Is Blankpage a U.S. company?

Yes. Blankpage LLC is a United States company headquartered in Albuquerque, New Mexico, in Bernalillo County, with a Miami, Florida office opening. All work is delivered under U.S. jurisdiction and U.S. contracts.

Can you prepare us for a CMMC assessment?

Yes. We run a gap assessment against NIST SP 800-171 requirements using your actual systems — configurations, access controls, logging — not questionnaires alone. The output is a ranked remediation plan and the evidence artifacts an assessor expects. We do not issue certifications; we make sure you can earn one.

Can AI systems run fully on-premises or in a government cloud?

Yes. Blankpage deploys private LLMs on client-controlled infrastructure, including air-gapped and government-cloud environments. No client data transits third-party AI APIs, and the deployed model configuration, pipelines, and documentation transfer to the client as IP at exit.

Do you replace legacy systems in one cutover?

No. Big-bang replacements are where public sector modernization projects die. We modernize incrementally: new services at the edges, documented interfaces, reversible cutovers, and the legacy system retired only after its replacement has carried production load.

AI & Security for Government-Grade Institutions

Systems that serve the public do not get to fail quietly. We modernize them, secure them, and document everything.

The environment: long procurement, longer memory

Public sector digital transformation has a specific failure mode: the pilot works, the audit does not. Government-grade institutions carry systems that outlive administrations, vendors, and the engineers who built them — and every change happens under records retention, procurement rules, and public accountability.

That is not a reason to move slowly. It is a reason to move deliberately, with evidence at every step. We build for the examiner as much as for the operator, and we treat government cybersecurity services as an engineering practice, not a paperwork practice.

Legacy modernization without mission risk

Legacy system modernization fails when it is treated as replacement. We treat it as surgery. Strangle the old system incrementally: new capabilities at the edges, interfaces documented, every cutover reversible, the mission never offline.

The sequencing is a strategy problem before it is an engineering problem. Our technology strategy and compliance transformation practice maps dependencies, ranks risk, and produces a modernization roadmap an oversight body can actually approve.

CMMC and NIST 800-171: controls, not paperwork

NIST SP 800-171 defines the security requirements for protecting controlled unclassified information (CUI) in nonfederal systems. CMMC is the certification program that verifies defense-industrial suppliers have actually implemented those requirements rather than merely attested to them. Passing either starts with an honest gap assessment, not a policy binder.

We run that assessment against your real infrastructure — configurations, logs, access paths — then remediate through our cybersecurity and cyber resilience practice. If a control exists only on paper, we say so. Assessors will.

Private AI. Sovereign data. No exceptions.

Public sector AI has one non-negotiable: the data does not leave. We deploy private LLMs with full data sovereignty — models running inside your boundary, on your infrastructure or your government cloud, with no third-party API in the data path.

Thinking traces, not black boxes. Every model decision is loggable and reviewable, because the AI decided is not an answer an institution can give an oversight body.

Built next to the ecosystem that demands this

Blankpage operates from Albuquerque, New Mexico — inside a state whose economy is shaped by national laboratories and a dense defense supplier ecosystem. Government-grade assurance is not a vertical we added; it is the local standard. Our Albuquerque cybersecurity and AI practice carries that posture into every engagement.

Public sector digital transformation engagements start with a two-week Diagnostic Sprint: architecture review, control assessment, written findings with ranked risk. Design & Build runs six to twelve weeks. Clean exit, full IP transfer — your systems remain yours, including everything we build.

Frequently asked questions

Is Blankpage a U.S. company?: Yes. Blankpage LLC is a United States company headquartered in Albuquerque, New Mexico, in Bernalillo County, with a Miami, Florida office opening. All work is delivered under U.S. jurisdiction and U.S. contracts.
Can you prepare us for a CMMC assessment?: Yes. We run a gap assessment against NIST SP 800-171 requirements using your actual systems — configurations, access controls, logging — not questionnaires alone. The output is a ranked remediation plan and the evidence artifacts an assessor expects. We do not issue certifications; we make sure you can earn one.
Can AI systems run fully on-premises or in a government cloud?: Yes. Blankpage deploys private LLMs on client-controlled infrastructure, including air-gapped and government-cloud environments. No client data transits third-party AI APIs, and the deployed model configuration, pipelines, and documentation transfer to the client as IP at exit.
Do you replace legacy systems in one cutover?: No. Big-bang replacements are where public sector modernization projects die. We modernize incrementally: new services at the edges, documented interfaces, reversible cutovers, and the legacy system retired only after its replacement has carried production load.