VA and DoD Join TEFCA, Expanding Federal Health Data Exchange
The Department of Veterans Affairs and Department of Defense joined the HHS-led TEFCA network on November 5, expanding secure health-record exchange across military, veterans’ and civilian care settings. The move highlights sustained federal demand for interoperable health IT, secure data routing and FHIR API capabilities, but the announcement identifies no new solicitation or contract value.
Key Signals
- VA and DoD joining TEFCA reinforces demand for secure, interoperable federal health data exchange.
- Nearly 25,000 organizations and more than 2 billion records indicate TEFCA’s substantial operating scale.
- Health IT vendors should assess secure routing, interoperability and FHIR API alignment; no new solicitation is identified.
- DIA SIA 4 RFI responses are due November 24, 2026; active Top Secret facility clearance is stated.
- CISA post-quantum guidance is a security-market signal, with no deadline or new mandate specified.
"Many of America’s veterans and warfighters receive care in multiple locations, making it critical for their providers to have access to secure, timely health information. TEFCA will help ensure their providers can get up-to-date information no matter where they receive care."
The Department of Health and Human Services (HHS) announced on November 5, 2026, that the Department of Veterans Affairs (VA) and Department of Defense (DoD) had joined the Trusted Exchange Framework and Common Agreement (TEFCA). The nationwide network is designed to support secure electronic health-information exchange among healthcare providers, patients, public health organizations and federal agencies. The addition extends connectivity across military treatment facilities, VA medical centers and participating civilian hospitals, where veterans and service members may receive care at different points in time. The announcement describes a federal health-information infrastructure development, not a new procurement: it provides no solicitation, award amount or contract value tied to the agencies’ participation.
HHS reported that nearly **25,000 organizations** are live on TEFCA, representing nearly **110,000 unique connections** to clinicians, hospitals, clinics, long-term care facilities, public health authorities and other participants. More than **2 billion health records** have been exchanged through the network since its launch in **December 2023**. VA and DoD join other federal participants identified in the reporting, including the **Indian Health Service**, **Consumer Product Safety Commission** and **Social Security Administration**. These scale figures underscore why federal health data exchange is relevant to contractors: interoperability must work across a large and varied ecosystem, rather than only between systems operated by a single department.
For GovCon firms, the immediate implication is a continuing mission need for interoperable health IT, secure data routing and reliable access to current records across connected care settings. **Thomas Keane**, the national coordinator for health IT, said: “Many of America’s veterans and warfighters receive care in multiple locations, making it critical for their providers to have access to secure, timely health information. TEFCA will help ensure their providers can get up-to-date information no matter where they receive care.” Dr. **Leslie Sofocleous**, director of the **Federal Electronic Health Record Modernization (FEHRM) office**, similarly said the agencies’ participation is intended to make beneficiaries’ information available wherever they seek care, including military treatment facilities, VA medical centers and participating local hospitals. Contractors can use these stated goals to assess whether their products support secure exchange, interoperability and relevant API capabilities; the announcement does not establish a particular technical requirement or guarantee a procurement.
TEFCA participation is therefore best treated as a demand signal for market research and solution alignment, not as evidence of an open bid. Health IT providers should review how their platforms connect to exchange frameworks, protect information in transit and support care coordination across organizational boundaries. The source material also points to a **Healthcare Summit scheduled for December 3, 2026**, as an opportunity to track federal priorities. Separately, it flags the **Defense Intelligence Agency’s (DIA)** planned SIA 4 intelligence-analysis vehicle and **CISA** post-quantum cryptography guidance as other procurement and security developments. Those are distinct signals: the SIA 4 RFI has a stated response date and clearance condition, while the supplied CISA information identifies no compliance deadline or new mandatory requirement.
- VA and DoD joined TEFCA following HHS’s November 5, 2026 announcement, extending federal participation in nationwide health-information exchange.
- TEFCA has nearly 25,000 participating organizations and nearly 110,000 unique connections, according to HHS reporting summarized by MeriTalk.
- The network has exchanged more than 2 billion health records since its launch in December 2023.
- The stated mission benefit is secure, timely access to current records as veterans and service members move among military, VA and civilian care settings.
- Health IT contractors should assess interoperability, secure data-routing and FHIR API capabilities against federal health priorities; the announcement does not identify a specific solicitation or contract value.
- A Healthcare Summit addressing relevant priorities is scheduled for December 3, 2026.
- DIA’s planned SIA 4 intelligence-analysis vehicle has an approximately $17 billion ceiling; RFI responses are due November 24, 2026, and an active Top Secret facility clearance is stated as a requirement for interested vendors.
- SIA 4 is planned with a five-year base period and a five-year option; this is separate from the TEFCA announcement.
- CISA’s post-quantum cryptography guidance is an additional security signal, but the provided information specifies neither a compliance deadline nor a new mandatory requirement.
- The Sequoia Project is identified in the supplied vendor information; the source material does not describe a new award or contract for the organization.
Agencies
- Department of Health and Human Services
- Department of Veterans Affairs
- Department of Defense
- Office of the National Coordinator for Health Information Technology
- Defense Intelligence Agency
- Indian Health Service
- Consumer Product Safety Commission
- Social Security Administration
- Federal Electronic Health Record Modernization office
- Cybersecurity and Infrastructure Security Agency
Vendors
- The Sequoia Project
Locations
- United States
Sources
- DoD and VA join forces to increase electronic health information security - Federal News NetworkFederal News Network · Nov 06
- VA, Pentagon Join Nationwide TEFCA Health Data Exchange – MeriTalkMeriTalk · Nov 06
- VA, DOW Join HHS-Led TEFCA Health Information NetworkExecutiveGov · Nov 06