Compliance

Registration, security posture, and how we handle controlled data.

The checklist a contracting officer runs before a source-selection decision. Items in progress are marked honestly; we do not claim status we do not hold.

Federal registration & status

• SAM.gov registration In progress
• Unique Entity ID (UEI) FU42WX16QWS5
• CAGE code Pending issuance
• Small Business status Yes
• US citizen-owned Yes (100%)
• Foreign ownership, control, or influence (FOCI) None

Security posture

CMMC

NIST SP 800-171 self-assessment in progress; CMMC Level 2 planned

Cloud / data boundary

Microsoft 365; GCC High planned before handling CUI

Citizenship

100% US citizen-owned and operated

Facility clearance

No facility clearance at this time

Quality & data handling

• CUI will be handled in a Microsoft 365 GCC High enclave, provisioned before any CUI work; no controlled data in commercial tenants.
• NIST SP 800-171 controls mapped and tracked against a CMMC Level 2 implementation plan.
• Source control, code review, and CI/CD on every change; no direct-to-production edits.
• Least-privilege access, MFA on all accounts, and audit logging from day one.
• IP ownership retained in-house, supporting Phase III sole-source and IDIQ data-rights positions.

Section 508 / accessibility

This site is built to WCAG 2.1 AA: semantic structure, keyboard operability, visible focus, labeled controls, and AA color contrast. Accessibility is treated as a delivery requirement, not an afterthought.