The DoD Cybersecurity Maturity Model Certification (CMMC) framework requires defense contractors handling Controlled Unclassified Information (CUI) to protect their data according to the 110 NIST 800-171 controls. CUI cannot be stored on either Google or Microsoft’s commercial systems. Instead, over 1,800 defense contractors use PreVeil to comply with CMMC, DFARS 7012 and NIST 800-171.