Cloud Hosting and Protected B-Compliant Infrastructure

The contract seeks the provision of a Government of Canada-approved Protected B cloud environment with all data residency strictly maintained within Canada, ensuring compliance with federal security and privacy standards. The provider must deliver a secure infrastructure that includes robust encryption both at rest and in transit, granular access controls to limit system entry to authorized personnel only, a tested incident response capability to address and mitigate security breaches swiftly, and comprehensive audit logging to support accountability and regulatory compliance. All services must align with the Protected B security classification, which governs the handling of sensitive but unclassified government information. This is a subcontract under the National Research Council of Canada, part of the Government of Canada, with the North American Industry Classification System code 518210 identifying it as a data processing, hosting, and related services offering. The opportunity was posted on April 23, 2026, and responses are due by May 19, 2026. The place of performance is Canada, reinforcing the requirement for data sovereignty. While details on set-asides or point of contact are not provided, the tender is accessible through the Canada Buys portal, and interested parties must comply fully with Protected B requirements and federal procurement guidelines to be considered.