Who you can sell to
How to sell to public hospitals and health systems
Hospitals are among the largest physical plants in any community and they run continuously. A 400-bed hospital is a 24-hour industrial facility with a central plant, medical gas systems, commercial kitchens, acres of parking, extensive grounds and a maintenance backlog. It buys custodial services, HVAC and boiler work, roofing, paving, grounds maintenance, security guards, food service, laundry and linen, waste and medical waste handling, and a constant stream of small renovation projects. Very little of that is glamorous, and almost none of it is written about, because the content that exists about selling to hospitals is written for medical device and clinical software companies.
The first thing to sort out is whether the hospital you are targeting is a public buyer or a private one, because that single fact determines whether you will ever see a bid posted. A county hospital or a public hospital district is a unit of local government and must advertise competitively. A non-profit health system with a similar name three miles away has no such obligation and will simply invite the firms it already knows.
This guide covers that distinction, how group purchasing organizations actually work and where a smaller contractor gets around them, the credentialing that stops you at the door, the infection control requirements that make hospital construction cost more than commercial, and why hospitals pay more slowly than a school district.
On this page
The short version
- Only publicly owned hospitals (county facilities, public hospital districts, state academic medical centers and municipal hospitals) are required to advertise competitive bids. Non-profit systems run private, invitation-based RFPs.
- Group purchasing organizations such as Vizient, Premier and HealthTrust dominate supplies and equipment, but local facility services like paving, roofing, grounds and small construction are largely outside GPO contracts. That is the opening.
- Vendor credentialing through symplr, IntelliCentrics or GHX is a hard gate. No credential, no site access, regardless of who awarded you the contract.
- Any construction or renovation requires an Infection Control Risk Assessment and Interim Life Safety Measures. A contractor who does not price containment, negative air and phasing will lose money on the job.
- Hospitals screen vendors against the HHS Office of Inspector General exclusion list, and payment terms of 45 to 60 days with strict purchase order matching are normal.
First, work out who actually owns the hospital
Everything about your approach follows from ownership. There are five categories and they behave completely differently.
County hospitals and public hospital districts
Units of local government with an elected or appointed board, taxing authority in many cases, and a statutory duty to procure competitively. These post bids publicly, hold public bid openings, award in an open board meeting and publish the results. Washington's public hospital districts are a clear example: under RCW 70.44.140, contracts over $75,000 require competitive sealed bidding with at least 13 days published notice, purchases of $15,000 and under may use simplified procurement, and districts may use a small works roster process as an alternative to formal bidding. Bid security of at least 5 percent is required and the successful contractor must post a performance bond of at least 25 percent of the contract price within 10 days.
Because public hospital districts are a species of special district, much of how to sell to special districts: water, fire, transit and parks applies to them directly, including the point that thresholds come from the enabling statute rather than general municipal law.
State academic medical centers
University-affiliated hospitals procure under the state's higher education procurement rules and post on the university system's portal. See how to sell to universities and colleges and how to sell to state agencies.
Municipal hospitals
City-owned facilities that follow the city's purchasing ordinance. See how to sell to municipalities and city government.
Veterans Affairs medical centers
The one federal buyer worth naming here. VA procures through SAM.gov and operates the Veterans First Contracting Program, which gives priority to verified service-disabled veteran-owned and veteran-owned small businesses on VA acquisitions. If you hold that verification, VA facility work is the single highest-leverage place to use it.
Private non-profit health systems
The largest category by bed count and revenue, and not subject to public bidding at all. There is no posted solicitation to find, no low-bid rule, no public opening and no protest right. You get invited or you do not. This is a relationship and qualification game, covered in how to win RFPs from nonprofits and private buyers. It is not a worse market, but it is a different one, and applying a public-bid playbook to it wastes everyone's time.
Practical step: look up the hospital's ownership before you invest an hour. The American Hospital Directory and the facility's own governance page will tell you, and the phrase you are looking for is district, county, authority or state university on one side, versus a 501(c)(3) health system on the other.
How GPOs actually work, and where they do not reach
A group purchasing organization aggregates the purchasing volume of many hospitals and negotiates contracts that its members can buy from. Vizient and Premier are the two largest; Premier describes a network of more than 4,250 member hospitals and health systems, and HealthTrust is the third major national player. Most US hospitals buy the majority of their supplies through at least one GPO, and larger systems belong to more than one.
The economics are worth understanding because they are counter-intuitive. The GPO is generally paid by the vendor, not the hospital, through an administrative fee on sales. That arrangement would look like a kickback under federal law were it not for the safe harbor at 42 CFR 1001.952(j), which protects it provided the written agreement specifies the amount or maximum amount the GPO will be paid by each vendor, and, where the fee exceeds 3 percent of the purchase price, discloses the amount. The GPO must also disclose in writing to the health care entity at least annually the amount it received from each vendor with respect to purchases made by or on behalf of that entity.
So a GPO contract costs you roughly 3 percent off the top, and it is a license to sell rather than a sale. Here is how a smaller vendor deals with it.
Know what is not GPO-contracted
The single most useful fact on this page: GPO contracts are concentrated in medical supplies, pharmaceuticals, implants and capital equipment. Local facility services are largely not. Nobody negotiates a national contract for mowing a hospital campus in Ohio, resurfacing its parking deck, replacing a section of roof, or repairing the entrance drive. Snow removal, paving, grounds, tree work, exterior painting, parking lot lighting, small renovation and most local construction are bought locally, often through the facilities department, and frequently below the threshold that would require a formal bid. If your business is in how to get government landscaping contracts, how to get government paving contracts, how to get government roofing contracts or small how to get government construction contracts (state and local), the GPO is mostly irrelevant to you and you should stop worrying about it.
Know what is increasingly GPO-contracted
Purchased services is the category GPOs have been moving into hardest: environmental services, food and nutrition, linen and laundry, security, biomedical equipment maintenance, waste and medical waste. If you sell one of those, a Vizient or Premier purchased-services agreement is worth pursuing. Both run structured sourcing cycles with an RFI stage followed by a formal solicitation, and both publish supplier registration pathways. Getting on takes months and requires national or at least multi-region capability, so it favors firms above a certain size. See how to get school district janitorial contracts, how to get school food service contracts and how to get government security guard contracts.
Use the off-contract exception honestly
A hospital can buy off-contract when the GPO award does not meet an operational or clinical need. The way to make that case is specific and documented: a service level the national contract does not provide, a response time a regional vendor cannot match, a local license or certification requirement, or a total cost comparison that includes what the national vendor charges for travel and mobilization. Bring the analysis to the supply chain director rather than complaining about the GPO. Supply chain leaders are measured on savings, not on contract compliance for its own sake.
Look at regional GPOs and shared service organizations
Regional purchasing coalitions and health system shared service organizations are smaller, more accessible, more interested in local vendors, and a realistic first contract for a mid-sized firm. They are also a credible reference when you later approach a national GPO.
Who holds the budget and who signs
Hospital purchasing is more layered than local government, and the people with the need are not the people with the authority.
- Vice president of supply chain and the director of materials management. Own the contracting process, the GPO relationships and the purchase order system. Nothing gets paid without going through them.
- Director of facilities or plant operations. Your actual customer for building services, maintenance, grounds and small projects. This person has a maintenance budget and, below a threshold, discretion over it.
- Director of environmental services and director of nutrition services. Own custodial and food operations respectively, and are the technical evaluators on those contracts even when supply chain runs the process.
- Director of construction or facilities planning. Runs capital projects, holds the relationships with architects and construction managers, and decides which contractors get invited to price work.
- The value analysis committee. A standing multidisciplinary committee that reviews new products and services for clinical impact, safety and cost. Anything that touches patient care goes through it. For pure facilities services it usually does not apply, which is one of the reasons facilities work is faster to sell than anything clinical.
- The chief financial officer, and above a threshold, the board. At a public hospital district the board meets publicly on a published calendar and its agenda is a genuine source of forward intelligence about upcoming projects.
Vendor credentialing: the gate before the gate
You can win a hospital contract and still be unable to start work. Nearly every US health system uses a third-party vendor credentialing service, and the major platforms are symplr, formerly Vendormate, IntelliCentrics, whose product is branded SEC3URE, and GHX. Some large systems run their own in-house equivalent.
Credentialing is a per-company registration plus a per-person credential for every individual who will set foot on site. Typical requirements include a background check, proof of immunisations and annual influenza vaccination, tuberculosis screening, HIPAA training, general safety and infection control training, proof of insurance, and a signed vendor conduct policy. Credentialed representatives check in at a kiosk on arrival and print a badge that specifies which areas they may enter. Access to clinical and patient care areas carries stricter requirements than access to a mechanical room or a loading dock.
Three things to plan for. It costs money, charged as an annual fee per company and per representative, and a contractor sending a ten-person crew is paying ten credentials. It takes time, typically several weeks including the background check and any immunisation records you have to chase. And it does not transfer reliably between systems, so a firm serving three health systems may be paying three vendor credentialing subscriptions.
Put this in your bid. A contractor who prices a hospital job at their commercial rate and then discovers the credentialing cost for a crew has just eaten their margin. It belongs in general conditions alongside badging, escort requirements and parking.
Infection control is why hospital construction costs more
Any construction, renovation or maintenance activity that disturbs dust in an operating hospital triggers an Infection Control Risk Assessment. The ICRA matches the type of activity against the risk group of the adjacent patient population and produces a required class of precautions, running from simply keeping doors closed at the low end to full negative-pressure containment with HEPA filtration, anterooms, sealed penetrations and dedicated routes for debris removal at the high end.
Alongside it, Interim Life Safety Measures apply whenever construction compromises fire protection features: impaired sprinklers or alarms, blocked exits, temporary partitions. ILSM requires compensating measures such as additional fire watches, extra extinguishers and daily inspections. These come from the accreditation and code framework hospitals operate under, principally The Joint Commission's environment of care and life safety standards, the NFPA 101 Life Safety Code, the CMS Conditions of Participation, and the Facility Guidelines Institute guidelines adopted by most state health facility licensing agencies.
What this means commercially is straightforward. Hospital renovation is more expensive per square foot than comparable commercial work, and the difference is not markup. It is containment construction and its daily monitoring, negative air machines and filter changes, HEPA-filtered debris routes, off-hours and phased work so that clinical operations continue, sticky mats and dedicated cleaning, extra supervision, and the documentation trail proving all of it happened. A contractor who has never done ICRA work will underbid the job and then either lose money or get removed from the site. A contractor who prices it correctly and can show ICRA-trained supervision has a genuine competitive moat, because the hospital knows what happens when it goes wrong.
In some states there is a further regulatory layer. In California, hospital construction plan review and construction observation run through the Department of Health Care Access and Information, formerly OSHPD, which regulates the design and construction of health care facilities and reviews building plans, seismic compliance and construction observation. Working in a HCAI-regulated environment requires specific familiarity, and a contractor who has it should say so on page one of the proposal.
What disqualifies bidders on hospital work
Beyond the usual mechanical failures common to all public bidding, hospital work adds several that catch newcomers:
- Appearing on a federal exclusion list. Health systems screen vendors and their personnel against the HHS Office of Inspector General List of Excluded Individuals and Entities and against SAM exclusions, because an entity that employs or contracts with an excluded person can face civil monetary penalties. Screen your own roster before you bid, not after.
- No demonstrated ICRA experience on a facilities or construction solicitation. Many hospital RFPs make it a mandatory qualification.
- Not credentialed and unwilling to be. A bid conditioned on skipping credentialing is a non-starter.
- Missing insurance endorsements. Hospitals are strict about additional insured wording, primary and non-contributory status and waivers of subrogation, and a certificate without the actual endorsement forms attached will be rejected.
- Skipping the mandatory walkthrough. Hospital pre-bid site visits are almost always mandatory, because the site conditions cannot be understood from drawings.
- No business associate agreement where the work involves any possibility of exposure to protected health information, which includes some IT, records handling and shredding services. See how to get government IT contracts at the state and local level.
Build a how to build an RFP compliance matrix from the solicitation and check every one of these before submission. how to respond to an RFP covers the wider response discipline.
Insurance, bonding and payment
Insurance requirements are higher than at a city or a school district and are enforced literally. Expect commercial general liability at $1 million per occurrence with a $3 million aggregate as a common floor, and $5 million or more in combined primary and umbrella layers on construction. Automobile liability at $1 million, workers compensation at statutory limits with employers liability, and professional liability where design or engineering judgment is involved. Two coverages that catch people out: abuse and molestation coverage, increasingly required for any vendor whose staff have unescorted access to patients, and pollution liability on medical waste, asbestos and remediation scopes.
Bonding follows the ownership. A public hospital district or county hospital applies the state's public works bonding rules: a bid bond, commonly 5 percent, and performance and payment bonds, at percentages set by statute. Washington's public hospital district statute, for example, requires bid security of at least 5 percent and a performance bond of at least 25 percent of the contract price. Private non-profit systems may require bonds, subcontractor default insurance, or nothing at all, depending on their risk policy. bid bonds and performance bonds explained covers how to build surety capacity.
On payment, plan for 45 to 60 days, which is slower than a city and considerably slower than a rate-funded utility district. There are three reasons, and understanding them lets you work with the system rather than against it. Supply chain runs a three-way match between the purchase order, the receipt and the invoice, and any mismatch stops the payment silently. Invoices arriving without a valid PO number are returned rather than researched. And the accounts payable function at a multi-hospital system is frequently centralized at a shared services center in another city that has never heard of your job.
The operating rules that follow: never start work without a PO number in hand, put it on every invoice and every change order, get change orders approved in writing before performing the work rather than after, and identify the accounts payable contact by name during mobilization instead of when you are 60 days out. On a public hospital, the state prompt payment statute gives you an interest remedy; on a private system, it does not, and your leverage is the relationship and, on construction, lien rights.
How to get started with a health system near you
Pick the public facilities first, because you can see their solicitations. Register on the county or district purchasing portal, get on the bidders list for facility maintenance and construction categories, and read the last two years of awarded contracts, which are public records and will tell you who currently holds the work and what it went for. Then start credentialing before you need it, because the delay is administrative and there is no reason to absorb it during mobilization.
If you want to see which hospital and health system solicitations are open in your area right now, browse open opportunities, or book a call and we will go through which ones fit what you actually do.
Common questions
Do I have to be on a GPO contract to sell to a hospital?
No, and for most trades and local services the question does not arise. GPO agreements dominate supplies, pharmaceuticals and capital equipment. Grounds maintenance, paving, roofing, exterior painting, snow removal and local renovation are bought locally by the facilities department. Purchased services such as environmental services, food service, linen and security are increasingly GPO-contracted, so if you sell one of those, pursuing a Vizient or Premier agreement is worth the effort. Otherwise, sell to the facility.
What is an ICRA and do I need a certification for it?
An Infection Control Risk Assessment is a documented evaluation, done jointly by the hospital's infection prevention staff and the project team, of the dust and airborne risk a construction activity poses to nearby patients, and the containment class required to control it. There is no single mandatory national certification, but formal ICRA training exists and hospitals increasingly want to see it, particularly for the supervisor on site. The practical requirement is that you can build compliant containment, monitor pressure differentials, document daily, and show that your foreman has done it before.
How do I find out whether a hospital is public or private?
Check the governance page on the hospital's own website and look at how the board is described. Elected commissioners, appointed by the county board, or regents of a state university indicate a public entity subject to competitive bidding. A board of directors of a 501(c)(3) corporation indicates a private non-profit. A district or authority in the legal name is a strong signal. If it is public, its bids are posted somewhere and its past awards are public records you can request.
How much does vendor credentialing cost and who pays for it?
The vendor pays. Platforms charge an annual company registration plus a per-representative fee, and a contractor with a crew pays for each person needing site access. Costs vary by system and by access level, and requirements such as immunisations and background checks add to it. Treat it as a line item in general conditions on every hospital bid, and remember that credentials generally do not transfer between health systems, so serving multiple systems means multiple subscriptions.
Are hospitals required to award to the low bidder?
Public hospitals and hospital districts generally are, on a sealed bid, to the lowest responsive and responsible bidder, though most public hospital statutes also allow a request for proposals with weighted evaluation criteria where technical factors matter. Private non-profit systems are not required to award to anyone in particular and routinely do not choose on price. RFP vs RFQ vs IFB vs ITB explains what changes between the two instruments and how your response should differ.
Is prevailing wage owed on hospital construction?
On public hospital district and county hospital construction, usually yes, under the state's prevailing wage law, at the same thresholds as other public works in that state. On private non-profit hospital construction, generally no, unless the project is funded with public money or tax-exempt bond financing that carries a wage condition, which does happen. Always check the funding source named in the solicitation rather than assuming from the hospital's name. See Prevailing wage and Davis-Bacon for contractors.
Why do hospitals pay so much more slowly than schools or cities?
Because the controls are tighter, not because the money is short. Supply chain enforces a three-way match between purchase order, receipt and invoice, an invoice without a valid PO is returned rather than investigated, and accounts payable is often centralized at a shared services center outside the region. Forty-five to sixty days is normal. The countermeasures are entirely within your control: obtain the PO before mobilizing, reference it on every document, get written approval for changes before doing the work, and build the timeline into your cash flow. how much does it cost to bid on a government contract? covers how carrying cost should influence which jobs you chase.
Sources
- 42 CFR 1001.952(j), group purchasing organization safe harbor
- HHS OIG, List of Excluded Individuals and Entities
- RCW 70.44.140, Washington public hospital district bidding
- California HCAI, health care facility construction regulation
- Premier Inc, about the alliance
- Vizient
- symplr vendor credentialing
- CDC, infection control guidance for environmental infection control in health-care facilities
- The Joint Commission, environment of care standards
- VA Office of Small and Disadvantaged Business Utilization, Veterans First Contracting Program