HIPAA-Compliant IT and Data Security Infrastructure

The contract requires the provision of secure IT systems designed to support call logging, protected health information handling, and reporting functions, all in full compliance with HIPAA regulations. Secure data transmission must be enabled through SFTP, encrypted email, and secure web portals to ensure the confidentiality and integrity of sensitive health data. The system must be built and maintained to meet stringent federal standards for data privacy and security, with a focus on preventing unauthorized access, data breaches, and improper disclosure of PHI. This is a subcontract under a Total Small Business Set-Aside, designated for small businesses as defined by the SBA under NAICS code 541512, which covers custom computer programming services. The offering is managed by the Phoenix Area Indian Health Service under the Department of Health and Human Services, with performance required in Phoenix, Arizona, ZIP 85004. Responses are due by July 8, 2026, and the opportunity was posted on July 1, 2026. All solutions must align with federal requirements for health data protection and demonstrate proven capability in delivering secure, compliant infrastructure tailored to the needs of healthcare operations within the Indian Health Service framework.