Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

HIPAA and CMS Compliance Validation

Open

State & Local

Response Deadline01/29/2027, 03:30:00 PM EST

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity involves performing security audits and compliance validation for the Contact Center as a Service environment supporting prime contractors on Commonwealth of Kentucky government projects. The primary objective is to ensure that cloud hosting and data handling practices strictly adhere to HIPAA privacy and security rules as well as CMS standards for Medicaid-related systems. The successful provider will be responsible for delivering a formal compliance certification report. Qualified candidates must hold certifications in HIPAA auditing or CMS regulatory compliance. This opportunity is categorized under NAICS code 541690 and is associated with the state of Kentucky. Interested parties should note the response deadline of January 29, 2027.

General Info

Security audits and HIPAA/CMS compliance validation for Kentucky government cloud hosting by January 2027.

Agency

Kentucky → Frankfort, KY

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

Other, KY, USA

Set-Aside

NONE

Documents

This scope was carved out of RFP-758-2700000097-2.

The full solicitation package (16 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RFP-758-2700000097-2 | Contact Center as a Service RFP

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedNov 9

subcontract

Response DeadlineJan 29

Submission deadline

Response Deadline

01/29/2027, 03:30:00 PM ESTin 3 months

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyKentucky → Frankfort, KY

ContactsNo contacts available

OfficeN/A

Organization / AgencyKentucky → Frankfort, KY

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security audits and compliance validation for the CCaaS environment for prime contractors on Commonwealth of Kentucky government projects. Validates that cloud hosting and data handling meet HIPAA privacy/security rules and CMS standards for Medicaid-related systems. Requires certification in HIPAA auditing or CMS regulatory compliance. Delivers a compliance certification report.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project is for the Inland Empire Utilities Agency and involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services under RFP number RFP-VC-26-006. This solicitation is specifically set aside for Small Businesses, including SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. The work will be performed in California under NAICS code 541690. Interested parties must respond by November 17, 2026, and can contact Jason Richards for further information.

AARC Consultants, LLC

POSTED

about 2 hours ago

DEADLINE

Specialized Compliance Consulting (ADA & Sustainability)This subcontract for Specialized Compliance Consulting focuses on providing accessibility and sustainability reviews for prime contractors working on California Department of General Services facility projects. The selected consultant will be responsible for conducting ADA access compliance reviews, Zero Net Energy analyses, and ensuring compliance with LEED and SITES certifications. Key deliverables include the production of detailed ADA compliance reports and ZNE analysis reports, requiring a high level of expertise in ADA standards and various sustainability frameworks. The opportunity is categorized under NAICS code 541690 and was posted on November 10, 2026. Interested parties must submit their responses by the deadline of January 7, 2027. This engagement supports the state of California in maintaining rigorous accessibility and environmental standards across its general services infrastructure.

California Department of General Services

POSTED

about 13 hours ago

DEADLINE

in about 2 months

Statistical Analysis and Protocol Implementation ServicesThis subcontract for Statistical Analysis and Protocol Implementation Services supports prime contractors on medical product research projects for the Defense Health Agency. The selected provider will be responsible for the implementation and execution of specific research protocols and Statistical Analysis Plans to generate critical technical and management data for the Warfighter Protection and Acute Care PMO. The primary deliverables for this engagement include the fully implemented protocols and comprehensive statistical analysis reports. The work falls under NAICS code 541690 and is associated with the Department of Defense, with performance centered in the 21702 zip code area.

Defense Health Agency

POSTED

about 21 hours ago

DEADLINE

Clinical Data Management & De-identification ServicesThis subcontract for Clinical Data Management and De-identification Services supports prime contractors on NIH NIMHD projects under the Department of Health and Human Services. The primary scope of work involves the collection, cleaning, and securing of sensitive clinical data, including the extraction of information from Electronic Health Records and the processing of data from interviews and electronic surveys. The selected provider must deliver de-identified research datasets and comprehensive supporting documentation. Strict adherence to HIPAA compliance and the use of secure data handling environments are required to protect Protected Health Information. This opportunity falls under NAICS code 541690, with a response deadline of November 25, 2026.

National Institutes Of Health Nichd

POSTED

about 21 hours ago

DEADLINE

Privacy and Information Security AuditThe Privacy and Information Security Audit is a subcontract opportunity with the Department of Homeland Security, specifically supporting Investigations and Operations Support Dallas. The project focuses on auditing security and privacy controls for prime contractors on DHS/OHC projects, with a primary emphasis on evaluating access controls for sensitive records to ensure the principle of least privilege. The selected provider will audit data-handling practices against established DHS privacy and information-security requirements to identify and mitigate risks associated with the unauthorized disclosure of personally identifiable information. Performance of this contract will take place in Washington and requires specialized knowledge of DHS information-security directives. The final deliverable for this engagement is a comprehensive privacy and security risk assessment. Interested parties should note that the response deadline is November 27, 2026, and the work falls under NAICS code 541690.

Investigations And Operations Support Dallas

POSTED

about 21 hours ago

DEADLINE

Certification Data and Quality Documentation SupportThis subcontract for Certification Data and Quality Documentation Support involves providing specialized technical services for Navsup Weapon Systems Support Mech shipboard projects. The primary scope of work includes the preparation of certification data and inspection plans for prime contractors, specifically focusing on the development of DD Form 1423 data items and Inspection and Test Plans. The selected provider is responsible for the delivery of completed DD Form 1423s and Certification Data CDRLs, which must be submitted through the Wide Area WorkFlow system in accordance with PNSY requirements. This effort falls under NAICS code 541690 and is managed under the Department of Defense.

Navsup Weapon Systems Support Mech

POSTED

about 21 hours ago

DEADLINE

CT Image Analysis and System TrainingThis subcontract opportunity, titled CT Image Analysis and System Training, is issued by the Fleet Readiness Center under the Department of Defense. The project requires a provider with subject matter expertise in CT X-Ray image analysis to deliver onsite technical training in San Diego for up to six government engineers and technicians working on NAVAIR projects. The scope of work includes instruction on theory of operation, image analysis, and hands-on system operation, specifically utilizing analysis-only viewer software. The selected contractor is responsible for delivering fully trained personnel and providing all necessary completion records. This requirement falls under NAICS code 541690. Interested parties should note the posting date of November 10, 2026, with a response deadline set for November 25, 2026.

Fleet Readiness Center

POSTED

about 21 hours ago

DEADLINE

Antiterrorism Program Assessment and Planning SupportThe Antiterrorism Program Assessment and Planning Support subcontract provides specialized antiterrorism services for prime contractors supporting US Army Acquisition Support Center projects in Gaithersburg. The scope of work involves conducting staff visits, inspections, and assessments of Portfolio Acquisition Executive operations and facilities. Key deliverables include the production of formal assessment reports and the maintenance of a long-range assessment calendar and tracking mechanisms for all findings. This opportunity is designated as an 8(a) set-aside under NAICS code 541690 for the Department of Defense. Due to the sensitive nature of the work, personnel must possess a Secret security clearance and US Army Antiterrorism Level II certification. Interested parties must respond by November 17, 2026.

POSTED

about 21 hours ago

DEADLINE

Acquisition Workforce Data Analytics and Metrics SupportThe Acquisition Workforce Data Analytics and Metrics Support subcontract involves providing specialized data analytics for prime contractors supporting Navsup Fleet Logistics Center Norfolk. The primary objective is to analyze AWF-specific data sets to create health metrics and reports that align with the digitize tenet of ASN(RDA) goals. Key deliverables include the production of analytical studies, health metric dashboards, and comprehensive data reports. This opportunity is designated as a total Small Business Set Aside under NAICS code 541690. Qualified candidates must possess a Secret security clearance and have proven experience working with AWF-specific data. The solicitation was posted on November 10, 2026, with a response deadline of November 16, 2026.

Navsup Flt Logistics Ctr Norfolk

POSTED

about 21 hours ago

DEADLINE

R--Technical Services Support

Solicitation # 89243126RSC000172

The Department of Energy Office of Science is soliciting a single contractor to provide comprehensive security support services in Oak Ridge, Tennessee. This 8(a) set-aside solicitation, under NAICS code 541690, supports the Office of Safety and Security, the Office of Science Consolidated Service Center, and the Oak Ridge Office of Environmental Management. The primary mission is to implement and administer Safeguards and Security programs to protect critical national security assets, including personnel, information, and Category I-IV Special Nuclear Material. The scope of work encompasses personnel security, industrial security, information security, and general program support, with a specific requirement to administer the personal identity verification and credentialing program under Homeland Security Presidential Directive-12. The contractor is responsible for providing a qualified Program Manager, designated as Key Personnel, and must implement a rigorous Quality Control Plan involving continuous measurements and inspections. Key deliverables include the quality assurance review of CSCS forms and the digitization of PSF and HSPD-12 files. All work must comply with DOE directives and federal, state, and local laws. Personnel must maintain appropriate access authorizations and manage various levels of sensitive data, including Classified Matter, Unclassified Controlled Nuclear Information, Export Controlled Information, and Personally Identifiable Information. The government will provide necessary workspace and access authorizations, while the contractor remains accountable for all safety and health program mandates.

Sc Oak Ridge Office

POSTED

about 21 hours ago

DEADLINE

Antiterrorism Support Services

Solicitation # PANAPG27P0000057143

The Department of Defense, through the US Army Acquisition Support Center, is seeking a contractor to provide non-personal Antiterrorism Program support. This 8(a) set-aside opportunity, under NAICS code 541690, requires the contractor to provide all necessary personnel, equipment, facilities, and supervision to perform assessment, planning, and policy development. Key personnel must have completed or be capable of completing the US Army Antiterrorism Level II course. The work will be performed at Fort Belvoir, Virginia, and requires strict adherence to security requirements, including FAR 52.204-2 for access to classified information and FAR 52.204-9 for personal identity verification. The contractor is responsible for delivering a Quality Control Plan within 30 days of award and must meet specific performance standards, including strict report accuracy and timeliness for pre-visit actions and final reports. The government maintains unlimited rights to all produced materials and software source codes. Additionally, the contractor must manage government property according to FAR 52.245-1 and implement a mitigation plan for any potential Organizational Conflict of Interest. Interested parties must submit a statement of relevant capability with performance examples, not exceeding ten pages, to the designated points of contact by November 17, 2026.

POSTED

about 21 hours ago

DEADLINE

Cybersecurity Validation and Vulnerability TestingThis subcontract for Cybersecurity Validation and Vulnerability Testing involves providing independent security testing for prime contractors working on California Department of General Services projects. The scope of work includes conducting vulnerability scans, testing the detection of malicious files, and auditing user access logs to ensure full compliance with State of California Security Standards and State SaaS General Provisions. The selected provider will be responsible for delivering detailed vulnerability scan reports and the final security certification required for system go-live. This opportunity is categorized under NAICS code 541690, with a response deadline set for December 16, 2027.

California Department of General Services

POSTED

DEADLINE

in about 1 year

More opportunities from Kentucky → Frankfort, KY

Same awarding agency

Technical Implementation StaffingThis subcontract for Technical Implementation Staffing provides specialized personnel to support prime contractors during the Design, Development, and Implementation phase of Commonwealth of Kentucky government projects. The scope of work involves supplying project managers, systems analysts, and integration engineers to meet project milestones within a six-to-eight month implementation timeline. Candidates must possess specific experience in government Contact Center as a Service deployments to deliver the required staffing hours and labor. The opportunity is categorized under NAICS code 541511 and is associated with the state of Kentucky. Interested parties should note the response deadline of January 29, 2027. Further details and submission processes are managed through the Kentucky Vendor Services System.

Custom Computer Programming Services

POSTED

DEADLINE

Workforce Management System ConfigurationThis subcontract opportunity involves the configuration and deployment of Workforce Management tools for prime contractors supporting Commonwealth of Kentucky government projects. The primary objective is to implement a fully configured Workforce Management module within a CCaaS ecosystem, specifically focusing on the setup of scheduling, forecasting, and agent performance tracking modules based on established contact center staffing models. The project is categorized under NAICS code 541511 and is associated with the state of Kentucky. Interested parties should note that the solicitation was posted on November 9, 2026, with a response deadline set for January 29, 2027. Further details and submission processes can be accessed through the Kentucky Vendor Services portal.

Custom Computer Programming Services

POSTED

DEADLINE

VoIP Telephony ImplementationThe VoIP Telephony Implementation subcontract involves the installation and configuration of VoIP-enabled telephony systems for prime contractors working on Commonwealth of Kentucky government projects. The scope of work includes configuring VoIP protocols, integrating telephony with the CCaaS platform, and utilizing RESTful APIs to ensure seamless connectivity for contact center operations. The ultimate goal is the delivery of a fully integrated and tested VoIP telephony system. This opportunity is categorized under NAICS code 517919 and is associated with the state of Kentucky. The solicitation was posted on November 9, 2026, with a response deadline set for January 29, 2027. Interested parties can find further information through the Kentucky government's vendor self-service portal.

All Other Telecommunications

POSTED

DEADLINE

Cloud CCaaS Platform SupplyThis subcontract agreement involves the supply of a cloud-hosted, configurable, and HIPAA-compliant Contact Center as a Service platform for prime contractors working on Commonwealth of Kentucky government projects. The scope of work includes the delivery of a fully operational environment featuring core software infrastructure such as Interactive Voice Response, multi-channel Automatic Call Distribution, Computer Telephony Integration, and Contact Management systems. To ensure eligibility for federal funding of Medicaid-related systems, the platform must strictly adhere to CMS conditions and standards. The opportunity is categorized under NAICS code 513210 and is associated with the state of Kentucky, with a response deadline set for January 29, 2027.

Software Publishers

POSTED

DEADLINE

RFP-758-2700000097-2 | Contact Center as a Service RFP

Solicitation # RFP-758-2700000097-2

The Kentucky agency in Frankfort is soliciting proposals for a Contact Center as a Service (CCaaS) solution under RFP 758 2700000097. Proposals must be submitted electronically via the eProcurement system by January 8, 2027, at 3:30 PM ET, and must be divided into three distinct parts: a Technical Proposal, a Cost Proposal, and Proprietary Information. The contract includes an initial term with options for three additional two-year renewals upon mutual agreement. To be considered for an award, proposals must achieve a minimum technical score of 60% of the maximum possible points, with the cost of the solution accounting for 2,000 points of the evaluation. The selected contractor must adhere to strict quality standards, including minimum Quality Assurance scores of 90% and the definition of clear entrance and exit criteria for various testing phases, such as User Acceptance Testing. Key compliance requirements include adherence to the Protection of Personal Information Security and Breach Investigation Procedures and Practice Act, ADA, and the Civil Rights Act. Additionally, the contractor must ensure all personnel are properly licensed in Kentucky and are not debarred from state or federal programs, including Medicare and Medicaid. Deliverables include a planning milestone due 15 days after kickoff, quarterly volume forecasts, and annual training summary reports.

Telemarketing Bureaus and Other Contact Centers

POSTED

DEADLINE

Network & Connectivity Supplier (MPLS/Infrastructure)This subcontract opportunity is for a Network and Connectivity Supplier to provide essential infrastructure for prime contractors working on projects for the Kentucky Cabinet for Health and Family Services. The selected provider will be responsible for delivering call services via redundant MPLS or equivalent networks, utilizing industry-standard communication protocols and premise-based equipment to maintain high Quality of Service. A critical component of the scope involves establishing active, redundant network connectivity between the CCaaS provider and CHFS data centers. The project falls under NAICS code 513210 and is associated with the state of Kentucky. Interested parties should note that the posting date is October 1, 2026, with a response deadline set for January 8, 2027. Further details and submission guidelines can be accessed through the Kentucky state vendor portal.

Software Publishers

POSTED

about 1 month ago

DEADLINE

in about 2 months

Data Analytics and Reporting ServicesThis subcontract for Data Analytics and Reporting Services focuses on the development and maintenance of a reporting framework for prime contractors working on projects for the Kentucky Cabinet for Health and Family Services. The scope of work includes the creation of customized reports to meet specific business needs and Open Records requests, the building of online dashboards, and the provision of training and guidance documentation for agency staff. Key deliverables for this engagement include monthly performance report cards and the implementation of custom dashboards. The project is categorized under NAICS code 541511 and is associated with the state of Kentucky, with a response deadline set for January 8, 2027.

Custom Computer Programming Services

POSTED

about 1 month ago

DEADLINE

in about 2 months

Systems Integration & Implementation Services (DDI)This subcontract for Systems Integration and Implementation Services focuses on the design, development, and implementation of a Contact Center as a Service platform for prime contractors supporting the Kentucky Cabinet for Health and Family Services. The project requires the integration of the platform with KYID and Active Directory through Azure Integration Services using RESTful web services, as well as the deployment of voice signature capabilities. All work must be executed following PMBOK and SDLC methodologies to ensure a structured delivery process. The selected provider is responsible for delivering a comprehensive project assessment, a detailed work plan, and a fully integrated system. This effort falls under NAICS code 541512 and is associated with the state of Kentucky. Interested parties should note the response deadline of January 8, 2027.

Computer Systems Design Services

POSTED

about 1 month ago

DEADLINE

in about 2 months

Contact Center Managed Services (Operational Staffing)This subcontract for Contact Center Managed Services involves providing full-scale operational staffing to support prime contractors on projects for the Kentucky Cabinet for Health and Family Services. The scope of work includes managing daily contact center operations and handling incidents for the Department for Community Based Services, Department of Medical Services, and Department for Public Health programs. To ensure service quality, the provider must perform quality assurance by reviewing at least 5% of all contacts and utilizing the CHFS Web Portals and KYID Helpdesk application. Key deliverables for this engagement include the delivery of managed call center operations, detailed staffing reports, and comprehensive quality assurance logs. The contract is categorized under NAICS code 561422 and is associated with the state of Kentucky. Interested parties should note the response deadline of January 8, 2027.

Telemarketing Bureaus and Other Contact Centers

POSTED

about 1 month ago

DEADLINE

in about 2 months

CCaaS Software Platform Provider (SaaS)This subcontract agreement establishes a partnership for the provision and hosting of a cloud-based Contact Center as a Service platform to support prime contractors working on projects for the Kentucky Cabinet for Health and Family Services. The selected provider is responsible for delivering a fully operational SaaS environment that integrates artificial intelligence and machine learning to power virtual agents and intelligent automation. To ensure regulatory compliance, the platform must be HIPAA-compliant and adhere to CMS standards to secure Medicaid federal funding. The scope of work includes the management of concurrent user licensing and the maintenance of a secure cloud infrastructure. This opportunity is categorized under NAICS code 518210 and is associated with the state of Kentucky. Interested parties should note the response deadline of January 8, 2027, to provide a solution that meets the technical and federal requirements of the agency.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 1 month ago

DEADLINE

in about 2 months

RFP-758-2700000097-1 | Contact Center as a Service RFP

Solicitation # RFP-758-2700000097-1

The Commonwealth of Kentucky, through the Cabinet for Health and Family Services (CHFS), is soliciting proposals for a cloud-based Contact Center as a Service (CCaaS) platform. This comprehensive solution requires the vendor to provide and administer a full suite of core technologies, including IVR, VoIP-enabled telephony, multi-channel ACD, CTI, call and screen recording, workforce management, and a contact management system. The platform must support voice, email, chat, SMS, and TDD/TTY, while integrating advanced AI and machine learning for sentiment analysis and real-time knowledge retrieval. The project is divided into Design, Development, and Implementation (DDI) and Maintenance and Operations (M&O) phases, with the system expected to be fully operational within six to eight months of contract execution. The contract includes rigorous technical and regulatory requirements, mandating compliance with 45 CFR 95.617, HIPAA, and the HITECH Act, as well as Kentucky's Personal Information Security and Breach Investigation Procedures and Practices Act. Vendors must adhere to a strict Service Level Agreement (SLA) with defined Key Performance Indicators (KPIs) and financial penalties via Service Level Credits for performance failures. The cost structure covers an initial three-year term with optional renewals up to nine years, including licensing for 7,800 concurrent agents and 1,800 concurrent supervisors. Proposals are evaluated based on technical scores, cost, and potential oral demonstrations, with a minimum technical score of 60 percent required for further consideration.

Telemarketing Bureaus and Other Contact Centers

POSTED

about 1 month ago

DEADLINE

in about 2 months

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS