CMMC Certified
AdvancedPCB is a CMMC Level 2 certified printed circuit board manufacturer. This page explains what that certification covers and what it means for customers who share Controlled Unclassified Information (CUI) with us when they order PCBs.
What Is CMMC Level 2 Certification?
The Cybersecurity Maturity Model Certification (CMMC) program is the U.S. government's framework for verifying that defense contractors and suppliers protect sensitive information. Level 2 applies to companies that handle Controlled Unclassified Information, the category that includes many of the drawings, Gerber files, specifications and technical data tied to defense programs.
CMMC Level 2 requires an organization to meet the 110 security requirements of NIST SP 800-171 Revision 2. These requirements span 14 areas, including access control, awareness and training, incident response, media protection and system and communications protection. For certification, an independent C3PAO examines the organization's systems, policies and practices and verifies that each requirement is met.
Why We Achieved Certification Before It Was Required
In July 2026, the planned Phase II rollout of CMMC, which would have made third-party Level 2 certification mandatory for applicable contracts, was temporarily suspended. AdvancedPCB chose to complete its assessment anyway.
"Our aerospace and defense customers trust us with CUI data for programs that support national security. When the mandatory requirement was paused, we still felt CMMC certification should be completed. Protecting CUI data is an important aspect of the work we do every day."
Greg Halvorson, CEO, AdvancedPCB
.png)
What CMMC Level 2 Means for Your Programs
- Reduced supplier risk. Your CUI is handled under a security program that has passed independent review, not only a self-assessment.
- Flow-down compliance. Primes and higher-tier suppliers can document that their PCB source meets CMMC Level 2 when DFARS requirements flow down.
- Ready when the mandate returns. There is no waiting for a supplier to catch up or risk of a qualified vendor becoming ineligible mid-program.
- One source for secure work. CMMC Level 2, ITAR registration and AS9100 certification support defense work from prototype through production.
How We Protect CUI From Quote to Delivery
Preparing for certification included a full review of how controlled information moves through our business. Our program covers:
- Receiving data: Secure file transfer used for CUI design files.
- Access: CUI is limited to authorized personnel with a need to know.
- Storage: CUI is stored within the assessed environment.
- Sharing: Controls on how CUI is shared internally and with approved partners.
- People: Ongoing cybersecurity awareness training for employees.
- Documentation: Written cybersecurity policies and procedures, maintained and reviewed.
Certification Details
| Item | Detail |
|---|---|
| Certification | CMMC Level 2 (C3PAO Certification) |
| Standard | NIST SP 800-171 Revision 2, all 110 requirements |
| Assessor | Ignyte Assurance Platform, authorized C3PAO |
| Data Achived | 10/7/2026 |
| Valid Through | Three years from certification, with annual affirmation |
| Related credentials | ITAR registered, AS9100, RoHS compliant. View all certifications > |