7A21--Logicare Patient Instruction Software License and Software Support Services

Form / Attachment / Pricing Sheet

This document, "S02 VA Directive 6500 Attachment.docx," contains Addendum B, which details VA Information and Information System Security/Privacy Language applicable to contractors. It outlines requirements for handling VA information, access to systems, training, incident reporting, system development, hosting, and product integrity.

• General Applicability: Applies to all acquisitions requiring information security and privacy language.
• VA Information Custodial Language: Defines government rights to data, contractor use of VA information, data segregation, audits, copying, destruction, and encryption standards (FIPS 140-2, NIST 800-52).
• Access to VA Information and Systems: Contractor personnel require logical/physical access, must sign the VA Information Security Rule of Behavior, and are subject to security investigations and clearance requirements. Personnel changes must be reported promptly.
• Training: Mandates specific VA security and privacy awareness training for contractors and annual refreshers.
• Security Incident Investigation: Outlines immediate reporting procedures for security/privacy incidents to the VA Enterprise Service Desk and subsequent reporting to the COR/CO.
• Information System Design & Development: Specifies requirements for designing and developing VA information systems, including compliance with federal laws, VA directives, and security standards (FIPS 199, FIPS 200, NIST 800-37).
• Information System Hosting, Operation, Maintenance or Use: Details requirements for systems hosted or operated at non-VA facilities, including compliance with FedRAMP and VA Directive 6517.
• Product Integrity, Authenticity, Provenance, Anti-Counterfeit and Anti-Tampering: Prohibits ICTS transactions from foreign adversaries and requires adherence to supply chain risk management practices.
• Viruses, Firmware and Malware: Contractors must ensure provided software is free of malicious code and warrants no knowledge of inserted malicious code.
• Cryptographic Requirement: Mandates the use of approved cryptographic methods (FIPS 140-2, NIST 800-52) and documentation of cryptographic system protection.
• Patching Governance: Requires contractors to provide documentation on patch management, vulnerability management, and remediation processes.
• Specialized Devices/Systems: Outlines cybersecurity requirements for medical devices, special purpose systems, and research scientific computing devices.
• Data Center Provisions: Specifies requirements for accessing the VA network and ensuring network infrastructure and data availability.

This document is critical for any bidder whose proposed solution involves handling VA information, accessing VA systems, developing or hosting IT systems for VA, or providing hardware/software. It details stringent security, privacy, and data handling requirements that must be incorporated into the bidder's technical approach and pricing. Failure to comply can lead to contract termination. Bidders must carefully review these requirements to ensure their proposed solution meets VA's security posture.

Solicitation / RFP / RFQ

This solicitation is for the provision of Logicare Patient Instruction Software License and Software Support Services for the Minneapolis VA Health Care System. The goal is to implement an automated patient instruction/education software that integrates with existing systems to improve clinical outcomes and patient experience by providing accurate, timely, and personalized discharge instructions.

• Automated treatment instruction software compatible with VISTA and CPARS.

• Meets The Joint Commission requirements for patient safety, education, and communication.

• Provides disease/injury-specific patient education compatible with VA Electronic Health Record Systems.

• Delivers written discharge instructions in an understandable format.

• Utilizes evidence-based patient education principles.

• Software must pull current medication and future appointment lists.

• Must address follow-up gaps to Primary Care Physicians and allow automatic inclusion of PCPs in instructions.

• Requires around-the-clock user and technical support.

• Bi-annual content updates.

• Version 8.05 or newer required.

• Contract Type: Firm-Fixed-Price.

• Period of Performance: Base period (03-22-2026 to 03-21-2027) with four (4) one-year option periods.

• Estimated Value: $47 Million (This is likely an estimate or ceiling, not a guaranteed amount).

• Offers must be submitted electronically via email to theresa.thunder@va.gov in Microsoft Word or Adobe PDF format for text documents and Microsoft Excel for spreadsheets.

• Submission Deadline: February 13, 2026, 16:00 CST.

• Evaluation Approach: Lowest Price Technically Acceptable (LPTA).

• Technical questions deadline: February 6th, 2026, 5:00 PM CT.

• This acquisition is unrestricted.

• NAICS Code: 513210 (Software Publishers).

• Size Standard: Not specified in this excerpt.

• Offerors must review all provided documentation, including the Statement of Work, Business Associate Agreement Template, and Wage Determination.

• FAR 52.212-1, 52.212-3, and 52.212-5 are attached or incorporated by reference. Addenda are attached.

• Security requirements and training mandates (VA Privacy and Information Security Training, HIPAA) are detailed.

Other / Unclassified

This document is a U.S. Department of Labor Wage Determination (No. 2015-4945, Revision No. 30) applicable to service contracts in specific counties of Minnesota and Wisconsin. It lists various occupations with their corresponding minimum hourly wage rates and required fringe benefits.

This wage determination is crucial for any bidder responding to a solicitation that requires services within the specified geographic areas (Anoka, Carver, Chisago, Dakota, Hennepin, Isanti, Ramsey, Scott, Washington, Wright counties in Minnesota; Pierce and St. Croix counties in Wisconsin). Bidders must ensure their proposed wages and benefits meet or exceed the rates and benefits outlined in this determination to comply with the Service Contract Act. The document also details:

• Occupational Wage Rates: A comprehensive list of job titles and their minimum pay.
• Fringe Benefits: Standard health and welfare, paid sick leave (EO 13706), vacation, and holiday benefits.
• Executive Order Applicability: Information on EO 13706 (Paid Sick Leave) and EO 13658 (Minimum Wage) and their impact on contract wages.
• Hazardous Pay Differentials: Additional pay for working with ordnance, explosives, and incendiary materials.
• Uniform Allowance: Guidelines on contractor responsibility for uniform costs and maintenance.
• Conformance Process: Procedures for establishing wage rates for occupations not listed in the determination using Standard Form 1444 (SF-1444).

Form / Attachment / Pricing Sheet

This document is a Business Associate Agreement (BAA) between the Department of Veterans Affairs (VA) Veterans Health Administration (VHA) Minneapolis VA Health Care System (Covered Entity) and a Business Associate. Its purpose is to establish requirements for the use and disclosure of Protected Health Information (PHI) in accordance with HIPAA, HITECH, and related rules.

• Scope: The Business Associate will provide "Logicare Patient Instruction Software License and Support" services.
• PHI Ownership: PHI remains the property of the Covered Entity.
• Use and Disclosure: Outlines permitted uses and disclosures of PHI by the Business Associate, emphasizing compliance with HIPAA Privacy Rule and "minimum necessary" policies.
• Business Associate Obligations: Includes requirements for implementing safeguards, reporting breaches within 24 hours, providing written reports within 10 business days, mitigating harm, using US-based subcontractors, entering into BAAs with subcontractors, assisting with individual requests for PHI access/amendment/accounting, complying with Subpart E of 45 CFR Part 164, providing records for compliance reviews, and returning or destroying PHI upon contract termination.
• Covered Entity Obligations: Specifies that the Covered Entity will not request impermissible uses/disclosures, will notify the Business Associate of restrictions or changes affecting PHI, and will obtain necessary authorizations from individuals.
• Termination: Details automatic termination, termination upon review, and termination for cause due to material breach.
• Survival: Business Associate's obligations survive termination as long as PHI is maintained.

Bidders involved in opportunities requiring the handling of Protected Health Information (PHI) by the VA must understand and agree to the terms of this BAA. It outlines critical responsibilities and liabilities related to data privacy and security. Failure to comply with this agreement can result in penalties for the Covered Entity, for which the Business Associate may be liable. This document is essential for any vendor providing services that involve access to or management of patient health information.

Solicitation / RFP / RFQ

This is a pre-solicitation notice for the Department of Veterans Affairs, Network Contracting Office 23. The procurement is for Logicare Patient Instruction Software License and Software Support Services for the Minneapolis VA Health Care System.

• Logicare Patient Instruction Software License

• Software Support Services

• Not specified in this notice.

• Potential offerors are responsible for monitoring the SAM.gov site for the release of the solicitation package and any amendments.

• All questions must be submitted in writing to the Contracting Specialist at theresa.thunder@va.gov. No telephone inquiries will be accepted.

• This notice does not obligate the Government to award a contract or pay for proposal preparation costs.

• A solicitation will be published shortly.

• NAICS Code: 513210 – Software Publishers (Size Standard: $47 Million).

• All interested parties must be registered in System for Award Management (SAM) to be eligible for award.

• The response date for the upcoming solicitation is January 30, 2026, at 16:00 Central Time, Chicago, USA.

• The Place of Performance is the Minneapolis VA Health Care System, Minneapolis, MN 55417, USA.