DA10--Scout WOUNDVISION, Camera Subscription Services - (VA-26-00064181)

This sources sought notice from the Department of Veterans Affairs, issued under solicitation number 36C10B26Q0575, is solely for market research and planning and does not constitute a solicitation, invitation for bid, or request for proposal. The Government has not authorized, appropriated, or received funds for this effort and is under no obligation to award a contract based on responses. Vendors are requested to confirm their capability to provide Scout WoundVision Camera Subscription Services at the Audie L. Murphy VA Medical Center in San Antonio, Texas, with detailed information on their technical ability, personnel qualifications, and compliance with OEM specifications. Responses must include company name, address, point of contact, DUNS and UEI numbers, business size and status, NAICS codes, existing contractual vehicles, and proof of SDVOSB or VOSB certification if applicable. Non-OEM contractors must submit an authorized distributor or servicer letter. All submissions must be sent via email to Emilio Ballentos by July 1, 2026, at 3:00 PM EDT and must avoid generic marketing materials in favor of specific, comprehensive responses focused on meeting the performance requirements outlined in the attached Statement of Work. The services require 98% operational uptime, emergency response within one hour during business hours, preventive and corrective maintenance using only OEM-certified parts and software, and full adherence to VA, NIST, FIPS, and FedRAMP cybersecurity standards. Contractors must provide a Software Bill of Materials in NTIA-compliant format, ensure tamper-evident packaging and encrypted delivery of hardware and software, maintain chain-of-custody documentation, perform media sanitization using approved methods, and prohibit remote access to equipment—all while conducting onsite work under supervision and wearing visible identification. Personnel must be OEM-trained with at least two years of field experience, and all repairs require signed service reports with as-found and as-adjusted values. Security protocols mandate compliance with VA Handbook 6500, CISA directives, and FDA guidance for medical device cybersecurity. Patching must occur within seven to thirty business days depending on severity, and cryptographic modules must meet FIPS 140-2 or successor standards. No payment or compensation will be provided for response preparation, and submissions are not considered offers or proposals. The Government retains the right to use responses solely for sourcing and planning purposes, with potential set-aside determinations influenced by socioeconomic information provided.