Compliance & Credentials
All registration data, compliance certifications, and entity credentials for contracting officers, procurement offices, and prime contractors. All three Forge & Flight entities maintain active SAM.gov registrations.
SAM.gov Registrations
All three entities are independently registered on SAM.gov and maintain active status. Registrations are renewed annually. Verify current status at sam.gov.
Forge & Flight Holdings, Inc.
Contracting entity for: software products, professional services, Avionics division, Test Systems division, Federal Services division.
Forge & Flight Labs LLC
Contracting entity for: all UAS platform sales (Longbow-8, Aether-10, Vanguard-14, Titan-20) and Forge Flex MPaaS retainers.
Forge and Flight Academy LLC
Contracting entity for: all UAS training programs, curriculum development, and certification services.
CMMC Level 2 Compliance
Forge & Flight Holdings has completed CMMC Level 2 self-assessment against NIST SP 800-171 Rev. 2 with a SPRS score of 105/110 — above the 88-point threshold required for conditional Level 2 eligibility. Holdings is currently eligible for DoD contracts requiring CMMC Level 2.
105
out of 110 · NIST SP 800-171 Rev. 2
ELIGIBLE
Score exceeds 88-point threshold
14
policy and procedure documents on file
| Requirement | Status | Detail |
|---|---|---|
| CMMC Level 2 Self-Assessment | Complete | SPRS score 105/110 — conditional Level 2 eligibility confirmed |
| NIST SP 800-171 Rev. 2 (110 controls) | 105/110 | One gap: SC.L2-3.13.11 (FIPS VPN, −5 pts). Compensating control documented. |
| System Security Plan (SSP) | Complete | On file in compliance documentation package |
| SPRS Score Upload | In Progress | Upload to sprs.csd.disa.mil — CAC/ECA cert required |
| C3PAO Phase 2 Certification | Planned Nov 2026 | C3PAO engagement scheduled — Phase 2 deadline: Nov 2026 |
| CI Pipeline (All Repos) | All Green | Bandit 0H/0M · pip-audit clean · SBOM validated · Docker hardened |
| NDAA §889 Section 889 | Compliant | No Huawei, ZTE, Hytera, Hikvision, or Dahua components in any system |
NDAA §889 Compliance
Forge & Flight Holdings, all subsidiaries, and all divisions comply fully with NDAA Section 889, which prohibits the use of telecommunications and surveillance equipment or services produced by specific entities including Huawei Technologies, ZTE Corporation, Hytera Communications, Hangzhou Hikvision Digital Technology, and Dahua Technology.
Compliance encompasses all hardware, software, and infrastructure components across every Holdings entity. No prohibited components appear in any UAS platform, avionics product, software system, or corporate IT infrastructure. Compliance is self-certified annually through SAM.gov registration renewal and verified through supply chain documentation maintained by Forge and Flight Avionics.
Section 889 Certification Statement
Forge & Flight Holdings, Inc. (CAGE 18WR3) certifies that it does not use or provide covered telecommunications equipment or services as defined under NDAA Section 889, Part A and Part B, in any product, service, or system delivered to the United States Government.
Compliance Scope
Small Business Classifications
SDVOSB, HUBZone, and WOSB eligibility pending assessment. Contact for current set-aside status.
Export Control Compliance
Forge & Flight Holdings products and technology may be subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR) and International Traffic in Arms Regulations (ITAR). All export transactions are reviewed for compliance prior to fulfillment. Customers requiring export-controlled products or technical data must provide appropriate export authorization. Contact us to discuss export control requirements for specific procurements.