# DoD Contractors Navigate CAGE Reporting for CMMC

A company with three locations and three CAGE codes, but no identified highest-level owner (HLO), is preparing for a CMMC Level 2 assessment and expects possible errors when assessment data moves from eMASS to SPRS. The discussion offers conflicting approaches: aligning the CAGE codes under one SAM.gov hierarchy or submitting only the CAGE code typically used for contracts. It does not establish which approach is correct or resolve whether assigning an HLO would accurately reflect the company’s ownership. For contractors, the issue is how entity structure and CAGE-code selection may affect assessment records and procurement-system reporting.

- Contractors with multiple CAGE codes should confirm which codes and organizational relationships will be represented in the assessment and SPRS submission; the discussion does not provide a settled answer.
- Because the suggested approaches differ, companies should verify that their CAGE-code and SAM.gov hierarchy information matches the structure they intend to use for contract submissions before proceeding with assessment data entry.
- The thread highlights a potential data-alignment concern for DoD suppliers preparing for CMMC Level 2, rather than a specific contract opportunity or a confirmed change in reporting policy.

**Jurisdictions:** federal
**Industries:** Defense & Military
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** November 10, 2026

### Government Entities
- U.S. Department of Defense (DoD)
- Defense Logistics Agency (DLA)

### Key Quotes
> Just use one CAGE in the C3PAO assessment. Nothing says all three location cages codes must be included. Pick the one normally used in contract submissions
> — Community commenter

### Sources
- [1 company 3 CAGE Codes no HLO and eMASS and SPRS data formatting](https://www.reddit.com/r/CMMC/comments/1xsi33r/1_company_3_cage_codes_no_hlo_and_emass_and_sprs) - reddit-cmmc