Privacy

CMMC Toolbox stores the email address on your account, your company name if you give one, and the assessment answers you enter. No payment details, no uploaded files, nothing else.

No tracking. There is no analytics, advertising, or third-party tracking on this site.

Email updates. Your email address and company name are added to our mailing list, which runs on Kit (ConvertKit), so we can send you occasional updates about CMMC and dibfi. Your assessment answers are never sent there. Every email has an unsubscribe link, and unsubscribing has no effect on your assessment or your access to this tool.

Your assessment data is deleted after 60 days. If you upgrade to dibfi before then, your answers move with you and are kept as part of your dibfi account instead.

Your answers are private to your account. We do not share assessment content with the Department of Defense, any assessor, or any other third party.