FAR Part 12 Commercial Solicitation Summary

This is a Federal Acquisition Regulation (FAR) Part 12 Combined Synopsis/Solicitation for an Indefinite-Delivery, Indefinite-Quantity (IDIQ) contract (70RTAC26R0000004) issued by the U.S. Department of Homeland Security (DHS), Office of the Chief Procurement Officer, for Department-Wide Cloud (Cumulus) services. The solicitation, under Revolutionary FAR (RFO) 12.201-2 procedures, seeks multiple cloud service provider (CSP) awards to deliver cloud infrastructure and related services supporting DHS missions across all organizational levels. Cloud services required include Anything as a Service (XaaS), Marketplace Services, Enterprise Support, and Enterprise Training, with deliverables structured around four Consumption-Based Contract Line Item Numbers (CLINs): X001 (XaaS), X002 (Marketplace Services), X003 (Enterprise Support), and X004 (Enterprise Training). The base ordering period spans 12 months with four optional one-year extension periods, for a total potential performance duration of 60 months. The cumulative dollar ceiling for the resulting multiple-award IDIQ contract is $568 million, with a minimum guaranteed award of $2,500 per base period.

Proposals are due by 2:00 pm ET on August 28, 2026, submitted to Contracting Officer Gregory Blaszko at gregory.blaszko@hq.dhs.gov. Evaluation will be based on three factors in descending order of importance: Technical Capability (Factor 1), Relevant Past Performance (Factor 2), and Price (Factor 3), with technical factors combined being more important than price. CSPs must demonstrate comprehensive technical capabilities including full DHS data ownership, administrative and cost management access via commercial SLAs, marketplace services approvals meeting FedRAMP standards, redundancy across geographically dispersed data centers with 99.9% availability, and scaling capacity to support 4,000 virtual instances within 10 minutes. Past performance evaluation allows submission of up to two projects per CSP entity; CPARS reports may substitute for questionnaires. Single awards are anticipated for Amazon, Oracle, Google, and Microsoft, with an additional multiple-award vehicle for on/off-ramping terms. Small business subcontracting goals total 54.5% of award value (36.5% small business, 5% women-owned small business, 5% small disadvantaged business, 5% service-disabled veteran-owned small business, and 3% HUBZone). The contract incorporates FAR commercial clauses, DHS-specific security requirements including Controlled Unclassified Information (CUI) handling protocols, incident reporting requirements, privacy training, and IT security awareness training obligations. Task Orders will be firm fixed price (FFP) or firm fixed unit price (FFUP) with consumption-based billing where payment is made only for actual government service consumption.