Example, read only. A sample company whose own team runs its CMMC program here, reviewed by a credentialed officer and kept current.

Custodia shield
Start free for 30 days, no card
Level 2 · Controlled Unclassified Information

Securing Meridian Defense Systems, Inc.

Huntsville, AL 35806. When your solicitation names CMMC Level 2 for the CUI you handle, it is 110 requirements from NIST SP 800-171. Meridian's own team did this work on the platform, a credentialed officer reviewed every step, and its senior official signed.

Self assessed and self attested: you score yourself in SPRS on a three year cycle and your senior official affirms it every year. As of September 3, 2026 a class deviation directs contracting officers to remove third party assessment from contracts. The program rule still provides for it, so your solicitation sets the track. Your team builds the same evidence either way.

5 of 5 required steps complete
Take the tour

CMMC Level 2 (Self) score, recorded in SPRS

110 of 110Final

Recorded at 106 with 4 items on a POA&M on March 11, 2026, closed out inside the 180 day window, and Final on July 22, 2026. All 320 objectives resolved.

See the score →
Your team does itStep by step in plain English, with Charlie beside themMeridian's engineers and its IT company answered all 110 requirements.See the requirements →A pro checks itA credentialed officer reviews every step before anything is signedA credentialed officer went over every step before Elena R. Marsh signed.See the attestation →It stays trueEvidence, renewals, and your sealed record watched all year, every year4 sealed versions of this cycle's record, each kept six years.See the sealed record →

What Meridian runs here

A credentialed officer reviews every stepEvery step is reviewed before the senior official signs. The officer advises and never signs.Policies and your SSP, drafted with youAll 14 policies adopted and signed, and every register decided.Security training for your whole team11 people completed the awareness course. Nobody is missing.
Charlie, the gov safe AI guideDrafts with the team and cites the rule beside every step. Never marks anything MET.
Connects Google, Microsoft 365, and gov cloudMicrosoft 365 GCC High, connected read only. The team confirms every answer.A sealed record, kept six yearsSealed when the senior official signs, and sealed again when something changes.Contract opportunities matched to you4 sample notices in Meridian's lane, each tagged by the level it names.

The Level 2 self assessment · complete

Step 1 of 5 · Your businessBusiness, system and signer setStep 2 of 5 · Federal systemsIdentifiers and account access recordedStep 3 of 5 · Scope your assessment10 things sorted into the five categoriesStep 4 of 5 · Policies & trackerspreparation reviewedStep 5 of 5 · Self assessment110 of 110

Handle CUI?

Start your Level 2 self assessment today.

Level 1 and Level 2 are both open, so sign up for the level your contracts call for. Thirty days free to set it all up, no credit card, cancel anytime, and an officer on your account from day one. Custodia is led by a Cyber AB Registered Practitioner (RP).

Start free for 30 days, no cardBook a free advisory call
See everything you get →Handle only FCI? See the Level 1 example →