, how their products(s) meet the detailed solution requirements may be invited to provide an interactive demonstration and discuss in detail how their solutions meet the listed requirements. PURPOSE OF THE SOLUTION The solution's services and capabilities must include:

A public web portal accessible to external parties, with one-time-use credential capabilities for login/authentication A clear and customizable public GUI Rapid, multiple file upload capabilities An administrator portal for CRA employees to generate one-time use keys or credentials, to be provided to external parties for secure portal/upload access Back-end, secure CRA access for retrieving delivered files, or file delivery to CRA Monitoring, auditing and logging of uploaded files that will enable the Agency totrack the delivery of data, its origin and any related metadata

Reporting, both operational and administrative, to generate reports on user activity, system utilization, delivery monitoring, real-time notifications and routing Security technologies that provide end-to-end encryption Content filtering to enable the blocking and/or reporting of unsolicited contentThe solution must satisfy the following functional requirements:

The ability to securely receive files from external sources The ability to manage, deliver and/or store received files from external sources The ability to create and distribute one-time-use credentials for external upload access The ability to host a public portal for external upload access The ability to manage alerts and notifications relating to file delivery The ability to manage transmission metadata The ability to provide transmission related reporting The ability to create/maintain transmission history and audit trail information