Your data, protected and in the US
Customer data stays in a US-only cloud. Certu is aligned with NIST SP 800-171, and our CMMC Level 2 certification is in progress, expected in early 2027.
Compliance status
We state only what is true today. This page is updated as our certification progresses.
Customer data is stored and processed in a US-only cloud environment.
Our controls follow NIST SP 800-171, the standard for protecting Controlled Unclassified Information.
Certification is under way, expected in early 2027. Ask us for the current status.
UEI Z32CDK3XC3Y9 · CAGE 23CP3.
People stay in charge
Automation does the planning. Your people keep authority over the decisions that matter.
Approval where you require it
You set which decisions need sign-off and who signs. Everything else runs automatically.
A full audit trail
Every alert, recommendation and decision is recorded: what changed, who decided and why.
Read-only where you want it
Certu can write decisions back to your systems where you allow it, or your team applies them when those systems stay read-only.
Need our security documentation?
Tell us what your review requires and our team will send the current documentation and certification status.