Offshore Subcontractor Attestation and Compliance

The contract requires an offshore subcontractor to provide IT or data processing services under strict compliance requirements, including full attestation of adherence to domestic-equivalent security and privacy standards, with explicit approval from CalOptima. All services must be performed in a manner that ensures the same level of protection for sensitive information as if delivered within the domestic jurisdiction, emphasizing data sovereignty, confidentiality, and regulatory alignment. The subcontractor must demonstrate proven capability to meet these benchmarks through documented controls, audits, and ongoing compliance verification. Issued by the Waterloo Regional Health Network under the Government of Canada, this subcontract opportunity is open for responses until June 15, 2026, with a Naics code of 541519 indicating other Computer Related Services. There is no set-aside classification, and the place of performance is offshore, though the operational and compliance obligations mirror those required for domestic operations. Interested parties must ensure they can satisfy both technical delivery expectations and governance requirements tied to Canadian public sector data handling protocols, with no flexibility on attestation or privacy safeguards.