CMMC Level 1 Self-Attestation
Documentation for your CMMC Level 1 self-attestation. Generated in an afternoon.
We don't determine compliance — you do. We generate the worksheet and the documents you need for your self-attestation. For small DoD subcontractors. Built by veterans.
Phase 2 audits are suspended. Self-attestation isn't. Get yours documented before your prime asks.
AI drafts 70% of your implementation language. You review, edit, attest.
SDVOSB-built · 17 CMMC L1 practices · Self-attestation ready · $499/year
The Flow-Down Letter
Your prime sent you a letter. Now what?
$8K–$25K
4–8 weeks
Hire a consultant.
They ask you the same 17 questions we ask, then bill you to type the answers into Word and assemble the SSP.
$4K–$8K
40–80 hours of your evenings
DIY it.
Cost: $0 cash. But 40–80 hours translating NIST language, drafting implementation text for each control, and formatting the SSP. At $100/hr (your real opportunity cost as a shop owner), that's $4,000–$8,000 of your own labor.
$499/yr
90 minutes
Use GreyLee CMMC.
AI drafts 70% of your implementation language based on what shops like yours typically do. Professional SSP, compliance brief, evidence storage, annual renewal automation. Done.
The Process
Four steps. One afternoon. Done.
1
Tell us about your shop.
Name, CAGE, UEI, org type. Five minutes.
2
Walk the 17 practices.
Plain English. Answers pre-drafted for your shop type.
3
Get your SSP and documentation.
Auto-generated documentation. DOCX and PDF.
4
Submit and forget.
Affirm in SPRS. We remind you next year.
1
Tell us about your shop.
Name, CAGE, UEI, org type. Five minutes.
2
Walk the 17 practices.
Plain English. Answers pre-drafted for your shop type.
3
Get your SSP and documentation.
Auto-generated documentation. DOCX and PDF.
4
Submit and forget.
Affirm in SPRS. We remind you next year.
The Difference
Most documentation tools give you 17 blank questions. We give you 17 educated drafts you adjust.
When you start the wizard, your implementation language is already drafted based on patterns from companies like yours. Read, edit anything that doesn't match, attest in your own name. First practice takes 45 seconds instead of 4 minutes.
Access Control · Practice 3 of 4
Who connects to your network from outside, and how do you control that?
Draft for CNC shops (26-50 employees)
What you get that downloading a list of controls can't give you
Org-type AI pre-population
Implementation drafts based on your shop type and size.
Plain-English translation
NIST control language rewritten so shop owners understand it.
Professional SSP and brief
System Security Plan and one-page compliance brief, auto-generated.
Public verification page
Shareable self-attestation page your prime can check anytime.
Annual renewal in 15 min
Prior answers pre-filled. Update what changed, re-attest, done.
17 Practices, 6 Domains
Small DoD subcontractors who got the letter.
CMMC Level 1 covers six security domains. Tap any domain to see the practice codes inside it.
- CNC shops, fab shops, contract manufacturers
- Engineering services firms, small consultancies
- IT services and MSPs serving DoD primes
If you handle Federal Contract Information (FCI), you need Level 1. That's most of you.
CAGE 0Q6E5 · UEI UR93NFRB85B5 · A GreyLee Services Group product