Intelligence Brief

Entity Profile

Budget Signals

Federal Funding ($46.9M total on USASpending)

• DOJ ($19.7M): Largest single award is the $13M Tribal Victim Assistance Micro-Grant Program running through 2026. This is active money flowing now. Also OVW technical assistance and tribal VAWA jurisdiction grants.
• HHS/IHS ($16.5M): T.R.A.I.L. Diabetes Prevention was the flagship health program ($8.4M through IHS). NARCH research center awards ($2.4M, $1.3M). Most IHS awards have concluded — watch for renewals.
• DOI/BIA ($2.5M): Strengthening Tribal Nations ($1.2M through 2026, active). TIBC meeting coordination.
• NSF ($567K): Tribal Capacity for Data-Intensive Research (completed 2019) — directly relevant to Oahe's data sovereignty positioning.

Foundation Funding ($26M+ Kellogg alone)

• W.K. Kellogg Foundation is the anchor donor at $26M+ cumulative.
• Ford Foundation, Open Society, RWJF, Northwest Area, Lumina, Google.org all contribute.
• New NCAI Foundation launched 2023 — signals push for independent fundraising.

Financial Health Signals

• Operating deficits in 3 of 4 recent years (501(c)(3) Fund).
• Asset drawdown from $22M (2021) to $11.6M (2024).
• 2024 revenue rebounded to $13.2M but the trend is declining reserves.
• 2-star Charity Navigator rating (63%).
• Executive compensation: Foundation President $330K, Executive Director $290K, Legislative Counsel $255K.

Where Oahe could help them spend better: NCAI administers grant programs (victim assistance micro-grants, disaster preparedness grants) that involve data collection and distribution across tribal nations. Their Policy Research Center does data-intensive work. The NSF-funded Tribal Capacity for Data-Intensive Research program was directly aligned with what Oahe builds. The Center for Tribal Digital Sovereignty (with Google.org funding and ASU/AIPI partnership) is the most directly relevant current initiative.

Technology Gaps

• DNS provider: Network Solutions (Web.com) — legacy choice that doesn't match the modernity of Vercel/Auth0/HubSpot stack.
• DMARC p=none: Email spoofing protection is in monitor-only mode. For an org that communicates with 574+ tribal governments, this is a real risk.
• Missing security headers: No CSP, X-Frame-Options, or X-Content-Type-Options on main site.
• Expired subdomain: archive.ncai.org cert expired Oct 2025; abandoned but still resolving.
• Legacy CMS: BrowserCMS v3.3.4 on cms.ncai.org — unmaintained Ruby CMS.
• No dedicated .gov domain: Uses .org despite being effectively a government representative body.
• Data infrastructure: The Policy Research Center likely runs on standard research tools. No evidence of a modern data platform. The tribal directory, resolution database, and policy tracking appear to live inside the Next.js app rather than a purpose-built data system.

Where Oahe could help: Email security audit and DMARC implementation. Data infrastructure for the Policy Research Center. Tribal directory and resolution database modernization. Any data sovereignty work connected to the Center for Tribal Digital Sovereignty.

Decision Makers

Entry point analysis: Larry Wright Jr. as Executive Director is the operational decision-maker. For data/technology conversations, the Policy Research Center director would be the technical contact. For the Center for Tribal Digital Sovereignty, the ASU/AIPI partnership suggests academic contacts may be gatekeepers.

Pain Points

1. Financial pressure: Declining reserves ($22M → $11.6M over 3 years), operating deficits, and a 2-star Charity Navigator rating suggest the organization needs to demonstrate more operational efficiency or find new revenue.
2. Membership friction: The Oglala Sioux Tribe's November 2025 withdrawal (52K+ members, citing structural bias toward self-governance/gaming tribes) and the failed 2023 vote to exclude state-recognized tribes reveal internal governance tensions.
3. Federal funding risk: Under the Trump administration, NCAI is fighting federal layoffs (IHS, BIA, BIE), government shutdown impacts, boarding school funding rescissions, and monument rollbacks. The $13M DOJ victim assistance grant runs through 2026 but future renewals are uncertain.
4. Technology gap: Despite a modern website stack, the underlying data infrastructure for policy research, tribal directories, and resolution tracking appears basic. The Policy Research Center's last NSF data infrastructure grant ended in 2019.
5. Email security: DMARC p=none means anyone can spoof @ncai.org emails to tribal leaders — a phishing vector that matters given NCAI's role as the trusted communication channel to 574+ tribes.

Competitive Landscape

Who contracts with them

• DOJ Office of Justice Programs (largest federal relationship)
• HHS/IHS (health programs)
• DOI/BIA (capacity building, TIBC coordination)
• W.K. Kellogg Foundation (anchor donor)

Who competes for the same space

Vendor ecosystem: No evidence of existing data services vendors. The technology stack is SaaS-heavy (Vercel, HubSpot, Auth0, Classy, Google Workspace) with no visible custom data infrastructure.

Timing Opportunities

1. Center for Tribal Digital Sovereignty (active): Joint initiative with ASU/AIPI, funded by Google.org. Directly aligned with Oahe's positioning. The initiative is new enough that partnerships may still be forming.
2. Policy Research Center data gap: The last NSF data infrastructure grant ended in 2019. If PRC is looking to modernize, Oahe's FP-STAN pipeline and data sovereignty framing are directly relevant.
3. DOJ grant program administration: NCAI administers the $13M Tribal Victim Assistance Micro-Grant Program. Grant administration involves collecting data from recipient tribes — potential data infrastructure need.
4. Financial pressure creates vendor evaluation windows: Declining reserves may force NCAI to evaluate whether current vendors deliver value.
5. 2026 Mid-Year Convention (Memphis, TN): Upcoming major event where NCAI convenes tribal leaders. Potential venue for relationship building.
6. NCAI Foundation launch (2023): New philanthropic arm likely needs data infrastructure to track impact and donor relations.

Recommended Approach

NCAI is the highest-profile tribal advocacy organization in the country, and their technology infrastructure — while modern on the surface — has significant gaps in data, email security, and policy research tooling. Oahe should position as a tribal data sovereignty partner rather than a generic technology vendor. The entry point is the Center for Tribal Digital Sovereignty (joint with ASU/AIPI), which is directly aligned with Oahe's capabilities and uses language ("digital sovereignty") that mirrors Oahe's positioning. A secondary angle is the Policy Research Center, which hasn't had a data infrastructure investment since 2019.

The pitch is not "we build websites" — it's "your policy research, grant administration, and tribal directory data deserve the same sovereignty framing you advocate for in every other domain." Lead with the data sovereignty angle, reference the Google.org-funded Center, and offer a concrete pilot project (e.g., FP-STAN bundle for NCAI's tribal directory or resolution database).