What we collect
Account details (name, work email), workspace information you enter (company name, CAGE/UEI, readiness answers, evidence file descriptions and uploads), billing status from PayPal (we never see or store card numbers), and basic usage events such as button clicks so we can improve the product.
No CUI
CMMC Agent is a readiness tool. Do not upload Controlled Unclassified Information (CUI). Upload summaries, screenshots of settings and policy documents that contain no CUI.
How we use it
To run your workspace, calculate your self-assessed SPRS readiness estimate, draft documents, send account and receipt emails, provide support by chat, voice and phone, and keep the service secure. We do not sell your data.
AI and voice
AI features process the text you send to answer and draft. Voice conversations require your consent first, and call audio is not recorded by the app. A text-only option is always available.
Who we share with
Only service providers needed to run the product: hosting and database, PayPal for payments, email and phone/SMS providers, and AI providers for assistant features. Each workspace is isolated so other customers cannot see your data.
Security
Encrypted connections, per-workspace access rules enforced on the server, role-based team permissions and an append-only activity log.
Your choices
You can update your profile, export reports, cancel your plan in PayPal, and ask us to delete your account and workspace data by contacting support through Seth or our helpline.
Find your SPRS score in an afternoon
Answer plain-English questions for all 110 controls. CMMC Agent calculates your score and builds your SSP and POA&M.
Start a free self-assessmentReadiness tool — not a C3PAO. CMMC Agent does not certify compliance.