What Is DCAA Compliance? A Guide For Government Contractors

Last updated: November 14, 2026

DCAA compliance means keeping an accounting system, timekeeping and cost practices that meet the standards the Defense Contract Audit Agency uses when it audits government contracts. In practice it matters most when you hold or bid on cost-reimbursable or time-and-materials contracts, and it centers on separating direct and indirect costs, excluding unallowable costs, tracking labor accurately and supporting your indirect rates.

There is no such thing as a DCAA certification, and no software is DCAA certified. Compliance is about how your system is designed and used, and it is tested through audits and business system reviews.

When Does DCAA Compliance Apply?

• Cost-reimbursement contracts, where you are paid for allowable costs plus a fee
• Time-and-materials and labor-hour contracts
• Pre-award reviews before your first flexibly priced contract
• Proposals that require certified cost or pricing data
• Defense and civilian agency work where DCAA performs audits on another agency’s behalf

Firm-fixed-price contracts generally carry lighter accounting requirements, though pricing and timekeeping discipline still matter.

What An Adequate Accounting System Looks Like

Auditors expect a system that can:

• Segregate direct costs from indirect costs
• Identify and accumulate costs by contract and task
• Allocate indirect costs to contracts on a consistent basis
• Identify and exclude unallowable costs
• Record labor accurately through a compliant timekeeping process
• Reconcile project costs to the general ledger
• Support billings and indirect rate calculations

A pre-award accounting system review, often documented on Standard Form 1408, tests many of these points before an award.

Timekeeping: The Most Common Problem Area

DCAA expects employees to record their own time, ideally daily, charge hours to the correct contract, and correct errors with an explanation and approval trail. Supervisors approve timesheets, and the system keeps a full audit history. A dedicated timekeeping tool helps. See our list of GovCon accounting and ERP software.

Unallowable Costs

FAR Part 31 lists costs the government will not pay, such as entertainment, alcohol, lobbying, certain bad debts and fines. You must identify them in your books and keep them out of billings and indirect rates. Billing unallowable costs can create serious legal exposure.

Incurred Cost Submissions And Indirect Rates

Contractors with flexibly priced contracts submit an annual incurred cost proposal, generally due within six months after fiscal year end, that shows actual costs and indirect rates so final rates can be audited and settled. Accurate indirect pools for fringe, overhead and general and administrative costs are central to this.

How To Prepare For A DCAA Audit

• Write and follow accounting and timekeeping policies
• Train employees on timekeeping
• Run mock audits or have an outside firm review your system
• Keep supporting documents organized by contract
• Respond to auditors promptly and professionally

Specialist firms such as Redstone Government Consulting, Baker Tilly and Aprio help with reviews. See our GovCon consulting firms list.

Frequently Asked Questions

Is there a DCAA certification?

No. DCAA does not certify contractors or software. It audits accounting systems, proposals and costs, and contracting officers determine whether systems are adequate.

Do small businesses need DCAA compliance?

Only when contracts or proposals require it, usually cost-reimbursable or time-and-materials work. Many small firms with fixed-price contracts never face a DCAA audit.

Can I use QuickBooks and be DCAA compliant?

QuickBooks can support an adequate system for small contractors when carefully configured and paired with compliant timekeeping, but growing contractors usually move to GovCon-specific software.

What happens if my accounting system is inadequate?

You may be ineligible for cost-type contracts, and for existing contracts the government can withhold payments or require corrective action.

Conclusion

DCAA compliance is achievable for small contractors with the right setup: clear policies, disciplined timekeeping, unallowable cost controls and a system that supports indirect rates. Build it before your first cost-type award, not after.

For more rankings, comparisons and guides on this topic, visit the Defense & Government Contracting hub.