tensorust/cmmc-phase2-contractors-sample

CMMC Phase 2 Contractor List: free sample (Tensorust LLC)

Every DoD contractor likely to need CMMC Level 2 at Phase 2, with the dollars at stake.

Headline: CMMC Phase 2 starts Nov 10 2026: new DoD awards that carry CUI need a Level 2 certification, and a contractor without one cannot be awarded new work.

This repository is a free teaser, not the dataset. It holds 25 example rows and a summary table with no names in it. The full file has 44,720 rows and is sold by Tensorust LLC: https://tensorust.com/datasets/cmmc-phase2-contractors/.

Files here

file	what it is
sample.csv	25 rows of the full file (the same sample shown on tensorust.com)
summary_by_state.csv	row counts and totals by state across the full file, no entity names (groups with fewer than 3 rows are folded into "Other")

Summary by state (largest groups)

State	rows	DoD obligations FY2024-26 (USD)
CA	4,614	104,558,211,805
VA	4,069	199,487,056,866
(blank)	3,252	42,068,630,304
TX	2,771	170,987,406,215
FL	2,544	74,434,124,665
MD	2,015	46,767,184,594
NY	1,692	33,540,135,777
PA	1,582	62,763,923,629
OH	1,339	20,751,403,060
GA	1,185	17,295,575,795
MA	1,166	51,257,187,415
IL	1,067	24,308,960,916
TOTAL	44,720	1,380,864,759,845

Full table: summary_by_state.csv.

What the full file has

• 44,720 rows
• Key fields: recipient_uei, recipient_name, parent_uei, parent_name, city, state, zip, country, top_naics, top_naics_description
• Parquet and CSV, a README with sources, method and limits, and the build script
• Free 25-row sample (no personal contact data)

Coverage: All DoD prime recipients with positive obligations FY2024 to FY2026 except low-likelihood NAICS; 3,254 foreign recipients kept and marked by country. USAspending pull through Jul 2026; built Nov 6 2026

Columns in the full file

column	meaning
recipient_uei	SAM UEI of the recipient
recipient_name	Recipient legal name
parent_uei	Parent UEI per USAspending
parent_name	Parent name
city	Recipient city
state	Recipient state
zip	Recipient ZIP
country	Recipient country code
top_naics	Primary NAICS by DoD dollars
top_naics_description	NAICS title
cui_likelihood	high or medium likelihood that the work handles CUI (NAICS screen)
dod_obligated_fy24_26	DoD obligations FY2024 to FY2026 to date, USD
obligated_fy2024	FY2024 DoD obligations
obligated_fy2025	FY2025 DoD obligations
obligated_fy2026	FY2026 DoD obligations to date
n_awards	Number of DoD awards in the window
n_awards_current_value_over_5m	Awards with current value over $5M
largest_award_current_value	Current value of the largest award
first_action_date	First action in window
last_action_date	Last action in window
parent_dod_obligated_fy24_26	DoD obligations summed over all recipients under the same parent
parent_n_recipients	Recipients under the same parent
ontology_oid	Tensorust ontology organization id (UEI match)
ontology_sources	Number of public sources the organization appears in
ontology_flags	Ontology rules that apply to the organization: DFARS-FOCI (award above $5M, SF 328 disclosure proposed), OFAC-SDN (name match to verify or listed), FCC-FAC (holds an FCC license)
sf328_disclosure_flag	True when the ontology rule DFARS-FOCI applies (a DoD award above $5M, so the proposed SF 328 beneficial ownership disclosure, DFARS Case 2021-D011, would cover it). Not a finding of foreign ownership

Get the full file

tier	price	includes
Territory or NAICS slice	$1,500	Every recipient in up to 3 states or 5 NAICS codes, with DoD dollars by fiscal year, CUI likelihood, parent roll-up, ontology rule flags (SF 328, OFAC, FCC) and USAspending keys. CSV and Excel.
National list	$7,500	All 44,720 recipients nationwide, parent roll-ups and flags, plus one refresh after the first Phase 2 solicitations post (Q1 2027).
Yearly license with quarterly refresh	$18,000 a year	The national list refreshed each quarter from USAspending, new recipients flagged, for C3PAO and MSP sales teams or prime supplier-risk programs. Internal use, unlimited seats.

Email mattbusel@tensorust.com with the tier and a billing contact, and we will send a proper invoice (ACH or card). The file is delivered once the invoice is paid. Details and the live sample: https://tensorust.com/datasets/cmmc-phase2-contractors/. All datasets: https://tensorust.com/datasets/

Method and limits

Start from all 61,026 DoD recipients, drop zero or negative totals, classify primary NAICS into CUI likelihood, drop low, sum each parent UEI's recipients, join to the ontology on UEI for source count and rule flags.

Not a list of contracts that actually carry DFARS 252.204-7012 or the CMMC clause (USAspending does not publish clauses), not a certification status (the CMMC eMASS status is not public), and not contact data. Subcontractors are not in USAspending prime data. Data only, no compliance advice.

Sources

• USAspending.gov award data, DoD recipients FY2024 to FY2026 (fetched for the Tensorust ontology)
• 32 CFR Part 170 (CMMC program rule) and 48 CFR 252.204-7021, Phase 2 effective Nov 10 2026
• Tensorust ontology (929K+ organizations, OFAC, FOCI flags)

License

The sample and summary here are free to view, analyze and cite with attribution to "Tensorust LLC, https://tensorust.com/datasets/cmmc-phase2-contractors/". The full dataset is licensed separately per tier. No resale or redistribution of Tensorust data without a written license.

Tensorust LLC, Tuckahoe NY. mattbusel@tensorust.com | https://tensorust.com