Example, read only. A sample company whose own team runs its CMMC program here, reviewed by a credentialed officer and kept current.
Level 2 · Trust Page
Your public, Custodia verified compliance page, live from day one. It shows verified milestones while your team works and flips to the full record the moment your senior official posts the affirmation in SPRS. When a prime or a contracting officer asks for proof, you send one link instead of your SSP.
Your public link
LiveVerification ID: CUS-MD-2208-2026 · quote it on capability statements and prime questionnaires; anyone can confirm it against this page.
Currently showing: Filed in SPRS, renewal clocks tracked · the page updates automatically as your team saves work in the journey.
What the page shows
Where to use it
The public page a prime opens
Example page. Not a real company.
CMMC Level 2 (Self) · Self attested · Continuously monitored
This page is a live record that Meridian Defense Systems, Inc. holds a current CMMC Level 2 (Self) status in SPRS, affirmed by its own senior official, and is monitored continuously on the Custodia platform.
Verified milestones
Updates automatically from platform activity, not typed in by the company.
Workspace opened and the CMMC Level 2 journey started.
Working through the 110 NIST SP 800-171 requirements.
Every requirement answered and in place.
The senior official signed the affirmation.
Recorded in the federal system and watched for drift.
Public registry data
CMMC Level 2 · NIST SP 800-171
Live signal
Last health check: today
For contracting officers and primes
This page is published by Meridian Defense Systems, Inc. via Custodia, a cybersecurity firm based in Pittsburgh, PA. The milestones and dates come from activity on the Custodia platform, not from claims typed in by the company.
Self assessed and self attested: you score yourself in SPRS on a three year cycle and your senior official affirms it every year. As of September 3, 2026 a class deviation directs contracting officers to remove third party assessment from contracts. The program rule still provides for it, so your solicitation sets the track. Your team builds the same evidence either way.
The authoritative federal record is the SPRS posting, made by the company's own senior official, which any contracting officer can check by UEI. Custodia does not warrant the underlying self attestation, which is the legal responsibility of the organization's senior official under 32 CFR 170.22.
Healthy, active monitoring, no drift, evidence fresh.
Drift detected, a control signal changed and is being looked into.
Action required, the affirmation has lapsed or a critical drift event is unresolved.
Status pending, the first health snapshot has not been computed yet.
Primes, contracting officers, and insurers can request current compliance status directly, with no account. The company is notified and follows up by email.
Request status (off on this Example)Custodia · Published January 14, 2026 · Custodia ID CUS-MD-2208-2026
Your own page
Start free for 30 days, no credit card, or book a free advisory call if you would rather talk it through first.