Skip to main content
Truvisory
Federal

VA SDVOSB Sole-Source for AI: The $5M Veterans First Fast Lane

Tony Adams 8 min read

A VA contracting officer (CO) can put an AI project on contract with a single service-disabled veteran-owned small business (SDVOSB) — up to $5 million, options included, with no competition — and, unlike almost every other sole-source authority in government, without ever finding that only one company can do the work. That last point is what makes this the fastest, most direct prime path for a small SDVOSB AI shop to win VA work. The authority lives in statute (38 U.S.C. § 8127), the four conditions are short and named (VAAR 819.7008), and a well-prepared award can move from requirement to signature in six to twelve weeks instead of the nine to eighteen months a full competition takes.

This is a spoke under the VA AI modernization pillar, written for a VA contracting officer or program manager who needs a bounded AI build delivered fast, and for any SDVOSB learning how to be the vendor a CO names.

What is the VA SDVOSB sole-source authority?

It’s the VA’s power to skip the competition and award directly to one verified SDVOSB. The authority sits in 38 U.S.C. § 8127 — subsection (b) for awards below the simplified acquisition threshold (now $350,000), and subsection (c) for awards above the threshold up to a statutory ceiling of $5 million, including options. It’s implemented at VAAR 819.7008, which sets four conditions a contracting officer must satisfy: the anticipated award price including options won’t exceed $5M; the requirement is synopsized and the justification required by FAR 6.302-5(c)(2)(ii) is posted; the SDVOSB has been determined responsible; and, in the CO’s estimation, the award can be made at a fair and reasonable price that offers best value.

$5M
Statutory ceiling (incl. options) for a VA SDVOSB sole-source under 38 U.S.C. § 8127(c) — no 'only one source' finding required, unlike a FAR 6.302-1 award — VAAR 819.7008 / 38 U.S.C. § 8127

One rule worth flagging because it trips people up: a requirement that’s really worth more than $5M can’t be split into smaller pieces to fit under the ceiling. VAAR 819.7008(e) prohibits it outright. But within the ceiling, the authority is broad and the contracting officer’s discretion is wide. The deeper statutory backdrop — the Veterans First priority and the Kingdomware ruling that made § 8127 mandatory — is covered in the Veterans First guide.

How is this different from the governmentwide SDVOSB sole-source?

The key difference isn’t the dollar ceiling — it’s what the contracting officer has to prove.

At a non-VA agency, FAR 19.1406 lets a CO sole-source to an SDVOSB only after finding there’s no reasonable expectation that two or more SDVOSBs would bid. The VA’s authority carries no such finding requirement, and VAAR 819.7008(c) states plainly that a determination that only one SDVOSB can meet the requirement is not required. That’s the structural advantage: a VA CO can choose a known, capable SDVOSB and document suitability, not uniqueness.

// VA vs governmentwide SDVOSB sole-source — ceilings and findings
Dimension VA (VAAR 819.7008) Governmentwide (FAR 19.1406)
Ceiling (services)$5M (incl. options)$5.5M (after Oct 1, 2025)
Ceiling (manufacturing)$5M$8.5M (after Oct 1, 2025)
“Only one source” finding?NoNo, but “no reasonable expectation of two offers” finding required
Source of authorityStatute (38 U.S.C. § 8127)Regulation (FAR / Small Business Act)
Inflation-adjusted?No — statutory capYes — CPI-adjusted every 5 years

The October 1, 2025 inflation adjustment (FAC 2025-06) raised the FAR-side ceilings to $5.5M services and $8.5M manufacturing, while the VA’s stayed at $5M because it’s a statutory cap in Title 38, not a regulatory threshold subject to CPI adjustment. So for the first time the governmentwide ceiling is higher — but the VA path remains the easier one to use, because there’s no two-offer finding to make. The September 2025 FAR Part 19 rewrite left the SDVOSB sole-source structure substantively intact and didn’t touch the VA’s statutory authority at all. When the work is bigger than $5M or better suited to a vehicle, the T4NG2 and SPRUCE IDIQs are the alternative paths.

Why does the VA use this so much?

Because it’s fast, it’s discretionary, and it advances a mandate the VA is measured against. The numbers tell the story: by one analysis of federal spending data, the VA awarded roughly 1,400 SDVOSB sole-source contracts and orders in FY2020–2021 — about seven times as many as the DoD awarded under the FAR in the same window. That’s not an accident of volume; it’s the structural priority working as designed. In FY2024 the VA put $10.2 billion, about 23% of its prime contract dollars, to SDVOSBs and earned an “A” on the SBA scorecard, far above its 5% statutory floor. Sole-source is one of the most-used tools inside that total, precisely because it doesn’t require a competition to justify. The mandatory-priority backdrop comes from Kingdomware, covered in the Veterans First guide.

What kind of AI work has the VA actually sole-sourced to SDVOSBs?

Recent activity shows the lane is open for exactly the kind of work a modern AI shop does.

// Recent VA SDVOSB sole-source AI awards — vendor, scope, approximate value
Vendor VA office Scope Approx. value
Olympus Alpha LLCDigital Health Office / NAIITrustworthy AI program management support~$4.98M
SGL360, LLCOCTOAI clinical-documentation summarization MVP~$3.28M
PingWind, Inc.BenefitsBenefits intake optimization~$4.36M
Oddball, Inc.VA.govIterate, Innovate, and Run supportsole-source intent

(Compiled from SAM.gov Notice-of-Intent postings and award records.)

One distinction matters and the article makes it deliberately: the ambient-scribe pilots awarded to Abridge and Knowtex are not § 8127 sole-sources. They were awarded as challenge-winner sole-sources under the America COMPETES Act — a separate authority covered in the AI Tech Sprint guide. A vendor pursuing the Veterans First path should know the difference, because the justification language and the eligibility basis are entirely different.

What does a VA contracting officer actually do? The playbook

Here’s the sequence, because a CO reading this wants the steps and an SDVOSB wants to know what makes their job easy.

  1. Define the requirement and a draft SOW

    Scope to land under $5M including all options. A bounded fixed-scope 90-day build is the ideal sole-source candidate.

  2. Select the NAICS

    For AI/automation work the NAICS is typically 541512 (computer systems design), 541511 (custom programming), or 541519 (other computer services), sometimes with a 541611 management-consulting wrap.

  3. Run market research

    Search SBA VetCert, SAM.gov, and VA business-intelligence tools to identify a capable, verified SDVOSB.

  4. Document the award

    VA Form 2268, an acquisition plan, the limited justification under FAR 6.302-5(c)(2)(ii) citing 41 U.S.C. 3304(a)(5) “as authorized by 38 U.S.C. 8127(c),” a responsibility determination, and a price-reasonableness memo.

  5. Synopsize on SAM.gov

    Post the requirement as a Notice of Intent.

  6. Verify SDVOSB status

    Confirm SBA VetCert and SAM.gov status at both offer and award.

  7. Award and post the justification

    Done — a single-CO certification under $900K, six to twelve weeks elapsed.

On approvals: after the October 2025 changes, a justification under $900K is a single CO certification, with higher tiers at $20M, $90M, and $150M. Most SDVOSB AI builds sit under that first line, which means the justification is a one-signature decision — a big part of why the timeline is six to twelve weeks rather than the nine to eighteen months a full-and-open competition typically runs.

How does an SDVOSB get chosen for one?

By making the contracting officer’s job almost effortless. The gate is non-negotiable: SBA VetCert certification, with an active SAM.gov registration and the right NAICS codes listed. Self-certification ended — for sole-source and set-asides as of January 2024, and for goaling at the end of 2024 — so only VetCert-listed firms are eligible. Beyond the gate, the vendors who get named tend to do four things: keep a capability statement that maps directly to a draft SOW; build relationships with VA program offices and small-business specialists; respond fast to sources-sought notices; and, where appropriate, submit a FAR Subpart 15.6 unsolicited proposal — a properly marked, genuinely innovative proposal is one of the cleanest inbound prompts for a sole-source negotiation.

The shape of the offer matters as much as the credentials. A bounded, fixed-scope, fixed-price 90-day build priced in the $300K–$3M range is the ideal sole-source candidate: it sits well under the ceiling, it’s easy to defend as fair and reasonable against an independent cost estimate, and it lets the CO write a clean responsibility memo. For firms that can’t yet prime, the same VetCert status makes them a “similarly situated” subcontractor — the mechanics are in the teaming guide — but sole-source is the most direct prime path for a small SDVOSB.

What about compliance — will a small SDVOSB clear the VA’s security bar?

Yes, and the honest framing is part of the credibility. VA AI work runs under the VA ATO process and VA Handbook 6500, typically hosted in the VA Enterprise Cloud (VAEC) on AWS GovCloud or Azure Government at FedRAMP High, with Section 508 accessibility, a HIPAA business-associate agreement where clinical data is involved, NIST 800-53 controls inherited from the cloud platform, and an OMB M-25-21 AI-inventory entry. None of this is CMMC. CMMC is a Department of Defense framework, and it does not apply to VA contracts. The correct, complete posture for a VA AI vendor is FedRAMP-aware — deploying inside FedRAMP-authorized boundaries and inheriting their controls — not “FedRAMP-certified,” and not CMMC-anything. Stating it accurately is what keeps a CO’s confidence; the full framing is in FedRAMP-aware, not CMMC-certified.

Frequently asked

Does the VA really not need to find "only one source"?
Correct. VAAR 819.7008(c) states a determination that only one SDVOSB can meet the requirement is not required — the differentiator from a FAR 6.302-1 sole-source.
Does the $5M include options?
Yes. The ceiling is the "anticipated award price of the contract (including options)."
Can a CO split a $7M requirement into two $3.5M sole-sources?
No. VAAR 819.7008(e) prohibits splitting a requirement to fit under the ceiling.
Did the October 2025 FAR overhaul change this?
No. It raised the governmentwide FAR 19.1406 ceilings; the VA's statutory $5M cap and the underlying authority were untouched.
Is sole-source mandatory for the CO?
No — it's a discretionary tool. The Rule of Two set-aside is the mandatory mechanism; sole-source is one option within the CO's discretion below $5M.
Is self-certification still allowed?
No. Only SBA VetCert-certified SDVOSBs are eligible for sole-source awards.
Where does CMMC fit at the VA?
It doesn't. CMMC is a DoD program; VA security runs on FedRAMP, the VA ATO, and Handbook 6500.

Working with Truvisory

Truvisory is an SBA-verified SDVOSB founded by a combat veteran, building working AI and automation on a Cloudflare-native, FedRAMP-aware architecture — fixed-scope, fixed-price, in 90 days, sized to fit cleanly under the $5M ceiling.

If you’re a VA contracting officer or program manager, we can hand you a justification-ready package — SOW, independent cost estimate, price-reasonableness memo, responsibility package, and a FedRAMP inheritance diagram — so your VAAR 819.7008 justification largely writes itself. Start with a scoping call. For the broader picture see the VA AI modernization pillar and the Veterans First guide; if you’re an SDVOSB looking to team rather than prime, see the teaming guide.

§ Cluster

More in this series