Toyota, Ford, and P&G don't just want you to certify your own diversity status. They want to know who your suppliers are. Here is what that reporting looks like and how to build a system that holds up.
What Tier-2 reporting actually means
When a corporation awards a contract to a Tier-1 supplier, that supplier's own purchasing behavior creates the Tier-2 supply chain. If Ford is your customer and you subcontract 30% of the work to a woman-owned machine shop, that subcontractor is Ford's Tier-2 supplier.
Corporate supplier diversity programs have been collecting Tier-2 data for decades. The Billion Dollar Roundtable, a coalition of corporations that each spend over $1 billion annually with diverse suppliers, uses Tier-2 data to validate that their first-tier purchasing actually flows diversity spend down the chain. Members include Toyota, Honda, Ford, General Motors, Walmart, AT&T, and others. Their combined reported Tier-2 spend runs into the tens of billions.
The core question is not just "are you diverse?" It's "how diverse is your supply chain?"
What corporations want from you
The data request varies by company, but the standard ask includes these fields:
Spend by certification type. Corporations want dollar amounts broken out by category: Minority Business Enterprise (MBE), Women's Business Enterprise (WBE), Veteran-Owned Small Business (VOSB), Service-Disabled Veteran-Owned Small Business (SDVOSB), Small Business (SB), Small Disadvantaged Business (SDB), LGBTQ+-owned (LGBTBE), and Disability-owned (DOBE). Some request further breakdown by race/ethnicity under MBE, matching NMSDC classifications.
Certification body and number. A stated certification means nothing without verification. Companies want the certifying organization (NMSDC affiliate, WBENC affiliate, NGLCC, Disability:IN, SBA for 8(a) or WOSB, VA for SDVOSB) and the actual certification ID number. This lets them verify independently.
Total Tier-2 reportable spend. Most programs ask you to calculate "Tier-2 reportable spend" as a percentage of your total contract value with them, then report diverse spend as a share of that. Toyota's Tier-2 program, for example, uses a 40% allocation factor for production suppliers unless you can show actual sub-spend data.
Supplier names, addresses, and DUNS/UEI numbers. For federal-adjacent work, the Unique Entity Identifier from SAM.gov is often required. Corporate programs may accept EIN plus certification number.
Reporting frequency is typically quarterly or annually. Honda of America Manufacturing requests annual submissions tied to the calendar year, due in February. Ford's portal accepts rolling quarterly entries throughout the year.
Federal prime contractors: the FAR adds teeth
If your customer is the federal government rather than a private corporation, Tier-2 reporting is not voluntary. It is contractually mandated under FAR 52.219-9, the clause that governs small business subcontracting plans.
For contracts over $750,000 (construction over $1.5 million) with a large business prime, FAR 52.219-9 requires a formal subcontracting plan. That plan commits the prime to specific percentage goals for subcontracting to small businesses, small disadvantaged businesses, women-owned small businesses, HUBZone small businesses, veteran-owned small businesses, and service-disabled veteran-owned small businesses.
The reporting mechanism is SF-294 (Subcontracting Report for Individual Contracts) and SF-295 (Summary Subcontract Report). SF-294 is filed semi-annually and at contract completion. SF-295 is filed annually for commercial subcontracting plans. Both go through the Electronic Subcontracting Reporting System (eSRS) at esrs.gov.
The data required on these forms: total dollars subcontracted, dollars subcontracted to each small business category, and percentage of total subcontracted dollars. If you miss your goals, you have to explain why. Consistent shortfalls with no explanation trigger increased scrutiny and can affect award decisions on future contracts.
DFARS 252.219-7003 imposes similar requirements on DoD contracts, with additional reporting through the DoD's Comprehensive Subcontracting Plan Test Program for eligible contractors.
How to collect the data from your subs
This is where most primes fail. They promise goals in the subcontracting plan and then discover, six months later, that they cannot get reliable spend data from their own subs.
A few approaches that work:
Require certification documentation at onboarding. Before a subcontractor gets added to your vendor master, collect the certification letter, the certifying body, and the expiration date. Build this into your onboarding form. If they cannot produce it, they cannot be counted.
Track spend at the purchase order level. Tagging each PO with the sub's diversity category at the time of issuance is far easier than trying to reconstruct it from GL data at reporting time. Most ERP systems support custom fields on vendor records and PO lines.
Send a quarterly survey to your subs asking them to confirm active certifications. Certifications expire. NMSDC and WBENC certifications are valid for one year. SBA 8(a) program participation lasts nine years but with annual reviews. An expired certification cannot be counted.
Use a written flow-down clause. If you want Tier-2 data, your subcontracts should require it. A simple clause obligating the sub to report their own diverse subcontracting spend to you quarterly, tied to payment terms, gives you leverage.
Software options
Three categories of tools handle this, at different price points:
Supplier diversity platforms. Supplier.io, Coupa Supplier Diversity, and Jaggaer Diversity all offer dedicated Tier-2 reporting modules. They maintain certification databases that auto-verify status against NMSDC, WBENC, and SBA records. Pricing typically runs $15,000 to $60,000 per year for enterprise contracts.
Subcontracting plan management tools. B2Gnow (now part of WEX) is purpose-built for government subcontracting plan compliance. It is widely used by transportation agencies and connects directly to eSRS for SF-294/295 filing. Many state DOTs mandate its use on federally funded highway contracts.
ERP add-ons. SAP Ariba, Oracle Procurement Cloud, and Ivalua all have supplier diversity tracking capabilities within their broader sourcing modules. If you are already running one of these platforms, activating the diversity tracking module is often lower cost than a standalone tool.
For smaller primes with simpler supply chains, a structured spreadsheet template with annual cert verification is workable. It becomes unmanageable above 50 active diverse subs or 3 reporting customers with different formats.
Three action steps
First, run a spend analysis against your current vendor master to identify which subs hold active certifications and which are unverified. Most primes discover their reportable spend is higher than they thought, and their documented spend is lower.
Second, request copies of current certification letters from any supplier you plan to count in a federal SF-294 or a corporate Tier-2 submission. Keep them on file with the expiration date flagged. A sub's verbal assurance that they are certified is not sufficient.
Third, if you are bidding on a federal contract above $750,000, review FAR 52.219-9 before you sign. The subcontracting plan is negotiated before award, and the goals you commit to follow you through the life of the contract. Setting realistic goals requires knowing your supply base before you submit.
