ITAR registered, JCP certified, CMMC Level 2 machine shop
Handling controlled technical data
Breakout Manufacturing is registered with the U.S. Department of State, Directorate of Defense Trade Controls, as a manufacturer under the International Traffic in Arms Regulations, and holds a Joint Certification Program certification from the Defense Logistics Agency to receive unclassified export-controlled technical data from DoD and its contractors.
Controlled Unclassified Information is processed and stored only inside an enclave assessed against NIST SP 800-171, as required by DFARS 252.204-7012 and CMMC Level 2. The public website and its quote form are outside that enclave. Export-controlled drawings and models are never accepted through the website; request a controlled transfer and a secure path is arranged with you directly.
The owner is the sole operator, the designated Data Custodian, and the only person with access to customer technical data. There are no subcontractors and no foreign persons with access.
Quality management system
Work is run under a documented quality manual covering document control, order review, purchasing and supplier approval, material traceability, calibration, production control, inspection, nonconformance and corrective action, preservation and shipping. The system is aligned to ISO 9001 practice.
- Traceability. Material is received with mill certifications and tracked by heat lot through machining and shipment. Certifications travel with the parts on request.
- Calibration. Every measuring instrument has an asset ID, a calibration interval and a record. Certified gauge blocks are the reference standards.
- Inspection. In-process measurement with a spindle probe, final inspection to the drawing, and first-article inspection reports when required.
- Nonconformance. Nonconforming product is identified, segregated and dispositioned with a record; corrective action closes the cause.
- Workmanship. A written workmanship standard covers edge condition, surface finish, marking and cleanliness.
Cybersecurity
CMMC Level 2 self-assessment completed with a score of 110, reported in the Supplier Performance Risk System. The enclave that handles CUI is segmented from the rest of the business, logged and reviewed weekly, and its configuration is version-controlled as compliance evidence. Cyber incident reporting follows DFARS 252.204-7012 through DIBNet.