Start with a classified requirement and a sponsor
A facility clearance relates to an entity’s eligibility for classified work. It is different from a person’s clearance, a CMMC assessment or export registration. A startup cannot obtain one merely to make its sales deck more attractive: DCSA describes a sponsorship process tied to a legitimate classified requirement.
Who can sponsor the company?
According to DCSA’s facility-clearance checklist, a government contracting activity or another cleared defense contractor sponsors the facility. Contractors cannot sponsor themselves. Access may sometimes be needed during solicitation, but the classified requirement must justify that need. The sponsor and government security staff should resolve the required level and supporting documentation.
Ask your customer: what classified information must we access, at which stage, under what contract or solicitation, and who will submit the sponsorship? A letter of enthusiasm from an end user is not the same as an accepted sponsorship package.
Prepare the company information
Begin an organized record of the legal entity, formation and ownership documents, management roles, operating locations and relevant contracts. Identify key management personnel and the person who will coordinate security work. Work with your sponsor and DCSA on the required forms and systems; do not send sensitive ownership or personnel documents through an ordinary directory inquiry.
Separate three tracks in your plan: sponsorship and entity eligibility, personnel/access requirements, and any approvals for storing or processing classified information. A facility clearance does not automatically establish every system or storage authorization your delivery plan needs.
What foreign investors change
Foreign ownership, control or influence (FOCI) is part of the entity review. DCSA assesses the nature of the influence and the appropriate measures for the specific company. Foreign investment does not automatically mean the company is ineligible, nor does a small ownership percentage automatically settle the issue. Consult the DCSA FOCI guidance and involve qualified counsel early when financing terms could affect classified work.
Prepare the cap table and the rights attached to the investment, not just the percentage: board seats, vetoes, information access, debt terms and other arrangements can be relevant to a review. Have counsel reconcile fundraising commitments with the security plan before closing a round. Do not promise an investor access to controlled or classified material as part of routine reporting.
When an outsourced FSO can help
A security adviser can help organize records, develop procedures, coordinate training and support the designated security function. Ask which responsibilities stay with your company and whether the proposed arrangement meets the requirements for your facility. Buying support does not replace sponsorship or transfer the government’s decision to the vendor.
- Who will perform the work, and what comparable facility experience do they have?
- Does the scope include initial setup, recurring administration, training and inspection preparation?
- What access and systems do they need, and how will sensitive records be handled?
- Which milestones depend on the sponsor or government review?
- What happens if your classified requirement changes or the engagement ends?
Plan the schedule without promising a clearance date
Build a dependency list instead of assuming a fixed processing time. Track sponsor submission, acceptance, missing entity information, personnel actions, FOCI questions and any separate facility or system requirements. For each item record the responsible party, requested evidence and next follow-up date. Confirm whether planned work can proceed unclassified while the process is underway, rather than assuming access will be available at kickoff.
Your next step
Confirm the classified requirement and sponsorship route with your customer. Then use the provider brief to scope security or legal support. For technology transfers and foreign-person access outside classified work, also review ITAR and EAR.