Skip to content

Trust Record / Updated September 10, 2026

What is held. What is underway. What is not claimed.

This page is the public reference for Viceroy NM registration, compliance-readiness, clearance, and authorization boundaries. Product posture must still be verified for the exact release and deployment.

01 / Held today

Registration that can be checked.

Confirmed
SAM.gov registration · UEI NZRVCN4KLUY1 · CAGE 9W6T9
Confirmed
Small Business

02 / Readiness posture

Standards guide the work. They are not badges.

Alignment / work
NIST AI RMF-aligned posture
Alignment / work
OWASP-aligned engineering practices
Alignment / work
CMMC readiness work
Alignment / work
FedRAMP readiness work
Alignment / work
Section 508 / WCAG 2.2 AA design target

03 / Not held or represented

No borrowed authority. No implied clearance.

Clearance
No facility clearance and no personnel-clearance capability is represented. Viceroy NM cannot sponsor clearances directly.
Cyber credentials
No CMMC certification, C3PAO engagement, SPRS score, FedRAMP authorization, sponsor, ATO, or SOC 2 report is represented.
Accounting
No DCAA-approved accounting system or provisional or audited rate claim is represented.
Vehicles
No GSA MAS, IDIQ, or unconfirmed blanket purchase agreement is represented.

04 / Public-channel boundary

Do not send restricted data.

The website, public forms, and published email addresses are not approved channels for CUI, classified material, export-controlled technical data, procurement-sensitive or source-selection information, credentials, health data, financial account data, or other restricted information. Obtain a written authorized channel before transmission.

Product and deployment boundary

Website security measures do not establish the security, accreditation, authorization, CMMC, FedRAMP, NIST, export, DFARS, or classification posture of a customer system or product deployment. Those determinations require the exact scoped boundary, configuration, evidence, agreement, and official approval.

Vulnerability reporting

Report a suspected website vulnerability to security@viceroynm.com. Do not include restricted data, exploit customer systems, or access data that is not yours.

05 / Retrieval record

The same boundaries, machine-readable.

Use the AIO answer page for reviewed company facts and LLM guidance for public retrieval instructions. Both defer to current official acquisition records.


Verify the exact boundary.

Ask for the current registration, product-release, deployment, or compliance evidence relevant to your acquisition.

Necessary technology is always active because it provides security and remembers this choice.