Self-attestation documentation in an afternoon. Here's how.

No control language, no spreadsheets, no two-week engagement. Four steps, plain English, documentation you can use for your self-attestation.

Step 1

Sign up and tell us about your shop

You'll spend about five minutes on this. We ask for your company name, address, CAGE code, UEI, what kind of work you do, employee count, and which prime sent you the flow-down letter.

The shop-type and employee-count answers are how the magic happens — we use them to pre-draft your answers in the next step.

Onboarding · Step 2 of 5

What kind of shop do you run?

CNC Machine Shop
Fabrication
Contract Manufacturing
Engineering Services
9:41
100%
Practice 3 of 17AC domain

Access Control · Practice 3 of 4

Who connects to your network from outside, and how do you control that?

Met
Partially Met
Not Met
N/A

Draft for CNC shops (26-50 employees)

We use a Fortinet firewall at the perimeter with separate VLANs for office and shop floor. Remote employees connect through FortiClient VPN with MFA. Guest WiFi runs on a separate SSID with no access to internal resources.
Save and Continue →

Step 2

Walk through 17 practices — most already drafted based on your shop type

When you enter the wizard, your implementation language is already written based on patterns from companies like yours. Read each draft, edit anything that doesn't match your actual setup, and move on. Most practices take 30–60 seconds.

Each practice is a plain-English question, not NIST control language. Instead of “Limit information system access to authorized users” you see “Do only the right people get into your computers?”

Upload evidence for any practice — a screenshot, a policy doc, a sign-in sheet. We provide templates so you're never staring at a blank page.

Step 3

Get your SSP and self-attestation documentation

When you hit Submit, our AI synthesizes everything into a professional System Security Plan (~30 pages). Download as DOCX, PDF, or share a verification link. You review the documents, sign the attestation, and submit to SPRS.

You'll also get a one-page Compliance Brief — a printable summary you can hand to your prime, post on your website, or pin in your office.

Central PA Precision Machining

CAGE: 5X9K2

UEI: J8MN4QLRT6B2

Attested: May 20, 2026

CMMC Level 1

Self-Attested

17/17 Practices Met

Attested:May 20, 2026
Expires:May 20, 2027
Hash:a7f3c9e12b04
ACAccess Control
IAID & Auth
MPMedia Protection
PEPhysical
SCSys & Comms
SISys Integrity
Generated with GreyLee CMMCAn SDVOSB product

Step 4

Submit your self-assessment and forget about it

We give you a guided walkthrough for affirming your Level 1 self-assessment in SPRS (it's a 60-second process if you know where to click). After that, we send renewal reminders 60, 30, and 7 days before your annual re-attestation is due.

The renewal flow takes 15 minutes because all your prior answers are pre-filled.

The 17 Practices

Six domains. Seventeen practices. All Level 1.

Tap any domain to see the practice codes inside it.

Ready to handle the letter?