Secure Third-Party Collaboration Solutions to Support OCC Bank Audits

The Office of the Comptroller of the Currency (OCC) within the Department of the Treasury is conducting market research for secure third-party collaboration solutions to support bank audits and supervision activities. The agency seeks vendors capable of extending Microsoft 365 capabilities for secure external collaboration with banks and other regulators while maintaining a closed-tenant security posture that prohibits guest accounts in OCC's Microsoft 365 environment. Key requirements include integration with Microsoft Purview Data Loss Prevention and other compliance controls, provision of trusted and auditable collaboration mechanisms, comprehensive evidence request workflows, file versioning capabilities, and adherence to federal information security standards including FedRAMP and NIST requirements. The solution must simplify bank supervision workflows, leverage existing M365 investments without duplicating data into separate platforms, and provide OCC-branded collaboration portals. Interested vendors must submit electronic responses in Word or PDF format with a maximum of 20 pages by noon ET on September 12, 2025, to Contract Specialist Danielle Pena.

This pre-solicitation notice indicates no set-aside designation has been applied to this potential procurement opportunity. The RFI does not identify any current incumbents or existing contractors providing similar services to the OCC. No award values, budget ranges, or specific contract timeline details are disclosed in the market research notice, as this represents an information-gathering phase rather than a formal solicitation. The agency emphasizes this is solely for market research and planning purposes and does not constitute a commitment to proceed with a procurement or guarantee contract awards. The OCC may invite multiple qualified vendors to demonstrate their solutions following the response period, with evaluations focusing on integration capabilities with M365 and Purview DLP systems as well as compliance with the agency's stringent security requirements.