Modernized VAERS Reporting Application

The Centers for Disease Control and Prevention seeks design, development, testing, and deployment of a modernized web application for Vaccine Adverse Event Reporting System (VAERS) consumer and healthcare provider reporting, with quotations due September 8, 2026 at 10:00 AM ET. This is a 100% small business set-aside.

Place of performance is Atlanta, Georgia. The contract runs nine months from September 28, 2026 through June 27, 2027, firm fixed price for nonseverable services. The application must be mobile-friendly and desktop-compatible, incorporating a redesigned landing page, guided reporting workflows with branching logic differentiating public versus healthcare provider submitters, intelligent validation with AI-assisted contextual guidance, medical record upload capability with two-phase restrictions, low-code configurable interface, and customer satisfaction surveys. Development occurs within CDC's FedRAMP-authorized Microsoft Azure environment. The contractor must reduce submission abandonment rates by at least 30% and achieve median submission times of 10 minutes or less. The application must support both English and Spanish language options.

Compliance requirements include HIPAA, Privacy Act, FISMA, FedRAMP, and Section 508 accessibility. Deliverables include a working prototype due 45 days after award, beta release at 90 days, and production-ready final release at 150 days. All contractor personnel require Public Trust Tier 2 background investigation; PIV credentials and environment access anticipated after award. Two pre-priced travel CLINs at $31,500 each cover onboarding and meeting-related non-conference travel, reimbursed as direct costs with monthly payments in arrears.

Quotations must include Data Management Plan, AI Compliance and Risk Management Plan, and Incident Response Plan as separate attachments (excluded from the 15-page technical proposal limit). Technical proposals must address technical approach, management approach, and similar experience; commercial and non-federal experience demonstrating comparable technical complexity and regulatory or PHI-PII requirements qualify. Evaluation prioritizes technical factors significantly over price. Amendment 2, effective September 3, 2026, updated the solicitation to include English and Spanish language support and provided answers to question #270.

NAICS 541511, Custom Computer Programming Services; PSC DA10.