7A20--NEW AWARD - Vascular Ulcer Care Pathway (VA-25-00104851)

Statement of Work (SOW) / Performance Work Statement (PWS)

This document outlines a DRAFT Performance Work Statement (PWS) for Vascular Ulcer Care Pathway services, identified by solicitation number 36C10B26Q0354.

While the full scope is detailed in the attached DRAFT PWS, the subject line indicates the procurement is for a "Vascular Ulcer Care Pathway".

• Response Date/Time: April 22, 2026, 10:00 AM Eastern Time, New York, USA.

• Place of Performance: Not specified in the provided text, but the contracting office is located at 23 Christopher Way, Eatontown NJ 07724.

• Solicitation Number: 36C10B26Q0354

• Product Service Code: 7A20

• NAICS Code: 541519

• Contracting Office: Department of Veterans Affairs, Technology Acquisition Center.

• This is a DRAFT PWS and is associated with a "NEW AWARD" announcement.

• An RFI (Request for Information) is also attached.

• Bidders should refer to the attached DRAFT PWS for detailed requirements and scope.

Performance Work Statement (PWS)

To provide and implement a Vascular Ulcer Care Digital Health System to standardize care protocols, enhance diagnosis, stratification, referrals, treatment, and post-treatment care for vascular ulcer disease among Veterans. The system aims to improve patient outcomes and care efficiency.

• Develop and implement a Software as a Service (SaaS) digital platform hosted on VHA GovCloud servers.

• The platform must be FedRAMP and FISMA authorized, scalable to national levels, and configurable for healthcare system needs.

• Support up to 2000 patients initially at a pilot VA location (Minneapolis or Palo Alto).

• Provide standardized care protocols for lower extremity vascular ulcers.

• Include patient-facing mobile and web-based applications for practitioners and administrators.

• Extract, transform, and load (ETL) patient data from VAEC Azure Clinical Data Warehouse (CDW) to a secure S3 bucket.

• Ensure all data transfers are encrypted and comply with HIPAA and other relevant standards.

• Project Management: Contractor Project Management Plan (CPMP), Monthly Progress Reports, Privacy & HIPAA Training certificates, Technical Kickoff Meeting.

• System Development: System Design Document (SDD), Change and Configuration Management Plan.

• Implementation & Deployment: Configuration services, network connectivity (TIC 2.0 Gateway, IPv6 support), Service Level Agreement (SLA).

• Testing & Training: Support for VA testing (T&E), role-based training materials.

• Support & Maintenance: 24/7 Help Desk, ongoing system maintenance and updates.

• Pilot & Assessment: Care Pathway Assessment Report, Pilot Results Report, System Boundary Diagram, FedRAMP documentation, Incident Response Plan.

• System availability: 99.9% with max 8 hours unplanned downtime per year.

• Compliance with Federal laws, VA directives, and security standards (FISMA, FedRAMP, HIPAA, NIST, etc.).

• Section 508 compliance for ICT.

• Period of Performance (PoP): 12 months from date of award.

• Place of Performance: Primarily Contractor facilities; work may be performed remotely with prior approval. Onsite presence required during normal business hours at the VA location during pilot.

• Security: Strict adherence to VA cybersecurity policies, including Zero Trust, FICAM, PIV card enablement, and data encryption. Background investigations required for contractor personnel.

• IT Framework: Compliance with VA Technical Reference Model (TRM), Veteran Focused Integration Process (VIP), and Product Line Management (PLM).

• Data Handling: No Personally Identifiable Information (PII) or Protected Health Information (PHI) to be stored locally on devices; all data hosted on VHA GovCloud. SSN reduction and use of ICN as primary identifier.

• AI Requirements: If AI is used, compliance with Executive Orders and OMB Memoranda on trustworthy and unbiased AI is mandatory.