What Is CAGE Code?
Also known as: Commercial and Government Entity code, NCAGE, CAGE number
Definition
A CAGE code is a five-character identifier assigned to entities that do business with the US federal government and defense primes. It is issued by the Defense Logistics Agency, usually through SAM.gov registration, and identifies a specific facility.
CAGE Code Explained
CAGE stands for Commercial and Government Entity. The code is five characters and identifies a particular location of a supplier, manufacturer or other entity, not only a company. It appears on contracts, drawings, labels, procurement records and many military specifications, which is why defense ERPs hold it on both customer and vendor records.
In the United States a CAGE code is normally assigned as part of registration in SAM.gov, the System for Award Management, and maintained by the Defense Logistics Agency. Foreign entities receive an NCAGE code through their national codification bureau. Registration details need to be kept current, and the code ties the entity to other lookups used by contracting officers.
A CAGE code is an identifier only. It does not attest that a company is ITAR registered, CMMC certified or AS9100 certified. Compliance status is tracked separately and verified through the relevant systems or certificates. Confusing the code with a quality or security approval is a common misunderstanding.
In ERPs the CAGE code lives in custom or standard fields on the customer and vendor master, and it is printed on certificates of conformance, packing slips, unique item identification labels and shipping documents. For defense work, data quality here matters because a wrong code on a label or a record can delay payment or acceptance.
Why It Matters
- Defense contracts and prime purchase orders commonly require the supplier's CAGE code on documents, so missing data stalls orders.
- Flow-down verification of sub-tier suppliers starts with confirming the code matches the legal entity and location.
- Counterfeit and diversion risk programs use the code to confirm the origin of parts and the party that handled them.
- Accurate codes on labels and packing paperwork reduce rejection at government receiving.
In Practice
Example: a defense electronics shop ships a lot to a prime. The packing slip and certificate of conformance both need the shop's CAGE code and the prime's ship-to CAGE. If the vendor master holds the code on the site record, the document template pulls it automatically. If the shop operates two buildings with separate codes, the ERP should select the code by plant, not use one global value. The gotcha is a code copied from the parent company onto a branch facility.
Frequently Asked Questions
How do I get a CAGE code?
In the US, registering the entity in SAM.gov results in a CAGE code assigned by the Defense Logistics Agency. Foreign entities obtain an NCAGE code from their national codification authority.
Does a CAGE code prove ITAR registration or CMMC?
No. It only identifies the entity and location. ITAR registration, CMMC status and AS9100 certification are separate and must be verified separately.
Is a CAGE code per company or per site?
It identifies a specific entity at a specific location, so separate facilities can have separate codes. Use the one that matches the facility doing the work or shipping the product.
Related Terms
ITAR
ITAR (International Traffic in Arms Regulations) is the US State Department regulation, at 22 CFR Parts 120-130, that controls the export of defense articles, defense services, and related technical data listed on the United States Munitions List.
CMMC (Cybersecurity Maturity Model Certification)
CMMC (Cybersecurity Maturity Model Certification) is the US Department of Defense program that verifies defense contractors implement required cybersecurity controls before contract award, using three levels of assessment tied to the sensitivity of the information they handle.
DFARS 252.204-7012
DFARS 252.204-7012 is the Defense Department contract clause requiring contractors to protect covered defense information by implementing NIST SP 800-171, to report cyber incidents to DoD within 72 hours, and to flow the same obligations down to subcontractors.
AS9100
AS9100 is the quality management system standard for the aviation, space, and defense industry, published by SAE and the International Aerospace Quality Group, which incorporates all of ISO 9001 and adds sector-specific requirements for safety, configuration, and risk.
Certificate of Conformance (CoC)
A certificate of conformance (CoC) is a document from the manufacturer or supplier, signed by an authorised person, stating that delivered goods or services meet the purchase order, drawing and specification requirements, with traceable lot or serial references.
Go Deeper
ITAR Compliance Checklist for Manufacturers
A 32-point checklist covering DDTC registration, technical data controls, foreign person access, IT security, and recordkeeping for ITAR-regulated manufacturers.
Free ToolDFARS 252.204-7012 Compliance Self-Assessment
A 10-question self-assessment covering the full DFARS 7012 clause: NIST 800-171 implementation, SPRS, incident reporting, cloud requirements, and flowdown.
Free ToolCounterfeit Parts Risk Assessment (AS5553)
A 10-question assessment of your counterfeit electronic parts exposure, aligned to AS5553 and DFARS counterfeit prevention requirements, with a risk band and mitigation plan.
Working with CAGE Code in a live environment? Our engineers do this every day - and our AI agents automate most of it.
Try it here, free
Electronics Lot and Date Code Traceability Log Worksheet
An editable log that records manufacturer, lot, date code and quantities per component line, with on-hand balance calculated per row.
Keep exploring
Free tools
- Electronics Lot and Date Code Traceability Log WorksheetAn editable log that records manufacturer, lot, date code and quantities per component line, with on-hand balance calculated per row.
- Commercial Invoice Template for ExportGenerate a customs-ready commercial invoice with parties, Incoterm, HS code, country of origin and value declaration.
- Government Contract Compliance Cost CalculatorEstimate the implementation, assessment, and recurring annual cost of DFARS/CMMC compliance for your DoD business, and see it as a percentage of contract revenue.
ERP fixes and how-tos
- Business Central: "Select a Dimension Value Code for the Dimension Code"Fix 'Select a Dimension Value Code for the Dimension Code' in Business Central: Default Dimensions, Value Posting settings, priorities and blocked combinations.
- Date Code and Lot Traceability in Cetec ERPHow to keep date code and lot traceability in Cetec ERP for electronics: capture at receiving, preserve through builds, and answer a recall trace quickly.
- IFS Cloud Customer Order Supply Code and Project OrdersHow the supply code on an IFS Cloud customer order line drives planning for project-connected orders: inventory, purchase, shop order and project supply.
Guides
- AI-Powered Code Review for ERP CustomizationsReview ERP customizations with AI agents detecting code quality issues, upgrade risks, security vulnerabilities, and performance problems in custom ERP code.
- Government Contract Accounting and DCAA ComplianceGovernment contract accounting and DCAA compliance: job cost ledgers, indirect rate pools, timekeeping controls, and passing the DFARS accounting system audit.
- Implementing QR Code Tracking in SyteLine OperationsImplement QR code tracking in Infor SyteLine for items, assets, and documents. Configure QR generation, encoding schemes, and scan workflows for CloudSuite Industrial.
AI on your ERP
- AI for ERP Across the US Defense Supply ChainA CIO's guide to adding AI on top of the ERP defense primes and tier 2-3 suppliers already run, without adding a compliance risk the program cannot absorb.
- AI for Deltek Costpoint in government contract accountingAI on Deltek Costpoint for timesheets, indirect rates, and incurred cost, grounded on real data and deployed on-prem to keep DCAA-relevant data in house.
Manufacturing hubs
- Aerospace manufacturing in Wichita, KansasGuide to aerospace manufacturing in Wichita, Kansas: anchor OEMs, supplier tiers, NIAR and Kansas MEP resources, AS9100 and ITAR needs, ERP and quoting problems.
- Aerospace and Defense Subcontractors on Long Island, New YorkLong Island aerospace and defense subcontractors: machining, fabrication and electronics shops, anchors, AS9100, ITAR and CMMC needs, and ERP and quoting problems.
Integrations
- How to add document OCR to Deltek CostpointCapture invoices, packing slips, certs of conformance and receipts into Deltek Costpoint with OCR, confidence thresholds, project coding and human review.
- How to add document OCR to SAP Business OneCapture supplier invoices, packing slips and certificates into SAP Business One with OCR: A/P invoice drafts, PO matching, confidence thresholds and review.
Troubleshooting
- Why transformers blocks loading with a trust_remote_code error, and what to actually do about ittrust_remote_code=True executes the repo author's Python code in your process. Understand the real risk, then vendor and review the code before using it in regulated environments.
- Why pipeline parallelism scales poorly, and why the bubble, not the code, is usually the problemPipeline parallelism scales poorly when there are too few microbatches for the pipeline depth, leaving a large idle bubble. Increase microbatches before adding stages.
Software
- UnanetUnanet is project-based ERP for government contractors. See modules, integrations, strengths, limits, alternatives and where AI helps in contract accounting.
- Microsoft 365 GCC HighMicrosoft 365 GCC High is a US government cloud used by defense contractors for CUI and ITAR data. See services, limits, alternatives and AI considerations.