tundra
tundra

Products · Compliance

The frameworks your customers require, kept in one place.

CMMC, NIST SP 800-171 self-assessments, ISO 9001 and AS9100, handled alongside the work instead of in a scramble before the audit.

Quality

First articles, inspection reports and certs, kept the way ISO 9001 and AS9100 audits expect.

  • AS9102
  • ISO 9001
  • AS9100

Compliance

Stay ready for CMMC and NIST SP 800-171 self-assessments, with evidence gathered as the work happens.

  • CMMC
  • NIST SP 800-171
  • SPRS
  • ITAR

Operations

Orders, certs and shipments in one place, so the work never waits on paperwork.

  • Purchase orders
  • Certs
  • Shipments

The frameworks, in plain words

CMMC Cybersecurity Maturity Model Certification
The Department of Defense standard for protecting contract information. Primes flow it down to their suppliers, and the level you need depends on the work.
NIST SP 800-171 Protecting Controlled Unclassified Information
The security requirements behind CMMC Level 2. Suppliers who handle CUI assess themselves against them and keep a plan for any gaps.
SPRS Supplier Performance Risk System
Where a NIST SP 800-171 self-assessment score is recorded. Many defense contracts require a current score before award.
ISO 9001 and AS9100 Quality management systems
The quality standards most manufacturing customers expect. AS9100 builds on ISO 9001 with aerospace and defense requirements.
AS9102 First article inspection
The standard format for proving a new part matches its drawing, from ballooned characteristics to measured results.
ITAR International Traffic in Arms Regulations
Rules for handling defense-related technical data, including who may access it. Drawings and specs often fall under it.

Not sure which apply to you?

Tell us who you build for and we'll help you sort out what your customers require.

Ask a question →