SAM.gov sent out an alert in mid-2026 under the subject line "Action Required: SAM.gov NAICS Code Size Table Discrepancy," reaching businesses that had renewed well ahead of their deadline and followed every instruction correctly.

So a NAICS code wrong on SAM.gov isn't always something a business did. More on that below.

The underlying question worth working through is what these codes are actually for, because the common assumption about them is backwards.

The code on the solicitation was never yours to pick

A common misunderstanding treats a SAM.gov NAICS list like a permissions file: add the code, become eligible for that kind of work. That is not how any of it works.

The contracting officer assigns one NAICS code and its corresponding size standard to the solicitation. They pick it by classifying what's being bought into the one industry that best describes the principal purpose of the supply or service, and a procurement usually gets classified according to whichever component accounts for the greatest percentage of contract value (FAR 19.102(b)(1)).

You can see the mechanics in the provision itself. FAR 52.219-1 has a blank in it: "The North American Industry Classification System (NAICS) code for this acquisition is ____," followed by a bracketed instruction to the contracting officer to insert the code.

Then you check a box saying whether you are or are not a small business under that code.

Which means the list of codes sitting in a SAM.gov profile does not decide what a business is allowed to quote on, despite how much deliberation typically goes into choosing which codes to add.

What a NAICS code wrong on SAM.gov actually breaks

Two things, and both of them matter more than eligibility does.

First is that people have to be able to find you. SBA describes your SAM profile as a résumé and tells you to use accurate, descriptive terms so contracting officials can find you in search results (SBA, Get started with contracting). Market research happens before a solicitation exists. If your codes don't cover the work you do, you're not in the pile they're pulling from.

Second is certifications. For the 8(a) program, you have to qualify as small under the size standard for your primary industry classification. For the other certification programs, the regulation points at the size standard corresponding to NAICS codes listed in your SAM profile (13 CFR 121.404(d)).

The same paragraph says SBA will accept your size representation in SAM unless there's evidence you're other than small.

The profile is doing this work whether a business owner is paying attention to it or not.

Same company, different size, depending on the code

Size standards are set per code. The theory is simple; the practice usually isn't.

SBA's rough shape is 500 employees or fewer for most manufacturing and average annual receipts under $7.5 million for most non-manufacturing, with a long list of exceptions by industry.

Receipts means total income plus cost of goods sold, averaged over your latest five complete fiscal years, and you have to include your affiliates. Employees means the average headcount per pay period over the last 24 months, where everybody on the payroll counts as one person regardless of hours or temporary status.

Nothing about the company changes. The number it's measured against does.

It gets stranger if you're furnishing something you didn't make yourself. A nonmanufacturer's size standard is 500 employees, or 150 employees for information technology value-added resellers under NAICS 541519, on small business set-asides above the simplified acquisition threshold and on 8(a), HUBZone, SDVOSB, EDWOSB and WOSB awards regardless of dollar value (FAR 52.219-1(b)(3)).

And the moment that counts is the date you submit a written self-certification that you're small as part of your initial offer including price (13 CFR 121.404(a)). Not the day you registered. Once you've been awarded a contract as a small business, you're generally considered small for the life of that contract.

Sometimes the NAICS code wrong on SAM.gov isn't the business's error

SAM.gov posted an alert saying it had identified and corrected a system error that may have led to incorrectly computed NAICS size standards in the 52.219-1 and 52.212-3 reps and certs tables, for entity registration renewals submitted from March 24 through July 22, 2026. Potentially affected entities get an email with that "Action Required" subject line and instructions on what to do (SAM.gov system alert, updated July 24, 2026).

Anyone who renewed inside that window should not assume the reps and certs size table filled in correctly on its own.

Anyone who renewed this spring or early summer should open that table and read it directly. It's the same lesson as SAM.gov registration errors, just from the other direction: the record can be wrong without the registrant having done anything wrong.

Ten days to argue about the code

This appeal right is not widely known. If the contracting officer designates a code that looks wrong, and the reason you usually care is that the wrong code makes you other than small, you can appeal it to SBA's Office of Hearings and Appeals.

You have 10 calendar days after issuance of the solicitation, or after the amendment that changed the code. OHA summarily dismisses untimely appeals. There's no required format, but you need the solicitation number, the contracting officer's name and contact information, and a specific statement of why the designation is wrong (13 CFR 121.1103).

Notably, once the appeal is served, the contracting officer has to stay the closing date for receipt of offers and tell everybody else the appeal exists.

Ten days is not much. If you're checking solicitations the week they close instead of the week they post, that window is gone before you knew there was one to use.

One related wrinkle worth knowing: NAICS gets updated by OMB every five years, and a new code isn't available for use in federal contracting until SBA publishes a corresponding size standard for it (FAR 19.102(a)(2)). So a code can exist in the Census manual and still not be usable on a federal solicitation.

What a NAICS cleanup actually involves

A useful starting point is removing codes that sound adjacent to the work a business does but don't reflect actual capability, since those make a profile look unfocused rather than credible. Any code missing that should have been added, based on actual capability, belongs on the list from that point forward.

Looking up the size standard for each retained code individually, rather than assuming they're all the same number, and actually reading the reps and certs size table rather than assuming it's correct, are both worth the few minutes they take.

Checking solicitations the week they post, rather than the week they're due, matters given the 10-day appeal window above.

For anyone earlier in the process, the mechanics of SAM.gov for small business registration are worth reading first. The codes make more sense once the registration itself does.

See your registration gaps in one check

The free Autopsy reads the public SAM.gov record for your UEI and gives you a Readiness Score. The full analysis shows the registration gaps it finds and who wins work under your NAICS codes, where records exist. No account, no card.

Run your free Autopsy →

You'll need your UEI.

Sources