SCE-SDAF Sources Sought

The National Science Foundation's Division of Acquisition and Cooperative Support is conducting market research for a Secure Compute Environment (SCE) and Secure Data Access Facility (SDAF) recompete contract to support the National Center for Science and Engineering Statistics (NCSES). The procurement seeks a contractor to develop and maintain a secure virtual data access environment for restricted microdata files, with potential expansion to include linked datasets from other federal agencies. Key requirements include creating a FedRAMP Moderate Impact Level cloud-based computing environment, implementing robust data confidentiality and security procedures, developing an online licensing application for researchers, and providing ongoing technical support. Vendors must demonstrate organizational experience in developing secure environments, meeting 508(c) compliance, implementing agile development methodologies, handling data encryption, and adhering to federal security protocols. Interested companies must submit a 5-page capability statement by July 12, 2025 at 10:00 AM ET to Derek Bowks at dbowks@nsf.gov, including corporate information, small business status, UEI Number, and available contract vehicles.

This sources sought notice does not include any set-aside designations and encourages responses from all qualified businesses, with special emphasis on small businesses across various socioeconomic categories. The anticipated NAICS code is 541512 (Computer Systems Design Services) with a size standard of $34 million, though no specific contract value or budget range has been disclosed in the market research documentation. The contract structure includes a base year plus four option years, creating a total potential contract period of five years. No current incumbent contractors are identified in the available documentation, and the agency emphasizes that this sources sought is for market research purposes only and does not constitute a formal solicitation or guarantee any contract award. The contractor will be required to deliver monthly progress reports, risk management plans, and various technical documentation throughout the performance period to support system authorization and continuous monitoring requirements.