Healthcare is the second-largest sector for diverse supplier spend in the United States, behind only government contracting. Hospital systems, health insurers, and federal health agencies buy everything from surgical gloves and IV pumps to IT systems and cafeteria food service. The dollar volumes are real, and supplier diversity programs at these organizations have procurement staff whose job is to find qualified diverse firms.
What makes healthcare different from retail or financial services is the concentration of institutional buyers. A handful of health systems account for the majority of diverse spend in most metro markets, and four federal agencies (VA, NIH, CMS, FDA) alone contract for billions in goods and services each year. You don't need to reach 500 buyers. You need to reach the right 10.
How large is the opportunity
The American Hospital Association estimated US hospital spending at roughly $1.3 trillion in 2023. Industry analysis puts diverse supplier spend at major health systems at 10% to 15% of addressable procurement, depending on the organization's goals and size. HCA Healthcare, the largest for-profit hospital operator with 186 hospitals, runs a supplier diversity program that tracks spend against minority- and women-owned vendors across its supply chain. Ascension Health, CommonSpirit Health, and Kaiser Permanente all do the same.
On the federal side, the Department of Veterans Affairs is the largest single healthcare buyer in the country. VA obligated approximately $26 billion in contracts in FY2023, with about $6 billion flowing to small businesses under set-aside programs. The VA has a specific obligation to service-disabled veteran-owned small businesses (SDVOSB), and it uses a unique verification system (SBA CVE) that differs from the standard SBA process.
NIH runs its own set of small business and diversity-focused contracting programs. The agency obligated roughly $5 billion through contracts and grants to small businesses in FY2023. FDA, CDC, and CMS add several billion more in combined procurement.
The categories where diverse firms most commonly win: medical and lab supplies (NAICS 423450), health IT and EHR consulting (541714), facilities maintenance (561210), food services (722310 for managed food operations), and professional staffing (561320).
Which certifications carry the most weight
NMSDC MBE. For corporate hospital systems, NMSDC membership is the primary credential. HCA, Tenet Healthcare, Ascension, and CommonSpirit all track MBE spend to meet their publicly stated diversity commitments. NMSDC has 24 regional councils across the US; your application goes through the council for the region where your firm is headquartered. Annual fees run $400 to $2,000+ depending on revenue tier. Certification is valid for one year and requires renewal. If corporate health system contracts are your target, start here.
WBENC WBE. Hospital systems are among the heaviest users of WBENC certification in any sector. Ascension has been a WBENC-recognized Corporation of the Year. Kaiser and several Blues plans participate actively in WBENC programming. If you are a women-owned firm, WBE certification opens doors in healthcare that MBE alone doesn't. WBENC certifies through 14 regional partner organizations. Fees are similar to NMSDC. Some firms carry both MBE and WBE if ownership qualifies.
SDVOSB. For any service-disabled veteran-owned firm, SDVOSB certification is the highest-priority credential to pursue before approaching the VA. VA uses mandatory set-asides for SDVOSB and VOSB under the Veterans First Contracting Program, which takes precedence over other SBA set-aside programs for VA acquisitions. Verify your status through the SBA Veteran Small Business Certification (VetCert) program (formerly CVE). Sole-source awards up to $4.5M (services) and $7M (manufacturing) are available without competition once you're on the list.
SBA 8(a). If you're a minority-owned firm targeting federal health agency contracts (NIH, CMS, FDA), 8(a) certification is worth serious consideration. The program's nine-year term and sole-source authority (up to $4.5M for services) give you direct access to contracting officers who would otherwise be required to compete the work. Getting on a GWAC (Government-Wide Acquisition Contract) like CIO-SP4 or Alliant 2 while 8(a) certified is how IT and health IT consulting firms build durable federal revenue.
DBE. Less relevant in healthcare than in construction, but worth mentioning if you provide transportation or infrastructure services to federally funded healthcare facilities.
Key corporate buyers and their programs
HCA Healthcare operates a formal supplier diversity program and accepts NMSDC and WBENC certifications as the primary credentials. HCA procurement runs through a centralized supply chain group, which means one relationship can open doors across dozens of hospitals in a region.
Ascension Health has been publicly committed to diverse supplier spend since at least 2015 and has published annual diversity spend reports. Ascension is a WBENC-recognized corporation and an NMSDC member. Contact their supplier diversity office directly for first-time vendor registration.
Kaiser Permanente runs one of the better-documented supplier diversity programs in healthcare. Kaiser reported $2.1 billion in diverse supplier spending in 2022 across its eight regions. Their supplier diversity team actively reviews NMSDC and WBENC certifications for vendor qualification.
Sodexo and Aramark are worth understanding even if you don't think of them as healthcare buyers. Both run hospital food service and facilities management at hundreds of hospitals and health systems under long-term management contracts. Both have supplier diversity programs that buy from diverse sub-vendors within those contracts. Getting listed as a diverse vendor with Sodexo or Aramark means access to their hospital client base through subcontracting, often without having to qualify directly with each hospital system.
Tenet Healthcare and CommonSpirit Health round out the major for-profit and nonprofit system buyers. Both have supplier diversity programs with NMSDC certification as the primary credential for diverse vendor qualification.
Typical contract sizes and how diverse firms enter
The first contract at a hospital system is almost never a prime, direct-purchase agreement for your core service. The realistic entry points:
Subcontracting to a prime vendor. Sodexo, Aramark, Aramark Healthcare, and large IT integrators all carry diversity spend obligations in their hospital contracts. Getting on their approved subcontractor list as an MBE or WBE is often faster than chasing a direct hospital system relationship. Contract sizes here range from $25,000 to $500,000 per year for a typical sub-scope engagement.
Pilot programs and trials. Hospital supply chain teams have risk tolerance for small-dollar trials with new vendors. A $15,000 to $50,000 pilot for a medical supply category or a specific IT project is the foot in the door. Execute well, and the renewal conversation is about expanding scope, not re-earning trust.
Set-aside awards at federal health agencies. At the VA, NIH, and FDA, SDVOSB and 8(a) set-asides allow for direct awards without full competition. A sole-source award for a services contract in the $250,000 to $2M range is a realistic first federal healthcare contract for a qualified firm.
GPO contract vehicles. Group purchasing organizations like Premier, Vizient, and HealthTrust process the majority of hospital supply purchasing. Some GPOs run diversity programs or supplier showcase events. Getting a product or service into a GPO contract is a longer-term play, but it creates distribution across dozens or hundreds of hospitals at once.
Industry-specific barriers and how to address them
HIPAA compliance documentation. If you touch patient data, health records, or any IT system that connects to clinical workflows, buyers will require a Business Associate Agreement (BAA) and evidence that your firm has HIPAA privacy and security policies in place. This is a real barrier for small firms that have never worked in healthcare IT. The cost to implement a defensible HIPAA compliance program runs $5,000 to $25,000 for a small firm, using a specialized compliance consultant or a HIPAA compliance platform. Do this before you approach a health IT buyer, not during the sales process.
Supply chain compliance and GPO qualification. For medical supply and device categories, buyers often require FDA registration, ISO certifications, or compliance with specific procurement standards. Know which standards apply to your product category before you invest time in a hospital system relationship.
Insurance minimums. Hospital systems frequently require commercial general liability at $2M to $5M per occurrence and professional liability (E&O) at similar levels. Staffing firms typically need additional workers' comp and employer practices liability. Review your target buyer's vendor requirements before your first meeting.
Clinical credentialing for staffing. Healthcare staffing is one of the highest-volume categories for diverse supplier spend. It's also one of the most credentialing-intensive. Every clinician you place needs current licensure verification, background checks, drug screening, and often facility-specific training completion. The compliance infrastructure for clinical staffing is not cheap to build, but it's table stakes.
Long sales cycles. Hospital supply chain decisions that involve system-wide adoption can take 12 to 24 months from initial introduction to signed contract. Budget for the sales cycle. Firms that run out of runway while chasing a large hospital contract don't make it to the finish line.
Practical first steps for a new diverse business
- Identify your federal versus corporate target. If you are a service-disabled veteran, go to the VA first. It is the largest healthcare buyer in the country, and SDVOSB set-asides give you access no other diverse certification provides in that specific agency. If your service fits corporate hospital systems better, NMSDC or WBENC is the right starting point.
- Get the right certification filed first. Don't file for every certification at once. Pick the one that aligns with your primary market and complete it. CertifyAll can file across certifying agencies once you've gathered your ownership and business documents, which avoids rebuilding the same file repeatedly.
- Register in SAM.gov. This is required for any federal contract, including VA. Registration is free and takes one to two weeks to process. Without it, you cannot receive a federal award regardless of your certification status.
- List yourself in NMSDC or WBENC's database before the certification is final, if possible. Some councils allow provisional listings. Corporate supplier diversity managers search these databases when they have specific needs; being findable early matters.
- Attend one regional healthcare supplier diversity event in the next 90 days. NMSDC councils, WBENC regional partners, and organizations like the National Association of Health Services Executives (NAHSE) hold buyer-supplier matchmaking events where you can get a named contact inside a health system's procurement team. A 15-minute introduction at one of these events is worth more than weeks of cold outreach.
- Solve the HIPAA documentation problem before you need it. If there is any chance your service will touch patient data or clinical systems, get your BAA template and compliance policies in place now. Buyers will ask for them.
The firms that win durable healthcare contracts earn them through consistent delivery on the first engagement. One clean pilot for an Ascension regional office or a VA contract executed on time becomes the past performance that opens the next three conversations.
Browse the corporate program directory to see which health systems near you run supplier diversity programs, and list your firm so their procurement teams can find you when they're looking.
