7A21--RFI Industry Loopback Notice - National Digital Telepathology - Artificial Intelligence (NDTP-AI) (VA-26-00058955)

The Department of Veterans Affairs is seeking market information through a Request for Information (RFI) to identify vendors capable of delivering commercially available off-the-shelf Artificial Intelligence (AI) pathology solutions and associated cloud storage for an Integrated AI Software System targeting Prostate and Gastric Cancer Detection. This RFI, identified by solicitation number 36C10B26Q0472 and NAICS code 541519, is strictly for planning purposes and does not constitute a solicitation, quote request, or binding contract. Responses are due by June 23, 2026, at 10:00 a.m. Eastern Time and must be submitted via email to the Contracting Officer and Contract Specialist. Submissions are limited to fifteen pages, excluding cover pages, titles, and table of contents, and must directly address capabilities outlined in the attached Draft Performance Work Statement; marketing materials and generic capability statements are prohibited. Vendors must include in their initial submission the company name, address, point of contact details, Unique Entity Identifier (UEI), CAGE code, NAICS code, business size, socioeconomic status, and any applicable certifications such as 8(a), VOSB, or SDVOSB, along with proof of certification where applicable. The government intends to use responses to shape future acquisition strategies and may pursue a firm-fixed-price contract with a one-year base period and four one-year option periods, totaling no more than five years. Contractors responding to future solicitations will be required to comply with stringent federal and VA-specific regulations regarding data rights, information security, and personnel vetting. The Government will demand unlimited rights to all data and intellectual property first produced under the contract, including source code and supporting documentation. All systems and cloud-based components must adhere to the VA Trustworthy AI Framework, the VA OIT Technical Reference Model, and the VA Critical Security Controls, with operations limited to the United States or its territories. Contractors and subcontractors must comply with VA directives on data protection, encryption, physical and logical data segregation, media sanitization, records management under 36 CFR 1222.32, and disclosure obligations under the Freedom of Information Act and Privacy Act. Personnel must undergo background checks equivalent to VA employees, obtain Personal Identity Verification (PIV) credentials upon favorable adjudication, and complete mandatory annual cybersecurity and privacy training. Hardware deliveries require tamper-evident packaging, U.S. registered mail, and full chain-of-custody documentation