# RFP criteria catalogue — Corporate Podcast Platform

> Placeholder template (Knowledgeworker Podcast, as of 07/2026). The editorial
> version follows. Tick what your tender should cover: `[ ]` open, `[x]` met.

## 1. Information security
- [ ] ISO 27001, EU hosting location (name the region)
- [ ] DPA under Art. 28 GDPR, sub-processor list incl. TTS
- [ ] Pentest evidence, encryption at rest and in transit
- [ ] Audit log

## 2. Identity and access
- [ ] SAML 2.0 / OIDC, SCIM, MFA
- [ ] Roles (at least Owner/Admin/Editor/Analyst)
- [ ] Tenants per brand or country
- [ ] HR offboarding sync

## 3. Internal distribution
- [ ] Access without new passwords (token feeds and SSO app)
- [ ] Teams, SharePoint, intranet
- [ ] Offline playback, deskless-capable

## 4. External distribution
- [ ] RSS to Apple specification
- [ ] One-click submission
- [ ] YouTube route, domain-owned show pages

## 5. Analytics
- [ ] Aggregated (reach, completion, drop-off)
- [ ] IAB-compliant externally
- [ ] Works-council mode
- [ ] Export/API, optional xAPI/LRS

## 6. Production and AI
- [ ] Remote recording, transcript editing
- [ ] Text/course to podcast with an editable script before rendering
- [ ] Translation/dubbing, voice governance (consent, labelling)
- [ ] Music licences included

## 7. Accessibility
- [ ] WCAG 2.1 AA player
- [ ] Transcripts automatically
- [ ] EAA conformity statement

## 8. Learning
- [ ] SCORM export, xAPI
- [ ] Course embedding
- [ ] Completion and certificate logic

## 9. Operations
- [ ] SLA (99.9%), support DE/EN
- [ ] Onboarding package
- [ ] Data export at contract end (exit clause)
- [ ] Roadmap transparency

## 10. Commercial
- [ ] Transparent tiers
- [ ] Pilot offer (90 days)
- [ ] References with a contact person

---
Corrections: podcast@chemmedia.de