Question 1

What is compliance management software?

Accepted Answer

Compliance management software keeps an organization's ongoing obligations current between audits: employee certifications, training records, licenses, recurring reviews, controlled documents, expiration dates, and the evidence behind each one. Fettle automates expiration alerts, tracks recurring reviews on their cadence, holds signed controlled documents, and preserves a dated record you can report on later.

Question 2

Which compliance frameworks does Fettle support?

Accepted Answer

Fettle maps your reviews and documents to CMMC Levels 1, 2, and 3, NIST SP 800-171 Revision 2, ISO/IEC 27001:2022, ISO 9001:2015, and custom frameworks you define. Coverage is reported per control family down to 800-171A assessment objectives. Fettle shows whether a control has a real artifact behind it — a review, a document, an evidence file — and never asserts that a control passes. That judgement belongs to your assessor.

Question 3

Does Fettle replace an SSP, POA&M, or SPRS submission?

Accepted Answer

No. Fettle does not author a System Security Plan, manage a POA&M, or calculate and submit a SPRS score, and it does not run automated technical control testing. It is the evidence and personnel layer that sits underneath those tools: the record of who holds what credential, which reviews are on cadence, which documents are signed and current, and what all of that looked like on any given date.

Question 4

Can Fettle store CUI?

Accepted Answer

No. Fettle is not FedRAMP authorized and does not accept Controlled Unclassified Information. That boundary is deliberate. What Fettle holds is the compliance record itself — training completions, credential dates, signed procedures, review cycles, and coverage — which is almost never CUI. Your CUI stays in the enclave you built for it.

Question 5

How does certification renewal tracking work?

Accepted Answer

Fettle continuously monitors expiration dates and automatically notifies employees and administrators as certifications approach expiration. Organizations choose how far in advance notifications begin, how frequently reminders are sent, and which roles receive them. Notifications send through Fettle's platform email by default, so there is no mail server to configure before alerts start working.

Question 6

What are controlled documents in Fettle?

Accepted Answer

A controlled document is a published PDF — your policy, SOP, or form — with signature and data fields placed on it. Approvers sign in-product, and the approved version is stored immutably and rendered exactly as approved. Every fill-out is pinned to the template version it was completed on, so a signed record can never be silently altered by a later revision. Registers add tables whose columns lock once the cover sheet is signed while rows stay open for new entries.

Question 7

Can I prove what my compliance status was on a past date?

Accepted Answer

Yes, and it is one of the main reasons teams adopt Fettle. Compliance status is preserved historically, so you can report on any date range — the day of a contract award, a proposal submission, an inspection, or an annual affirmation — rather than reconstructing it from memory. An immutable audit log records who changed what and when.

Question 8

Can employees upload their own certification renewals?

Accepted Answer

Yes. Employees upload updated certifications and supporting documents and propose issue dates; supervisors review and approve records before they count toward compliance. Uploading and attesting stay separate, which distributes the work while keeping administrators in control.

Question 9

Can I import existing certification spreadsheets?

Accepted Answer

Yes. Fettle imports Excel spreadsheets with automatic field detection for employee names, email addresses, certification names, issue dates, and expiration dates, then shows an editable grid mirroring your sheet so you can correct anything before it lands.

Question 10

What happens if we leave Fettle?

Accepted Answer

Your records leave with you, in formats that open without Fettle. While you are a customer, any admin can download a full evidence archive from Settings: every certificate and review evidence file, organized and dated, with a manifest and a SHA-256 for each file. When you cancel, every admin is emailed a secure link, valid for 30 days and reusable, to a complete export package: your compliance report and Master Certification List as CSV, every certificate document by person, and your whole controlled-document library in the same folders you used in the app. Published documents come with their approval signatures burned in, registers as Excel, completed records as signed PDFs, every superseded version, and the Word source wherever you attached one, so you can keep revising. A manifest records who signed what and when. There is no exit fee and no request to file.

Question 11

Who uses Fettle?

Accepted Answer

Defense and government contractors carrying CMMC, NIST 800-171, or ISO obligations alongside a real workforce-training burden; security companies tracking licenses and qualifications; construction and staffing firms managing safety certifications; and the compliance managers, operations teams, and quality leads responsible for keeping all of it current.

Passing was expensive.
Staying ready shouldn’t be.

Starter

Professional

Business

Enterprise

You spent $170,000 getting ready.
Don’t let it drift.

What getting ready cost you

What a failed or lapsed assessment costs.

Paying for the assessment twice

Contracts you can’t be awarded

A conditional status on a clock

Affirming something that stopped being true

Answer these without opening a spreadsheet.

What comes due in the next 30 days?

If your assessor asked for last quarter’s access review, how long would it take to produce?

Which practices have no named owner?

What happens when the person who keeps the spreadsheet leaves?

Not sure yet? Check for drift first.

Passing was expensive.Staying ready shouldn’t be.