- Identify small businesses in the right NAICS and socio-economic category.
- Narrow candidates by claimed CMMC level when CUI is in scope.
- Independently verify SPRS scores and assessment status before award.
- Document outreach and selection for subcontracting plan compliance.
CMMC subcontractor flow-down and sourcing
When subcontractor personnel need access to Controlled Unclassified Information (CUI), primes flow down DFARS 252.204-7012 and verify cyber posture before award. SamMatch lets subcontractors self-report CMMC Level 1 or 2 and SPRS scores, and lets primes filter match results — with explicit disclaimer that SamMatch does not verify CMMC status in SPRS or PIEE.
What experienced DoD primes need at sourcing time
How SamMatch handles CMMC (self-attestation)
Subcontractors optionally attest CMMC Level 1, Level 2, or N/A and an SPRS score on their profile. Primes can apply an optional CMMC filter when adding requirements or reviewing matches. Badges on match results show self-reported status. This is a sourcing filter only — not a certification vault or third-party assessment.
Prime responsibility unchanged
FAR and DFARS place verification on the prime contractor. Confirm CMMC and SPRS data through official DoD systems before subcontract award. SamMatch reduces time finding candidates who claim alignment; it does not replace compliance verification.
Frequently asked questions
Does SamMatch verify CMMC certifications?
No. Subcontractors self-report CMMC level and SPRS scores. Primes must independently verify status in SPRS/PIEE before award.
Related resources
Ready to source subs against your subcontracting plan?
Rank SAM.gov-verified small businesses by NAICS and socio-economic category — $299/mo for primes.
Start matching →