Most prime contractors can tell you, to the dollar, what they spent with their direct suppliers last year. Ask them what those suppliers spent on their behalf with small and diverse businesses, and the room goes quiet. That second layer is second-tier spend (Tier 2), and capturing it is now less about goodwill and more about contract compliance and demonstrable economic impact.
This is a how-to for the people who own that number: procurement, supply-chain, and supplier-inclusion leaders. If you're a small or diverse supplier, the back half of this guide explains how to make yourself countable so primes report you upstream.
What "second-tier" actually meansTier 1 is what you buy directly. Tier 2 is what your Tier 1 suppliers buy from small and diverse businesses to deliver your work. A prime that hires a large IT integrator counts that integrator at Tier 1. When that integrator subcontracts a minority-owned firm to staff the help desk, that's Tier 2 spend that rolls up to the prime's program.
Tier 2 splits two ways, and the distinction drives the math:
- Direct Tier 2 is diverse-supplier spend a Tier 1 incurs specifically to deliver your contract. Per the standard allocation rule, 100% of direct Tier 2 spend tied to your business is credited to you.
- Indirect Tier 2 is the diverse spend baked into a supplier's general operations, not tied to any one customer. You get a proportional share, allocated by the percentage of that supplier's total revenue your account represents.
That allocation logic is the part teams get wrong. If a Tier 1 does $50M in total diverse spend and you're 8% of their revenue, your indirect credit is roughly $4M, not the full $50M. Mix direct and indirect in the same period and you separate them first: count the direct dollars at 100%, then layer the indirect allocation on top. SupplierGATEWAY's Tier 2 calculator and most major platforms enforce this split so you don't double-count.
The compliance floor: FAR 52.219-9 and eSRSIf you hold federal contracts above the simplified acquisition thresholds, second-tier reporting isn't optional. FAR 52.219-9 requires a small business subcontracting plan and reporting on awards to small business, small disadvantaged business, women-owned, HUBZone, veteran-owned, and service-disabled veteran-owned concerns.
The mechanics you have to get right:
- File the Individual Subcontract Report (ISR) and Summary Subcontract Report (SSR) through the web-based eSRS at esrs.gov.
- Report data limited to your immediate next-tier subcontractors, not the whole chain. Each tier reports its own next tier.
- Submit the SSR within 30 days after the end of the government's fiscal year (so by October 30 for an FY ending September 30).
- Flow the obligation down: subcontractors who themselves carry subcontracting plans must agree to file their own ISRs and SSRs in eSRS.
This is the durable reason to build Tier 2 capture even after the DEI-rollback noise. Federal subcontracting goals are statutory. They don't depend on anyone's appetite for the word "diversity." Miss the eSRS filing and you're looking at a compliance finding on your next CPARS evaluation, not a missed press release. (See our buyer-side overview for how this connects to the rest of your program.)
The voluntary bar: the Billion Dollar RoundtableOn the corporate side, the benchmark that still carries weight is the Billion Dollar Roundtable (BDR). Membership requires demonstrating at least $1 billion in annual spend with minority- and women-owned suppliers, verified through documentation. As of 2024 the BDR counted 43 member corporations, whose combined Tier 1 diverse spend reached an estimated $123 billion in 2022.
Tier 2 is how large primes credibly reach that $1B line. A company can't always place a billion dollars directly with diverse firms, the capacity often isn't there at the contract sizes involved, so it counts the diverse spend its large suppliers generate downstream. If you're chasing a board-level economic-impact target, Tier 2 is usually where the marginal billion comes from.
A five-step playbook for primesHere's the sequence that actually produces a defensible number.
1. Decide what counts before you ask for anything
Pick your taxonomy and lock it. Federal set-aside categories (SDB, WOSB, HUBZone, SDVOSB) for the compliance report; certifying-body categories (NMSDC MBE, WBENC WBE, NaVOBA VBE, NGLCC LGBTBE, Disability:IN DOBE) for the corporate report. Define direct vs. indirect in writing so every supplier allocates the same way.
2. Identify which Tier 1 suppliers to survey
You don't survey all of them. Concentrate on your largest spend categories, professional services, IT, facilities, logistics, where suppliers subcontract heavily. The top 20% of suppliers by spend usually contain 80% of the recoverable Tier 2 dollars.
3. Collect on a fixed cadence with one method
Quarterly is the practical default. Send a standardized template (or a portal request) that captures supplier name, certification type and issuing body, dollar amount, and direct/indirect flag. The data-quality killer here is the same one the GHG Protocol flags for Scope 3 Category 1 supplier surveys: low response rates and inconsistent formats force you back onto estimates. Tight templates and a real deadline fix most of it.
4. Validate certifications, don't take them on faith
A self-reported "minority-owned" claim isn't a certification. Match each reported diverse supplier against active certificates from NMSDC, WBENC, the SBA, and the other issuing bodies. Expired certs don't count, and reporting them is the fastest way to fail an audit.
5. Allocate, aggregate, and reconcile
Apply the direct (100%) and indirect (revenue-share) rules, roll the totals into your program number, and reconcile against Tier 1. If your Tier 2 number is growing while Tier 1 is flat, confirm it's real recovered spend and not double-counting between a parent and its subsidiary.
The tooling, honestly assessedYou can run a small Tier 2 program in spreadsheets. Past a few dozen suppliers, you'll want software. The named players:
- Supplier.io runs Tier 2 spend reporting with certification verification across a large supplier database and integrates with SAP Ariba and Coupa.
- Coupa lets suppliers complete Tier 2 diversity reports directly in the Coupa Supplier Portal when a buyer requests them.
- SAP Ariba supports Tier 1 diversity categories and spend analysis inside its sourcing suite.
The pattern is the same across all three: the buyer requests, the supplier self-reports into a portal, the platform validates certifications and allocates. The platform doesn't find the diverse firms for you, and it doesn't fix a supplier base that's thin on certified vendors. That part is sourcing, and it's upstream of any reporting tool.
What this means if you're a supplierIf you're a small or diverse business, Tier 2 is a real door into corporate supply chains. You don't have to win a direct contract with the prime. You win work with their large Tier 1 suppliers, and the prime counts your spend in their program. Two things make you countable: a current certification from a recognized body, and a profile a prime's research team can actually find.
List yourself where buyers and their Tier 1 suppliers look. Our supplier directory puts your certifications, NAICS codes, and capabilities in front of the procurement teams running these programs, and our corporate program directory shows which companies run active Tier 2 efforts so you can target the ones already counting suppliers like you.
Start with the supplier baseSecond-tier reporting is a measurement exercise, but you can't measure spend with suppliers who aren't in your chain. The teams that hit their numbers spend most of their effort on sourcing, not surveys.
If you're a buyer building or rebuilding a Tier 2 program, start by finding the certified firms your suppliers can actually subcontract to: browse diverse suppliers.
