Cloud or IT Service Provider for Covered Defense Information

This contract awards a subcontract for the provision of cloud or IT services that must be FedRAMP Moderate-compliant to handle, process, or transmit covered defense information as defined by Department of Defense regulations. The services are subject to the full flow-down of DFARS requirements, ensuring that all cybersecurity, data protection, and compliance obligations mandated for defense contractors are rigorously applied by the service provider. The contractor must maintain infrastructure and operational controls aligned with FedRAMP Moderate controls to safeguard sensitive defense information throughout its lifecycle. The procurement is managed under the Defense Logistics Agency within the Department of Defense and falls under NAICS code 518210, indicating it relates to data processing, hosting, and related services. The contract was posted on July 15, 2026, and does not specify a set-aside designation, meaning it is open to all eligible vendors. Performance of the services is not restricted to a specific geographic location, allowing for nationwide or even global delivery as long as compliance and security standards are met. The subcontract is tied to the primary contract SPE60226D0468 with delivery order SPE60226FD07H and covers 12 contract line items, underscoring its scope and complexity.