The rules changed in January 2023 and a lot of subcontracting plans are still written as if they did not. The SBA took over SDVOSB certification from VA's CVE program, mandatory third-party verification replaced self-certification, and firms that only held a CVE certification had to reapply through VetCert to stay eligible. If your BD team is still pulling names from old CVE exports or relying on a firm's word that they are "certified," you are accumulating compliance risk.
This guide covers where to find current SDVOSB subcontractors, how to verify status before you award, and the mistakes that come up repeatedly in subcontracting plan audits.
What changed in 2023 and why it matters
Before January 1, 2023, a firm could self-certify as SDVOSB for most federal contract purposes. VA contracts required CVE verification, but civilian agency work did not. The SBA's 2020 NDAA implementation closed that gap. SBA VetCert is now the single certification system for SDVOSB status across all federal agencies.
CVE's legacy database still exists at vetbiz.gov, but it is not authoritative for new awards. The SBA has migrated verified firms into its own system. Firms that did not complete the migration are no longer certified, regardless of what vetbiz.gov shows.
The practical consequence: a VetCert lookup and a SAM.gov check are both required before you count a firm toward your SDVOSB subcontracting goal. One without the other is insufficient.
Where to search for SDVOSB subcontractors
SBA VetCert
Start at veterans.certify.sba.gov. The public search tool lets you filter by NAICS code, state, and capability keywords. The database reflects current SBA-verified status. A firm in VetCert with an active certification is eligible for SDVOSB set-asides and counts toward subcontracting goals.
VetCert does not show every attribute you need. It confirms certification status and some basic firm data. You still need SAM.gov to confirm the firm has an active registration, because an expired SAM registration makes a firm ineligible to receive federal contract dollars even if their SBA certification is current.
SAM.gov
At SAM.gov, search by company name or CAGE code and check two things. First, the registration must show "Active." Second, look at the "Disaster Response" flag and the socioeconomic categories listed in the registration. SDVOSB should appear in the small business certifications section. If it does not appear in SAM.gov but shows in VetCert, ask the firm to reconcile the discrepancy before you list them in your plan.
Dynamic Small Business Search (DSBS)
The SBA's DSBS at web.sba.gov/pro-net/search/dsp_dsbs.cfm surfaces firms that have completed a SBA profile and selected SDVOSB. The data pulls from SAM.gov registrations, so it mirrors what is there. It is useful for capability-keyword searches and pulling contact data for outreach, but the VetCert lookup remains the certification verification step.
NVBDC for corporate procurement
If you are a corporate prime rather than a federal prime, the National Veteran Business Development Council (NVBDC) runs the certification program that Fortune 500 supplier diversity programs recognize. NVBDC-certified firms are distinct from SBA VetCert firms. They overlap significantly but are not identical populations.
NVBDC's directory at nvbdc.org allows searches by industry category and geography. Corporate supplier diversity teams use NVBDC certification the way federal contracting officers use VetCert. If you are building a subcontracting plan that will satisfy both federal reporting and corporate supplier diversity commitments, check both databases.
How to confirm certification is current
Certifications expire. VetCert certifications are valid for three years, after which the firm must recertify. A firm certified in Q1 2023 needs to have completed recertification by Q1 2026. Do not assume a firm listed in a directory is current; check the certification date in VetCert directly.
The correct verification sequence before listing a firm in a subcontracting plan:
- Search VetCert at veterans.certify.sba.gov. Confirm the firm shows as "Certified" with a certification date within the last three years.
- Cross-reference SAM.gov. Confirm active registration and SDVOSB designation in the socioeconomic fields.
- Request a certification letter from the firm. VetCert issues these and firms can pull them on demand. Compare the UEI and CAGE code on the letter against what SAM.gov shows.
- Document the date of your verification. Contracting officers and large business compliance reviewers will ask for this during subcontracting plan reviews and Individual Subcontracting Reports (ISRs) under FAR 52.219-9.
Common mistakes in subcontracting plans
Using CVE data without VetCert confirmation. The vetbiz.gov database still populates search results when you search for "veteran-owned" firms. It is not current. Firms there may have lapsed certifications or may not have completed the VetCert transition. Do not cite CVE status in a subcontracting plan submitted after January 2023.
Counting firms without active SAM.gov registrations. SAM registrations expire annually. A firm that was active when you drafted your plan may have let their registration lapse by the time you submit. Run SAM checks close to submission, not six months before.
Conflating VOSB and SDVOSB. Veteran-Owned Small Business (VOSB) and Service-Disabled Veteran-Owned Small Business (SDVOSB) are different designations with different eligibility requirements. SDVOSB set-asides under FAR 19.1403 require a service-connected disability documented through VA records. VOSB certifications do not satisfy SDVOSB requirements. VetCert certifies both; confirm which designation a firm holds.
Listing firms that are outside the NAICS size standard. SDVOSB certification does not override size standard requirements. If a firm exceeds the revenue or employee threshold for the NAICS code on your contract, they are not a small business for that purpose. Check the applicable size standard at SBA's size standards tool (sba.gov/size-standards) against the firm's reported revenue.
Failing to verify ownership and control for affiliates. The SBA's affiliation rules apply to SDVOSB certification. If the veteran-owned firm has investors, joint venture partners, or significant subcontracts flowing back to a large business, the SBA may find affiliation that disqualifies the small business status. This is a common protest ground. If you are awarding a significant subcontract to a firm with an unusual ownership structure, pull their SBA certification file or ask them to walk you through their VetCert application disclosures.
Action steps
Audit your SDVOSB subcontractor list now. For every firm listed in an active subcontracting plan, run the VetCert and SAM.gov checks described above. Flag any firm whose VetCert shows lapsed or whose SAM registration is expired or missing the SDVOSB designation.
Build the verification sequence into your BD workflow. Before a firm enters your subcontracting plan template, require a VetCert screenshot and a SAM.gov registration printout dated within 30 days. Attach both to the proposal file. This takes ten minutes per firm and eliminates the most common compliance finding.
Brief your supply chain team on the CVE transition. If anyone on your team is still using vetbiz.gov as their primary source, correct that now. The transition has been in effect for two-plus years, but old habits persist. One audit finding on a federal subcontracting plan can delay payment on an ISR and create protest exposure on the next award.
