Managed Compliant Enclave

Not just a secure environment — your whole CMMC program.

The Managed Compliant Enclave gives you a dedicated, compliant cloud workspace in your own account — but the environment is only half of it. Wrapped around it is a complete CMMC program that manages and tracks your ongoing compliance, trains your team, and keeps expert help a click away. All of it is included in your per-user price.

Documentation, done for you

A complete set of Policies, Procedures, and supporting documentation — tailored to your business and reviewed by a Cyber AB Registered Practitioner.

Manage & track compliance

Our Compliance App guides the tasks and documents the behaviors that keep you compliant — so nothing slips and you’re always assessment-ready.

Train your team

Built-in training and resources bring your people up to speed on their compliance responsibilities — no separate program to buy or run.

Answer your questions

Access to our CMMC knowledgebase puts plain-English answers to common CMMC and NIST 800-171 questions right at hand.

Expert help when stuck

Get support from our team of Cyber AB Registered Practitioners whenever you need it — at no additional cost.

The program is built in — not billed separately.

Your documentation set, the Compliance App, team training, the knowledgebase, and Cyber AB Registered Practitioner support are all part of the enclave. One per-user price covers the environment and the program around it.

Included at no additional cost

WHAT’S INCLUDED

A secure environment — and the program around it.

Every Greypike Enclave comes fully configured and ready for your CMMC assessment from day one — and the CMMC program that keeps you there is built in, not billed separately.

The secure environment

Workspace & Productivity

  • Full Windows desktop via VDI
  • Microsoft Teams, Outlook, OneDrive, Edge
  • Accessible from any device, anywhere
  • Preconfigured on day one

CMMC-Ready Security

  • Account lockout and password policy
  • USB blocking and media protection
  • Windows Defender pre-hardened
  • NIST 800-171 baseline configuration

Government Cloud Boundary

  • Microsoft GCC High or Google Assured Workloads
  • US-only data residency enforced
  • No shared infrastructure with other clients
  • You own the account — always

Zero-Exposure Access

  • No public IP on any VDI instance
  • Identity-aware proxy with mandatory MFA
  • Role-based access control enforced
  • Zero Trust architecture throughout

Encrypted Storage

  • FIPS 140 AES-256 encryption at rest
  • TLS 1.2+ encryption in transit
  • Automated encrypted backups
  • Tested disaster recovery procedures

Full Audit Trail

  • Centralized logging across all systems
  • 90-day log retention minimum
  • Alerting on suspicious activity
  • Evidence ready for C3PAO assessors

The CMMC program — included

Compliance App

  • Tracks ongoing compliance tasks and activity
  • Documents the behaviors that keep you compliant
  • Keeps you assessment-ready, all year
  • One place for your whole team

Documentation Set

  • Policies, Procedures & supporting docs
  • Tailored to your business details
  • Reviewed by a Cyber AB Registered Practitioner
  • Access and share with your team anytime

Training & Expert Support

  • Built-in team training and resources
  • CMMC knowledgebase for quick answers
  • Support from Cyber AB Registered Practitioners
  • Included at no additional cost

HOW IT WORKS

Secure by design. Simple by intention.

Every employee gets their own secure workspace in the cloud. Their laptop is just a screen — your CUI never touches their device.

01

Your team logs in

From any device — laptop, home PC, tablet. No hardware requirements, no client software to install.

02

MFA verified

Every session requires multi-factor authentication through Google or Microsoft’s identity platform.

03

Encrypted tunnel opens

An encrypted connection routes directly to your secure cloud environment. No public IP exposure.

04

Windows desktop in the cloud

A full Windows workspace with your tools pre-configured and all CMMC controls enforced automatically.

The Compliance App

Your whole CMMC program, in one place.

Every enclave comes with the Greypike Compliance App — where your team tracks compliance work, completes training, finds answers, and reaches our experts. It’s how the program runs day to day, included in your price.

  • Access your documentation anytime

    Your Policies, Procedures, and other compliance documentation live in the app — so you can find them and share them with your team whenever you need to.

  • See what’s due, at a glance

    An action queue surfaces the tasks, trainings, and documents that need attention — so nothing slips before an assessment.

  • Train your team in place

    Built-in courses bring your people up to speed on their CUI responsibilities — tracked and recorded as evidence.

  • Reach our experts

    When you get stuck, support from our Cyber AB Registered Practitioners is one click away — at no additional cost.

Illustration of the Greypike Compliance App. Sample data shown for demonstration.

Your account.
Your data.
Always.

Most enclave products put all their clients in shared infrastructure they own and operate. Your CUI sits alongside other contractors’ data — and if you want to leave, your environment goes with them.

Greypike builds your enclave inside an account you own. Bring management in-house or switch providers anytime, and everything transfers with you. No migration, no lock-in, no leverage.

Book a Scoping Session
Typical enclave Provider-owned

One shared tenant · many clients

Client
You
Client
Client
The Greypike enclave You own it
Your cloud accountOwned by you · Managed by Greypike
Your CUI — fully isolated No co-tenants

COMMON QUESTIONS

Things people ask before signing up.

Do I need to replace my existing IT setup?
Not necessarily. The Greypike Enclave handles CUI specifically — the scope of your CMMC boundary. Employees who don’t touch CUI can stay on their existing tools. We’ll help you define the boundary during your scoping session.
Is the compliance program included, or extra?
Included. The Enclave isn’t just a secure environment — it’s a complete CMMC program. Your per-user price covers the Compliance App that tracks ongoing compliance activity, a documentation set (Policies, Procedures & more) tailored to your business and reviewed by a Cyber AB Registered Practitioner, team training and resources, and access to our CMMC knowledgebase. If you get stuck, support from our Cyber AB Registered Practitioners is included at no additional cost.
How long does the build take?
Typically 4–8 weeks from contract signature to a live, configured environment. Timelines vary based on org size, platform choice, and how complex your existing environment is.
What happens if we want to leave Greypike?
Since you own the cloud account, everything stays with you — including your documentation set. We can transition management to your team or another provider without any data migration. You’re never locked in.
How is this different from Managed Compliance?
The Enclave is when we provide and run both the compliant environment and the CMMC program around it — all-in, per user. Managed Compliance is the separate offer for contractors who keep their own IT or MSP and just need Greypike to run the compliance program. You wouldn’t buy both. See pricing for details.
What if I need help getting ready for my assessment?
We can run a focused assessment-prep engagement to get you confident before your C3PAO assessment. It takes about three weeks and includes a gap analysis, evidence collection, and a mock assessment so there are no surprises on the day. It’s available for an additional fee — we’ll scope it with you. The assessment itself is always conducted by an independent C3PAO.
Will this make us ready for a CMMC Level 2 assessment?
Yes — the Enclave covers both halves of readiness. It implements the technical controls required for CMMC Level 2, and the included program delivers the documentation, policies, SSP, and evidence an assessment also requires. Together they get you assessment-ready; the assessment itself is conducted by an independent C3PAO.

READY WHEN YOU ARE

Let’s scope your compliant enclave.

In a 30-minute scoping session we’ll map your CUI boundary, recommend the right platform, and lay out your path to a live, managed environment.

No obligation · Veteran-owned · CMMC is all we do