Policies
Policies and Compliance
Where each one stands, and where to check.
What Dreamers is certified for, what is in progress, and the policies we work under. Questions from a security or procurement review go to the contact form.
Status
In force In progress
CMMC Level 2
The U.S. Department of Defense cybersecurity standard for contractors that handle controlled unclassified information.
Certified
SOC 2 Type II
An independent audit of how our security controls operate over time.
In progress
FedRAMP Moderate equivalency
SpendLogic: we guided it from one defense-contractor client to more than 50, on AWS GovCloud, through FedRAMP Moderate Equivalency.
Delivered
ICT Accessibility Policy
Version 1.0, effective July 8, 2026. WCAG 2.1 Level AA and Section 508 for covered work.
In force
Vulnerability disclosure
Found a security issue on thedreamers.us? Our security.txt points you to the contact form.
Published