Sources Sought: ONC Certified Health IT Product List (CHPL) Development, Maintenance, and Improvement

Sources Sought Notice

This notice is issued for planning and market research purposes to determine the availability and capability of qualified small businesses to provide services for the continued maintenance, development, and improvement of the ONC Certified Health IT Product List (CHPL). This is NOT a solicitation for proposals.

The government is seeking services and personnel to support the ONC Health IT Certification Program, which aims to facilitate the secure, electronic movement and use of health information according to nationally recognized standards. The program supports health IT adoption, interoperability, and care quality improvement initiatives.

Not applicable, as this is a market research notice, not a solicitation.

• Response Due Date: June 11, 2026, 5:00 PM EST
• Submission Format: Microsoft Word or PDF document, 8.5" x 11" pages, 1" margins, Times New Roman, 12pt font, single-spaced.
• Page Limit: Maximum 5 pages (excluding cover page).
• Submission Email: Joseph.Kozar@hhs.gov
• Note: Respondents are not required to recertify their size status if they cannot do so as a small business.

This notice is specifically seeking responses from small businesses, including those under categories such as 8(a), SDVOSB, HUBZone, SDB, VOSB, and WOSB.

Vendors must submit a capability statement demonstrating experience with similar scope. The response should include:

• Cover Page with specific business information (Sources Sought title, DUNS, Company Name/Address, POC, validation of small business status under NAICS 541512).
• Capability statement detailing ability to perform mandatory and optional tasks.
• No marketing literature.
• No proprietary, classified, confidential, or sensitive information.

If teaming or subcontracting is planned, information for all entities on the proposed team or subcontractors must be included, along with clear indication of the teaming arrangement.

• No reimbursement will be made for costs associated with this notice.
• Respondents will not be notified of the results of the capability assessment.
• The government reserves the right to use submitted information in any resultant solicitation.
• The government is under no obligation to acknowledge receipt or provide feedback.

Statement of Work (SOW) / Performance Work Statement (PWS)

This Statement of Work (SOW) outlines the requirements for the continued maintenance, development, and improvement of the ONC Certified Health IT Product List (CHPL). The goal is to support the Office of the National Coordinator for Health Information Technology's (ONC) overall program goals, as established by the Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009.

The contractor shall perform the following key tasks:

• Maintain and update the CHPL infrastructure and database.

• Develop and implement improvements to the API for stakeholder connectivity.

• Maintain and modify CHPL widgets.

• Refine and improve certified product upload and display on the CHPL.

• Provide on-demand access and reporting capabilities for data analytics.

• Implement updates and modifications required by current or upcoming rulemaking.

• Maintain, develop, and improve the CMS widget.

• Provide project management services to ensure timely delivery of requirements.

• Review and adhere to all applicable health IT certification, certification body, and testing lab reporting requirements.

• The period of performance includes a base year (July 15, 2026 - July 14, 2027) with two 12-month option periods. Optional tasks may coincide with the overall period of performance.

• The place of performance will be the Contractor's site.

• Contract Type: Firm-Fixed Price Contract.

• Severable Services: Funds are obligated per contract line item (CLIN); unused funds do not rollover.

• Deliverables: Include Task Order Management Plan, Project Work Plan, Technical Status Reports, Briefings, Data Model Updates, API Lists, Service-Level Agreements, User Interface Models, Product Detail Pages, Administrator Pages, Data Integrity Plans, and CMS Widget related deliverables.

• Security & Compliance: Strict adherence to HHS/ONC security and privacy policies, including but not limited to data protection, encryption, incident response, and digital accessibility standards (Section 508).

• Reporting: Weekly and monthly status reports, data reports, and briefings are required.

• Meetings: Participation in post-award, collaboration, and weekly update meetings is mandatory.