What government contractors should keep on file before an algorithm, analytics system or reviewer sees something it does not understand.
SBA’s Inspector General has now put AI-assisted 8(a) monitoring on the record
In a September 24, 2026 management advisory, the SBA Office of Inspector General said the agency intends to use artificial intelligence in several areas, including disaster-loan fraud detection and support for monitoring 8(a) Business Development participants whose continued eligibility depends on compliance with program requirements.
The report went further. OIG reviewed a pilot fraud-detection program whose intended scope included pandemic assistance loans as well as contracts made to 8(a) participants and the awarding contracting officer for indications of possible collusion.
SBA separately announced in July that it was expanding its use of Palantir software and AI to analyze large datasets, identify anomalies, surface potential fraud indicators and generate investigative leads in pandemic-relief programs.
OIG simultaneously warned that SBA’s AI governance was not finished
OIG’s review period ran through April 30, 2026. At that point SBA had started piloting AI systems but had not completed several agency-wide governance components.
OIG said SBA still needed to finish
- An active AI governance structure.
- A finalized public AI strategy.
- An AI compliance plan.
- A generative-AI policy.
- Updated AI-specific data, privacy and cybersecurity policies.
- A consistent process for determining which AI uses are “high impact.”
Why “high impact” matters
- Pre-deployment testing.
- AI impact assessments.
- Ongoing performance monitoring.
- Training for people acting on AI output.
- Human oversight and intervention.
- Remedies or appeals when appropriate.
OIG said SBA had not designated any of the 34 inventoried use cases as high impact, although OIG identified two uses that showed indications they could meet OMB’s definition.
SBA disagreed with OIG on the classification of the fraud-detection pilot, according to the report. OIG said it did not receive documentation supporting SBA’s determination that the reviewed cases were not high impact.
An AI flag should not automatically become the final word
OMB Memorandum M-25-21 treats AI as high impact when its output serves as a principal basis for an action or decision having a legal, material, binding or significant effect on rights or safety.
For high-impact AI, OMB requires agencies to establish safeguards including testing, impact assessment, ongoing monitoring, appropriate human oversight and accountability.
That does not mean M-25-21 creates a new standalone contractor cause of action or guarantees a particular appeal in every situation. Existing program rules, notices and administrative procedures still matter.
The practical point is simpler: if an automated system surfaces your company for review, the human-review stage is where good documentation becomes enormously valuable.
AI does not need to “understand” fraud to notice that two things do not match
No public SBA document reviewed for this report provides a definitive list of every variable that future 8(a) monitoring models will use. Contractors should therefore avoid guessing about a secret score.
But existing 8(a) regulations already reveal the categories SBA cares about.
| Possible inconsistency | Why a reviewer may care | Best documentary answer |
|---|---|---|
| Owner on certification record does not match later corporate paperwork | 8(a) ownership and control must remain compliant. | Operating agreement, stock ledger, amendments, board records and SBA change approvals. |
| Large payment to an owner or related party | Annual review rules specifically examine payments, compensation, distributions and certain transfers. | Board approval, payroll record, loan agreement, distribution calculation and bank trail. |
| Payroll appears small relative to contract size | May raise questions about actual performance of work or subcontracting. | Time records, payroll, job-cost reports, subcontract scopes and workshare calculations. |
| Most contract revenue flows to one subcontractor | Can invite questions about performance requirements or pass-through arrangements. | Subcontract agreement, invoices, self-performance records and contemporaneous workshare analysis. |
| 8(a) revenue and accounting revenue do not reconcile | SBA monitors 8(a) and non-8(a) business activity. | Contract-level revenue schedule reconciled to the general ledger and financial statements. |
| Primary NAICS code differs from where most revenue now originates | SBA reviews whether the participant’s primary industry remains appropriate. | Three-year revenue-by-NAICS schedule and explanation of current business activity. |
| Shared address, employee or resource with another company | Could require a closer look at control, affiliation or operational independence. | Lease, service agreement, payroll records, ownership records and written business explanation. |
| Mentor or joint-venture relationship produces unusual payments | 8(a) rules impose reporting and performance requirements on certain relationships. | Mentor-protégé agreement, JV agreement, invoices, bank records, workshare and benefit documentation. |
The eight folders an 8(a) contractor should be able to open quickly
The objective is not to create paperwork for paperwork’s sake. It is to preserve the evidence that explains numbers and relationships before the people who remember them disappear.
Ownership & Control
Articles, bylaws or operating agreement, amendments, stock or membership ledger, capitalization table, board minutes, voting rights, management agreements, signature authority and any SBA approvals involving ownership, structure, management or control.
Owner Financial Eligibility
Current personal financial information, tax records used for eligibility, supporting account statements, documentation of asset transfers, and records explaining owner compensation, loans, advances, salaries, dividends and distributions.
Business Financials
Bank statements, year-end and interim financial statements, general ledger, accounts receivable/payable detail, tax returns, payroll registers and a reconciliation showing how the financial statements tie back to the ledger.
Contract Performance
Award, solicitation, proposal, modifications, invoices, time sheets, payroll, job-cost ledger, purchase orders, progress reports and evidence showing what your own employees actually performed.
Subcontractor & Supplier File
Executed subcontracts, scopes of work, invoices, proof of payment, subcontractor ownership where relevant, changes in scope and documentation supporting compliance with applicable performance-of-work or limitation-on-subcontracting rules.
8(a) vs. Non-8(a) Revenue
A contract-by-contract schedule showing customer, contract number, NAICS, 8(a) status, revenue and fiscal year. Reconcile the schedule to the general ledger rather than maintaining a separate spreadsheet nobody can explain later.
Mentor-Protégé & Joint Venture
Approved agreements, annual benefit narratives, JV documents, work allocation, bank activity, distributions, subcontracts between participants and documentation showing how performance obligations were satisfied.
Disclosure & Correspondence Log
Annual-review submissions, SBA letters, requests for information, responses, SAM changes, ownership/control notices, approvals, contract eligibility correspondence and proof showing when each required submission was made.
SBA already asked every 8(a) firm for several of these records
In December 2025, SBA directed more than 4,300 8(a) participants to provide financial information covering the prior three fiscal years.
| SBA specifically requested | Why maintaining it continuously helps |
|---|---|
| Bank statements | Creates a direct transaction trail behind ledger entries and related-party payments. |
| Financial statements | Shows assets, liabilities, revenue and results over time. |
| General ledgers | Lets a reviewer trace transactions instead of relying on summary totals. |
| Payroll registers | Helps document employees, compensation and contract performance. |
| Contracting / subcontracting agreements | Explains who was responsible for which portion of the work. |
| Employment records | Supports staffing, control and performance explanations. |
AI or no AI, the legal obligations were already there
8(a) participants must continue meeting program eligibility requirements and certify compliance annually.
Federal regulations require annual submissions that can include personal financial information for disadvantaged owners; records of certain asset transfers; payments, compensation and distributions to owners, officers, directors and affiliates; mentor-protégé reporting; fees paid to representatives seeking federal contracts; and reports explaining how performance-of-work requirements were met on each 8(a) contract.
Financial statement requirements
- Under $7.5M receipts: in-house or compiled statement generally permitted.
- $7.5M–$20M: reviewed financial statements generally required.
- Over $20M: audited financial statements generally required, subject to specified exceptions/waivers.
Don’t ignore SBA requests
- Continued eligibility depends on required submissions.
- Changed circumstances affecting eligibility must be disclosed.
- A pattern of failing to provide requested financial statements, tax returns, reports or other information can support termination proceedings.
Create a contract-level reconciliation before anyone asks for it
If SBA’s monitoring becomes increasingly data-driven, mismatches across systems are likely to attract more attention than a beautifully written compliance memo.
| Field | Keep for every federal contract |
|---|---|
| Contract / task-order number | Exact identifier used by the agency and your accounting system |
| Agency / customer | Contracting agency and paying office |
| NAICS | NAICS assigned to the procurement |
| 8(a) status | 8(a), non-8(a), JV or other status |
| Total award / modifications | Original amount plus documented changes |
| Revenue recognized | By fiscal year and accounting period |
| Prime labor | Payroll/time charged by your own employees |
| Subcontract spend | Vendor, scope, amount and relevant status |
| Workshare calculation | Method used and supporting records |
| Major exceptions | Written explanation of unusual transactions or changes |
If your company gets flagged, separate the “data is wrong” defense from the “data looks odd but is correct” defense
| Situation | Best response |
|---|---|
| Bad source data | Identify the incorrect field, show the authoritative record, explain how the mismatch arose and request correction. |
| Correct but unusual | Provide the contract, approval, accounting entry and business explanation showing why the transaction is legitimate. |
| Timing mismatch | Reconcile invoice date, payment date, fiscal year and revenue-recognition period. |
| Ownership change | Provide executed documents, effective date, SBA notice and any required approval. |
| Subcontracting anomaly | Provide actual labor/cost records and the calculation supporting compliance. |
| System mismatch | Show side-by-side records from SAM, SBA, accounting and contract files with the correct value highlighted. |
A simple response protocol if SBA questions an inconsistency
Save the notice, related portal records, underlying accounting data and correspondence. Do not “clean up” historical records.
Identify exactly which number, person, contract, date or relationship may have triggered the question.
Create a short chronology and attach source documents supporting each factual statement.
Have the appropriate compliance, accounting or legal adviser review consequential responses before submission.
Write a 30-second explanation when something unusual happens
Every month, flag transactions or corporate changes that could look strange to someone who lacks context:
- Large owner distribution
- New related-party transaction
- Major subcontractor increase
- Unusual transfer between accounts
- Change in ownership or management
- Large contract modification
- Revenue reclassification
- Shared employee or facility arrangement
- Joint-venture payment
- Change in primary line of business
Attach a short explanation and the source document to the transaction while everyone still remembers it. Two years later, that note may be the most valuable page in the file.
If your company were flagged today, could you explain it?
Check each item you could produce quickly and reconcile to the underlying source records. The score measures documentation readiness — not 8(a) eligibility.
Check what you can produce today
Your documentation-readiness result will appear here.
This tool does not determine 8(a) eligibility or predict whether SBA will review a company. It is a records-readiness exercise based on current 8(a) reporting requirements and categories of documentation SBA has requested from participants.
