Document all 15 FAR 52.204-21 controls, confirm pass/fail compliance status, and walk away with a formatted, submission-ready compliance package — in a single browser session.
Level 1 is unaffected by the Phase 2 suspension. On July 13, 2026, the Department suspended CMMC Phase 2, which would have required Third-Party Assessment for most CUI contracts. Phase 2 never applied to Level 1. Phase 1 remains fully in force — Level 1 (Self) still appears in applicable solicitations and contracts, and 32 CFR Part 170 is unchanged. If you handle FCI, nothing about your obligation changed.
Clause numbering changed in February 2026. Under Class Deviation 2026-O0025, FAR 52.204-21 was renumbered to FAR 52.240-93. The 15 basic safeguarding requirements themselves are unchanged, and this tool covers all 15. You may see either number depending on when your contract was awarded. DFARS 252.204-7019 was deleted in the same deviation and 252.204-7020 became 252.240-7997 — both are Level 2 concepts and neither applies to a Level 1 affirmation.
Level 1 is pass/fail. All 15 requirements must be met. There is no numerical SPRS score at Level 1, no partial credit, and no POA&M path — a requirement is either implemented or it is not. Your Affirming Official's signature carries the full legal weight of that determination, and DoJ's Civil Cyber-Fraud Initiative remains active.
Not a checklist. Not a template. A structured, guided assessment that produces real output you can act on immediately.
Four steps. One session. Done.
One-time purchase. 12 months of access. No subscription, no auto-renewal.