What's the right way to sell to a government/federal buyer?

**Federal sales requires a GSA Multiple Award Schedule (MAS) contract, a SAM.gov UEI (replaced DUNS on 2022-04-04), a CAGE code, primary NAICS (511210 for SaaS, 541512 for IT systems design, 541519 for IT staffing), and a 6-18 month procurement cycle governed by FAR Part 8.4 and FAR Part 15.

You compete on past performance (CPARS), compliance posture, technical approach, and price reasonableness, never on features or demos.** SUBAGENT_VERIFIED

Per GSA official MAS solicitation 47QSMD20R0001 (acquisition.gov), there are NO 'CDSSP 84.05' codes. Offers go under a Large Category / Subcategory / Special Item Number (SIN): Information Technology Category, SIN 54151S (IT Professional Services), SIN 511210 (SaaS / Cloud), SIN 33411 (Computer Hardware), SIN 54151HACS (Highly Adaptive Cybersecurity Services), SIN 54151ECOM (Electronic Commerce).

Twelve sourced specifics every founder must internalize:

1. GSA MAS award averages 110 days per GSA FAS dashboard. 60%+ of first-time submissions are rejected for incomplete Pathways to Success training or missing Commercial Sales Practices (CSP-1) disclosures.
2. FedRAMP Moderate authorization runs $2M-$2.5M and 12-18 months per fedramp.gov. 3PAO assessment alone is $250K-$500K (Coalfire, Schellman, A-LIGN dominate). Continuous monitoring (ConMon) is $40K-$80K/month indefinitely. FedRAMP High adds 50-80% more cost. The 2024 OMB M-24-15 rewrite (whitehouse.gov/omb) removed JAB approval and replaced it with the FedRAMP Authorization Board, simplifying agency-sponsored ATOs.
3. Micro-purchase threshold is $10,000 (FAR 2.101), simplified acquisition $250K, commercial item threshold $7.5M.
4. Section 889 Part B (effective 2020-08-13) bans contractors using covered Huawei/ZTE/Hytera/Hikvision/Dahua gear (FAR 52.204-25). 30% of would-be vendors fail this representation.
5. GAO bid protests must be filed within 10 days of award (or 5 days post-debrief) per 4 C.F.R. 21. Effectiveness rate (sustained or corrective) was 51% in GAO FY2023 Annual Report. COFC (Court of Federal Claims) protests at uscfc.uscourts.gov are an alternative when the GAO timeline closes; COFC has no automatic stay but offers de novo review.
6. DoD obligated $456B in FY2024 vs ~$300B civilian per USAspending.gov. DoD favors OTAs (10 U.S.C. 4022), Commercial Solutions Openings (CSOs), and SBIRs; civilian favors GSA Schedules, IDIQs, and BPAs.
7. SBIR Phase III is sole-source eligible without a dollar ceiling (sbir.gov policy directive), but only ~10% of Phase II awardees ever monetize a Phase III. Topics release 3x/year via topics.sbir.gov. DoD AFWERX (afwerx.com) and SOFWERX run their own accelerated SBIR/STTR cohorts, including the AFWERX Open Topic that lets vendors propose against a generic problem statement.
8. GWACs are the high-value lanes: NIH CIO-SP4 ($50B ceiling), GSA Alliant 2 ($75B ceiling, recompete imminent), NASA SEWP VI (products), GSA OASIS+ (services), GSA 8(a) STARS III ($50B small-business). Without a GWAC seat or a sub role, you are locked out of $200B+ in annual federal IT spend.
9. Capture-to-win conversion benchmarks (APMP/Shipley industry data, apmp.org): Bid/no-bid discipline of 30-40% bid rate, target Pwin >40% before submitting, average proposal cost $50K-$500K depending on complexity, color-team review cycle (Pink/Red/Gold/White) compresses 8-12 weeks of writing into a defensible package.
10. BAFO (Best and Final Offer) mechanics: After initial proposals, the contracting officer establishes a competitive range, conducts discussions, and requests final proposal revisions per FAR 15.307. Discounting in BAFO is the moment most amateurs leave 8-15% margin on the table; pros hold price and trade non-price terms (transition risk, key personnel, past performance addenda).
11. CMMC 2.0 phased rollout (32 CFR Part 170 final rule, effective 2024-12-16, DoD CMMC program): Level 1 self-assessment, Level 2 third-party C3PAO assessment ($60K-$300K), Level 3 DIBCAC government assessment. Mandatory in DoD contracts handling CUI starting in DFARS contract clauses through 2028. Adds $100K-$1M of compliance overhead.
12. Other Transaction Authority (OTA) mechanics under 10 U.S.C. 4021/4022: Research OTAs (4021) and Prototype OTAs (4022). Prototype OTAs require at least one non-traditional defense contractor or a one-third cost share. Production OTAs (4022(f)) are sole-source-eligible follow-ons to a successful prototype, the cleanest fast-path from SBIR/prototype to production scale (dau.edu OTA guide).

Federal Procurement Tiers (FY2026 thresholds):

Agency-by-Agency Tendencies (where to focus first):

• DoD (Army, Navy, Air Force, SOCOM, DIU): OTA-friendly. DIU and AFWERX move in 60-90 days. Avoid traditional FAR contracts as a startup. Submit via DSIP for SBIR/STTR.
• DHS: FirstSource III for SDVOSB/8(a). EAGLE Next-Gen for IT services. DHS S&T does SBIRs aggressively. Procurement Innovation Lab (PIL) pilots agile contracting.
• VA: T4NG2 ($65B ceiling) is the lane. SDVOSB Rule of Two preference (FAR 819).
• DOI / USDA / NPS: Lower compliance bar. Good first-ATO agencies for early-stage SaaS.
• GSA itself: Buys early to seed FedRAMP catalog. Pursue ATOs through GSA own customers (FAS, TTS, 18F, login.gov ecosystem).
• State, Local, Education (SLED): Not federal but uses GSA Schedule via Cooperative Purchasing. Sell to state CIOs and NASPO ValuePoint (naspovaluepoint.org).
• Intelligence Community (CIA, NSA, NRO, ODNI): Separate IC ITE ecosystem, requires TS/SCI cleared staff, In-Q-Tel as a strategic on-ramp (iqt.org).
• HHS / NIH / CDC: ARPA-H is the new BAA-driven biomedical innovation arm; aggressive on SBIR/STTR.

Federal CAC Payback Math (the part founders skip):

• Commercial mid-market SaaS: CAC $30K-$60K, ACV $25K-$80K, payback 12-18 months.
• Federal SaaS: pre-revenue compliance burn $2.5M-$3M (FedRAMP + GSA Schedule + bid and proposal + capture hires), then CAC per logo $200K-$400K (proposal labor at $150-$250/hr loaded), ACV $250K-$2M, payback 24-48 months. Federal LTV is high (5-year base + three 5-year options), but the J-curve is a 3-year cash dig.
• B&P (Bid and Proposal) reserves: budget 2-4% of federal revenue for B&P; below that, pipeline volume is too thin to hit Pwin >40%.
• Indirect rate structure: Federal cost-reimbursable contracts require a DCAA-compliant accounting system with provisional billing rates (Fringe, Overhead, G&A, F&CM). Without it, you cannot bid cost-reimbursable, only firm-fixed-price.

Capture and Color-Team Workflow:

1. Pursue gate (12-24 mo out): Identify opportunity via SAM.gov, agency forecasts, FedBizOpps history. Score Pwin.
2. Capture gate (6-12 mo out): Customer call plan, hot-button discovery, teaming agreements (prime/sub LOIs), draft RFP review, pre-RFP white papers and RFIs.
3. Pink Team review (40% draft): Strategy and theme check.
4. Red Team review (90% draft): Adversarial peer review, compliance matrix audit.
5. Gold Team review (final): Executive go/no-go.
6. White Team: Final compliance and production.
7. Submit, then prep for discussions and BAFO. Win rate uplift from disciplined color-team review: APMP data shows 25-40% Pwin lift vs unreviewed proposals.

The Real Federal Sales Motion:

• Past performance is gating. No fed past performance? Subcontract via an 8(a) prime, HUBZone, SDVOSB, or WOSB (sba.gov 8(a)). Joint Ventures (JVs) under SBA Mentor-Protege Program let small primes leverage large mentor past performance.
• GSA Schedule pricing is locked via the Price Reductions Clause and MFC disclosure. Discount commercially below tracked ratio and you owe a price reduction on every GSA order, historically the #1 IG audit finding and the leading False Claims Act vector.
• Capture management starts 12-24 months pre-RFP. When an RFQ hits SAM.gov, the requirement is already wired to an incumbent or a sole-source justification. Track via SAM.gov forecasts, FPDS-NG, and agency Forecast of Contracting Opportunities pages.
• End-of-fiscal-year (Sep 30) drives ~35% of annual obligations. Use-it-or-lose-it 1-year money spends aggressively in Q4. Continuing Resolutions (CRs) starve new starts and protect incumbents.
• Two distinct playbooks. DoD: SBIR Phase I -> Phase II -> OTA -> Production OTA -> Phase III sole-source. Civilian: 8(a) sub -> GSA Schedule -> BPA -> IDIQ prime -> GWAC seat.
• Sole-source justifications are real. FAR 6.302 authorizes sole-source under seven exceptions (only one source, unusual urgency, industrial mobilization, international agreement, statute, national security, public interest). A skilled capture team writes the J&A (Justification and Approval) with the agency, not against them.

Bear Case (why federal kills early-stage SaaS):

Federal is a cash-flow trap below $10M ARR. FedRAMP burns $2M-$2.5M plus $40K-$80K/month ConMon before first revenue dollar. Net-30 commercial becomes Net-60-to-120 in federal (Prompt Payment Act 31 U.S.C. 3902 nominally requires 30 days; agencies delay via invoice-rejection loops).

One Section 889 misrepresentation or one MFC pricing miss triggers False Claims Act exposure: treble damages plus $13,508-$27,018 per claim (DOJ FY2024 inflation-adjusted). Real precedents documented in DOJ press release archive: Oracle 2010 $199.5M FCA settlement over GSA Schedule MFC pricing, CA Inc. $111M settlement (2004), Carahsoft 2015 $61M settlement, NetCracker/Computer Sciences 2015 $12.75M, IBM $14.8M (2017), Cisco $8.6M (2019).

IG audits average 18-month timelines with discovery-heavy depositions. Eight recurring failure modes I have observed: (1) FedRAMP burn without a sponsor agency, you cannot self-authorize; (2) winning a $50K SBIR Phase I and assuming Phase III follows; (3) signing a Schedule before commercial pricing stabilizes, locking in below-cost rates for a 5-year base plus three 5-year options; (4) accepting a sub-tier role under a prime that owns the customer relationship and the CPARS; (5) protesting a loss and getting informally blacklisted by the contracting officer; (6) hiring a former government Senior Executive without enforcing the 1-2 year cooling-off period, triggering 18 U.S.C. 207 ethics violations; (7) misclassifying a small business size standard under 13 C.F.R. 121 and losing set-aside eligibility mid-performance via SBA size-protest; (8) failing to flow down required FAR/DFARS clauses to subcontractors, exposing the prime to liability for sub non-compliance.

If ARR is under $5M, you have no federal-experienced hire with prior agency relationships, and no sponsor agency for an ATO, expected NPV from federal is negative, raise commercial first.

Counter-Bear (when federal IS the right motion):

Federal works when (a) your product solves a mission requirement no commercial alternative addresses (defense, intel, cyber), (b) you have $15M+ ARR or $20M+ in unrestricted runway to absorb the 24-36 month J-curve, (c) you can hire a federal GM with a P&L track record at a peer firm, (d) you have a sponsor agency that will co-author your ATO package, and (e) your commercial pricing has stabilized so MFC lock-in does not destroy unit economics.

In those conditions, federal contributes 40-70% of revenue with 90%+ logo retention through option years, and a $5M ACV federal logo is structurally lower-churn than three $1.5M commercial logos.

Related Pulse knowledge:

• /knowledge/q47 - Enterprise sales cycle benchmarks
• /knowledge/q88 - Compliance-as-a-sales-motion
• /knowledge/q112 - Channel partner economics and prime/sub splits
• /knowledge/q133 - Multi-year contract structuring and ramp clauses
• /knowledge/q156 - Procurement-led buying committees
• /knowledge/q172 - CAC payback by segment
• /knowledge/q189 - SOC 2 Type II vs FedRAMP cost tradeoff
• /knowledge/q204 - DCAA-compliant accounting for federal contractors

TAGS: federal-sales, gsa-mas, sam-uei, fedramp, far-compliance, section-889, gao-protest, cofc, ota, sbir, gwac, cio-sp4, oasis-plus, cmmc, color-teams, bafo, dcaa, government-procurement

FAQ

What baseline registrations and codes do I need to sell to a federal buyer? You need a GSA Multiple Award Schedule (MAS) contract, a SAM.gov UEI (which replaced DUNS on 2022-04-04), a CAGE code, and a primary NAICS code (511210 for SaaS, 541512 for IT systems design, 541519 for IT staffing).

The procurement cycle runs 6-18 months governed by FAR Part 8.4 and FAR Part 15, and you compete on past performance (CPARS), compliance posture, technical approach, and price reasonableness, never on features or demos. GSA MAS award averages 110 days, with 60%+ of first-time submissions rejected for incomplete Pathways to Success training or missing CSP-1 disclosures.

What does FedRAMP authorization actually cost and take? FedRAMP Moderate authorization runs $2M-$2.5M over 12-18 months, with the 3PAO assessment alone at $250K-$500K (Coalfire, Schellman, and A-LIGN dominate) and continuous monitoring at $40K-$80K per month indefinitely. FedRAMP High adds 50-80% more cost.

The 2024 OMB M-24-15 rewrite removed JAB approval and replaced it with the FedRAMP Authorization Board, simplifying agency-sponsored ATOs.

What are the key dollar thresholds in federal procurement? The micro-purchase threshold is $10,000, simplified acquisition is $250K, and the commercial item threshold is $7.5M, per FAR 2.101. A GPC purchase under $10K can close same-day needing only a SAM UEI, while Full and Open competition over $250K under FAR 15 takes 6-18 months and requires FedRAMP plus Section 889 compliance.

GWACs like CIO-SP4 ($50B ceiling) and Alliant 2 ($75B ceiling) are the high-value lanes, and without a seat or sub role you are locked out of $200B+ in annual federal IT spend.

What is Section 889 and how often does it disqualify vendors? Section 889 Part B, effective 2020-08-13, bans contractors using covered Huawei, ZTE, Hytera, Hikvision, or Dahua gear, per FAR 52.204-25. About 30% of would-be vendors fail this representation. It is one of several compliance floors, alongside FedRAMP and full FISMA, that gate eligibility before you can even compete.

How should I handle a Best and Final Offer without leaving margin on the table? After initial proposals, the contracting officer establishes a competitive range, conducts discussions, and requests final proposal revisions per FAR 15.307. Discounting in the BAFO is the moment most amateurs leave 8-15% of margin on the table; pros hold price and trade non-price terms like transition risk, key personnel, and past-performance addenda.

If you lose, GAO bid protests must be filed within 10 days of award (or 5 days post-debrief), and the GAO effectiveness rate was 51% in FY2023.