January 19 was the largest enforcement deadline in the 8(a) program's 55-year history. We covered the rule structure when it landed. 102 days later, here's what's playing out, what's coming in the next 60 days, and what we still can't tell you.
In January, we wrote four pieces tracking the SBA rule overhaul: the comprehensive 2026 certification guide, the 8(a) program-wide audit, the protect-your-cert framework, and the federal-landscape analysis. The audit deadline hit 102 days ago. Several other 2025 rule changes are now into their implementation timelines.
This is our 100-day status check on those pieces — the procedural milestones that have moved, the ones in active windows right now, and an honest accounting of what we don't yet have data on. We will keep updating it; this format becomes a recurring beat.
The 8(a) audit: not over because the deadline passedThe SBA has not made a comprehensive public announcement about post-deadline outcomes. That doesn't mean nothing is happening. Three observations from a closer read of the December 2025 letter than we did at the time we wrote our original audit piece:
The Office of General Counsel ran the document request. Not the Office of Government Contracting and Business Development, which handles routine 8(a) program management. We have seen a few of the actual letters — they were on OGC letterhead, not GC&BD. That's the procedural signal we should have flagged louder in January. OGC-led document requests are not "compliance refreshes." They are the front end of legal review.
The named consequences were not boilerplate. The letter spelled out suspension, termination, OIG referral, and potential False Claims Act exposure. Those four sit on different timelines: suspension and termination are SBA-internal proceedings (typically 60–120 days, with hearing rights); OIG referral happens administratively but the investigation runs as long as it runs; FCA exposure is a Justice Department call. None of them complete in 102 days.
The audit covered recently graduated and exited 8(a) participants. That work is independent of the live-participant deadline and is, by definition, slower — paper-trail-only review on firms whose program participation already ended.
What that means for participants now: a firm that submitted on time should expect contact through normal SBA channels rather than a mass announcement, and contact may take months. A firm that missed the deadline is operating in a window where suspension proceedings are administratively viable, which is not the same as inevitable but is enough reason to retain counsel and respond in writing if a status determination notice lands.
If you want the practical compliance framework, that's the protect-your-certification piece from January.
WOSB and EDWOSB: the one-year extension is now activeThe SBA's January 21, 2025 one-year extension covered firms whose three-year renewal date fell between June 1, 2024 and May 31, 2025. The renewal calendar has been moving:
| Original three-year renewal date | Extended renewal date |
|---|---|
| June 1, 2024 | June 1, 2025 (passed) |
| December 1, 2024 | December 1, 2025 (passed) |
| May 31, 2025 | May 31, 2026 (active window) |
If your original renewal sat at the end of the extension window, you're inside the active recertification period right now. The SBA has signaled stricter operational-control documentation than in prior cycles — full-time founder involvement, day-to-day decision-making evidence, organizational charts. We've seen denials on operational-control grounds where the qualifying woman's spouse was named CFO; if your structure has that pattern, address it before you submit, not in a rebuttal letter.
H.R. 1586, the WOSB Certification Expansion and Opportunity Act, sat in committee at the time we wrote our SBA changes piece. We have not confirmed independent procedural movement since. If passed, it would limit governmentwide and agency WOSB goal calculations to SBA-certified or third-party certified firms, excluding self-certifications.
SDVOSB and VOSB: the rolling six-month extension is half-rolledThe May 13, 2025 six-month extension means VOSB and SDVOSB recertification dates have been rolling forward through the spring:
| Original expiration | Extended expiration | Earliest recertification |
|---|---|---|
| August 1, 2025 | February 1, 2026 (passed) | November 1, 2025 |
| October 1, 2025 | April 1, 2026 (passed) | January 1, 2026 |
| December 1, 2025 | June 1, 2026 (active window) | March 1, 2026 |
Firms with December 1, 2025 original expirations are inside their 90-day recertification window now. The 5 percent SDVOSB federal contracting goal, lifted from 3 percent under the FY2024 NDAA, is the only socioeconomic goal that grew during the current administration. We argued in our federal-landscape piece that this changed the calculus: SDVOSB sits in a position other set-aside categories don't, and for service-disabled veteran founders the cost-benefit argument for re-certifying on time has gotten stronger, not weaker.
HUBZone: triennial cycle plus a July 1 cliffTwo HUBZone milestones in the next 60 days.
Triennial recertification, effective January 16, 2025. Firms in their non-intensive years now file a basic attestation; intensive review hits every three years. Documentation burden during attestation years is reduced, but the eligibility-on-date-of-offer rule means continuous compliance still matters.
Redesignated-area expiration, July 1, 2026. This is the more pressing one. Firms whose eligibility depends on a 2023-redesignated area lose that designation on July 1. The SBA has signaled the next HUBZone map update will not occur until 2028, so there is no map-driven path back in. If your principal office or a meaningful portion of your 35% employee residency relies on a redesignated area, the next 60 days are your window to relocate, adjust your employee residency mix, or document an alternative compliance path. The 90-day employee-residency qualifying period (down from six months) is a real planning lever here — you can hire into a new HUBZone-eligible area in early May and have those hires count by early August.
Corporate supplier diversity: implementation continuedWe argued in Corporate Supplier Diversity in 2026 that approximately 85 percent of Fortune 500 companies have maintained their supplier diversity programs despite federal policy shifts. As of May, the directory data has not visibly moved: corporate program contact records remain active, the Billion Dollar Roundtable cohort is intact, and the major industry concentrations (automotive, technology, healthcare, financial services, telecommunications) continue to show stable supplier-diversity engagement. The next quarterly Inclusion Index ranking — our scoring of corporate programs by response time, cert breadth accepted, and Tier-2 reporting transparency — closes in mid-summer; we'll publish.
The 60-day window: what to watch| Date | Event | Action for certified firms |
|---|---|---|
| Active now | WOSB and EDWOSB recertification window for firms with original renewal Dec 2024 – May 2025 | Submit by May 31, 2026 if your original renewal was May 31, 2025 |
| Active now | SDVOSB recertification window for firms with original expiration Dec 1, 2025 | File before June 1, 2026 |
| July 1, 2026 | HUBZone redesignated-area expiration | Verify principal office and 35% employee-residency status against current map |
| Ongoing | 8(a) audit individual case progression | Keep documentation current; if you receive an OGC letter, get it to counsel before you respond |
We have not been able to verify, from primary sources, post-January-19 announcements regarding 8(a) audit outcomes, suspension counts, or specific False Claims Act actions. Those facts will surface — typically through court filings, OIG reports, or SBA quarterly disclosures — and when they do, we will update this piece with a dated correction note rather than republish.
If you are in receipt of an SBA enforcement letter, a request for additional documentation, or notice of a pending status determination, document everything and consult counsel before you respond. The compliance framework in our protect-your-certification guide holds.
We will refresh this piece in early June with updated enforcement counts as agency disclosures publish, and again in early August as the HUBZone July 1 cliff data lands.
Published May 1, 2026.
