SDVOSB certification, start to finish

The 90-day timeline everyone repeats is wrong

Search for how long SDVOSB certification takes and you will be told, confidently and repeatedly, that SBA has 90 days. It doesn't. There is no processing deadline in 13 CFR part 128 and none in 15 U.S.C. 657f. SBA can request documentation at any point in the process, and the clock is whatever the clock turns out to be.

The 90 days in the regulation is the waiting period before you can reapply after being declined (13 CFR 128.305(a)). Somebody misread it years ago and the internet copied it forward. If you are planning a bid around a certification date, plan around SBA's actual published averages instead — and treat those as history, not a promise:

• — About 30 days when the program launched in 2023.
• — A 15-day average across the first year, as of January 2024.
• — 81 days by the end of 2024, as the backlog built.
• — 12 days as of November 2025, after SBA cleared the backlog.

Source: SBA press release, 2025-11-11. Note SBA's own release frames the backlog in partisan terms; the figures are official, the narrative around them is politics. We are quoting the numbers.

What it actually requires

Self-certification is dead — with one genuinely unresolved corner

For federal prime set-asides and sole-source awards, self-certification ended on 1 January 2024. A contracting officer must verify you are designated in SAM as SBA-certified (FAR 19.1403(b)).

For subcontracting and goaling credit, SBA's regulation says certification has been required since 22 December 2024 (13 CFR 128.200(c)(2)). But the FAR clause primes actually operate under has not caught up. FAR 52.219-9, in its January 2025 form, still says a contractor may accept a subcontractor's written representation of its socioeconomic status, and only requires confirming SBA certification for HUBZone (FAR 52.219-9(c)(2)(i)).

That gap is real and we are not going to smooth it over. In practice: get certified. Primes increasingly ask for it regardless of what their clause strictly requires, and being the subcontractor whose status a prime cannot count is not a position you want to negotiate from. And note that none of this stops you bidding full and open competition — certification gates set-asides, not federal contracting itself.

What the certification is actually worth

The government-wide SDVOSB goal is 5 percent of the total value of all prime contract and subcontract awards each fiscal year — raised from 3 percent by the FY2024 NDAA (15 U.S.C. 644(g)(1)(A)(ii)). Agencies get measured against it, which is the mechanism that makes your certification matter to a contracting officer.

The VA goes further than any other agency. Under its Vets First authority, a VA contracting officer shall restrict competition to veteran-owned businesses whenever they reasonably expect two or more to bid at a fair and reasonable price — the "rule of two," and it is mandatory, not discretionary (38 U.S.C. 8127(d)). VA also gives statutory priority to veteran-owned concerns across its contracting preferences (38 U.S.C. 8128(a)), with SDVOSBs ranked ahead of VOSBs.

Sole-source awards are capped at $7 million for manufacturing and $4 million for everything else (13 CFR 128.405). Above that, it goes competitive.

The actual sequence

1. 1. Make sure the VA has you right. SBA reads VA's record for your veteran and service-disabled status. SBA's own guidance flags credential mismatch as the top failure at this stage — your full name including any suffix, date of birth, and residential address must match between VA and SBA. Fix mismatches before you file, not after.
2. 2. Register in SAM.gov. It is free. You need a Unique Entity ID and a complete registration. SAM's own checklist states plainly that there is no charge to get a UEI, register, or maintain registration (SAM.gov Entity Registration Checklist (Nov 2024)), and GSA says outright that you do not need to pay a third party to do it (GSA — Register your business). Companies that charge for this are a running scam on new veteran businesses.
3. 3. Set your NAICS codes. Size at certification is measured against the codes in your SAM profile, so this step is load-bearing and happens in SAM, not in the application.
4. 4. Apply at certifications.sba.gov. No fee. You will supply documentation proving ownership and control — operating agreement, cap table, corporate resolutions, and evidence the veteran runs the place.
5. 5. Answer every SBA request, quickly. Failing to respond is itself grounds for denial, and SBA may draw an adverse inference — it can presume the missing information would have shown you ineligible. The burden of proof is yours throughout (13 CFR 128.302(d)).
6. 6. If denied, pick one of two roads. Appeal to SBA's Office of Hearings and Appeals within 10 business days — where only ownership and control are reviewable, since veteran-status decisions belong to the VA (SBA Office of Hearings and Appeals — SDVO SBC appeals). Or fix it and reapply after 90 days.
7. 7. Keep it alive. Report material changes within 30 days; recertify every three years.

A note on 38 CFR part 74

If you go looking, you will still find 38 CFR part 74 on the books, describing VA verification in the present tense. It was never rescinded — it just describes a program that stopped operating on 31 December 2022. It is a live regulation for a dead process, which is a very government thing to be. The rules that bind you are in 13 CFR part 128.