Oracle America, Inc. v. United States

975 F.3d 1279

Opinion

United States Court of Appeals for the Federal Circuit

______________________

ORACLE AMERICA, INC.,

Plaintiff-Appellant

v.

UNITED STATES, AMAZON WEB SERVICES, INC., Defendants-Appellees

______________________

2019-2326

______________________

Appeal from the United States Court of Federal Claims in No. 1:18-cv-01880-EGB, Senior Judge Eric G. Bruggink.

______________________

Decided: September 2, 2020

______________________

CRAIG HOLMAN, Arnold & Porter Kaye Scholer LLP, Washington, DC, argued for plaintiff-appellant. Also represented by KARA L. DANIELS, NATHANIEL EDWARD CASTELLANO, AMANDA J. SHERWOOD.

WILLIAM PORTER RAYEL, Commercial Litigation Branch, Civil Division, United States Department of Justice , Washington, DC, argued for defendant-appellee United States. Also represented by ETHAN P. DAVIS, ROBERT EDWARD KIRSCHMAN, JR., PATRICIA M. MCCARTHY.

DANIEL RUBEN FORMAN, Crowell & Moring, LLP, Washington, DC, argued for defendant-appellee Amazon 2 ORACLE AMERICA, INC. v. UNITED STATES

Web Services, Inc. Also represented by ROBERT JOSEPH SNECKENBERG, OLIVIA LOUISE LYNCH, ZACHARY H. SCHROEDER; GABRIELLE TRUJILLO, Los Angeles, CA; MARK ANDREW PERRY, Gibson, Dunn & Crutcher LLP, Washington , DC.

______________________

Before NEWMAN, BRYSON, and O’MALLEY, Circuit Judges. BRYSON, Circuit Judge.

This is a federal contract pre-award protest case. The United States Court of Federal Claims (“the Claims Court”) analyzed a number of legal challenges by Oracle America, Inc., to a large Department of Defense procurement. After a thorough treatment of all the issues presented, the Claims Court rejected Oracle’s protest. Oracle Am., Inc. v. United States, 144 Fed. Cl. 88 (2019). We affirm.

I

The procurement at issue in this case, known as the Joint Enterprise Defense Infrastructure (“JEDI”) Cloud procurement, is directed to the long-term provision of enterprise -wide cloud computing services to the Department of Defense. The JEDI Cloud solicitation contemplated a ten-year indefinite delivery, indefinite quantity contract. The Defense Department decided to award the contract to a single provider rather than making awards to multiple providers.

The JEDI Cloud solicitation included several “gate”

provisions that prospective bidders would be required to satisfy. One of the gate provisions, referred to as Gate Criteria 1.2 or Gate 1.2, required that the contractor have at least three existing physical commercial cloud offering data centers within the United States, each separated from the others by at least 150 miles. Those data centers were required to provide certain offerings that were “FedRAMP Moderate Authorized” at the time of proposal. The Federal

ORACLE AMERICA, INC. v. UNITED STATES 3

Risk and Authorization Management Program (“FedRAMP”) is an approach to security assessment, authorization , and continuous monitoring for cloud products and services. “FedRAMP Moderate Authorized” is a designation given to systems that have successfully completed the FedRAMP Moderate authorization process. FedRAMP Moderate is the Defense Department’s minimum security level for processing or storing the Department’s least sensitive information. Oracle did not satisfy the FedRAMP Moderate Authorized requirement as of the time the proposals were to be submitted.

Oracle filed a pre-bid protest challenging the solicitation . Oracle’s protest focused on the Department’s adoption of Gate 1.2 and on the Department’s decision to conduct the procurement on a single-source basis, rather than providing for multi-source contracts.

Following a hearing and briefing, the U.S. Government Accountability Office (“GAO”) denied the protest. Oracle then filed suit in the Claims Court challenging the solicitation . The court analyzed Oracle’s claims in detail and rejected Oracle’s protest in a lengthy opinion.

The court first addressed Oracle’s claim that the contracting officer and the Under Secretary of Defense violated separate provisions of 10 U.S.C. § 2304a when they each determined that it was appropriate to structure the JEDI Cloud procurement on a single-award basis rather than providing for multiple awards. Section 2304a sets out the conditions under which the Department may enter into large task and delivery order contracts with a single awardee, as opposed to awarding such contracts to two or more sources.

4 ORACLE AMERICA, INC. v. UNITED STATES

Section 2304a(d)(3) generally prohibits the award of a task or delivery order contract in excess of $100 million 1 to a single vendor unless the head of the agency determines in writing that one of four exceptions to that general prohibition applies. The exceptions are:

(i) the task or delivery orders expected under the contract are so integrally related that only a single source can efficiently perform the work; (ii) the contract provides only for firm, fixed price task orders or delivery orders for—

(I) products for which unit prices are established in the contract; or (II) services for which prices are established in the contract for the specific tasks to be performed ;

(iii) only one source is qualified and capable of performing the work at a reasonable price to the government ; or (iv) because of exceptional circumstances, it is necessary in the public interest to award the contract to a single source.

10 U.S.C. § 2304a(d)(3)(A).

In addition to that provision, section 2304a(d)(4) requires that regulations implementing section 2304a(d) “establish a preference for awarding, to the maximum extent practicable, multiple task or delivery order contracts for the same or similar services,” and that they “establish criteria for determining when award of multiple task or delivery order contracts would not be in the best interest of the

1 The statutorily defined threshold amount is subject to an inflation adjustment requirement. See 41 U.S.C. § 1908.

ORACLE AMERICA, INC. v. UNITED STATES 5

Federal Government.” 10 U.S.C. § 2304a(d)(4). Pursuant to that directive, the Federal Acquisition Regulation (“FAR”) provides that, except for indefinite-quantity contracts for advisory and assistance services, “the contracting officer must, to the maximum extent practicable, give preference to making multiple awards of indefinite-quantity contracts under a single solicitation for the same or similar supplies or services to two or more sources.” 48 C.F.R. § 16.504(c)(1)(i) (“FAR 16.504(c)(1)(i)”). The FAR further provides, however, that the contracting officer must not elect to use a multiple-contract award if one or more of several conditions applies:

(1) Only one contractor is capable of providing performance at the level of quality required because the supplies or services are unique or highly specialized ; (2) Based on the contracting officer’s knowledge of the market, more favorable terms and conditions, including pricing, will be provided if a single award is made; (3) The expected cost of administration of multiple contracts outweighs the expected benefits of making multiple awards; (4) The projected orders are so integrally related that only a single contractor can reasonably perform the work; (5) The total estimated value of the contract is less than the simplified acquisition threshold; or (6) Multiple awards would not be in the best interests of the Government.

6 ORACLE AMERICA, INC. v. UNITED STATES

FAR 16.504(c)(1)(ii)(B). 2 The head of the agency—in this case, Under Secretary of Defense Ellen Lord—made a finding under section 2304a(d)(3)(B)(ii) that a single-source contract was permissible because the solicitation provides exclusively for firm, fixed price task orders, or delivery orders for services for which prices are established in the contract for the specific tasks to be performed. For her part, the contracting officer found that three of the reasons set forth in FAR 16.504(c)(1)(ii)(B) prohibited the use of the multiple-award approach for the JEDI Cloud procurement: (1) more favorable terms and conditions, including pricing, would be provided in the case of a single award; (2) the expected cost of administering multiple contracts outweighed the expected benefits of making multiple awards; and (3) multiple awards would not be in the best interests of the government .

Before the Claims Court, Oracle challenged the determinations of both the contracting officer and Under Secretary Lord. As to the contracting officer, Oracle argued that she failed to properly balance the multiple-award preference against a single-award approach. As to Under Secretary Lord, Oracle argued that the JEDI Cloud solicitation contained provisions for future services that were not specifically defined and for which specific prices were not given. For that reason, Oracle contended, the contract did not qualify as one providing only for firm, fixed prices for services for which prices are established in the contract for the specific tasks to be performed.

2 On August 3, 2020, the regulation was amended to replace the phrase “less than” with “at or below.” Federal Acquisition Regulation: Evaluation Factors for Multiple- Award Contracts, 85 Fed. Reg. 40068-01 (July 2, 2020).

ORACLE AMERICA, INC. v. UNITED STATES 7

The Claims Court held that the contracting officer’s determination complied with the requirements of section 2304a(d)(4) and FAR 16.504(c). The court concluded that the contracting officer, based on her knowledge of the market , “drew the reasonable conclusion that a single award was more likely to result in favorable terms, including price.” Oracle, 144 Fed. Cl. at 113. In addition, the court found that it was “completely reasonable” for the contracting officer to find that a multisource award would be more expensive to administer and that a single cloud services provider would be best positioned to provide the necessary security for the agency’s data. Id. The court concluded that Oracle had pointed to no reason to disturb the contracting officer’s determination that multiple awards should not be employed.

With respect to section 2304a(d)(3), however, the Claims Court reached a different conclusion. The court held that the solicitation did not qualify for a single-source award under the exception relied on by Under Secretary Lord to the statutory prohibition against awarding large task order contracts to a single vendor. Specifically, the court found that the solicitation contemplated that during the life of the contract, services not envisioned at the time of the initial award would likely be needed. New services would likely have to be added to the contract in light of the fact that cloud computing technology was constantly evolving . The solicitation provided that if at some point during the pendency of the contract the cloud services provider created a new service, it would be required to offer that service to the Department at a price no higher than the price publicly available in the commercial marketplace in the continental United States. The solicitation also permitted the Department to obtain services before they were offered on the commercial market, even if those services would never be offered commercially. Those services, the court explained, could not be identified as “specific tasks” much less “priced[] at the time of the award.” Oracle, 144 Fed.

8 ORACLE AMERICA, INC. v. UNITED STATES

Cl. at 114. Accordingly, the court concluded, “the Under Secretary apparently chose an exception under § 2304a(d)(3) which does not fit the contract.” Id. at 115.

The Claims Court then turned to the question whether Oracle was prejudiced by the Department’s failure to comply with section 2304a(d)(3). Oracle argued that if the Department had employed a multiple-award procurement, Oracle might have had the chance to compete, because the agency’s needs, as expressed in the gate criteria, might have been different in that setting. The government responded that the agency’s minimum security needs would not have changed in a multiple-award scenario. In a multiple -award procurement, according to the government, the Department still would have insisted on gate criteria in general and Gate 1.2 in particular.

The Claims Court agreed with the government. The court acknowledged that “Oracle may well be correct that some aspects of the gate criteria are driven by the agency’s insistence on using a single provider to manage an immense amount of data.” Oracle, 144 Fed. Cl. at 115. The court observed, however, that “one critical aspect of the gate criteria is not connected to the choice of a single provider : data security.” Id. The court pointed in particular to a memorandum prepared by Tim Van Name, Deputy Director of the Defense Digital Service. In that memorandum , Mr. Van Name stated that FedRAMP Moderate, which was incorporated as a requirement in Gate 1.2, represented the Department’s minimum level of security required for processing and storing the Department’s least sensitive information. That level of security, according to Mr. Van Name’s memorandum, was “the minimum criteria necessary for DoD to have confidence that the Offeror’s proposed data centers have met the underlying physical security requirements necessary to successfully perform the contract.” J.A. 100947.

ORACLE AMERICA, INC. v. UNITED STATES 9

In addition, the court noted that many of the acquisition documents “bolster the agency’s conviction that use of multiple cloud service providers exponentially increases the challenge of securing data.” Oracle, 144 Fed. Cl. at 116. The court explained that it had “no reason to doubt” that the security requirements of Gate 1.2 “are the minimum that will be necessary to perform even the least sensitive aspects of the JEDI Cloud project.” Id. Based on that evidence , the court stated that “the only logical conclusion is that, if multiple awards were made, the security concerns would ratchet up, not down.” Id. Because the agency’s security concerns would not change, the court explained, Oracle “would not stand a better chance of being awarded this contract if the agency determined that the procurement must be changed to multiple award.” Id. The court therefore concluded that the decision to proceed with the procurement on a single-source basis did not prejudice Oracle.

The Claims Court next addressed Oracle’s claim that Gate 1.2 was unenforceable, both because the agency did not have a demonstrated need to impose the requirements set forth in Gate 1.2 and because Gate 1.2 is an impermissible “qualification requirement” imposed without satisfying the preconditions set forth in 10 U.S.C. § 2319. Section 2319(a) defines a “qualification requirement” as “a requirement for testing or other quality assurance demonstration that must be completed by an offeror before award of a contract .” Section 2319(b) provides that, except in limited circumstances , the agency must satisfy several prerequisites before establishing a qualification requirement. One such prerequisite is that “the head of the agency shall . . . prepare a written justification stating the necessity for establishing the qualification requirement and specify why the qualification requirement must be demonstrated before contract award.” 10 U.S.C. § 2319(b)(1).

The Claims Court rejected both of Oracle’s arguments that Gate 1.2 was unenforceable. As to the issue of need, 10 ORACLE AMERICA, INC. v. UNITED STATES

the court agreed with the government that Gate 1.2 was tied to the agency’s minimum needs. The court referred to the memorandum from Mr. Van Name, one of the principal architects of the solicitation requirement, which justified imposing the FedRAMP Moderate Authorized requirement on the ground that FedRAMP Moderate represents the Department ’s minimum security requirements for processing or storing the Department’s least sensitive information. As noted, Mr. Van Name explained that FedRAMP Moderate was the minimum level of security necessary for the Defense Department to have confidence that the Offeror’s proposed data centers would have been able to timely meet the physical security requirements needed to successfully perform the contract. Based on the record evidence, the court found that the requirement to satisfy FedRAMP Moderate is “a useful proxy . . . for the agency’s real need. If an offeror were unable to meet the lower threshold, it could not hope to meet the higher” security requirements that would be required during the performance of the contract. Oracle, 144 Fed. Cl. at 117.

As for Oracle’s argument that the government improperly used Gate 1.2 as a “qualification requirement” without satisfying the preconditions set forth in section 2319, the Claims Court ruled that Oracle had waived that argument by not raising it before the bids were due. Oracle did not raise the argument about the impermissible use of a qualification requirement until its post-hearing comments submitted to the GAO after the close of the bidding on the procurement.

In any event, the court concluded that there was no merit to the argument, because Gate 1.2 did not constitute “a requirement for testing or other quality assurance demonstration that must be completed by an offeror before award of a contract.” Id. (quoting 10 U.S.C. § 2319(a)). Instead , according to the Claims Court, Gate 1.2 constituted a specification. The statute describes a qualification requirement as generally consisting of “a qualified bidders

ORACLE AMERICA, INC. v. UNITED STATES 11

list, qualified manufacturers list, or qualified products list.” 10 U.S.C. § 2319(c)(3). A specification, by contrast, is a requirement “of the particular project for which the bids are sought, such as design requirements, functional requirements , or performance requirements.” W.G. Yates & Sons Constr. Co. v. Caldera, 192 F.3d 987, 994 (Fed. Cir. 1999) (citing 10 U.S.C. § 2305(a)(1)(C)).

The court concluded that Gate 1.2 is not a qualification requirement, because the agency did not require an offeror to prequalify in order to submit a proposal. In addition, the court explained, FedRAMP Moderate authorization is not an independent requirement that the Department regularly imposes in its procurements. Finally, the court pointed out that the security features that FedRAMP Moderate authorization imposes are the same security features that the Department believed were the minimum necessary to store the Department’s data for the JEDI Cloud project . Accordingly, the court found, the Department was not using the FedRAMP standard as a way to examine the offeror ’s past performance in storing government data. Rather , “it [was] a uniform way to determine which offerors have certain security capabilities on a number of their cloud offerings.” Oracle, 144 Fed. Cl. at 118.

The Claims Court next rejected Oracle’s argument that Gate 1.2 transformed the procurement into one that uses other than competitive procedures, in violation of 10 U.S.C. § 2304. The court found that the agency structured the procurement as a full and open competition, and that satisfying the gate criteria was merely the first step in ensuring that the Department’s time in the evaluation process was not wasted on offerors who could not meet the agency’s minimum needs.

Finally, the Claims Court examined Oracle’s claims that several Department officials who were involved in some way with the procurement had conflicts of interest, and that Amazon Web Services, Inc., (“AWS”), one of the 12 ORACLE AMERICA, INC. v. UNITED STATES

bidders on the contract, had an organizational conflict, all of which infected the procurement. The court addressed the question whether the contracting officer had properly assessed the impact of the conflicts on the procurement and found that she had. The court then concluded that the contracting officer had properly exercised her discretion in finding that the individual and organizational conflicts complained of by Oracle did not affect the integrity of the procurement.

Based on the court’s determination that Gate 1.2 is enforceable and Oracle’s concession that it could not meet the requirements of Gate 1.2 at the time of proposal submission , the Claims Court found that Oracle could not “demonstrate prejudice as a result of any other possible errors.” Oracle, 144 Fed. Cl. at 126. The court therefore denied Oracle ’s motion for judgment on the administrative record and granted the cross-motions filed by the government and intervenor AWS. Oracle then took this appeal.

II

Oracle’s principal argument on appeal is that the Defense Department committed legal error when it elected to conduct the JEDI Cloud procurement as a single-source procurement. Although the Claims Court agreed with Oracle that the Department committed legal error with respect to the ground it invoked to justify the use of a single- source procurement, the court found the error to be harmless . The court concluded that the error was harmless because even if the Department had opted for a multi-source procurement, Oracle would not have been able to satisfy the requirements of Gate 1.2, which the Department would have imposed regardless of whether the procurement was conducted on a single-source or multi-source basis.

A

In challenging the Department’s decision to conduct the JEDI Cloud procurement on a single-source basis,

ORACLE AMERICA, INC. v. UNITED STATES 13

Oracle begins by pointing out that Congress has expressed its preference for awarding, “to the maximum extent practicable , multiple task or delivery order contracts for the same or similar services or property.” 10 U.S.C. § 2304a(d)(4). Section 2304a(d) and the regulations issued pursuant to that provision state that the contracting officer and the agency head must make certain specified determinations before the agency can proceed with a single-source award in a large procurement such as this one. On appeal, Oracle does not take issue with the Claims Court’s finding that the contracting officer’s determination was reasonable . And Oracle agrees with the Claims Court that Under Secretary Lord’s rationale for approving the use of a single- source award for the JEDI Cloud procurement did not satisfy the exception to section 2304a(d)(3) that she invoked. Oracle takes issue, however, with the Claims Court’s conclusion that Oracle was not prejudiced by Under Secretary Lord’s determination.

In response, the government endorses the Claims Court’s “no-prejudice” ruling. In the alternative, the government argues that, apart from the merits of the court’s prejudice analysis, we may still affirm because the Claims Court incorrectly rejected Under Secretary Lord’s determination that a single-source award was justified under section 2304a(d)(3). Under Secretary Lord based that determination on the exception set forth in section 2304a(d)(3)(B)(ii) for contracts that provide for “firm, fixed price task orders or delivery orders” for services for which “prices are established in the contract for the specific tasks to be performed.” The Claims Court, however, held that the JEDI Cloud solicitation did not provide for “firm, fixed price task orders” for which prices were established in the contract, because the solicitation contained provisions for the awardee to supply unspecified services in the future at as-yet unspecified prices.

The government’s argument that the contract provides only for firm, fixed price task orders is unpersuasive for the 14 ORACLE AMERICA, INC. v. UNITED STATES

reasons given by the Claims Court. The JEDI Cloud contract contains a technology refresh provision (section H2) that allows the addition of new cloud services during the period of contract performance, when those services did not exist at the time of award, in order “to keep pace with advancements in the industry.” Under that clause, it is anticipated that there will be updates to the cloud services during the pendency of the contract. Thus, the solicitation provides that new services will be added, with new prices, that are not provided for in the initial contract.

The government argues that the exception in section 2304a(d)(3)(B)(ii) applies here because the statute does not require that “all tasks/prices must be established ‘at the time of the award.’” Rather, the government argues, the requirement that tasks and prices be “established in the contract” does not address when the “tasks and prices upon which future orders will be based must be ‘established.’” It is enough, according to the government, that new tasks and prices are set pursuant to the terms of the contract, including section H2, and the subsequent task orders are issued on a fixed-price basis.

The Claims Court properly rejected the government’s argument. As the court explained, the language of section 2304a(d)(3) makes clear that the services to be performed under the contract and the prices for those services must be established in the contract at the time of award. That follows from the provision in the statute that “no . . . contract . . . may be awarded” unless the agency head determines that the “contract provides only for firm, fixed price task orders or delivery orders for . . . services for which prices are established in the contract.” 10 U.S.C. § 2304a(d)(3). The plain language of the statute refers to conditions that must exist at the time of the contract award.

ORACLE AMERICA, INC. v. UNITED STATES 15

B

Having found that the statutory prerequisite for use of a single-source contract had not been satisfied, the Claims Court moved to the question whether that flaw in the process prejudiced Oracle. The court found no prejudice from the error based on the court’s finding that the agency’s minimum needs, as expressed in Gate 1.2, would not have been different in a multi-award scenario than in a single-award scenario. Therefore, the court concluded, even if the agency had been required to conduct the procurement on a multiple -award basis, the requirements of Gate 1.2 would have applied. And because Oracle would not have been able to satisfy those requirements, it would have had no chance of a contract award, so the flaw in the procurement process did not harm Oracle.

Oracle takes issue with the Claims Court’s harmless error analysis. In particular, Oracle argues that the Claims Court erred by accepting the government’s argument that under a multiple-award solicitation the Department would still have insisted on imposing Gate 1.2. That decision, Oracle argues, was one that should have been made by the agency. It was improper, according to Oracle, for the court to decide that the agency would have insisted on Gate 1.2 even if it had known that it was required to use a multiple-award solicitation for the JEDI Cloud procurement . Citing SEC v. Chenery Corp., 318 U.S. 80 (1943), Oracle contends that the Claims Court should not have “presume[d] how DoD would structure a multiple-award procurement as DoD must make that decision in the first instance.” Appellant’s Br. 35–36.

The Supreme Court has referred to the Chenery doctrine as embodying a “‘foundational principle of administrative law’ that judicial review of agency action is limited to ‘the grounds that the agency invoked when it took the action.’” Dep’t of Homeland Sec. v. Regents of the Univ. of Cal., 140 S. Ct. 1891, 1907 (2020) (quoting Michigan v.

16 ORACLE AMERICA, INC. v. UNITED STATES

EPA, 576 U.S. 743, 758 (2015)). In Chenery, the Supreme Court explained the rationale for that rule:

If an order is valid only as a determination of policy or judgment which the agency alone is authorized to make and which it has not made, a judicial judgment cannot be made to do service for an administrative judgment. For purposes of affirming no less than reversing its orders, an appellate court cannot intrude upon the domain which Congress has exclusively entrusted to an administrative agency.

318 U.S. at 88.

The Chenery doctrine, however, does not invariably require a remand to the agency whenever a court holds that the agency’s action was based on legally improper grounds. As the Supreme Court, this court, and other circuit courts have recognized, principles of harmless error apply to judicial review of agency action generally. A remand is unnecessary when the error in question “clearly had no bearing on the procedure used or the substance of decision reached,” Mass. Trs. of E. Gas & Fuel Assocs. v. United States, 377 U.S. 235, 248 (1964); if there is no reason to believe that the decision would have been different, In re Watts, 354 F.3d 1362, 1370 (Fed. Cir. 2004); if it is clear that the agency would have reached the same result, Fleshman v. West, 138 F.3d 1429, 1433 (Fed. Cir. 1998); if the result is “foreordained,” Bethlehem Steel Corp. v. Gorsuch, 742 F.2d 1028, 1036 (7th Cir. 1984); if the court is not “in substantial doubt whether the administrative agency would have made the same ultimate finding with the erroneous finding removed,” Kurzon v. U.S. Postal Serv., 539 F.2d 788, 796 (1st Cir. 1976); or where there is no “significant chance that but for the error, the agency might have reached a different result,” NLRB v. Am. Geri-Care, Inc., 697 F.2d 56, 64 (2d Cir. 1982).

As this court has summed up the rule, a court may affirm the decision of an agency on a ground other than the

ORACLE AMERICA, INC. v. UNITED STATES 17

ground given by the agency, so long as it is clear that the agency would have reached the same decision if it had been aware that the ground it invoked was legally unavailable, or if the decision does not depend on making a finding of fact not previously made by the agency. See Ford Motor Co. v. United States, 811 F.3d 1371, 1380 (Fed. Cir. 2016); Killip v. OPM, 991 F.2d 1564, 1568–69 (Fed. Cir. 1993); Ward v. Merit Sys. Prot. Bd., 981 F.2d 521, 528 (Fed. Cir. 1992).

In this case, the Claims Court found, based on the evidence in the administrative record, that the Defense Department would have stuck with Gate 1.2 even if it had been required to conduct the procurement on a multiple- award basis. As the court explained:

[T]he only logical conclusion is that, if multiple awards were made, the security concerns would ratchet up, not down. They are, indeed, minimally stated. If Oracle cannot meet Gate Criteria 1.2 as currently configured, it is thus not prejudiced by the decision to make a single award. The agency’s needs would not change, so Oracle would not stand a better chance of being awarded this contract if the agency determined that the procurement must be changed to [a] multiple award.

Oracle, 144 Fed. Cl. at 116.

This appeal is a review of a Claims Court decision on an administrative record. We review a finding of prejudice or no prejudice by the Claims Court in a trial on an administrative record under the clearly erroneous standard. See Office Design Grp. v. United States, 951 F.3d 1366, 1374 (Fed. Cir. 2020); CliniComp Int’l, Inc. v. United States, 904 F.3d 1353, 1359 (Fed. Cir. 2018); Diaz v. United States, 853 F.3d 1355, 1359 (Fed. Cir. 2017); Bannum, Inc. v. United States, 404 F.3d 1346, 1354 (Fed. Cir. 2005). “To establish prejudicial error, a party must show that “but for the error, it would have had a substantial chance of securing the 18 ORACLE AMERICA, INC. v. UNITED STATES

contract.” Labatt Food Serv., Inc. v. United States, 577 F.3d 1375, 1378 (Fed. Cir. 2009). 3 In light of the Claims Court’s careful consideration of the record evidence, the court’s conclusion that the Defense Department would have included Gate 1.2 even if it had modified the solicitation to allow for multiple awards, and that Oracle therefore would not have had a substantial chance of securing the contract, is not clearly erroneous. We therefore will not disturb the Claims Court’s determination that the case did not need to be remanded to the Defense Department for a further determination whether a single-source award is appropriate . 4

III

Oracle next argues that Gate 1.2 transformed the procurement into one that did not use competitive procedures.

3 Oracle asserts that in pre-award protests, “non-

trivial competitive injury which can be redressed by judicial relief” establishes prejudice. Appellant’s Br. 33 (quoting Weeks Marine, Inc. v. United States, 575 F.3d 1352, 1361 (Fed. Cir. 2009)). In some pre-award cases, we have used the “non-trivial competitive injury” test “because there is an inadequate factual foundation for performing a ‘substantial chance’ test.” Orion Tech., Inc. v. United States, 704 F.3d 1344, 1348 (Fed. Cir. 2013). In this case, however, there was an adequate factual predicate to apply the “substantial chance” test.

4 Oracle argues, inter alia, that a remand to the agency is justified because Oracle now meets the FedRAMP Moderate Authorized standard set forth in the solicitation and should be allowed to bid on the contract based on its current qualifications. The issue before the Claims Court and before us, however, is whether the agency committed prejudicial error in the solicitation as of the time that Oracle filed its protest. Subsequent events are irrelevant to that inquiry.

ORACLE AMERICA, INC. v. UNITED STATES 19

Oracle further contends that the Defense Department was required to complete a mandatory justification and approval process before using procedures other than competitive procedures, such as Gate 1.2. According to Oracle, the Defense Department failed to do so. The government responds that the Defense Department was not required to engage in the justification and approval process because the JEDI Cloud procurement used competitive procedures. We agree with the government.

Section 2304 of Title 10 prohibits an agency from using “other than competitive procedures” in contracting, except in certain limited circumstances. See 10 U.S.C. § 2304(c). Even in such circumstances, section 2304(f) further provides that the head of the agency generally “may not award a contract using procedures other than competitive procedures unless . . . the contracting officer for the contract justifies the use of such procedures in writing and certifies the accuracy and completeness of the justification” and “the justification is approved.”

Oracle makes several arguments in support of its contention that the procurement used other than competitive procedures. First, Oracle contends that the Department knew that only two offerors, AWS and Microsoft, could satisfy Gate 1.2 at the time the proposals were due. According to Oracle, the decision to adopt Gate 1.2 was therefore equivalent to prohibiting any parties other than AWS and Microsoft from bidding on the JEDI Cloud contract. Oracle adds that the evidence showed that the Department “devised the gated approach for the express purpose of limiting the number of proposals received.” Appellant’s Br. 41.

Oracle also relies on the regulations issued pursuant to section 2304. In particular, Oracle relies on the regulation that provides that when there is “a reasonable basis to conclude that the agency’s minimum needs can only be satisfied by . . . a limited number of sources,” full and open 20 ORACLE AMERICA, INC. v. UNITED STATES

competition does not exist and the agency must follow the justification and approval process. FAR 6.302-1(b)(1)(ii).

We see no error in the Claims Court’s rejection of Oracle ’s arguments. Citing this court’s decision in National Government Services, Inc. v. United States, 923 F.3d 977 (Fed. Cir. 2019), the Claims Court explained that a solicitation requirement is not necessarily objectionable simply because the requirement has the effect of excluding certain offerors who cannot satisfy that requirement. The Claims Court found that “[t]he few record statements Oracle highlights are insufficient to demonstrate” that the Department was using “other than competitive procedures” in the JEDI Cloud procurement. Oracle, 144 Fed. Cl. at 119. Rather, the court explained, the Department “structured this procurement to use full and open competition and the gate criteria are just the first step in the evaluation of proposals.” Id. The court added that the use of the gate criteria could have occurred at any point in the evaluation of the proposals ; “the agency simply put the gate criteria first to ensure its evaluation was not wasted on offerors who could not meet the agency’s minimum needs.” Id.

As the Claims Court explained, “evaluation criteria which have the effect of limiting competition do not necessarily trigger the procedures required by § 2304(c).” Id. “Full and open competition . . . means that all responsible sources are permitted to submit sealed bids or competitive proposals on the procurement.” 41 U.S.C. § 107; 10 U.S.C. § 2302(3)(D). Even if the agency expected that only certain firms would be able to satisfy the agency’s minimum needs, the solicitation permitted all responsible sources to submit proposals. Under these circumstances, we agree with the Claims Court that the FedRAMP Moderate authorization component of Gate 1.2 did not transform the solicitation into one for less than full and open competition.

Nor did the Department violate FAR 6.302-1. That regulation is one of several “authorities” that “permit

ORACLE AMERICA, INC. v. UNITED STATES 21

contracting without providing for full and open competition .” FAR 6.302. In this case, the Department did not prohibit any responsible sources from submitting proposals , so the Department did not need to invoke section 6.302-1 as authority to contract without providing for full and open competition.

IV

Oracle next argues that Gate 1.2 violated 10 U.S.C.

§ 2319, which requires, inter alia, a written justification when the Defense Department imposes a “qualification requirement ” in a solicitation. Section 2319(a) defines a “qualification requirement” as a “requirement for testing or other quality assurance demonstration that must be completed by an offeror before award of a contract.” Oracle contends that Gate 1.2 constituted a qualification requirement , as that term has been interpreted, and that because there was no advance written justification for that requirement , Gate 1.2 is unenforceable.

The Claims Court held that Oracle waived the section 2319 argument by not raising it on a timely basis. The court also held that even if the argument had been timely raised, it failed on the merits, because Gate 1.2 is not a “qualification requirement” within the meaning of that term in section 2319.

The Claims Court correctly held that Gate 1.2 does not constitute a “qualification requirement” within the meaning of section 2319. 5 “An essential step in every procurement involves a determination that the potential contractor is qualified to serve as a Government contractor .” J. Cibinic, Jr. & R. Nash, Jr., Formation of

5 Because we agree with the Claims Court that Gate 1.2 is not a “qualification requirement,” we do not reach the issue of whether the Claims Court correctly held that Oracle waived its section 2319 argument.

22 ORACLE AMERICA, INC. v. UNITED STATES

Government Contracts 403 (3d ed. 1998). That determination requires consideration of whether the firm can be expected to complete the contract work on time and in a satisfactory manner. Id. In an individual procurement, the government uses “nonresponsibility” determinations to avoid awarding contracts to unqualified firms. Id. Although the government is required to make a determination of responsibility in every case, see 10 U.S.C. 2305(b)(4)(C); FAR 9.103, we do not think that Congress intended to impose the obligations enumerated in section 2319 on every government procurement.

Instead, as this court has explained, section 2319 draws a line between extraneous “qualification requirements ,” such as a qualified manufacturers list, and requirements that are intrinsic to the particular solicitation, such as requirements that are directed to ensure that the contractor will be able to satisfy the requirements of that solicitation. In W.G. Yates & Sons Construction Co. v. Caldera , 192 F.3d 987 (Fed. Cir. 1999), the case on which Oracle principally relies, this court held that a particular prerequisite fell on the “extraneous requirement” side of that line. There, a solicitation for the production of aircraft hangar doors required that the manufacturer either be prequalified or have previously made similar products. We held that those requirements constituted qualification requirements because they were not directly tied to the needs of the procurement.

Unlike the requirements in the Yates case, the agency in this case used Gate 1.2 in a way that did not implicate section 2319. Gate 1.2 is analogous to an “intrinsic” requirement in, for example, a contract for emergency military air transport services that the bidding companies have a minimum number of certified pilots available at the time proposals are submitted. Such a requirement would ensure that the company would be ready to proceed on day one of the contract and would not have to hire or train pilots . Gate 1.2 serves a similar purpose in the JEDI Cloud

ORACLE AMERICA, INC. v. UNITED STATES 23

solicitation. In particular, the Department was evaluating whether the actual data centers that would or could be used to provide cloud services would be able to meet the agency’s minimum security needs on the proposed schedule . As Mr. Van Name’s memorandum explained, the agency believed that if an offeror could not satisfy the security requirements represented by FedRAMP Moderate at the time of proposal, that offeror would not be able to satisfy the more stringent security requirements the offeror would be required to meet shortly after award. 6 That is a standard type of responsibility determination that contracting officers regularly make. See FAR 9.104-1 (“To be determined responsible, a prospective contractor must . . . [b]e able to comply with the required or proposed delivery or performance schedule . . . [and] [h]ave the necessary production, construction, and technical equipment and facilities, or the ability to obtain them”); 50 State Sec. Serv., Inc., Comp. Gen. Dec. B-272114, 96-2 CPD ¶ 123 (Sept. 24, 1996) (upholding contracting officer’s determination that the protestor did not have the ability to have a sufficient number of prison guards in place when performance of the contract was set to begin); Sys. Dev. Corp., Comp. Gen. Dec. B-212624, 83-2 CPD ¶ 644 (Dec. 5, 1983) (upholding nonresponsibility determination based on the agency’s conclusion that the protestor would not be able to comply with the proposed delivery schedule because the protestor had not yet secured “confirmation of supplier’s

6 Under the solicitation, the awardee would be required , shortly after the award, to meet a modified version of the FedRAMP High security requirements, sometimes referred to in the record as “FedRAMP High Plus.” According to Mr. Van Name’s testimony, there are “325 requirements that FedRAMP Moderate covers, and there is a difference of about 145 to get to FedRAMP High. But a few of those, we’ve granted exemptions to . . . .” J.A. 105496.

24 ORACLE AMERICA, INC. v. UNITED STATES

and subcontractor’s commitments to deliver items and equipment with long lead-times”). And in this case, because Gate 1.2 did not relate to an extraneous quality assurance demonstration, such as the successful completion of other related projects, the responsibility determination did not implicate section 2319.

V

Oracle next contends that Gate 1.2 was unreasonable in light of the Defense Department’s needs, and that the solicitation should be invalidated on the ground that it unnecessarily restricted competition. The Claims Court analyzed at some length the Department’s needs as the Department assessed them and found that the gating requirements , including Gate 1.2, were reasonable in light of that context. For that reason, the court found that the solicitation requirements did not unduly restrict competition .

Oracle has not provided a sufficient basis for overturning the Claims Court’s determination on that issue. As the Claims Court observed, an agency’s assessment of its needs in a procurement should not readily be second-guessed by a court. We are even more removed from a detailed assessment of the needs of the procurement than the Claims Court and therefore are even more hesitant to override the agency’s judgment as to its needs. Oracle has not shown that the Department’s determination as to its need for a level of security represented by Gate 1.2 was unreasonable; that clause of the solicitation therefore cannot be rejected as unnecessarily restrictive of competition

VI

In the final section of its brief, Oracle contends that conflicts of interest on the part of three former Defense Department employees tainted the procurement in a way that requires that the solicitation be set aside. When the claimed conflicts surfaced, the contracting officer

ORACLE AMERICA, INC. v. UNITED STATES 25

conducted a detailed investigation and made findings as to the conflicts and their effects on the procurement. She determined that although there were conflicts of interest on the part of two of the employees, those conflicts and the asserted conflict on the part of the third employee did not have any effect on the procurement. After reviewing the contracting officer’s findings, the Claims Court concluded that the contracting officer’s investigation was thorough and her “no effect” determination was reasonable.

A

Oracle raises a number of challenges to the Claims Court’s ruling with respect to the conflicts of interest. At the outset, Oracle argues that the Supreme Court’s decision in United States v. Mississippi Valley Generating Co., 364 U.S. 520 (1961), sets forth a per se rule that conflicts of interest that violate the federal criminal conflict-of-interest statute, 18 U.S.C. § 208, invalidate any government contracts to which the conflicts relate. Based on that interpretation of the Mississippi Valley case, Oracle argues that the conflicts of interest on the part of the former Defense Department employees invalidate the JEDI Cloud solicitation regardless of whether their conflicts had any effect on the solicitation.

Contrary to Oracle’s contention, the Mississippi Valley case is best read as providing that conflicts of interest invalidate government contracts only if the conflicts materially affect the contracts. That is the way this court read the Mississippi Valley case in Godley v. United States, 5 F.3d 1473 (Fed. Cir. 1993). In that case, we noted that the illegality in the Mississippi Valley case “permeated the contract .” Id. at 1475–76 (citing Mississippi Valley, 364 U.S. at 553). We then went on to explain:

A contract without the taint of fraud or wrongdoing , however, does not fall within this rule. Illegal acts by a Government contracting agent do not alone taint a contract and invoke the void ab initio 26 ORACLE AMERICA, INC. v. UNITED STATES

rule. Rather, the record must show some causal link between the illegality and the contract provisions . Determining whether illegality taints a contract involves questions of fact.

Id. at 1476; see also Long Island Sav. Bank, FSB v. United States, 503 F.3d 1234, 1250 (Fed. Cir. 2007) (“In Godley, we emphasized that for a government contract to be tainted by fraud or wrong doing and thus void ab initio, the record must show some causal link between the fraud and the contract .”).

We are bound by that ruling interpreting the Mississippi Valley case, and we therefore reject Oracle’s argument that the conflicts of interest in this case invalidate the solicitation regardless of whether they had any effect on the procurement.

B

The Claims Court separately addressed each of the individual conflicts of interest as well as related allegations of an organizational conflict of interest on the part of AWS. The court noted that under the FAR, a contracting officer who receives information about a conflict of interest on the part of persons involved in a procurement “must determine if the reported violation or possible violation has any impact on the pending award or selection of the contractor.” Oracle, 144 Fed. Cl. at 121 (quoting FAR 3.104-7(a)). If the contracting officer determines that there is no impact on the procurement, the contracting officer must forward the information to a designated individual within the agency, and if that individual agrees with the contracting officer, the procurement may proceed. Id.

The contracting officer for the JEDI Cloud project reviewed each of the alleged conflicts of interest and found that while some of the conduct in question was improper, none of the activities by the individuals in question affected the solicitation, and in particular that none of those

ORACLE AMERICA, INC. v. UNITED STATES 27

activities affected the decision to employ a single-award approach or the use of the gating requirements for the procurement . A designated Department official concurred in the contracting officer’s findings in each instance.

The standard for Claims Court review of a contracting officer’s decision with regard to a conflict of interest is highly deferential. A contracting officer’s conflict of interest determination will be upheld unless it is “arbitrary, capricious , or otherwise contrary to law.” PAI Corp. v. United States, 614 F.3d 1347, 1352 (Fed. Cir. 2010). If the contracting officer’s findings are rational, they will be upheld on judicial review. See Turner Constr. Co. v. United States, 645 F.3d 1377, 1383–87 (Fed. Cir. 2011).

The Claims Court upheld the contracting officer’s conclusion that the alleged conflicts on the part of the three Defense Department employees had no impact on the procurement . Specifically, the court ruled that the contracting officer was correct in concluding that the three individuals “were bit players in the JEDI Cloud project,” in that none of them held responsible positions with regard to the procurement . Oracle, 144 Fed. Cl. at 121. Based on its analysis , the court concluded that “[w]hile they should not have had the opportunity to work on the JEDI Cloud procurement at all, or at least for certain periods of time, nevertheless , their involvement does not taint the work of many other persons who had the real control of the direction of the JEDI Cloud project.” Id.

The three former Defense Department employees whose conduct is at issue are Deap Ubhi, Anthony DeMartino , and Victor Gavin. Oracle challenges the Claims Court’s conclusions as to the conflict of interest claims with respect to all three employees. Specifically, Oracle contends that the conflicted employees influenced the procurement by affecting the decision to use a single award and the selection of the gate criteria. While we share the views of the contracting officer and the Claims Court that some 28 ORACLE AMERICA, INC. v. UNITED STATES

of the conduct at issue is troubling, at the end of the day we agree with the Claims Court that the conflict of interest problems of those three individuals had no effect on the JEDI Cloud solicitation.

The Claims Court, like the contracting officer, concluded that at least two of the Department officials, Mr. Ubhi and Mr. Gavin, disregarded their ethical obligations by negotiating with AWS for employment while working on the procurement. The court added that the Department, because of “lax oversight, or in the case of Ubhi, deception . . . was apparently unaware of this fact.” Id. at 120. As the Claims Court explained, however, the question before it was “whether any of the actions called out make a difference to the outcome,” and in particular, whether the contracting officer’s conclusion of no impact was reasonable. Id. As to that issue, the court found that the contracting officer conducted a detailed examination of the record, that her work was “thorough and even-handed,” that she “understood the legal and factual questions and considered the relevant evidence,” and that she “determined that, although there were some violations or possible violations of law relating to conflicts of interest, those conflicted individuals did not impact the decision to use a single award approach or the substance of the evaluation factors.” Id. at 120–21.

1

Mr. Ubhi was employed by AWS until January 2016.

After a period of time working for the Defense Department between August 2016 and November 2017, he returned to AWS. The contracting officer found that during Mr. Ubhi’s tenure in the Department, he was involved in marketing research activities for the JEDI Cloud procurement and that he participated in drafting and editing some of the first documents shaping the procurement.

In October 2017, Mr. Ubhi advised the Department that a company he had founded might be engaging in

ORACLE AMERICA, INC. v. UNITED STATES 29

discussions with Amazon, the owners of AWS, and that he was recusing himself from further involvement in the JEDI Cloud procurement. The contracting officer subsequently concluded that Mr. Ubhi’s involvement in the procurement did not materially impact the procurement, for several reasons : the restrictions on his involvement based on his prior employment had expired by the time he began working on the procurement; his participation in the procurement was limited; and he promptly recused himself when the potential conflict arose.

It was later determined that the reason Mr. Ubhi gave for his recusal was false, and that instead he was negotiating for employment with AWS during the period before his recusal. When that fact came to light, the contracting officer reassessed the impact of Mr. Ubhi’s actions in light of the new information. While the contracting officer found that Mr. Ubhi’s behavior was troubling, she again determined that Mr. Ubhi’s conflict of interest had not tainted the JEDI Cloud procurement.

The Claims Court agreed with the contracting officer that Mr. Ubhi’s behavior was troubling. The court agreed with the contracting officer that despite being aware of his ethical obligations, Mr. Ubhi ignored them and remained involved in the procurement when he should not have been.

The situation with respect to Mr. Ubhi is more complex than is the case for the other alleged conflicts of interest. As the contracting officer recognized, his behavior was “disconcerting ,” as he was aware of his ethical obligations, but “ignored them.” Oracle, 144 Fed. Cl. at 122. The contracting officer concluded that Mr. Ubhi had violated FAR 3.101-1 and possibly other statutory and regulatory provisions governing conflicts of interest, including 18 U.S.C. § 208. Nonetheless, the contracting officer and the Claims Court noted that when Mr. Ubhi returned to AWS, he did not work on the JEDI Cloud proposal team or in AWS’s Federal Business Sector or its DoD Programs section.

30 ORACLE AMERICA, INC. v. UNITED STATES

Moreover, the contracting officer found no evidence that Mr. Ubhi had shared any information with the team at AWS that was working on the JEDI Cloud procurement. The court found that the contracting officer’s investigation in that regard was thorough and that there was no reason to disturb it.

The contracting officer also found that even if Mr. Ubhi had disclosed nonpublic information to AWS, none of it would have been competitively useful. And she found that his seven-week period of work on the preliminary planning stage of the JEDI Cloud procurement did not introduce bias in favor of AWS. The Claims Court found the contracting officer’s conclusions on those issues to be supported by the record. The Claims Court, moreover, found that Mr. Ubhi’s primary role was industry liaison; the record did not “warrant attributing to him any serious involvement in the technical or security aspects of the gate criteria.” Oracle, 144 Fed. Cl. at 123.

Based on its review of the record, the Claims Court found that the contracting officer correctly concluded that although Mr. Ubhi should not have worked on the JEDI Cloud procurement, his involvement did not affect the procurement in any material way. With regard to the decision whether to use a single award or multiple awards, the Claims Court noted that the Defense Department’s Cloud Executive Steering Group (of which Mr. Ubhi was not a member) expressed a preference for a single-award approach early on in the process, before Mr. Ubhi’s involvement . Yet even after Mr. Ubhi left the Department, “the Deputy Secretary remained unconvinced regarding which approach to use,” and the contracting officer recalled that as of April 2018, long after Mr. Ubhi was gone, “the single award decision was still being vigorously debated.” Oracle, 144 Fed. Cl. at 123–24. Thus, the contracting officer concluded that Mr. Ubhi had no effect on the decision to use a single-award approach or the fashioning of the gate criteria . The Claims Court sustained that judgment.

ORACLE AMERICA, INC. v. UNITED STATES 31

Oracle first argues that the contracting officer “failed to consider an important aspect of the problem” because she did not wait for the results of the Department of Defense inspector general’s investigation of the conflict of interest allegations with respect to Mr. Ubhi as well as Mr. Gavin. That contention is meritless. The contracting officer found that Mr. Ubhi and Mr. Gavin had conflicts of interest that violated federal regulations and possibly section 208. Neither the contracting officer nor the Claims Court needed the results of the inspector general’s investigation to confirm whether Mr. Ubhi and Mr. Gavin had acted improperly. 7 The critical question for the contracting

7 In April 2020, the Department of Defense Office of Inspector General (“OIG”) issued a report detailing its extensive review of the JEDI Cloud procurement, including its conclusions regarding Mr. Ubhi’s and Mr. Gavin’s alleged ethical violations and the impact of those violations on the procurement. With respect to Mr. Ubhi, the OIG reached the following conclusion:

In sum, we concluded that Mr. Ubhi engaged in unethical conduct when he made three false statements and failed to properly report financial interests in Amazon. These actions, combined with his involvement in early Cloud Initiative activities in September and October 2017, also created the appearance of violation of laws and ethical standards . However, his early involvement in the Cloud Initiative was not substantial and did not provide any advantage to his prospective employer, Amazon , in the JEDI Cloud contract competition, which was decided 2 years after Mr. Ubhi’s resignation from the DoD. Although Mr. Ubhi’s Cloud actions from September through October 2017 violated the JER and the FAR, his minimal and limited contributions were largely discarded and did not affect 32 ORACLE AMERICA, INC. v. UNITED STATES

officer and the Claims Court was whether their improper conduct had impacted the procurement in a way that required the solicitation to be set aside. On that issue, the contracting officer’s investigation, which the Claims Court held to be thorough and even-handed, was sufficient.

Second, Oracle argues that the Claims Court improperly upheld the contracting officer’s determination with respect to the impact of Mr. Ubhi’s conflict of interest on a ground different from that adopted by the contracting officer . According to Oracle, the Claims Court held, in effect, that Mr. Ubhi’s involvement in the JEDI Cloud procurement occurred too late to influence the single-award decision , while the contracting officer concluded that Mr. Ubhi’s involvement in the procurement occurred too early,

the conduct or outcome of the JEDI Cloud procurement .

Dep’t of Def. Off. of Inspector Gen., Rep. on the Joint Enterprise Def. Infrastructure (JEDI) Cloud Procurement 157 (Apr. 13, 2020). The OIG also noted that it presented its findings regarding Mr. Ubhi to the United States Attorney for the Eastern District of Virginia for consideration as a criminal matter, but prosecution was declined. Id. at 154. With respect to Mr. Gavin, the OIG reached the following conclusion:

In sum, we concluded that Mr. Gavin should have used better judgment by not attending the April 5, 2018, JEDI Cloud Acquisition strategy meeting after he had accepted a job with AWS, or by sending someone else in his place, to avoid the appearance of a conflict. However, he did not violate ethical standards by following the ethics advice he received , and his participation in the meeting did not affect the JEDI Cloud procurement.

Id. at 166.

ORACLE AMERICA, INC. v. UNITED STATES 33

i.e., before the final decisions were made as to whether to award one or multiple contracts.

That is too facile a characterization of the ground for the Claims Court’s decision. The court recognized that, as the contracting officer found, the decision whether to use a single award or multiple awards was not made until long after Mr. Ubhi left the Defense Department. In fact, the Claims Court cited the contracting officer’s remark that she had attended a meeting in April 2018, well after Mr. Ubhi’s departure, in which the issue was “still being vigorously debated.” Oracle, 144 Fed. Cl. at 124. Yet, as the court noted, the record also showed that at a September 2017 meeting of the Cloud Executive Steering Group, of which Mr. Ubhi was not a member, the group expressed a preference for a single award. The Claims Court’s point was that there was an expressed preference among the decisionmakers for a single award approach from prior to the time Mr. Ubhi was involved in the procurement, but the debate on that issue continued until after he was gone. And a final decision was not made until months after his departure. Under those circumstances, the contracting officer and the Claims Court agreed, there was no indication that Mr. Ubhi’s brief seven-week involvement in the procurement materially affected the decision to use a single- award approach.

Oracle next contends that the Ubhi no-impact determination “runs counter to the evidence before the agency.” There is no force to this argument. Oracle’s contention that Mr. Ubhi “deliberately, systematically, and successfully influenced individuals to adopt the single-award approach” far outruns the limited evidence Oracle cites to support it. First, Oracle cites two separate instant messages in which a Department attorney told Mr. Ubhi, “Single is assumed now,” and added, “Really glad you were here this week.” That is not evidence that Mr. Ubhi’s support for a single- award approach was important to the decision. Moreover, as the contracting officer found, the evidence shows that 34 ORACLE AMERICA, INC. v. UNITED STATES

the issue of single-versus-multiple contract awards was debated long after Mr. Ubhi’s departure from the agency, contrary to the implication in the instant message. Second, Oracle cites an instant message from Mr. Van Name in which he stated: “The single [vs.] multiple conversation is done. Everyone that matters is now convinced; Thursday’s meeting was decidedly clear that we are all in favor of a single award.” That message, however, does not remotely suggest that Mr. Ubhi’s preference for a single-award approach was important to, or otherwise materially affected, the decisionmakers’ selection.

Oracle next argues that the contracting officer was wrong to state that there was no evidence that Mr. Ubhi’s participation “had any substantive impact on the procurement decisions or documents,” because there was evidence that Mr. Ubhi “edited material in October 2017” that the Department ultimately included in the solicitation. But the contracting officer reviewed Mr. Ubhi’s “edits” in detail, and concluded that Mr. Ubhi’s “influence and direct edits to the documents were minimal.” The contracting officer estimated that Mr. Ubhi contributed an estimated 100 changes to the Problem Statement, “ranging in significance from formatting and grammar to revision of sentences and paragraphs,” which were made as part of a group effort. In addition, the contracting officer noted, Mr. Ubhi’s participation “contributed a total of eight (8) edits to the [request for information], all of which were contained within two sentences.” Contrary to Oracle’s contention, the evidence amply supports the contracting officer’s conclusion that Mr. Ubhi did not materially impact the solicitation, particularly with respect to the single-award approach and the gating requirements.

On a separate issue, Oracle briefly contends that the contracting officer was wrong to find that there was “no evidence that . . . [Mr.] Ubhi obtained or disclosed any competitively useful nonpublic information.” In fact, Oracle argues, Mr. Ubhi had access to sensitive information,

ORACLE AMERICA, INC. v. UNITED STATES 35

including the JEDI Cloud team’s Google drive, which he had on his computer. The contracting officer, however, found that Mr. Ubhi did not share any competitively useful nonpublic information with AWS and was not in a position to do so. The contracting officer noted that when Mr. Ubhi was rehired by AWS, he did not join AWS’s JEDI Cloud proposal team, but joined the commercial team that was not involved in government contracts. Moreover, Mr. Ubhi was subject to firewalls within AWS, and the contracting officer reviewed numerous affidavits from AWS employees stating that he had not disclosed nonpublic information and that he was excluded from any involvement with AWS’s JEDI Cloud proposal. In light of the deferential standard of review for contracting officers’ findings regarding conflicts of interest, the finding that Mr. Ubhi did not share sensitive information with AWS must be sustained.

2

Mr. DeMartino was a consultant for AWS before joining the Defense Department and therefore was prohibited by applicable ethics rules from participating in matters involving AWS throughout his tenure at the Department. At the Department he occupied two positions at different times: Deputy Chief of Staff for the Secretary of Defense and Chief of Staff for the Deputy Secretary. In the course of his duties, Mr. DeMartino had limited involvement in the JEDI Cloud procurement. The contracting officer characterized Mr. DeMartino’s involvement in the procurement as “ministerial and perfunctory” and noted that he “provided no input into the JEDI Cloud acquisition documents .” The contracting officer noted that the Department’s Standards of Conduct Office had determined that “Mr. DeMartino’s involvement in ministerial/administrative actions (such as scheduling meetings, editing/drafting public relations,[] etc.) did not constitute participating in the JEDI Cloud acquisition itself,” and that Mr. DeMartino therefore was not in violation of the applicable ethical standards. However, in light of the high visibility of the 36 ORACLE AMERICA, INC. v. UNITED STATES

procurement and in an abundance of caution Mr. DeMartino was advised that he should consider recusing himself from even ministerial and administrative matters related to the JEDI Cloud procurement, and he did so. In light of Mr. DeMartino’s limited role, the contracting officer concluded that his activities “did not negatively impact the integrity ” of the procurement.

The Claims Court upheld that determination, finding that none of the facts in the case contradicted the contracting officer’s determination that Mr. DeMartino’s involvement with the JEDI Cloud project had no substantive impact on the procurement. According to the court, the contracting officer rationally determined that Mr. DeMartino “was merely a go-between for the Deputy Secretary and did not have substantive input into the structure or content of the solicitation.” Oracle, 144 Fed. Cl. at 121. The court found that Mr. DeMartino “did not have a voice in whether DoD should use a single or multiple award approach and did not craft the substance of the evaluation factors.” Id.

Oracle contends that the contracting officer failed to consider an important aspect of the problem and that her conclusions were contrary to the evidence. Oracle points to various communications among Department officials, including Mr. DeMartino, and a draft public statement relating to the JEDI Cloud procurement that Mr. DeMartino participated in editing. The evidence cited by Oracle does not establish that Mr. DeMartino was significantly involved in crafting the substance of the procurement. 8 We

8 Many of the record excerpts cited by Oracle are so cryptic as to be of no value in supporting Oracle’s contention that Mr. DeMartino was significantly involved in the substantive work of crafting the solicitation. Moreover, the list of 72 persons who the Department said were “personally and substantially” involved in the JEDI Cloud

ORACLE AMERICA, INC. v. UNITED STATES 37

conclude that the record supports the contracting officer’s finding, upheld by the Claims Court, that Mr. DeMartino’s role in the procurement was limited, largely nonsubstantive , and did not significantly impact the procurement.

3

During the procurement, Mr. Gavin was a Deputy Assistant Secretary of the Navy. Between August 2017 and January 2018, he discussed retirement plans with an AWS recruiter. In October 2017, he attended a meeting of the Cloud Executive Steering Group, which was planning the JEDI Cloud procurement, to share the Navy’s experience with cloud services. In January 2018, he submitted a Request for Disqualification from Duties, asking that he be excluded from matters affecting the financial interests of AWS. Later that month, he interviewed with AWS, and on March 29, 2018, he was offered a position with AWS, which he later accepted. On April 5, 2018, Mr. Gavin attended a meeting at which the attendees discussed the Draft Acquisition Strategy for the JEDI Cloud procurement. The contracting officer attended the same meeting and recalled that Mr. Gavin did not advocate for any particular vendor but instead advocated for a multiple-award approach.

After beginning his employment with AWS, Mr. Gavin was instructed by AWS that he was subject to an information firewall that prohibited him from disclosing any nonpublic information about the JEDI Cloud procurement

procurement between September 2017 and August 2018 did not include Mr. DeMartino’s name. Oracle’s suggestion that the inclusion of the name of the Deputy Secretary of Defense must have implicitly included Mr. DeMartino is entirely speculative, particularly because Mr. DeMartino was recused from involvement in the JEDI Cloud procurement after April 2018.

38 ORACLE AMERICA, INC. v. UNITED STATES

to anyone at AWS. He agreed to comply with the firewall requirement.

Following her investigation of the conflicts of interest involving the JEDI Cloud procurement, the contracting officer concluded that Mr. Gavin had violated FAR 3.101 and possibly 18 U.S.C. § 208. But the contracting officer found that Mr. Gavin’s involvement in the JEDI Cloud project did not taint the procurement. In particular, the contracting officer found that Mr. Gavin had limited access to the Draft Acquisition Strategy, did not furnish any input to that document , did not introduce bias into any of the meetings that he attended, and did not disclose any competitively useful information to AWS. Although Mr. Gavin spoke with one member of the AWS JEDI Cloud proposal team before the firewall was instituted, that member and Mr. Gavin represented that Mr. Gavin had not disclosed any nonpublic information about the JEDI Cloud procurement.

The Claims Court found that the contracting officer’s conclusions regarding Mr. Gavin were “well-supported.” Oracle, 144 Fed. Cl. at 121. In particular, the court concluded that the record supported the contracting officer’s findings that Mr. Gavin was involved in the procurement “only to offer his knowledge of the Navy’s cloud services experience ,” and was not a member of any team that was working on the JEDI Cloud procurement. Id. at 121–22. The court noted that Mr. Gavin did not “assist in crafting the single award determinations or the technical substance of the evaluation factors.” Id. at 122. At most, the court concluded, Mr. Gavin “attended a few JEDI Cloud meetings .” Id. Moreover, the court added, Mr. Gavin did not appear to have obtained any contractor bid or proposal information , nor did he appear to have introduced any bias toward AWS in the meetings he attended. Id.

The court agreed with the contracting officer that Mr.

Gavin had acted improperly in having a conversation with an AWS employee about the JEDI Cloud procurement after

ORACLE AMERICA, INC. v. UNITED STATES 39

Mr. Gavin began working for AWS. The court found, however , that the contracting officer had “reasonably determined that Mr. Gavin simply did not have access to competitively useful information to convey to AWS.” Id. at 122.

Oracle argues that the Claims Court’s statement that Mr. Gavin did not have access to competitively useful information to convey to AWS is contrary to the contracting officer’s findings that Mr. Gavin had access to the draft Acquisition Strategy in April 2018. That draft Acquisition Strategy, according to the contracting officer, contained nonpublic information that could be competitively useful. The Claims Court observed, however, that by the time Mr. Gavin began working at AWS, the draft request for proposals had been released. The draft request for proposals, the court explained, provided AWS “access to the relevant information that also appeared in the draft Acquisition Strategy.” Id. The court’s observation that the information in the draft Acquisition Strategy had become public by the time Mr. Gavin began working for AWS thus provided support for the contracting officer’s finding that Mr. Gavin did not disclose any competitively useful nonpublic information to AWS; it did not reflect a conflict between the findings of the contracting officer and the decision of the Claims Court.

In sum, notwithstanding the extensive array of claims raised by Oracle, we find no reversible error in the Claims Court’s decision.

AFFIRMED