Help
How can we help?
Guides to Tiermark and answers to the questions people ask most. Anything else: help@tiermark.io; a person will answer.
For example: invite a supplier, change my plan, SPRS score.
Getting started
- What Tiermark doesSupplier assurance for defense primes: a supplier map from public records, outside-in grades, DFARS attestation campaigns, a risk register and audit packages.
- Signing inHow to sign in with your address, password and authenticator code, or with a passkey, and what to do when it does not work.
- Setting up your organizationThe first time you sign in, you tell Tiermark which company you are with, by its legal name and UEI. A prime that left out its UEI adds it later from Settings.
- Verifying your organizationBefore Tiermark shows anything about a company, it confirms that you represent it. Usually this takes no time at all.
- Asking TerryTerry is Tiermark's AI assistant in the console. What it answers from, what it will not do, how to reach a person, the daily allowance, and what is kept.
For primes
- Your supplier mapBuild a supplier map from USAspending.gov subawards and SAM.gov registrations, add a supplier by UEI, and read each supplier's grade and record.
- CampaignsA campaign asks chosen suppliers for a signed DFARS 252.204-7012 attestation by a due date: what suppliers receive, when reminders go, when a request expires.
- Requests and signed answersThe attestation ledger of every request you have sent: read signed answers and their content hash, see every read recorded, and export the ledger as CSV.
- The risk registerA supplier risk register with 15-day notification and 45-day corrective action plan clocks. Items come from signed answers, high and critical findings, or you.
- Audit packagesAn audit package is one zip for a contracting officer: every signed attestation as PDF and JSON, your ledger and risk register as CSV, and a sha256 manifest.
- Answering your own customersA prime is somebody's supplier too. The Received tab lists the attestations your own customers ask you for; answer and share them as a supplier does.
For suppliers
- Your grade and how to fix what it foundYour outside-in security grade from public DNS, SPF, DMARC, DKIM, certificates and TLS, with every finding behind it. Supplier Pro adds how to fix each one.
- Re-checking your gradeWith Supplier Pro, Re-check now scans your website, mail and DNS again, once a day, so a fix shows in your grade the same day.
- The SPRS score calculatorHow an SPRS score is worked out: start at 110, lose 5, 3 or 1 points per requirement not met, partial credit for 3.5.3 and 3.13.11, and what a POA&M may hold.
- The self-assessment workspaceA NIST SP 800-171 self-assessment workspace per requirement: its 800-171A assessment objectives, implementation statement, owner, POA&M, evidence and history.
- The system security plan outlineA system security plan (SSP) outline as a PDF and your POA&M as a CSV, built from a short form about your system and your self-assessment workspace.
- Compliance dates and remindersWhen your next CMMC Level 2 self-assessment, SPRS posting, annual affirmation and POA&M closeout are due, by the rule, with email reminders before each.
- Answering a requestHow to answer a customer's DFARS 252.204-7012 attestation request, free: the link, verification, the questionnaire, signing, and who read your answers.
- Sharing your answersAnswer once, share with the customers you choose, revoke whenever you like: when the offer appears, what a customer learns, and how revoking works.
- Your public company pageEvery company Tiermark has looked up has a public page with its SAM.gov header, grade and findings. Remove yours from the directory, bring it back, or claim it.
Plans and billing
- Plans and pricesWhat each plan includes and what it costs. Sales tax, where it applies, is included in the price.
- Starting or changing a planStart a plan from the billing panel in your console, and change it, or switch between monthly and annual, in Manage billing.
- Cancelling a planCancel in Manage billing. Your plan keeps working until the end of the period you paid for, and you can change your mind until then.
- Payments, invoices and failed cardsWhere your invoices are, how to update your card and billing details, and what happens when a payment fails.
Questions
- Questions people askShort answers about Tiermark grades, DFARS attestations, SPRS scores, CMMC dates, the risk clocks, your data, plans and billing, with links to more.
- How a Tiermark grade is worked out from public signalsHow a Tiermark grade is worked out: the public DNS, mail, certificate and TLS signals it reads, what each costs, the A to F bands, and how to dispute one.
Still have a question?
Write to help@tiermark.io and a person will answer.