GovCon IT, software, AI, and cybersecurity. Built in San Diego.
cloudcorps is a veteran-owned San Diego firm serving defense contractors: CMMC readiness, managed gov-cloud enclaves, AI systems, and custom software. We are based where the work is, and we serve the defense industrial base nationwide from here.
veteran-owned & operated · san diego, ca_
We work where our clients work.
San Diego is one of the densest defense markets in the country, and its contractor base runs on exactly the work we do: IT that has to satisfy DFARS clauses, software that has to survive audits, and CUI that has to live somewhere compliant.
NAVWAR & NIWC Pacific
Naval Information Warfare Systems Command and its Pacific warfare center are headquartered here. The region's contractor base is dense with C4ISR, software, and IT work flowing from both.
The waterfront
Naval Base San Diego and the ship repair and modernization ecosystem around it, with the prime and subcontractor tiers that keep the surface fleet sailing.
Miramar to Pendleton
Marine Corps aviation and expeditionary commands anchor the county's north, with their own contractor and support ecosystem.
Four practices, one standard.
Cybersecurity & CMMC
CMMC Level 2 readiness, NIST SP 800-171 gap assessment, and remediation for defense contractors.
Managed IT & Enclave
Managed IT built for government contractors: compliant gov-cloud enclaves, migration, monitoring, patching, and evidence upkeep that keeps you assessment-ready.
AI Implementation
AI systems for proposals, contract management, and compliance posture, deployed inside your compliance boundary.
CMMC paused. San Diego's CUI did not.
On July 13, 2026, the Department of War suspended CMMC Phase 2. While the suspension holds, DoD contracting officers may require only Level 1 (Self) or Level 2 (Self) assessments, and solicitations that carried a third-party certification requirement are being amended to remove it. The suspension paused the certification, not the rules underneath it. DFARS 252.204-7012, NIST SP 800-171, your SPRS score, your annual affirmation, and your prime's flow-down all still apply.
For a market this dense with CUI-handling subs, that matters more than the program's status: primes here flow the requirement down on their own schedule, and DFARS 252.204-7012 never paused. Where CMMC actually stands after the July 13 suspension is on our CMMC page.
Local, honest, and on the record.
cloudcorps is the software and AI practice of Sunset Coast Partners, a San Diego firm that invests in and advises government contracting companies. We build for GovCon because we work in GovCon every day, and we are veteran-owned and operated.
The standing rules: we do readiness, remediation, enclave, and managed work. We are not a C3PAO and we do not certify. If a badge is on this site, it is real.
What San Diego contractors ask us.
Do you work onsite in San Diego?
Yes. cloudcorps is based in San Diego and works onsite across the county, from downtown to Miramar to North County. Most engagements mix onsite and remote work; assessment prep and enclave migrations usually benefit from at least some time in the room.
Do you only serve San Diego contractors?
No. San Diego is home base, and the defense industrial base is national. Remote delivery covers contractors anywhere in the United States; the compliance requirements are federal, so the work travels well.
Which San Diego contractors need CMMC Level 2?
Any contractor or subcontractor handling controlled unclassified information (CUI) on DoD work. CMMC Phase 2 was suspended on July 13, 2026, so third-party certification is not currently a condition of award, but DFARS 252.204-7012, NIST SP 800-171, and your SPRS score all still apply, and primes continue to flow their own requirements down. If your contracts mention DFARS 252.204-7012, you are in scope.
Is cloudcorps a C3PAO?
No, and we say so on every page it matters. Certification only ever comes from a C3PAO. cloudcorps does readiness, remediation, enclave, and managed IT work: everything that comes before and after the official assessment. If a badge is on this site, it is real.
What does cloudcorps actually do?
Four things: cybersecurity and CMMC readiness, managed IT with compliant gov-cloud enclaves, AI implementation inside your compliance boundary, and custom software for GovCon operations. Diagnosis and strategy come through our parent firm, Sunset Coast Partners; cloudcorps delivers.
Same time zone, same clauses.
Tell us what you're up against. We'll answer within one business day.