The Grant Compliance Survival Guide: 2 CFR 200 Made Human

What is 2 CFR 200 and Why It Governs Almost All Federal Grants?

If you work in nonprofit grants or federal funding, you've probably heard the phrase "2 CFR 200" whispered like some kind of bureaucratic boogeyman. And for good reason: this single regulation touches nearly every federal grant your organization receives—and violations can trigger devastating audit findings, grant clawbacks, and compliance nightmares.

Here's the core truth: 2 CFR 200 is the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. That's a mouthful, but what it really means is this is the federal government's rulebook for how nonprofits, universities, schools, and state/local governments must manage federal grant money.

Why This Regulation Exists

Back in the day, the federal government had dozens of different compliance rules for different types of grants—one set of rules for Education Department grants, another for HHS, another for Transportation, etc. This was a disaster for nonprofits trying to manage federal money. In 2014, the OMB (Office of Management and Budget) created 2 CFR 200 to consolidate all of this into one unified rulebook. The goal: consistency, transparency, and accountability.

Think of it as the federal government saying: "We need to know that when we give you federal money, you're going to:

• Use it for the purposes we intended
• Manage it with reasonable controls
• Track it properly in your accounting system
• Procure goods and services in a competitive, fair way
• Pay employees a reasonable wage (and document their time)
• Report it honestly"

2 CFR 200 is the mechanism to ensure all of that happens. And because the federal government is incredibly prescriptive about compliance, organizations that ignore these rules face real consequences: denied future funding, forced repayment of grants, debarment, and audit failures.

The 10 Provisions That Trip Up 90% of Organizations

2 CFR 200 is nearly 200 pages of federal code. But here's a secret: most audit findings fall into about 10 categories. If you master these 10 provisions, you'll eliminate the vast majority of compliance risk.

1. Cost Allocation (Indirect Costs)

This is perhaps the most misunderstood provision in 2 CFR 200. Your organization has two types of costs related to grants:

• Direct costs: Costs that clearly benefit a specific grant (a counselor's salary funded 100% by Grant A)
• Indirect costs: Costs that benefit multiple grants or your organization broadly (rent, utilities, HR, accounting, executive director)

The federal government won't let you charge 100% of your rent to Grant A, even if Grant A is huge. Instead, you allocate it proportionally—based on direct costs, labor hours, or square footage. 2 CFR 200 specifies how to do this through a Cost Allocation Plan or Indirect Cost Rate Agreement (ICRA).

2. Time and Effort Reporting

When employees work on federal grants, you must document their time. This isn't new—it's been a requirement for decades. But 2 CFR 200 made it stricter, and many organizations still get it wrong.

The rules are clear:

• If an employee works part-time on a federal grant, you must have documentation (timesheets, effort reports) showing they spent that time on the grant
• The documentation must be contemporaneous (created at or near the time work was performed)
• It must be signed by the employee and a supervisor
• It must cover the entire period the employee is charging time to the grant

3. Subrecipient Management

If you pass federal grant money to other organizations (subrecipients), you have specific responsibilities. More on this below, but the key point: subrecipients are not contractors. They're organizations doing the programmatic work. And you must monitor them, document your relationship, and ensure they comply with 2 CFR 200.

4. Procurement Standards

When you buy things with federal grant money—equipment, consulting services, office supplies—you must follow federal procurement rules. This doesn't mean you need three bids for everything. It means you must use one of four approved procurement methods (outlined in more detail below).

5. Allowable Costs

Not every cost can be charged to a federal grant. 2 CFR 200 Subpart E outlines allowable and unallowable costs. Some examples:

• Unallowable: Alcohol, entertainment, lobbying, fines and penalties, bad debts, contributions to other nonprofits (with rare exceptions), memberships in country clubs
• Potentially allowable (if reasonable): Travel, meals, equipment, training, professional services

The rule of thumb: Is the cost reasonable, necessary, and directly related to the grant's purpose? If yes, it's likely allowable. If you're unsure, ask your grant officer before spending the money.

6. Property Management

2 CFR 200 requires specific rules for equipment (typically anything over $5,000, though grants may set different thresholds). You must:

• Maintain a property inventory
• Track the location of equipment
• Conduct annual physical counts
• Document depreciation (if applicable)

There were significant changes to property rules in 2024. The threshold for "equipment" (requiring capitalization and tracking) increased in many cases, and new guidance on virtual property and cloud-based software was added.

7. Conflict of Interest

2 CFR 200 requires you to maintain a conflict of interest policy. Staff, board members, and anyone involved in procurement or award decisions can't have financial or personal interests that create conflicts. Examples:

• A board member's company providing services to the grant
• A staff member's family member being a subrecipient
• An employee voting on procurement when they have a financial stake in the outcome

You need a written policy, disclosure procedures, and documentation of conflicts identified and managed.

8. Financial Management Systems

Your accounting system must be able to:

• Track revenues and expenditures by grant
• Segregate federal funds from non-federal funds
• Allocate indirect costs correctly
• Reconcile grant spending to federal reports

You don't need fancy software, but you need a system. Many small nonprofits use QuickBooks or even Excel effectively. The key is that you can pull a report showing how much you spent on each grant and justify every expense.

9. Federal Award Integrity and Transparency Act (FAITAA) Compliance

If your organization has federal contracts or grants over $25,000, you must report executive compensation. Additionally, if you have compensation packages for officers, key employees, or contractors exceeding a certain threshold ($231,000+ in 2024, adjusted annually), you must report this to the federal government.

10. Internal Controls

2 CFR 200 requires organizations to maintain effective internal controls. This sounds vague, but it simply means:

• Segregation of duties (the person who spends money shouldn't be the only person who approves it)
• Documentation of decisions and approvals
• Regular reconciliation of accounts
• A whistleblower policy for reporting fraud or misuse

Small organizations can keep this simple—a clear approval chain, documented board oversight, and basic accounting controls will satisfy this requirement.

Subrecipient vs. Contractor: The Distinction That Causes the Most Audit Findings

One of the most confusing aspects of 2 CFR 200 is the distinction between subrecipients and contractors. Get this wrong, and you'll likely face audit findings. Here's why it matters: subrecipients must comply with 2 CFR 200, but contractors don't (they follow commercial procurement rules instead).

How to Tell the Difference

What You Must Do with Subrecipients

If you have subrecipients, you must:

• Document the relationship: A written agreement specifying the scope of work, deliverables, budget, and compliance responsibilities
• Ensure their 2 CFR 200 compliance: They must have their own financial management systems, internal controls, and policies
• Monitor their performance: Review their financial reports, programmatic progress, and compliance at least quarterly
• Verify their audit status: If they spend $750,000+ in federal funds, they must have a Single Audit. You must review their audit results
• Withhold funds if needed: If a subrecipient isn't complying or is underperforming, you can withhold payments

Cost Allocation Demystified: Direct vs. Indirect, Allowable vs. Unallowable

Cost allocation trips up even experienced nonprofit finance staff. But it's actually straightforward if you understand a few basic principles.

Step 1: Categorize Your Costs

Every cost must be classified as either direct or indirect:

• Direct costs: Clearly attributable to a specific grant. Examples: the salary of a counselor who works 100% on Grant A, supplies purchased specifically for Grant A, or a contract with an evaluator just for Grant A.
• Indirect costs: Benefit multiple grants or your organization overall. Examples: rent, utilities, HR, accounting, executive director's time, insurance, office supplies.

Step 2: Determine Your Indirect Cost Rate

Once you've identified indirect costs, you allocate them to grants using an indirect cost rate. There are three approaches:

• De minimis rate (10-15%): If you don't have an approved rate, you can use a simplified 10-15% of modified total direct costs (MTDC). This doesn't require calculation—just apply the percentage.
• Federally negotiated rate: If you receive significant federal funding, you can request a formal rate from your cognizant federal agency. This is more precise but requires more documentation.
• Cost Allocation Plan: If you have multiple funding sources or program structures, a cost allocation plan divides costs across programs based on a logical allocation methodology (labor hours, square footage, etc.).

Step 3: Track What's Allowable and Unallowable

Even if a cost is properly allocated, it must be allowable. Here are the rules:

• Allowable if: Reasonable, necessary, allocable to the grant, and not prohibited by law, regulation, or grant terms
• Prohibited costs: Alcohol, entertainment, fines/penalties, lobbying, bad debts, goodwill, organization contributions (with exceptions), fund-raising, memberships in clubs, pre-grant expenses

When in doubt, ask your grant officer before spending the money. A simple email saying "I'm planning to spend $X on [item]. Is this allowable under our grant?" takes 30 seconds and can prevent an audit finding.

The Bottom Line on Cost Allocation

Set up a simple system: maintain a chart of accounts that segregates direct and indirect costs, document your indirect cost rate (even if it's just "we use the de minimis 15%"), and train your finance team on what's allowable. Most audit findings on cost allocation stem from poor documentation, not mathematical errors. If you can explain your cost allocation methodology, you'll pass any audit.

Time and Effort Reporting: What the Feds Actually Require (and the Common Mistakes)

This is one of the most frequently audited areas of 2 CFR 200, and it's also one of the easiest to fix.

The Legal Requirement

2 CFR 200.430 requires that if an employee charges time to a federal grant, that time must be supported by:

• Contemporaneous records (created at or near the time work was performed)
• Signed by both the employee and a supervisor
• Accurate and reasonably detailed (the employee should describe the work performed)

The word "contemporaneous" is key. This means you can't backfill time at the end of the grant or estimate how much time was spent. The time must be documented as it happens.

What Works and What Doesn't

The regulation doesn't prescribe a specific form. Here are acceptable methods:

• Weekly timesheets: Employee fills out a form showing hours per grant per day/week. Simple and effective.
• Monthly effort reports: Employee certifies their level of effort (percentage of time) on each grant per month. Also acceptable if employee signs and dates monthly.
• Payroll records + allocation documentation: If you have a payroll system documenting hours, you can supplement with a monthly allocation form if the person charges to multiple grants.

What doesn't work:

• Estimates of time (created months after the work was done)
• Time records with no supervisor sign-off
• Annual effort allocations (auditors want contemporaneous documentation)
• No documentation whatsoever (even if the person only works on one grant)

The Penalties for Getting This Wrong

If your time records are inadequate, the auditor will disallow the cost. This means you have to pay back the salary (or portion of salary) charged to the grant. For a mid-size nonprofit with 10-15 employees on federal grants, a time reporting audit finding can cost $50,000-$200,000 or more.

How to Implement This Right

Set up a simple system:

1. Every employee who charges time to a federal grant (even 5%) gets a timesheet form
2. Weekly or biweekly, they fill it out (hours per grant per day or week)
3. A manager signs off weekly
4. File the signed timesheets (physical or digital)
5. Match the timesheets to payroll when you process paychecks

This takes 30 minutes per employee per week. It's not glamorous, but it's the difference between a clean audit and a six-figure repayment.

Property Management Rules Including 2024 Threshold Changes

Equipment purchased with federal grant funds must be managed according to 2 CFR 200.313. The rules aren't complex, but they're detailed.

What Qualifies as Equipment (and What Doesn't)

The key threshold is cost and useful life. Generally:

• Equipment: Items costing $10,000 or more (as of 2024; previously $5,000) with a useful life of more than one year. These must be inventoried, tracked, and managed carefully.
• Supplies: Items under $10,000 or with a useful life of one year or less. These are expensed immediately.

Important note: Check your specific grant's terms. Some grants still use the $5,000 threshold, and others may vary. Always review the grant agreement.

2024 Updates to Property Rules

Recent OMB guidance addressed gaps in the original regulation:

• Cloud-based software and digital licenses: These are now explicitly addressed. If you purchase a software license (e.g., annual subscription to a grant management tool), it's treated as equipment if it costs $10,000+. You must document its purchase, use, cost allocation, and depreciation.
• Virtual property: Digital assets, data, and intellectual property created with federal grant funds have clearer management requirements. You must track them, document their use, and ensure proper cost allocation.
• COVID-era flexibilities: Some temporary allowances for remote work equipment and pandemic-related purchases have been clarified or expired. Review your grant terms.

What You Must Do with Equipment

For any federally purchased equipment over the threshold, you must:

• Maintain a property inventory: A list showing cost, date acquired, location, and current status
• Conduct annual physical counts: Verify that equipment listed in your inventory actually exists
• Document depreciation: If required by your accounting policy, show how the equipment is being depreciated
• Track use and location: Know where equipment is and how it's being used
• Report at close-out: When a grant ends, report the status of federally purchased equipment

The Disposition of Equipment

When a grant ends, federal-purchased equipment must be handled according to 2 CFR 200.313(e). Generally:

• If the item cost $5,000-$10,000, the organization usually retains it
• If the item cost $10,000+, the federal agency may require return or buyout
• Some grants allow continued use with federal government retaining title; others allow you to purchase the remaining interest

Always check your grant's property disposition language. This is often in the close-out instructions.

Procurement Standards Simplified (The 4 Methods)

When you buy something with federal grant funds, you must follow federal procurement standards. This doesn't mean you need to publicize every purchase. It means you must use one of four approved methods.

Method 1: Micro-Purchases (Under $10,000)

For purchases under $10,000 (adjusted annually for inflation), you can use your normal procurement process. No competitive bidding required, though you should still seek the best value. This is the most common method for small nonprofits.

Method 2: Small Purchases (Competitive Quotes)

For purchases between $10,000 and $50,000 (approximate thresholds; check current federal standards), you should obtain at least three competitive quotations. You don't need a formal bid process—phone calls or email requests are fine. Document the quotes and your selection rationale.

Method 3: Sealed Bids (Formal Competitive Bidding)

For large purchases (typically $50,000+, adjusted annually), you should use sealed bids or formal competitive bidding. This process involves:

• Public notice of the procurement opportunity
• A detailed specification or request for proposal
• A deadline for submission
• Sealed/confidential opening of bids
• Award to the lowest responsive bidder (unless you document why a higher bid is more advantageous)

Many organizations work with their local government or use a cooperative purchasing agreement to meet federal procurement standards without doing their own formal bid process.

Method 4: Requests for Proposals (RFPs) or Competitive Negotiations

For services or complex purchases, an RFP allows you to describe your needs and ask vendors to propose solutions. This is more flexible than sealed bids because you can evaluate factors beyond price (experience, approach, qualifications, etc.). Document your evaluation criteria and your scoring.

Prohibited Procurement Practices

You cannot:

• Procure from entities that have been debarred by the federal government (check SAM.gov)
• Show favoritism to specific vendors without competitive justification
• Conduct "sole source" procurements without documenting why only one vendor can meet your needs
• Use grants as a way to test a vendor and then sole-source future work

Common Violations and How to Prevent Them

Based on annual audit reports and OMB guidance, here are the violations that appear most frequently—and how to avoid them.

1. Inadequate Documentation

The violation: No contemporaneous records of time, no evidence of procurement process, no cost allocation documentation.

How to prevent: Create a "grants compliance file" for each grant. Include the grant agreement, your cost allocation methodology, time records, procurement documentation, and any subrecipient agreements. File everything, and train your team to document decisions as they happen, not after the fact.

2. Unallowable Costs

The violation: Charging costs to grants that are explicitly prohibited (alcohol, entertainment, lobbying, fines).

How to prevent: Create a policy listing allowable and unallowable costs. Share it with all staff who manage federal grants. When in doubt, ask your grant officer.

3. Cost Allocation Errors

The violation: Charging 100% of indirect costs (rent, utilities) to a grant without an approved cost allocation plan or indirect cost rate.

How to prevent: Establish a cost allocation methodology. For most small nonprofits, this is simple: use the de minimis 15% rate and document it in your grants policy manual.

4. Subrecipient Non-Compliance

The violation: Passing federal grant money to subrecipients without adequate written agreements, monitoring, or verification that the subrecipient complies with 2 CFR 200.

How to prevent: Create a subrecipient agreement template. Include compliance language, monitoring expectations, and audit requirements. Monitor subrecipients quarterly and document it. Review their audits if applicable.

5. Inadequate Internal Controls

The violation: One person having complete control over grant spending (approval, implementation, reconciliation, reporting).

How to prevent: Segregate duties. Even in a small organization, have one person approve grants spending and a different person reconcile it monthly. This is basic financial controls.

6. Conflict of Interest Violations

The violation: No conflict of interest policy, or no disclosure of conflicts when they occur.

How to prevent: Adopt a written conflict of interest policy. Require annual disclosure from staff and board members. Document any conflicts and how you managed them (e.g., the person recused themselves from procurement decisions).

7. Procurement Violations

The violation: Sole-sourcing procurements without competitive justification, or procuring from debarred entities.

How to prevent: For all purchases over $10,000, get competitive quotes. Check SAM.gov before awarding to any vendor. Document your procurement process.

8. Federal Spending Data Not Reported (FFATA)

The violation: If you receive $25,000 or more in federal awards, you must register in SAM.gov and maintain current registration. Many organizations miss this.

How to prevent: Assign someone to register in SAM.gov and check it annually. It takes 15 minutes and is free.

A Quick-Reference Compliance Checklist

Print this out, post it in your finance office, and work through it quarterly:

If you've checked all boxes, you're in excellent shape. If any are unchecked, prioritize fixing them before your next audit.

Resources for Staying Current

2 CFR 200 is updated periodically, and grant requirements evolve. Here's where to stay informed:

• OMB Uniform Guidance: The official federal regulation. Access it at ecfr.gov (search "2 CFR 200") or whitehouse.gov/omb.
• SAM.gov: System for Award Management. Register here if you receive federal funds. Also check this for debarred entities before procuring.
• Grants.gov: Find federal funding opportunities and download grant announcements here.
• Your cognizant federal agency: Every organization has a designated federal agency that oversees its compliance. Contact them with questions about your specific grants.
• AAFRC (Association of Fundraising Professionals) and your state nonprofit association: These groups often provide training on federal compliance.
• Your independent auditor: Your annual auditor is your best resource. Ask them which compliance areas pose the highest risk for your organization.

Wrapping Up: The Real Truth About 2 CFR 200

Here's what you need to know: 2 CFR 200 isn't designed to trip you up. It's designed to ensure federal grant money is used appropriately and accounted for properly. If you approach compliance with the mindset of "federal money belongs to the American public, and we're stewards of it," you'll get most of this right.

The regulations boil down to a few core principles:

• Document everything (time, procurement, decisions)
• Segregate direct from indirect costs and allocate correctly
• Only charge allowable costs
• Monitor subrecipients
• Compete fairly when procuring
• Manage conflicts of interest

Master these, and you'll eliminate 95% of compliance risk. The remaining 5%? That's what auditors and your grant officers are for. Ask questions when you're unsure. The federal government would rather you ask than violate the rule.

Your organization does important work. Federal grants enable that work. By complying with 2 CFR 200, you're protecting your funding, your reputation, and the communities you serve. It's not glamorous, but it matters.