Question 1

What is AutoSAM?

Accepted Answer

AutoSAM is the supply-chain compliance system of record for defense primes and the consultant and RPO firms that manage subcontractor networks. The Assure stream derives flow-down obligations from your active awards, screens every sub against public signals daily, and keeps the evidence on file.

Question 2

Does AutoSAM verify a sub's CMMC status?

Accepted Answer

No. CMMC and SPRS status are self-attested by regulatory design. AutoSAM captures what a sub attests, with provenance, and screens the five public signals that are genuinely authoritative: SAM exclusions, FASCSA orders, SAM registration, FAPIIS, and set-aside certifications.

Question 3

Which public signals does AutoSAM screen?

Accepted Answer

Five: SAM exclusions, FASCSA orders, SAM registration status, FAPIIS records, and set-aside certifications. These are the signals a public, government-published source can actually answer. Anything self-attested is captured as evidence with provenance instead.

Question 4

How fresh is the screening data?

Accepted Answer

Once AutoSAM reaches general availability, it will run automated SAM.gov checks. Exclusion screening will run daily and entity registration status will be polled daily, pulled directly from SAM.gov public APIs, so changes surface as soon as they publish.

Question 5

Do my subs have to pay or install anything?

Accepted Answer

No. Subs are invited participants in your network, never revenue targets. The obligation owner pays; subs are never billed to participate.

Question 6

What is the Pursue stream?

Accepted Answer

Pursue reads a solicitation and derives the requirements it would obligate your team to meet, then pre-screens which teaming partners can comply before you commit to the bid. Assure is the core plan today; Pursue ships into paid tiers as it reaches general availability.

Question 7

What is the Prove stream?

Accepted Answer

Prove is the cross-cutting evidence log: every screening result, attestation, and re-affirmation is recorded with a timestamp so the diligence you performed is on file before anyone asks. The evidence log and audit trail export on demand for primes, contracting officers, and auditors; ISR/SSR export is in development.

Question 8

Can I share evidence with auditors or my prime?

Accepted Answer

Yes. Evidence exports are timestamped and formatted for handoff to prime reviews, DCMA inspections, and internal audits, without screenshots or reconstructed email threads. ISR/SSR export is in development.

Question 9

How does Founding Cohort pricing work?

Accepted Answer

Twelve founding accounts join at a founding rate locked for 12 months from account activation. Seven seats are on Assure Prime I; five are on Consultant/RPO. When your seat is claimed, the rate is locked for you; when the twelve are filled, the founding rate closes and standard pricing applies to new accounts. Founding accounts pay in full at the founding rate. The Refund and Cancellation Policy is unchanged; the program does not create a trial period or a separate money-back window.

Question 10

How does cancellation work?

Accepted Answer

Once billing is live at general availability, you will be able to cancel your subscription from your account settings. Your plan will remain active until the end of the current billing period, and the standard Refund and Cancellation Policy will apply from the first billing.

Question 11

What is the Design Partner Program?

Accepted Answer

A small group of design-partner accounts works directly with us on roadmap priorities in exchange for structured feedback. Design-partner access is limited to five accounts and is separate from the Founding Cohort.

Question 12

What's included in the free Risk-Scan plan?

Accepted Answer

Once AutoSAM reaches general availability, Risk-Scan will include a daily SAM registration status check, an email digest, and three compliance share links per month. It is the fastest way to see the screening engine before you put a network on it.

Question 13

How is my data secured?

Accepted Answer

AutoSAM's marketing site uses 256-bit TLS in transit via its hosting provider. AutoSAM (GovCertix LLC) does not currently hold SOC 2 Type II certification. A SOC 2 attestation is on our compliance roadmap and will be pursued once AutoSAM operates a live production environment. Some infrastructure providers we plan to use hold their own SOC 2 Type II reports; certification inheritance is not equivalent to AutoSAM holding certification. AutoSAM is not FedRAMP-authorized. Upon general availability, AutoSAM intends to implement AES-256 encryption for data at rest. See our Trust Center (/trust) for the full security posture, the Subprocessor List, and the compliance-roadmap timeline.

Question 14

Does AutoSAM store my documents?

Accepted Answer

No. AutoSAM takes no custody of your documents. Active-contract clause extraction runs entirely in your browser and is never transmitted to our servers; roster imports are parsed in your browser so only validated structured data, never the file itself, reaches us. There is no document-upload path and no image processing anywhere in AutoSAM. It is the same custody model DoD uses in its own CMMC assessment hashing practice (32 CFR 170.17/170.18): assessors never retain your artifacts, and only a SHA-256 integrity hash is recorded to eMASS.

Question 15

Do you scan my files for CUI?

Accepted Answer

An optional client-side scan flags recognized CUI, distribution, and export-control markings before you submit, so nothing marked leaves your device unnoticed. Because unmarked CUI cannot be reliably detected, this is a best-effort safeguard, never a guarantee, and you remain responsible for the classification of your own material.

Question 16

Is my SAM.gov data private?

Accepted Answer

AutoSAM only accesses publicly available SAM.gov data. We do not share, sell, or redistribute your screening configurations, alert settings, or compliance reports with third parties.

Frequently asked questions.

Assure and screening

Pursue and Prove

Founding Cohort and pricing

Security and data handling

Still weighing it against your current process?