RFP 2026-02 Network Equipment, Services and Maintenance

The Virginia Information Technologies Agency (VITA) is soliciting proposals under RFP 2026-02 for network equipment for purchase, along with associated services, with proposals due December 16, 2026. Suppliers must demonstrate State Corporation Commission (SCC) registration or use one of four alternative pathways in Appendix A, and must submit quotes through the eVA Quote Retrieval Punchout system, which is a prerequisite for consideration.

Scope includes equipment purchase and services "including but not limited to" installation, training, maintenance, repair, and ongoing support. Responses require a supplier profile covering corporate background, subcontractor identification, ISO 9001 certification status, three years of Dun and Bradstreet reports and certified audited financial statements, three customer references, and disclosure of lost or cancelled contracts within three years. Bidders must also submit a security risk management overview and disaster recovery plans. Proposed cloud solutions, whether SaaS, PaaS, or IaaS, must complete the COVRamp Security Questionnaire under Virginia's Hosted Environment Information Security Standard (SEC 530). Responses require explanations supported by policy documents and evidence rather than yes/no answers. The questionnaire addresses continental United States data residency, multi-factor authentication, AES-256 encryption, and data portability.

Suppliers may accept the VITA Standard Contract and Exhibit E Cloud Terms and Conditions as presented, or propose exceptions to either under Appendix E with page references and detailed explanations. Suppliers may invoke proprietary protections under Virginia Code 2.2-4342(F); otherwise, the questionnaire is subject to release under the Virginia Public Procurement Act and the Freedom of Information Act. Suppliers with pending SCC applications may request a waiver to submit their SCC identification number after the proposal due date, subject to Commonwealth discretion.