CMMC stands for Cybersecurity Maturity Model Certification — the DoD's framework for protecting Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) across the Defense Industrial Base. Beginning November 10, 2025, CMMC compliance is a condition for contract award. If your company bids on DoD contracts and handles FCI or CUI, you must be compliant.

Yes. CMMC requirements flow down from prime contractors to subcontractors. If your work touches FCI or CUI at any tier, you are subject to CMMC. This app was specifically designed for small and mid-sized businesses navigating those requirements — without needing an in-house compliance team.

Non-compliance can result in: loss of contract award eligibility, disqualification from DoD solicitations, contract termination for existing awards, and potential False Claims Act liability if you submitted inaccurate SPRS scores. The cost of preparation is far lower than the cost of lost contracts.

Under 32 CFR Part 170, a senior company official — the Affirming Official — must annually affirm that the company's CMMC status is accurate. The app includes an Affirming Official dashboard with digital attestations and an audit trail, so affirmations are documented and defensible.

Yes. The app was designed for both the US and Canadian Defense Industrial Base. It includes NCAGE code mapping for Canadian contractors and is aligned to the CMMC requirements that flow down through US DoD contracts — which increasingly affect Canadian prime and subcontractors.