Question 1

Can I manage Level 1 and Level 2 clients in the same dashboard?

Accepted Answer

Yes. Manage Level 1 assessments with 15 FAR 52.204-21 practices and Level 2 assessments with 110 NIST SP 800-171 practices in the same workspace. Each level keeps its own assessment and scoring rules.

Question 2

How do I connect to a client's assessment?

Accepted Answer

Each client creates a private connection code in their dashboard and shares it with you. Enter the code in your assessor view to connect to that client's assessment.

Question 3

How does the spreadsheet import work?

Accepted Answer

Start with the CMMCTrack Excel template. It lists all 110 practices and provides Met and Not Met options, plus Partially Met where the methodology permits partial credit. Complete the template and upload it. CMMCTrack applies the DoD scoring methodology and shows any corrections before saving. It flags anything it cannot read instead of guessing. The import starts as a draft for your review. The importer currently accepts only the CMMCTrack template; support for other tracker formats is on the roadmap.

Question 4

Are reports branded with my firm's name?

Accepted Answer

PDF reports can include your firm's name, logo, brand color, address, and website. Excel exports can include the firm name and brand color. The application itself remains CMMCTrack-branded.

Question 5

Can I reuse evidence across practices and reassessments?

Accepted Answer

Yes, for the same client. Link one artifact to multiple practices and carry it forward for reassessment. Confirm each link again before it counts. CMMCTrack never copies evidence into another client's record.

Question 6

Can I white-label the CMMCTrack application?

Accepted Answer

No. PDF reports can include your firm’s name, logo, brand color, address, and website. Excel exports can include your firm’s name and brand color. The application remains CMMCTrack-branded.

Question 7

Can my clients see what I'm doing in their assessment?

Accepted Answer

Clients can access their own CMMCTrack records based on their assigned permissions. They cannot access any other client’s records.

Question 8

Can I store CUI in CMMCTrack?

Accepted Answer

No. Do not upload or enter CUI in CMMCTrack. Store CUI only in an environment that meets the client’s applicable contractual and security requirements.

Question 9

Does CMMCTrack replace a C3PAO assessment?

Accepted Answer

CMMCTrack supports readiness and self-assessment work. It does not replace professional assessor judgment or an official C3PAO assessment.

Question 10

I'm a small contractor, not an assessor. Is this for me?

Accepted Answer

Yes. CMMCTrack has a separate self-assessment workflow for small contractors. See CMMCTrack for self-assessors.