Submit Documents and Understand Security

Purpose: This guide outlines the platform's security compliance. It also provides the mandatory technical rules for preparing and uploading all file submissions.

Table of Contents  

• Before You Start
• Steps

1. Prepare Documents for Upload

2. Review Supported Security Classifications

3. Review Platform Security and Compliance   

• Troubleshooting
• Related Articles / Links  

Before You Start

Understand the following technical and regulatory constraints regarding document uploads:

• Platform vs. Requirement: Symphony is a secure document delivery system. While the platform enforces technical limits (like file size and type), it cannot validate the content of your files. You are responsible for ensuring your documents meet the specific criteria outlined in the government's RFP.
• Finality of Uploads: Symphony support cannot modify, replace, or "fix" a document once it has been included in a submitted proposal. If you discover an error in your uploaded evidence after submission, you must follow the solicitation's instructions for retraction or amendment.

Make sure you know the following mandatory rules and technical limits for all file uploads:

• Tagging Prerequisite: Tag all evidence documents (PDFs) before uploading them to Symphony. Tagging must be done outside of Symphony. See the Manage Your Company's Projects and Tagging guide for full instructions.
• Files must be under 20MB (unless specified otherwise by the solicitation).
• File names cannot exceed 250 characters.
• Prohibited: Classified or encrypted documents are strictly prohibited.  

For an Exception: Password-protected documents must be approved by the requesting agency.

Document Status Color Key 

The file folder icons use color-coding to indicate their current status.

Steps

1. Prepare Documents for Upload

You must follow specific technical and formatting rules before uploading files to the system.

1. Files must be uploaded in Portable Document Format (.pdf) or the specific file type requested by the solicitation.
2. Do not combine multiple files into a "zip" folder. Files must be uploaded individually to ensure evaluators can access and review each document’s tags and metadata correctly.
3. Files must be uploaded directly from your computer. Drag-and-drop from cloud storage (like SharePoint or Google Drive) is not supported.

Document upload window showing a file attachment and a size limit warning.

2. Review Supported Security Classifications

The system handles sensitive government data and restricts certain file types.

1. Supported Documents: You may submit documents marked as:
   • CUI (Controlled Unclassified Information)
   • FOUO (For Official Use Only)
   • SBU (Sensitive but Unclassified)
2. Prohibited Documents: Classified or encrypted documents are not permitted.

Document library view showing read-only files.

3. Review Platform Security and Compliance

Symphony follows federal security standards to protect and manage your data.

1. The platform is hosted on cloud.gov with a Federal Information Security Modernization Act (FISMA) Moderate ATO (Authorization to Operate).
2. All data is protected by encryption in transit and at rest.
3. Every file uploaded to Symphony undergoes automated malware and virus scanning. Files flagged by the system will be blocked immediately to protect the government environment.

Compliance visualization showing the text 'FISMA Moderate ATO' and data protected by encryption on a cloud server.

Troubleshooting

Related Articles / Links  

• Manage Your Company's Projects and Tagging—Mandatory guide on tagging documents before upload
• GSA National Customer Service Center—For detailed security protocol inquiries
• Submit a Ticket to the Symphony Help Desk—For technical issues