G004--FY27: Low Demand Safe Haven Services| Bay Pines

The Department of Veterans Affairs, through Network Contracting Office 8 in Tampa, Florida, is soliciting offers under solicitation number 36C24827Q0003 for Low Demand Safe Haven Services, an indefinite delivery/indefinite quantity (IDIQ) contract with a base performance period from November 1, 2026, to October 31, 2027. The work will be performed off-site at the contractor’s facility and is governed by VA Handbook 6500 and 6500.1, requiring strict compliance with federal information security standards, including FIPS 140-2 encryption for data at rest and in transit, proper electronic media sanitization, and enforced use of VA-approved antivirus and firewall protections. Contractors must ensure that all personnel complete mandatory security and privacy training, sign the VA Contractor Rules of Behavior, and use E-Verify to confirm employment eligibility, with no personal use of government systems permitted and no unauthorized remote access or dual network connections allowed. All subcontractors must adhere to the same stringent security and behavioral requirements as the prime contractor. This solicitation is unrestricted and open to all eligible businesses under NAICS code 624221, with a small business size standard of $34 million in annual receipts. Offerors must be registered in the System for Award Management with a Valid Unique Entity ID and comply with all FAR Part 12 provisions for commercial services. Proposals must be submitted electronically via the VA website by the deadline of August 28, 2026, at 12:00 PM Eastern Time, with no hard copies accepted. The Contracting Officer, Peter J. Bedard, serves as the primary point of contact, while the Contracting Officer’s Technical Representative, though unnamed, will oversee performance, conduct compliance reviews, and accept deliverables from the contractor’s location. Although funding estimates, pricing details, evaluation factors, and packaging requirements are not disclosed in the available documentation, the contract emphasizes adherence to VA’s information security protocols, incident reporting obligations, and legal compliance as the core metrics for performance and acceptance.