Question 1

Can I manage Level 1 and Level 2 clients in the same dashboard?

Accepted Answer

Yes. CMMCTrack supports both Level 1 (15 practices, FAR 52.204-21) and Level 2 (110 practices, NIST SP 800-171) assessments in the same workspace. Assessors typically have a mix across their client base.

Question 2

How do I connect to a client's assessment?

Accepted Answer

Each client generates a private connection code from their dashboard. Enter it in your assessor view to gain full working access to the assessment.

Question 3

Are reports branded with my firm's name?

Accepted Answer

Yes. PDF and Excel exports carry your firm's name, logo, and contact info on every page. Your clients see your work product, not the CMMCTrack brand.

Question 4

Can I reuse evidence across clients and assessments?

Accepted Answer

Yes. Evidence lives in a library, so one artifact can prove several practices and the same files return for the next reassessment instead of being collected again. Filter the library by account, by client, or by a single assessment, and upload a batch in one pass.

Question 5

Is full white-label of the application UI supported?

Accepted Answer

Not yet. Reports are branded with your firm, but when a client logs into the app to see their own assessment, they see the CMMCTrack name. Most assessor workflows are served by branded deliverables; full UI white-label is on the roadmap.

Question 6

Can my clients see what I'm doing in their assessment?

Accepted Answer

Yes. Through the separate client portal, clients get a read-only view of their assessment, including any updates you make. Intentional transparency, it keeps the engagement honest and reduces back-and-forth.

Question 7

Can I store CUI in CMMCTrack?

Accepted Answer

No. CMMCTrack is for self-assessment, POA&M tracking, and SPRS scoring. If your client needs to actually store CUI somewhere, they need a FedRAMP-authorized environment. We won't pretend to be one.

Question 8

What about C3PAOs?

Accepted Answer

CMMCTrack supports the assessment workflow itself; the official Level 2 audit still requires a certified C3PAO assessor. Several C3PAOs use CMMCTrack to prep clients before the formal audit and to track post-audit POA&M closure.

Question 9

I'm a small contractor, not an assessor. Is this for me?

Accepted Answer

Different workflow built for you. See CMMCTrack for self-assessors.