← All field notes
June 15, 2026 · Compliance · Winrove Team

The compliance matrix step most small contractors skip (and how it loses bids)

A compliance matrix mirrors how a federal evaluator actually reads your proposal. Skipping it is one of the most common reasons a capable small firm loses a winnable bid.

The evaluator's first job is elimination, not selection

Before a source selection evaluator reads a single word of your technical approach, someone on the contracting team has already run a compliance check. On many procurements, that check happens before evaluation scores are assigned. A proposal that fails it gets set aside, sometimes without a written deficiency notice, sometimes before the technical evaluators ever open the file. The Government Accountability Office has sustained protests where agencies eliminated offerors at this stage for missing a single required attachment or failing to address a specific Section L instruction. The capability was real. The contract went elsewhere.

The tool that prevents this is the compliance matrix. It is also the step most small contractors skip, because it looks like overhead when you are already running a two-person proposal effort against a 30-day deadline. That reasoning is exactly backwards. Skipping the matrix is how a firm that can do the work loses to a firm that simply documented it better.

What a compliance matrix actually is

A compliance matrix is a table, nothing more. Down the left side you list every requirement in the solicitation. Across the top you track a handful of columns that tell you whether you have answered each one. A minimal version looks like this:

  • Requirement ID: the exact location in the solicitation, such as "L.5.3," "SOW 4.1.7," or "PWS Section 3.2"
  • Requirement text: the verbatim language, especially any "shall" or "must" statement
  • Volume and section where you answer it: for example, "Vol. II, Section 3, p. 14"
  • Status: answered, partial, or not yet addressed
  • Evidence or support: for past performance or technical claims, what documentation backs the statement

That is the whole structure. It is not glamorous. It is a list of every promise the government required you to make, mapped to exactly where you kept each one.

Where the requirements actually hide

Most proposal writers know to read Section L (instructions to offerors) and Section M (evaluation factors). Fewer read every clause in Section H, Section I, and the attachments with the same attention. That is where requirements get buried.

Consider a typical services RFP under NAICS 541512. Section L tells you to submit a technical approach, a staffing plan, and a past performance volume. That is obvious. But Section H might include a clause requiring a Quality Control Plan to be submitted with the proposal, not after award. Section I might incorporate FAR 52.219-14, Limitations on Subcontracting, which requires a specific percentage of work to be performed by the prime, and Section L might require you to affirmatively state your compliance with that clause in the technical volume. The SOW might include a paragraph buried in Section 5 requiring the contractor to maintain a specific ticketing system and provide read-only access to the Contracting Officer's Representative within 30 days of award. None of those are in Section M. All of them are requirements. A proposal that does not address them is non-compliant.

A 90-page RFP can carry well over a hundred discrete "shall" statements. No one holds a hundred requirements in working memory while also writing persuasively about a technical approach. Requirements get dropped. Dropped requirements become gaps. Gaps become lost bids.

The three failure modes a matrix catches

1. The dropped "shall"

A requirement that no part of your proposal addresses. This is the most common failure and the most avoidable. The evaluator is not looking for your best guess at what they wanted. They are confirming that you addressed what they asked. If the SOW says "the contractor shall provide a monthly status report in accordance with the CDRL" and your proposal never mentions reporting cadence or CDRL compliance, you do not get credit for the capability. You get a deficiency on that line. One sentence, written while you still had time, would have closed it.

2. The misplaced answer

You did address the requirement, but you put it in the wrong volume. Section L told the evaluator to look for your staffing plan in Volume II. You included it in Volume I because that is where it fit narratively. If the evaluator is scoring volume by volume, an answer in the wrong place can score as no answer. The compliance matrix forces you to map each requirement to its required location, not just to wherever you happened to write about it.

3. The unsupported claim

Your technical approach says your team has extensive experience supporting enterprise IT modernization for civilian agencies. The past performance volume lists three contracts. None of them are clearly connected to that claim. A compliance matrix with an evidence column forces you to tie every assertion back to something you can document before a contracting officer or evaluator asks. If the evidence column is empty next to a key differentiator, you have caught a problem while you can still fix it, not during a debriefing.

How to build one without a dedicated proposal team

You do not need specialized software to start. Here is a repeatable process for a small firm working a single solicitation:

  1. Download the full solicitation package, including all amendments, attachments, and incorporated clauses. Amendments frequently add or modify requirements, and many small firms work from the original RFP without checking amendment modifications.
  2. Open a spreadsheet and read Section L, the SOW or PWS, Section H, and the attachments sequentially. Add a row for every instruction, every "shall," every "must," and every deliverable. Do not filter or judge. If it is a requirement, it gets a row.
  3. Add a row for each Section M evaluation factor and sub-factor. These are not always identical to Section L instructions. Sometimes an evaluation factor has no corresponding Section L instruction, which means the government expects you to address it without being told exactly where. The matrix surfaces that gap.
  4. As you draft, fill in the "where we answer it" column in real time. Do not wait until the proposal is finished to reconcile. Reconcile as you go.
  5. Run a final status sort before you submit. Every row still marked "not yet addressed" is a gap you fix now. Sort by status and the holes are obvious. This final pass takes 20 minutes and has saved bids that would have gone out with a dropped requirement.

The reason small firms skip this process is honest: reading a 90-page document line by line to extract every requirement is two to four hours of tedious work, and that is before you write a single word of the proposal. When you are a two-person shop running three active bids, that time is genuinely hard to find. But the matrix is not optional overhead. It is the work. A proposal without one is a proposal written for the writer, not for the evaluator.

What the matrix does to your proposal quality beyond compliance

A side effect most small contractors do not anticipate: once you have a complete requirements list, you have an outline. Every Section L instruction is a section of your proposal. Every SOW deliverable is something your technical approach needs to address. Writers who start from the matrix stop producing proposals that are organized around what they want to say and start producing proposals organized around what the evaluator needs to find. That shift alone improves scores, because evaluators can locate your answers without hunting.

It also makes your color reviews faster. A red team reviewer who has the compliance matrix can check coverage in minutes instead of re-reading the solicitation from scratch. On a small team where the same person writing the proposal is also running the color review, that efficiency matters.

Where Winrove fits into this process

Winrove, a product of IT Custom Solution LLC, was built specifically for small firms that need this discipline but cannot spend four hours extracting requirements by hand on every bid. You paste the RFP text, and the tool pulls every "shall," every Section L instruction, and every evaluation factor into a structured requirements list. As you draft, you can see which requirements have been addressed and which are still open. The evidence check keeps your past performance and technical claims tied to work you can actually document.

You still write the proposal. The matrix just stops being the reason you lose. Plans start at $49 per month. One solicitation is free at winrove.com.

The short version

Federal evaluators read proposals like checklists because their job is to confirm compliance before they assess quality. A compliance matrix mirrors that process on your side of the table. Build it from the full solicitation package, including amendments and incorporated clauses. Map every "shall" to a location in your proposal. Sort by status before you submit. The firms that win consistently are not always the most technically capable. They are the ones that answered every question the evaluator was required to ask.