Defense machining lives or dies on compliance, and buyers in this space need a supplier who states its posture honestly. Wexmar machines defense and aerospace parts in Canastota, New York, and this page lays out exactly where we stand on NIST SP 800-171, DFARS flowdowns, CMMC, and domestic sourcing. We do not overstate a certification we do not hold. What follows is accurate as of this writing.
NIST SP 800-171
NIST SP 800-171 defines the controls a contractor must implement to protect Controlled Unclassified Information, CUI, on non-federal systems. Wexmar has implemented the standard and self-assessed to a perfect score. We hold 110 of 110 in SPRS, the Supplier Performance Risk System, which is the score a prime or government buyer checks before releasing CUI-marked work. A full 110 of 110 means every control in the standard is in place, not planned. For a NIST 800-171 machining supplier, that SPRS score is the single most-requested data point, and ours is posted.
CMMC
The Cybersecurity Maturity Model Certification program builds an assessment regime on top of NIST SP 800-171. Wexmar is currently at CMMC Level 1, with CMMC Level 2 in progress. We do not claim CMMC Level 2 as achieved, because it is not. Level 2 assessment aligns to the same 110 controls we already self-assess at 110 of 110, so the groundwork is in place while the formal Level 2 status advances. For a CMMC machine shop evaluation, the honest statement is Level 1 today, Level 2 in progress.
DFARS clauses relevant to machined parts
A DFARS compliant machine shop has to understand which clauses flow down to a machined part. The ones that touch our work most directly are below.
| Clause | Subject | Relevance to machining |
|---|---|---|
| 252.204-7012 | Safeguarding CUI and cyber incident reporting | Backed by our NIST SP 800-171 implementation and SPRS score |
| 252.225-7008 | Restriction on acquisition of specialty metals | Drives domestic and qualifying-country sourcing of specialty alloys |
| 252.225-7009 | Restriction on acquisition of certain articles containing specialty metals | Governs the specialty metal content of delivered machined parts |
We source DFARS-relevant material and can provide material certifications and traceability from mill certificate through the finished part, which is what a prime needs to satisfy the specialty metals clauses on a delivered component. See our materials page for the alloys we run.
Buy American and Made in USA
The Buy American Act and related domestic-preference requirements favor components manufactured in the United States. All Wexmar machining is performed in house in Canastota, New York, so Buy American machined parts and domestic sourcing requirements are satisfied by where the work actually happens. Combined with DFARS-relevant material sourcing, that gives a program manager a clean domestic content story on the machining operation.
Registrations and identifiers
For a buyer setting us up as a defense vendor, here is the identity block.
- CAGE code 16AD7.
- UEI XY4KWNPR6ES5.
- SAM.gov registered and active.
- NAICS 332710, Machine Shops, and 332721, Precision Turned Product Manufacturing.
- Quality system ISO 9001 aligned, not certified.
- NIST SP 800-171 at 110 of 110 in SPRS.
Our DD Form 2345, the Joint Certification Program (JCP) agreement covering controlled technical data, is on file as an application, pending, and is not yet approved. We will update this posture when JCP approval is granted. Nothing on this page should be read as a claim to an export authorization we do not hold.
What we do and do not claim
Straight talk protects both sides. We are DFARS-relevant, hold NIST SP 800-171 at 110 of 110 in SPRS, are CMMC Level 1 with Level 2 in progress, and machine Made in USA with a Buy American posture. We are ISO 9001 aligned, not certified. We do not hold AS9100, we are not NADCAP accredited, and our JCP DD Form 2345 is pending, not approved. For the full program picture, see our government and defense machining page and our capabilities. To start a defense part, send the package through request a quote.