Federal contractor vetting runs on self-disclosure, does not apply to civilian agencies, and does not apply to hundreds of millions in AI contracts that required zero foreign influence review. Meanwhile, Washington is in court over the wrong supply chain problem.
Why this matters if you're trying to win federal health work
Foreign ownership, control, and influence (FOCI) review is the gap nobody on the contractor side wants to talk about out loud — until the government starts enforcing it unevenly and your pursuit suddenly has a compliance problem it did not have yesterday.
Two things are true at the same time:
- The vetting regime most contractors assume is in place is narrower than they think. It does not touch every agency and it does not touch every dollar.
- When enforcement does catch up, it is usually retroactive and expensive. The firms that get caught are not the ones that were openly hostile. They are the ones that did not document the relationships they already had.
If your pursuit touches defense health, VA care coordination, or any AI-enabled clinical or administrative tool, the question is not whether this is a compliance story. It is how you tell the story inside your proposal before anyone forces you to.
What to get in front of before red team
- Ownership documentation. If any investor, board member, or subcontractor has overseas exposure, surface it now, not in source selection Q&A.
- Data flow maps. Where does the data sit? Whose engineers touch it? Whose cloud is it on? You want that written down before an evaluator asks.
- Subcontractor supply chain. Your subs are your risk. Their subs are also your risk. Treat the tier-2 relationships as first-class compliance artifacts.
- AI model provenance. If you are bidding an AI-enabled solution, be ready to explain where the model weights came from, where inference runs, and who has access to training data.
Get the research faster
If your team needs a clean read on how any agency, program, or incumbent handles FOCI and supply chain language, that is a MarketPulse brief. One free brief, source-cited, 24 hours.
If your proposal needs to pre-answer the supply chain question before the evaluator asks, run the draft through ProposalPulse first and tighten the relevant sections.
Mary's full LinkedIn post on the 80-analyst enforcement gap is here for readers who want the original.
