Defense Data Boundary

Export Control & CUI Position

TraceGauge does not represent its general commercial SaaS environment as FedRAMP-authorized, ITAR-authorized, or certified for storage of Controlled Unclassified Information (CUI).

Current position

Customers should not upload ITAR-controlled technical data, export-controlled drawings, or CUI unless a specific contractual deployment has been reviewed and approved for the applicable requirements.

Defense deployments

A defense deployment may require NIST SP 800-171 / CMMC controls, data-residency commitments, incident-reporting flow-downs, U.S.-person/access restrictions, approved subprocessors, and contractual security requirements. Those requirements must be established before use.