Opportunity

SAM #RFP-ACT-SACT-26-54

NATO RFP: Secure Cloud Service Prototypes for Secret-Level Data (Physical Air-Gap & Hybrid Cloud)

Buyer

Bureau of Industry and Security

Posted

April 29, 2026

Respond By

May 13, 2026

Identifier

RFP-ACT-SACT-26-54

NAICS

541519, 541512, 541690

This opportunity is a NATO procurement for a Secure Cloud Service (SCS) to support NATO Secret-level data and pre-accreditation validation: - NATO Allied Command Transformation (ACT) seeks vendors to deliver two SCS prototypes: - Physical Air-Gap Cloud - Hybrid Secure Cloud - Prototypes must support zero-trust architecture, secure direct connections, cryptographic key management, migration sandboxes, and comprehensive security audit/accreditation support - The solution will be deployed across at least four sites in three NATO countries - Fixed-price contract estimated at EUR 20 million (~$21.5M USD) over a base year plus one option year - U.S. prime contractors must: - Have a professionally active U.S. facility - Be approved for NATO Competitive Procurement (NCP) - Hold a Facility Security Clearance at the SECRET level or higher - Obtain a Declaration of Eligibility (DOE) from the U.S. Government - All team members (including partners/subcontractors) must have NATO or National Facility Security Clearance at the SECRET level at proposal submission - Period of performance is expected from July 2026 to July 2027, with an option to extend to July 2028 - No specific OEMs or products are named; technical requirements are detailed in an attached document - Place of performance includes distributed cloud sites in three NATO countries and HQ SACT in Norfolk, VA

Description

Headquarters Supreme Allied Commander Transformation (HQ SACT) intends to issue a Request for Proposal (RFP) for a Secure Cloud Service (SCS). SCS will serve as a pre-accreditation validation environment, enabling iterative security testing, architecture refinement, and the generation of auditable evidence aligned with NATO Security Policy and NIST SP 800-53 Rev.5, while delivering a first level of operational cloud capability to priority Communities of Interest (COIs). Two prototypes will be delivered to address two different technologies. 

This notification does NOT constitute a commitment to award a contract. This procurement opportunity is still pending validation of funding and approvals.

U.S. prime contractors must 1) maintain a professionally active facility within the United States, 2) be approved for participation in NATO Competitive Procurement (NCP), 3) hold a Facility Security Clearance at the level of SECRET or higher, and 4) be issued a Declaration of Eligibility (DOE) by the U.S. Government.

Please note that vendors (partners and subcontractors) must hold a NATO or National Facility Security Clearance. The proposed team must hold NATO or National SECRET clearance at the time of proposal submission.

The reference for the RFP is RFP-ACT-SACT-26-54 and all correspondence regarding the RFP should include this reference.  

SUMMARY OF REQUIREMENT

Please see attached.

BECOMING ELIGIBLE TO BID    

NCP requires that the U.S. Government issue a DOE on behalf of potential U.S. prime contractors interested in this contract. Before the U.S. Government can do so, however, the U.S. Government must approve the U.S. firm for participation in NCP.  U.S. firms are approved for NCP on a facility-by-facility basis. 

The U.S. NCP application is a one-time application.  The application requires supporting documentation in the form of 1) a company resume indicating contracts completed as a prime contractor and 2) an annual report or set of financial documents indicating compilation, review, or audit by an independent CPA.

U.S. firms can download a copy of the U.S. NCP application from the following website:

https://www.bis.gov/about-bis/bis-leadership-and-offices/SIES/business-opportunities-nato  The Department of Commerce (DOC) is the U.S. Government agency that approves NCP applications. Please submit to the email address provided your application and supporting documentation (as attachments). If your firm is interested in a specific NCP project at this time, please also include the following in the text of your email:

- the title and/or solicitation number of the contract - the name/phone/email of the company point of contact for the bid documents

After approval of your one-time NCP application, DOC will then know to follow up by issuing a DOE for the contract.  DOC will transmit the DOE to the NATO contracting agency.  

IMPORTANT DATES

U.S. firms should request a DOE (and, for U.S. firms new to NCP, submit the one-time NCP application): 13 May 2026

HQ SACT issues RFP (planned): 18 May 2026

Bid closing (planned): 22 June 2026

Contract award (anticipated): 15 July 2026

View original listing