Fitness Training Equipment for USP Lee

The U.S. Department of Justice, through the Federal Bureau of Prisons at USP Lee in Jonesville, Virginia, is soliciting commercial-grade fitness training equipment under solicitation number 15B11726Q00000012, with a response deadline of May 6, 2026. This is a total small business set-aside under FAR 19.5, requiring offerors to certify their small business status through SAM and provide a Unique Entity Identifier and CAGE code for themselves and all upstream owners. The contract calls for the delivery of specific fitness items including five treadmills, one Smith machine, one power rack, a 100-lb dumbbell rack, two Olympic barbells, five sets of bumper plates, five foam rollers, and five yoga mats, all of which must be new or reconditioned to like-new condition, with visual documentation required for any used equipment. Delivery is strictly due by June 5, 2026, at the facility in Pennington Gap, Virginia, though FOB terms are unspecified. The solicitation does not include pricing details, with all unit and extended prices left blank, and no contract value can be determined from the available data. Evaluation factors are referenced as being contained in an attachment not accessible here, but the basis of award is expected to follow a trade-off process under FAR 52.212-2, prioritizing price and other factors rather than being LPTA. The contract incorporates numerous federal and Department of Justice-specific requirements beyond the physical equipment delivery, emphasizing cybersecurity, data protection, and personnel security. Contractors must comply with DOJ-05 for the security of department information systems, DOJ-02 for privacy requirements, and DOJ-09 for the use of large language models, including the submission of detailed documentation such as model cards, architecture decision records, and software bills of materials aligned with OMB M-26-05 and Executive Order 14028. All covered information systems require an Authorization to Operate, and any security incident must be reported within one hour of discovery. Personnel handling government data must be vetted under HSPD-12, use PIV cards, complete annual security training, and adhere to continuous monitoring practices. The Government retains unlimited rights to all deliverables and data, and contractors must implement a cyber supply chain risk management plan per NIST SP 800-161. Compliance with the