DA10--eNotifications eNotifications Software as a Service (SaaS) - New Task Order (VA-25-00089975)

Statement of Work (SOW) / Performance Work Statement (PWS)

This Performance Work Statement (PWS) outlines the requirements for an eNotifications Software as a Service (SaaS) pilot program. The primary goal is to establish a service for electronic Admission, Discharge, and Transfer (ADT) notifications to improve care coordination, patient safety, and timely follow-up for Veterans.

The Contractor will provide and implement an ADT eNotification SaaS solution for two VA Medical Centers (VAMCs): Corporal Michael J. Crescenz VA Medical Center in Philadelphia, PA, and Wilmington VA Medical Center in Wilmington, DE. The service will support a selected Veteran population of 7,000 patients (2,000 for Wilmington, 5,000 for Philadelphia). Key functionalities include real-time alerts for admissions, discharges, and transfers, data synchronization, and the ability to set up rules and filters for notifications. The solution must support secure transmission of eNotifications via the Direct Messaging protocol to VA's legacy Direct Messaging system. A Secure File Transfer Protocol (SFTP) will be provided for securely sharing Veteran/patient lists with the VA. The Contractor will also provide technical support and system maintenance.

• Performance Period: 12 months from the date of award, with one optional task.

• Place of Performance: Contractor facilities.

• Travel: No government-anticipated travel; meetings will be held remotely/virtually.

• Project Management: Deliver a Contractor Project Management Plan (CPMP), conduct a kickoff meeting, and provide monthly progress reports.

• Privacy and HIPAA Training: Contractor personnel must complete required training and provide certificates.

• ADT Service Requirements: Implement the eNotification SaaS, populate VA Patient Roster information, and configure functionalities for each VAMC. Deliver an Implementation Plan.

• SAAS FedRAMP Requirements: The solution must comply with FedRAMP requirements for HIGH Data Security Categorization and be FedRAMP Authorized. The Contractor will assist with the VA ATO process and provide necessary documentation.

• Secure File Transfer Protocol (SFTP): Provide SFTP for secure data exchange.

• Monitoring, Technical Support, and Maintenance: Provide ongoing monitoring, technical support, and maintenance for the eNotification Service. Deliver an ADT System Metrics Report.

• Optional Task 1: Addition of up to 5,000 more patients in blocks of 500.

• Enterprise and IT Framework: Comply with VA Technical Reference Model (TRM), Zero Trust – VA Critical Security Controls, and Federal Identity, Credential, and Access Management (FICAM) requirements.

• Security and Privacy: Adhere to stringent security and privacy requirements, including background investigations for personnel, data protection, and incident reporting.

• Deliverables: Documentation to be delivered in electronic format.

• Performance Metrics: Performance will be assessed based on technical quality, project milestones, cost/staffing, and management.

• Cyber and Information Security: Strict adherence to VA security standards, including encryption, anti-virus, and sanitization procedures.

• VA Enterprise Architecture Compliance: Compliance with VA EA standards.

• Section 508: Compliance with accessibility standards for electronic ICT.

• Confidentiality and Non-Disclosure: Strict adherence to rules regarding sensitive information, PHI, and ePHI.

• Information System Security: Compliance with federal laws, regulations, and VA policies for information systems, including hosting, operation, maintenance, and use. This includes FedRAMP compliance and adherence to Trusted Internet Connection (TIC) requirements.

• Product Integrity: Compliance with supply chain security requirements and anti-counterfeiting measures.

• Viruses, Firmware, and Malware: Ensure all software and patches are free of malicious code.

• Cryptographic Requirements: Use approved cryptographic methods and standards.

• Patching Governance: Provide documentation for patch management and vulnerability remediation processes.

Statement of Work (SOW) / Performance Work Statement (PWS)

This document outlines the Performance Work Statement (PWS) for the eNotifications Software as a Service (SaaS) - New Task Order (VA-25-00089975) for the Department of Veterans Affairs.

• The primary goal is to procure eNotifications as a Software as a Service (SaaS) solution.

• This is a pilot program for the VA.

• The acquisition strategy involves soliciting under GSA FSS 54151S.

• The solicitation is forecasted for release in early November.

• Specific performance period and place of performance are not detailed in this excerpt but are expected to be in the full PWS.

• The procurement is being conducted as a SaaS pilot.

• Bidders should refer to the attached draft PWS for detailed requirements.

• This document is an update to a previous solicitation (36C10B25Q0468).

• The contracting office is located in Eatontown, NJ (07724).

• The response date for the original solicitation was September 9, 2025, 14:00 ET, but this has been updated with the forecasted release in November.

Solicitation / RFP / RFQ

This is a synopsis for an upcoming solicitation for "eNotifications Software as a Service (SaaS)" under Task Order VA-25-00089975. The Department of Veterans Affairs (VA) plans to compete this requirement on the General Services Administration (GSA) Multiple Award Schedule (MAS) Category 54151S.

Details regarding specific software functionalities, service levels, and deliverables will be provided in the forthcoming solicitation. The primary service is Software as a Service (SaaS) for eNotifications.

Not specified in this synopsis. The solicitation will be released in late August / early September.

Details on proposal submission and evaluation criteria will be included in the official solicitation document.

Based on market research, the VA does not expect to set this solicitation aside for small businesses.

• Solicitation Number: 36C10B25Q0468
• NAICS Code: 541519
• Product Service Code: DA10
• Response Date/Time: 07-30-2025 14:00 EASTERN TIME, NEW YORK, USA
• Contracting Office: Department of Veterans Affairs, Technology Acquisition Center, Eatontown NJ 07724
• Points of Contact: Amanda.Bleses@va.gov, Dana.Newcomb@va.gov
• Solicitation Release: Expected in late August / early September.

Request for Information (RFI)

This RFI is for planning purposes to gather information for the "eNotifications Services" requirement (VA-25-00089975). The Department of Veterans Affairs (VA) is seeking information to refine its acquisition strategy and Performance Work Statement (PWS). This is not a solicitation, and no contract will be awarded based on this RFI. Responses will not be reimbursed.

• Set-Aside Consideration: Responses may influence set-aside decisions, particularly for Veteran Small Business Certification (VetCert) certified Service-Disabled Veteran-Owned Small Businesses (SDVOSBs) and Veteran Owned Small Businesses (VOSBs). SDVOSB/VOSB companies must be registered and certified in the SBA's VetCert database.

• NAICS Code: 541519 - Other Computer Related Services.

• Page Limit: 15 pages. No marketing materials are allowed.

• Response Content: Generic capability statements are not accepted. Responses must address capabilities specific to the draft PWS and include:

  • Company Name, Address, Point of Contact, Phone, Fax, Email
  • Company Business Size and Status
  • For SDVOSBs/VOSBs: Intent and ability to meet VAAR 852.219-73 requirements regarding subcontracting to non-SDVOSBs (not more than 50% of the prime contract value).
  • Available personnel and financial resources.
  • Proposed team members and subcontracting plans for PWS requirements.
  • Provider network coverage (national deployment anticipated).
  • Ability to support Direct Messaging and other secure sharing options.
  • Estimated timeframe for eNotification delivery.
  • General pricing model.
  • Network Providers/Participants list.
  • FedRAMP authorization status.
  • Feedback on the draft PWS sufficiency for technical requirements, software development, and production operations support. If the PWS is insufficient, provide technical comments/recommendations.

• Due Date: July 30, 2025, 2:00 PM EST.

• Submission Method: Email to Amanda.Bleses@va.gov and Dana.Newcomb@va.gov.

• Subject Line: "eNotifications Services".

• Email Size Limit: 5 MB.

• Proprietary Information: Mark responses as "Proprietary Information" if applicable.

• Contracting Office Address: Department of Veterans Affairs, Technology Acquisition Center, 23 Christopher Way, Eatontown NJ 07724.

• Points of Contact: Amanda Bleses (Amanda.Bleses@va.gov) and Dana Newcomb (Dana.Newcomb@va.gov).

• PWS eNotifications Draft 7 22 25.

Performance Work Statement (PWS)

To pilot an Admissions, Discharge, and Transfer (ADT) e-Notification service for two VA Medical Centers (VAMCs) to improve care coordination and patient safety for Veterans receiving services from community providers. The goal is to evaluate the potential for enterprise-wide expansion.

• Provide and implement an ADT eNotifications service for Corporal Michael J. Crescenz VA Medical Center (Philadelphia, PA) and Wilmington VA Medical Center (Wilmington, DE).

• Support 7,000 subscriptions initially (5,000 for Philadelphia, 2,000 for Wilmington), with an option to scale up to 12,000.

• Configure, install, migrate data, test, and deploy the system.

• Transmit real-time eNotifications for Veterans/patients using Direct Messaging protocol.

• Provide a Secure File Transfer Protocol (SFTP) for secure data exchange.

• Offer monitoring, technical support, and system maintenance.

• The service must be a FedRAMP approved SaaS solution, authorized at HIGH impact.

• Real-time notifications for admissions, discharges, and transfers.

• Secure data exchange via SFTP with strong encryption (AES-256).

• 99.9% uptime for SFTP service.

• Technical issues acknowledged within 1 hour and resolved within 24 hours.

• Weekly ADT System Metrics Reports for the first 90 days, then bi-weekly or monthly.

• Performance Period: 12 months from the date of award.

• Place of Performance: Contractor facilities.

• Compliance with numerous federal laws, regulations, and VA directives (e.g., HIPAA, FISMA, FedRAMP, NIST standards, Zero Trust principles, FICAM, IPv6).

• Contractor personnel must undergo background investigations and complete mandatory training (Privacy, HIPAA, Rules of Behavior).

• Solutions must comply with VA Enterprise Architecture and Technical Reference Model (TRM).

• Adherence to Section 508 accessibility standards for all Information and Communication Technology (ICT).

• Strict security and privacy requirements, including data encryption, audit trails, and incident reporting.

• Use of Integrated Control Number (ICN) instead of Social Security Number (SSN) as the primary identifier.