Vivanti BDM Intelligence — Friday, 23 October 2026

1. Executive Dashboard

Run date Friday, 23 October 2026 · 29 leads scored from 17 research extractions · NSW buy.nsw + Federal DTA/AusTender + TGA + parliamentary sources

Top five by score

Distribution by buyer segment

2. Open Tenders, RFIs & Opportunities — Scored

HOT ≥ 55 · WARM 35–54 · COLD < 35. Sorted by score descending. Every card carries a source link — tender pages where a detail URL exists, the buy.nsw reference search where it does not.

3. Competitive Landscape Analysis

Who is winning what, and where the incumbency actually sits.

Big Four federal footprint — FY26 year to date

The group total is down 36% year on year. But the aggregate hides the story: KPMG is the only firm holding share, and the reason is visible in its service mix, not its brand.

The number that matters most

What changed this month

Expiring pipeline — the addressable market

Closest structural competitor

Mantel Group remains the firm whose shape most resembles Vivanti's: GCP Partner of the Year ANZ (multiple years), Snowflake ANZ and APJ Services Growth Partner of the Year 2026, Databricks APJ Emerging Partner of the Year, AWS Partner of the Year ANZ. Where Vivanti differentiates is assurance, evaluation and regulatory evidence — the work Mantel's engineering-led model does not productise. Do not compete with Mantel on platform engineering; compete on the assurance layer above it, and partner where the platform work is unavoidable.

Why the 36% decline is not a demand signal

Read against the other data in this report, the Big Four decline is a mix shift, not a budget cut. Federal ICT labour hire rose 51% to $3.52B while APS vacancy notices fell 35%. AI-named procurement notices tripled to 109. Total consultancy rose to $860M. The money did not leave — it moved from large advisory programmes into smaller, more technical, more delivery-shaped engagements. That is the market Vivanti is built for, and it is why the median expiring contract value ($222,607) matters more than the headline totals.

4. Strategic Procurement Opportunities — Mega Signals

Policy and market-structure moves that create or destroy addressable demand. Ordered by commercial consequence.

4.1  Federal AI Policy v2.1 and the 15 December evidence cliff

The DTA published version 2.1 of the Policy for the responsible use of AI in government on 21 October 2026, alongside a purpose-built AI Impact Assessment Tool. Version 2.0 took effect on 15 December 2025 and converted the core controls from 'should' to 'must'. The phased deadlines all run from that date, and the final tranche lands on 15 December 2026 — 53 days from this report.

Eight mandatory requirements now bind every non-corporate Commonwealth entity, with the Defence portfolio and the national intelligence community excepted. The four that create work: a designated accountable official per agency; a public AI transparency statement; an internal register of every in-scope AI use case with a named accountable owner for each; and a completed AI impact assessment before deployment of every in-scope use case. Impact assessments must address fairness, safety, privacy, transparency, security and human-centred values, using the DTA's own tool. Foundational AI training is mandatory for all APS staff, and the register must be shared with the DTA every six months.

This is not a strategy engagement and should not be sold as one. It is inventory, classification and evidence production against a fixed date — finite, repeatable, and priceable per use case. Most agencies will reach December with a spreadsheet, no assigned owners and no completed assessments, because the policy arrived in tranches and nobody owned the last one. The commercial shape is a fixed-fee sweep: inventory, assign owners, run the tool per case, produce the evidence pack and the six-monthly DTA submission.

4.2  Whole-of-Government Cloud Computing Guidance, and the platform that is not on the list

On 21 October 2026 the DTA released new whole-of-government cloud computing guidance, two days before this report. It sits under the Cloud-First policy in force since 1 July 2026, alongside the six sovereignty tests published on 31 August 2026 for coordinated contracting arrangements: foreign legal reach, operational control, decision-making authority, jurisdictional control and transparency.

The pre-cleared list carries AWS, Microsoft, IBM, Oracle, SAP and Rimini Street. Google Cloud is not on it — now the seventh consecutive week this has been true in this pipeline. Direct contracting for specific workloads remains lawful, but the pre-cleared whole-of-government status is gone, and every agency with GCP workloads now has a position to defend in writing. Note also that Data Centre Panel 3, the route by which government leases data-centre space, is not covered by the six tests — a gap that will eventually be tested.

The product that falls out of this is a Sovereignty Position Assessment: map every non-listed workload, document the jurisdictional and legal-exposure position against the five tests, and produce either a remediation plan or a defensible direct-contract rationale. Vivanti's own GCP depth makes this credible rather than theoretical — provided the conflict is declared at the start, which converts it from a liability into evidence of independence.

4.3  The sovereign AI register — a procurement preference with unwritten thresholds

The Joint Select Committee on Artificial Intelligence wrote to the Prime Minister on 12 October 2026, signed by Labor chair Jo Briskey and Liberal deputy chair Senator Jonathon Duniam. Hearings ran in Canberra on 14 and 16 October and in Sydney on 20 October; the final report is due 30 November 2026, and the government wants the sovereign AI register introduced by the end of the year.

The recommendations that matter commercially: 'strong pro-Australian government procurement guidelines' leveraging Commonwealth purchasing power; a national policy for sovereign AI capability including domestic compute; critical AI infrastructure brought under the Security of Critical Infrastructure framework; and labs training models in Australia required to reserve compute and give security agencies early access to frontier models. The committee's own framing — that Australia must be 'not merely a consumer of AI technologies developed elsewhere' — is the political mandate behind the preference.

4.4  TGA rules 8 of 12 AI scribes are probably medical devices — and NSW has deployed $38.7M of them

The Therapeutic Goods Administration published its digital scribe review on 16 October 2026. It surveyed roughly 100 suppliers, received 40 responses and reviewed 12 products including those from Heidi, Lyrebird Health, Microsoft, Abby Health, Carepatron and iMedX. Eight of the twelve had functions likely to meet the medical-device definition. Not one supplier had classified its product as a medical device. The TGA states that some may be supplied in breach of the Act and has begun targeted, risk-based compliance activity. Products reviewed were not tested for safety, performance or privacy, and the regulator noted an apparent low awareness of regulatory requirements across the supplier base.

Set that beside the deployment numbers. NSW Health has funded $38.7M of AI scribes for up to 6,000 clinicians. Roughly two in five Australian GPs were using AI scribes according to an RACGP poll. Every health service that has deployed a scribe now holds an unassessed regulatory exposure and a clinical-safety question it cannot answer internally — and the same problem exists across private hospital groups and aged-care providers who never appear in this pipeline at all.

This is the highest-conviction new revenue line of the run, because it is short, fixed-fee and deadline-free but reputationally urgent: inventory deployed scribes, map functions to device classification, document intended-purpose boundaries, produce the risk file. It is also a conversation that lands better from a third party than from the vendor whose product is in question.

4.5  NSW AI governance — the attestation architecture is now built and the clock is running

NSW AIAF is mandatory from 30 September 2026, and Circular DCS-2026-02 requires every agency to appoint an Accountable Official notified to NSW GovAI within Digital NSW, register all AI use cases, and provide a signed annual attestation for the previous financial year to NSW GovAI by 31 October each year, endorsed by the Accountable Official and approved by the Agency Head, with the first due 31 October 2027. Generative AI is automatically classified as elevated risk. High and very-high-risk uses must go to the NSW AI Review Committee before deployment. An agency can request an extension for the first period, but only with a time-bound remediation plan.

The practical significance for Vivanti is that the first attestation, though a year away, requires a full prior-year evidence trail. Agencies that begin in October 2027 will be reconstructing a year they did not record. The sellable work now is the recording mechanism — a register, an assessment workflow and an evidence pack that survives audit — not the attestation itself.

4.6  The build-to-assure rotation is now confirmed by the labour market

The federal ICT market snapshot for 23 October 2026 shows 95 open opportunities across 23 departments. The 30-day trend column is the most useful single data point in this report: Analysis gained 10 roles to 22 — the largest increase of any category — while Management & Leadership fell 11 to 9, Architecture fell 7 to 7 and Testing fell 5 to 5. Development is flat at 25, and Services Australia alone holds 14 of those.

Government is hiring people who can interpret, evaluate and assure, and releasing people who run programmes. Architecture and programme leadership contracting is contracting; interpretation is expanding. This corroborates every other signal in this run — the TGA device ruling, the DTA impact-assessment mandate, the sovereign register, the NSW attestation architecture. The market has moved from building platforms to proving that what was built is safe, compliant and working. That is Vivanti's positioning, and it is being priced correctly by the market for the first time.

5. Consulting Market Intelligence & Industry Movements

Leadership, market structure and partner ecosystem signals from the past fortnight.

6. Vertical Opportunities Map

Where the pipeline is concentrated, and what the shape of each vertical implies for coverage.

7. Weekly BDM Playbook — Action Queue

Eight plays in priority order. Two are P0 with deadlines inside five days. Each carries a ready-to-send first contact.