DA10--Precisely Spectrum for VA Profile Address Validation - New Task Order (VA-26-00024218)

This solicitation seeks firm-fixed-price delivery orders under the NASA SEWP V GWAC for the provision of IT systems and services related to VA Profile Address Validation, targeting contract holders in GWAC Groups B, C, and D. The task order, identified as VA-26-00024218, is issued by the Department of Veterans Affairs’ Technology Acquisition Center in Eatontown, New Jersey, with performance primarily centered at 23 Christopher Way, Eatontown, NJ, and deliveries ultimately directed to two addresses in Austin, Texas. The base performance period runs from August 3, 2026, through August 2, 2027, with two optional one-year extension periods, and delivery timing requires certain items like software licenses to be provided within ten days of award. All shipments are subject to FOB Destination terms, meaning the contractor retains risk of loss until goods reach the specified delivery points, and must include tamper-evident packaging, trusted shipping channels, and chain-of-custody documentation, especially for hardware containing VA-sensitive information. Compliance with federal cybersecurity, accessibility, and sustainability standards is mandatory and non-negotiable. Offerors must ensure all products meet Section 508 accessibility guidelines and provide proof of EPEAT registration, ENERGY STAR qualification, and FEMP designation through self-certification and supporting documentation. Contractors must be OEM-authorized resellers and certify that no gray market or counterfeit items are being supplied, with the potential for audit and penalties under the liquidated damages clause for data breach costs resulting from negligence. Technical deliverables include sanitized hardware with verified software hashes, Software Bills of Materials, and systems compliant with NIST SP 800-37, FIPS 140-2, FIPS 201-3, FedRAMP, TIC 3.0, and VA-specific directives including 6500 and 6517. Personnel must undergo VA security clearance processes, sign the Information Security Rule of Behavior, and operate only within U.S. jurisdiction. All data and intellectual property generated under the contract are subject to unlimited Government rights, and media containing VA information must be sanitized per NIST 800-88 with destruction certified within 30 days of contract conclusion. The evaluation is strictly based on technical acceptability with award to the lowest-priced compliant offer, consistent with LPTA procedures, and non-compliance with any requirement renders a proposal unacceptable.