At Draper, our mission is to solve complex engineering challenges and deliver advanced solutions for national security, space exploration, and biomedical advancements. We are committed to fostering strong partnerships with suppliers who share our dedication to innovation, integrity, and excellence.
Supplier Requirements
Draper is dedicated to maintaining high standards in quality, ethics, and performance and we seek partners who value those same standards. Suppliers are required to provide specific documents, keep updated records and perform with quality, efficiency, and ethics.
To maximize the prospects of becoming a Draper supplier, it is important to understand what Draper does. Please study our market areas and core capabilities carefully. Once you have identified an opportunity that aligns with your core capabilities and past performance, please follow our four step process listed below.
Cybersecurity Requirements
As a key player in the defense and technology sectors, Draper prioritizes cybersecurity and the protection of sensitive information. We require our suppliers to comply with CMMC 2.0 (Cybersecurity Maturity Model Certification) standards to safeguard critical data and maintain robust cyber hygiene. CMMC 2.0 emphasizes flexible yet rigorous cybersecurity practices, and suppliers must demonstrate adherence to these standards based on their level of engagement with Draper. Visit CISA for more information on CMMC 2.0, or the CIO.
Additional Regulatory References, Federal Acquisition Regulation (FAR):
- 52.204-21 Basic Safeguarding of Covered Contractor Information Systems
Defense Federal Acquisition Regulation Supplement (DFARS):
- 204-73 Safeguarding Covered Defense Information and Cyber Incident Reporting
- 252.204-7008 Compliance with Safeguarding Covered Defense Information
- 252.204-7009 Limitation on the Use or Disclosure of Third Party Contractor Reported Cyber Incident Information
- 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting
- 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements
- 252.204-7020 NIST SP 800-171 DoD Assessment Requirements
- 252.204-7021 Cybersecurity Maturity Model Certification Requirements
Other Cybersecurity References:
Supplier Resources
The following form must be completed and signed for a domestic supplier to be onboarded, in addition to a W9:
Small Business Suppliers
Draper is committed to working with and supporting small and diverse businesses to maintain our competitiveness. We partner with small, small-disadvantaged, women-owned, veteran-owned, service-disabled veteran-owned, HUBZone, Native American-owned, minority-owned small businesses, and Historically Black Colleges and Universities/minority institutions. Our small business management team focuses on compliance, early engagement, outreach, and support with small and diverse businesses. Suppliers can contact Draper’s small business management team at isrrequests@draper.com.

Empowering Innovation: Draper SPARX™ Bridges Cutting-Edge Tech with National Defense
DraperSPARX™ selects and supports partners who excel at providing world-class technologies to the government ecosystem. It’s a unique initiative aimed at bolstering national security by integrating cutting-edge technology from small businesses and startups into the Department of Defense (DoD) and other U.S. government agencies. This exclusive program connects forward-thinking companies with Draper’s seasoned technical experts, advanced labs, facilities, and venture capital partners.