Revvity Electronic Laboratory Notebook FedRAMP

The National Institute on Drug Abuse (NIDA), part of the National Institutes of Health, has issued a Sources Sought Notice seeking small businesses capable of supporting the agency in obtaining FedRAMP Moderate authorization for the Revvity Signals Software Electronic Laboratory Notebook (ELN). The procurement focuses on identifying qualified small businesses that can provide security remediation services, ensure interoperability, and conduct third-party assessment organization (3PAO) evaluations to achieve FedRAMP compliance for this Scientific Software as a Service (SaaS) application. Key requirements include developing a comprehensive management plan, providing monthly status updates, implementing required security controls, addressing technical and documentation deficiencies, and supporting the submission of a complete FedRAMP Moderate authorization package. The government seeks businesses with demonstrated professional qualifications and the technical capability to navigate the complex FedRAMP authorization process. Interested companies must submit a detailed 10-page capability statement to Scott Duernberger at scott.duernberger@nih.gov by 3:00 PM Eastern Time on July 25, 2025, outlining their employee count, professional qualifications, and ability to meet all project requirements.

This opportunity does not include any specific set-aside designation but explicitly encourages participation from various small business categories including 8(a), veteran-owned, service-disabled veteran-owned, HUBZone, small disadvantaged, and women-owned small businesses. No incumbent contractors or current service providers are identified in the notice, suggesting this may be a new requirement or a fresh competition for FedRAMP authorization services. The document does not specify any contract value ranges, budget constraints, or funding limitations for the anticipated procurement. The timeline is compressed with only four days between the notice posting on July 21, 2025, and the capability statement submission deadline of July 25, 2025. The solicitation emphasizes the critical importance of robust security measures in cloud computing environments for research applications, reflecting the growing reliance on cloud-based scientific software solutions within federal research institutions. The 10-page limitation on capability statements suggests the government is seeking concise but comprehensive responses from potential contractors.