Request for Information - Cloud-Native DRM Solution

The Library of Congress (LOC) has issued a Request for Information (RFI) for a commercial, API-driven Digital Rights Management (DRM) solution. This RFI is for market research and planning purposes to find a cloud-native solution that integrates with LOC's existing AWS and Azure infrastructure, Java, Python, and Angular applications. The LOC manages over 2 million digital files annually and requires a DRM solution to secure these assets at rest and in transit, enforcing persistent usage rights. Key requirements include support for MS Entra and login.gov authentication, handling 5,000+ external and 300+ internal concurrent users, and managing various file formats (audio, video, office, text, etc.). The desired workflow involves ingesting, protecting via API encryption, storing protected files in cloud storage, and accessing files through SSO with DRM client validation. Files must remain read-only and encrypted at rest. The LOC seeks detailed technical responses on company profile, FedRAMP status, U.S.-based support, solution architecture (SaaS/PaaS, containerization, client requirements), API capabilities (protocols, SDKs, sandbox, core DRM functions like streaming encryption, policy abstraction, revocation, metadata handling), authentication (OIDC/SAML, JIT provisioning, service accounts, role-based access), security (AES-256, FIPS 140-2/3, BYOK, data residency), performance (latency, offline access), auditing, pricing, and UI features. Responses are due by May 20, 2026.