Operationalizing OMB M-25-22: AI Acquisition Compliance

The New Standard for AI Acquisition

OMB Memorandum M-25-22, issued in April 2025, fundamentally changed how federal agencies procure AI systems. For contractors, this is no longer a policy suggestion; it is a core compliance requirement that must be addressed in your technical and management volumes.

Key Compliance Pillars

Agencies are now required to prioritize vendor lock-in mitigation, data rights, and model transparency. According to GAO-26-107859, agencies are actively collecting lessons learned to refine these procurements. To win, your proposal must address:

• Knowledge Transfer: Explicitly detail how your firm will transfer operational knowledge to the government, preventing long-term dependency on proprietary systems.
• Data and Model Rights: As highlighted in M-25-22 guidance, agencies are wary of black-box solutions. Your proposal should clearly define the government's rights to the data used for training and the models themselves.
• Risk Management: Align your AI solutions with the NIST AI Risk Management Framework. Agencies are looking for evidence that you have embedded risk considerations into the development lifecycle.

Strategic Positioning

Don't treat AI compliance as a checkbox. Use the Microsoft 'How to AI' Playbook as a reference for how agencies are being trained to evaluate your responses. The most successful proposals will be those that demonstrate a 'modular' approach to AI, allowing agencies to swap components or integrate with other systems without a total system overhaul. By proactively addressing these concerns in your proposal, you position your firm as a partner in the agency's long-term AI strategy rather than just a vendor of a point solution.