If you are a small business entering the world of government contracting, the phrase "DCAA Compliance" probably looms large. It is often misunderstood, oversold by consultants, and a source of unnecessary anxiety.
Many contractors assume they need a complex, expensive ERP system the moment they win their first contract. This is false.
In this guide, we demystify DCAA compliance. We’ll explain exactly when you need it, what an "Approved" system actually looks like (hint: there is no such thing as "DCAA Certified Software"), and how to pass the SF1408 Pre-award Survey without breaking the bank.
When is DCAA Compliance Actually Required?
Contrary to popular belief, you do not need a DCAA-compliant system for every government contract. The requirement is triggered by the contract type, not just the customer.
1. Cost-Plus Contracts (The Big Trigger)
If you are awarded a Cost-Reimbursement contract (e.g., Cost-Plus-Fixed-Fee), the government is paying your actual allowable costs. Because of this risk, they require a compliant system to ensure you aren't billing for unallowable expenses (like alcohol or interest) buried in your overhead.
- Requirement: Mandatory. You must pass an SF1408 audit.
2. Time & Materials (T&M)
Often requires a compliant system to verify the "Material" portion and any indirect rates applied to it.
3. Firm Fixed Price (FFP)
Generally NOT Required. If you have a Fixed Price contract, the government pays a set amount regardless of your costs.
- Exception: If the contract has a "Cost-Reimbursable" line item (CLIN), such as for Travel or ODCs, you may need a system to track those specific costs compliantly.
4. SBIR/STTR Phase II Grants
While technically "Grants," Phase II awards from agencies like DOE, NSF, and NIH are often treated like cost-type contracts. They require adherence to FAR Part 31 cost principles.
Pro Tip: Treat your Phase II grant like a contract. Setup a compliant system now to avoid a nightmare scenario during a future audit or when transitioning to a DoD Phase III.
The Myth of "DCAA Approved Software"
Let’s clear this up: The DCAA does not certify software. There is no such thing as "DCAA Approved Quickbooks" or "DCAA Certified Xero."
DCAA compliance is a function of your Accounting Policies + Your Procedures + Your System. You can have the most expensive ERP in the world (like Deltek Costpoint), but if your employees are fake-filling timesheets on Fridays, you are non-compliant. Conversely, you can be fully compliant using Quickbooks Desktop if you have the right rigorous workflows in place.
The SF1408: Checklist for a Compliant System
When DCAA audits your system, they use the Standard Form 1408 (SF1408) pre-award survey. Here is what they are looking for, mapped to the real-world accounting tasks you need to perform.
1. Segregation of Direct vs. Indirect Costs
- Rule: You must clearly separate costs that benefit a specific project (Direct) from costs that benefit the whole company (Indirect).
- Gap: Many generic chart of accounts mix these up. You need separate GL buckets for "Direct Labor" vs. "Overhead Labor."
2. Isolation of Unallowable Costs
- Rule: Per FAR 31.205, certain costs (Interest, Alcohol, Lobbying, Entertainment) are never billable.
- Gap: Your system must capture these costs but automatically exclude them from any billing or indirect rate calculation.
- Fix: Create a "9000 Series" in your Chart of Accounts specifically for Unallowable expenses.
3. Allocation of Indirect Costs (The Pools)
- Rule: You must consistently group indirect costs into pools (Fringe, Overhead, G&A) and allocate them to projects based on a causal relationship.
- Gap: Doing this manually in Excel is risky. One formula error can lead to years of incorrect billing (and a massive refund demand later).
4. Job Cost Accounting
- Rule: Costs must be accumulated by Project/Job.
- Gap: You need to be able to run a P&L per project. If you can only see company-wide profit, you are not compliant.
5. Timekeeping (The #1 Audit Failure)
Compliance starts with labor.
- Requirement: Employees must record time daily.
- Requirement: Must record all hours worked (Total Time Accounting), even if unpaid.
- Requirement: Supervisor approval required.
- Requirement: Specific charge codes for every project.
Warning: "End of week" timesheet filling is the fastest way to fail a floor check audit.
Comparison: Tools for Compliance
| Feature | Quickbooks Online | Quickbooks Enterprise | Compliant ERP (e.g., Unanet/Costpoint) |
|---|---|---|---|
| Job Costing | Weak (Requires workarounds) | Strong | Native / Robust |
| Indirect Rates | Manual (Excel) | Manual (Excel) | Automated |
| Price | $ | $$ | $$$$ |
| DCAA Readiness | Low (Needs 3rd party add-ons) | Medium (Standard for <$10M revenue) | High |
Our Verdict: For most small businesses ($1M - $20M), Quickbooks Enterprise (hosted) is the sweet spot. It offers the segregation and job costing needed without the six-figure implementation cost of a purpose-built GovCon ERP.
Visual Content Opportunities
Recommendation 1: An "Allowable vs. Unallowable" visual checklist based on FAR 31.205 common cost codes. Alt Tag: Checklist of common allowable and unallowable costs for government contractors per FAR Part 31.
Recommendation 2: A flowchart of the SF1408 Audit Process, from "Notification" to "System Demonstration" to "Final Report." Alt Tag: Flowchart showing the steps of a DCAA SF1408 Pre-award accounting system audit.
Frequently Asked Questions
Can I request a DCAA audit myself?
No. You cannot hire DCAA. They are only engaged by a Federal Contracting Officer. If you want to check your readiness before they arrive, you must hire a private CPA firm or consultant to perform a "Mock Audit."
How much does it cost to set up a compliant system?
If you are starting from scratch or migrating from a messy QBO file, expect to spend $2,000 - $5,000 for a professional setup. This includes restructuring your Chart of Accounts, setting up pools, and creating policy documents. Trying to DIY this step often costs more in cleanup later.
Is Quickbooks Online compliant?
Technically, no software is "compliant." However, QBO makes compliance harder. It lacks the rigid controls of Desktop/Enterprise. You can pass an audit with QBO, but it requires significant manual reconciliation outside the system and strict discipline. Most GovCon accountants will steer you toward Enterprise.
Pass Your Audit on the First Try.
Your General Ledger is your first line of defense. AudCor's Compliance Engine scans your accounting data against SF1408 requirements and FAR clauses to flag risks before the auditor arrives.
Don't guess. Verify.