NYC PASSPort Registration: Document Prep Checklist

For a New York City nonprofit, PASSPort registration is not a single online form; it is the point where governance records, tax filings, financial statements, payment details, user permissions, and contract-readiness all have to align inside one City procurement ecosystem. An organization can have a strong program, a committed board, and years of community credibility, yet still lose weeks because its legal name differs across documents, a required policy is outdated, or the person expected to sign a contract cannot access the account.

I approach NYC PASSPort registration as a document-readiness exercise before I treat it as a portal task. The portal is only the visible part of the process. Behind it sits a set of compliance questions: Who legally represents the nonprofit? Which financial documents match its annual revenue? Is the organization pursuing City Council discretionary funding or competing for human-services contracts? Have payment and identity systems been connected correctly? And can at least two people maintain access when staff transitions inevitably occur?

This guide is designed as a practical NYC PASSPort registration checklist for nonprofits, with the route divided according to the type of City relationship your organization is building.

Begin with the payment and identity foundation

Before setting up a PASSPort account, a nonprofit must establish its payment infrastructure through the City’s Payee Information Portal, commonly referred to as PIP. This step is not an administrative side note. The City uses PIP to process payments, and nonprofits must also register for Electronic Funds Transfers, or EFT, if they expect City funds to reach the organization’s bank account.

The sequence matters:

1. Create or confirm the organization’s PIP account.

2. Register for Electronic Funds Transfers so City payments can be deposited electronically.

3. Create the organization’s PASSPort account.

4. Complete Vendor Enrollment.

5. Assign the appropriate contacts and user roles.

6. Have each contact register a NYC.ID using the exact email address entered by the Vendor Admin.

That last requirement creates a surprisingly common point of friction. The email address in PASSPort and the email address used for the NYC.ID registration must match exactly. A variation in punctuation, a personal address substituted for an organizational one, or an old staff email left in the account can prevent a contact from logging in even when the underlying nonprofit record is correct.

I recommend deciding in advance which addresses will be used for the organization’s primary administrative contacts. Shared inboxes can help with continuity, but they should not replace clear individual responsibility for signing, procurement submissions, and account maintenance. A nonprofit needs to know not only who can log in, but who is authorized to make a representation on behalf of the organization.

Build access around continuity, not convenience

MOCS recommends assigning the Vendor Admin role to at least two individuals. I consider this one of the most practical safeguards in the entire onboarding process. If only one staff member has administrative access and that person leaves, takes extended leave, or loses access to the organization’s email system, a routine account update can become a governance and contracting problem.

The Vendor Admin is responsible for assigning the additional roles required for City business:

• Vendor Admin, who manages the organization’s account and contacts.
• Signatory, who can sign certain organizational representations and documents.
• Vendor Contract Signatory, who is authorized to sign contracts.
• Procurement L2, which supports procurement-related activity and submissions.

At least one contact must be assigned each of the latter roles. These permissions should be matched to actual internal authority rather than given casually to the person who happens to be completing the registration. A program director may be the best person to prepare a proposal, but that does not automatically make them the organization’s contract signatory. The board and executive leadership should understand who holds each role and what happens if that person is unavailable.

PASSPort access is an organizational asset, not a personal login. Set it up so the nonprofit can survive a staff transition without reopening the entire compliance process.

Before submitting the account, I would keep a short internal record containing the organization’s legal name, Employer Identification Number, primary contacts, assigned roles, PIP information, and the date each contact confirmed NYC.ID access. This is not bureaucracy for its own sake. It gives the nonprofit a reliable map when the account must be renewed, amended, or used under deadline.

Choose the correct prequalification path

The next decision is the most consequential one: whether the organization needs the full HHS Prequalification process or the simplified Discretionary PQL Application.

These are not interchangeable versions of the same application. They correspond to different ways a nonprofit may receive City funding.

HHS Prequalification

A nonprofit applying to compete for City human-services or client-service contracts generally needs to pursue HHS Prequalification, often referred to as the HHS PQL. This route requires a broader organizational, governance, policy, and financial submission because the City is assessing the organization’s capacity to perform under a service contract.

The core document set includes:

• Certificate of Incorporation, including any amendments.
• Corporate By-Laws.
• Current Board of Directors List.
• IRS 501(c)(3) Determination Letter.
• Conflict of Interest Policy.
• Whistleblower Policy.
• Financial documents based on the nonprofit’s annual revenue.

The legal and governance documents should describe the same organization. The corporate name on the Certificate of Incorporation should correspond with the name used in PASSPort, tax filings, board records, and the IRS determination letter. If the nonprofit has changed its name, amended its certificate, or reorganized its corporate structure, upload the documents that explain the current legal position rather than relying on the newest document alone.

The Board of Directors List should also be current at the time of submission. An old list can create questions about whether the people named in the application still govern the organization, particularly when board officers have changed since the most recent annual filing.

Discretionary PQL

A nonprofit that receives only City Council discretionary awards and does not compete for human or client service solicitations may be eligible for the simplified Discretionary PQL Application. MOCS guidance updated in May 2025 describes this as a three-question application with a much narrower document requirement.

For that route, the nonprofit generally uploads:

• Current Board of Directors List.
• Conflict of Interest Policy.

This simplified path reduces the initial paperwork, but it does not eliminate the need for accuracy. The nonprofit still needs a valid organizational identity, a functional PASSPort account, appropriate contacts, and governance records that can withstand review. “Simplified” describes the application, not a suspension of accountability.

The distinction is best understood this way:

The route should be selected based on the nonprofit’s actual funding activity and near-term plans, not simply on which application appears easier. An organization that currently receives a discretionary award but expects to pursue a human-services solicitation may need to prepare for HHS Prequalification rather than treating the simplified application as a permanent substitute.

Match financial documents to annual revenue

Financial documentation is where the PASSPort process becomes most clearly tiered. The City does not require every nonprofit to produce the same level of CPA-reviewed or audited material; the required documents depend on annual revenue.

The thresholds are:

The practical lesson is to determine the organization’s applicable tier before beginning the application. A nonprofit should not discover halfway through the process that its revenue level requires an independent CPA report or audited financial statements that are still being finalized.

What each tier means operationally

For organizations with annual revenue of $25,000 or less, the CHAR500 is the central financial filing identified for prequalification. Small organizations often assume that their size makes the registration informal, but the City still needs a coherent record of the nonprofit’s legal and financial status.

For organizations above $25,000 and up to $250,000, both the CHAR500 and IRS Form 990 are required. The two filings should be internally consistent. Differences in reported revenue, fiscal year, legal name, or organizational status may not automatically disqualify an application, but they create avoidable questions and can slow the review.

Once annual revenue exceeds $250,000, a CPA Reviewed Report enters the document set. A review is not the same as an audit: the level of assurance and the procedures involved differ. The nonprofit should upload the document that corresponds to the City’s stated requirement rather than assuming that any CPA-prepared financial package will satisfy the category.

For organizations with revenue above $1 million, the requirement rises to CPA Audited Financial Statements, in addition to the CHAR500 and IRS Form 990. The audit should be complete and clearly attributable to the organization applying in PASSPort. If the nonprofit operates multiple programs, affiliates, or related entities, the financial statements should make clear which legal entity is the vendor.

Prepare the financial file before the portal file

I find it useful to create a financial document folder organized by fiscal year, with the current filing and the preceding materials retained for internal reference. The upload folder should contain readable final documents, not working drafts, screenshots, or files whose names make it impossible to tell what they are.

A sensible naming system might identify:

• The organization’s short legal name.
• The document type.
• The fiscal year.
• Whether the file is final.

For example, a file labeled with the nonprofit’s name, “Form 990,” and the relevant fiscal year is easier for both internal staff and reviewers to identify than a generic filename such as “scan0007.pdf.”

Financial preparation also requires attention to timing. The exact processing time for MOCS review is not fixed and may vary with submission volume, so a nonprofit should not build a procurement timeline around the assumption that approval will arrive within a particular number of days. If a solicitation or award deadline is approaching, document preparation should begin before the account is needed for the specific opportunity.

Review governance documents with a City-contract lens

The HHS PQL document list is short enough to look simple, but each document carries a different governance function.

Certificate of Incorporation and amendments

The Certificate of Incorporation establishes the nonprofit’s legal identity under New York law. Upload the current certificate together with amendments when those amendments affect the organization’s name, structure, purpose, or other material corporate information.

A frequent source of confusion is the difference between the organization’s public-facing name and its legal name. Programs may operate under a shorter name, an acronym, or a “doing business as” identity, while PASSPort requires the legal entity that holds the contract. Resolve that distinction before uploading files.

Corporate By-Laws

By-laws show how the organization is governed: how directors are selected, how meetings are conducted, how officers are appointed, and how decisions are authorized. They should be the version formally adopted by the board, not an unapproved draft circulating among staff.

The by-laws also help explain who may act for the nonprofit. That matters when the organization assigns signatory roles in PASSPort, because the portal’s user permissions should reflect the nonprofit’s own governance structure rather than substitute for it.

Board of Directors List

The board list should be current and should identify the directors and, where applicable, the officers. It should not quietly omit recent resignations, appointments, or officer changes simply because an older version is easier to find.

Most importantly, New York State law and NYC contract compliance rules require that the board chair, board secretary, and board treasurer not be employed by the organization. This is not a formatting preference. It is a substantive governance requirement that should be reviewed before submission.

A nonprofit should compare the board list with its payroll and employment records. Titles can be misleading: a person may be described internally as a volunteer officer while also receiving compensation as an employee. That overlap needs to be resolved before the application proceeds.

Conflict of Interest Policy

The Conflict of Interest Policy addresses how the organization identifies, discloses, evaluates, and manages situations in which personal or financial interests could influence a nonprofit decision. The uploaded version should be formally adopted, readable, and aligned with the organization’s actual board and staff practices.

A policy that exists only in a board handbook but has never been approved, circulated, or used may not provide much protection in practice. I encourage organizations to pair the document review with a quick internal question: Can a board member explain what they are expected to disclose and what happens after a disclosure is made?

Whistleblower Policy

The Whistleblower Policy should likewise be a current organizational document, not merely a template retained from the incorporation process. It should provide a credible way for directors, employees, volunteers, and other covered individuals to raise concerns without retaliation, consistent with the organization’s legal obligations and internal structure.

The City is not asking the nonprofit to produce a collection of abstract policies. It is looking for evidence that the organization has the basic governance infrastructure required to manage public funds and deliver services responsibly.

The strongest PASSPort submission is not the one with the most documents; it is the one in which every document tells the same current story about the organization.

Treat staff roles as a compliance control

PASSPort user roles are often treated as a technical configuration issue, but they also reveal whether the nonprofit has separated operational preparation from legal authorization.

The Vendor Admin should be able to maintain the account, but that person should not automatically be the only person authorized to sign a contract. The Signatory and Vendor Contract Signatory roles should be assigned to individuals whose authority is supported by the organization’s governance practices. Procurement L2 should sit with a contact who can manage or support procurement activity without creating uncertainty about who may bind the nonprofit.

I recommend a short internal role map:

This map should be reviewed whenever the executive director changes, a board officer resigns, or a staff member leaves. It should also be checked before a major submission, because a technically active account can still fail at the point of signature if the designated person is unavailable or improperly assigned.

For smaller organizations, separation of roles can feel excessive because the same few people carry much of the work. The answer is not to ignore the distinction; it is to document it carefully and ensure that at least two people can preserve access. A board member may provide continuity for governance matters, while a staff member manages routine account administration.

Complete capacity-building requirements when they apply

Nonprofits receiving less than $750,000 in cumulative City Council discretionary funding per fiscal year must complete the City Council’s Capacity Building Training within 30 days of registration. The certificate is valid for three years.

This threshold needs to be read precisely. Organizations receiving $750,000 or more in cumulative discretionary funding are explicitly exempt from this training requirement. The rule is not a general statement that every discretionary awardee must complete the course.

For organizations below the threshold, the training should be assigned to a person who can retain the certificate and explain the organization’s compliance responsibilities. Waiting until a contract or award deadline is close creates unnecessary pressure, particularly when the person who registered the organization is not the person responsible for its board records or financial administration.

The three-year validity period gives nonprofits an opportunity to incorporate the training into their recurring compliance calendar. I would record:

• The date of PASSPort registration.
• The training completion date.
• The certificate expiration date.
• The staff or board contact responsible for renewal planning.

This is especially useful in organizations with rotating grant staff, because institutional memory often disappears faster than a certificate does.

Prepare for additional contract-level requirements

PASSPort registration and prequalification do not mean every future contract will require the same attachments. Some obligations are triggered by the value or type of contract.

One threshold to watch is $100,000. Nonprofits with contracts of $100,000 or greater must submit a Division of Labor Services Supply & Services Employment Report, which is uploaded to the Equal Employment Opportunity section in PASSPort.

That requirement should be incorporated into the organization’s procurement planning rather than handled as an afterthought. The nonprofit may need to coordinate information across finance, human resources, operations, and the person managing PASSPort. The employment report is not simply another board document; it depends on workforce information and the applicable City process.

The SBS DLS Certificate of Approval is valid for three years. A Conditional Approval may instead be issued for three months in some circumstances, but the specific criteria SBS uses to issue conditional rather than full approval are not established in the available guidance. I would therefore avoid assuming that conditional approval will be available or treating it as a predictable extension.

The practical preparation is straightforward:

1. Identify whether a planned or existing City contract reaches the $100,000 threshold.

2. Determine who owns the employment-report data internally.

3. Keep the relevant workforce information current.

4. Upload the report in the correct Equal Employment Opportunity section.

5. Track the approval or conditional-approval expiration date separately from the nonprofit’s general PASSPort credentials.

Contract compliance is an ecosystem rather than a single approval. The organization’s legal records, financial filings, workforce information, board governance, and user permissions all meet at different points in the City’s procurement process.

A workable preparation sequence for nonprofit teams

The most efficient way to approach the NYC PASSPort account setup documents is to organize the work in the order that prevents rework.

First, confirm the organization’s legal identity

Collect the Certificate of Incorporation and amendments, IRS determination letter, current by-laws, and the organization’s official tax and payment information. Compare names, addresses, and entity details across the documents. Resolve discrepancies before creating the account.

Second, establish payment access

Create or confirm the PIP account and register for EFT. Confirm that the bank and payment information belongs to the same legal entity that will appear in PASSPort.

Third, select the funding pathway

Decide whether the nonprofit is pursuing HHS Prequalification or qualifies for the simplified Discretionary PQL Application. Base the decision on the organization’s actual City funding relationship and expected contracting activity.

Fourth, assemble the governance file

Update the board list, confirm the status of the board chair, secretary, and treasurer, and locate the formally adopted Conflict of Interest and Whistleblower Policies. If the nonprofit has experienced recent leadership changes, update the records before uploading them.

Fifth, identify the financial tier

Use annual revenue to determine whether the submission requires only a CHAR500, a CHAR500 plus Form 990, a CPA Reviewed Report, or audited financial statements. Do not upload a lower-level document simply because it is more readily available.

Sixth, configure people and permissions

Choose at least two Vendor Admins, assign the Signatory, Vendor Contract Signatory, and Procurement L2 roles, and ensure every contact uses the exact email address entered in PASSPort when registering for NYC.ID.

Seventh, add deadline-based obligations

If the nonprofit falls below the $750,000 discretionary funding threshold, schedule the Capacity Building Training within 30 days. If the organization has a City contract of $100,000 or more, prepare for the DLS Employment Report requirement.

This order separates foundational identity issues from later procurement details. It also gives a small nonprofit a way to divide the work: finance can prepare the revenue-based documents, the board secretary can confirm governance records, and the designated Vendor Admins can handle account access.

The strategic value of getting registration right

PASSPort registration is often described as a prerequisite, but it is also a diagnostic tool. If an organization cannot quickly identify its current board officers, adopted policies, financial tier, authorized signatories, and payment contacts, the portal has surfaced an internal management issue that would likely appear elsewhere in the City contracting process.

That does not mean every nonprofit needs a large compliance department. Many community organizations operate with limited staff and rely on volunteer directors, part-time finance support, or outside accountants. The goal is to create a clear, maintained record of responsibility so that legislative and administrative friction does not fall on one person at the last minute.

I would revisit the PASSPort file whenever one of these events occurs:

• A board officer changes.
• The executive director or Vendor Admin leaves.
• The nonprofit changes its legal name or address.
• A new fiscal year produces a different financial-document tier.
• The organization begins competing for HHS or other client-service contracts.
• A City Council award changes the organization’s cumulative discretionary funding level.
• A City contract approaches or exceeds $100,000.
• A training or DLS approval approaches expiration.

The broader policy lesson is that public contracting depends on the infrastructure beneath the program. Community stakeholders may know an organization through its services, relationships, and neighborhood presence, while the City must also evaluate whether that organization can document authority, manage funds, maintain controls, and meet reporting obligations. PASSPort is where those two realities become administratively visible.

Final roadmap

For a nonprofit preparing for NYC PASSPort registration, the route is clear even though the paperwork can feel layered:

• Start with PIP and EFT before creating the PASSPort account.
• Confirm the legal entity and keep all organizational documents consistent.
• Choose HHS Prequalification or Discretionary PQL based on the organization’s actual City funding path.
• Match financial uploads to the correct annual-revenue threshold.
• Review board officers and confirm that the chair, secretary, and treasurer are not employed by the nonprofit.
• Upload current governance policies rather than inherited or informal drafts.
• Assign at least two Vendor Admins and give every required role to an appropriate contact.
• Make sure NYC.ID email addresses exactly match the emails entered by the Vendor Admin.
• Track the 30-day Capacity Building Training deadline when the nonprofit receives less than $750,000 in cumulative discretionary funding.
• Prepare for the DLS Employment Report when a City contract is valued at $100,000 or more.

The best time to build this file is before a funding opportunity creates urgency. When the nonprofit’s legal records, financial statements, governance policies, payment information, and user roles are already aligned, PASSPort becomes a manageable administrative route rather than a last-minute test of institutional memory.