CMMC Solutions by EDC®

CMMC compliant moving company software

By March 1, 2027, every system that touches your DoW shipment data has to meet CMMC - Level 2. EDC® software is CMMC compliant, so a big part of your checklist is handled from day one.

  • CMMC - Level1 compliant software
  • Used by 99% of DoW-authorized SCACs
  • 8+ million moves on EDC® software

See our current compliance status in the EDC® Trust Center

Why CMMC matters

CMMC is now a condition of doing DoW moves

CMMC (Cybersecurity Maturity Model Certification) is the Department of War's standard for protecting government information in the hands of contractors. For movers, that means the shipment data you receive from DPS: service member names, addresses, orders, inventories, and more.

USTRANSCOM's Personal Property Activity (PPA) requires every TSP to affirm CMMC compliance in SPRS by March 1, 2027. Miss it, and you're placed in non-use, with no DoW shipments until you certify.

PPA deadline
March 1, 2027
116days left

The day DoW stops awarding shipments to TSPs that haven't affirmed.

Who it applies to

  • TSPs

    You affirm compliance for every system that stores, processes, or sends DoW shipment data.

  • Agents & subcontractors

    If you pack, haul, store, or deliver DoW shipments, the requirement reaches you too.

  • Drivers & crews

    Phones and tablets used for inventories and paperwork are part of the picture.

  • Your vendors

    Every software system holding that data has to meet the standard, including your move management software.

If you touch a DoW shipment, CMMC touches you.

CMMC compliant solutions for movers

CMMC compliant software for every part of your move

From the sales call to the final invoice, keep your shipment data inside systems built to the standard.

The industry standard for military moves, used by 99% of DoW-authorized SCACs. Manage DPS shipments, claims, and billing in a CMMC compliant system.

Learn more

Rate and audit against 400NG, GSA 500A, your own tariffs, and your partners', with CMMC compliant protection for every rate you run.

Learn more

Complete digital inventories, photos, and e-signatures at the curb in a CMMC compliant app. Unlimited users, and it works offline.

Learn more

Exchange shipment data and documents with partners worldwide through a CMMC compliant network, and check a partner's CMMC status in their directory profile.

Learn more

The only CMMC compliant AI in the moving industry. MERXED™ handles your dispatch, smart reports, pulls weights from weight tickets, drafts emails, and keeps your data private.

Learn more
Your moving supply chain

Your compliance is only as strong as your supply chain

When you push a DoW shipment to an agent through DPS, the protected data goes with it. Every agent, driver, and vendor that touches it becomes part of your compliance picture. That means you can't just hope your partners get there. You need an active role in helping them get there.

Bring your agents into your CMMC bubble

When your agents work in a CMMC compliant EDC® solution, they handle your shipment data inside the same protected environment you do. They still own their part, like their devices, offices, and team training, but they start much further ahead.

Know who you're sending shipments to

GOgistiX® directory profiles show whether a company reports being CMMC compliant, and companies can upload their certificate for you to review. Check before you assign.

Hold your vendors to the same standard

Every system that stores or sends your shipment data has to be CMMC compliant, and each vendor should tell you exactly which controls they cover and which are yours. That's a shared responsibility matrix. Ask every vendor for one. We share ours.

Choosing a CMMC compliant EDC® solution doesn't just protect you. It moves your whole network closer to compliance.
Chat with our CMMC team

Agent? Get CMMC-ready with EDC-AgentLink® in 5 minutes.

Your TSPs need to know their shipment data is safe with you. Sign up in 5 minutes, onboard the same day, and work their DoD shipments in a CMMC compliant system.

Get started with EDC-AgentLink®
FAQ

What movers are asking about CMMC

Last updated:

It's happening. The mix-up comes from two terms that sound alike. Phases are the government's rollout schedule for CMMC. Levels are the security requirements themselves.

In July 2026, the Department of War paused Phase 2, the step that would have required outside assessors to certify contractors, and made that pause official in September while it reviews the program. Level 2 was never cancelled. In its August 2026 CMMC FAQ, the PPA confirmed TSPs must still complete their Level 2 self-assessment. Your deadline is still March 1, 2027.

No. Compliance doesn't transfer. Each TSP and subcontractor affirms compliance for its own systems, processes, and policies. Your van line's compliance covers their systems, not your office computers, your email, or the software you run your moves on.

The easiest and fastest way to get started as an agent is by signing up for EDC-AgentLink®

Your SPRS affirmation is a formal statement to the federal government. A false one can expose your company to liability under the False Claims Act, on top of losing your DoW business. The safer path is closing the gaps now, while you still have time.

If they receive protected shipment data from you, yes. That includes agents you assign shipments to, crews completing inventories on their phones, and every software vendor that stores or sends that data. You're responsible for knowing where your data goes.

If they're using EDC® software, you can check their GOgistiX® directory profile. Companies can show whether they report being CMMC compliant and upload their certificate for you to review. For agents who aren't there yet, EDC-AgentLink® gives them a CMMC compliant way to work your shipments.

If you handle DoW shipments, yes. Your TSPs will need to know you're compliant before they can keep sending you work. EDC-AgentLink® is a fast, cost-effective place to start: sign up in 5 minutes and onboard the same day.

Start with two questions: Is your system CMMC compliant? And will you share a responsibility matrix showing which controls you cover and which are mine?

If a vendor can't answer both, that's a gap in your compliance. EDC® shares its matrix with customers.

Not automatically. EDC® software covers a large share of the checklist at the system level. Your company is still responsible for its own policies, devices, facilities, team training, and SPRS affirmation. Our team can walk you through what's covered and what's yours.

On-demand webinar

Watch: The Mover's Guide to CMMC

Get the full picture in plain English. Our team walks you through what CMMC requires, how it reaches your agents, haulers, and subcontractors, and exactly where compliant software ends and your part begins. You'll also see live configurations across EasyDPS®, EDC-MoveStar®, GOgistiX®, MERXED™, and EDC Mobile™.

1 hr 20 min | Watch anytime

Find the right CMMC solution for your operation

TSP, agent, or both? Tell us how you move, and our team will show you which EDC® solutions cover the most ground before March 1, 2027.

Chat with our team

No prep, no data, no commitment.

EDC® is not a CMMC assessor, certifier, or C3PAO. Using EDC® software does not by itself make your company CMMC compliant. EDC® solutions address a large share of CMMC requirements at the software level; your company remains responsible for its own policies, people, devices, facilities, and SPRS affirmation. This page is for general information only and is not legal or compliance advice. CMMC requirements can change, so confirm current guidance with USTRANSCOM PPA and a qualified CMMC professional. For EDC®'s current compliance status, visit the EDC® Trust Center.