JWCC UCM Core Draft Solicitation

The Joint Warfighting Cloud Capability Unified Cloud Marketplace (UCM) Core acquisition is a full and open, multiple-award Indefinite Delivery Indefinite Quantity (IDIQ) contract targeted at hyperscale cloud service providers, designed to serve as a unified platform for the Department of Defense’s consumption of all provisionally authorized cloud service offerings across every classification level and Impact Level. The contract vehicle, identified by NAICS code 518210 and Product Service Code DB10, carries no small business set-aside and is anticipated to be released for bidding in the fourth quarter of fiscal year 2026. The overall period of performance spans ten years, including a five-year base period and a single five-year option period, with an expected start date of December 2027 and potential completion by December 2037. Performance is required at multiple DoD locations worldwide, including classified sites, with specific workloads conducted at contractor facilities under the oversight of the Defense Counterintelligence and Security Agency or other designated security cognizance authorities. All contractor personnel must hold appropriate clearance levels ranging from Unclassified to TS/SCI, with Tier 5 background investigations and continuous evaluation enrollment required for those handling sensitive information. A strict set of compliance obligations includes adherence to the DoD Cloud Security Requirements Guide, NIST and CNSSI standards, cybersecurity maturity model certification requirements, and robust supply chain risk mitigation practices. Contractors must maintain comprehensive documentation including a service health dashboard, FinOps dataset using the FOCUS Schema, incident reports, and CDRLs covering contract management, presentation materials, edge system processes, and vulnerability disclosures. Financial operations demand granular, queryable billing data aligned with invoices, supplemented by monthly progress reports delivered alongside each payment request. Governance requires full compliance with FAR and DFARS clauses related to government-furnished property, transition-out planning, cybersecurity, and organizational conflicts of interest, with contractors prohibited from accessing proprietary source selection data or engaging in activities that create actual or apparent OCI. All deliverables must be marked according to DoD information security standards for Controlled Unclassified Information and classified material, and non-disclosure agreements are mandatory for every assigned employee, signed within one week of award and maintained throughout the contract term. Transition requirements mandate workforce ramp-up with half of all staffing completed within two weeks of performance commencement and full staffing achieved within 30 days, while a formal transition-out plan must be developed in coordination with the government at least 120 days prior to contract cessation. The contracting office is located