The Aegis Firma Compliance Guarantee
Pass your CMMC Level 2 assessment using Aegis Firma — or your subscription is fully refunded. No loopholes. No partial credit. No fine print.
The Guarantee, Plain English
If you use Aegis Firma to prepare for a CMMC Level 2 assessment — and you follow our readiness checklist, complete your POA&M items within the system, and generate your SSP and evidence package through Aegis Firma — and a C3PAO then determines you do not meet CMMC Level 2, we will refund 100% of your subscription fees paid in the 12 months preceding the failed assessment date.
Refund is issued within 5 business days of a written request accompanied by the C3PAO assessment report. No arbitration required. No lawyer letters needed.
What Qualifies for the Guarantee
Active Aegis Firma subscription
Business tier or higher at the time of your C3PAO assessment. Solo and Team tiers cover CMMC Level 1 self-assessments only.
Assessment readiness checklist completed
All items in your Aegis Firma CMMC readiness checklist marked complete — including the required evidence uploads and POA&M closure for non-prohibited controls.
SSP generated through Aegis Firma
Your System Security Plan must have been generated by Aegis Firma and submitted to your C3PAO. Stock SSPs from other tools do not qualify.
Third-party C3PAO assessment (not self-assessment)
Guarantee applies to formal CMMC Level 2 assessments by an authorized C3PAO listed on the CMMC Accreditation Body marketplace. SPRS self-assessments are not covered.
Assessment conducted under CMMC Level 2 (NIST 800-171 Rev 2)
DoD Class Deviation 2024-O0013 locks assessments to Rev 2. Guarantee covers Rev 2 assessments only.
What Does Not Qualify
- Failed assessment caused by undisclosed CUI scope (systems not included in Aegis Firma evidence collection)
- POA&M-prohibited controls (3.1.20, 3.1.22, 3.10.3, 3.10.4, 3.10.5, 3.12.4) that were not remediated — the guarantee does not cover controls that cannot be deferred
- Assessment failure due to out-of-scope physical security requirements the C3PAO identified during site visit
- CUI hosted on commercial Microsoft 365 (not GCC High) or commercial Google Workspace — Aegis Firma blocks compliant SSP narratives for this scenario
- Accounts cancelled before the assessment date
- Assessments conducted more than 60 days after subscription cancellation
How to Claim Your Refund
- 1
Email hello@aegisfirma.com with subject line: "Guarantee Refund Request — [Your Organization Name]"
- 2
Attach the C3PAO assessment report identifying the failed controls
- 3
Include your Aegis Firma account email and the dates of your subscription
- 4
We will confirm receipt within 1 business day and process your refund within 5 business days
Legal Note
This guarantee is a contractual commitment by Aegis Firma (registered trade name of Aegis Digital Systems FZE LLC). It supplements — and does not replace — the Aegis Firma Terms of Service. In the event of any conflict between these guarantee terms and the Terms of Service, these guarantee terms control with respect to refund eligibility for CMMC assessment outcomes. Guarantee is available to subscribers in the United States only. Not available for reseller or partner accounts.
Aegis Firma does not guarantee CMMC certification — certification decisions are made solely by the authorized C3PAO. We guarantee that if our platform-generated documentation contributed to a failed assessment, you receive a full refund. The CMMC process involves physical facility inspections, personnel security requirements, and other elements outside the scope of compliance documentation software.
Ready to start?
Begin your CMMC Level 2 readiness assessment. Free SPRS gap analysis — no commitment.