Cada has written 100+ grant proposals across 30+ agencies, including NIH, NSF, NASA, and DoD.
Here is how a first SBIR application usually dies. A founder picks a deadline six weeks out, starts a SAM.gov registration in week one, and starts writing. In week five the proposal is good. Then they open the submission portal and it asks for an SBC Control ID they have never heard of, issued by a system they never registered in.
The proposal was never the problem. The SBIR registration requirements timeline was.
Registration is not paperwork you do alongside the writing. It is a serial dependency chain where each system gates the next, and NIH's own guidance says the whole thing takes six weeks or more.
This piece gives you three things: the full chain in dependency order with each agency's published lead time, a matrix of which systems each of the five main SBIR agencies requires, and a worked backward count from a real deadline so you can tell today whether you are still inside the window.
The short answer: the SBIR registration requirements timeline runs six weeks or more. Four registrations have to clear in order: SAM.gov for your UEI and CAGE code, the SBA Company Registry for your SBC Control ID, your agency's submission system (eRA Commons, Research.gov, DSIP, ProSAMS, or PAMS), and Grants.gov where the agency uses it.
How long does the full SBIR registration timeline actually take?
Six weeks or more, per NIH's published guidance for small business applicants (NIH SEED, Required Company Registrations).
That number surprises people because each individual system looks fast. Here is the chain with the agency-stated lead times.
| Registration | What it issues | Official lead time | What it blocks if incomplete |
|---|---|---|---|
| SAM.gov | UEI (12 characters), CAGE code (5 characters) | 3 weeks or more (NIH SEED) | Everything downstream |
| SBA Company Registry (SBIR.gov) | SBC Control ID | 1 to 2 business days (NIH SEED) | Submission at all 11 SBIR agencies |
| eRA Commons (NIH) | Organization + SO + PI accounts | 2 weeks or more (NIH SEED) | NIH submission |
| Grants.gov | Applicant/AOR account | 1 business day or more (NIH SEED) | NIH, DOE full applications |
| Research.gov (NSF) | Organization + PI accounts | Not published by NSF | NSF submission |
| DSIP (DoD) | Login.gov + firm registration | Component-specific, commonly 7 to 14 days | All DoD SBIR/STTR submission |
| ProSAMS (NASA) | Firm registration | Not published by NASA | NASA SBIR/STTR submission |
| PAMS (DOE) | Individual + institution accounts | Not published by DOE | DOE Letter of Intent |
Stack SAM.gov, the Company Registry, and eRA Commons end to end and you get roughly five and a half weeks, before you account for a single mistake. That is where the six-week figure comes from.
Three of those systems publish no lead time at all: Research.gov, ProSAMS, and PAMS. Cada plans on one to two weeks for a first-time organization registration in each of them and treats anything faster as a bonus. That is our planning number, not an agency figure, so confirm it against your live solicitation.
I should be straight about one more thing: published SAM.gov estimates are all over the map. Some guides say two days, some say six weeks, and both are true for somebody.
The variable is entity validation, and it is not predictable in advance. Plan against the agency number, not the optimistic one.
The dependency chain: which registration unlocks which
The reason you cannot compress this is that the steps are serial, not parallel. Each one needs an identifier the previous one produces.
- SAM.gov comes first. It issues the UEI number for your SBIR application. Nothing else in the chain can start without it.
- The SBA Company Registry needs your UEI and EIN. It issues your SBC Control ID.
- Your agency's submission system needs both. eRA Commons, Research.gov, DSIP, ProSAMS, and PAMS all key off your UEI, and every SBIR submission form asks for the SBC Control ID.
- Grants.gov needs an active SAM registration. Your entity data transfers from SAM to Grants.gov automatically, but only about 24 hours after SAM goes active, never before.
You can shave a few days at the edges. Individual user accounts, like a PI profile in eRA Commons or a personal Login.gov account for DSIP, can be created while the organization registration is still pending.
That is worth doing. It buys you days, not weeks.
What you cannot do is start the SBA Company Registry before SAM.gov finishes. Founders try. It does not work, and the two weeks they thought they were saving are gone.
How long does SAM.gov registration take for an SBIR application?
NIH says three weeks or more for an initial registration, and two weeks for the annual renewal.
The step that blows the estimate is entity validation. SAM.gov checks your legal business name and physical address against IRS and public records. If your Delaware incorporation says "Northwind Instruments, Inc." and you typed "Northwind Instruments LLC," or your address is a mailbox service, validation fails and you enter a documentation exchange that can take weeks.
Two specifics worth knowing.
Your CAGE code is assigned inside this process, not separately. The Defense Logistics Agency issues it as part of SAM validation for US entities. It adds days to the tail of the registration, and you do not apply for it anywhere else.
There is no DUNS number anymore. The federal government retired DUNS in April 2022 and replaced it with the UEI, which SAM.gov issues directly and free.
This matters more than it should. SBA's own registration requirements tutorial still walks applicants through getting a DUNS number as step one. I checked it on August 5, 2026. It is still there.
If you follow the official tutorial in order, your first step is a dead end.
SAM.gov registration is free. So is every other registration in this chain. Companies that charge you for it are selling form-filling.
What is an SBC Control ID and how do you get one?
An SBC Control ID, sometimes called the SBC control number, is the identifier the Small Business Administration assigns when you complete the SBA Company Registry at SBIR.gov. It has the format SBC_ followed by nine digits, and it is required on applications to all 11 agencies participating in SBIR and STTR. It is separate from your UEI and separate from SAM.gov.
This is the step founders miss most often, and the reason is understandable: it looks like a duplicate. You already registered as a business entity with the federal government. Why register again?
Because SAM.gov and the Company Registry answer different questions. SAM.gov establishes that you are a real entity that can receive federal money. The Company Registry establishes that you meet SBIR-specific ownership, size, and affiliation rules, and it tracks your commercialization history across agencies.
The good news: it is the fastest step in the chain. NIH puts it at one to two business days once you have your UEI. After you finish, download the proof-of-registration PDF from your SBIR.gov dashboard, because some agencies want it attached.
Which registrations does each agency require?
Every SBIR agency requires SAM.gov and the SBA Company Registry. After that they diverge completely.
| Agency | Submission system | Also requires | Deadline before the deadline |
|---|---|---|---|
| NIH | ASSIST or Grants.gov Workspace | eRA Commons (org, SO, PI), Grants.gov | eRA Commons started 10 business days out |
| NSF | Research.gov | Research.gov org + PI accounts | None published |
| DoD (Army, AFWERX, DLA, DARPA) | DSIP only | Login.gov, DSIP firm registration | Some topics require DSIP registration 14 days before close |
| NASA | ProSAMS | ProSAMS firm registration | None published |
| DOE | Grants.gov, then PAMS | PAMS accounts, FedConnect, FSRS | Mandatory Letter of Intent, roughly 3 weeks after the FOA posts |
NIH. Organizations registering in eRA Commons for the first time should allow two to four weeks. NIH treats starting at least 10 business days before the due date as a good-faith effort, which tells you how often people start later than that. You need an organization registration, a Signing Official account, and a separate PI account.
NSF. Research.gov replaced FastLane. You need SAM, Research.gov, and the SBIR.gov Company Registry.
On currency: Cada refreshes a client's Company Registry record if it is older than six months before an NSF submission. That is our safety margin, not a published NSF rule. NSF's public Company Registry page does not state a fixed expiry window, so treat six months as prudence and verify against your live solicitation.
DoD. Everything goes through DSIP. Nothing else counts, and proposals submitted any other way are disregarded.
DSIP account setup for DoD SBIR has two parts: you authenticate through Login.gov, and your firm registration is separate from your personal account.
Individual components set their own cutoffs. One recent DLA topic required DSIP registration at least 14 days before close, which means the real deadline is two weeks earlier than the one on the topic page.
NASA. ProSAMS replaced the Electronic Handbook in late 2024. If a guide tells you to use the EHB, it was written before the switch and you should distrust the rest of it too. Registration in ProSAMS is separate again, on top of SAM and the SBIR firm registry.
DOE. The one with a hidden deadline. DOE requires a mandatory Letter of Intent submitted through PAMS, typically due about three weeks after the FOA posts.
Miss it and you cannot submit the full application at all, no matter how ready you are. PAMS registration is a two-step process: create an individual account, then associate it with your business.
One caveat on all of this: portals change. NASA moved off EHB, NSF moved off FastLane, DoD consolidated into DSIP. Verify against the live solicitation before you plan around this table.
The three registration steps first-time applicants discover too late
Across the systems above, three failures show up disproportionately.
1. The SBC Control ID. Founders assume SAM.gov covered it. The discovery moment is usually the submission form, days before the deadline, when a required field asks for an identifier they do not have. This one is recoverable if you catch it with three business days left. Barely.
2. DSIP firm registration. Two separate things get conflated: your Login.gov account and your firm's DSIP registration. Creating the first does not create the second, and only the second lets your company submit. When a component imposes a 14-day pre-close cutoff, discovering this at day 10 means you are done, regardless of how finished the proposal is.
3. The DOE Letter of Intent. It is a 500-word abstract, it takes an afternoon, and it is a hard gate. Founders tracking the full application deadline miss the LOI deadline sitting weeks earlier. There is no waiver.
The pattern is the same in all three: the blocking step is not the one on the calendar.
Count backward from your deadline: a worked SBIR registration timeline
Here is what the chain looks like scheduled backward. This example is illustrative, not a real client.
Say a fictional company, Northwind Instruments, wants to submit to an NIH SBIR Phase I due September 8. Nobody at the company has ever registered in a federal system.
| Weeks before deadline | Action | Why here |
|---|---|---|
| 10 | Start SAM.gov. Confirm legal name and address match incorporation documents exactly | 3 weeks official, 6 if validation fails |
| 10 | In parallel: PI creates a personal eRA Commons profile request | Individual accounts do not need the org registration |
| 7 | UEI issued. Start SBA Company Registry same day | Needs the UEI |
| 6.5 | SBC Control ID issued. Start eRA Commons organization registration | Registry clears in 1 to 2 business days, and eRA Commons needs the UEI too |
| 6 | Start Grants.gov registration | Needs active SAM |
| 4 | eRA Commons organization active. SO registers the PI account | 2 to 4 weeks for first-time orgs |
| 3 | All registrations confirmed. Do a full dry run in ASSIST | Find the missing field now, not on deadline day |
| 2 | Recheck SAM.gov expiration date | Expiry blocks submission |
The go/no-go date is week 10. If Northwind is at week 6 with no SAM.gov registration started, the honest recommendation is to target the January cycle. NIH standard due dates run roughly four months apart, which is a real cost, and it is still cheaper than the 150 hours a first Phase I takes to write, spent on an application that cannot be submitted.
What expires, and when you have to renew it
Registrations are not one-time. Three things lapse.
SAM.gov expires annually. NIH puts the renewal at two weeks. An expired SAM registration blocks submission and blocks payment on an existing award. This is the single most common way a second-time applicant gets caught, because they remember registering and forget renewing.
The Company Registry drifts. Ownership changes, employee counts change, affiliation changes. Update it before each submission cycle rather than treating it as done.
Accounts follow people. When the PI leaves or the Signing Official changes jobs, the account goes with them. Reassign roles in eRA Commons, DSIP, or ProSAMS at the time of the change, not at submission.
Practical rule: check every registration 60 days before a deadline, not seven. At 60 days a lapsed SAM registration is an annoyance. At seven it is a forfeited cycle.
You are already inside the window. What now?
Four steps, in order.
- Check SAM.gov status today. Search your legal entity name at sam.gov. Active, expired, or nonexistent changes everything that follows.
- If SAM is not active and your deadline is under four weeks out, stop planning around this deadline. Start the chain anyway and target the next cycle. Registrations do not expire in a way that wastes this work.
- If SAM is active, the rest is days, not weeks. The Company Registry is one to two business days. Agency portal accounts are usually faster than their organization registrations.
- Do a dry run in the actual portal at least five days out. Not a plan to submit. Log in, open the form, and find every field you cannot fill.
Telling a founder to skip a cycle is not a fun conversation. It is a better one than the conversation after 150 hours of writing meets a portal that will not accept the file.
Where this fits
Registration is the mechanical layer. The judgment layer sits on either side of it: deciding whether SBIR is the right instrument for your company before you commit, confirming you meet the ownership and PI rules that determine eligibility at all, and knowing what happens in the first 90 days after an award.
If you are targeting DoD specifically, the compliance pre-screen covers the gates beyond registration, and the difference between a grant and a contract explains why DoD's process feels different from NIH's in the first place. For the full arc from first thought to first dollar, the SBIR application timeline puts these six weeks in the context of the 9 to 18 months around them.
Get a straight answer on your SBIR registration requirements timeline
Registration timing is the most common reason a first application never gets submitted. Not the science, not the writing. A portal field nobody warned you about.
If you have a deadline in mind, we will audit your current registration state against it and tell you which registrations are already too late to start for this cycle. Bring your target program, your deadline, and whatever registration status you can find. It takes about 15 minutes and you get a specific answer, including "target the next cycle" when that is the honest one.
No pitch, no obligation, nothing to pay. Book a submission-readiness check.
Sources
- NIH SEED, Required Company Registrations -- the six-weeks-or-more total, and the published lead times for SAM.gov, eRA Commons, Grants.gov, and the SBA Company Registry
- NIH eRA Commons account guidance -- organization, Signing Official, and PI account structure
- SBA Company Registry FAQ -- SBC Control ID format and the requirement across all 11 participating agencies
- SBA registration requirements tutorial -- the page that still routes applicants to a DUNS number, checked August 5, 2026
- NSF SBIR SBA Company Registry guidance -- NSF's Company Registry requirement, which does not state a fixed expiry window
- Defense SBIR/STTR Innovation Portal -- DSIP as the sole DoD submission path, and Login.gov authentication
- NASA ProSAMS -- the system that replaced NASA's Electronic Handbook in late 2024
- DOE Office of Science PAMS registration guide -- two-step PAMS account setup and the mandatory Letter of Intent
- Component-specific DSIP cutoffs, the one-to-two-week planning figure for Research.gov, ProSAMS, and PAMS, and the six-month Company Registry refresh margin are Cada's own planning numbers, drawn from our DoD solicitation knowledge base and client work
Agency lead times quoted are the agencies' own published figures as of August 5, 2026. Portals and cutoffs change without much warning, so verify all timing against your live solicitation before planning around it. All company examples are fictional and used for illustration only.