Skip to content

How bidding works

How to build an RFP compliance matrix

A compliance matrix is a numbered list of every requirement in a solicitation, mapped to who is answering it, where the answer lives in your response, and whether it is done. It takes two to four hours to build on a typical state or local bid and it is the single highest-return activity in the entire response process.

The reason is structural. Public buyers reject bids for missing requirements far more often than they lose them on price or quality. A missing notarized affidavit, an unacknowledged addendum, a section that exceeded the page limit, a form submitted on your letterhead instead of the agency's template. These are not judgment calls, they are checkbox failures, and a matrix catches every one of them.

Proposal shops build these as a matter of course. Most contractors do not, and it shows in their hit rate. Here is how to build one that earns its time back.

On this page

The short version

  • Extract every "shall", "must", "will", "is required to" and "submit" from the entire document, including the contract terms and the attachments, not just the instructions.
  • One row per requirement, and never merge two requirements into one row. If a sentence contains three obligations it becomes three rows.
  • Every row needs an owner with a name and a due date, not a department.
  • Federal RFPs make this easier by separating instructions (Section L) from evaluation (Section M); state and local documents bury both, so read the whole thing.
  • Re-run the matrix after every addendum. Addenda add and change requirements, and an unacknowledged or unaddressed addendum is a common cause of rejection.
  • The final pass is a physical walk of the matrix against the assembled package with a second person, on the morning of submission.

What a compliance matrix is for

Three jobs, in order of value.

1. It prevents rejection. A public bid is judged first on responsiveness: whether it complied in all material respects with the solicitation, as submitted. The federal formulation at FAR 14.301 is the model most states use, and the consequence is the same everywhere: a material defect is fatal at opening and cannot be cured afterwards. The matrix is the mechanism that makes sure nothing material is missing.

2. It makes the response assignable. Once every requirement is a numbered row with an owner, work can be handed to an estimator, a safety manager, an insurance broker and an office manager in parallel instead of sitting in one person's head.

3. It becomes the evaluator's map. A cross-reference column showing which page of your response answers which requirement can, on many solicitations, be submitted as part of the proposal. Evaluators score faster and score you higher when they never have to hunt for an answer.

Extracting the requirements

Go through the entire package, page by page, and pull every obligation. The keywords are shall, must, will, is required to, submit, provide, include, demonstrate, certify and acknowledge. Treat "should" and "may" as a separate, lower-priority tier. They usually indicate a preference rather than a condition, but note them, because meeting a preference can earn points.

The mistake almost everyone makes is extracting only from the instructions section. Requirements are scattered across:

  • Instructions to bidders/proposers: format, copies, deadline, delivery method, page limits, tab structure.
  • Scope of work / technical specifications: performance obligations, response times, staffing minimums, equipment, licenses, reporting.
  • Evaluation criteria: every criterion is implicitly a requirement to address it.
  • Contract terms and general conditions: insurance limits and endorsements, indemnification, bonding, liquidated damages, prompt payment, retainage, warranty. These carry requirements you must be able to meet at award, and some require documentation at bid time.
  • Attachments, exhibits and forms: each mandatory form is its own row.
  • Wage determinations: classification coverage, certified payroll obligations. See Prevailing wage and Davis-Bacon for contractors.
  • Addenda: every one, every time.

Split compound requirements. "The Contractor shall provide a written quality control plan, submit monthly inspection reports, and designate a full-time on-site supervisor" is three rows, not one. Rows that contain two obligations are how the second obligation gets missed.

The structure

A spreadsheet is fine. The columns that matter:

ColumnWhat goes in it
IDSequential number you assign, e.g. C-001
SourceExact document, section and page: "RFP §3.4.2, p.18"
RequirementThe obligation, quoted or tightly paraphrased
TypeForm / Narrative / Price / Certification / Capability / Deliverable at award
Mandatory?Pass-fail, scored, or informational
OwnerA person's name
DueInternal date, ahead of the submission deadline
Response locationWhere in your package it is answered: "Tab C, p.11"
StatusNot started / drafted / reviewed / complete
NotesRisk, gap, question to ask the agency

Two columns do disproportionate work. Type lets you sort the matrix into work packages: all the forms to one person, all the narrative to another, everything requiring a third party (bonding, insurance, notary, references) to the top of the schedule because those have external lead times. Mandatory? tells you which rows can never be left incomplete, no matter what the calendar looks like on Thursday afternoon.

Working the matrix

Sort by lead time, not by document order

Anything that depends on someone outside your company gets started first. A bid bond from a surety, a certificate of insurance with specific additional-insured endorsements, a notarized non-collusion affidavit, a state certification, three reference confirmations, a subcontractor quote. These take days and they are the rows that blow up on the last afternoon. See bid bonds and performance bonds explained for what a surety needs and how long it takes.

Identify the gaps in the first sitting

The matrix will surface requirements you cannot meet: a license you do not hold, an experience threshold you do not clear, an insurance limit your carrier will not write, a bonding capacity above your single-job limit. Discover this on day one, not day nine. Some gaps are curable: a joint venture, a subcontractor, a broker call. Some are a no-bid, and finding that on day one saves you the other 30 hours. See how much does it cost to bid on a government contract?.

Turn the gaps into questions

Ambiguous requirements go on the question list before the written question deadline. If two sections conflict (the spec says 24-hour response and the contract says 4-hour response), you need that resolved in an addendum, because pricing the wrong one is a serious error and pricing both is not an option.

Re-run after every addendum

Each addendum gets its own pass: what did it add, what did it change, what does it oblige me to do differently, and is it acknowledged in the form the solicitation demands. Then update affected rows. Failing to acknowledge an addendum is one of the most common disqualifications in public bidding, and the matrix is where you catch it.

The cross-reference column, and when to submit it

Once your response is drafted, fill the response location column with real page and tab references. This does two things.

Internally, it proves every requirement is actually answered somewhere. An empty cell is a hole. It is very common to discover at this stage that a requirement has been discussed in passing but never directly answered, and an evaluator scoring against a checklist will mark it as not addressed.

Externally, many solicitations either require or permit a compliance or cross-reference matrix as part of the submission. If it is permitted, include it. Federal RFPs make the logic explicit by pairing instructions in Section L with evaluation factors in Section M (FAR 15.204-5). The matrix is simply the bridge between them. State and local documents rarely use those labels, but the evaluator still has a scoring sheet with the criteria listed down one side, and handing them a map from criterion to page is a real advantage.

Keep the submitted version clean: requirement, source reference, and where it is answered. Strip the internal columns (owner, status, risk notes) before it goes out.

The final walk

On the morning of submission, with the assembled package in front of you and a second person reading the matrix aloud, walk every row. Not a skim: a physical check that the thing exists, is signed, and is in the right place.

  1. Every mandatory row marked complete, with a page reference.
  2. Every form present, signed by someone with authority to bind the company, dated, and notarized where required.
  3. Every addendum acknowledged, by number, in the place the solicitation specifies, and one last check of the portal for an addendum issued overnight.
  4. Pricing schedule complete: every line and alternate priced, extensions correct, total correct.
  5. Page limits respected in the sections where they apply.
  6. Copy count, media format and labelling correct.
  7. Electronic submission uploaded and the final submit step confirmed, with the confirmation number saved.

This takes 30 to 45 minutes. It is the cheapest insurance available on a document that took 33 hours to produce, and it is the step firms skip when they are running late, which is precisely when the errors are there to be caught.

The full submission-day sequence, including the responsiveness traps a matrix is built to catch, is in how to respond to an RFP. If you would rather have the matrix, the drafting and the final walk handled for you, book a call.

Common questions

What is a compliance matrix in an RFP?

A numbered table listing every requirement in the solicitation, with the source section, who is responsible for answering it, where the answer appears in your response, and its completion status. It serves as the project plan for the response and as the final check that nothing mandatory is missing before you submit.

How long does it take to build one?

Two to four hours for a typical state or local solicitation of 60 to 150 pages. Longer for a large construction package with extensive specifications and drawings. Against a benchmark of roughly 33 hours for a full response, it is around 10 percent of the effort and it protects the other 90 percent.

Should I submit the compliance matrix with my proposal?

If the solicitation requires it, yes, in the format specified. If it permits it, yes. A clean cross-reference from each requirement to a page number makes an evaluator's job easier and reduces the chance of being marked down for something you actually answered. If the solicitation is silent and there is a page limit, check whether the matrix counts against it before adding it.

What is the difference between a compliance matrix and a requirements traceability matrix?

In proposal practice they are used almost interchangeably. Traceability matrix is the term more common in IT and systems work, where the emphasis is on tracing each stated requirement through to a design element and a test. Compliance matrix is the term more common in procurement, where the emphasis is on proving each solicitation requirement is addressed somewhere in the submission.

Do I need one for a simple sealed bid with no narrative?

Yes, and arguably more than for an RFP. Sealed bids are won on price but lost on paperwork, and the failure modes (unacknowledged addendum, missing bid bond, unsigned form, an unpriced alternate) are exactly what a matrix catches. It will be a shorter matrix, mostly forms and certifications, and it will take under an hour.

What software should I use?

A spreadsheet is entirely adequate and is what most successful small contractors use. Dedicated proposal software adds value once you are running enough volume that a reusable content library pays for itself. The tool is not the point. The discipline of one row per requirement, one named owner, and a final two-person walk is the point.

Sources

Want us to find these for you?

We do the looking, read the documents, and tell you which ones are worth your time, then write the response. Twenty minutes to see whether it's a fit.

Want to talk today?

Book twenty minutes and you’ll see what’s open right now for a business like yours. Or just email us. A person answers within one business day.