Back to Newsroom
A lit lighthouse on a rocky coast under a storm sky at dusk.

Press Release

CMMC Phase II Is Paused. Level 1 Is Not. AssessrLog Helps Suppliers Prove It

The suspension of CMMC Phase II left Level 1 self-assessment requirements in place. AssessrLog helps small defense suppliers prove their Level 1 work.


SINGAPORE, October 3, 2026. Many small defense suppliers heard that CMMC was paused and assumed nothing is required now. For CMMC Level 1, that is wrong. In its July 13, 2026 announcement suspending the CMMC Phase II requirements that were scheduled for November 10, 2026, the Department of War stated, "All Phase I self-assessment requirements remain firmly in place." Class Deviation 2026-O0025, Revision 3, signed September 3, 2026, permits requiring activities to include CMMC Level 1 (Self) assessments in procurement requests. Phase II remains suspended while the Department reviews the program.

The stakes are broad. In its September 10, 2025 DFARS final rule, the Department estimated that about 209,540 entities, 142,487 of them small, would need a Level 1 self-assessment once CMMC is fully phased in, and noted that this mix is likely to change.

AssessrLog, the CMMC Level 1 self-assessment software from ProfytAI Pte. Ltd., publicly launched on September 22, 2026. It gives small U.S. defense suppliers that handle Federal Contract Information (FCI) one place to scope their FCI, work all 59 assessment objectives across the 15 requirements of FAR 52.204-21, keep the evidence behind each MET, NOT MET or N/A determination, and hand their affirming official a complete record to affirm in SPRS, the Supplier Performance Risk System.

"The Phase II pause did not eliminate Level 1 self-assessment requirements," said Jeff Kangar, Co-founder & CEO of AssessrLog. "For suppliers required to hold Level 1 status, a senior official still affirms in SPRS every year, and that official should be able to show the work behind it. Self-assessed does not mean undocumented."

Kangar previously held cybersecurity and compliance leadership roles at LinkedIn and Deloitte and has more than 13 years of GRC experience.

What Suppliers Can Use Today

  • A free Readiness Check. The CMMC Level 1 Readiness Check asks 24 plain-English questions and takes about 10 minutes, with no account and no sales call. Results appear on screen right away, and a requirement-by-requirement PDF report is available by email. The results reflect the supplier's own answers. They are not a determination.
  • A free reference to every requirement. The CMMC Level 1 Reference Center covers all 15 requirements and 59 assessment objectives, with the official text reproduced exactly as printed, plus plain-English guides, definitions and a printable checklist. Its guide to what the Phase II suspension means for Level 1 answers the question suppliers are asking now, and its methodology shows how every page is sourced.
  • A system of record for the assessment. FCI Scope records the people, systems, facilities and external providers that handle FCI. The Assessment Workbench brings each official objective, its evidence, notes and the supplier's determination into one record. The Evidence Vault versions each uploaded file and fingerprints it with SHA-256. The Integrity Ledger seals each recorded decision into an append-only chain. The Affirmation Package organizes the finished record for the affirming official before manual entry into SPRS.

A Tamper-Evident Assessment Record

"Every evidence file is versioned and fingerprinted with SHA-256, and every determination is written to an append-only ledger where each entry is chained to the one before it," said Chris Burkhardt, Co-founder & CTO of AssessrLog. "That record is a safeguard for the people who do the work and the official who signs for it. If anyone ever asks why a decision was made, the answer and the evidence behind it are already there."

Burkhardt has more than 20 years of product and engineering experience, including roles as a Founding Engineer at TrueCar, Principal Engineer at Beachbody and Principal AI Engineer at Asurion.

AssessrLog never makes a determination. Its AI Assist answers scoping questions in plain English, but every scope decision and every MET, NOT MET or N/A determination is made and recorded by a person at the supplier. AssessrLog does not certify compliance, is not a C3PAO, and does not submit or affirm in SPRS. The organization and its affirming official remain responsible for the assessment and its entry in SPRS.

AssessrLog runs on US-region infrastructure, and each supplier's evidence is kept within its own organization.

Pricing

Early access pricing for the Practitioner plan is $99 a month billed annually ($1,188 a year) or $149 month to month, with one active CMMC Level 1 assessment included. Each additional active assessment is $49 a month. Current pricing is on the pricing page. The Readiness Check and the Reference Center are free.

AssessrLog is also scheduled to launch on Product Hunt on Sunday, October 11, 2026.

About AssessrLog

AssessrLog is self-serve software for the CMMC Level 1 self-assessment, built for small U.S. defense suppliers that handle Federal Contract Information (FCI). Suppliers use it to scope their FCI, work all 59 assessment objectives across the 15 FAR 52.204-21 requirements, store the evidence behind each MET, NOT MET or N/A determination, and give their affirming official a complete record to affirm in SPRS. AssessrLog is a product of ProfytAI Pte. Ltd. Its co-founders are Jeff Kangar (CEO) and Chris Burkhardt (CTO).

Assess it. Log it. Prove it.

AssessrLog is not affiliated with or endorsed by the U.S. Department of Defense or Department of War. Media inquiries go through the contact page, and logos and product images are in the press kit.

Watch

A walkthrough of a CMMC Level 1 self-assessment in AssessrLog.

Media Contact

AssessrLog Media Relations

Media inquiries via assessrlog.com/contact