Enterprise Privacy Policy Engine (EPPE) Recompete

The Enterprise Privacy Policy Engine (EPPE) is the system that tracks all disclosures of CMS data. The Data and Information Dissemination Group (DIDG) in the CMS Office of Enterprise Data and Analytics (OEDA) is responsible for managing the EPPE system. DIDG requires a Contractor to provide research, development, communications, and ongoing support of EPPE. The Contractor will be responsible for all aspects of EPPE development and ongoing maintenance of the system. This includes the development of new features, DevOps and incident support, conducting user research and maintaining user documentation, operating a helpdesk, infrastructure support, transitioning to a new cloud environment, and any other components that CMS may deem necessary in support of these efforts.

Estimated value

>= $10M and < $20M

Est. solicitation date

Aug 3, 2026

Anticipated award

Dec 1, 2026

Contract type

Firm Fixed Price

Period of performance

Jan 7, 2027 – —

• NAICS541512
• PSCR617