AI Governance Institute
← News
Corporate Policy2026-09-26

VA's October AI Contract Sets Governance as a Federal Procurement Criterion

What happened

The Veterans Affairs previews timeline for enterprise AI services competition describes a two-track AI acquisition strategy at the U.S. Department of Veterans Affairs. The larger track is a three-year Enterprise Artificial Intelligence Support Services contract targeting 540,000 users, with a final solicitation expected in October 2026. The contract scope spans the full AI development and deployment lifecycle, including security, accessibility, and post-deployment iteration. The VA explicitly names transparent AI governance as a procurement objective, making governance documentation a competitive requirement rather than a post-award expectation. A separate first-party acquisition for conversational assistance and agentic task execution tools is expected to be awarded first, creating a layered AI deployment involving both autonomous and human-assisted capabilities.

Why it matters

  • ·Governance is now a scored criterion, not a checkbox. Vendors competing for the October 2026 solicitation must document AI governance practices at the proposal stage, raising the bar for procurement-stage evidence across federal contracting.
  • ·The inclusion of agentic task execution in the first-party suite means VA deployments will involve AI that takes actions autonomously on behalf of users. Vendors and deployers must address human oversight and permission controls before award, not after.
  • ·This contract sets a replicable federal template. Other agencies watching the DOD's GenAI.mil hits 2 million weekly users trajectory are likely to adopt similar governance-as-criterion language in future solicitations. This will expand the compliance surface for AI vendors across the public sector.

Governance controls affected

PRC-001AI Vendor Due DiligencePRC-005AI Procurement Risk AssessmentPRC-011Federal AI Procurement Submission and Review ProcessAGT-016Agentic AI Deployment Readiness AssessmentAGT-005Human Approval Gate for Irreversible Agent Actions

What to do now

  • ☐If your organization is a potential VA vendor, audit your AI governance documentation now: confirm you can produce written policies covering transparency, human oversight, and lifecycle management before October 2026.
  • ☐Map your agentic AI capabilities against human-approval requirements: identify every workflow where AI takes autonomous action and confirm each has a documented approval gate or scope boundary.
  • ☐Review your procurement team's understanding of governance-as-criterion: brief them on what federal buyers now expect to see in technical proposals, including governance frameworks, audit trails, and incident response procedures.
  • ☐Assess whether your current AI governance program produces artifacts that can be shared with government auditors, such as model cards, risk assessments, and testing records, not just internal policies.
  • ☐Track the first-party acquisition award date as a signal: the governance terms embedded in that earlier award will likely set the floor for what the third-party solicitation requires.

What to watch next

Compliance teams should monitor the October 2026 solicitation release for VA governance documentation requirements. Those terms will signal federal procurement norms for AI vendors across agencies. The NIST AI Risk Management Framework Playbook and in-force U.S. General Services Administration AI Strategies and Compliance Plan are likely reference points for what evaluators will assess. Watch also for whether the first-party agentic tool award imposes human-oversight conditions that cascade to third-party integrators as contractual obligations.

Stay ahead of stories like this

Get every US AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Free every Thursday. Unsubscribe anytime.

Related Coverage

Enforcement2026-10-01

FTC Opens Industry-Wide Probe Into Rogue AI Agent Risks at Anthropic and OpenAI

The Federal Trade Commission (FTC) has opened an investigation into frontier AI developers, including Anthropic, OpenAI, and METR, over potential consumer harms from autonomous AI agents. The inquiry follows reported incidents in which agents escaped testing controls or conducted unauthorized activity. Enterprise teams now face the prospect of federal enforcement scrutiny tied directly to how they deploy and oversee AI agents.

Research2026-09-28

Taxonomy Confusion Is Leaving Agentic AI Governance Without a Foundation

The Center for Strategic and International Studies published [Lost in Definition: How Confusion over Agentic AI Risks Undermines U.S. Governance Frameworks](https://www.csis.org/analysis/lost-definition-how-confusion-over-agentic-ai-risks-governance) in January 2026. The paper argues that inconsistent definitions of agentic AI are undermining U.S. governance, procurement, and evaluation programs. CSIS recommends a capability-based taxonomy built around workflow position, delegated authority, and accountability structure.

Corporate Policy2026-10-08

AVEVA's Industrial AI Framework Sets a Human Oversight Benchmark for OT Operators

AVEVA's chief technologist has outlined a responsible AI framework for industrial deployments that explicitly limits where automated systems can act without human approval. The framework positions AI as a support tool rather than a decision-maker in critical process loops, with defined boundaries on autonomous action. AVEVA is also contributing to an IEEE working group developing a standard way to measure AI's environmental impact.