Supplier registration requirements fall into a predictable stack: legal and tax paperwork, banking details, insurance certificates, industry classification codes, and — if you’re selling to the federal government or certain large buyers — additional identifiers and certifications on top. The exact list depends on who you want to sell to, but the core documents are consistent across almost every procurement portal. Getting them right the first time matters: an error on your tax form alone can trigger a 24% backup withholding penalty on your payments.
Core Documents to Gather First
Before you open any portal, collect the paperwork every purchasing department will ask for. Your legal business name must match your official government filings exactly. A missing comma or “LLC” written as “L.L.C.” is enough to kick an application back. Have your primary physical address ready, and a separate mailing address if correspondence goes somewhere else.
The tax identification number is non-negotiable. For most businesses that means a nine-digit Employer Identification Number issued by the IRS.1Internal Revenue Service. About Form SS-4, Application for Employer Identification Number (EIN) Sole proprietors with no employees and no separate business entity can use their Social Security Number, though applying for an EIN is free and keeps your SSN off vendor paperwork.
Banking information comes next. Procurement departments need your routing number and account number to set up ACH payments, and most ask for a voided check or a formal letter from your bank confirming account ownership. If you’ve recently opened a new account, get that bank letter in hand before you start the application. It’s one of the most common documents vendors scramble for at the last minute.
How to Complete Form W-9 Correctly
Nearly every supplier registration requires a completed IRS Form W-9. It tells the buyer your taxpayer identification number and federal tax classification so they can report payments to the IRS. If the TIN you provide doesn’t match the name on the form, the buyer may be required to withhold 24% of your payments as backup withholding.2Internal Revenue Service. Publication 15 (2026), (Circular E), Employer’s Tax Guide
Download the current version from irs.gov. On Line 1, enter your name or business name exactly as it appears with the IRS. Line 3a asks for your federal tax classification: individual/sole proprietor, C corporation, S corporation, partnership, trust/estate, or LLC with sub-classification. Check only one box, and make sure it reflects how the IRS classifies your entity, not how your state organized it.3Internal Revenue Service. Form W-9 Request for Taxpayer Identification Number and Certification
When you sign, you’re certifying under penalty of perjury that your TIN is correct and that you’re not subject to backup withholding. Don’t leave the signature or date blank. An unsigned W-9 is treated as if you never submitted one, and the requesting organization may begin withholding immediately.3Internal Revenue Service. Form W-9 Request for Taxpayer Identification Number and Certification
Insurance You’ll Need to Show
Most procurement departments require proof of general liability insurance before approving your registration. The typical minimum is $1,000,000 per occurrence and $2,000,000 in aggregate, though it varies by organization and the type of work. You’ll usually need a certificate of insurance naming the buyer, and some require you to list them as an additional insured on the policy.
Vendors providing technology services, handling sensitive data, or processing payments often face cyber liability insurance requirements as well. Coverage limits depend on the vendor’s size and the services involved, but organizations increasingly expect cyber coverage to match or approach your general liability limits. If your current policy falls short, you may need to raise coverage before registration can be finalized.
NAICS Codes and How to Pick Them
You’ll be asked to select one or more North American Industry Classification System codes that describe what your business does. NAICS is the standard the federal government uses to classify business establishments and was developed jointly by the United States, Canada, and Mexico.4U.S. Census Bureau. North American Industry Classification System (NAICS) Procurement officers search for vendors by NAICS code when building solicitation lists. Pick codes that are too broad and you’ll compete against companies that aren’t a fit. Pick codes that are too narrow and you won’t show up in searches at all.
Federal contracts also use four-digit Product Service Codes for what the government is buying. You don’t select PSCs during registration, but knowing the ones relevant to your products helps you find opportunities once you’re in the system.
Registering With the Federal Government
If you plan to sell to any federal agency, registration in the System for Award Management (SAM.gov) is mandatory. Federal Acquisition Regulation clause 52.204-7 requires contractors to be registered in SAM before submitting an offer and at the time of award.5eCFR. 48 CFR 52.204-7 – System for Award Management Registration is free.6SAM.gov. Home Be wary of third-party sites that charge fees to help with it. The government does not.
SAM registration generates your Unique Entity Identifier, which replaced the Dun & Bradstreet DUNS number in April 2022 as the standard identifier for federal awards.7Federal Emergency Management Agency. What is the Unique Entity Identifier (UEI), and How Is It Related to the System for Award Management (SAM) You don’t need to obtain the UEI separately. Federal regulations require every applicant for and recipient of a federal award to maintain an active SAM registration with current information throughout the life of the award.8eCFR. 2 CFR Part 25 – Unique Entity Identifier and System for Award Management
SAM registration can take up to 10 business days to activate.9SAM.gov. Entity Registration If you’re eyeing a specific solicitation deadline, start well in advance. You’ll need your EIN, NAICS codes, banking information, and a notarized letter from an entity administrator to complete it.
Small Business and Diversity Certifications
If your business qualifies for a special designation, get the certification in hand before you register. Minority Business Enterprise and Women’s Business Enterprise certifications require showing the business is at least 51% owned and controlled by individuals who meet the eligibility criteria, and they’re issued by third-party certifying bodies. These can unlock set-aside contracts and supplier diversity programs that many large organizations run.
The Small Business Administration runs several programs worth looking at. HUBZone, for example, gives preferential access to federal contracts for businesses whose principal office is in a Historically Underutilized Business Zone and that have at least 35% of employees living in a HUBZone.10U.S. Small Business Administration. HUBZone Program The HUBZone map is scheduled for an update in 2026 to reflect expiring redesignated areas, so check whether your location still qualifies before relying on it.
Industry-specific business licenses must be current. If you work in a regulated trade such as construction, healthcare, food service, or hazardous materials, expect to upload copies of every active license and permit.
Debarment and Sanctions Screening
Most vendors don’t think about this part until it becomes a problem. Before approving any supplier, procurement teams screen the business and its principals against federal exclusion lists.
The SAM.gov exclusion list identifies entities debarred or suspended from federal transactions. A debarred entity cannot participate in any covered federal transaction, procurement or non-procurement, and the exclusion has reciprocal effect across both systems. If an organization knowingly does business with an excluded person, the responsible federal agency can disallow costs, terminate the transaction, or debar the organization itself.11eCFR. 2 CFR Part 180 – OMB Guidelines to Agencies on Governmentwide Debarment and Suspension
Buyers also screen against the Treasury Department’s Office of Foreign Assets Control Specially Designated Nationals and Blocked Persons list. OFAC maintains a search tool, though the agency notes that using it alone is not a substitute for appropriate due diligence.12U.S. Department of the Treasury. Sanctions List Search If your business name closely resembles a listed entity, expect additional verification. Having documentation ready that clearly establishes your identity speeds things up.
Extra Step for Defense Suppliers
Vendors selling to the Department of Defense face one additional requirement: the Cybersecurity Maturity Model Certification (CMMC). Phase 1 of CMMC implementation runs from November 2025 through November 2026, focused on Level 1 and Level 2 self-assessments.13Department of Defense Chief Information Officer. About CMMC
Level 1 applies to contractors handling Federal Contract Information. It requires compliance with 15 security requirements from FAR clause 52.204-21, with an annual self-assessment entered into the Supplier Performance Risk System. No plans of action are allowed at Level 1. You either meet all 15 requirements or you don’t pass. Level 2 applies to contractors handling Controlled Unclassified Information and requires compliance with 110 security requirements from NIST SP 800-171, with self-assessments every three years and 180 days to close any gaps.13Department of Defense Chief Information Officer. About CMMC If you’re new to defense contracting, sort out cybersecurity compliance before you start registration to avoid a cycle of partial approvals.
Submitting the Application and What Happens Next
Most registrations run through a web portal. You create a user profile with a corporate email address, then work through modules covering company information, tax details, banking, insurance, and certifications. Label each uploaded document clearly (“W-9_CompanyName_2026.pdf” rather than “scan1.pdf”) and check the portal’s file size limits, which commonly cap at 5 to 10 megabytes. Compressed PDFs stay under the limit better than scanned images.
Many portals support electronic signatures. Under federal law, an electronic signature cannot be denied legal effect solely because it’s electronic.14Office of the Law Revision Counsel. 15 USC 7001 – General Rule of Validity You don’t need to print, sign, and re-scan unless the specific organization requires wet ink.
After you submit, you should get an automated confirmation email. Save it. If none arrives within a few hours, contact the procurement office. A missing confirmation often means the submission didn’t go through.
Processing timelines vary. SAM.gov can take up to 10 business days.9SAM.gov. Entity Registration Private and state government registrations range more broadly, with some quoting up to 30 business days during peak periods. Discrepancies — say, a name mismatch between your W-9 and your insurance certificate — generate a request for clarification and reset the clock. For higher-value or specialized contracts, the buyer may conduct an on-site facility audit before approving you. Successful applicants receive a formal notification placing them on the Approved Vendor List, which makes you eligible to receive requests for proposals and compete for contracts. It is not itself a contract.
Keeping Your Registration Active
Registration is not one-and-done. Insurance certificates expire annually, W-9 information changes when your business restructures, and SAM.gov registrations must be renewed every year. Portals send automated reminders, but relying on those alone is risky. Put renewal dates on your own calendar.
Update your registration immediately if your banking details, address, legal name, or ownership structure changes. Stale banking data bounces payments; outdated ownership information can trigger a compliance review that freezes your account. For federal registrations, failure to maintain current SAM.gov information can make you ineligible for new awards even if your existing contracts remain in force.8eCFR. 2 CFR Part 25 – Unique Entity Identifier and System for Award Management