Contracts & Procurement
Category: Policy & Regulation | Contracts & Procurement | Regional Opportunity
Featured illustration: This generated image represents supplier planning and does not depict a verified Virginia project or company.
Virginia’s new data-center policy is not a contract announcement. It does not guarantee work to any local company. But it does create a clear signal that Virginia businesses, local workers, workforce programs, and Virginia-made products are supposed to receive more attention as the Commonwealth reshapes how large data-center projects are approved and judged.
For small businesses, the practical question is no longer only, “Will another data center be built?” It is, “Could we meet the requirements to supply one, and what would stop us from bidding?”
That is a much better economic-development question because it turns a statewide policy debate into a supplier-readiness project.
What Virginia announced
On September 18, 2026, Governor Abigail Spanberger unveiled the Virginia Data Center Accountability Framework and signed Executive Order 22. The framework covers transparency, local approval, environmental protection, energy costs, clean energy, grid reliability, workforce development, and local procurement.[1][2][3]
Among the headline proposals are restrictions on nondisclosure agreements involving commercial data-center projects, local approval for facilities using more than 25 megawatts, stronger environmental and grid standards, community-benefit expectations, and removal of future large projects from certain fast-track development processes.[1][2]
The important status line is easy to miss: this is a mix of executive action, agency work, and proposals intended for the 2027 General Assembly. Some directives started through Executive Order 22. Other standards will require further development or legislation. A business should not treat every item in the framework as a finished procurement rule today.[1][3]
The small-business opening is in the workforce and procurement language
The framework calls for prioritizing local hiring, encouraging local workforce-training goals, prioritizing Virginia businesses in procurement and contracting, supporting responsible-contractor standards and apprenticeship programs, and promoting Virginia-made sustainable materials and technology.[1][2]
Executive Order 22 goes further by directing state leaders and agencies to develop workforce best practices and local, sustainable, and responsible procurement practices for data-center development and operations. The order specifically names locally sourced materials and sustainable products, including mass timber and other local wood products, as areas to address.[3]
That does not create a set-aside, a guaranteed bid, or a single statewide vendor list. It does create a reason for Virginia suppliers and business-support organizations to prepare before the detailed criteria, local toolkits, and project requirements become routine.
Which Virginia businesses could fit the supply chain?
The obvious candidates are not limited to companies that call themselves technology firms. Data-center projects require construction, power, cooling, communications, safety, maintenance, and site services. Potential supplier categories include:
- Electrical contractors, controls specialists, switchgear suppliers, and testing firms
- HVAC, mechanical, plumbing, cooling, and water-management companies
- Battery, generator, clean-energy, microgrid, and power-quality providers
- Fiber installers, low-voltage contractors, network-cabling firms, and communications specialists
- General contractors, specialty trades, site-work firms, concrete companies, and material suppliers
- Security, access-control, fire-protection, monitoring, and emergency-planning providers
- Environmental, engineering, surveying, noise, air-quality, and water-consulting firms
- Staffing, apprenticeship, safety-training, and workforce-development organizations
- Manufacturers of electrical equipment, structural products, batteries, wood products, and other qualifying materials
- Maintenance, waste, recycling, landscaping, logistics, and facility-support companies
Being in one of these categories is only the first screen. Data-center work can involve demanding insurance, safety, bonding, scheduling, cybersecurity, quality-control, documentation, and workforce requirements. The opportunity is real only when a company can show that it is ready for the buyer’s actual standards.
Build a Virginia Data Center Supplier Readiness Map
Small Business Development Centers, economic-development offices, workforce boards, chambers, trade groups, and community colleges do not need to wait for a single workshop. They can begin with a regional supplier-readiness map.
The map should answer three questions:
- Who already has relevant capability? Identify Virginia companies by trade, service, manufacturing capacity, geography, workforce, and past project type.
- What evidence can each company produce? Record licenses, certifications, insurance limits, bonding capacity, safety programs, apprenticeship participation, quality systems, cybersecurity practices, and experience with critical facilities.
- What prevents the company from bidding? Name the gap precisely instead of labeling the company “not ready.”
A useful map is not a public directory of unverified claims. It is a working readiness file that separates confirmed capacity from self-reported interest and unresolved gaps.
A practical readiness scorecard
Each company can be screened across eight lanes:
| Readiness lane | Questions to document |
|---|---|
| Business standing | Is the company properly registered, licensed, insured, and in good standing for the work it wants to perform? |
| Past performance | Can it document comparable industrial, utility, mission-critical, government, healthcare, manufacturing, or high-security work? |
| Safety | Does it have a written safety program, training records, incident data, site orientation capacity, and a responsible safety lead? |
| Insurance and bonding | Can it meet likely limits, bonding requirements, indemnity terms, and project-specific coverage? |
| Workforce | Can it staff the job, document qualifications, support apprenticeships, and scale without abandoning existing customers? |
| Cybersecurity and access | Can it protect plans, credentials, facility information, devices, remote access, and subcontractor data? |
| Quality and documentation | Can it manage submittals, change orders, testing records, material traceability, closeout packages, and schedule reporting? |
| Procurement access | Is it registered in the relevant buyer systems, visible to prime contractors, and prepared to answer prequalification questionnaires? |
The scorecard should end with one of four honest statuses: ready to pursue, potentially ready with a defined gap plan, early-stage capability, or not a current fit. “Not a current fit” is useful information. It protects businesses from spending time and money on bids they cannot responsibly perform.
What a Virginia supplier should do in the next 30 days
- Choose one supply-chain lane. Do not market the company as able to do everything. Name the specific trade, product, service, or workforce function it can defend.
- Assemble a capability file. Include licenses, insurance, bonding, safety documentation, certifications, project examples, staffing capacity, service geography, and major equipment.
- Audit procurement registrations. Confirm state, local, utility, prime-contractor, and private procurement portals relevant to the target work. Do not assume one registration covers every buyer.
- Review cybersecurity basics. Data-center buyers may care about more than physical trade skill. Identify who controls accounts, project files, remote access, mobile devices, and subcontractor access.
- Document the workforce plan. Show current headcount, licensed personnel, training partners, apprenticeship capacity, and realistic hiring limits.
- Identify the largest blocker. It may be insurance, bonding, safety history, a missing certification, cash flow, workforce depth, or lack of comparable experience. Put an owner and a date on the fix.
- Track implementation, not headlines. Watch the forthcoming state and local criteria, the Data Center Planning and Community Engagement Toolkit, the VA-LEAD designation, proposed 2027 legislation, and actual project procurement notices.[1][3]
This could be bigger than a single workshop
A workshop can explain the framework. A supplier-development program can change who is prepared to compete.
The stronger model is a recurring regional system: identify suppliers, verify capabilities, record gaps, match training and technical assistance to those gaps, monitor project and procurement signals, and update readiness as requirements become clearer. Localities considering data-center projects could use the same evidence to understand whether promised local benefits have a realistic supplier base behind them.
Driving Virginia will track the official implementation details as they develop. Businesses and economic-development partners interested in a regional supplier-readiness map can contact Driving Virginia with the geography, industry, and decision they need to support. This is readiness and opportunity intelligence, not a promise of eligibility, a contract award, or project approval.