Department of Defense (DoD) Privacy Information Management System (DPIMS)

The Defense Information Systems Agency (DISA) is seeking information from potential vendors to support the sustainment and operations of the Department of Defense Privacy Information Management System (DPIMS), an enterprise-wide platform that consolidates breach reporting and delivers improved efficiency, compliance, and analytics across all Combatant Commands, Services, and Agencies. DPIMS operates as a Commercial-off-the-Shelf (COTS) solution hosted in Microsoft Azure Government IL5 environment and provides case management, reporting, workflow automation, and analytics capabilities on NIPRNet. Key contract requirements include 24/7/365 system availability, cyber security and Authority to Operate (ATO) maintenance with vulnerability management and continuous monitoring, Tier II/III technical help desk support with specific response times (15 minutes for incident response and 2-4 business hours for ticket closure), and configuration and release management for production deployment. The government is soliciting responses from small business concerns, including Service-Disabled Veteran-Owned, HUBZone, Woman-Owned, and 8(a) enterprises, with respondents required to possess a final facility security clearance and be U.S. Citizens capable of obtaining a Secret clearance. The submission deadline for vendor responses is March 6, 2026 at 4:00 PM EDT, with a maximum five-page limit for proposals.

This procurement carries no set-aside designation despite the government's preference for small business responses. Diversified Technical Services, Inc., a small business, is the incumbent contractor operating under GSA MAS contract 47QTCA19D008D/HC1047-21F-2087, with performance scheduled through September 23, 2026. The anticipated follow-on contract encompasses one 12-month base period plus four optional 12-month option years, with potential six-month extension authority under FAR 52.217-8, representing a substantial multi-year commitment. The procurement falls under NAICS code 541512 (Computer Systems Design Services) with a $34 million size standard. All work must be performed remotely with classified work conducted at DoD-approved facilities, requires CMMC Level 2 (Self) compliance, and mandates Secret clearance for database and system administration tasks. Deliverables must be provided with Unlimited Data Rights unless otherwise approved by the government.