Disclaimers & Terms

ClearanceIQ is a documentation and attestation preparation platform. Our software helps defense contractors organize, document, and attest to their cybersecurity implementations across the 110 controls required by NIST SP 800-171 and CMMC Level 2.

Specifically, ClearanceIQ:

• Guides you through documenting all 110 NIST SP 800-171 controls
• Generates your System Security Plan (SSP), Plan of Action & Milestones (POA&M), and Attestation Package
• Provides an AI-assisted gap analysis to identify weaknesses before your formal assessment
• Prepares materials suitable for submission to your SPRS record
• Does not conduct or substitute for a C3PAO-led Level 2 assessment
• Does not guarantee that a C3PAO assessment will result in certification

Assessment timelines and outcomes are determined by your C3PAO and the Department of Defense, not ClearanceIQ. Your organization's existing cybersecurity maturity, resource availability, and implementation quality will affect both the timeline and outcome of any formal assessment.

ClearanceIQ includes an AI-powered Red Team Challenge feature that reviews your control implementations and poses adversarial questions to test the strength and completeness of your documentation — similar in approach to how a rigorous assessor or auditor might interrogate your answers.

The AI Red Team Challenge is designed to help you identify potential weaknesses in your documentation before a formal assessment. However:

• AI responses may contain errors, omissions, or outdated interpretations
• The AI does not have access to your actual systems, networks, or technical configurations
• Passing the AI Red Team Challenge does not guarantee passing a C3PAO assessment
• The AI analysis reflects documentation quality, not the underlying security of your environment
• You should consult qualified legal counsel and cybersecurity professionals regarding your specific compliance posture

For questions involving potential liability under federal contracts, you should engage a qualified attorney familiar with government contracting law.

ClearanceIQ's AI Red Team Challenge is designed to help identify inconsistencies, overstatements, or unsupported claims in your control documentation before you submit any attestation to the DoD. This feature exists specifically to reduce your False Claims Act risk.

However, ClearanceIQ does not:

• Verify the accuracy of your underlying security implementations
• Audit your actual systems, networks, or controls
• Provide legal assurance that your attestation is FCA-compliant
• Substitute for legal review of your final attestation package

You are solely responsible for the accuracy and truthfulness of all attestations submitted to the DoD or any prime contractor under CMMC requirements. ClearanceIQ strongly recommends that you have qualified legal counsel review your Attestation Package before submission, particularly if your organization has known gaps or unresolved POA&M items.

ClearanceIQ references industry pricing for traditional CMMC consulting services in our marketing materials for comparison purposes. The following applies to all such comparisons:

The "$999" price refers to ClearanceIQ's software platform fee for generating the documentation and attestation package. It does not include C3PAO assessment fees, legal review costs, technology remediation costs, or any other expenses required to achieve and maintain CMMC certification.

ClearanceIQ's stated timelines and outcomes are based on typical user experiences with our platform. Individual results vary significantly based on each organization's specific circumstances.

Factors that affect your documentation timeline include:

• Your organization's existing cybersecurity maturity and posture
• The number and complexity of systems in scope for CMMC
• Staff availability and familiarity with cybersecurity controls
• Whether your organization has existing policies and procedures in place
• The extent of remediation work required before documentation can be completed
• Legal and compliance review requirements specific to your organization

The ClearanceIQ platform, including its AI Red Team Challenge engine, automated document generation system, gap analysis methodology, and associated workflows, incorporates proprietary technology protected under United States intellectual property law.

One or more patent applications covering ClearanceIQ's core technology have been filed with the United States Patent and Trademark Office (USPTO) and are currently pending. Unauthorized reproduction, reverse engineering, or commercial replication of ClearanceIQ's methods, systems, or processes may constitute patent infringement upon issuance of any granted patents.

• All software, algorithms, and methodologies: © 2026 ClearanceIQ. All rights reserved.
• "ClearanceIQ" and associated marks are trademarks of ClearanceIQ.
• Document templates and output formats generated by the platform are licensed to you for use in your DoD compliance efforts only.
• Generated documents remain your property; ClearanceIQ retains no claim over your compliance materials.

ClearanceIQ takes the privacy of your organization's security information seriously. Our gap analysis tool at clearanceiq.io is designed to be anonymous by default.

For users of our certification platform at certify.clearanceiq.io:

• Account information is required and is stored securely
• Your documentation, control responses, and attestation materials are stored and encrypted
• ClearanceIQ does not sell, share, or disclose your compliance documentation to third parties
• ClearanceIQ does not transmit your data to the DoD, any prime contractor, or any government agency without your explicit action
• Your data may be stored on U.S.-based cloud infrastructure subject to our data processing agreements

For a full Privacy Policy, including data retention, deletion rights, and data processing details, contact us at the address below.

By accessing or using any ClearanceIQ platform, you agree to the following:

• Authorized Use: ClearanceIQ is intended for use by U.S.-based defense contractors and their authorized representatives seeking to achieve or maintain CMMC compliance.
• Accuracy of Inputs: You are responsible for the accuracy of all information you enter into the platform. ClearanceIQ cannot verify the truthfulness of your control implementations.
• No Attorney-Client Relationship: Use of ClearanceIQ does not create an attorney-client relationship. ClearanceIQ is a software tool, not a law firm.
• Limitation of Liability: To the maximum extent permitted by law, ClearanceIQ's liability for any claim arising from use of the platform is limited to the amount you paid for the service.
• Indemnification: You agree to indemnify ClearanceIQ against claims arising from false, inaccurate, or misleading information you submit through the platform.
• Governing Law: These terms are governed by the laws of the United States and the State of [Delaware/your state], without regard to conflict of law provisions.
• Changes: ClearanceIQ may update these disclaimers and terms at any time. Continued use of the platform constitutes acceptance of updated terms.
• Export Controls: ClearanceIQ's platform is subject to U.S. export control laws. You agree not to access or use the platform from countries subject to U.S. sanctions.

For questions about these disclaimers, legal concerns, privacy matters, or IP inquiries, please contact us: