Checklist · Government Contracts

Bidding on a Federal Contract: A Compliance Checklist

Type: Checklist
Jurisdiction: National
Date: 2025-05-14
Topic: Government Contracts

A twelve-phase operational checklist for pursuing, winning, and performing a federal contract without losing it on a technicality. Phases 1 through 5 cover the work that must be finished before a proposal is written: registration and representations, reading the solicitation as a litigator would, verifying size and socioeconomic status under the affiliation rules, structuring the team so the subcontracting limits and the ostensible subcontractor rule are satisfied, and clearing organizational conflicts and procurement integrity exposure. Phases 6 through 8 cover building and pricing the proposal, using the question and amendment process while the pre-award protest window is still open, and submitting. Phases 9 through 12 cover award, the debriefing and the short protest clock that follows it, contract start-up and the administration controls that make later recovery possible, and the notice, claim, and disclosure obligations that run through performance. Each phase closes with commentary on the failure mode it prevents. A worked example follows a sixty-person engineering firm from capture through a partially successful protest and a certified claim.

Bidding on a Federal Contract: A Compliance Checklist

Government Contracts > Federal Procurement | Published 14 May 2025 - Updated 24 July 2026 | UpLaw - uplaw.us

In brief. Most federal contracts are lost before the proposal is written and most claims are lost before the dispute begins. The decisions that matter — team structure, conflicts, eligibility, and whether to challenge the solicitation — all have deadlines that close while the capture team is still building slides. Work the front end, and write everything down.

Keywords: SAM, representations, NAICS, affiliation, ostensible subcontractor, teaming, OCI, procurement integrity, Section M, pre-award protest, Blue & Gold, TINA sweep, debriefing, 10-day clock, CO authority, constructive change, certification

How to use this. Phases 1–5 happen before anyone writes prose; they decide whether the bid is legal and winnable. Phases 6–8 are the proposal itself. Phases 9–12 are award, protest, and performance, where the discipline established earlier either pays or does not. The doctrine behind every step is in Government Contracts: A Comprehensive Guide to the FAR, Bid Protests, and Claims. The narrative overview is The Rules of the Game. The resource map is The Government Contracts Toolkit.

A standing caution. Every dollar threshold in this checklist — certified cost or pricing data, simplified acquisition, commercial items, task order protest jurisdiction — is indexed and moves. Every agency supplement can change a FAR rule for that agency alone. Verify the current figure and the applicable supplement before relying on anything here.

Our running parties. Kestrel Systems (fictional), a 60-person engineering firm bidding its first prime contract; Bexar Fabrication (fictional), its machining subcontractor; Talon Integrated Services (fictional), the incumbent; and contracting officer Renata Vance (fictional) of the Federal Sustainment Agency (fictional).

Phase 1 — Registration, Representations, and Readiness

[ ] Confirm an active SAM.gov registration with a current unique entity identifier and correct banking data.
[ ] Confirm the CAGE code, and for foreign entities the NCAGE.
[ ] Complete the annual representations and certifications deliberately, with counsel reviewing each answer.
[ ] Verify no active exclusion for the entity, its principals, or any affiliate in SAM's exclusions list.
[ ] Confirm the NAICS codes and size self-certifications on the profile are accurate today, not at first registration.
[ ] Confirm any socioeconomic certification (8(a), HUBZone, SDVOSB, WOSB) is current and not expiring mid-procurement.
[ ] Confirm the accounting system is adequate for the contract type contemplated, and obtain an audit if cost-reimbursement work is the goal.
[ ] Confirm the timekeeping system segregates direct and indirect labor and supports floor checks.
[ ] Adopt and train a written code of business ethics and conduct and an internal control system.
[ ] Confirm insurance, bonding capacity, facility clearance, and cybersecurity posture against likely clause requirements.
[ ] Identify who in the company is authorized to sign and to certify, and record it.

Why it matters, and the traps. Representations are not paperwork; they are statements to the government, made under penalty, that support award and payment. A stale size self-certification carried forward from a smaller year is a False Claims Act theory waiting for a competitor's size protest to surface it. And an inadequate accounting system does not merely lose cost-type work — discovered mid-performance, it triggers payment withholding on the contract you already have. Fix these when nothing is pending.

Phase 2 — Reading the Solicitation

[ ] Read Section M first, then Section L, then Section C. Build a compliance matrix from M and L.
[ ] Identify the evaluation factors, subfactors, and their stated relative importance, including price to non-price.
[ ] Identify the award method: tradeoff, LPTA, or highest technically rated at a fair and reasonable price.
[ ] Identify whether price realism is announced for a fixed-price buy, and whether cost realism applies.
[ ] Read Section H line by line — special contract requirements hide unusual risk allocation.
[ ] Pull the clause matrix in Section I and identify every clause with a cost or rights consequence.
[ ] Identify data rights, software, and marking obligations and what the deliverables will default to if unmarked.
[ ] Identify wage determinations under the Service Contract Act or Davis-Bacon and confirm they are priceable.
[ ] Identify domestic sourcing, Section 889, and cybersecurity requirements that flow to the supply chain.
[ ] List every ambiguity, inconsistency, or unduly restrictive requirement and mark each patent or latent.
[ ] Calendar the question deadline, the closing time, and an internal deadline two weeks earlier.
[ ] Make a documented bid / no-bid decision that includes counsel's risk read, not only the capture team's.

Why it matters, and the traps. The solicitation is the last document you can change and the first one a protest will be measured against. A patent ambiguity you notice and do not raise is waived under Blue & Gold Fleet, L.P. v. United States, 492 F.3d 1308 (Fed. Cir. 2007), and will then be construed against you. The second trap is quieter: teams write to the work statement because it describes the job, while evaluators score against Section M. A technically superior proposal that does not map to the evaluation factors reliably loses to a worse one that does.

Phase 3 — Eligibility, Size, and Status

[ ] Confirm the assigned NAICS code and its size standard, and decide within 10 calendar days whether to appeal it.
[ ] Compute size using the correct measure — employees or receipts — over the full statutory lookback.
[ ] Add the receipts and employees of every affiliate, not only subsidiaries.
[ ] Test each affiliation basis: ownership, options and convertible instruments treated as exercised, common management, family identity of interest, economic dependence, and the newly organized concern rule.
[ ] Run the ostensible subcontractor analysis expressly and in writing before the team is fixed.
[ ] Confirm the size determination date — generally the date of the initial offer including price.
[ ] For a joint venture, confirm the written JV agreement contains every required provision before submission.
[ ] For a mentor-protégé JV, confirm SBA approval is in place and covers this work.
[ ] Confirm socioeconomic certifications are active and that ownership and control still satisfy the program rules.
[ ] Model the limitations on subcontracting against the actual staffing plan, counting only verified similarly situated entities.
[ ] Document the eligibility analysis in a memorandum that could be produced to SBA.

Why it matters, and the traps. Affiliation is the rule that disqualifies firms acting in good faith, because control need not be exercised to count and an unexercised option counts as if it were. The ostensible subcontractor rule then catches the best-assembled teams: if the incumbent sub performs the primary and vital work, supplies the program manager, and wrote the technical volume, SBA will treat the two firms as one. Structure the team for eligibility first and optimize the technical story inside that structure — the reverse order is how firms win awards they cannot keep.

Phase 4 — Teaming, Subcontracts, and Flowdowns

[ ] Decide the structure — prime/sub, joint venture, or mentor-protégé JV — on eligibility grounds, not convenience.
[ ] Execute an NDA before exchanging any pricing, technical, or personnel information.
[ ] Make the teaming agreement's scope, workshare, and price binding at signature, not an agreement to negotiate.
[ ] Include exclusivity and its duration, and address what happens if the sub is acquired mid-procurement.
[ ] Address whether the sub may bid as a prime or team with a competitor on the same solicitation.
[ ] Confirm each sub's size, status, and exclusion record independently — do not rely on its representation alone.
[ ] Identify the required flowdown clauses and flow only those, plus what the prime needs for its own protection.
[ ] Draft the payment clause so the prime's liability is conditional on recovery but expressly preserved — Severin-safe.
[ ] Address data rights and background IP ownership, marking obligations, and license scope to the government.
[ ] Obtain key personnel commitment letters from subcontractor employees named in the proposal.
[ ] Address subcontract consent requirements and the purchasing system approval status.
[ ] For construction, confirm Miller Act payment bond coverage and the notice mechanics for lower tiers.

Why it matters, and the traps. A teaming agreement that promises to negotiate a subcontract later is unenforceable in most states — Cyberlock Consulting, Inc. v. Information Experts, Inc., 939 F. Supp. 2d 572 (E.D. Va. 2013) — so the sub that wins you the award can renegotiate after it. The mirror-image trap is drafting the subcontract release so broadly that the prime has no residual liability, which extinguishes the pass-through claim under the Severin doctrine and leaves the sub with a loss and the prime with nothing to sponsor.

Phase 5 — Conflicts, Integrity, and Responsibility

[ ] Screen for organizational conflicts of interest across all three types: unequal access, impaired objectivity, biased ground rules.
[ ] Check whether the firm or any sub supported requirements development for this procurement.
[ ] Check whether performance would require evaluating its own or a competitor's work or products.
[ ] Identify any nonpublic information obtained through other contracts and whether it confers an unfair advantage.
[ ] Prepare a written OCI mitigation plan — firewall, personnel screening, certification — and submit it with the proposal if the solicitation permits.
[ ] Screen every former government employee on the team against the Procurement Integrity Act one-year restriction.
[ ] Run an intake review before any employment discussion with a current government official touching this buy.
[ ] Confirm no one holds source selection information or contractor bid or proposal information, and document the confirmation.
[ ] Review present responsibility exposure: pending investigations, adverse CPARS, unpaid taxes, terminations for default.
[ ] Confirm no principal or affiliate is suspended, proposed for debarment, or debarred.
[ ] Confirm the Byrd Amendment lobbying certification and disclosure are accurate.
[ ] Preserve a memorandum recording each screen and its result.

Why it matters, and the traps. OCI is one of the most successful protest grounds and one of the most foreseeable risks — it is nearly always created at the teaming stage, months before anyone thinks about it. Courts give real deference to a contracting officer's OCI analysis, Axiom Resource Management, Inc. v. United States, 564 F.3d 1374 (Fed. Cir. 2009), but only when the CO actually performed one, which means an offeror that surfaces and mitigates its own conflict early is far safer than one that hopes nobody notices. On procurement integrity, the violation usually occurs in a hallway conversation nobody documented.

Phase 6 — Building and Pricing the Proposal

[ ] Write to the compliance matrix, and have a non-author verify every Section L requirement is addressed.
[ ] Address every evaluation factor explicitly, using the solicitation's own vocabulary.
[ ] Substantiate past performance relevance — size, scope, complexity — rather than listing contracts.
[ ] Address predecessor, affiliate, and subcontractor past performance and explain why it should be credited.
[ ] Confirm every key person named is committed, and build a substitution protocol for the pre-award period.
[ ] Build the basis of estimate so each priced element traces to the technical approach.
[ ] Confirm the price is realistic against the proposed staffing — a low price with a rich technical solution invites a realism downgrade.
[ ] Screen the price for unbalanced line items.
[ ] Determine whether certified cost or pricing data is required or an exception applies, and document the exception.
[ ] If certification is required, run a documented sweep of all factual data immediately before price agreement.
[ ] Screen the cost build for unallowable costs under FAR Part 31 before they enter the proposal.
[ ] Reconcile the technical, management, past performance, and price volumes against one another.
[ ] Have counsel review every representation, certification, and assumption stated in the proposal.

Why it matters, and the traps. Proposals fail on internal inconsistency more often than on substance: a staffing table in the technical volume that does not match the labor hours in the price volume tells evaluators the offeror does not understand its own solution, and it is a legitimate weakness. On pricing, the defective-pricing failure is almost never fraud — it is a vendor quote that reached a buyer three days before agreement and never reached the pricing team. The sweep, documented and dated, is the whole defense, and it takes an afternoon.

Phase 7 — Questions, Amendments, and the Pre-Award Window

[ ] Submit written questions by the deadline for every ambiguity, restriction, and unpriceable requirement identified in Phase 2.
[ ] Phrase questions to create a record: state the ambiguity, the two readings, and the requested clarification.
[ ] Track the agency's answers and confirm each is incorporated by amendment rather than left in an email.
[ ] Re-run the Phase 2 analysis against every amendment; a new defect restarts the pre-award clock.
[ ] Decide, in writing, whether any remaining defect warrants a pre-award protest, and calendar the deadline.
[ ] Remember the rule: solicitation improprieties apparent on the face must be protested before the closing time.
[ ] Consider an agency-level protest first where speed and relationship preservation matter, but preserve the GAO clock.
[ ] Assess whether protesting the terms is worth the relationship cost — and make that a business decision, documented.
[ ] Acknowledge every amendment in the offer; failure can render the offer unacceptable.
[ ] Confirm any oral presentation rules, page limits, font and margin requirements, and file format constraints.
[ ] Monitor for a cancellation and reissue, which resets everything.

Why it matters, and the traps. This is the phase firms skip, and skipping it is why they lose protests later. The waiver rule is unforgiving: a defect you could have seen and did not challenge before proposals were due is gone, and the Federal Circuit has extended that principle well beyond the literal text of the solicitation. COMINT Systems Corp. v. United States, 700 F.3d 1377 (Fed. Cir. 2012). The instinct to avoid annoying the customer is understandable and it costs firms competitions they were entitled to win.

Phase 8 — Submission

[ ] Submit through the exact method the solicitation requires — portal, email, or hard copy — and no other.
[ ] Submit early; late is late, and the exceptions to the late-proposal rule are narrow and rarely available.
[ ] Verify the portal confirmation, file sizes, and that every volume actually uploaded and opens.
[ ] Confirm page counts, formats, and file naming conventions comply exactly.
[ ] Confirm the offer is signed by an authorized person and that the offer acceptance period is adequate.
[ ] Confirm all certifications and representations in the offer are current as of submission.
[ ] Retain a complete, timestamped submission archive, including everything transmitted and the confirmations.
[ ] Calendar the evaluation period, the anticipated award date, and the debriefing request window.
[ ] Preserve proposal development records — they matter for proposal-cost recovery in a sustained protest.
[ ] Brief the team that no one contacts the agency about the procurement except through the CO.

Why it matters, and the traps. The late-proposal rule is the cleanest loss in federal contracting: a complete, superior, fully compliant proposal that arrives four minutes late is simply not evaluated. Portal failures are common and they fail quietly — a volume that appears to upload and does not is discovered at award. Submit with hours to spare, verify each file opens from the portal side, and keep the confirmation.

Phase 9 — Award, Debriefing, and the Protest Clock

[ ] On notice of award or exclusion, request a debriefing in writing immediately and within the required window.
[ ] Submit written questions where enhanced debriefing procedures allow, and preserve the answers.
[ ] Treat the debriefing as evidence, not consolation: capture ratings, strengths, weaknesses, and the tradeoff rationale.
[ ] Start the 10-day clock analysis the moment any protest basis becomes known, before the debriefing concludes.
[ ] Identify the shorter window that preserves the CICA automatic stay, and decide with that date, not the outer date.
[ ] Test each candidate ground: unequal treatment, unstated criteria, unmeaningful discussions, inadequate tradeoff, OCI, flawed realism.
[ ] Test prejudice — a substantial chance of award but for the error. Bannum, Inc. v. United States, 404 F.3d 1346 (Fed. Cir. 2005).
[ ] Choose the forum: agency, GAO (100 days, automatic stay), or the Court of Federal Claims (no stay, broader record).
[ ] Confirm the award is not an order under a multiple-award vehicle subject to the statutory protest bar.
[ ] Consider a scope challenge if the award or a modification exceeds what the competed contract covered.
[ ] If the agency takes corrective action, evaluate whether it is reasonable and tailored — and calendar that protest separately.
[ ] File a size or status protest within five business days if the awardee's eligibility is questionable.

Why it matters, and the traps. More protests die on timeliness than on the merits, and the fatal mistake is waiting for the debriefing to end before analyzing grounds — the clock runs on knowledge, not on closure. The second trap is confusing disagreement with error. Evaluator judgment about technical merit gets substantial deference; what wins is comparative and procedural, meaning the agency did something to you it did not do to the awardee, or something Section M never said it would do.

Phase 10 — Start-Up and Administration Controls

[ ] Build a CO authority matrix naming who may direct work, who may change price or schedule, and who may only observe.
[ ] Distribute it to every project manager and require acknowledgment.
[ ] Establish discrete charge numbers for potential changes, opened on first direction, not at claim time.
[ ] Establish a daily documentation practice: what was directed, by whom, when, at what cost, with what schedule effect.
[ ] Baseline a CPM schedule and update it contemporaneously; it is the only reliable proof of delay and concurrency.
[ ] Calendar every clause notice period — changes, differing site conditions, suspension of work, stop-work.
[ ] Confirm government-furnished property and information delivery dates and document any slippage the day it occurs.
[ ] For cost-type work, implement limitation of cost and funds monitoring with an automatic notice trigger.
[ ] Implement unallowable cost screening and segregated accounts from day one.
[ ] Confirm subcontract flowdowns executed match the prime contract as awarded, including any changed clauses.
[ ] Calendar CPARS evaluation periods and assign an owner to rebut within the comment window.
[ ] Schedule a post-award orientation with the CO and record what was said about interpretation.

Why it matters, and the traps. Everything a contractor eventually recovers is proved with documents made before anyone knew there would be a dispute. Boards and the Court of Federal Claims say so openly, and it is why the total cost method exists — as a last resort for contractors who kept no records. The authority matrix is the cheapest control in the field: the most expensive sentence in government contracting is "the COR told us to."

Phase 11 — Changes, Notice, and Claims

[ ] On any direction outside the contract, notify the CO in writing the same day, naming who gave the direction.
[ ] State expressly that the contractor treats the direction as a change and reserves its rights.
[ ] Track the cost separately from the first hour and preserve the source records.
[ ] For differing site conditions, give written notice before the conditions are disturbed — this right is forfeited more than any other.
[ ] For delay, distinguish excusable (time) from compensable (time and money), and analyze concurrency on the CPM.
[ ] Test Eichleay prerequisites before pleading unabsorbed overhead: uncertain delay, standby, no replacement work.
[ ] Decide deliberately between a request for equitable adjustment and a certified claim, and record the reasoning.
[ ] Remember the cost consequence: REA preparation costs may be allowable; claim prosecution costs are not.
[ ] Remember the interest consequence: interest runs from the CO's receipt of the claim, not from the injury.
[ ] Build the claim from the cost records upward, and have someone independent test each element.
[ ] Confirm the claim states a sum certain, is signed by an authorized certifier, and is within six years of accrual.
[ ] Calendar 90 days to a board and 12 months to the Court of Federal Claims from receipt of the final decision.

Why it matters, and the traps. Notice provisions forfeit real money, and they forfeit it quietly: the field crew solves the problem, the schedule recovers, and the entitlement is gone. The certification trap is worse. A certified claim is a sworn statement, and a knowingly inflated one exposes the contractor to the CDA fraud provision, the False Claims Act, forfeiture of the entire claim under 28 U.S.C. § 2514, and criminal liability. Daewoo Engineering & Construction Co. v. United States, 557 F.3d 1332 (Fed. Cir. 2009), ended with a judgment against the contractor.

Phase 12 — Ongoing Compliance and Disclosure

[ ] Maintain the code of conduct, training, and internal control system as living documents, with attendance records.
[ ] Run an internal reporting mechanism and test whether people actually use it.
[ ] Assess any allegation against the mandatory disclosure standard — credible evidence of fraud, conflict of interest, bribery, gratuities, an FCA violation, or significant overpayment.
[ ] Decide the disclosure question on a defined timeline and record who owns it; delay is itself a debarment cause.
[ ] Preserve documents and conduct the investigation under privilege, quickly.
[ ] Monitor subcontractor compliance, including exclusion status, Section 889, and domestic content.
[ ] Track limitations on subcontracting compliance in real dollars during performance, not at closeout.
[ ] Track cost accounting practice changes — reorganizations and allocation base changes are the usual culprits.
[ ] Submit the incurred cost proposal within six months of fiscal year end and remediate business system findings promptly.
[ ] Rebut adverse CPARS narratives in the comment window; escalate to a CDA claim if the rating is unsupported.
[ ] Prepare a present responsibility package — remediation, discipline, controls — before any suspension notice arrives.
[ ] Run a closeout review: final invoices, property disposition, release of claims scope, and record retention.

Why it matters, and the traps. The ultimate sanction here is not damages, it is exclusion, and it turns on present responsibility rather than guilt. Mitigating factors are enumerated and they are all things a company must have done before the letter arrives: self-disclosure, cooperation, discipline, a compliance program that functions. A release of claims signed at closeout releases claims you have not yet identified, so scope it deliberately and reserve pending items by name.

Worked Example

Kestrel Systems (fictional) pursues Solicitation No. FSA-25-R-0117, a five-year, $84 million best-value services procurement issued by the Federal Sustainment Agency (fictional). The incumbent is Talon Integrated Services (fictional).

Phase 3. Kestrel has 61 employees; the assigned NAICS carries a 500-employee standard. But its planned partner Bexar Fabrication (fictional) holds an option to acquire 30% of Kestrel, which SBA treats as exercised. Counsel restructures the option into a non-convertible revenue share before the offer date. Bexar was also going to perform 58% of the work and supply the program manager — a textbook ostensible subcontractor problem. Kestrel moves the program manager in-house, reduces Bexar to 34%, and adds a second small subcontractor that is a similarly situated entity, bringing compliance with the 50% services limit to a documented 61% self-performance.

Phase 5. A retired FSA engineer applies to Kestrel. He served as the technical lead on the requirements package for this very solicitation. Counsel declines the hire for this procurement cycle and papers the decision. Kestrel also discloses in its proposal that a 2023 study contract gave it access to depot throughput data, and offers a firewall plan. The CO accepts it and documents an OCI analysis in the file.

Phase 7. Section M weights "Corporate Experience" toward contracts exceeding $50 million annually — a threshold no small business could meet. Kestrel submits a question. The agency amends to permit aggregation of relevant smaller contracts. That amendment, obtained for the price of one question, is what made the bid winnable.

Phase 9. Talon wins. At the debriefing, Kestrel learns the agency assigned it a significant weakness for "unproven surge capacity" — a concern never raised during discussions, though the record shows the agency raised an analogous staffing concern with Talon. Kestrel files at GAO on day 6, preserving the CICA stay, on two grounds: discussions were not meaningful, and the source selection decision compared adjectival ratings without explaining the 9% price premium. It pleads prejudice: as the second-ranked, lower-priced offeror, it had a substantial chance of award.

The outcome. On day 44 the agency takes corrective action — reopening discussions and requesting revised proposals. Kestrel does not get the award on reaward, but it does get a documented tradeoff and a clean evaluation record, and it recovers no costs. Talon retains the contract at a $2.1 million lower price.

Phase 11. Eighteen months later, as a Talon subcontractor on an adjacent effort, Kestrel is directed by a COR to re-machine 400 assemblies to a tolerance tighter than the specification. Kestrel notifies the CO in writing the same afternoon, opens charge number CC-14, and documents each rejection against the specification text. Its REA of $612,000 settles at $487,000 without certification — preserving the preparation costs as allowable and avoiding the fraud exposure that a padded certified claim would have created.

What made it work: restructuring the option and the workshare before the offer date, declining a hire that would have created a procurement integrity problem, spending one question to fix an evaluation factor, filing on day 6 rather than day 10, and treating the COR's direction as a documented change on the day it happened rather than a grievance eight months later.

Bidding on a Federal Contract: A Compliance Checklist

Phase 1 — Registration, Representations, and Readiness

Phase 2 — Reading the Solicitation

Phase 3 — Eligibility, Size, and Status

Phase 4 — Teaming, Subcontracts, and Flowdowns

Phase 5 — Conflicts, Integrity, and Responsibility

Phase 6 — Building and Pricing the Proposal

Phase 7 — Questions, Amendments, and the Pre-Award Window

Phase 8 — Submission

Phase 9 — Award, Debriefing, and the Protest Clock

Phase 10 — Start-Up and Administration Controls

Phase 11 — Changes, Notice, and Claims

Phase 12 — Ongoing Compliance and Disclosure

Worked Example

Related Documents