- Find small businesses in the right NAICS and socio-economic category.
- Narrow the list by claimed CMMC level when CUI is in scope.
- Verify SPRS scores and assessment status yourself before award.
- Document outreach and selection for subcontracting plan compliance.
CMMC subcontractor flow-down and sourcing
When a sub needs access to Controlled Unclassified Information (CUI), primes must flow down DFARS 252.204-7012 and check cyber posture before award. SamMatch lets subs self-report CMMC Level 1 or 2 and SPRS scores. Primes can filter matches — but SamMatch does not verify CMMC in SPRS or PIEE.
What experienced DoD primes need at sourcing time
Find the right NAICS and cert, filter by CMMC when CUI is in scope, and document outreach.
How SamMatch handles CMMC (self-attestation)
Subs report CMMC on their profile; primes filter matches — SamMatch does not verify.
Subcontractors can list CMMC Level 1, Level 2, or N/A and an SPRS score on their profile. Primes can add an optional CMMC filter when reviewing matches. Badges show self-reported status only. This is a sourcing shortcut, not a certification check.
Prime responsibility unchanged
You must still confirm CMMC and SPRS in official DoD systems before award.
FAR and DFARS put verification on the prime contractor. Check CMMC and SPRS in official DoD systems before you award the subcontract. SamMatch helps you find candidates who claim alignment. It does not replace your compliance checks.
Frequently asked questions
Does SamMatch verify CMMC certifications?
No. Subcontractors self-report CMMC level and SPRS scores. Primes must verify status in SPRS/PIEE before award.
Related resources
Try one federal requirement free before you subscribe
Upload solicitation text, review Requirement Assist field analytics, and see how many ACTIVE small businesses match — no payment or card required.
Start free preview →