The US Department of Defense's CMMC policy has been published, and CMMC requirements will begin to show up on contracts for those who do business with the DoD. Part of these requirements are that any cloud systems that a contractor uses and that touch confidential unclassified information (CUI) must be FedRAMP moderate certified. If Clickup cannot meet these requirements then businesses will have to cut Clickup out of their government work and find a different product to use. This includes SBIR contracts, which many small businesses pursue as an introduction to government contract work.