Federal Contract Types: FFP, T&M, IDIQ, and Which to Pursue

Most small businesses treat contract type as a clerical detail — something the government decides and you accept. That's backwards. The contract type determines who absorbs cost overruns, whether you need a DCAA-compliant accounting system, how you structure your pricing, and whether you're even eligible to compete. A firm built around fixed-price work is structurally unprepared to win a cost-reimbursement contract. And a firm that focuses on open solicitations and ignores IDIQ vehicles is competing for a fraction of the market.

The federal government uses contract type as a risk-allocation tool. The more uncertainty in a requirement, the more cost risk the government wants to share with itself — which means the contract type shifts from fixed-price toward cost-reimbursement. The more clearly a requirement is defined, the more the government pushes risk onto the contractor through a firm-fixed-price structure.

FAR Part 16 — the section of the Federal Acquisition Regulation that governs contract types — establishes a clear preference: use firm-fixed-price whenever you can. Every deviation from FFP requires written justification. That preference shapes which types dominate the market and which ones you'll encounter most often.

Contract types also affect your pipeline strategy. IDIQs and GWACs — multi-year vehicles that issue task orders over time — deliver predictable revenue once you're on the vehicle. Standalone contracts compete for a single award. Your capture pipeline should reflect a mix of both: quick standalone wins to build past performance and IDIQ vehicle pursuits to build long-term revenue stability.

A firm-fixed-price contract is exactly what the name says: the price is set at award, and it doesn't change regardless of what the work actually costs you. If your costs run higher than estimated, you absorb the loss. If you find efficiencies that reduce your costs, you keep the difference. The government pays the agreed amount and has no visibility into your actual costs.

FAR 16.202 requires FFP when the contracting officer can establish a fair and reasonable price at the outset and the risk of performance cost variation is minimal. For commercial products and commercial services, FFP is not just preferred — it's the required contract type under FAR 12.207 unless the agency obtains a waiver.

FFP is the most common contract type in the federal market and the most accessible for small businesses. You don't need a DCAA-auditable accounting system to perform FFP work. You price to win and execute efficiently. This makes FFP the logical starting point for most small business entrants.

Variants of FFP exist. Fixed-Price with Economic Price Adjustment (FP-EPA) allows price adjustments tied to specific indices — like a labor rate index or commodity price — to protect both parties from long-duration inflation risk. You'll see FP-EPA in multi-year service contracts where labor market shifts could significantly affect performance cost. Fixed-Price Incentive Fee (FPIF) contracts set a target cost and target profit, with adjustments based on actual cost performance — rewarding efficiency and penalizing overruns beyond a ceiling price.

For most small businesses, the standard FFP is where to start. Price it well, perform it efficiently, and use the past performance to pursue larger FFP or hybrid contracts. Our government contract pricing strategies guide covers how to price FFP contracts competitively without underbidding yourself into a loss.

Time-and-materials (T&M) contracts pay you an agreed hourly rate for labor — including profit and overhead baked into the rate — plus actual material costs at cost. The government pays for hours worked and materials consumed. Unlike FFP, cost uncertainty shifts partially back to the government: if the work takes longer than expected, the government pays more (up to a ceiling).

FAR 16.601 is explicit: T&M contracts may only be used when it is not possible at the time of placing the contract to estimate accurately the extent or duration of the work, or to anticipate costs with reasonable confidence. The contracting officer must prepare a written determination and findings justifying why FFP or another type is not suitable. T&M is not a convenience — it's a documented exception.

Labor-hour (LH) contracts work identically to T&M but without materials — purely labor at negotiated fixed rates. Both structures set labor rates by category (e.g., Senior Engineer at $185/hour, Junior Analyst at $95/hour) in the contract. That labor rate includes your direct labor cost, fringe, overhead, and profit. It doesn't change during performance — only the number of hours billed varies.

T&M task orders under IDIQ vehicles are common in IT and professional services — the IDIQ sets up pre-negotiated labor categories and rates, and individual task orders authorize specific hours. Getting onto an IDIQ vehicle with pre-negotiated T&M rates positions you for fast task order awards without full re-competition each time.

Cost-reimbursement contracts pay your allowable, allocable, and reasonable costs — plus a fee. The government assumes most cost risk. If the work costs more than estimated, the government pays (up to a ceiling). If it costs less, the government pays less. This structure shifts risk toward the government and requires the government to trust that your costs are real, accurately tracked, and properly categorized.

That trust has a price: a DCAA-compliant accounting system. The Defense Contract Audit Agency audits cost-reimbursement contracts to verify that the costs you bill are allowable under FAR Part 31, properly allocated between contracts and overhead, and tracked in a system with adequate internal controls. If your accounting system doesn't meet DCAA standards, you cannot win a cost-reimbursement contract. In practice, most small businesses need to set up compliant systems before pursuing this work — not after award.

The most common cost-reimbursement types you'll encounter as a small business are Cost-Plus-Fixed-Fee (CPFF) and Cost-Plus-Award-Fee (CPAF). CPFF pays your costs plus a predetermined fixed dollar fee that doesn't change based on performance. CPAF pays your costs plus an award fee determined by a periodic performance evaluation — it creates profit incentive while maintaining government cost risk absorption.

DCAA compliance requires segregating direct from indirect costs, tracking costs by contract, maintaining timekeeping records that trace individual hours to specific contracts, and producing interim cost reports. Tools like Deltek Costpoint, Unanet, or even purpose-configured QuickBooks can satisfy DCAA requirements — but your setup must be reviewed and approved before award, not patched together after.

For most early-stage small businesses, cost-reimbursement contracts are not the right starting point. The accounting infrastructure cost and the complexity of proposal preparation make them harder to win and harder to manage. Most firms move into cost-reimbursement work after establishing themselves on FFP or T&M contracts, then invest in DCAA compliance as R&D or defense work opens up.

Indefinite-Delivery, Indefinite-Quantity (IDIQ) contracts are ordering frameworks — not standalone contracts. The IDIQ itself is a vehicle that establishes a minimum guaranteed order and a maximum ceiling over the contract period. Individual task orders or delivery orders placed against the IDIQ define the actual work, schedule, price, and place of performance.

The government must guarantee at least the minimum purchase. If you're on an IDIQ with a $50,000 minimum and a $10 million ceiling, the government is obligated to order at least $50,000 during the base period. Beyond that minimum, nothing is guaranteed — but every task order is a direct revenue opportunity with no re-competition if you're on a single-award vehicle, or limited competition among only the contract holders on a multiple-award vehicle.

IDIQs are powerful because they separate the competition from the delivery. You compete once (hard) to get on the vehicle, then compete within the vehicle (much easier — smaller pool, pre-negotiated terms, known agency relationships) for every task order. For IT services, professional services, and staffing, IDIQ vehicles are where the recurring revenue lives.

Use CapturePilot's intelligence tools to identify which IDIQ vehicles in your NAICS code are generating the most task order activity — and which vehicles have upcoming on-ramps where you can compete for a spot. Getting onto the right vehicle at the right time is one of the highest- leverage strategic moves in federal contracting. Learn more about managing your pursuit pipeline in our pipeline management guide.

Government-Wide Acquisition Contracts (GWACs) are IDIQ vehicles that any federal agency can use — not just the sponsoring agency. This makes GWACs high-value targets: a single on-ramp win opens the door to task orders from dozens of agencies over five to ten years. GWACs for IT and professional services are where most of the federal market consolidation is happening in 2025-2026.

Understanding the major vehicles helps you decide where to invest proposal resources. Each vehicle has different pools, evaluation criteria, and task order volumes. Spreading effort across five vehicles without the past performance to win any of them is a common early mistake.

OASIS+ is managed by GSA and has become the dominant professional services vehicle across the federal government. It operates through separate pools by business size and socioeconomic certification — meaning an SDVOSB competes only against other SDVOSBs for on-ramp spots and task orders within the SDVOSB pool. The pools have no ceiling on task order volume, which makes OASIS+ one of the highest-upside vehicles in the market for certified small businesses.

CIO-SP4 is managed by NIH's NITAAC program and covers health IT and cybersecurity. As of early 2026, award decisions were still in process after an extended evaluation period. CIO-SP3 was extended through April 2026 to bridge the gap. If you're in health IT, tracking CIO-SP4 awards and on-ramp opportunities is essential.

For IT companies specifically, Polaris — GSA's small-business-exclusive GWAC — is a high-priority target. It has separate pools for women-owned, HUBZone, and SDVOSB small businesses, with on-ramp opportunities that GSA announces periodically. Getting on Polaris positions you for IT task orders government-wide without competing against large primes.

There's a practical sequencing that makes sense for most small business entrants into federal contracting. It's not a rigid prescription — your industry and certifications shape it — but it reflects the typical risk/complexity profile at each stage.

Cost-reimbursement contracts don't appear in this sequence deliberately — for most small businesses, they come later, if at all. R&D organizations, defense labs support contractors, and health research firms often need CPFF contracts. If that's your market, invest in DCAA-compliant accounting from day one and pursue SBIR/STTR as your entry point.

Your certifications accelerate this sequence. An SDVOSB or 8(a) firm can access IDIQ vehicle pools and sole source opportunities that bypass several steps of the standard progression. Use our Quick Checker to see which certifications you currently qualify for and which vehicle pools they unlock.

Every solicitation tells you its contract type if you know where to look. Getting this wrong — pricing a T&M solicitation as FFP, or misunderstanding that you're bidding on a task order under an IDIQ vehicle — produces proposals that are unresponsive or mispriced. Three documents tell you everything you need.

Hybrid contracts are increasingly common. A services contract might be FFP for defined recurring tasks (like a monthly report) and T&M for surge or unforeseeable requirements. When you see a hybrid CLIN structure, price each type carefully with its own cost model — don't average them together.

For IDIQ task orders specifically, read the parent contract before the task order solicitation. The parent contract defines the allowable contract types for task orders, the pre-negotiated labor rates (if any), the ceiling, and the ordering procedures. Task order solicitations often reference parent contract terms that aren't repeated in the RFP itself — missing those terms produces proposals that are non-compliant on structure or pricing format.

If you're working through a high volume of solicitations, our proposal tools help you build a compliance matrix from Section L and M requirements — including identifying contract type specifications — before you write a word of the proposal. See our full guide on building a government proposal compliance matrix.