DCAA Compliance and Accounting Basics for Contractors

What DCAA Does and Why It Matters

The Defense Contract Audit Agency — DCAA — is DoD’s contract-audit organization. DCAA audits cost-reimbursement, time-and-materials, and other flexible-price contracts to determine whether the government paid what it should have. For small contractors accustomed to firm-fixed-price commercial work, DCAA compliance is a new discipline: the government wants to see that your accounting system can accurately track direct and indirect costs, that your indirect rates are calculated correctly, and that your timekeeping practices meet federal expectations. Failing a DCAA audit doesn’t just create a bill for repayment — it can disqualify you from future flexible-price contracts entirely.

This guide walks through DCAA compliance the way a small contractor actually approaches it: when it matters (and when it doesn’t), what a DCAA-approved accounting system looks like, indirect rate structures, timekeeping requirements, and how to prepare for the audit. Companion coverage of the broader compliance landscape in our FAR basics for small contractors guide.

When DCAA Compliance Actually Matters

Firm-fixed-price contracts — the most common contract type for small business — generally don’t require DCAA-compliant accounting because the government pays a fixed price regardless of your costs. DCAA compliance becomes essential when you’re bidding on cost-reimbursement, cost-plus, time-and-materials, or labor-hour contracts. If your growth trajectory includes those contract types, DCAA-compliant accounting is table stakes for eligibility.

DCAA-Approved Accounting Systems (SF 1408)

The Standard Form 1408 "Preaward Survey of Prospective Contractor Accounting System" is DCAA’s checklist for whether your system meets federal expectations. Key criteria: proper segregation of direct and indirect costs, identification of costs by contract, exclusion of unallowable costs, proper timekeeping, and appropriate internal controls. Systems that meet SF 1408 include enterprise-grade tools plus properly-configured small-business tools; simple general-ledger software without indirect rate handling does not qualify.

Direct vs Indirect Costs

Direct costs are those clearly traceable to a specific contract — direct labor on the project, materials consumed for the contract, subcontractor costs on that contract. Indirect costs support your business overall but aren’t directly attributable to one contract — general office rent, business insurance, corporate management salaries, marketing costs, business development labor. Proper segregation of these categories is the single most important DCAA compliance element.

Indirect Rate Structures

Small government contractors typically use three indirect rate pools: fringe benefits (payroll taxes, benefits, PTO — allocated as a percentage of direct labor), overhead (project support costs like facility, contract-supporting IT — allocated as a percentage of direct labor plus fringe), and general and administrative (G&A: executive management, HR, accounting, business development — allocated as a percentage of total cost input). Each pool needs a defined base, calculation methodology, and periodic true-up.

Time Charging Rules

The most audited element in DCAA reviews is timekeeping. Employees must record time daily (not weekly), track time by charge code (not by aggregate hours), and separate direct labor from indirect labor. Corrections require documentation and approval. Salary employees still must track hours despite their pay being fixed — this trips up commercial-background small businesses constantly.

Timekeeping System Requirements

An acceptable timekeeping system captures: daily time entry by employee, charge codes distinguishing direct contract work from indirect categories, employee certification of accuracy, supervisor approval, audit trail of any corrections. Twenty-plus years running ERP timekeeping and financial systems in commercial environments translates directly to this world — the mechanics are essentially the same, the audit stakes are different. Options range from commercial platforms like Unanet, Deltek Costpoint, and Deltek Vision that are DCAA-designed, to properly-configured QuickBooks or Xero with third-party time-tracking add-ons.

Common DCAA Audit Findings

Findings that recur across small-contractor audits: employees not tracking hours daily; unallowable costs (advertising, entertainment, alcohol, some travel) mixed into indirect pools; management overriding time entries after the fact; missing supporting documentation for indirect cost calculations; incomplete audit trail on system changes; inability to reconcile indirect rate calculations to source data. Each of these creates a finding that can require repayment.

DCAA-Compatible Software Options

Deltek Costpoint and Unanet are the market-leading DCAA-native systems, priced for mid-sized and larger contractors. Deltek Ajera and Unanet A/E cover smaller shops. Small contractors under $5M revenue often use QuickBooks with properly-configured job costing, indirect rate calculations run outside the system in spreadsheets, and a compliant timekeeping add-on like Timesheets.com or Journyx. It works — it just requires more manual discipline than the enterprise tools.

Getting Your Accounting System Approved

Contractors seeking cost-reimbursement work sometimes request a preaward SF 1408 review; some agencies require it before award. The review is conducted by DCAA and typically takes 30–90 days. Alternatively, a Certified Public Accountant with DCAA experience can perform an equivalent readiness review, giving you documentation to present in bid proposals.

Get Help Setting Up DCAA-Compliant Accounting

If your growth path includes cost-reimbursement or time-and-materials work and your current accounting system was set up for commercial work, Veteran Forge Strategies works with small businesses on GovCon financial-systems readiness — including indirect rate structuring, timekeeping compliance, and preaward SF 1408 preparation.

Key Takeaways

• DCAA compliance matters most for cost-reimbursement, T&M, and labor-hour contracts — not firm-fixed-price.
• SF 1408 is the DCAA checklist for accounting-system adequacy.
• Segregate direct vs indirect costs; define your indirect rate pools (fringe, overhead, G&A) with clear methodology.
• Daily timekeeping by charge code with supervisor approval is non-negotiable.
• Common findings: missing time discipline, unallowable costs, poor audit trail on rate calculations.
• Deltek and Unanet lead in DCAA-native software; QuickBooks-plus-discipline works for smaller shops.

FAQ

Do I need DCAA-compliant accounting if I only bid firm-fixed-price? Generally no, though good discipline still helps for indirect rate transparency. Cost-plus and T&M contracts are where it becomes required.

What’s the difference between DCAA and DCMA? DCAA audits your accounting; DCMA manages contract administration and performance oversight. Both are DoD organizations.

Can I use QuickBooks for DCAA-compliant accounting? Yes, with proper configuration for job costing, indirect rate calculation outside the system, and a compliant timekeeping add-on. Enterprise tools like Costpoint automate more.

What’s an unallowable cost? Costs that can’t be charged to government contracts, including advertising, entertainment, alcohol, most travel-class upgrades, and lobbying. FAR Part 31 lists the categories.