Department of Defense Secure Access File Exchange Modernization

The Defense Information Systems Agency (DISA) is seeking modernization services for the Department of Defense Secure Access File Exchange (DoD SAFE), a secure file transfer platform currently serving 1.5 million global users. The modernized solution must enhance scalability, strengthen security through multi-factor authentication and Zero Trust Data Loss Prevention, improve accessibility for both DoD and non-DoD users, and increase file transfer capacity to 40GB with an objective of 1.5TB per hour traffic handling capacity. Key technical requirements include Common Access Card (CAC)/Public Key Infrastructure (PKI) authentication, compliance with DoD security standards and NARA regulations, IPv4/IPv6 networking support, 99.95% system availability, comprehensive transaction logging, and integrated malware scanning across NIPRNet and commercial networks. This is a Request for Information (RFI) designed to gather industry input rather than a formal solicitation, and interested companies must submit white papers (maximum 14 pages) by January 13, 2026, at 4 PM Eastern time that include company details, representative information, business size, UEI and CAGE codes, and rough order of magnitude pricing estimates. DISA may conduct one-on-one discussions with potential offerors to clarify capabilities and development risks, though the RFI does not guarantee a future solicitation or contract award.

No set-aside designations have been applied to this pre-solicitation notice, and no incumbent contractors or current award values have been identified in the available documentation. The RFI responses will be posted on SAM.gov, and all submissions become government property and will not be returned to respondents. The system currently processes between 30-160TB of monthly file uploads, supports approximately 40% guest user traffic alongside authenticated DoD CAC users, and experiences traffic spikes of up to 110GB per minute, indicating the substantial scale and performance requirements for the modernized platform. The modernized solution must operate in parallel with the existing system during transition and provide flexible data retention controls to address current system limitations. While specific budget information has not been disclosed in this pre-solicitation phase, the scope and complexity of modernizing a platform serving 1.5 million users with enterprise-level security and performance requirements suggests a significant contract opportunity.