Back to Events

SAME SBC 2026 · Deep Fathom + Elevate

Know what compliance requirements mean for your next defense opportunity.

Pursuing defense work or joining a prime's team? Get help understanding what applies to your company and how to organize the work behind your response.

Elevate brings legal and information-handling expertise. Deep Fathom provides compliance software to connect requirements, work, and evidence.

Meet the experts

Elevate · Legal and CUI experts

  • Portrait of Kellie Tomeo, Esq.

    Kellie Tomeo, Esq.

    VP, CMMC Solutions

    28 years practicing law, advising contractors since 2006.

  • Rachel Bassford

    CUI Program Advisor

    Founding CUI Program Analyst at the National Archives, former FBI Chief Security Officer.

Deep Fathom · Security and platform experts

  • Portrait of Steven Hess

    Steven Hess

    Co-founder and CEO

    Former CEO of Cloud Storage Security, trusted by federal agencies to protect critical data.

  • Portrait of Kevin Hunt

    Kevin Hunt

    Co-founder and CTO

    Former CTO of Cloud Storage Security, engineering leadership at Microsoft.

Expert guidance, connected to the work

Scope it. Run it. Prove it.

  1. Elevate

    Scope it

    Elevate helps identify the information your company handles, the systems involved, and the requirements that apply.

  2. Deep Fathom

    Run it

    Turn agreed requirements into tasks with owners and dates. Deep Fathom keeps supporting evidence alongside the work.

  3. Together

    Prove it

    With your advisors, review progress and open gaps. Prepare supporting records for customer questions and assessment.

Our focus includes readiness for Cybersecurity Maturity Model Certification (CMMC) and the handling of federal contract information (FCI) and controlled unclassified information (CUI).

Bring one question to the conversation

Tell us what prompted you to look for help and any timing you're working toward. We'll discuss where you are and identify the right follow-up with Elevate or Deep Fathom.

Questions we hear every day

  • Does CMMC even apply to us?
  • Do we have CUI or FCI? How would we know?
  • A customer or prime has asked about our compliance.
  • We have compliance work underway and need a better way to manage it.

Choose a time to talk. A 25-minute video call with Deep Fathom. Pick any open time, during the show or after it, and leave with a next step.

Choose a time to talk (opens Calendly in a new tab)

Asked for a particular expert? Send us your question and name them. We'll set up the follow-up with that person.

Prefer to send a question?

Our team will review it and follow up about the next step.

Do not include CUI, credentials, or export-controlled data.

Take it with you

About SAME SBC

The SAME Federal Small Business Conference brings together federal agency leaders, prime contractors, and the small architecture, engineering, and construction firms that deliver the government's infrastructure work.

A lot of that work touches controlled unclassified information. Facility drawings, installation data, and project records carried under DFARS obligations can put A/E/C firms inside the Defense Industrial Base and within the scope of CMMC, often without a dedicated security team to carry it.