NCSES Secure Data Access Facility (SDAF)

The National Science Foundation Division of Acquisition and Cooperative Support is conducting market research to identify qualified sources for the development and management of the National Center for Science and Engineering Statistics (NCSES) Secure Data Access Facility (SDAF). The facility will archive, maintain, and provide secure remote access to restricted-use microdata from six scientific surveys, enabling authorized researchers to access confidential data through a secure digital environment equipped with statistical software packages including SAS, Stata, SPSS, and R. Interested vendors must demonstrate capability in developing secure environments, implementing data enclave infrastructure, ensuring Section 508(c) compliance, employing agile development methodologies, and adhering to federal security standards including the Privacy Act and CIPSEA regulations. NSF expects respondents to submit a five-page response to Derek Bowks at dbowks@nsf.gov by December 4, 2025, at 12:00 PM ET, and may conduct follow-up due diligence sessions with selected vendors. Responses should include corporate information and answers demonstrating experience in secure data management and federal compliance, but no cost or pricing information should be included in this initial market research phase.

No set-aside designations have been applied to this procurement, though NSF encourages responses from small businesses across various socioeconomic categories. The contract is structured as a Time & Materials agreement with a base period from January 1, 2026, through December 31, 2026, and an estimated value of $480,000 not-to-exceed, comprising $450,000 for researcher fees and $30,000 for the annual portal fee. The NAICS category is 541512 (Computer Systems Design Services) with a size standard of $34 million. Successful contractors must maintain key personnel including a principal researcher with a doctorate and senior research scientists with master's degrees in statistics or social sciences, all demonstrating extensive experience in secure data management. The contractor will bear responsibility for maintaining rigorous data confidentiality protocols, providing user support and training, managing online licensing applications, conducting disclosure reviews, and ensuring full compliance with federal data protection regulations.