Unified Discovery and Disclosure (UDD) Platform

The Department of Veterans Affairs Technology Acquisition Center is issuing a Request for Information on the Unified Discovery and Disclosure (UDD) Platform with an RFI close date of August 3, 2026 at 11:00 am ET; no set-aside is anticipated.

The VA seeks a single, integrated, FedRAMP-authorized cloud platform consolidating electronic FOIA and eDiscovery functionality currently operated through separate systems. The platform must perform end-to-end processing on a common evidentiary corpus with unified chain of custody, redaction engine, audit logging, role-based separation across matter types, and VA components. Key capabilities include FOIA and Privacy Act request processing, litigation and administrative eDiscovery support, legal hold and preservation, advanced search and analytics with technology-assisted review, AI-assisted redaction with human oversight, case management, Microsoft 365 integration, open APIs, mobile and Section 508 accessibility compliance, and managed sustainment services.

The platform must support approximately 400 concurrent and 1,900 named users processing roughly 120,000 FOIA requests annually, with nationwide operation including U.S. territories and 24/7 availability. Approximately 650 TB of current cases and matters will be migrated. All infrastructure and contractor personnel must remain within the United States with no offshore access or storage permitted. Performance period consists of one 12-month base period plus four 12-month option periods, with work performed remotely at contractor facilities.

Security requirements include Zero Trust architecture, Federal Identity and Access Management (FICAM), IPv6 support, Trusted Internet Connections (TIC) 3.0 compliance, and VA Critical Security Controls. Contractor personnel require background investigations ranging from Moderate Risk (Tier 2) for routine access to VA sensitive information to High Risk (Tier 4) for privileged or administrative access. Recent clarification (July 30, 2026) eliminates the pre-award FedRAMP certification requirement; systems must instead comply with NIST SP 800-53 Rev 5 and updated Rev 5.2.0 controls, VA Directive 6500, and VA Handbook 6500.6 Appendix C, completing VA's Assessment & Authorization process before becoming operational.

Respondents must submit maximum 15-page responses addressing the complete range of requirements outlined in the draft Performance Work Statement and nine RFI questions, including capability statements, company information, socioeconomic data, federal contract vehicles, and confirmation of ability to meet SDVOSB requirements under VAAR 852.219-10 and the 50% subcontracting limitation. Questions regarding the RFI had a July 20, 2026 submission deadline; questions and responses have been posted. Submissions are directed to Kawana.Tyler-Simms@va.gov, Patrick.Hamilton2@va.gov, or Carolyn.Carbone@va.gov.