Privacy Policy

1. Overview

CyGOS is committed to protecting the privacy of defense contractors and organizations using our CMMC compliance platform. This policy outlines how we handle Federal Contract Information (FCI), Controlled Unclassified Information (CUI) metadata, and organization data.

2. Information We Collect

We collect information necessary to facilitate CMMC gap assessments and remediation tracking, including:

• Organization name and DoW contract identifiers.
• Employee contact information for access control.
• Assessment responses and remediation progress data.
• System Security Plan (SSP) metadata.

3. Data Residency & Protection

All data is stored in FedRAMP Moderate or High impact level cloud environments. We implement strictly partitioned databases to ensure zero cross-contamination of organization data. We do not sell or share your data with third parties for marketing purposes.

4. Access Control

Access to your organization's data is governed by your designated Org Admin. CyGOS personnel have no access to your assessment content or documentation unless explicitly authorized for technical support.