Security and trust
A boundary is only as good as the people who run it.
CUI Track is operated by a firm that passed its own CMMC Level 2 assessment on the same Microsoft stack. Here is what that means, and what it does not.
- Operator
- inDirectIT, Inc.
- Certification
- CMMC Level 2, 2025
- CUI workload
- Microsoft 365 GCC High
- Portal
- Metadata and pointers only
- Identity
- Named users only
01
The operator is certified.
inDirectIT holds CMMC Level 2, certified in 2025, and runs its own program on GCC High, Intune, Defender, and Purview. The enclave is built the way we run our own.
02
CUI lives in GCC High.
The CUI workload runs on Microsoft 365 GCC High. The corporate network and the systems that never see CUI stay outside it.
03
The portal holds no CUI.
The client portal keeps metadata and pointers: who is in the enclave, what is configured, where evidence lives. Evidence files stay in your boundary.
04
Named people only.
Only the people who handle CUI get an identity in the enclave. Adding or removing one is a tracked request, not a side conversation.
05
Evidence is held, not recreated.
The System Security Plan and the enclave evidence stay current as the enclave changes, so an assessment starts from the record.
06
Status is stated plainly.
If something is in build, we say so. The Enclave module in the portal is in build, and tenant telemetry is not collected live yet.
What we do not claim
An enclave narrows the assessment. It does not pass it for you.
- CUI Track does not make a company CMMC certified. A C3PAO assessment does.
- It does not replace your policies, your physical security, or your MSP.
- It does not decide who handles CUI. You do.
- It does not cover systems outside the enclave.
THE OPERATOR
inDirectIT, Inc.
Federal CUI security and NIST SP 800-171 engineering for the Defense Industrial Base. CUI Track is one of its products; the firm’s gap assessments, managed compliance, and GCC High engineering sit behind it.
Boundary review
Draw the flow first.
Thirty minutes on where CUI actually moves. We will tell you if CUI Track fits, and if it does not.