Checklist · Government Contracts

Small Business Set-Asides and SBA Certification: A Practical Checklist

15 U.S.C. § 632(a)(2)(C)(ii)(II)

Type
Checklist
Jurisdiction
National
Date
2024-09-20
Topic
Government Contracts

Federal agencies steer a large share of prime contract dollars to small businesses, but the door only opens for firms that are actually small under the right NAICS size standard and that hold the right certification. This checklist walks the whole path: picking the NAICS code, surviving the affiliation rules that quietly disqualify more applicants than any other doctrine, calculating receipts or employees correctly, choosing among the 8(a), HUBZone, WOSB/EDWOSB, and SDVOSB/VOSB programs, and getting certified without overstating anything. It then covers the obligations that attach after award: the limitations on subcontracting, joint ventures and the SBA mentor-protege program, the ostensible subcontractor rule, recertification, and defending a size or status protest. Because size and status representations are enforceable through the False Claims Act and the criminal code, the document treats accuracy as a compliance problem, not a marketing problem. Figures, size standards, and certification platforms change frequently; verify every number against the current regulation before you rely on it.

Small Business Set-Asides and SBA Certification: A Practical Checklist

Government Contracts > Small Business Programs | Published 20 September 2024 - Updated 7 February 2026 | UpLaw - uplaw.us

Every year the federal government reserves an enormous share of its buying for small business. The certification is easy to want and easy to claim. What sinks companies is not the application — it is the affiliation rule they never read, and the certification they signed anyway.

Keywords: SBA certification, set-aside, size standard, NAICS code, affiliation, 8(a), HUBZone, WOSB, EDWOSB, SDVOSB, VetCert, limitations on subcontracting, mentor-protege, ostensible subcontractor, size protest, False Claims Act

How to use this checklist

Work the phases in order. Phases 1–3 decide whether you are small at all — and they are where most firms get an unpleasant surprise, because size is not a self-assessment, it is a regulatory calculation that sweeps in companies you do not own. Phases 4–8 cover choosing and obtaining a socioeconomic certification. Phases 9–14 cover the duties that attach after you win: performance-of-work limits, joint ventures, recertification, and protests.

For the surrounding procurement framework — how solicitations are structured, how evaluations work, how disputes are resolved — read this alongside Government Contracts: A Comprehensive Guide to Federal Procurement and use The Government Contracts Toolkit as the map of everything else.

Our running example. Wrenfield Technical Services, LLC is a five-year-old IT services firm. Dana Kestrel, a U.S. citizen, owns 60%. A private investor, Cormorant Capital LLC, owns the other 40% and sits on the board. Wrenfield wants to compete for Women-Owned Small Business set-asides and eventually to enter the 8(a) program. It looks like a textbook candidate. It is, as we will see, a textbook problem.

Phase 1 — Determine your NAICS code and the applicable size standard

  • [ ] Identify the North American Industry Classification System (NAICS) code that best describes the principal purpose of the work you sell — not your company's general self-description.
  • [ ] Look up the size standard assigned to that NAICS code in the SBA table at 13 C.F.R. § 121.201. Note whether it is a receipts-based standard (expressed in dollars of average annual receipts) or an employee-based standard (expressed in number of employees).
  • [ ] Confirm that the code you rely on for marketing matches the code the contracting officer actually assigns in each solicitation — the CO's assignment, not yours, governs eligibility for that procurement (FAR 19.303).
  • [ ] Check whether any exception applies to the code (the size-standard table carries footnoted exceptions for particular subsets of work, and information-technology value-added resellers and similar categories have their own rules).
  • [ ] Register in SAM.gov and complete the representations and certifications; your size representation there is a live legal statement, not a form field.
  • [ ] If you believe the CO assigned the wrong NAICS code to a solicitation, calendar the NAICS appeal deadline — appeals go to SBA's Office of Hearings and Appeals and must be filed within 10 calendar days after issuance of the solicitation (13 C.F.R. § 121.1103).

Why it matters, and the traps

The NAICS code is the hinge on which everything turns. The same company can be small for one code and large for the next, because the standards range from a few million dollars of receipts to hundreds of millions, and from 100 employees to over 1,500. A firm that calls itself "small" in the abstract has said nothing.

The trap is passivity. Contracting officers select NAICS codes quickly, sometimes inaptly, and a code that is a poor fit can price you out of a competition you should have won — or pull in a swarm of larger competitors on a procurement that should have been reserved for firms your size. The NAICS appeal window is ten days from issuance of the solicitation, and it closes without ceremony. If the code looks wrong, decide fast; complaining about it after award is not an option.

Phase 2 — The affiliation rules: the trap that disqualifies most applicants

  • [ ] Read 13 C.F.R. § 121.103 in full. Affiliation exists where one concern controls or has the power to control another, or a third party controls or has the power to control both. Control need not be exercised.
  • [ ] List every entity that owns 50% or more of you, and every entity you own 50% or more of.
  • [ ] Identify the largest single minority block of ownership where the rest of the equity is widely dispersed — SBA may treat that holder as controlling.
  • [ ] Treat all stock options, convertible securities, and agreements to merge as exercised or consummated (13 C.F.R. § 121.103(d)). A convertible note that would give an investor 55% is treated today as 55%.
  • [ ] Screen for negative control: does any minority holder have a veto or supermajority right over ordinary-course decisions — the budget, hiring and firing, borrowing, entering contracts, distributions? If so, SBA may find that holder controls you regardless of percentage.
  • [ ] Confirm that any protective rights held by minority investors are limited to the narrow "extraordinary circumstances" SBA permits (broadly: adding a new equity stakeholder, dissolution, sale of the company or substantially all assets, merger, and declaring bankruptcy). Verify the current list and its exact wording in the applicable part (e.g., 13 C.F.R. § 127.202 for WOSB control; 13 C.F.R. § 124.106 for 8(a)).
  • [ ] Screen for common management — shared officers, directors, or managing members across firms.
  • [ ] Screen for identity of interest — family members with common business dealings, and economic dependence (SBA applies a rebuttable presumption of identity of interest where a concern derives a large majority of its receipts from another concern; the threshold has been stated at roughly 70%, and it is rebuttable. Confirm the current threshold, the rebuttal, and the safe harbors in 13 C.F.R. § 121.103(f) — do not rely on the number quoted here.)
  • [ ] Screen for the newly organized concern rule — a spin-off staffed and financed by a former employer's principals is presumptively affiliated with the former employer.
  • [ ] Screen for franchise and license agreements that give the franchisor control over your operations.
  • [ ] Remember: affiliates' receipts and employees are counted in full, not pro rata.

Why it matters, and the traps

This is the phase people skip, and it is the phase that ends the story. Affiliation is not a percentage test with a bright line; it is a totality-of-the-circumstances control inquiry, and SBA reads "power to control" generously against the applicant.

Wrenfield's problem. Cormorant Capital owns 40% of Wrenfield — comfortably a minority. But Cormorant also owns 55% of Talus Systems, Inc., a 900-employee IT integrator. A third party (Cormorant) controls Talus and, if the Wrenfield operating agreement gives Cormorant a veto over the annual budget and over hiring the general manager, controls Wrenfield too. That is common-ownership plus negative-control affiliation. Talus's 900 employees and its receipts are now Wrenfield's, and Wrenfield is not small under any IT services standard. Worse, roughly 78% of Wrenfield's revenue last year came from subcontracts under Talus primes — economic dependence, an independent basis for affiliation.

None of this appears on Wrenfield's balance sheet. It appears in the operating agreement and the customer concentration table. Fix it before certifying: rewrite the veto rights down to the permitted extraordinary circumstances, diversify away from the affiliated customer, or restructure the investment. If your business sits inside a multi-entity structure, work through Running Multiple Businesses Under One Structure: A Deep Dive into Holding, Operating, and Parent Companies with affiliation in mind — the structure that is elegant for tax and liability is often fatal for SBA size.

Phase 3 — Calculate size correctly

  • [ ] For receipts-based standards, compute average annual receipts over the most recent completed fiscal years using the statutory averaging period. The Small Business Runway Extension Act moved the default from three years to five (15 U.S.C. § 632(a)(2)(C)(ii)(II)); SBA implemented five-year averaging by regulation. Confirm the current period and method in 13 C.F.R. § 121.104.
  • [ ] Use total income plus cost of goods sold as reported to the IRS, less the specific exclusions the regulation allows (e.g., net capital gains, taxes collected for a taxing authority, proceeds of transactions between a concern and its affiliates). Do not deduct ordinary business expenses.
  • [ ] For employee-based standards, compute the average number of all persons employed — full-time, part-time, temporary, and leased — on a per-pay-period basis over the 24 months preceding the relevant date (13 C.F.R. § 121.106). This is a headcount, not a full-time-equivalent calculation. Two half-time employees are two employees.
  • [ ] Add in the receipts or employees of every affiliate identified in Phase 2, for the same period.
  • [ ] Fix the date of self-certification — size is generally determined as of the date you submit your initial offer including price (13 C.F.R. § 121.404). Growth after that date does not retroactively make you large on that contract.
  • [ ] Document the calculation and keep the workpapers. You may need to hand them to an SBA Area Office on five business days' notice.

Why it matters, and the traps

Two errors recur. The first is netting: firms compute "receipts" as revenue minus expenses because that is what feels like income. SBA does not care what feels like income. The second is the FTE instinct — a staffing company with 200 part-timers is a 200-employee firm to SBA, not a 100-employee firm.

The third and quietest error is the date. Size is measured as of the date of the offer, which means a firm that was small when it bid and large when it won is small for that contract — and a firm that fixed its affiliation problem the week after it bid did not fix it at all.

Phase 4 — Choose the program

  • [ ] Confirm you are small under the relevant NAICS standard. Every socioeconomic program requires this as a floor. There is no such thing as a large 8(a) firm.
  • [ ] Map your eligibility across the four principal programs:
Program Core eligibility Statute / regulation Key benefit
8(a) Business Development 51%+ owned and controlled by socially and economically disadvantaged individual(s); business potential for success; nine-year term 15 U.S.C. § 637(a); 13 C.F.R. Part 124 Sole-source and competitive 8(a) awards; business development assistance
HUBZone Principal office in a HUBZone; at least 35% of employees reside in a HUBZone 15 U.S.C. § 657a; 13 C.F.R. Part 126 Set-asides, sole source, and a price evaluation preference in full and open competition
WOSB / EDWOSB 51%+ unconditionally owned and controlled by one or more women who are U.S. citizens (EDWOSB adds economic disadvantage) 15 U.S.C. § 637(m); 13 C.F.R. Part 127 Set-asides and sole source in designated NAICS codes
SDVOSB / VOSB 51%+ owned and controlled by a veteran (service-disabled veteran for SDVOSB) 15 U.S.C. § 657f; 13 C.F.R. Part 128 Government-wide SDVOSB set-asides; VA "Veterans First" priority
  • [ ] Note that certifications stack. One firm can be an 8(a), HUBZone, and WOSB concern simultaneously and compete on all three lanes.
  • [ ] Check the WOSB/EDWOSB eligible NAICS list — WOSB set-asides are available only in industries SBA has designated as underrepresented, and EDWOSB set-asides in a narrower subset.
  • [ ] Understand the underlying "rule of two": the contracting officer must set an acquisition aside for small business when there is a reasonable expectation of offers from at least two responsible small businesses at fair market prices (FAR 19.502-2).

Why it matters, and the traps

The programs are gates, not guarantees. A certification does not create work; it lets you into a competition. Firms routinely spend nine months on an 8(a) application and then discover that their agency buys nothing under their NAICS code through 8(a) set-asides. Do the market research first — pull the agency's forecast, run the historical award data, and confirm there is a set-aside pipeline worth chasing before you build a compliance program around it.

Phase 5 — 8(a): disadvantage, ownership, control, and the nine-year term

  • [ ] Confirm ownership: at least 51% direct and unconditional ownership by one or more disadvantaged individuals. Ownership through a holding company or a trust is tightly constrained.
  • [ ] Confirm control: the disadvantaged owner must hold the highest officer position, work full time in the business during normal working hours, and possess the managerial experience to run it. Outside employment is a red flag.
  • [ ] Establish social disadvantage by a narrative of specific, chronic, personally experienced bias — not group membership alone. In Ultima Servicios Corporation v. U.S. Department of Agriculture (S.D. Ohio 2023), the court held the 8(a) program's rebuttable presumption of social disadvantage for members of designated groups unconstitutional; SBA suspended reliance on the presumption and now requires individualized narratives. Verify SBA's current posture before you draft.
  • [ ] Establish economic disadvantage against the thresholds in 13 C.F.R. § 124.104 (adjusted net worth, three-year average adjusted gross income, and total assets, with the equity in the primary residence and the ownership interest in the applicant firm excluded from net worth). These dollar figures are adjusted; confirm the current numbers in the regulation.
  • [ ] Confirm the firm has been in business long enough and can show potential for success.
  • [ ] Understand the term: the 8(a) program runs a maximum of nine years, with no second bite. Plan the exit on day one.
  • [ ] Calendar annual reviews, the business plan updates, and the requirement to report changes in ownership or control.

Why it matters, and the traps

The constitutional ground has moved. Adarand Constructors, Inc. v. Peña, 515 U.S. 200 (1995), subjected federal race-conscious programs to strict scrutiny; the D.C. Circuit later sustained the 8(a) statute against a facial equal protection challenge in Rothe Development, Inc. v. Department of Defense (2016); and after Students for Fair Admissions, Inc. v. President and Fellows of Harvard College, 600 U.S. 181 (2023), the presumption-based mechanics of 8(a) drew fresh litigation and the Ultima injunction followed. The program exists; the shortcut into it does not. Assume you are writing a narrative and build the record.

The operational trap is control. SBA reads "control" as actual, full-time, day-to-day, unrebutted control by the disadvantaged owner. A non-disadvantaged minority owner who is the technical rainmaker, holds the clearances, guarantees the line of credit, and signs the leases will be found to control the company no matter what the cap table says. Clean this up in the governing documents and in fact — see Board Governance, Minutes, and Corporate Formalities: A Practical Checklist for the recordkeeping that makes a control story credible, and Incorporating a Startup the Right Way: A Founder's Legal Checklist if you are structuring the entity now.

Phase 6 — HUBZone: principal office, employee residency, and recertification

  • [ ] Confirm your principal office — where the greatest number of employees perform their work (excluding, for construction and service firms, employees at contract job sites) — sits in a designated HUBZone.
  • [ ] Confirm at least 35% of employees reside in a HUBZone. Count every employee; residency means more than a mailing address — SBA looks for evidence of actual, sustained residence with an intent to live there, and applies a minimum-duration requirement. Verify the current duration and documentation standards in 13 C.F.R. Part 126 before you certify.
  • [ ] Check the HUBZone map for redesignation — an area's designation can lapse, and a lapse can un-qualify you. Track the expiration dates for your office and your employees' addresses.
  • [ ] Understand the certification cycle: HUBZone status is examined at application, revalidated on SBA's periodic cycle, and paired with an obligation to keep making a good-faith effort to sustain HUBZone residency during contract performance (historically framed as an "attempt to maintain" floor). This framework has been overhauled more than once and is still being adjusted — confirm the operative recertification cadence and the current residency floor in 13 C.F.R. Part 126 rather than relying on any figure quoted here.
  • [ ] Note the price evaluation preference: in full and open competition, a HUBZone firm's price may be evaluated with a 10% preference against non-small offerors (FAR 19.1307).
  • [ ] Maintain HUBZone employee residency documentation contemporaneously — leases, utility bills, voter registration, driver's licenses.

Why it matters, and the traps

HUBZone is the only program whose eligibility depends on facts you do not fully control: where a map says your address is, and where your employees choose to live. A single senior hire who commutes from outside the zone can drop you below 35%. A map redesignation can move the zone out from under a principal office you signed a seven-year lease on.

Treat HUBZone as a standing operational obligation with an owner inside the company, a monthly residency roster, and a hiring policy that accounts for it. Firms that treat it as a certificate on the wall lose it in an examination.

Phase 7 — WOSB/EDWOSB and SDVOSB/VOSB

  • [ ] WOSB/EDWOSB. Confirm 51%+ unconditional and direct ownership by one or more women who are U.S. citizens, and that a woman manages day-to-day operations and makes long-term decisions.
  • [ ] Confirm the ownership is unconditional — no options, no unexercised rights, no agreements that would divest it on the happening of an event.
  • [ ] Understand that self-certification for WOSB/EDWOSB set-asides has been eliminated. You must be certified by SBA or by an SBA-approved third-party certifier (13 C.F.R. Part 127). Registering in SAM as a woman-owned business is not a certification.
  • [ ] For EDWOSB, meet the economic-disadvantage thresholds (aligned with the 8(a) figures — verify the current numbers).
  • [ ] SDVOSB/VOSB. Confirm 51%+ ownership and control by one or more veterans; for SDVOSB, by service-disabled veterans, with the service-connected disability established through VA records.
  • [ ] Obtain SBA certification through the Veteran Small Business Certification program (13 C.F.R. Part 128). Certification authority moved from the VA's Center for Verification and Evaluation to SBA under the FY2021 NDAA, and the old self-certification path for SDVOSB set-asides has been phased out. Verify the current platform and grace-period status.
  • [ ] For VA procurements, note the Veterans First Contracting Program priority (38 U.S.C. §§ 8127–8128). In Kingdomware Technologies, Inc. v. United States, 579 U.S. 162 (2016), the Supreme Court held the VA's "rule of two" is mandatory — the VA must set an acquisition aside for veteran-owned firms when two will bid at a fair price, even after it has met its contracting goals, and even for orders under the Federal Supply Schedule.
  • [ ] Address the surviving-spouse and permanent-disability accommodations if they apply to your ownership structure.

Why it matters, and the traps

The single biggest change of the last several years is the death of self-certification. Firms that competed for WOSB and SDVOSB set-asides for a decade on a SAM checkbox are now ineligible unless SBA has certified them — and an award to an uncertified firm is a status protest waiting to happen, or worse, a false certification.

Wrenfield again. Dana Kestrel owns 60%; a woman owns a majority; the WOSB box looks checkable. It is not. Cormorant's veto rights mean Kestrel does not control the firm within the meaning of 13 C.F.R. Part 127, and the Talus affiliation means Wrenfield is not small in the first place. Certifying WOSB status in that posture is not an aggressive reading of a gray area. It is a false statement.

If you are structuring or selling a certified firm, the veteran-owner and disability documentation issues intersect with the broader framework in Military and Veterans Law: A Comprehensive Guide to USERRA, the SCRA, and VA Benefits and The Military and Veterans Law Toolkit.

Phase 8 — Apply and certify accurately

  • [ ] Assemble the application package: governing documents, cap table, tax returns, financial statements, resumes, disability or citizenship documentation, and the narratives.
  • [ ] Reconcile every document against every other. SBA analysts read the operating agreement against the tax return against the resume, and inconsistency reads as concealment.
  • [ ] Have counsel review the size and affiliation analysis and the control analysis before anything is signed.
  • [ ] Understand what you are signing. A false size or status certification exposes the firm and the individuals to:
    • the False Claims Act, 31 U.S.C. § 3729 — treble damages plus per-claim civil penalties, enforceable by the government or by a whistleblower relator;
    • criminal liability under 15 U.S.C. § 645 (false statements to SBA), 18 U.S.C. § 1001, and 18 U.S.C. § 287;
    • the statutory presumption of loss — for willful misrepresentation of size or status, the government's loss is presumed to equal the total amount expended on the contract (15 U.S.C. § 632(w)); and
    • suspension and debarment under FAR Subpart 9.4.
  • [ ] Recognize the damages exposure. Courts have accepted a fraudulent-inducement theory in which the government's damages are the full amount it paid — not the difference between what it paid and what the work was worth. The Fifth Circuit applied that theory in the Longhi case (2009), holding that a firm that lied its way into SBIR awards owed the government everything it received. Under Universal Health Services, Inc. v. United States ex rel. Escobar, 579 U.S. 176 (2016), the question is materiality — and a set-aside eligibility representation goes to the very reason the award exists.
  • [ ] Build the certification into your compliance program with a named owner and an annual re-verification, using The Corporate Compliance Toolkit as the framework.

Why it matters, and the traps

Everything else in this checklist is administrative. This phase is criminal. The government treats set-aside fraud as theft from the intended beneficiaries, and the enforcement pattern is consistent: a disappointed competitor files a protest, the protest reveals a pass-through arrangement, and the protest becomes a qui tam. If the letter arrives, do not improvise — see Responding to a Government Subpoena or Investigation: A Practical Checklist and, for the exposure landscape, White-Collar Crime and Corporate Criminal Liability: A Comprehensive Guide.

Phase 9 — The limitations on subcontracting

  • [ ] Identify the applicable performance-of-work percentage under 13 C.F.R. § 125.6 and FAR 52.219-14. The framework limits the portion of the amount paid by the government that the prime may pay to firms that are not similarly situated entities:
    • Services (except construction): no more than 50%
    • Supplies (other than from a regular dealer / nonmanufacturer): no more than 50% of the amount paid, excluding the cost of materials
    • General construction: no more than 85%, excluding the cost of materials
    • Special trade construction: no more than 75%, excluding the cost of materials
  • [ ] Confirm the definition of a similarly situated entity: a subcontractor that holds the same small business program status as the prime for that set-aside and is itself small under the NAICS code the prime assigns to the subcontract (13 C.F.R. § 125.1). Work performed by a similarly situated entity does not count against the limit.
  • [ ] For supply contracts, check the nonmanufacturer rule (13 C.F.R. § 121.406) and any applicable class waiver.
  • [ ] Build the compliance math into the price and the staffing plan at proposal time, not after award.
  • [ ] Track actual performance against the limit throughout the period, including options, and keep the evidence.
  • [ ] Note the penalty for willful violation: a fine of the greater of $500,000 or the dollar amount expended on the subcontract, plus FCA exposure (15 U.S.C. § 645(d)).

Why it matters, and the traps

The limitation on subcontracting is the anti-pass-through rule, and it is the rule the government enforces hardest. A small prime that wins a set-aside and then hands 80% of the work to a large integrator has not won a contract; it has rented its certification. That is the paradigm set-aside fraud case.

The two technical traps: (1) the percentage is measured against the amount paid by the government, not against labor hours or headcount, and it is a contract-level, not a task-level, calculation; and (2) similarly situated status is specific to the set-aside. On a WOSB set-aside, your small-but-not-WOSB subcontractor is not similarly situated, and every dollar you pay it counts against your 50%.

Get the teaming and subcontract paper right up front — nondisclosure and teaming documents are where the work-share commitments actually live, and Building an Enforceable NDA Clause by Clause: A Practical Checklist covers the confidentiality layer. The proposal-side mechanics are in Bidding on a Federal Contract: A Proposal and Compliance Checklist.

Phase 10 — Joint ventures and the SBA mentor-protégé program

  • [ ] Understand the default: parties to a joint venture are generally affiliated for size purposes, which would make a small-plus-large JV large — unless an exception applies.
  • [ ] Use the exceptions. A JV between a protégé and its SBA-approved mentor is excepted from affiliation for purposes of the covered contract (13 C.F.R. § 121.103(h) and § 125.9). This is the central benefit of the mentor-protégé program.
  • [ ] Confirm the mentor-protégé mechanics before you rely on them: SBA merged the former 8(a) and All Small mentor-protégé programs into a single SBA Mentor-Protégé Program; a mentor may take an equity stake in the protégé (historically up to 40%); and agreements run in limited terms. Verify the current duration, equity cap, and application process — these rules have changed repeatedly.
  • [ ] Put the JV agreement in writing and include every provision the regulation requires (13 C.F.R. § 125.8, plus the program-specific sections: § 124.513 for 8(a), § 126.616 for HUBZone, § 127.506 for WOSB, § 128.402 for SDVOSB).
  • [ ] Confirm the ownership and profit split: the small business partner must own at least 51% of the JV and receive at least 40% of the profits, and the JV must be unpopulated (or populated only with administrative personnel).
  • [ ] Confirm the work split: the small business partner must perform at least 40% of the work done by the JV partners — and that work must be more than administrative.
  • [ ] Designate the small business partner's employee as the JV project manager and name them in the agreement.
  • [ ] Check the limit on how many contracts a specific JV may be awarded over its life, and structure new JVs accordingly. Confirm the current rule — the "three awards in two years" framework has been revised.
  • [ ] Perform the limitation-on-subcontracting analysis at the JV level, treating the JV as the prime.

Why it matters, and the traps

The mentor-protégé JV is the most powerful tool in the small business world: it lets a $6 million firm bid a $200 million program alongside a large partner without losing its size status. It is also the most heavily policed, because it is the most abused.

The failure mode is the JV that exists on paper. If the mentor writes the proposal, staffs the program, runs the finances, and employs the "JV project manager" in all but name, SBA and the Court of Federal Claims will look through it. The 40%-of-the-partners'-work requirement is not satisfied by the protégé billing 40% of the hours in low-skill roles; SBA looks at whether the protégé is performing work that is substantive and consistent with its role. Document the protégé's actual scope, staffing, and decision-making from kickoff.

Phase 11 — The ostensible subcontractor rule

  • [ ] Apply the rule at the proposal stage: where a subcontractor performs the primary and vital requirements of a contract, or where the prime is unusually reliant on the subcontractor, SBA treats them as joint venturers — and therefore as affiliates — for that contract (13 C.F.R. § 121.103(h)).
  • [ ] Test your own proposal against the factors SBA and its Office of Hearings and Appeals apply: who will perform the discriminators of the work; whose incumbent employees will fill the key positions; who wrote the technical approach; who holds the past performance being relied on; who bears the management responsibility; what the work-share percentages actually are; whether the prime lacks the capability to perform without this subcontractor.
  • [ ] Watch the incumbent-capture pattern: a small prime that proposes to hire the large incumbent's workforce, keep the incumbent's management in place, and subcontract the core scope back to the incumbent is the archetype of an ostensible-subcontractor finding.
  • [ ] Make sure the prime's proposal narrative and the subcontract's actual scope tell the same story. Protesters read both.
  • [ ] Remember the rule is contract-specific — losing on ostensible subcontractor does not end your small business status generally, but it does end your award.

Why it matters, and the traps

Ostensible subcontractor is where a technically flawless certification dies. Wrenfield may be small, may be certified, and may still lose an award because it proposed Talus to perform the systems-engineering scope that is the heart of the contract, with a Talus program manager and Talus's past performance carrying the proposal. On that contract, Wrenfield and Talus are affiliates, Wrenfield is large, and the award goes to the next offeror.

The defense is built at capture, not at protest: put your own people in the key positions, own the technical approach, keep the discriminating scope in-house, and keep the work-share on the right side of the limitation on subcontracting.

Phase 12 — Maintain eligibility: recertification and changes in ownership

  • [ ] Calendar the annual obligations for each certification (8(a) annual review; HUBZone annual recertification; program examinations).
  • [ ] Recertify size when a merger, acquisition, or sale occurs — the regulation requires recertification within a short window after the transaction (13 C.F.R. § 121.404). Build this into your closing checklist and into diligence; see Conducting Merger and Acquisition Due Diligence: A Practical Checklist.
  • [ ] Recertify on long-term contracts — including at the five-year point and prior to exercise of options — and understand the consequences of a disqualifying recertification.
  • [ ] Verify the current consequence rules. SBA's recent rulemaking substantially tightened what happens after a firm recertifies as other than small: the agency generally may no longer count the award toward its small business goals, and the firm can lose eligibility for future set-aside orders under the vehicle. This is a live and consequential area — confirm the operative rule and its effective date before you paper a deal.
  • [ ] Report changes in ownership or control to SBA where required (8(a) firms need prior approval for certain changes).
  • [ ] Reassess affiliation whenever you take investment, grant options, sign a large teaming agreement, or become heavily dependent on a single customer.

Why it matters, and the traps

This phase is where the money is, because it is where the exit is. A firm that has spent nine years building a $40 million book of set-aside contracts is worth a great deal — until the acquisition triggers a recertification that turns the backlog into a liability for the buyer. Under the current framework, "we'll ride the contracts out as small" is no longer a safe assumption. Price the recertification consequence into the deal, or structure around it, before the LOI.

Phase 13 — Size protests and status protests

If you are protesting:

  • [ ] Confirm you are an interested party — generally an offeror the contracting officer has not eliminated from consideration.
  • [ ] File on time. A size protest must be received by the contracting officer within five business days after bid opening (sealed bidding) or after notification of the apparent successful offeror (negotiated procurement) — 13 C.F.R. § 121.1004; FAR 19.302.
  • [ ] Make the protest specific. A protest that merely asserts "we think they are large" will be dismissed. Plead facts: the affiliate, the ownership, the veto right, the subcontractor, the incumbent capture.
  • [ ] File status protests (8(a), HUBZone, WOSB/EDWOSB, SDVOSB) with the contracting officer for referral to SBA, under the applicable program part (13 C.F.R. §§ 126.801, 127.600, 128.500 et seq.).
  • [ ] Preserve the appeal: SBA Area Office size determinations are appealable to SBA's Office of Hearings and Appeals within 15 calendar days of receipt (13 C.F.R. § 134.304).
  • [ ] Consider whether the real vehicle is a GAO or Court of Federal Claims bid protest instead — see Filing a Bid Protest: A Practical Checklist.

If you are defending:

  • [ ] Respond to the SBA Area Office within the deadline it sets — typically three business days. This is brutally short and there is no meaningful grace.
  • [ ] Produce the SBA Form 355, the tax returns, the cap table, the governing documents, the subcontract, and the teaming agreement.
  • [ ] Tell one story. Contradictions between the proposal and the corporate documents are what lose size cases.
  • [ ] Do not create documents after the protest is filed and present them as contemporaneous. That converts a size problem into a fraud problem.

Why it matters, and the traps

Size protests are decided fast, on paper, by an agency that does not owe you an evidentiary hearing. The three-day response window means the entire defense must exist before the protest arrives — the affiliation memo, the clean operating agreement, the size calculation workpapers, the residency roster. Firms that have that file win. Firms that have to build it in seventy-two hours lose.

Phase 14 — Graduation and the transition off set-asides

  • [ ] Model the graduation date from day one: the 8(a) term is nine years, and size growth will push you past the standard in your core NAICS codes well before you feel large.
  • [ ] Diversify the NAICS codes you compete under — a firm may remain small under an adjacent standard with a higher threshold.
  • [ ] Build full and open past performance while you still have set-aside revenue. The firm that only ever won set-asides has no evidence it can win anything else.
  • [ ] Flip the model: become the large partner in mentor-protégé JVs, and the prime that small firms want to team with.
  • [ ] Pursue multiple-award vehicles and unrestricted IDIQs before the cliff, not after.
  • [ ] Reassess the corporate structure with an eye toward the exit; consult The Small Business Legal Toolkit for the general business-law layer and Classifying Workers: Employee or Independent Contractor — A Practical Checklist for the staffing model that supports the performance-of-work math.

Why it matters, and the traps

The set-aside cliff is real and it is predictable, which is why falling off it is inexcusable. Companies build their entire capture organization around a program that ends on a known date and then discover, in year nine, that they have never written a proposal that had to beat a large business on the merits. Start that in year four.

Common mistakes to avoid

  1. Treating size as a self-assessment. It is a calculation, and it includes companies you do not own.
  2. Ignoring negative control. Investor veto rights over ordinary-course decisions create affiliation and destroy socioeconomic control. Narrow them to the permitted extraordinary circumstances.
  3. Forgetting convertible instruments. Options and convertible notes are treated as exercised. The cap table SBA sees is the fully diluted one — and worse.
  4. Netting expenses out of "receipts." Receipts are total income plus cost of goods sold, less only the enumerated exclusions.
  5. Counting FTEs instead of heads. Part-time and temporary workers each count as one employee.
  6. Relying on self-certification for WOSB or SDVOSB. It is gone. Get certified by SBA (or an approved third-party certifier for WOSB).
  7. Missing the ten-day NAICS appeal window. Once it closes, the code is the code.
  8. Blowing the limitation on subcontracting. Measure against the amount paid by the government, and remember that "similarly situated" is set-aside-specific.
  9. Papering a joint venture that the mentor actually runs. The 51% ownership, 40% profits, 40%-of-partner-work, and named-project-manager requirements are checked, and they are checked against reality.
  10. Proposing the incumbent as the subcontractor for the vital work. That is the ostensible-subcontractor rule, and it is the most common way a small firm loses an award it "won."
  11. Selling the company without modeling recertification. The backlog can evaporate at closing.
  12. Improvising when the qui tam arrives. Size and status representations are FCA-enforceable and criminally enforceable. Build the compliance record before you need it.

The consolidated set-aside checklist

  • [ ] NAICS code identified; size standard confirmed at 13 C.F.R. § 121.201; receipts vs. employee basis known
  • [ ] NAICS appeal deadline (10 days from solicitation issuance) diaried for each competition
  • [ ] Full affiliation screen run: majority ownership, largest minority block, options/convertibles, negative control, common management, identity of interest, economic dependence, newly organized concern, franchise agreements
  • [ ] Investor veto rights narrowed to permitted extraordinary circumstances
  • [ ] Size calculated including all affiliates; receipts = total income + COGS; employees = 24-month headcount average
  • [ ] Size measured as of the date of the initial offer including price
  • [ ] Program(s) selected; market research confirms a real set-aside pipeline in your NAICS codes
  • [ ] 8(a): 51% ownership, full-time control, social disadvantage narrative, economic-disadvantage thresholds verified, nine-year clock started
  • [ ] HUBZone: principal office in zone, 35% employee residency, map redesignation dates tracked, annual recertification calendared
  • [ ] WOSB/EDWOSB: SBA or approved third-party certification obtained (no self-certification)
  • [ ] SDVOSB/VOSB: SBA VetCert certification obtained (no self-certification)
  • [ ] Application documents reconciled; counsel has reviewed size, affiliation, and control before signature
  • [ ] Limitation on subcontracting computed at proposal and tracked at performance; similarly situated entities correctly identified
  • [ ] JV agreement contains every required provision; 51/40/40 satisfied; project manager named from the small partner
  • [ ] Mentor-protégé agreement approved by SBA before the JV bids
  • [ ] Ostensible-subcontractor exposure tested against the proposal and the subcontract
  • [ ] Recertification triggers (M&A, five-year point, options) built into the deal and contract calendars
  • [ ] Size-protest defense file maintained in advance: Form 355 inputs, tax returns, cap table, governing documents, teaming agreements
  • [ ] Graduation plan in place: NAICS diversification, full-and-open past performance, unrestricted vehicles

Primary Authority

Statutes

Regulations

  • 13 C.F.R. Part 121 — size standards, affiliation (§ 121.103), receipts (§ 121.104), employees (§ 121.106), size determination date (§ 121.404), nonmanufacturer rule (§ 121.406), size protests (§§ 121.1001–121.1009), NAICS appeals (§ 121.1103)
  • 13 C.F.R. Part 124 — 8(a) Business Development (eligibility, § 124.104; control, § 124.106; joint ventures, § 124.513)
  • 13 C.F.R. Part 125 — limitations on subcontracting (§ 125.6); joint ventures (§ 125.8); mentor-protégé (§ 125.9)
  • 13 C.F.R. Part 126 — HUBZone
  • 13 C.F.R. Part 127 — WOSB/EDWOSB
  • 13 C.F.R. Part 128 — Veteran Small Business Certification (VetCert)
  • 13 C.F.R. Part 134 — SBA Office of Hearings and Appeals
  • FAR Part 19 — small business programs (rule of two, FAR 19.502-2; size protests, FAR 19.302; HUBZone price evaluation preference, FAR 19.1307)
  • FAR 52.219-6 (Notice of Total Small Business Set-Aside); FAR 52.219-14 (Limitations on Subcontracting)
  • FAR Subpart 9.4 — suspension and debarment

Cases

Secondary sources

  • SBA's Table of Small Business Size Standards and its Size Standards Methodology (SBA publishes both and revises them on a recurring schedule).
  • Decisions of SBA's Office of Hearings and Appeals (OHA) — the working body of law on affiliation, negative control, economic dependence, and the ostensible subcontractor rule. OHA decisions, not the bare regulation, are where the tests are actually applied.
  • GAO bid protest decisions and Court of Federal Claims opinions on set-aside eligibility, the rule of two, and joint venture compliance.
  • Nash & Cibinic, Formation of Government Contracts, and the Nash & Cibinic Report, for the surrounding procurement framework.

Accuracy note. Size standards, economic-disadvantage thresholds, sole-source dollar ceilings, mentor-protégé terms, recertification consequences, certification platforms, and the HUBZone map are all subject to periodic revision, and several have changed materially in recent years. Confirm every figure and every procedural step against the current regulation and SBA guidance before relying on it.

Related UpLaw Resources

Related Guides & Articles

Related Checklists

Related Toolkits

This checklist is general legal information from UpLaw (uplaw.us), not legal advice, and does not create an attorney-client relationship. Federal small business regulations, size standards, dollar thresholds, and certification procedures change frequently; verify current requirements with SBA and consult qualified counsel before certifying, bidding, or restructuring.