Compliance Ready,
Shop Floor Fast
Key Takeaways
- Produces physical-access evidence for the NIST SP 800-171 PE control family.
- Keeps a digital visitor logbook with electronic signatures and recorded timestamps.
- OFAC and BIS screening for every vendor and visitor at check-in.
The Manufacturing Problem
Manual logbooks are the "quiet killers" of manufacturing audits. They are often illegible, tamperable, and fail to provide the real-time identity verification required by modern defense contracts. SecurePoint USA solves this by digitizing the entire gate-to-line workflow.
Learn about CMMC PE controlsFFL Compliance
Automated ATF-ready digital logbooks and real-time screening for Federal Firearms Licensees.
Vendor Screening
Real-time sanctions monitoring for all third-party suppliers, delivery drivers, and contractors.
CMMC Physical Security
Meet NIST 800-171 PE requirements with visitor logs backed by an append-only audit trail and identity verification.
Built for the Shop Floor
Manufacturing environments demand speed and durability. Our kiosk UI is optimized for high-traffic facility entrances, supporting everything from material handlers to international regulatory inspectors.
Real-Time Sanctions Checks
Screen every visitor against OFAC, BIS, and international watchlists with fast turnaround.
Digital Audit Trails
Append-only records of every entry and decision, ready for ATF or CMMC audits.
Restricted Area Gating
Define citizenship-sensitive zones and document approvals, badge indicators, and escorted access workflows.
Vendor Monitoring
Continuously monitor long-term on-site contractors against global exclusion lists.
ATF & CMMC Audit Evidence
Stop worrying about missing signatures or lost paperwork. SecurePoint USA maintains digital evidence, backed by an append-only audit trail, with one-click export, helping your facility prepare a stronger record for the next inspector.
Full
Digital Logs
Inline
Screening
OFAC
Real-time
L2
CMMC Evidence
Expert Insights
Detailed answers for manufacturing compliance officers and security directors.
Is this our ATF bound book?
A visitor logbook is not a record the ATF requires you to keep, and SecurePoint is neither your bound book nor your 4473s. What it gives an FFL is a visitor record worth producing: visit metadata, stated purpose, and an electronic signature, timestamped at the database level in an append-only store, exportable for a date range when an inspection asks for it.
Can we screen material handlers and on-site contractors?
Yes. Manufacturing supply chains rely on a rotating staff of contractors and material handlers. SecurePoint USA screens all third-party personnel in real-time against global sanctions and exclusion lists. For long-term contractors, our system maintains a persistent record, re-screening them against updated watchlists every time they badge into the facility.
How does the platform support CMMC Level 2?
SecurePoint produces visitor evidence for the Physical Protection (PE) control family of NIST SP 800-171. The controls visitor management touches:
- PE.L2-3.10.3, escorting visitors and monitoring visitor activity: direct evidence.
- PE.L2-3.10.4, maintaining audit logs of physical access: direct evidence.
- PE.L2-3.10.1, limiting physical access: supporting. We authorize the person; your facility enforces the boundary.
- PE.L2-3.10.5, controlling physical access devices: supporting. Issuance and return are recorded; the badge stock stays yours.
- PE.L2-3.10.2 and PE.L2-3.10.6 are not controls we claim.
Evidence supports an assessment; it does not conduct one. Confirm your scope with your C3PAO.
Secure Your
Supply Chain
Join the forward-thinking defense manufacturers using SecurePoint USA to bridge the gap between rigid compliance and shop floor productivity.
Frequently asked questions
Does SecurePoint make us CMMC compliant?
No. CMMC compliance is a program you run and an assessment you pass. SecurePoint is one internal control inside that program and the records that show the control operated. The obligation stays with your organization.
Are contractors re-screened, or only screened once?
Recurring contractors can be held as a persistent record and re-screened rather than treated as a new party each visit. Lists change continuously, so a screen is only current as of the moment it ran.
Can evidence be exported for one site and date range?
Yes. Evidence packs are generated against the sites and date range you choose, with checksums, so a review of one facility and one period does not require exporting everything.
Who decides when a vendor is flagged?
An authorized reviewer in the adjudication queue, not the person at the door. The decision and its reasoning are recorded against the visit and export with it.