CUIckStart
Two defaults, set on the first day.
Every CUIckStart enclave starts from the same two commitments. Microsoft licensing, including any AI licensing, is billed by Microsoft and is not in the CUIckStart price.
The controls are the build, not a layer on top of it
- Identity, mail, files, and logging configured for the enclave from the first station.
- The System Security Plan written with the build and kept current after it.
- Named people only, with every access change a tracked request.
- Operated by a CMMC Level 2 firm on the same Microsoft stack.
AI runs inside the boundary, not beside it
Every enclave is built AI-ready. AI itself turns on with one of three add-on tiers, priced separately.
- Purview labels and DLP in place before any AI touches a file.
- No commercial AI endpoints and no web grounding on CUI work.
- Access, prompts, and outputs logged as evidence an assessor can test.
- GCC High native, so AI work stays in the same federal cloud as the CUI.
Not a new application. The four workloads your people already use.
Work inside the enclave happens in Teams, Exchange, SharePoint, and OneDrive on Microsoft 365 GCC High. Nobody learns a new tool; the people who handle CUI simply do that work inside the boundary.
Teams
Chat & meetingsConversations about CUI happen with the people who are allowed to have them.
Exchange
MailEncrypted mail inside the boundary, with retention.
SharePoint
Shared filesShared CUI files kept in the box, encrypted, with retention.
OneDrive
Working filesEach named user’s own files, inside the same boundary.
What sits inside. What stays yours.
CUIckStart draws one box around CUI and operates it. It does not replace your MSP or internal IT, your policies, your physical security, or your decision of who handles CUI.
The enclave, operated by inDirectIT
- GCC High for the CUI workload.
- Named identities and access for the people who handle CUI.
- Encrypted mail and files, with retention.
- Logging and backup designed with the boundary, not bolted on.
The rest of the business
- Systems that never see CUI stay where they are.
- Your MSP or internal IT keeps running the corporate network.
- Physical security and policies outside the enclave.
- Who is allowed to handle CUI is your decision.
Four stations. One boundary at the end of them.
Draw the flow
Where CUI is created, received, stored, and sent.
Build the boundary
GCC High, with identity, mail, files, and logging designed for the box.
Name the users
Only the people who handle CUI are onboarded.
Hold the evidence
The SSP and the remaining customer work, kept current.
Published price. Microsoft licensing shown separately.
One-time. Ready in 60 days.
One-time. Ready in 14 days.
Compliance management.
Through 3 users, then $325 each month for each added user.
Microsoft licensing is not included and is billed by Microsoft. The C3PAO assessment fee is not included. Delivery durations start only once Microsoft Azure procurement is complete and your GCC High tenant is provisioned. The 60-day and 14-day clocks do not run before then.
Operated by a firm that runs its own program on the same stack.
inDirectIT holds CMMC Level 2, assessed, and runs its own compliance program on GCC High, Intune, Defender, and Purview. The team that builds your boundary is the team that passed its own assessment.
Four more pages on how it runs.
How it works
The four stations in depth, the boundary diagram, who owns what, and the Standard and Express timelines.
Walk the path →Module in buildEnclave console
Managed in the inDirectIT client portal: build stage, named users, licenses, workloads, and change requests.
See the console →Three add-on tiersAI tiers
Enable, Native, and Premium: flows, native agents, and an Azure Government Foundry agent, within the government-cloud boundary.
Compare the tiers →Published pricePricing
The published price table and a year-one calculator, with Microsoft licensing shown separately.
Run the numbers →
CUIckStart has its own home at cuickstart.com.
The product site tells the CUIckStart story on its own. This section is the view from the firm that builds and operates it.
Get a CUIckStart quote.
Tell us how many people handle CUI and whether Standard or Express fits your timeline. A practitioner replies, not a sales queue.
Or call 240-331-6256, or email rj@indirectit.com.
Or email rj@indirectit.com. Share high-level requirements only; do not send CUI or sensitive files.