NCIA – Commercial Cloud Service Provider Marketplace (PBN), NPO-CO-424312-CCSP

Summary

The NATO Communications and Information Agency (NCIA) is issuing a pre-solicitation notice (NPO) for a competitive procurement aimed at establishing a Commercial Cloud Service Provider (CCSP) Marketplace. The marketplace will be used to procure commercially available cloud services (IaaS, PaaS and related services) for NATO's current and future enterprise workloads. The immediate requirement is to support the Protected Business Network (PBN) environment. The procurement model is IDIQ (Indefinite Delivery Indefinite Quantity), and work will be ordered through task/delivery orders. An indicative consumption scenario (Enclosure B) is included. It is based on consumption in the current Azure environment and covers, among other things, storage, compute virtual machines, network egress, SQL/NoSQL/PostgreSQL databases, load balancers, Kubernetes clusters, firewalls, FIPS 140-2 Level 3 HSMs (BYOK/HYOK), enterprise support (24/7, Sev-1, TAM), and consulting and transition services. The indicative total is approx. 29,270 resource units (DTAP). Quantities are preliminary and non-binding. No value has been stated. Eligibility is limited to suppliers from participating NATO nations. The security classification is NATO UNCLASSIFIED (NU). A Declaration of Eligibility (DoE) signed by the national authority is required and must be submitted to the NCIA point of contact no later than 2 September 2026. The language is English. RFP release is planned for 30 September 2026, bid closing for 5 November 2026 and contract award for 19 January 2027. Suppliers are requested to submit a Capability Statement & Feedback Response of no more than 5 pages. It is for market research purposes and will not be evaluated for contract award. A Pre-Bid Conference will be held approx. 10 days after the RFP release. Note: Enclosure C lists the applicable contract terms (GTC/STC). The full text of these terms is available on the NCIA website but has not been provided in this material, and it contains additional terms that are not reflected in this summary. Detailed technical, security and evaluation requirements will only be provided in the actual RFP documentation.

Attachments

• file_download.ashx