SAN FRANCISCO, CA, March 30, 2026 -- Stell Engineering, an AI-native requirements management tool for aerospace and defense programs, today announced it has achieved Cybersecurity Maturity Model Certification (CMMC) Level 2 through an independent CMMC Third-Party Assessment Organization (C3PAO). The certification validates Stell's implementation of NIST SP 800-171 security controls and confirms the company's ability to protect Controlled Unclassified Information (CUI) processed on behalf of its government and defense customers.
Secure Environment for CUI Management
Stell's certification covers cybersecurity practices related to CUI handled within the Cuick Trac Managed Enclave (CTME), a FedRAMP-authorized virtual enclave purpose-built for processing defense program data. The C3PAO independently validated that Stell's governance framework—access controls, risk management, incident response, and continuous compliance monitoring—meets all 110 NIST SP 800-171 R2 security practices.
A Commitment to the Industry
Aerospace and defense programs operate in high-stakes environments where the integrity of program data, including requirements, verification records, engineering artifacts, directly affects mission outcomes. The organizations building those systems need software partners they can trust to handle sensitive information with the same discipline their programs demand.
"Our customers are building and sustaining systems critical to national security," said Anne Wen, Stell Engineering CEO. "They trust us to manage their most sensitive requirements data. CMMC Level 2 is one more signal that we take that trust seriously."
Security Across Every Deployment
Stell's requirements management platform is available across multiple deployment environments to meet customers where they operate. The company holds an active Authority to Operate (ATO) for its DoW Impact Level 5 (IL5) platform hosted on AWS GovCloud. The company is also pursuing FedRAMP Moderate equivalency for its commercial platform. Regardless of deployment environment, every Stell customer operates on infrastructure built to the same security standards, including continuous monitoring, access controls, and compliance practices consistent with Stell's IL5 ATO.
"The CMMC assessment process validated the controls we've built around access management, incident response, and configuration governance," said Zoe Ingram, Stell Engineering's CTO. "That rigor benefits every customer we serve, regardless of which environment they're running in."
About Stell Engineering, Inc.
Stell Engineering builds AI-native systems engineering software for aerospace and defense. Its requirements management platform helps program teams capture, trace, and verify requirements across the full system lifecycle. Stell serves customers across the U.S. Space Force, U.S. Air Force, and the broader defense industrial base, with an active IL5 ATO on AWS GovCloud and active pursuits of FedRAMP High and Moderate authorizations. Headquartered in San Francisco, CA. Visit stell-engineering.com or contact info@stell-engineering.com.