PROOF

See the capability and evaluate the evidence.

Our sanitized technical demonstrations are built for federal buyers rather than as a generic product tour. We tailor each demonstration to your environment, classification level, and buyer role.

DEMONSTRATIONS

Two ways to evaluate the work.

Sanitized Technical Demonstrations

We demonstrate AirGap LLMOps, DevSecOps Evidence Builder, ClassifyAI, and other capabilities using sanitized, unclassified data in a controlled environment. Available in person or via secure remote session.

Schedule a Demo

Reference Architecture Visuals

Deployment diagrams for air-gapped, SCIF, and hybrid environments. Public-safe reference architectures for each solution are published on the individual solution pages.

Detailed overlays under NDA Browse Reference Architectures
COMPLIANCE & QUALITY

What we build to, and what we have not certified.

The left column lists the frameworks our engineering and delivery practices are built against today. The right column is the part most vendors blur: what we hold, and what we do not.

Frameworks we build to
NIST SP 800-53 Rev. 5Control baseline alignment for all deployments
NIST AI RMF 1.0 (NIST AI 100-1)AI risk management framework integration
NIST SP 800-207Zero Trust Architecture as the architectural foundation
NIST SP 800-218 v1.1 (SSDF)Secure Software Development Framework alignment
NIST SP 800-161 Rev. 1 (C-SCRM)Cybersecurity supply chain risk management alignment
Federal AI governanceAlignment with current OMB AI policy, where applicable to non-NSS systems
Certification and conformance status
CMMCCybersecurity Maturity Model Certification: practices aligned. We claim alignment, not certification. Current certification status is provided in writing on request.
Management system certificationsISO 9001, ISO 27001, and CMMI appear in this column, not among the frameworks at left, because we do not claim certification to them. Current status is provided in writing on request.
Section 508 / WCAG 2.1 AAAccessibility Conformance Report (ACR) status for each product is provided on request, including where an ACR has not yet been produced.

We do not fabricate or overstate our compliance posture.

Certification status and scope details are provided in writing on request. Where the honest answer is that we hold nothing yet, that is the answer you will get.

RESOURCES

Open what you need, and request what you do not see.

Every item below is a page on this site unless the row says otherwise. Sensitive materials are provided under appropriate agreements, and each row states which is which.

Portfolio overview

The whole portfolio on one page: ten solutions, four families, the shared evidence architecture underneath them, and the posture questions every reviewer asks.

Capability statement

Core competencies, differentiators, corporate data, and standards alignment, formatted for an acquisition package.

Security and compliance summary

Authorization posture, framework alignment, certification status, data rights, and deployment tiers. States what is not held before what is.

Artifact specimens

Every assurance artifact our products emit, reproduced field by field: Evidence Pack manifest, SBOM, AI-BOM, model card, data card, control mapping, POA&M row, audit entry.

Federal buyer's guide

A vendor-neutral guide to evaluating AI vendors for regulated environments, including the scoring matrix. Written to be used on us.

Aegis executive brief

A short brief for Authorizing Officials, Chief AI Officers, and program leadership: why AI systems need governed assurance evidence before they go live, what Aegis produces, and how a pilot runs.

Populated Evidence Pack

A pack generated by a running instance against material you supply, rather than a specimen. Available during a pilot or under a mutual non-disclosure agreement.

Request access
NEXT STEP

Need something that isn't listed here?

Tell us what your evaluation requires: control baseline, classification level, or a specific artifact. We will tell you what we can provide and under what agreement.