DA01--Endoscopy Legacy SQL Data Consolidation, Reporting and Technical Support (VA-26-00066280)

The Department of Veterans Affairs, through the Technology Acquisition Center in Eatontown, New Jersey, is pursuing the consolidation, reporting, and technical support of legacy SQL databases from multiple Veterans Affairs Medical Centers under solicitation number 36C10B26Q0554, with the contract title DA01—Endoscopy Legacy SQL Data Consolidation, Reporting and Technical Support. This procurement is structured as a Request for Information issued on June 23, 2026, and closed on June 29, 2026, aimed at market research and planning, with no awarded contract or pricing data yet established. The acquisition is set aside exclusively for Service-Disabled Veteran-Owned Small Businesses, and respondents must verify their SDVOSB status through SBA certification, while also providing a Unique Entity Identifier and affirming small business size status. The effort seeks to integrate historical endoscopy data from databases spanning 2014 to 2019 into a secure, unified national SQL server platform via remote access using PIV or MOU/ISA credentials, with no travel required. Key deliverables include a Project Management Plan, Database Structure Analysis Report, a secure Reporting Development Environment built on SSRS or Power BI, ten customized clinical reports, system administration and power-user training, and supporting documentation—all subject to strict compliance with FISMA, HIPAA, Section 508 (WCAG 2.0 Level AA), VA Directives, FIPS 140-3, NIST SP 800-88, and other federal and VA cybersecurity and accessibility standards. The performance period is one year with four optional one-year extensions for ongoing support. All work must be performed remotely, and contractor personnel require vetting under VA Directive 0710, with background investigations aligned to Tier levels based on position sensitivity. Access to VA systems is strictly controlled; personnel must sign the VA Information Security Rule of Behavior, and contractors are prohibited from using personally owned equipment or portable media. Upon contract conclusion, all electronic media containing VA data must be returned and sanitized per NIST 800-88, with self-certification provided within 30 business days. Security assessments are subject to unannounced reviews, and any security incident, AI system change, or personnel turnover must be reported within one hour or 24 hours respectively. Responses to the RFI are limited to eight pages, submitted electronically via email to specified VA contacts, in Microsoft Office or