← Back to Insights Library

GroundControl Government-Cloud Security Update

An update on the security assessment and deployment options available to regulated manufacturing customers.

Published August 7, 2026• Updated September 11, 2026• GroundControl

Key takeaways

  • An update on the security assessment and deployment options available to regulated manufacturing customers.

GroundControl, which provides mission-critical software for highly regulated manufacturing industries, today announced that its government-cloud deployment for AS9102/FAI and PO Review has achieved FedRAMP Moderate Equivalency following an independent 3PAO assessment, consistent with DoD equivalency guidance.

The independent assessment evaluated that deployment against the FedRAMP Moderate baseline, which draws its security controls from NIST SP 800-53 Rev. 5.

FedRAMP Moderate Equivalency is the Department of Defense's recognized pathway for external cloud services used to store, process, or transmit covered defense information under DFARS 252.204-7012. It is distinct from FedRAMP Authorization. The qualified GroundControl deployment may store, process, and transmit CUI for its AS9102/FAI and PO Review modules and can support customers pursuing CMMC requirements. Customers remain responsible for their own CMMC status, assessment boundary, configuration, policies, and operating controls.

Matthew Noseworthy, CTO of GroundControl, described the independent assessment as validation of the security controls built into the qualified government-cloud AS9102/FAI and PO Review deployment.

Defense suppliers that handle CUI under DFARS 252.204-7012 and NIST SP 800-171 need cloud systems with appropriate controls and evidence. The qualified GroundControl deployment gives AS9102/FAI and PO Review customers a cloud-native option without requiring on-premises servers or desktop installations.

About GroundControl

GroundControl builds modern manufacturing software for regulated industries. The company helps aerospace, defense, and advanced manufacturing teams accelerate inspection, streamline compliance, and replace fragmented legacy tools with software designed for how quality teams actually work.

Ground Control Software, Inc. is ITAR registered and registered in Canada's Controlled Goods Program. Its qualified AS9102/FAI and PO Review deployment runs in AWS GovCloud (US) and has achieved FedRAMP Moderate Equivalency following an independent 3PAO assessment, supporting CUI handling in those workflows under DoD guidance.