Attachment 1_Sources Sought_DHIS2 FINAL.docx

Department of State District Health Information Software 2 (DHIS2) Environment Hosting – Sources Sought

General:

This is a Sources Sought Notice Only. This is NOT a solicitation for proposals, proposal abstracts, or quotations. This Sources Sought Notice is issued for information and planning purposes only as part of U.S. Department of State (DOS) market research and in itself does not constitute a solicitation. This requirement is covered under Category 518210 (Data Processing, Web Hosting, and Related Services). The purpose of this notice is to obtain information regarding the availability and capability of qualified companies (small businesses; HUBZone small businesses; service-disabled veteran owned small businesses; 8(a) small businesses; veteran owned small businesses; woman owned small businesses; and small disadvantaged businesses) to provide specialized District Health Information Software 2 (DHIS2) Environment Hosting services. The scope of this project includes provisioning of cloud infrastructure to host the DHIS2 application, providing three (3) DHIS2 Environments (Development, Test, Production), and providing data migration from current environment to new environment (if the company is not the party currently providing this hosting service for United States Department of State (DOS) Bureau of Global Health Security and Diplomacy (GHSD) President’s Emergency Plan for AIDS Relief (PEPFAR) program).

Background:

The Department of State (DoS) plays an essential role in ensuring that foreign policy missions are accomplished in a safe and secure environment. The Bureau of Global Health, Security, and Diplomacy (GHSD) oversees and directs all resources and activities of the U.S. Government (USG) response to global HIV/AIDS. Our goal is to implement the President’s Emergency Plan for AIDS Relief (PEPFAR), including U.S. contributions to the Global Fund to Fight AIDS, Tuberculosis, and Malaria, and relations with other bilateral and multilateral organizations. PEPFAR is the most significant commitment made by any nation to combat a single disease internationally, which operates in nearly 60 countries through bilateral and regional programs to end AIDS as a public health threat. PEPFAR supported programs are implemented under the leadership of the Department of State (DoS) and through a multitude of USG agencies, including the U.S. Department of Health and Human Service (HHS), including the Centers for Disease Control and Prevention (CDC), the Health Resources and Services Administration (HRSA), the National Institutes of Health (NIH); and the U.S. Department of Defense (DoD).

Primary Objective:

The primary objective of this project is to provide robust and scalable hosting services for the DHIS2 platform, ensuring high availability, security, and performance.

Place of Performance:

Hosting services must be located within the continental United States on a FedRAMP approved cloud platform.

Special Requirements:

1. Data Migration - If an entity other than the incumbent providing DHIS2 hosting, the entity must provide a data migration approach outlining how data from existing PEPFAR environments will be migrated to the offeror’s solution with minimal disruption to GHSD/PEPFAR operations, including high level approach, timeline, and cost during the solicitation phase.

2. Security and Compliance - An active FISMA Moderate Authority to Operate (ATO) or FISMA Moderate Conditional Authority to Operate (ATO-C) issued by the Department of State is required at the start of the Period of Performance, in order for the GHSD/PEPFAR program to meet federal cybersecurity requirements.

3. Hosting - DHIS2 environments must be hosted within the continental United States.

Incumbent Contractor:

BAO Systems – 2900 K Street NW, Suite 506, Washington, DC

SOURCES SOUGHT INSTRUCTIONS

Instructions:

1. All small businesses with the capability to provide the described services shall articulate their capabilities and experience in a document that does not exceed (10) pages. The document shall be concise and focused. The document shall include a summary of work performed as a managed hosting service that provides DHIS2 software as a service in the cloud.

1. Cost or price information is not solicited and will not be reviewed.

1. Interested businesses shall submit an electronic copy of their submission via email to Jeannie R. Mays, MaysJR@state.gov and Ola Hassan, HassanOJ@state.gov. The due date and time for submission of responses is 11:00 AM Eastern Standard Time (EST) August 21, 2025.

1. No phone calls related to this Sources Sought will be accepted. All correspondence shall be via email.

1. Companies responding to this Sources Sought shall be registered in the System for Award Management.

1. Provide available General Services Administration (GSA) Multiple Award Schedule Contract Numbers for the service required, if applicable.

All responses must include the following information:

1. Company name;

1. Company address;

1. Company small business socioeconomic category;

1. Unique Entity Identifier;

1. Point-of-contact name, telephone number, and email address.