Writing diverse and small supplier requirements into your RFPs

If you run subcontracts or category sourcing at a federal prime, the small-business expectations in your solicitation are not a courtesy. They are a contract term you signed, with a report due twice a year. Write them loosely and you spend the next fiscal year chasing suppliers you should have lined up at award. Write them well and the goals mostly take care of themselves.

The work is sourcing and compliance, not a values statement. This guide is about how to put small and diverse supplier requirements into an RFP and a supplier scorecard so they hold up, count toward your reporting, and stay inside the lines that set-aside law draws.

Know which rules actually bind you

Two different regimes get conflated, and conflating them is where buyers get into trouble.

The first is the federal small-business subcontracting program, created by the Small Business Act and carried in FAR Subpart 19.7. If you hold an other-than-small prime contract over the subcontracting-plan threshold (currently $750,000, or $1.5 million for construction) with subcontracting possibilities, FAR 52.219-8 puts a utilization obligation on you and FAR 52.219-9 requires an approved subcontracting plan with goals for small business, small disadvantaged business (SDB), women-owned small business (WOSB), HUBZone, veteran-owned, and service-disabled veteran-owned small business (SDVOSB). Those goals are negotiated into your contract. They are statutory, and the January 2025 rescission of Executive Order 11246 (under EO 14173) did not touch them. EO 11246 governed affirmative-action employment compliance through OFCCP. The subcontracting program comes from a separate statute, and it is still in force.

The second regime is voluntary corporate supplier programs, the Tier 1 and Tier 2 spend goals that large buyers set for themselves and report to customers. Those are not legally mandated. Many companies pulled back or renamed them through 2025 after the DEI rollback. If you run one, you have more freedom in how you write requirements, and more exposure if you write them as preferences that look like quotas.

Decide which bucket a given solicitation sits in before you draft a word, because the language differs.

Set the requirement as a commitment, not a quota

The legal line is the one most buyers worry about: you cannot turn a small-business goal into a set-aside you do not have authority to create, and you cannot make award contingent on a supplier's ownership demographics in a way that functions as a quota. Federal set-asides are reserved decisions made by a contracting officer under specific authority. You, sourcing a subcontract, are not setting aside anything.

What you can do, and what FAR 52.219-9 expects, is require a subcontracting commitment from your own bidders and pass the expectation down. Practical language for a solicitation:

• Require offerors to submit their own small-business subcontracting plan or approach when the work supports it, with percentage targets for SB, SDB, WOSB, HUBZone, and SDVOSB participation.
• State that you will evaluate the credibility of the plan: named suppliers, realistic dollar values, past performance hitting similar goals. Evaluate the plan, not the offeror's identity.
• Include the flow-down. Subcontractors that themselves exceed the threshold and have further subcontracting possibilities must adopt their own plan. That is how goals propagate down a supply chain instead of dying at Tier 1.

For a corporate Tier 2 program, the same shape works without the FAR scaffolding: ask bidders to report planned diverse-supplier spend as a percentage of contract value, and score the commitment. Keep it about the supplier's sourcing decisions, not a demographic test of who wins.

Source before you draft, not after

The most common failure is writing a 12% SDVOSB target into a plan for a NAICS code where almost no certified SDVOSBs exist. Then you miss it, and you are explaining a variance to a contracting officer who can read the market as well as you can. Build the target from the market, not from a round number that sounds good.

Run the search first. Pull certified suppliers in your relevant NAICS codes and socioeconomic categories, see how many real, capable firms exist, and size the goal to what the market can actually deliver. Our supplier directory lets you search certified diverse and small suppliers by capability and certification before you commit a number you'll have to defend. Cross-check federal certifications in the official systems: SBA's Small Business Search (the platform that replaced the Dynamic Small Business Search in July 2025), SAM.gov reps and certs, and SBA's SUBNet, where primes post subcontracting opportunities and small firms respond. To verify the corporate certifications behind an MBE, WBE, or VBE claim, our certifying-body directory points you to the issuing organizations (NMSDC, WBENC, NaVOBA, and others) so you can confirm a certificate is current.

A target backed by a named pipeline is defensible. A target backed by a wish is a future finding.

Write certification requirements that match 2024-2026 reality

This is where stale templates do damage. Verify status the right way per category, because self-certification was pulled out from under two of them.

• SDVOSB: self-certification is gone. Since the change took effect in 2024, a firm must hold SBA's Veteran Small Business Certification (VetCert), issued through certify.sba.gov, to count toward SDVOSB goals or set-aside awards. If your RFP still says "self-certified SDVOSB," it is out of date and the count won't hold.
• WOSB and EDWOSB: must be certified, either by SBA through certify.sba.gov or by an approved third-party certifier. A bare SAM.gov self-rep is not enough to count.
• HUBZone and 8(a): SBA-certified programs, verifiable in SBA's systems.
• SDB: still self-certified in SAM.gov reps and certs (question 19 in the registration). The 5% SDB goal counts self-certified firms, so the verification bar here is lower. Know that distinction so you don't demand a certificate that doesn't exist for this category.
• Corporate categories (MBE, WBE, LGBTBE, DOBE, VBE): certified by councils, not the government. Require a current certificate and confirm it with the issuing body.

Spell out in the solicitation which proof you'll accept for each category. "Provide your VetCert certificate" is unambiguous. "Provide proof of veteran-owned status" invites a self-attestation you can't count.

Build the scorecard so commitments survive award

A requirement that isn't measured is a suggestion. Tie the RFP language to a supplier scorecard that tracks the same numbers you'll report.

• Make the small-business plan an evaluated factor with stated weight, so bidders price it in.
• Capture committed percentages by category at award, then track actuals quarterly against them.
• Require subcontractors to report their lower-tier spend on a schedule that feeds your own reporting, not after your deadline has passed.

On the federal side, your reporting moved. The Electronic Subcontracting Reporting System at eSRS.gov was decommissioned on February 20, 2026, and Individual Subcontract Report (ISR) and Summary Subcontract Report (SSR) filing now lives inside SAM.gov. The ISR is contract-specific, generally due by April 30 and October 30; the SSR summarizes performance across contracts under a commercial plan. Same obligations under FAR 19.7, new front door. If your internal calendar still points your team at eSRS.gov, fix it before the next cycle.

A short pre-release checklist

Before a solicitation with subcontracting expectations goes out:

1. Confirm whether FAR 52.219-9 applies (other-than-small prime, over threshold, subcontracting possibilities). If yes, the plan and flow-down language is mandatory, not optional.
2. Size each category goal against real certified suppliers in your NAICS codes, not a round number.
3. State the exact certification proof you'll accept per category, current to 2024-2026 rules.
4. Make the plan an evaluated factor and connect it to a scorecard with quarterly actuals.
5. Point reporting at SAM.gov, and set the ISR and SSR dates on your team's calendar now.

Done this way, the requirement does double duty. It surfaces capable suppliers you might have missed, and it produces a clean number when the report comes due. If you want to see how primes structure the upstream side of this, our breakdown of the cheapest path to federal contracts shows the supplier's view of the same market you're sourcing from.

Start with the pipeline. Search certified diverse and small suppliers in your categories, build your goals off who actually exists, and the rest of the solicitation gets easier to write and easier to defend.