Release notes

The Deep Fathom platform is now deployed on Microsoft Azure Government Cloud (GovCloud).
Why this matters:

• Data residency in US government-only Azure regions

• Meets the data sovereignty requirements for organizations handling Controlled Unclassified Information (CUI)

• FedRAMP-authorized infrastructure baseline

• Required for prime contractors and their supply chain managing export-controlled or sensitive defense information

This was a key milestone for our enterprise customers and an important step toward our own FedRAMP authorization roadmap.

The entire Deep Fathom interface has been rebuilt with a new design system — cleaner, more consistent, and built to scale with the platform.
What's new:

• 120+ new UI components with consistent visual language

• Improved information density — more data visible without overwhelming

• Better contrast and readability across all views

• Faster rendering for data-heavy screens like the controls dashboard

The design system is also the foundation for the Deep Fathom Outpost product, keeping both tools visually unified.

Deep Fathom now has a purpose-built CMMC Level 2 controls engine using the OSCAL (Open Security Controls Assessment Language) standard.
What this means for you:

• Full NIST SP 800-171 r2 control catalog with assessment objectives

• Traceable mapping from your evidence to specific control requirements

• Assessment-ready reporting that aligns with how C3PAOs evaluate compliance

• Foundation for automated SPRS score calculation

OSCAL is the data standard that CMMC assessors, the DoD, and tools like eMASS use. Building on it means your Deep Fathom data is portable and interoperable.

A major infrastructure update delivers significantly faster response times and improved reliability across the platform.
What changed:

• AI search is now powered by native PostgreSQL vector search — faster queries with no external dependencies

• Background jobs (document analysis, report generation) are now more reliable with better retry handling and observability

• Reduced average response time by \~40% for most operations

These are largely invisible improvements, but you should notice the platform feeling snappier and fewer timeouts during heavy analysis tasks.

Upload your policies, procedures, and system documentation — Deep Fathom will automatically analyze them and map them to CMMC controls.
Key capabilities:

• Drag-and-drop document upload (PDF, Word, text)

• Automatic control family identification and mapping

• Gap detection — surfaces controls with insufficient evidence coverage

• Evidence library to organize and track supporting artifacts

This replaces the spreadsheet-and-email approach most organizations use to manage compliance evidence today.