IDIQ Contracts and Task Orders for Software Companies: How the Money Actually Moves

2026-10-09#saas #federal-market

By Philip Luca — Founder of GovExpress; prior domain experience at Bloomberg Government and GovWin IQ.

A large share of federal IT spending doesn’t flow through standalone contracts. It flows through task and delivery orders placed against contracts that were awarded years earlier. If you sell software to the government, you’ll spend much of your time near these structures, either as a holder of one or as a supplier to someone who is.

This guide explains how an indefinite-delivery, indefinite-quantity (IDIQ) contract works, why its headline ceiling tells you very little, how orders are competed and how a software company gets onto them.

What an IDIQ contract is

An IDIQ contract sets the terms for buying a category of work or products over a period of years, without fixing in advance exactly how much the government will buy or when. The Federal Acquisition Regulation (FAR) covers them in Subpart 16.5.

The contract itself usually commits the government to very little. It sets:

A minimum. The government must order at least a stated minimum quantity or value over the contract’s life. It’s often small.
A maximum, or ceiling. The most that can be ordered under the contract, across all orders.
The scope. What kinds of work or products can be ordered.
The period. A base period and options, often five to ten years in total.

Money moves only when an agency places a task order (for services) or a delivery order (for products) against the contract. Each order has its own requirement, its own price and its own funding.

The FAR has been under a government-wide rewrite since 2025, and agencies have been adopting revised text through deviations. Check the current version of Subpart 16.5, and your agency’s supplement, before you rely on a specific rule.

Why the ceiling tells you so little

IDIQ ceilings are often very large, in the billions for government-wide vehicles. They’re limits, not budgets:

A ceiling is not funded. Nothing is obligated until an order is placed.
Multiple-award contracts share one ceiling across many holders. If a vehicle has dozens of awardees, each one “has” the same ceiling on paper, but most will receive a small fraction of it, and some will receive nothing.
Adding ceilings double-counts. Summing the ceilings of every vehicle a company holds produces a number that can be many times larger than anything it will ever be paid.

When you size a competitor’s federal footprint, or your own, look at obligated dollars on actual orders. Public award data on USAspending.gov shows obligations by order, which is a far better measure of real presence than vehicle ceilings.

Single-award and multiple-award

An IDIQ can go to one company or to several:

Single-award IDIQ. One holder receives every order. Agencies use these for narrow, continuing requirements.
Multiple-award IDIQ. Several holders compete for each order. The FAR generally prefers multiple awards, and most large IT vehicles work this way.

Government-wide acquisition contracts (GWACs) such as NASA SEWP, NIH CIO-SP4 and GSA’s OASIS+ are multiple-award IDIQs that many agencies can use. The GSA Schedule works similarly from a buyer’s point of view, though it’s technically a different contract type. See federal contract vehicles for software companies for how the main vehicles compare.

How orders are competed: fair opportunity

On a multiple-award IDIQ, the FAR requires the contracting officer to give each holder a “fair opportunity” to be considered for each order above the micro-purchase threshold, unless an exception applies. In practice:

The agency issues a request to the holders, often called a task order request or request for quote. It may go to all holders or, on some vehicles, to holders in a particular pool or category.
Holders respond, usually with a shorter proposal than a full contract competition would require.
The agency evaluates and awards using the criteria in the request.

Orders are faster than standalone competitions because the holders are already vetted and the terms already set. That speed is the main reason agencies use them.

The FAR lists limited exceptions to fair opportunity, such as urgency, a single capable source, or a logical follow-on to an earlier order. Larger orders come with extra requirements for notice, evaluation criteria and debriefings. Protests of orders are also restricted: they can only be brought above certain dollar values and in limited forums. See debriefings for software companies for what you can learn after a loss.

What this means for a software company

Most software companies don’t start as IDIQ holders. A large multiple-award vehicle is expensive to win and requires past performance that a newer company usually doesn’t have yet. More common paths:

Sell through a holder. A prime contractor or reseller on the vehicle includes your product in its response to an order. See federal resellers for SaaS companies and teaming and subcontracting.
Use a product-focused vehicle. Vehicles such as SEWP and the GSA Schedule list commercial products, which suits a SaaS company better than a services vehicle does.
Watch for on-ramps. Some vehicles reopen to add new holders, often called an on-ramp. Others are closed for their whole life. Check a vehicle’s status before you plan around it.
Bid the next generation. Large vehicles are recompeted every several years. Planning starts well before the solicitation, often with a sources sought notice.

If you’re a small business, set-aside pools on many vehicles reduce the field you compete against. See small business set-asides for software companies.

Winning orders once you’re on a vehicle

Holding a vehicle doesn’t guarantee any orders. Holders that win consistently tend to:

Know the buyers before the request arrives. Most orders are won by holders who understood the requirement early.
Respond quickly and precisely. Order responses are short and judged closely against the request’s criteria. Read the evaluation criteria first, in the same way you’d read Sections L and M of a full solicitation.
Price for the vehicle. Your ceiling rates or listed prices are a maximum, and competition on orders often lands below them.
Keep registrations and compliance current. An order still needs an active SAM.gov registration, and an agency’s security requirements apply at the order level.
State security status precisely. Separate what’s authorized from what’s self-attested. A commercial audit report isn’t a FedRAMP authorization, and an ATO from one agency doesn’t transfer automatically to another.

IDIQs are where much of the federal IT market is actually bought. Before you chase a vehicle, it helps to know whether your registrations, security status and past performance are ready for it. Score your company’s federal readiness to see where you stand.

The CMMC brief

What the Phase 2 suspension changed and what it did not — the obligations that still bind, the assessment path a contract puts you on, the scoping decision that drives the cost, and the sequence that fits inside a pipeline. Sourced from the primary record.