{"asOf":"2026-09-05","merchant":"SSDF INC","kind":"role","id":"sub","title":"Subcontractor / supplier","kicker":"Same CUI, smaller firm","body":"If the sub handles FCI or CUI, CMMC status follows the information, not the logo on the building. COTS-only suppliers are the usual exception.","clerk":"The prime's flowdown and SPRS.","ssdf":"Buying a digital atlas from SSDF does not put CUI on SSDF's systems."}