Skip to content

Help Getting started

What Tiermark does

Supplier assurance for defense primes: a supplier map from public records, outside-in grades, DFARS attestation campaigns, a risk register and audit packages.

Updated · Edwards Consulting Group

Tiermark is for companies in the defense supply chain. It works from the public record, and it keeps what your suppliers tell you in a form you can hand to a contracting officer.

For primes

If you hold contracts and have suppliers to assure, Tiermark gives you:

  • A supplier map built from public records: the awards and subawards reported on USAspending.gov and the registrations in SAM.gov. You can also add suppliers yourself by their UEI.
  • An outside-in grade for every supplier, from A to F with a score out of 100. It comes from passive observation of public information only: DNS, mail authentication, certificates and TLS. Nobody's systems are tested or touched. See How grades work.
  • Campaigns that ask your suppliers for a DFARS 252.204-7012 attestation. Answering is free for them, and their answers come back signed.
  • An attestation ledger of every request and every signed answer, and a risk register with the notification and corrective-action clocks.
  • Audit packages: one file for a contracting officer, with every signed attestation, your request ledger and your risk register, kept in storage that cannot be changed.

For suppliers

If a customer has asked you for an attestation, Tiermark lets you:

  • Answer the request your customer sent, free of charge.
  • Share answers you already signed with another customer who asks for the same questionnaire, instead of answering again, and take the share back whenever you like.
  • See your own grade and every finding behind it, free. With Supplier Pro: how to fix each finding, a re-check once a day, an SPRS score calculator, and reminders before your CMMC compliance dates. See Your grade and how to fix what it found and the other supplier articles in the help center.

A grade is an outside-in observation, not a determination of compliance. Tiermark never asks for, and must never be given, Controlled Unclassified Information (CUI).

Where to start

Still have a question?

Write to help@tiermark.io and a person will answer.