San Antonio, TX · Military City, USA UEI L58JZMKRCLM5  ·  CAGE 203C1  ·  NAICS 541511  ·  SAM.gov Active
OVERVIEW

If you sell cloud infrastructure, managed hosting, or data processing to the federal government, NAICS 518210 is likely the code under which those contracts get bid — and it carries a $40.0 million receipts-based small-business size standard, materially higher than the standard that applies to the 5415 computer-services codes. That gap is the strategic point of this page: a firm that has outgrown small status under a coding/software code can often still compete as a small business on hosting and infrastructure work classified under 518210. Below is a plain-spoken explainer of what the code covers, how the 2022 NAICS revision reshaped it, and where it matters in a federal bid. This is educational, not legal advice — verify any threshold against the SBA size-standards table and the live solicitation.

WHAT IT CLASSIFIES

What NAICS 518210 actually covers

The infrastructure and processing layer — not the consulting or custom-build layer.

NAICS 518210 is the U.S. industry code for establishments that provide the computing infrastructure itself: the servers, platforms, and facilities that host applications and process data, rather than the people who write the software or advise on IT strategy.

In practice, the work that falls under 518210 includes:

CLOUD / IaaS

Computing infrastructure providers

Providing compute, storage, and platform capacity — cloud and Infrastructure-as-a-Service offerings, application hosting, and general timeshare/mainframe facilities furnished to clients.

HOSTING

Web & application hosting

Web hosting, streaming services, and application service provisioning — operating the environment where a client’s site, app, or media actually runs.

DATA

Data processing services

Complete processing and specialized reporting from client-supplied data, plus automated data-processing and data-entry services.

The line that trips people up: if you are building the software or advising on architecture, that is usually a 5415 computer-services activity (custom programming, systems design, IT consulting). If you are running the infrastructure that hosts and processes — that is 518210. Many firms legitimately do both and hold multiple codes. The procurement’s assigned NAICS, not your self-description, governs each individual bid.

THE 2022 REVISION

Same number, broader title

What changed — and what stayed exactly the same.

The six-digit number did not change. What changed in the 2022 NAICS revision is the title and scope. Under the 2017 structure, 518210 was titled “Data Processing, Hosting, and Related Services.” The 2022 revision kept the number and retitled it to “Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services,” explicitly recognizing cloud and computing-infrastructure providers within the code and across the renamed Subsector 518.

NAICS vintageTitle for 518210
2017 NAICSData Processing, Hosting, and Related Services
2022 NAICS (current)Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

So if you see older references to the shorter “Data Processing, Hosting” title, they are describing the same code at an earlier vintage — not a different or retired code. There is no separate predecessor number to chase; the modern, cloud-aware title is the one to use in your capability statement and SAM.gov profile.

SIZE STANDARD

Why the $40.0M standard is a bidding lever

The single most actionable fact on this page.

The SBA size standard for NAICS 518210 is $40.0 million in average annual receipts. That is higher than the standard that applies to the 5415 computer-services codes — including 541511 (Custom Computer Programming Services), the code BrandShyp itself holds.

What that means in plain terms

A firm can grow past the small-business ceiling on coding/software work and still qualify as small on a cloud, hosting, or data-processing procurement classified under 518210. The code under which a given contract is solicited determines which size standard applies to that bid — so the same company can be “small” on one opportunity and “other than small” on another.

The honesty caveat

Monetary size standards get revised. SBA has a pending proposal to adjust receipts-based thresholds, so treat $40.0M as current-as-published, not permanent. Always confirm the figure for the procurement’s NAICS against 13 CFR 121.201 and the SBA table before you represent yourself as small.

Size is calculated on your concern’s average annual receipts including affiliates, under the SBA’s rules — joint ventures, common ownership, and control all factor in. A clean read of your own number is not the same as a defensible small-business representation, so when the dollars are close to the line, get it checked.

FEDERAL RELEVANCE

518210 in a real federal bid

Where the code shows up — and what it does and doesn’t determine.

Agencies assign 518210 to a broad swath of cloud and hosting work: managed cloud environments, web and application hosting, data-center and processing services, and “as-a-service” infrastructure delivery. When you scan SAM.gov, the assigned NAICS on each notice tells you which size standard and which small-business set-asides are in play.

  • Set-asides follow the NAICS. Whether an opportunity is set aside for small business, and against what ceiling, is keyed to its assigned code — see federal set-aside programs for how the lanes work.
  • Carry the codes you can actually perform. List 518210 in SAM only if you genuinely provide infrastructure/hosting/processing — padding your NAICS list invites a size or responsibility challenge.
  • Classification is not authorization. Federal cloud/hosting work frequently intersects with FedRAMP and NIST 800-171 / CMMC. Those are separate compliance regimes — 518210 classifies the industry, it does not by itself confer or require any authorization. Check the solicitation for the actual security requirement.

For the full picture of how 518210 fits alongside 541511, 541512, 541519 and the other codes IT firms commonly carry, see our companion guide: NAICS codes for IT contractors. This page is educational, not legal advice — verify every code, size standard, and set-aside against SBA, SAM.gov, and the specific solicitation before you bid.

COMMON QUESTIONS

Questions, answered

What is NAICS code 518210?
NAICS 518210 is the U.S. industry code for Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services. It classifies firms that provide the computing infrastructure itself — cloud and Infrastructure-as-a-Service, web and application hosting, streaming, and data-processing services — rather than firms that write custom software or provide IT consulting, which generally fall under the 5415 codes.
What is the SBA size standard for NAICS 518210?
The size standard for 518210 is $40.0 million in average annual receipts. Because monetary size standards are periodically revised, confirm the current figure against the SBA Table of Size Standards and 13 CFR 121.201 before representing your firm as small on a 518210 procurement. This is educational, not legal advice.
Did NAICS 518210 change in 2022, or is it a new code?
The six-digit number 518210 did not change. In the 2017 NAICS it was titled ‘Data Processing, Hosting, and Related Services.’ The 2022 NAICS revision kept the same number and retitled it to ‘Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services,’ explicitly folding in cloud and computing-infrastructure providers. Older references to the shorter title describe the same code at an earlier vintage.
What is the difference between NAICS 518210 and 541511?
541511 (Custom Computer Programming Services) covers building and writing software, while 518210 covers running the infrastructure that hosts and processes data — cloud, hosting, and data processing. They also carry different SBA size standards: 518210’s $40.0M receipts standard is higher than the standard for the 5415 computer-services codes. Many firms legitimately hold both, but each individual contract uses the NAICS the agency assigned to it.
Can a firm be small under 518210 but not under a 5415 code?
Yes. Size is judged per-procurement against the size standard tied to that procurement’s assigned NAICS. Because 518210’s $40.0M receipts standard is higher than the 5415 computer-services standard, a firm that has grown past the small ceiling on software/coding work can still qualify as small on a cloud or hosting contract classified under 518210 — provided it genuinely performs that work and its receipts (including affiliates) fall under the threshold.
Does NAICS 518210 require FedRAMP or NIST 800-171 compliance?
No — NAICS 518210 classifies the type of work; it does not by itself require any security authorization. Federal cloud and hosting contracts often do require FedRAMP authorization and NIST 800-171 / CMMC controls, but those are separate compliance regimes driven by the solicitation, not by the NAICS code. Always read the specific solicitation for the actual security requirement.
PUT THE CODE TO WORK

Bidding cloud or hosting work? Make sure your NAICS and capability statement line up.

BrandShyp bids federal and state IT work every week and runs its own NIST 800-171 posture — talk to us about GovCon enablement, capability-statement, and proposal support that get your 518210 and 5415 codes working together.