Blog

Federal Supplier Diversity Requirements: 2026 Compliance Guide 

If you lead procurement or compliance at a federal contractor, the rules just changed. Understand the 2026 Executive Order’s impact on supplier diversity, what your FAR Subpart 19.7 plan must cover, and how automation can protect you before your next audit.

Diverse business professionals reviewing supplier diversity compliance documents together in a modern office.

If you lead procurement or compliance at a federal contractor, the ground beneath your subcontracting program just shifted again. The March 26, 2026 Executive Order on DEI in federal contracting has redrawn the rules for who you can prefer, how you must certify your supply chain, and what happens when your reporting doesn’t hold up under audit. Meanwhile, your FAR Subpart 19.7 obligations haven’t gone anywhere: you still owe the SBA a good-faith effort to include small and diverse suppliers, and you still have to prove it through eSRS. The contractors who get this wrong don’t just lose points on past performance, they lose the contract. This guide walks you through the federal categories you have to plan against, what the 2026 Executive Order actually changed (and what it didn’t), the 18 state programs that layer on top, and how to automate the tracking, verification, and reporting that now carries real liability. 

What Are Federal Supplier Diversity Requirements? 

Federal supplier diversity requirements are the laws, regulations, and contractual obligations that require federal prime contractors to include small and diverse suppliers in their supply chains, report that participation to the government, and make documented good-faith efforts to meet negotiated subcontracting goals. 

These obligations flow primarily from the Small Business Act and FAR Subpart 19.7. Any prime contractor holding an unclassified contract expected to exceed $900,000 (or $2 million for construction) generally must submit an individual or commercial subcontracting plan covering each of the socioeconomic categories below. Your plan must set specific percentage goals and outreach strategies for each one: 

  • Small Business (SB): Firms that meet the SBA size standard for their NAICS code and serve as the baseline for all other small business categories. 
  • Small Disadvantaged Business (SDB): Small firms that are at least 51% owned and controlled by individuals who are both socially and economically disadvantaged. A SDB status can now be established through a narrative process following recent court rulings. 
  • Women-Owned Small Business (WOSB): Small firms that are at least 51% owned and operated by one or more women, with Economically Disadvantaged WOSB (EDWOSB) as a subset carrying additional financial thresholds. 
  • HUBZone businesses: Small firms headquartered in a Historically Underutilized Business Zone, with at least 35% of employees residing in a HUBZone, qualifying for contract set-asides and price evaluation preferences. 
  • Service-Disabled Veteran-Owned Small Business (SDVOSB): Small firms at least 51% owned by one or more service-disabled veterans, with day-to-day management and long-term decisions controlled by those veterans. 
  • SBA 8(a) Program participants: Socially and economically disadvantaged small firms admitted to the SBA’s nine-year business development program, eligible for sole-source and competitive 8(a) set-asides. 

Contractors demonstrate compliance by filing Individual Subcontracting Reports (ISRs) semiannually and Summary Subcontracting Reports (SSRs) annually through the Electronic Subcontracting Reporting System (eSRS). The legal standard is “good-faith effort,” not goal attainment: you are not automatically penalized for missing a target as long as you can document genuine, well-planned outreach and engagement with small and diverse suppliers. What contracting officers want to see is evidence, such as supplier-search logs, solicitation records, certification verifications, and a clear paper trail that ties your plan to your actual spend. 

What Changed in 2026: The Executive Order on DEI and Federal Contracts 

On March 26, 2026, the President signed an Executive Order restructuring how diversity, equity, and inclusion considerations can be applied to federal contracts and subcontracts. The order does not repeal supplier diversity. Instead, it reshapes the compliance perimeter contractors now operate inside. 

Three changes matter most. First, the order prohibits race- or ethnicity-based supplier preferences in federal contracting decisions, requiring that set-aside eligibility rest on program-specific, legally defensible criteria. Second, agencies must now include a flow-down clause in federal contracts and in every tier of subcontracts, under which the contractor (the firm holding the contract directly with the government) agrees not to engage in racially discriminatory DEI activities, agrees to furnish records on demand, and is required to report any subcontractor’s known or reasonably knowable noncompliance to the contracting agency. The order calls this a contract clause rather than a self-certification, but the practical effect for primes is to flow the same compliance obligations down to the lowest tier and document them in a defensible audit trail. Third, the liability picture has expanded: the EO declares compliance with the clause “material to the Government’s payment decisions” for purposes of 31 U.S.C. 3729(b)(4), so noncompliance can trigger breach of contract, suspension and debarment, and False Claims Act exposure, including qui tam suits brought by relators. 

Critically, FAR Subpart 19.7, small business subcontracting plans, and eSRS reporting obligations remain in force for now. Section 5 of the Executive Order does, however, direct the FAR Council to amend the FAR to include the new flow-down clause and to remove any provisions that conflict with it, so the regulatory environment around FAR 19 may shift over the next compliance cycle. On the case law side, recent federal court decisions across two related fronts have constrained race-based presumptions: in Tennessee (Ultima Services Corp. v. USDA, 2023) and Texas (Nuziard v. MBDA, 2024), federal courts struck down race-based presumptions of social disadvantage in the SBA 8(a) and Minority Business Development Agency programs respectively, while in Kentucky (Mid-America Milling Co. v. U.S. DOT, 2024) the court preliminarily enjoined the same presumption in USDOT’s Disadvantaged Business Enterprise (DBE) program. The underlying programs remain active, and applicants can still qualify as SDBs by submitting a narrative that documents their individual experience. For compliance leaders, the result is a tighter audit posture and a less stable regulatory floor. 

Supplier Diversity Requirements by State 

Federal rules set the floor. If you sell into state-funded or state-regulated work — or you operate inside a utility, transit, or infrastructure program that flows federal dollars through a state agency — you also need to track the state program that layers on top. Here are the 18 state frameworks most commonly in scope. 

California 

California runs two overlapping programs. The state Small Business and Disabled Veteran Business Enterprise (SB/DVBE) program sets a 25% SB participation goal and a 3% DVBE goal for state agency contracting. Separately, CPUC General Order 156 applies to regulated utilities, directing them toward a 21.5% spend target across minority, women, disabled veteran, and LGBT business enterprises (WMDVLGBTBE). Categories covered include SB, DVBE, MBE, WBE, and LGBT-owned businesses.  

Differentiator: California is one of the few states that formally recognizes LGBT-owned businesses as a distinct supplier diversity category for utility procurement reporting. 

Connecticut 

Connecticut’s set-aside program, codified at CGS § 4a-60g, directs state agencies to set aside at least 25% of contracting dollars for certified small contractors, with 25% of that pool (roughly 6.25% of total spend) reserved for businesses owned by minorities, women, or persons with disabilities. The program applies to most state agency and public-works contracts. Categories include small, minority, women, and disabled-owned businesses.  

Differentiator: Connecticut’s nested set-aside structure — a set-aside within a set-aside — is unusually prescriptive compared to aspirational-goal states, and compliance is tracked through the Department of Administrative Services. 

Washington, D.C. 

The District’s Certified Business Enterprise (CBE) program, administered by the Department of Small and Local Business Development (DSLBD), applies to D.C. government contracts and establishes a 50% expenditure goal for CBEs on agency procurement. CBE subcategories include Small Business Enterprise (SBE), Local Business Enterprise (LBE), Disadvantaged Business Enterprise (DBE), Resident-Owned Business (ROB), Longtime Resident Business (LRB), and Veteran-Owned Business (VOB).  

Differentiator: D.C.’s 50% participation target is the highest formal goal in the country, and contracts above certain thresholds must include CBE subcontracting plans as a condition of award. 

Illinois 

Illinois’ Business Enterprise Program (BEP), established under the Business Enterprise for Minorities, Women, and Persons with Disabilities Act, sets a 30% aspirational goal on state procurement, typically allocated as 20% to minority-owned, 7% to women-owned, and 3% to persons-with-disabilities-owned businesses. The program applies to most state agency, university, and public construction contracts. Categories covered include MBE, WBE, and PBE.  

Differentiator: Illinois was among the first states to elevate persons-with-disabilities-owned businesses (PBE) to a statutory subgoal, separate from veteran and MWBE categories. 

Kentucky 

Kentucky’s Minority and Women Business Enterprise program is administered through the Finance and Administration Cabinet, with aspirational goals typically set around 10% for state procurement. The program applies to executive branch contracts and certain pass-through federal dollars. Categories covered include MBE, WBE, veteran-owned, and service-disabled veteran-owned businesses.  

Differentiator: Kentucky’s federal district court issued a 2024 preliminary injunction in Mid-America Milling Co. v. U.S. DOT against the Disadvantaged Business Enterprise (DBE) program’s race- and gender-based presumption. That ruling does not apply to Kentucky’s state MWBE program, but it has reshaped how DOT-funded work flowing through the state is awarded and is part of a broader trend (alongside Tennessee’s Ultima decision and Texas’s Nuziard ruling) toward narrative-based individual-disadvantage documentation. 

Maryland 

Maryland’s Minority Business Enterprise (MBE) program, administered by the Governor’s Office of Small, Minority and Women Business Affairs (GOSBA) and the Maryland Department of Transportation, sets a 29% aggregate MBE goal on state contracts, with subgoals typically including 7% African American-owned and 10% women-owned participation. A separate Veteran-Owned Small Business (VSBE) program carries a 1% aspirational goal. Categories: MBE, WBE, VSBE.  

Differentiator: Maryland’s MBE program is one of the oldest and most litigated in the country, supported by a recurring statewide disparity study that renews program authority. 

Massachusetts 

Massachusetts’ Supplier Diversity Office (SDO), within the Operational Services Division, administers benchmark goals that typically target 7% MBE and 7% WBE participation on executive agency contracts, with additional goals layered in for state construction. Certification is available for minority-, women-, veteran-, LGBT-, disability-, and Portuguese-owned businesses.  

Differentiator: Massachusetts is one of a small number of states that formally certifies both LGBT-owned and disability-owned businesses at the state level, and its SDO benchmarks are reviewed annually against agency-specific spend patterns rather than a single statewide target. 

Minnesota 

Minnesota’s Office of Equity in Procurement, within the Department of Administration, certifies Targeted Group (TG), Economically Disadvantaged (ED), and Veteran-Owned (VO) small businesses and applies a 25% preference on eligible contracts below statutory thresholds. The program applies to state agency purchases of goods, services, and construction. Categories: TG, ED, VO.  

Differentiator: Minnesota’s TG/ED distinction separates eligibility by demographic category from eligibility based purely on economic disadvantage, letting the state operate race-neutral pathways alongside its historical targeted-group certifications. 

New Jersey 

New Jersey’s Division of Revenue and Enterprise Services certifies Minority-, Women-, Veteran-, and Disabled Veteran-Owned Businesses, while the Small Business Set-Aside Program reserves 25% of state contracting opportunities for small businesses. Program goals are grounded in New Jersey’s statewide disparity studies. Categories covered: SBE, MBE, WBE, VOB, DVOB.  

Differentiator: New Jersey layers a broad 25% small-business set-aside on top of traditional MWBE certification, so prime contractors need to satisfy both size-based and demographic-based participation to stay fully compliant with state procurement rules. 

New York 

New York’s Article 15-A of the Executive Law sets a statewide 30% Minority and Women-Owned Business Enterprise (MWBE) participation goal on state agency contracts, one of the most aggressive in the country. Separately, the Service-Disabled Veteran-Owned Business (SDVOB) Act sets a 6% goal administered through the Office of General Services. Categories: MBE, WBE, SDVOB.  

Differentiator: New York pairs the nation’s highest statutory MWBE goal with a dedicated 6% SDVOB carve-out, and compliance is reinforced by a statewide disparity study refreshed on a rolling basis. 

North Carolina 

North Carolina’s Historically Underutilized Business (HUB) program, codified at G.S. § 143-48 et seq., sets a 10% aspirational goal for HUB participation on state contracts and a companion goal on public construction. The program applies to executive branch agencies and universities. Categories covered under the HUB definition include Black, Hispanic, Asian American, American Indian, Female, Disabled, and Disadvantaged-owned businesses.  

Differentiator: North Carolina consolidates traditionally separate MBE, WBE, and disabled-owned categories under a single “HUB” umbrella, which simplifies certification but requires closer tracking to report against federal categories. 

Ohio 

Ohio runs parallel programs under the Department of Administrative Services. The MBE program, established by ORC 123.151, reserves a 15% set-aside of state goods and services purchases for certified minority-owned businesses. The Encouraging Diversity, Growth, and Equity (EDGE) program serves socially and economically disadvantaged firms on a race- and gender-neutral basis. Categories: MBE (set-aside) and EDGE (disadvantaged).  

Differentiator: Ohio’s EDGE program is a race-neutral, need-based alternative that has drawn renewed attention under the 2026 Executive Order as a model for programs built on documented individual disadvantage. 

Oregon 

Oregon’s Certification Office for Business Inclusion and Diversity (COBID) administers state certification for Minority, Women, Emerging Small, Service-Disabled Veteran, and Disadvantaged Business Enterprises. Governor’s office goals on state construction have historically targeted around 20% MWESB utilization. Categories: MBE, WBE, ESB, SDVBE, DBE.  

Differentiator: Oregon’s Emerging Small Business (ESB) certification is sized specifically below the SBA small-business threshold, creating a dedicated pathway for very small firms that larger primes can use to anchor early-stage supplier pipelines. 

Wisconsin 

Wisconsin Statute 16.75(4) directs state agencies to achieve a 5% Minority Business Enterprise (MBE) participation goal in annual purchasing, and the Veteran-Owned Business (VOB) and Disabled Veteran-Owned Business (DVB) programs carry a 1% aspirational goal. Certification is administered by the Department of Administration. Categories: MBE, WBE, VOB, DVB.  

Differentiator: Wisconsin’s statutory MBE floor is modest compared with larger industrial states, but the state supplements it with a dedicated Supplier Diversity Program that tracks agency-by-agency performance and publishes annual reports to the Legislature. 

Maine 

Maine administers supplier diversity primarily through its federally aligned Disadvantaged Business Enterprise (DBE) program, run by the Maine Department of Transportation, and a smaller state-level Minority and Women Business Enterprise certification through the Department of Administrative and Financial Services. Program applies to federally funded transportation contracts and, at a smaller scale, to general state procurement. Categories: DBE, MBE, WBE, VOB.  

Differentiator: Maine relies more heavily on federally harmonized DBE certification than on a standalone set-aside, which simplifies cross-border certification for primes but means most diverse-spend traction happens on USDOT-funded work. 

Louisiana 

Louisiana’s supplier diversity framework centers on two named programs: the Hudson Initiative, which certifies Louisiana-based small businesses for a 10% participation preference on state contracts, and the Veterans Initiative, which extends a similar preference to veteran-owned small businesses. Louisiana Economic Development administers the certifications. Categories: Louisiana small business, veteran-owned small business.  

Differentiator: Louisiana has paired its statutory programs with Source Louisiana, a state-branded registration and discovery platform that runs on Supplier.io’s supplier-registration infrastructure to give major employers a verified pipeline of in-state suppliers — a model other states are beginning to replicate. 

Missouri 

Missouri’s Office of Equal Opportunity (OEO) certifies Minority, Women, and Service-Disabled Veteran Business Enterprises, with state goals set at 10% MBE, 5% WBE, and 3% SDVBE participation on eligible state contracts. The program applies to state agency procurement and covered construction work. Categories: MBE, WBE, SDVBE.  

Differentiator: Missouri’s SDVBE goal is one of the highest formally adopted service-disabled veteran targets among non-coastal states and is backed by statutory bid-preference authority rather than a purely aspirational goal. 

Tennessee 

Tennessee’s Governor’s Office of Diversity Business Enterprise (Go-DBE) certifies small, minority-, women-, service-disabled veteran-, and persons-with-disabilities-owned businesses, and the state historically pursues a 15% aggregate diverse business participation goal on state spend. Categories: SBE, MBE, WBE, SDVOB, PWD-owned.  

Differentiator: Tennessee’s federal district court issued the 2023 Ultima Services Corp. v. USDA decision striking down the SBA 8(a) program’s race-based rebuttable presumption of social disadvantage. Together with Texas’s Nuziard decision (which targeted the MBDA) and Kentucky’s Mid-America Milling injunction (which targeted USDOT’s DBE program), the Ultima ruling has made the state’s Go-DBE narrative certification pathway a closely watched template for post-2026 compliance design. 

Simplify Federal Supplier Diversity Compliance with Supplier.io 

Supplier.io is a supplier intelligence and diversity platform purpose-built for federal contractors and large enterprises who have to track, manage, and discover small, diverse, and sustainable suppliers at scale. Under the 2026 compliance regime, every one of those verbs — track, verify, report — now sits inside an audit trail that can reach the False Claims Act. Supplier.io replaces the spreadsheets, stale portal logins, and manual certification chasing with a single, verified system of record that maps directly to the obligations in this guide. 

  • Data Enrichment: Automatically verifies and enriches your existing supplier list with certified diversity credentials and sustainability ratings pulled from 450+ authoritative sources — so your ISRs and SSRs are built on current, defensible certification data instead of whatever a supplier wrote in a spreadsheet three years ago. 
  • Spend Analytics: Tracks procurement performance against federal SB, SDB, WOSB, HUBZone, SDVOSB, and 8(a) goals in real time, with drill-down by business unit, NAICS, and contract — the visibility you need to catch a missed goal before a contracting officer does. 
  • Supplier Explorer: A searchable database of qualified diverse and sustainable suppliers, so your sourcing team can fill pipeline gaps with certified firms instead of defaulting to incumbent primes and explaining the miss later. 
  • Tier 2 Reporting: Automates the collection of indirect diversity spend from your prime suppliers, closing the subcontractor reporting loop that the 2026 Executive Order’s flow-down clause now puts squarely on the prime. 
  • Economic Impact: Quantifies the broader value of sourcing decisions — jobs supported, wages generated, tax revenue — so you can defend the program’s ROI to the CFO and the board, not just to the contracting officer. 

Case study: How Aramark doubled its small supplier engagement results 

Aramark — a global food, facilities, and uniform services provider that contracts with federal agencies, universities, hospitals, stadiums, and national parks — spent years tracking diverse suppliers with a basic system. “We had a tag for diverse and a tag for women. We worked with small businesses, but we weren’t monitoring that in any centralized or consistent way,” said Natily Santos, Vice President of Responsible Sourcing at Aramark. After deploying Supplier.io’s Supplier Intelligence Platform and gaining access to more than 11 million suppliers and 350 million data insights, Aramark doubled its small supplier engagement results overnight — simply by getting visibility into the small businesses it was already working with. “Our clients care about the ‘so what,'” Santos said. “It’s not just how much we’re spending, but how that spend supports jobs and communities. That’s the game changer — it turns procurement data into community value.” 

Ready to see it in your own environment? 

The 2026 compliance landscape rewards contractors who can show their work — and penalizes the ones who can’t. If your current stack is a patchwork of spreadsheets, portal logins, and certification PDFs, it is time to consolidate. Book a demo with Supplier.io to see how federal contractors are automating diversity tracking, certification verification, and Tier 2 reporting ahead of their next audit. 

Get started today

See how we can improve your entire company’s results

Book a demo