Suspension and Debarment for Software Companies: How Federal Exclusion Works

2026-10-23#saas #federal-market

By Philip Luca — Founder of GovExpress; prior domain experience at Bloomberg Government and GovWin IQ.

Most software companies will never be suspended or debarred. It is still worth understanding how federal exclusion works, for two reasons. The representations you sign in every offer ask about it, and the companies you partner with, resell through or subcontract to are checked against the same list you are.

This guide covers what suspension and debarment are, what causes them, what an exclusion stops and what it leaves in place, and how a company responds when an agency proposes one. The rules cited here are from FAR Subpart 9.4, Debarment, Suspension, and Ineligibility, and the related clauses in FAR Part 52.

Exclusion protects the government, it does not punish

FAR 9.402 frames suspension and debarment as discretionary measures that agencies use to do business only with responsible contractors. They are to be imposed only to protect the government’s interest, not for purposes of punishment.

That framing shapes the whole process. The question the deciding official asks is about present responsibility: whether the government can trust the company today, not only whether something went wrong in the past. It connects directly to the responsibility determination a contracting officer makes before every award.

Each agency has a suspending and debarring official who makes these decisions. When more than one agency has an interest in the same contractor, the agencies coordinate so one of them takes the lead.

Suspension and debarment are different actions

Debarment (FAR 9.406) excludes a contractor for a set period. It follows a conviction or civil judgment for specified offenses, or a finding by a preponderance of the evidence. FAR 9.406-4 says the period should be commensurate with the seriousness of the cause and generally should not exceed three years.
Suspension (FAR 9.407) is a temporary exclusion pending an investigation or legal proceeding. It can be imposed on adequate evidence, and FAR 9.407-2 treats an indictment as adequate evidence. Under FAR 9.407-4, if legal proceedings are not started within 12 months of the suspension notice, the suspension ends unless the Department of Justice requests an extension, and it cannot run past 18 months without proceedings.
Proposed debarment matters too. Under FAR 9.405, a contractor that has been proposed for debarment is excluded in the same way as one that has been debarred, from the date of the notice.

What causes an exclusion

FAR 9.406-2 lists the causes for debarment. In outline:

Convictions or civil judgments for fraud or a criminal offense in connection with obtaining or performing a public contract or subcontract, antitrust violations relating to offers, and offenses such as embezzlement, theft, forgery, bribery, falsification or destruction of records, false statements and tax evasion.
Serious performance failures, shown by a preponderance of the evidence: willful failure to perform under one or more contracts, or a history of failure to perform or of unsatisfactory performance.
Failure to disclose. A principal’s knowing failure to timely disclose credible evidence of certain federal criminal violations, a civil False Claims Act violation or significant overpayments in connection with a government contract. This is the cause most likely to reach a company that thought it had done nothing wrong.
Delinquent federal taxes above the threshold stated in the regulation.
Any other cause so serious or compelling that it affects the contractor’s present responsibility.

FAR 9.407-2 lists similar causes for suspension, applied on the lower standard of adequate evidence.

Conduct can be imputed. FAR 9.406-5 lets an agency impute the conduct of an officer, director, shareholder, partner, employee or other individual associated with the contractor to the company, when the conduct was connected with the individual’s duties or was known to or approved by the company. An exclusion can also extend to named affiliates under FAR 9.406-1(b).

What an exclusion stops, and what it does not

Excluded contractors are listed in the exclusions records in SAM.gov, which anyone can search. FAR 9.405 says agencies shall not solicit offers from, award contracts to or consent to subcontracts with a listed contractor, unless the agency head determines there is a compelling reason. Contracting officers check the list after offers are received and again immediately before award.

The effect is broad:

It is government-wide. An exclusion by one agency applies across the executive branch.
It reaches grants and other assistance. FAR 9.401 provides that exclusions under the nonprocurement rules for grants and cooperative agreements are recognized for procurement, and the reverse.
It reaches subcontracts. FAR 52.209-6 bars a prime from subcontracting above the clause’s threshold with an excluded contractor, other than for commercially available off-the-shelf items, without a compelling reason and written notice to the contracting officer. For a software company that sells through a prime, a reseller or a GSA schedule holder, an exclusion closes those channels as well.

What it does not do is automatically end existing work. Under FAR 9.405-1, agencies may continue contracts and subcontracts in existence when the contractor was excluded, unless the agency head directs otherwise. New work stops: agencies generally may not order above a guaranteed minimum, add new work or exercise option years without a compelling reason. An agency that wants out of an existing contract still has to use its contract remedies, such as termination.

Mitigating factors and the chance to respond

The existence of a cause does not require debarment. FAR 9.406-1(a) tells the debarring official to consider the seriousness of the conduct and any remedial measures or mitigating factors. The factors it lists include whether the contractor:

had effective standards of conduct and internal control systems when the activity occurred, or adopted them before any government investigation;
brought the activity to the government’s attention in a timely way;
fully investigated the circumstances and made the results available;
cooperated fully with the investigation;
made restitution or agreed to it;
took appropriate disciplinary action against the individuals responsible;
put remedial measures, new review and control procedures and ethics training in place; and
has management that recognizes and understands the seriousness of the misconduct.

The process gives the company a chance to make that case. Under FAR 9.406-3, a contractor proposed for debarment has 30 days after receiving the notice to submit information and argument in opposition, in person, in writing or through a representative. FAR 9.407-3 gives a suspended contractor the same 30-day window. If material facts are genuinely in dispute and the action is not based on a conviction or civil judgment, the contractor can ask for fact-finding.

Many matters end without a debarment. Agencies can resolve a case through an administrative agreement in which the company commits to specific compliance measures, often with monitoring, and those agreements are recorded in the government’s integrity records. Challenging a final exclusion is not a bid protest; it is generally a matter for judicial review of the agency’s decision.

What this means for a software company

Answer the representations accurately. FAR 52.209-5, Certification Regarding Responsibility Matters, and the corresponding commercial representations ask about exclusions, convictions, judgments, indictments and delinquent taxes. They are certifications, and an inaccurate one creates its own problem.
Check partners before you sign. Search SAM.gov exclusions for every prime, subcontractor and reseller you work with, and recheck before each renewal. If a partner is excluded, your path to the customer may close with it.
Know your disclosure obligations. Contracts that carry FAR 52.203-13, Contractor Code of Business Ethics and Conduct, require a written code, timely disclosure of credible evidence of certain violations and, for larger companies, an internal control system. Failure to disclose is itself a cause for debarment.
Build the mitigating factors before you need them. A code of conduct, an internal reporting channel and a record of acting on what it surfaces are the facts FAR 9.406-1(a) asks about. They are much harder to assemble after a notice arrives.
Respond inside the window, with counsel. If a notice of suspension or proposed debarment arrives, the 30-day clock is the most important fact in it. Present responsibility is the question, so show what has changed.
Read the current rule text. The FAR is being rewritten under the Revolutionary FAR Overhaul, and agencies have been adopting revised part text through class deviations. Confirm the section numbers in the version your contracting officer applies.

Where this fits

Suspension and debarment are the government’s tools for keeping federal work away from companies it cannot currently trust. For a software company, the practical side is simple: answer the representations carefully, vet every partner against SAM.gov exclusions and keep an ethics and disclosure program that would hold up if it were ever examined.

Score your company’s federal readiness to see how your registration and compliance profile look next to the other categories federal buyers review.

Frequently Asked Questions

What is the difference between suspension and debarment?

Suspension is temporary. Under FAR 9.407 an agency can suspend a contractor on adequate evidence, such as an indictment, while an investigation or legal proceeding runs. Debarment under FAR 9.406 follows a conviction, a civil judgment or a finding by a preponderance of the evidence, and lasts for a set period that generally should not exceed three years. Both exclude the company from new federal contracts while they are in effect.

Does a debarment cancel the contracts a company already holds?

Not automatically. FAR 9.405-1 lets agencies continue contracts and subcontracts that were in place when the contractor was excluded, unless the agency head directs otherwise. What stops is new business: agencies generally may not place orders above a guaranteed minimum, add new work or exercise options with an excluded contractor without a compelling reason.

Can a prime contractor subcontract to an excluded company?

Generally not. FAR 52.209-6 bars the prime from entering into a subcontract above the clause's dollar threshold with a contractor that is suspended, debarred or proposed for debarment, other than for commercially available off-the-shelf items, unless there is a compelling reason, and requires written notice to the contracting officer before doing so.

The CMMC brief

What the Phase 2 suspension changed and what it did not — the obligations that still bind, the assessment path a contract puts you on, the scoping decision that drives the cost, and the sequence that fits inside a pipeline. Sourced from the primary record.