Cloud Services

Arch Systems and Knox Systems made Arch’s factory data platform and AI applications available to qualified defense and regulated manufacturers inside Knox’s FedRAMP High (Class D) environment, with single-tenant and customer private-cloud deployment options. The offering creates a platform option for CUI-related factory workloads, but buyers must assess shared security responsibilities and AI-agent authorization; no contract vehicle, pricing, solicitation, or award was disclosed.

The UK Government is offering up to £180 million to establish data-center infrastructure for its next national AI supercomputer. Commercial operators must partner with an eligible UK research organization and demonstrate firm electricity capacity; applications close November 25, 2026, with an outcome expected January 8, 2027.

A Microsoft 365 outage beginning November 12 disrupted email and related services for Massachusetts state employees, with recovery still underway in Microsoft’s November 13 update. The incident creates continuity and service-resilience concerns for agencies and contractors that depend on cloud productivity platforms, but reports identify no procurement action, award, or funding impact.

Patrick Newbold will leave CMS on November 27, with Information Systems Group Director Mark Plaugher serving as acting CIO while the agency searches for a permanent successor. Contractors should plan for leadership continuity and connect technology proposals to measurable outcomes across modernization, cybersecurity, cloud services, and responsible AI—without assuming a change in requirements or a new procurement.

The **U.S. Navy** is soliciting small-business proposals for a potential **$99 million multiple-award IDIQ** supporting Flank Speed cloud and network operations. Proposals are due **December 11, 2026**; bidders should assess the active top secret facility-clearance requirement, specialized staffing needs, and capacity to operate in a three-to-six-award environment.

The U.S. Army awarded Pegasystems a 10-year Enterprise IDIQ with a $419 million ceiling for Pega software, Pega Cloud for Government, and modernization services, with access available to other defense agencies. The vehicle creates a procurement route, but the ceiling is not guaranteed revenue and no task-order schedule or solicitation contact was provided.

The U.S. Space Force awarded Anduril Industries, Booz Allen Hamilton, and Peerless Technologies Phase I agreements totaling roughly $10 million for a three-month SEWOL command-and-control prototype competition. The competition will evaluate working software and could lead to one company’s selection for a $60 million prototype program to build the operational system.

A Security Boulevard analysis recommends designing identity and access management alongside cloud infrastructure, using least privilege, short-lived workload identities, and federated authentication. The guidance offers contractors and procurement teams practical evaluation criteria for cloud modernization, but identifies no solicitation, award, funding, deadline, or new mandatory compliance requirement.

The Navy increased the ceiling on GDIT’s Navy Enterprise Service Desk IDIQ by $56 million, raising its potential value from $98.5 million to $154.5 million. The modification keeps GDIT in place as the sole managed service provider as the Navy consolidates legacy help desks and plans a transition from Impact Level 4 to Impact Level 6.

DataM Intelligence projects the global Zero Trust security market will grow from **US$47.84 billion in 2025** to **US$196.93 billion by 2035**, with identity-first protection, cloud security, and continuous verification driving adoption. The forecast and cited government guidance offer market-research context for agencies and contractors, but identify no specific solicitation, award, or funding.

DISA’s November 6 solicitation seeks a modular cloud-hosted enterprise ICAM prototype for IL5 and IL6, targeting fragmented directories, authentication delays, and access-control and audit gaps. Solution briefs are due November 30; the potential for a larger follow-on without a new competition makes prototype results and transition planning strategically important.

The U.S. Air Force awarded Air Space Intelligence Federal a $26,020,100 sole-source, firm-fixed-price order for licenses, use, and customization of its cloud-hosted Flyways AI platform for the 618th Air Operations Center. The order runs through September 28, 2031, with $5 million in FY2026 Transportation Working Capital Funds obligated at award; it is not an open solicitation.

Thomson Reuters says Westlaw, Practical Law and CLEAR have achieved FedRAMP certification, sponsored by the Department of Veterans Affairs and the Department of Health and Human Services. The status gives agencies additional cloud offerings to evaluate for legal research, investigations and risk management, but the announcements disclose no new solicitation, pricing or acquisition timeline.

Nozomi Networks announced that its cloud-based Vantage for Government OT/IoT security platform achieved FedRAMP Moderate certification, making it available for federal agencies to consider. The announcement signals market availability—not a solicitation or contract award—and provides no pricing or procurement terms.

The FAA selected Deloitte Consulting for the potential $488.2 million ATLAS contract to modernize and sustain more than 200 applications and about 3,000 databases. The scope highlights demand for cloud-native architecture, automation, DevSecOps, and AI; the prime award opportunity is closed, while a separate $278.5 million Navy modernization effort was awarded in May 2026.

Atlassian targets submitting its Rovo AI product for FedRAMP Moderate authorization in Atlassian Government Cloud by June 2027, followed by Impact Level 5 and FedRAMP High submissions in 2028 and 2029. These are submission targets—not authorization or availability dates—and Rovo is currently unavailable to Atlassian Government organizations.

Stagwell says major federal contracts extend into 2027, alongside growth in its marketing-cloud business and adoption of AI platforms. The report does not identify contracting agencies, contract values, award dates, or contract numbers, so it signals incumbent activity rather than a specific bidding opportunity.

U.S. Citizenship and Immigration Services is seeking industry feedback for ECX2, a planned recompete supporting about 15 million calls annually. The RFI addresses platform capabilities, a potential small-business set-aside and contract vehicle, ahead of a solicitation expected March 1, 2027.

The U.S. Air Force awarded CACI International a potential five-year, $108 million contract to modernize and sustain its Defense Enterprise Accounting and Management System (DEAMS). The work combines Agile development, automated testing, cybersecurity and cloud operations, signaling continued demand for secure financial-system modernization capabilities.

FedRAMP confirmed Perplexity Enterprise and API Platform as the first fully compliant 20x Class C (Moderate) service, making it available for eligible federal use. Agencies can access Enterprise Pro for Government through GSA’s OneGov offer for $0.25 per agency through March 31, 2027, but the certification does not automatically authorize every workload or CUI use case.

Federal agencies are being directed toward multi-cloud operations, but execution depends on engineering capacity for workload portability, cross-provider identity and networking, and tested failover. The analysis also points to updated FedRAMP evidence and 2027 deadlines as planning considerations; it identifies no new solicitation or contract value.

The Department of Defense has directed a 12-month review of adopting commercial AI and cloud services on classified networks, alongside potential changes to digital engineering and software delivery organizations. The study will examine security authorizations, acquisition rules, vendor access, and barriers for small and nontraditional contractors, but creates no immediate solicitation or award.

TENICA Global Solutions has acquired Trinity Enterprise Services, adding systems integration, secure cloud, cybersecurity, software development, and mission-critical IT capabilities to its Intelligence Community business. The deal may strengthen TENICA’s position in future classified competitions, but no financial terms or government contract awards were disclosed.

FEMA is conducting market research on commercially available cloud software and support to operate, maintain, and modernize its Supply Chain Management System, which supports disaster logistics. Responses to the SAM.gov RFI are due January 4, 2027; the RFI is not a solicitation, and no contract value or award date has been announced.

The EU and Canada have agreed to facilitate digital trade, but sensitive government cloud procurements remain governed by separate sovereignty and ownership rules. A proposed EU framework and Canada’s Buy Canadian preference could shape provider eligibility, while Canada’s AI-compute funding restriction begins April 1, 2027.

A bill introduced by Rep. Eugene Vindman would require data center operators to report ownership, expected energy and water use, government nondisclosure agreements, and proximity to sensitive sites to the Energy Information Administration. The proposal is not law and creates no current procurement requirement; a separate cloud security bill could shape future NIST and FedRAMP expectations.

Oddball appointed public-sector technology executive Jay Tansing as chief strategy officer to lead strategy, acquisitions, and technology partnerships. The move supports the company’s goal of expanding across federal agencies and pursuing larger programs, while its participation in a December 3 healthcare summit offers an industry-engagement touchpoint for military health technology firms.

GDIT demonstrated its mobile Vion Mission Partner Environment during Olympus Fires 2026, showcasing deployable cloud infrastructure, zero-trust security, AI-enabled collaboration and integration with its DOGMA analytics solution. Potential customers have expressed interest in supporting accreditation and broader deployment, but no solicitation, award, funding or procurement timeline has been announced.

A GSA Office of Inspector General audit found 116 files containing controlled unclassified information were accessible to agency employees and contractors without a legitimate need to know. GSA agreed to seven recommendations and reported corrective steps, highlighting security-control priorities for contractors supporting cloud collaboration, CUI discovery, and data-loss prevention—but no new solicitation or contract has been announced.

At Cloudera’s Evolve 2026 Government Summit, former NSA Director Keith Alexander said military AI and unmanned systems require trusted data, rapid processing, trained human oversight, and realistic testing. His remarks highlight capability areas for future defense acquisition, but identify no active solicitation, contract, funding, or specific agency requirement.

Rep. Rich McCormick introduced legislation directing NIST to update cloud security standards, including guidance on AI-based threat detection, device-linked identity protections, and third-party software monitoring. If enacted, the bill would align FedRAMP with revised standards and create a voluntary certification program, but it is not a procurement opportunity and specifies no funding or implementation timeline.

DISA’s J9 says it has supported more than 60 Department of War deployments and cut average migration schedules by seven months. Planned FY2027 services may create future alignment opportunities for cloud and modernization contractors, but the report identifies no solicitation, award, contract value, or procurement contact.

CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0 on October 27, 2026, updating free tools that assess Microsoft 365 and Google Workspace settings against security baselines. Agencies and their contractors can use findings to identify gaps and document remediation or accepted risk, but the releases create no new solicitation, award, or funding opportunity.

The U.S. Department of Homeland Security expects to release a solicitation on November 16, 2026, for its more-than-$100-million Enterprise Platform Management Support recompete. The non-small-business-set-aside, multiple-award BPA call covers enterprise platform development, operations, maintenance, cloud, and digital services in Springfield, Virginia, through March 18, 2032.

GSA’s expanded OneGov agreement gives eligible federal, state, local, tribal and territorial buyers a 40% discount on token-based Claude use, with no minimum purchase and direct ordering through GSA’s Multiple Award Schedule. Agencies should compare the offer with the $1-per-user deal expiring October 31 and assess variable usage costs, ordering channels and deployment-specific security authorization before adopting.

Gartner will host its IT Infrastructure, Operations & Cloud Strategies Conference in Las Vegas on December 8–10, 2026, with more than 140 providers in an exhibit showcase. The commercial event is not a government solicitation or contract opportunity, but federal procurement professionals and technology vendors can use it to discuss cloud sourcing, vendor management, and IT acquisition practices.

Oracle is investing $1 billion over four years to expand its PartnerNetwork with AI development, cloud migration, and go-to-market resources. The commercial program does not guarantee government work for partners, but aligns with Oracle's federal momentum across a potential $6.99 billion Navy IDIQ and a CMS cloud migration selection.

Microsoft reported a Chinese-linked compromise of SkyKick, the cloud backup service owned by ConnectWise, distinct from the ScreenConnect remote-support product. The incident highlights downstream exposure risks for procurement teams evaluating managed-service and cloud providers with access to organizational systems.

GAO found 22 of 24 CFO Act agencies rely primarily on historical procurement and contract data for cloud-purchasing decisions, despite imprecision from single product or service codes. Agencies also cited cost-control struggles, conflicting guidance, and outdated acquisition rules—signaling demand for contractor support in cloud-spend visibility and acquisition modernization.

NOAA is shifting high-performance computing, weather-data storage and forecasting applications from on-premises systems to cloud platforms, with Google Cloud the primary provider for WCOSS modernization. The schedule points to near-term needs in cloud engineering, migration and operational support, but no solicitation, contract value or open bid opportunity has been identified.

DigiCert for Government has entered the FedRAMP Marketplace at initial implementation status, listing three DigiCert ONE services as the company pursues FedRAMP 20x Class C certification. The listing is not an authorization or contract award; acquisition teams should verify current status and service scope before relying on the offerings for federal requirements.

The Defense Logistics Agency awarded incumbent Leidos a five-year, $95 million contract to support and modernize its Enterprise Logistics Management System through August 2031. The continuation award signals sustained investment in AI-enabled logistics, cloud technology, and software modernization, but is not an open solicitation or current bid opportunity.

A Defense News archive gathers commentary on historical procurement decisions, including the DoD’s JEDI cloud award to Microsoft and Amazon’s protest, Navy submarine shipbuilding, and the Army’s Optionally Manned Fighting Vehicle program. It is an editorial resource, not a current solicitation or award notice, and provides no active deadlines, contract values, or procurement contacts.

Federal inspectors general are emphasizing faster, contextualized data analysis to strengthen fraud oversight. The Interior OIG’s FY2027 plan targets payment integrity and agency purchases, signaling that contractors should expect attention to auditable purchasing records and timely access to reliable data; no active solicitation or contract value is identified.

MegazoneCloud can now resell AWS GovCloud (US) and offer related cloud design, deployment, migration, and operations services to public-sector, defense, and regulated-industry customers. The status adds a potential procurement channel, but is not a contract award or evidence of funded agency demand.

The proposed EU Cloud and AI Development Act would create four cloud-sovereignty assurance levels for public-sector procurement, with potential requirements for data location, foreign access, and service continuity. Contractors serving European and U.S. markets should assess the proposal separately from U.S. FOCI and FedRAMP obligations; the analysis also notes proposed FOCI-related provisions for certain unclassified Department of War work above $5 million.

A CyberScoop policy commentary argues encryption does not protect sensitive data while it is being processed or across complex cloud, vendor, analytics, and AI workflows. It urges NIST and NSA to assess vaultless, keyless pseudonymization as a complementary safeguard; this is a recommendation, not a new federal requirement or procurement action.

SAP reports that defense-related buyers are examining the origins, data pathways, and governance of AI embedded in enterprise software more closely than smaller businesses. The trend may create demand for sovereign AI and cloud options, but no specific agency requirement, solicitation, award, or contract is identified.

DHS issued a sole-source justification for a five-year, firm-fixed-price enterprise software BPA with Carahsoft, citing its exclusive GSA schedule distribution rights for covered products. The $2.66 billion ceiling is not guaranteed demand: DHS components will fund purchases through individual orders, making product coverage and downstream ordering activity key areas to monitor.

FedHIVE and Carahsoft introduced a Private Modern Cloud combining dedicated compute and storage hardware with FedHIVE’s FedRAMP High and DoD SRG IL4/IL5 authorization boundary. The offering is accessible through Carahsoft’s GSA Schedule and NASPO ValuePoint agreement, but agencies should verify the authorization scope, configurations, and pricing for their intended use.