SOURCES SOUGHT NOTICE - Tax Software Acquisition and Support

The Internal Revenue Service’s Large Business & International Division is conducting market research through a Sources Sought Notice to identify qualified small business contractors capable of providing Commercial Off-The-Shelf tax software products and integrated technical support services under NAICS Code 513210. The Government is evaluating industry capabilities to support an anticipated requirement for up to 3,500 software licenses along with comprehensive ongoing services including software maintenance, middleware integration, help desk support, cybersecurity compliance, training, and operational continuity. The anticipated contract period spans five years, with a one-year base period beginning April 1, 2027, and four one-year option periods extending through March 31, 2032, with option exercises governed by FAR 52.217-9. Respondents must be registered in SAM with a valid UEI and CAGE code and must self-certify as a small business, with additional socioeconomic certifications such as 8(a), HUBZone, SDVOSB, WOSB, or SDB required if applicable. Responses must be submitted as a PDF or Microsoft Word document not exceeding ten double-sided pages by 3:00 PM EST on May 29, 2026, to the designated points of contact. All responses must address a detailed set of acquisition strategy and capability questions tied to past performance, technical expertise, and compliance with IRS security policies including FISMA, NIST, and IRM 10.23.2. Contractors must demonstrate proven ability to handle enterprise-level tax software environments and deliver all services using Government Furnished Equipment only, without storing IRS Sensitive but Unclassified data on non-Government systems. Personnel must obtain staff-like access through FBI fingerprinting, background checks, and submission of OF-306, NDAs, and citizenship verification, with access tracked via the Resource Access Control system. Key personnel must complete mandatory cybersecurity and data handling training annually, and biweekly staffing reports are required to monitor access, equipment status, and transition readiness. All deliverables—ranging from monthly technical reports and cybersecurity compliance documentation to IPv6 and Section 508 attestations—must be submitted in specified formats and adhere to strict performance metrics including 95% help desk response within 24 hours, 90% incident resolution within SLA, and 100% compliance with all security and quality standards. The Government has not committed to awarding a contract based on this notice and will not reimburse