Enclave One

Ariento’s C3PAO can’t certify Enclave One, that would be a conflict of interest. We rotate C3PAOs from a group of external companies to assess Enclave One.

• For manufacturers

• For non manufacturers

At a minimum, Enclave One cuts timeline to certification in half making it the most efficient way to meet DoD cybersecurity requirements. 

No. We have companies in Enclave One that’s user counts range from 1 to 25+. For 15 users or less cuts CMMC cost by up to half making it the most cost effective solution. At ~15 users, customers start to break even and we typically recommend going with our turnkey CMMC solution if you have more than 25 users.

You can pause your Enclave One subscription for your company for up to 1 year at a time.

Pre-certified is a cybersecurity compliance term invented by Ariento as part of our patent pending, Enclave One service offering.  It is defined as a compliance solution (i.e. Enclave One) with an existing assessment scope that has already been successfully assessed and certified. With any pre-certified solution, the exact assessment scope must have been previously assessed and certified.  

Pre-Certified is not the same as inheritance, and the two are frequently confused. Inheritance is usually associated with FedRAMP or CMMC Level 2 certified external service providers (ESP) and indicates the ability to inherit some, but not all CMMC security controls and/or assessment objectives from a provider. Pre-certified indicates 100% of security controls for the exact assessment scope are already certified and therefore there is no inheritance needed. 

It means everything required for your CMMC Level 2 certification is taken care of by Ariento, including an independent C3PAO assessment.

Enclave One is frequently used by small government contractors, joint ventures/bids, SBIR, subsets of larger organizations, companies trying to get DoD business for the first time, and more! You can view Eligibility & Fit here.

If Enclave One is not a fit for your organization, Ariento’s custom enclaves or other CMMC managed services may be.

Enclave One is a simple per user cost. You can view pricing here.

GCC-High is an annual per user cost, whereas GCC is a monthly per user cost. For those that require US Sovereignty (i.e. you work with ITAR, CUI specified/export controlled), GCC-High is recommended.

There are 3 user types, standard, lite and email only. You can view their descriptions here.

Any changes are prorated and applied to the new user. If you cancel a user seat, it will go into inventory and can be applied to another user until the end of the annual term. Any seats in inventory at the end of the user term will automatically fall off and you will not be billed.

Yes, you can pause a subscription for up to one year. The pause must apply to your entire organization (in other words you can’t pause a single user). 

One (1) standard user is required at all times for the subscription to be active. 

There is a one time onboarding cost of $3,000 per CAGE code. The per user cost is an all in cost. The only additional cost is for the computer(s) or Cloud PC(s) used by standard users or add ons such as (Visio, Project, Teams Phones, etc.). If you use Hire Right (because your users don’t have security clearances), you’ll pay Hire Right a minimal fee to do a background screening.

Enclave One is assessed quarterly, so depending on when you sign up it could be up to 90 days, often sooner.

You must complete all assigned training and follow it. You must use the enclave for processing, transmitting and storing all digital controlled unclassified information (CUI) and federal contract information (FCI). You must attest once per year in SPRS to keep the certification active for your cage code.

After you sign up, you’ll have 30 days to verify your eligibility and submit background screenings for your users. Once completed, users are onboarded same day. Most companies onboard in under two weeks, while those with clearances usually onboard in under 72 hours.

Upon cancellation, we will release your domain (if applicable) and you will have 30 days to migrate your data out (if applicable). If migrating to another Ariento solution, we will migrate you at cost (significantly discounted) since you are staying with an Ariento solution.

You can print non CUI via a cloud or USB printer. If you need to print CUI, you are required to contact the Ariento support desk and they will assist.

Email, OneDrive or SharePoint.

Yes, as long as it is not managed by another Mobile Device Management (MDM) system that conflicts in policy with Enclave One’s.

Yes you are welcome to use your own domain. Everyone receives an Enclave One email as well so you don’t have to.

You can use a physical computer or Cloud PC from Microsoft. Note there is a pass through charge to rent a Cloud PC from Microsoft.

Servers are not permitted in Enclave One at this time. We recommend Ariento’s custom enclaves or other CMMC managed services if a server is a requirement.

No, all CUI and FCI must be processed, transmitted and stored on Enclave One managed computers, Cloud PCs, or mobile devices and in the Microsoft 365 Suite (Office, SharePoint, OneDrive, Teams, etc.) or other desktop applications that are installed on Enclave One managed computers/Cloud PCs (i.e. Adobe, SolidWorks, etc.)

Yes.

Yes.

Yes, affinity partners get discounted pricing for their clients. Channel partners get paid a commission. Contact us for more information on becoming a partner.

No, you will however sign off on the Enclave One documentation via our LMS.

You will need to migrate your data out of Enclave One. You can do it yourself or we can help. If you are moving to another Ariento service, we’ll do it for you at cost (significantly discounted).

Our managed services are designed to grow with you. Many clients will start with Enclave One and then transition to our Turnkey CMMC subscription when they grow to around 15 users. The look and feel is exactly the same, with the main difference being that you own the Microsoft 365 tenant and are responsible for hiring a C3PAO and completing some of the security controls. As you continue to grow and hire your own IT help desk staff, our CMMC MSSP services become a good fit and eventually when you hire your own security staff, you can still use our vetted CMMC baseline configurations and accompanying documentation that are updated regularly in order to ensure continuous compliance (as part of our Licensed CMMC subscription).