If an agency's email security system quarantines a vendor's quote, the vendor can lose the competition. That is the practical result of the Government Accountability Office's decision in Matter of Casey & Company LLC, B-424785. The ruling, dated Oct. 14, 2026, denied a protest over a National Park Service purchase order. Casey says it emailed its quotation six days before the deadline, but the Interior Department's filter tagged the message a "High Confidence Phish" and the contracting officer never saw it. GAO held that the quote was quarantined and never reached the designated recipient, so the protester carried the risk that it would not arrive.
Casey had challenged the National Park Service's issuance of a purchase order to Brann Services LLC for leaf removal at Rock Creek National Park.
How a Rock Creek Leaf Removal Quote Ended Up in Quarantine
The Park Service issued request for quotations 140P1326Q0029 as a small business set-aside. Price was the only evaluation factor. Vendors had to email quotes by noon Eastern Time on July 29.
Casey says it sent its quotation on July 23. When the deadline passed, the contracting officer had 15 quotations. Casey's was not one of them.
The problem surfaced after Casey asked for a debriefing on Aug. 11 and attached its quotation. The agency declined to consider it. An agency IT investigation found the answer: Casey's email had been flagged as a "High Confidence Phish" and quarantined by the agency's anti-spam system. Nobody released it to the contracting officer's inbox.
Casey filed an agency-level protest, and Interior denied it on Aug. 27. Casey then took the dispute to GAO.
Why the Systemic Failure Argument Did Not Work
Casey's best argument was that the fault lay with the agency. It argued that Interior's email system had a record of wrongly quarantining legitimate quotations and that this pattern amounted to a systemic failure requiring the agency to consider its quote. GAO bid protest case law has long left room for relief where the government's own handling, rather than the vendor's, caused a quotation to go missing. That is a narrow exception.
GAO looked at the record and found no systemic failure. The other 15 vendors' quotations all reached the inbox. Sixteen other quarantined items in the record were notifications from a third-party platform, not competing quotations, and the contracting officer did not know about them. Casey also pointed to an earlier quarantine in a separate procurement. GAO said that incident did not show a systemic problem either, because 27 other quotations in that competition arrived without trouble.
GAO also found no deliberate interference. The record showed no conscious effort by contracting personnel to prevent Casey from receiving an award.
The deciding principle is that vendors must make sure their quotations actually arrive at the designated address before the deadline. Delivery to an agency's email security gateway does not count as delivery to that address. Because Casey's message was quarantined and never released, the agency had nothing to evaluate, and GAO denied the protest.
Why Reaching the Agency's Mail System Did Not Save Casey
Many small vendors assume that if their email left their outbox and the agency's servers accepted it, they have submitted. Under GAO's reasoning, that is not enough. Reaching the agency's mail system is a different thing from reaching the inbox the solicitation designated. The security layer between those two points is where this quote stopped, and GAO treated that gap as the vendor's risk unless the vendor can show a systemic breakdown on the government's side.
The timeline made this harder for Casey. By the time the problem was discovered, the deadline had passed and the competition was closed. An early submission only helps if the vendor learns, while there is still time, that the message arrived.
A Companion Ruling on Self-Represented Protesters and Protected Reports
GAO also decided a procedural case that turned on an electronic access problem. In Sterling Readiness Rounds, LLC, B-424607.2, GAO denied a request for reconsideration. The original protest challenged a Department of Veterans Affairs sole-source solicitation for Walsh software licenses.
GAO had dismissed that protest because Sterling filed no comments on the agency report by the Aug. 3 deadline. Sterling, which represented itself, said it could not open the protected agency report and that the VA did not provide a redacted copy. It first contacted GAO at 8:57 p.m. on the deadline day. On reconsideration, GAO found no legal or factual error and no new information, and it said that disagreement with a decision is not enough. GAO also said a protester that cannot access a report must notify GAO and ask for an extension, rather than wait for access, and that its rules apply equally to protesters without counsel.
The two cases share a theme. A system problem on the way to the decision-maker did not help the firm when it had not caught the problem, or raised it, in time.
What It Means for Contractors
For firms that bid by email on simplified acquisitions, the Casey decision has practical consequences:
- Do not treat a sent message as proof of receipt. Delivery to the agency's gateway does not show that the contracting officer's inbox got the message. Ask the contracting officer or contract specialist to confirm receipt in writing before the deadline.
- Send early and follow up. Casey says it submitted six days early, and that time could have caught the problem if it had asked for confirmation. If you get no acknowledgment within a business day or two, call or send a short follow-up email without attachments.
- Watch for content that filters may flag. Large attachments, compressed files, embedded links and unfamiliar sending domains can all trigger security tools. Check the RFQ for format and size limits and keep submissions plain.
- The systemic failure bar is high. GAO looked at whether other quotations arrived. If most of them got through, a single quarantined quote will not show that the government's system broke down.
- Self-represented firms get no procedural slack. Sterling shows that GAO deadlines apply the same way with or without counsel. If you cannot open a protected report, tell GAO and ask for an extension before the due date.
