Discovery · before scoping
Do you have CUI — and where does it go?
The scoping map starts by assuming you already know what CUI you hold. This runs the step before that: read your clauses, work out whether you have FCI or CUI, trace how CUI moves, and hand a pre-seeded scoping map to the next step. It asks only about metadata — clause numbers, counts, yes/no — never the data itself.
⚠️
Descriptive, not prescriptive. Every result here is a hypothesis to confirm with your authorized C3PAO, not
a determination. “I’m not sure” is always a valid answer — it opens a help drawer, it never blocks you.
Nothing you enter leaves your browser.
CUI discovery
First, let's see if CMMC applies to you at all. This is about your contracts, not your data.
Descriptive, not prescriptive. Every result here is a hypothesis to confirm with your authorized C3PAO, not a determination. Nothing you enter leaves your browser.