SOURCES SOUGHT
D -- Healthcare Provider Credentialing and Privileging Software-as-a-Service (SaaS) and Credentialing-as-a-Service (CaaS) (VA-26-00054853)
- Notice Date
- 3/23/2026 5:50:13 AM
- Notice Type
- Sources Sought
- NAICS
- 541512
— Computer Systems Design Services
- Contracting Office
- TECHNOLOGY ACQUISITION CENTER NJ (36C10B) EATONTOWN NJ 07724 USA
- ZIP Code
- 07724
- Solicitation Number
- 36C10B26Q0275
- Response Due
- 4/3/2026 9:00:00 AM
- Archive Date
- 05/03/2026
- Point of Contact
- Michael J Weckesser, Contract Specialist, Phone: 848-377-5052
- E-Mail Address
-
michael.weckesser@va.gov
(michael.weckesser@va.gov)
- Awardee
- null
- Description
- Department of Veterans Affairs Request for Information (RFI) Healthcare Provider Credentialing and Privileging Software-as-a-Service (SaaS) and Credentialing-as-a-Service (CaaS) This is a Request for Information (RFI) only. This RFI is for planning purposes only and shall not be considered a Request for Quotation. Additionally, there is no obligation on the part of the Government to acquire any products or services described in this RFI. Your response to this RFI will be treated only as information for the Government to consider. You will not be entitled to payment for direct or indirect costs that you incur in responding to this RFI. This request does not constitute a solicitation for quotes or the authority to enter into negotiations to award a task order. No funds have been authorized, appropriated or received for this effort. The information provided may be used by the Department of Veterans Affairs (VA) in developing its acquisition strategy. Interested parties are responsible for adequately marking proprietary, restricted or competition sensitive information contained in their response. The Government does not intend to pay for the information submitted in response to this RFI. This RFI will be conducted in two parts, Part 1 will cover a potential strategy for a Healthcare Provider Credentialing and Privileging as a SaaS solution, and Part 2 will cover another potential strategy for Credentialing as a Service in which the respondents will address the covering the entire scope of the credentialing process. The VA seeks industry feedback to inform on these strategies for development of potential future acquisition strategies that supports timely onboarding of healthcare providers, ensures continuous credential monitoring, and maintains full compliance with VA, federal, and accreditation standards. Responses may inform potential set aside determinations; therefore, submissions should be complete, detailed, and accurate. Interested Parties may respond to one or both Parts as noted in the Submission Instructions. PART 1: HEALTHCARE PROVIDER CREDENTIALING AND PRIVILEGING SOFTWARE-AS-A-SERVICE (SAAS) Introduction / Background: The VA is conducting market research for a potential strategy involving implementation and deployment of a fully electronic, enterprise-wide SaaS platform that supports all aspects of the credentialing and privileging lifecycle across the VA healthcare system. The goal would be to streamline workflows, reduce provider onboarding time, and transition to a modern, cloud-based system that improves operational efficiency and timeliness of care for Veterans via said solution that will meet all security (e.g., FedRAMP), functional, technical, and privacy requirements. The VA would potentially seek a fully formed, commercially available SaaS system that integrates technology, automation, and compliance-driven workflows with minimal customization required to meet Government requirements. As part of this market research, the VA seeks solutions that combine advanced technology platforms with validated processes, strong compliance controls, and demonstrable real-world performance. Purpose of this Part of the RFI: This Part of the RFI seeks industry feedback and solution concepts from qualified vendors. The Government intends to use responses to: Validate technical feasibility and market availability Refine its potential acquisition strategy Determine industry capacity to meet Healthcare Provider Credentialing and Privileging requirements Identify best practices and potential innovations Scope of the Credentialing and Privileging Solution: The solution must be delivered as a total turnkey implementation, meaning the contractor shall be responsible for all components and phases of delivery without reliance on VA-led development or integration efforts, and is customizable to meet VA workflows and processes. The solution shall have the ability to be able to connect to both VistA and the Federal Health Record. The VA seeks a SaaS solution that performs end-to-end credentialing, verification, continuous monitoring, privileging, peer review activities and committee workflows with decisions. The solution must integrate seamlessly with VA medical staff processes and support the full lifecycle of healthcare provider credentialing and privileging. Salient Characteristics Respondents should confirm their solution supports or addresses the requirements laid forth in the attached excel file within the Requirements Traceability Matrix (RTM) to include the below characteristics. If requirements cannot be met, depict in your response rationale or steps to ensure that the solution could meet the requirements set forth. Provide a secure, fully electronic credentialing system that supports complete lifecycle credentialing and privileging activities. Automatically display a complete, accurate list of each provider s active credentials and all required primary and secondary source verification entities. Process new-provider credentialing files within five (5) days for providers with no red flags, or no later than 120 days prior to expiration for existing providers. Maintain provider records in full compliance with: 100% Joint Commission standards Minimum 99% primary source verification accuracy Minimum 99% secondary source verification accuracy Continuous monitoring of all time-limited credentials for all provider categories (including pending hires, without-compensation, contract, fee-basis, and full/part-time employees). Support migration of all current VA credentialing data into the SaaS platform. Provide system access for authorized users at national, regional, and facility levels with role-based permissions. Generate data reports at national, regional, and facility levels. Support concurrent end users across the VA enterprise without impeding functionality. Accurately display Occupational Category and Occupation for all providers. Collect, verify, evaluate, and maintain credentials in compliance with VHA policy, federal law, and accrediting body standards. Comply with VHA Directives 1100.20 and 1100.21. Protect all PHI, PII, and sensitive data in accordance with federal privacy and cybersecurity requirements. Provide continuous monitoring, automated alerts, and reporting for all time-limited credentials. Required Information from Respondents for Part 1 Vendors are required to provide the following: A description of its proposed solution, including people processes and technologies A response matrix mapping their solution to the RTM Details of past performance with similar size and scale SaaS deployments, within both Federal and Commercial environments Vendors must identify in a response matrix what exists in the current solution today and are fully deployable: Credentialing Lifecycle Management Primary Source Verification Secondary Source Verification Privileging Management Focused Professional Practice Evaluation (FPPE) Ongoing Professional Practice Evaluation (OPPE) Continuous Credential Monitoring Provider Profile & Data Management Workflow Automation & Task Management Quality and Compliance Dashboarding Reporting & Analytics Role-Based Access Control Document and Evidence Repository Data Migration & Onboarding Tools Provider Self-Service Portal Describe your ability to support the VA requirements to obtain/maintain an Authority to Operate (ATO) and/or current status of FedRAMP status annotating any risks, challenges, dependencies that will impact the operational status of the solution. Provide a listing and detail about any integrations that you feel would also be necessary to meet requirements with both internal VA systems or external systems, as applicable. A Rough Order of Magnitude for the proposed solution and listing of any potential dependencies or assumptions that VA should consider. Additional requirements noted under Submission In PART 2: CREDENTIALING-AS-A-SERVICE Introduction / Background: The VA is exploring a potential strategy to partner with a credentialing service organization to conduct full-spectrum credentialing operations for healthcare providers across the VA healthcare system. The intent is to streamline credentialing workflows, reduce onboarding timelines, and transition to a fully electronic, modernized process that enhances operational efficiency and supports optimal provider readiness. Credentialing includes obtaining, verifying, and assessing a provider s qualifications such as education, licensure, training, experience, and certifications to determine their eligibility to deliver care within VA facilities. The VA is committed to accelerating credentialing timelines to enhance provider availability and deliver timely care to Veterans. As part of this market research, VA seeks feedback from organizations that combine advanced technology platforms with robust administrative, verification, and compliance capabilities, demonstrating effective implementation and measurable value in real-world settings. Purpose of this Part of the RFI: The VA requires information related to a proposed strategy of working with a credentialing service partner that can provide an efficient, easy-to-use, and fully electronic credentialing solution supported by qualified personnel to perform end to end credentialing activities and coordinate seamlessly with existing VA medical staff processes for eventual privileging. Requirements: The credentialing service organization shall provide a comprehensive, fully electronic credentialing solution supported by qualified personnel and compliant processes to perform end to end credentialing functions on behalf of the VA. The solution must meet the following requirements: Provide a secure, fully electronic credentialing system that supports complete lifecycle credentialing activities. Ensure the software automatically displays a complete, accurate listing of each provider s active credentials and all required primary and secondary source verification entities. Process each provider s credentialing file within five (5) calendar days of notification of a new provider with no red flags, or no later than 120 days prior to the expiration of an existing appointment. Maintain all provider files in full compliance with the following standards: a. 100 percent compliance with Joint Commission standards b. Minimum 99 percent accuracy rate for primary source verification c. Minimum 99 percent accuracy rate for secondary source verification d. 100 percent compliance with VHA Credentialing Policy requirements e. Continuous monitoring of all time limited credentials for all VA healthcare providers, including pending hires, full- or part time employees, without-compensation (WOC) providers, contracted providers, and fee based providers (currently over 250,000 providers, including nearly 30,000 new providers annually) Migrate all existing credentialing data and provider records from current VA systems into the contractor s electronic platform. Provide routine system access to authorized VA personnel at national, regional, and facility levels, in accordance with approved role based access controls. Generate data reports on all provider credentials, with the ability to stratify findings by national, regional, and facility levels. Support concurrent VA end users while maintaining strict, enforceable role based access permissions. Ensure the system accurately identifies and displays both Occupational Category and Occupation for all enrolled providers. Collect, verify, evaluate, and maintain all provider credentials in accordance with all applicable VHA policies, federal laws, and healthcare accreditation standards. Maintain strict compliance with all VHA credentialing requirements, including VHA Directives 1100.20 and 1100.21. Protect and safeguard all Protected Health Information (PHI), Personally Identifiable Information (PII), and VA sensitive data in accordance with federal privacy and security standards. Ensure continuous monitoring and verification of all time limited credentials, with reporting and alerts as specified by VA policies. Required Information from Respondents for Part 2: Respondents must clearly describe how their credentialing service organization meets the requirements listed in this document, including technology capabilities, staffing model, verification processes, compliance standards, and operational capacity. For any unmet requirements, respondents should provide an implementation plan, cost considerations, and timeline to achieve compliance. Additionally, respondents must detail : Demonstrate reductions in credentialing timelines based on previous implementations. Provide evidence of validated processes, transparent verification methods, and quality controls. Confirm current or planned ability to meet VA Information Technology (IT), security, and data protection requirements. Explain how their service model integrates technology with credentialing personnel to improve workflow efficiency. Detail software and operational capacity to support high-volume processing, rapid risk flagging, and continuous monitoring. Confirm their ability to begin service by October 30, 2026. Details pertaining to your proposed commercial licensing structures and offering. Identify if your proposed software was created and developed by your company or the teaming arrangement proposed to meet this requirement. Identify and propose additional capabilities or innovations to further reduce credentialing timelines based on its corporate expertise. Describe potential deployment strategies across the VA healthcare system, including staffing approach, dependencies such as required VA support, and a Rough Order of Magnitude for these strategies. SUBMITTAL INSTRUCTIONS FOR THE RFI This is a request for information (RFI) only. It is requested that all companies interested in participating in these efforts note their interest and provide indication of their respective capabilities to perform the efforts described above. SUBMISSIONS SHOULD BE IN ONE FILE BUT CLEARLY IDENTIFY ITS RESPONSE TO PART 1 AND/OR PART 2 OF THE RFI. It is not mandatory to respond to both parts of the RFI, but each response should clearly identify which part is being addressed. Marketing material will not be accepted as an indication of capability. Only responses related to the Government s requirements as listed above will be considered. All responsible sources may submit a response in accordance with the following: RFI Submissions are limited to 15 Pages for Part 1 and 15 Pages for Part 2. Cumulatively, the RFI Page limitation should not exceed 30 Pages (if responding to both Parts). Mark your response as Proprietary Information if the information is considered business sensitive. NO MARKETING MATERIALS ARE ALLOWED AS PART OF THIS RFI. Provide, at a minimum, the following information in the initial paragraph of the submission: Name of Company Address Point of Contact Phone Number Fax Number Email address Company Business Size and Status NAICS code(s) Socioeconomic data SAM Unique Entity ID Data Universal Numbering System (DUNS) Number Please identify your company s Small Business size status based upon the applicable NAICS code of 541512. For more information refer to http://www.sba.gov/.� � All information required to respond to Parts 1 and/or 2 as described in those sections. Is your company currently providing similar solutions to the VA, another government agency or other non-government customer? Please provide up to three (3) references. Please indicate any and all scheduled contracts, especially Best-in-Class vehicles your company may have (e.g. General Services Administration (GSA) Schedules, Government Wide Acquisition Contracts (GWAC), etc.) with specific regard to this RFI and the requirements hereunder? Please include Contract Number, expiration date, and other pertinent information. Please provide positive or negative feedback regarding the RFI such as recommended changes, noted exceptions, ambiguities, or other areas for VA consideration. CONTRACTOR RESPONSE: All Contractors shall submit via email to, Contract Specialist Matthew Sanchez at Matthew.Sanchez2@va.gov and Contracting Officer Michael Weckesser at Michael.Weckesser@va.gov. The email subject shall reference this RFI posting and title. Any/all questions from industry must be submitted by close of business (COB) on March 25, 2026. The Government intends to have all questions answered and posted by COB on March 30, 2026. Final responses are due no later than 12:00 PM ET, April 3, 2026.
- Web Link
-
SAM.gov Permalink
(https://sam.gov/workspace/contract/opp/45eb0ced958b494884819ab03899b8f1/view)
- Record
- SN07753646-F 20260325/260323230036 (samdaily.us)
- Source
-
SAM.gov Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's SAM Daily Index Page |