Operationalizing OMB M-25-22: AI Procurement Compliance

The New Baseline for AI Acquisition

Since the enforcement date of September 30, 2025, OMB Memorandum M-25-22 has fundamentally altered the federal AI procurement landscape. This policy, which rescinded and replaced M-24-18, serves as the primary governance framework for how agencies acquire AI systems. For capture and proposal managers, this is not merely a compliance exercise; it is a competitive differentiator.

Key Compliance Gates

To be responsive to solicitations issued under this mandate, proposals must address specific AI risk management and efficiency requirements. The memorandum emphasizes 'buy-first' efficiency, meaning agencies are directed to leverage existing enterprise agreements—such as those found on GSA's Buy AI portal—before pursuing custom development.

When drafting your proposal, ensure you address the following:

• Data Rights and IP: Clearly define the ownership of models, training data, and fine-tuned weights. Agencies are increasingly wary of vendor lock-in.
• Security and FedRAMP: Any AI cloud service must be FedRAMP-authorized or in the process of obtaining an Authority to Operate (ATO). If your solution involves CUI, you must demonstrate alignment with NIST SP 800-171 requirements.
• Verification and Testing: M-25-22 requires agencies to verify AI performance. Your proposal should include a clear testing and evaluation (T&E) plan that addresses bias, accuracy, and robustness.

Avoiding Hallucinations in Proposals

As AI tools become more common in proposal development, practitioners must be wary of the risks. Fabricated past performance metrics or hallucinated citations are immediate red flags for evaluators. As highlighted in recent industry analysis, tools processing CUI must be strictly isolated within compliant environments. If you are using AI to draft your response, ensure the tool itself is compliant with the security standards you are proposing to the government.

Strategic Alignment

Capture managers should focus on the 'efficiency' aspect of M-25-22. Agencies are under pressure to demonstrate cost savings and mission impact. Your proposal should explicitly map your AI solution to the agency's specific mission outcomes, rather than focusing solely on the technical capabilities of the model. By aligning with the OMB M-25-22 requirements, you position your firm as a partner in the government's responsible AI journey.