compliance
CAGE Code Compliance: What Auditors and Contracting Officers Check
Maintaining an accurate, active CAGE code record is a compliance requirement — not just an administrative task. Auditors, contracting officers, and teaming partners all rely on CAGE code data to verify vendor eligibility, pay invoices, and assess past performance. Here's what they check and how to stay compliant.
What Contracting Officers Verify Using Your CAGE Code
Before awarding any contract, a contracting officer typically verifies:
- Active SAM.gov status — Expired SAM = cannot award. FAR 4.1102 requires active registration at time of award.
- Legal name match — Your SAM legal name must match your tax filings and business formation documents.
- Representations & Certifications — Are your FAR reps current? Have you certified your size correctly?
- Exclusions check — Is your entity (or its principals) listed on SAM.gov's debarred/suspended list?
- Small business size — For set-aside contracts, the CO verifies you meet the NAICS size standard.
DCAA Audits and CAGE Code Records
The Defense Contract Audit Agency (DCAA) audits cost accounting systems, incurred costs, and forward pricing on cost-reimbursement contracts. CAGE codes appear in:
- DCAA's contractor database (used to schedule audits and track findings)
- Contractor invoices and cost reports submitted to DCAA
- Subcontract award reports — primes must report subcontractor CAGE codes
If your CAGE code or business name has changed (due to a name change, acquisition, or address update), notify your contracting officer and DCAA immediately to avoid mismatches in the audit trail.
Common CAGE Code Compliance Mistakes
- Lapsed SAM registration — The #1 issue. Set annual reminders 60 days before expiration. SAM sends email notices — whitelist sam.gov sender addresses.
- Wrong business name in SAM — Legal name in SAM must match IRS records. DBA names go in the DBA field, not the legal name field.
- Outdated address — If you moved, update SAM immediately. Your address determines HUBZone eligibility and state-level reporting.
- Incorrect NAICS selection — Claiming the wrong NAICS affects your size standard calculation and set-aside eligibility.
- Expired certifications not updated — SBA certifications (8(a), WOSB, SDVOSB, HUBZone) have their own renewal cycles. An expired program certification in SAM affects set-aside eligibility.
- Not reporting changes to contracting officers — FAR 52.204-13 requires you to update SAM within 30 days of any material change.
CAGE Code Audits: Responsibility Determination
Before any award, contracting officers conduct a 'responsibility determination' under FAR 9.1 — assessing whether your company has the financial resources, technical capability, and satisfactory record to perform. Your CAGE code history in FPDS informs this review. Past performance, contract terminations for cause, and unresolved audit findings all surface during this check.
Decode Any CAGE Code Instantly
Enter any 5-character CAGE code to see the company name, SAM status, and certifications.
Frequently Asked Questions
How often should I update my SAM.gov registration?
At minimum, renew annually before it expires. Additionally, update within 30 days of any material change (address, legal name, banking info, size, ownership). For set-aside certifications, follow each program's recertification schedule.
Can an expired SAM registration cause an existing contract to be cancelled?
Generally no — contracts already awarded can continue. But you cannot receive new task orders, modifications adding scope, or new contracts while expired. DFAS may hold payments if SAM expires during performance.
Does a DCAA audit affect my CAGE code status?
No. DCAA audits your accounting system and costs — they don't modify your CAGE code or SAM registration. However, serious audit findings (inadequate accounting systems) can affect your ability to win new cost-reimbursement contracts.
See Contract History
FedAtlas.com
Full federal award data by company, CAGE code, agency, and NAICS.