Cloud & As-a-Service · CMMC and CPCSC Enclaves
A managed, isolated environment for controlled information, engineered to support CMMC Level 2 and CPCSC Level 2, with secure Citrix desktops so CUI never touches user devices.
A CMMC and CPCSC enclave is a separate, tightly controlled environment where defence suppliers store and work with controlled unclassified information (CUI). Users access it through secure Citrix sessions, so the data stays inside the boundary. Putting CUI in an enclave shrinks the scope of your assessment to the enclave instead of your whole company.
Enclaves are engineered to support CMMC Level 2 and CPCSC Level 2 controls based on NIST SP 800-171 and ITSP.10.171, and are hosted on infrastructure independently audited to SOC 2 Type II and ISO 27001, 27017 and 27018. Canadian-hosted by default.
Certification is awarded to your organization by an assessor. Timelines vary with scope.
The environment, the controls and the evidence.
A segregated enclave for CUI, with hypervisor-level isolation and encryption.
Citrix virtual desktops, including GPU options for engineering tools.
MFA, role-based access and device posture checks.
Logging, SIEM integration and documentation to support your assessment.
Secure collaboration with primes and subcontractors inside the enclave.
Encrypted backups and recovery kept inside the boundary.
A typical path from scoping to operations.
Identify CUI flows and define the enclave boundary.
Deploy the enclave, desktops, identity and logging.
Move CUI and users into the enclave.
Run, monitor and maintain evidence for your assessor.
Security results published by Citrix and delivered by Altanora.
Global engineering organization
2,000+
developers on Citrix SecurSpaces, with zero lines of code on endpoints.
Seagate
100%
secure access coverage for employees and vendors after replacing VPN with Citrix Zero Trust access.
Aerospace manufacturer
24/7
VIP Priority Support, Citrix subscriptions and professional services.
Altanora client engagement
From Our Clients
“Every interaction with Altanora has consistently exceeded my expectations. Their deep technical expertise, combined with a comprehensive understanding of our business challenges, allows them to deliver practical solutions and reliably meet their commitments.”Frederic St-Jean, Director of Information Technology
2026 Citrix Evangelist Partner of the Year and a Citrix Platinum Partner since 2006, with 70+ certified engineers across North America.
Enclaves designed for U.S. and Canadian defence supply chains.
Documentation and logging built to support your assessor.
Eligible Citrix projects may qualify for Citrix Funded Pro Services.
An isolated environment where CUI is stored and processed, so your CMMC assessment scope is limited to the enclave.
CMMC certification is awarded to your organization, not a product. Altanora enclaves are engineered to support CMMC Level 2 and CPCSC Level 2 controls.
The Canadian Program for Cyber Security Certification, based on ITSP.10.171, which aligns with NIST SP 800-171.
Typically 4 to 8 weeks, depending on scope and the number of users.
In Canada by default. For U.S. requirements, enclaves can also be designed on Azure Government or AWS GovCloud.
CMMC Phase 1 self-assessments began in November 2025. In July 2026 the planned Phase 2 certification requirements were suspended pending a review, but DFARS 252.204-7012 and NIST SP 800-171 still apply.
Scope a CMMC and CPCSC enclave for your controlled information.
Plan My Enclave