Digital Learning Platform & Data Security Compliance

The contract requires achieving SOC 2 Type II compliance for a digital platform that hosts assessments and learning content, ensuring robust controls over data security, availability, processing integrity, confidentiality, and privacy over a defined period. This involves comprehensive audits, continuous vulnerability testing, and the delivery of detailed reporting to demonstrate sustained compliance with the Trust Services Criteria. The subcontractor must implement and maintain technical and procedural safeguards that align with industry best practices for data protection, particularly given the sensitive nature of educational and assessment data. The opportunity is issued by Export Development Canada under the Government of Canada, with a North American Industry Classification System code of 541512 for custom computer programming services. The place of performance is in Ottawa, and responses are due by August 14, 2026, with the solicitation posted on July 30, 2026. The contract is structured as a subcontract, and while no set-aside classification is specified, it is part of a broader federal initiative focused on secure digital learning infrastructure. Failure to meet compliance standards or deliver timely, accurate audit documentation will constitute material nonperformance.