Know the day a supplier falls out of compliance.
Upload your supplier list. Watch matches each one to its SAM.gov registration with a confirm step, re-checks registrations, exclusions and screening lists every day, keeps the certificates they send you, and hands you an audit export with the source and date of every fact.
The first 5 suppliers are free. No card to start.
Flow-down means your subs' status is your problem.
From Phase 2, Level 2 certification requirements start applying to DoD contracts that handle controlled unclassified information, and primes must verify their subcontractors' status before award. That verification needs a current SAM.gov registration, no exclusions, and the CMMC certificate or SPRS score on file, for every sub, every time. Watch keeps that picture current and shows your work.
- Confirmed SAM.gov registration per sub, with expiry warnings
- Exclusion and screening checks that re-run daily
- CMMC certificate and SPRS score on file, with expiry
- An export that says who checked what, when, against which data
Three steps, and a person in the loop.
Upload your supplier list
A CSV with a supplier name column. UEI, CAGE, state, city and website columns are picked up when they're there and make the match stronger.
Confirm the matches
Each supplier gets ranked SAM.gov candidates with a confidence score and the reasons. A person confirms. An exact UEI or CAGE you supplied confirms on its own; a name never does.
Get told when something changes
Every confirmed supplier is re-checked daily against the latest SAM.gov registrations, exclusions and the Consolidated Screening List. Findings open and close on their own, and go to your webhook.
Public records, cited, re-read every day.
SAM.gov registration
Active, expired or deleted. Expiry date, with a warning before it lapses. Legal name, DBA, CAGE, address, entity structure, business types and SBA certifications, with every change recorded.
SAM.gov exclusions
Exclusions linked to the registration by UEI or CAGE are stated as that registration's fact. Exclusions that merely resemble the name are shown as "possible, confirm".
Consolidated Screening List
OFAC, BIS and State Department lists, matched by name and always presented as a possible hit for a person to decide.
Documents they sent you
CMMC certificates, SPRS scores, certificates of insurance and W-9s, with issue and expiry dates. You hear about expiry before it bites.
Debt and status flags
The delinquent federal debt flag, purpose of registration, and status changes between extracts.
What it does not do
No PACER, no credit reports, no consumer data. Business entities only; individual exclusions are never loaded. Public records, cited.
Built for the person asking "how do you know?"
Every fact carries its source and the registry's data date. Every decision carries the person and the time. The export is the file you hand over, not a screenshot.
- Who confirmed each match, when, with the score and the reasons at the time
- The SAM.gov data date (extract version) behind every fact and every check
- Every check that ran, by a person or on schedule, and what it concluded
- Findings opened, acknowledged and resolved, with timestamps
- Documents on file with issue and expiry dates and who uploaded them
- CSV for the spreadsheet people, JSON with full evidence for the auditor
{
"supplier": "Blue Ridge Machine Works",
"match": {
"status": "confirmed",
"uei": "JK5LM6NO7PQ8",
"confirmed_by": "a.rivera",
"confirmed_at": "2026-10-06T14:02:11Z",
"top_candidate": { "score": 0.91,
"reasons": ["name matches the DBA", "same state (NC)"] }
},
"registration": {
"status": "active", "expires_on": "2026-10-27",
"source": "SAM.gov entity registration (public extract)",
"source_version": "2026-10-05"
},
"open_findings": [
{ "severity": "warning",
"title": "SAM.gov registration expires in 21 days" }
]
}Never a verdict without a person
A name match is a suggestion. Confirming it, and confirming a possible exclusion or screening hit, is a person's decision, recorded.
Your list and documents stay yours
Stored so they can be re-checked and exported, never pooled, shared or used to train anything. Delete a list and its evidence goes with it.
Signed webhooks and an API
Findings reach your systems as they open, signed with a secret only you hold. Everything on the dashboard is a call with your key.
Per supplier you watch. Nothing per seat.
Team
Per monitored supplier, monthly. Every feature. Cancel any time.
- Daily re-checks against SAM.gov registrations, exclusions and the screening lists
- Confidence-scored matching with a confirm step
- Evidence with source and data date on every fact
- Audit export (CSV and JSON)
- Documents with expiry tracking
- Signed webhooks and API
Enterprise
For primes and large GCs: a contract, an SLA and single sign-on.
- Everything in Team
- Uptime and support SLA
- SSO through your identity provider (SAML or OIDC)
- Custom retention and data processing terms
- Invoiced billing
Questions
- Where does the data come from?
- From Programmable.info's public-record registry: the SAM.gov entity and exclusion public extracts and the ITA Consolidated Screening List, loaded nightly from the official bulk files. Watch keeps a dated copy of what the registry said at every check, so your export cites the data as it was.
- Will it ever call a supplier "excluded" on its own?
- Only when the exclusion record is linked to the supplier's confirmed registration by UEI or CAGE. A match by name alone is always shown as "possible exclusion match, confirm" and never counts as a finding against the supplier until a person at your organisation confirms it.
- How is the match decided?
- A confidence score from the name (legal and DBA), state, city and website, with the reasons shown. It orders the candidates; it does not decide. Only an exact UEI or CAGE on your list confirms without a person.
- What about CMMC?
- Watch doesn't assess anyone. It keeps the CMMC certificate and SPRS score your supplier gives you, with the expiry, next to their registration and exclusion status, so the picture is in one place when a contracting officer asks.
- Is this legal advice?
- No. It's public records, matched carefully, with a person deciding and an export that shows your work.
- Can I use it from a script?
- Yes. Everything on the dashboard is an API call with a key you make in Settings, and findings arrive at your webhook, signed.