ServLogi today announced that it has achieved Cybersecurity Maturity Model Certification (CMMC) 2.0 Level 3, expanding the platform's support for defense contractors working with Controlled Unclassified Information.
Level 3 is the highest level of the CMMC framework and applies to contractors supporting the Department of Defense's most sensitive unclassified programs. It adds enhanced security requirements from NIST SP 800-172 to the NIST SP 800-171 practices required at Level 2.
For cleared contractors, certification of the hosting platform means the infrastructure portion of their own CMMC scope is supported by an assessed environment. Together with the platform's existing DoD Impact Level 5 and 6 authorizations, this allows contractors to host controlled information without separately validating the underlying infrastructure.
The certification brings the platform's total to fourteen accreditation frameworks, including FedRAMP High, NIST SP 800-53 Rev. 5, FIPS 140-3, HIPAA and HITECH, SEC Rule 17a-4, SOC 2 Type II, ITAR and EAR, the CJIS Security Policy, IRAP PROTECTED, IRS Publication 1075, and StateRAMP.
Level 3 certification reflects substantive engineering, not documentation alone. Its enhanced practices assume a sophisticated adversary, and the evidence must demonstrate that the platform was built accordingly. We are proud of the work our teams did to achieve it.
Sarah Lindqvist, Chief Compliance Officer, ServLogi
Assessment reports and the shared responsibility matrix are available to prospective customers under a non-disclosure agreement. Current customers may request updated documentation through the Client Portal.
About ServLogi
ServLogi provides dedicated, federally authorized cloud infrastructure to U.S. federal agencies, cleared defense contractors, and regulated enterprises. The platform holds FedRAMP High authorization, DoD Impact Level 5 and 6 authorization, CMMC 2.0 Level 3 certification, a SOC 2 Type II report, and ten additional accreditations, allowing customers to inherit an assessed security baseline rather than build their own. ServLogi operates twelve data centers in the United States and is a wholly owned subsidiary of Manchester Reid, headquartered in San Francisco, California.
Media contact
Media inquiries: press@servlogi.com. ServLogi Inc., 44 Montgomery St, Suite 500A, San Francisco, CA 94104.