Partially Ready — CMMC Level 2
65% NIST 800-171 coverage. 4 control gaps identified.
CMMC Status
Partially Ready
Target Level
Level 2
NIST Coverage
65%
ProtonMail Business
by Proton AG
Overview
ProtonMail Business by Proton AG is an email & messaging solution pursuing FedRAMP authorization targeting CMMC Level 2 compliance. It provides 65% coverage of NIST 800-171 controls for defense contractors handling CUI.
NIST 800-171 Coverage
Control Gaps
Strengths
CMMC-Ready Email & Messaging Alternatives
Frequently Asked Questions
Is ProtonMail Business CMMC compliant?
ProtonMail Business partially meets CMMC requirements with 65% coverage. 4 control gaps need remediation.
What NIST 800-171 controls does ProtonMail Business cover?
ProtonMail Business covers 65% of the 110 NIST 800-171 controls, with 4 gaps primarily in 3.3.1 and 3.3.8 control families.
What are the CMMC compliance gaps for ProtonMail Business?
The primary gaps are in controls 3.3.1, 3.3.8, 3.4.1, 3.4.6. These require supplementary tools or process controls to achieve full CMMC Level 2 compliance.
Check Your Full Tech Stack
See CMMC readiness scores for 80+ enterprise vendors.
Open CMMC Readiness Check