Trust
Security & architecture
DRAFT. Seth and Compliance must approve every line of this page before it is published.
Your FCI stays where it is
NexusIQ is designed to record pointers instead of collecting your FCI files. It does not accept file uploads of your evidence.
Describe where evidence lives, not what it says. Don't put contract numbers, part numbers, drawings, or controlled information in descriptions, notes, or links. Don't paste links that open without signing in.
What NexusIQ is not
| NexusIQ does | NexusIQ does not |
|---|---|
| Record pointers: where an evidence item lives, who owns it, and when it was last confirmed. | Accept file uploads of your evidence. |
| Prepare an assessment review packet. | Enter, submit, or affirm in SPRS for you. Your SPRS user (Cyber Vendor User role) enters the details, and your Affirming Official affirms. This can be the same person. |
| Help you organize and track your Level 1 work. | Be a certification or an assessor, or a guarantee of compliance. |
| Keep your FCI files in your own systems. | Hold CUI. NexusIQ is for Level 1, which covers FCI only. It is not built or authorized to hold CUI. Don’t enter CUI anywhere in NexusIQ, including descriptions, notes, chat, and links. |
Where things live
-
Your own systems
Email, laptops, shared drive, cloud storage, paper. FCI files stay here.
-
NexusIQ
Pointers: where proof lives, who owns it, when it was last confirmed.
-
The assessment review packet
Prepared by NexusIQ.
-
Your company in SPRS
Your authorized SPRS user enters the assessment details. Your Affirming Official reviews and affirms.
Questions about how it works?
Book a 20-minute demo.