AI Procurement
10 min read
GSA’s LLM Clause Sets Data-Use Rules; OMB Rescinds a Software Attestation Mandate and Sets 2030 Cryptography Targets
GSA’s GSAR 552.239-7001 deviation sets ownership, training, notice, and liability rules for LLM buys that process Government Data. OMB M-26-05 rescinds the governmentwide secure-software attestation mandate. EO 14412 directs a FAR proposed rule, due December 19, 2026, that would require covered contractors to meet NIST FIPS, including post-quantum algorithms, by December 31, 2030.
Read report