AENIGMA
Service-Disabled Veteran-Owned Small Business

AI that acts.Evidence that holds.

Aenigma is a federal AI transformation company. We put controls around AI systems that take real actions on your behalf, and we produce the written record an agency, a prime or an auditor can actually read.

UEI
CXYSEFL5QF54
CAGE
15PL3
CMMC Level 1
Affirmed
Set-aside
SDVOSB
What we do

Four lines of work

Every one of them starts from the same problem. Software is starting to take actions that used to need a person, and nobody can show their work afterward.

01

AI determination support

Federal civilian agencies owe a documented determination that each high-impact AI use meets the minimum risk management practices, with evidence behind it. That obligation is live now, not coming. Vendors selling into those agencies get asked the same questions through contract terms.

  • Facilitated assessment against 46 controls
  • Evidence collected and scored, gap register produced
  • Signed findings memo you can hand to a customer, a prime or a contracting officer
02

Runtime governance for agent actions

Most governance tooling watches. It cannot stop anything. We work on the layer where the action is either authorized or it is not, before it happens, and where the reason gets written down either way.

  • Policy checked at the moment of the action, not in a quarterly review
  • Consequential actions held for a named human with the authority to rule
  • Every decision written to a sealed, tamper-evident record
03

Unified operations reporting

Your tools do not talk to each other. Somebody on your team is opening six dashboards and rebuilding the same report by hand every month. We consolidate the sources into one scoped view per client, per site or per program.

  • One screen instead of six, scoped so a client sees only their own data
  • Identifier mapping confirmed once by a human, then enforced in the data layer
  • Built for multi-site and multi-tenant operators
04

Agentic automation and SaaS to AI migration

Twenty years of subscription software was built for people to click through. The work now is deciding what an agent should do instead, what it must never do, and who signs off in between.

  • Process mapped before anything is automated
  • Automation built with the approval gate in it from day one
  • Handed over operating, with the operator trained on it
The assessment

Determination support

The instrument scores what is enforced, not what is written down. A policy nobody checks scores at the bottom. That is the whole difference between this and a compliance checklist.

46Controls
4Defensive layers
7Minimum practices covered
10Business days at tier one

Two questions decide most of it, and in our experience almost nobody can answer either one on the first call.

  1. What is the dollar value, record count or classification above which your AI cannot act without a person?
  2. How often do your human approvers actually refuse? If the answer is never, the approval gate is decoration.
Tier 1

Readiness check

$12,500
10 business days

One high-impact use case. Scored gap register and a findings memo. Priced so a program office can buy it directly.

Tier 2

Determination package

$48,000
30 days

Up to three use cases, or one taken end to end. The full evidence package behind a determination, assembled and handed over.

Tier 3

Governed deployment sprint

$135,000
90 days

Controls built, instrumented and handed over operating. Where we build, an independent party takes the validation seat.

Fees credit forward in full. What you pay at one tier comes off the next engagement. And a purchase at or under the federal micro-purchase threshold of $15,000 can be made by a program office directly, without a schedule and without competitive quotes, where the price is reasonable and the research is documented.

Straight answers

Every claim, and how to check it

Most capability pages ask you to take their word for it. Here is ours on the left, with where you go to verify it yourself. On the right is what we will not say, no matter who asks.

What we claim

Verify independently
Service-Disabled Veteran-Owned Small Business, SBA certified
Check: SBA VetCert and the SAM.gov entity record
CAGE 15PL3 and UEI CXYSEFL5QF54, registration active
Check: SAM.gov entity search
CMMC Level 1 self-assessment affirmed, enterprise scope
Check: SPRS, UID S100069962, valid through 08 AUG 2027. Any contracting officer or prime can pull it.
Capture and compliance discipline across 17 and more federal submissions
That is capture discipline. We label it that way and never as performance history.
Governance work maps to the published federal minimum practices
Check: OMB M-25-21 section 4(b)

What we will not claim

Stated up front, in writing
We do not certify anyone as compliant
We produce evidence. The conclusion belongs to you and your auditors.
We do not claim past performance we do not hold
Ask us what we have delivered and you get the real list.
We do not claim air-gapped operation
What is true: it runs inside your boundary, against your own model endpoint and your own keys.
We do not pass off a cloud provider's authorization as ours
An infrastructure authorization does not cover the service layer built on top of it.
We do not name teaming partners who have not signed
We describe the credential instead, and we tell you that is what we are doing.
We do not grade our own homework
Where we both build and validate, the validation seat moves to another party or the claim comes out.
Contract ready

Credentials

AENIGMA LLC is a Wyoming limited liability company. Registered and award-eligible today, with the identifiers a contracting officer or a prime needs to look us up.

Unique Entity ID
CXYSEFL5QF54Active registration in SAM.gov
CAGE code
15PL3DoD contractor registry
Socioeconomic status
SDVOSBSBA certified, eligible for set-aside awards
CMMC
LEVEL 1Self-assessment affirmed in SPRS, UID S100069962, enterprise scope, valid through 08 Aug 2027. Satisfies DFARS 252.204-7025 where a Level 1 requirement applies.
Product service codes
D302 D306 D307 D399 R408IT systems development, integration, operations and program support
Primary NAICS
541512Seven codes registered including 541330 engineering services and 611430 professional training. Full list in the SAM.gov record.
Get in touch

Start the conversation

Prime, sub or commercial. Tell us what the work is and we will tell you straight whether we are the right shop for it.

Office
200 Sanatorium Road, Suite 101
Glen Gardner, NJ 08826
Entity
AENIGMA LLC, a Wyoming limited liability company

This opens your email app with the details filled in, addressed to ranger@aenigma.solutions. Nothing is sent until you send it.