Opportunity

SAM #NOI-26-008015

Cloverleaf Security Server Maintenance and Support for NIH Clinical Center

Buyer

NIH Clinical Center

Posted

September 22, 2026

Respond By

September 24, 2026

Identifier

NOI-26-008015

NAICS

513210, 541512, 541513

The National Institutes of Health Clinical Center (NIH-CC), part of the Department of Health and Human Services, is seeking maintenance and support services for its Cloverleaf Security Server system. - Government Buyer: - National Institutes of Health (NIH) - Clinical Center - Department of Clinical Research Informatics - OEM Highlight: - Infor LLC is the sole manufacturer and provider of the Cloverleaf Security Server and its HL7 interface engine - Products/Services Requested: - Maintenance and technical support for the Cloverleaf Security Server - Includes no-cost application updates - 24x7 telephone technical support (remote only) - Email notifications of updates - Access to a web knowledge base - Escalation process for critical issues - Unique Requirements: - Only Infor LLC is authorized to provide maintenance due to proprietary restrictions - No third-party maintenance or release of source code permitted - The Secure Server application provides encryption and is mission-critical for secure communication between hospital information systems - No specific part numbers or quantities provided; all requirements detailed in the Statement of Work

Description

Acquisition Description:

This is a Notice of Intent, not a request for proposal.  The National Institute of Health, Clinical Center (NIH-CC) intends to negotiate on an other than full and open competition basis with Infor. LLC.

The National Institute of Health Clinical Center’s Department of Clinical Research Informatics (NIH-CC DCRI or Program) is responsible for the operation and management IT infrastructure that supports patient care and research. The Clinical Center utilizes the Cloverleaf Interface application as its HL7 interface engine. The HL7 interface system is central link between the Clinical Research Information System (CRIS) which is the core Hospital Information System and the Ancillary Systems such as the Laboratory Information System (LIS), The Radiology Information System (RIS) as well as several other ancillary systems. Secure server is an application that provides encryption for the HL7 system. This function is vital to CC Security and protection of PII. This system must work flawlessly 24x7x365 and when it stops working it is critical that we must have the ability to contact Infor for maintenance and technical support.

Justification:

The Government requires support tied to the installed Cloverleaf Security Server product. A different software publisher or a substitute integration-engine product would not constitute maintenance of the existing Cloverleaf licenses/environment and would represent a replacement or migration effort outside the scope of this maintenance renewal.

The Secure Server Systems is proprietary to Infor who developed it. Infor currently does not permit 3rd party maintenance and will not release their source code to other entities. The Secure Server Systems interface engine is responsible for receiving and sending clinical orders and results between the hospital information system and the ancillary services systems. This system is critical to the hospitals primary function of providing safe patient care. It is absolutely imperative that there be no interruption in the ongoing operation/functioning of the existing system.  It is critical that the system continues to be maintained by Infor who is the only source capable of providing the necessary maintenance-including making revisions to the source code as circumstances may dictate. Because the system helps support patient critical patient care activities, it is deemed a mission critical system for the Clinical Center.

Requirement:

See Statement of Work documents.

Place of Performance or Delivery:

The Period of Performance is:

09/26/2026 – 09/25/2026

Place of Performance: NIH Clinical Center in Bethesda, MD

The statutory authority for this sole source requirement is 41 U.S.C. 1901 (a) (1) as implemented by FAR 13.106-1 only one responsible source and no other supply of service will satisfy agency requirements. THIS IS NOT A REQUEST FOR PROPOSAL.  All responsible sources that could provide the required may submit a capability statement that will be considered by email (subject line to reference NOI-26-008015) by 5:00 PM eastern standard time on 09/24/2026 to: lu-chang.lu@nih.gov

All responses received by the closing date of this synopsis will be considered by the Government.  A determination not to compete this requirement, based upon responses to this notice, is solely within the discretion of the Government.

View original listing