Classified Engagement Policy — VSI Technologies

Classification Notice

This document is UNCLASSIFIED and describes VSI's general classified engagement framework. Program-specific details, system security plans for classified programs, and operational security protocols for active classified engagements are maintained separately at appropriate classification levels. To initiate a classified engagement inquiry, use the contact information in Section 08.

// Table of Contents //

01Classified Engagement Framework 02Authorization & Facility Requirements 03Personnel Clearance Requirements 04OPSEC Protocols 05Classified System Architecture 06Classified Information Handling 07Engagement Tiers by Classification 08Classified Inquiry Contact

Classified Engagement Framework

VSI Technologies engages with classified government programs under a formal classified engagement framework that ensures all applicable security requirements, legal authorities, and operational security protocols are in place before any classified information is accessed or processed.

VSI's classified engagement capability has been developed in coordination with government program security officers and is designed to meet the requirements of applicable intelligence community directives, DoD security regulations, and agency-specific security classification guides.

Legal Authority

All classified engagements are conducted under the authority of a valid contract containing applicable security clauses, a signed DD Form 254 (Contract Security Classification Specification) for DoD programs, and a program-specific Security Classification Guide (SCG) received from the Contracting Officer.

Defense Security Cooperation

VSI maintains facility security clearance through the Defense Counterintelligence and Security Agency (DCSA) oversight. All classified engagements are coordinated with the VSI Facility Security Officer (FSO) before performance begins.

Authorization & Facility Requirements

The following facilities and authorizations are required or available for classified VSI engagements:

Facility Security Clearance (FCL)

VSI maintains a Facility Security Clearance at the appropriate level for current government programs. FCL level and scope are available to authorized government personnel through the National Industrial Security Program Operating Manual (NISPOM) managed systems.

Approved Facilities

Classified work is performed within VSI-controlled facilities that have received government approval for the applicable classification level, or within government-provided secure facilities (including SCIFs) as arranged in the program security plan.

SCIF Capability

VSI has access to Sensitive Compartmented Information Facility (SCIF) environments for programs requiring access to Sensitive Compartmented Information (SCI). SCIF access is coordinated with the government's Special Security Officer (SSO).

Visitor Control

All classified facility visits are managed through formal visitor control procedures. Visitors must present valid government-issued security clearance verification. Visit requests must be submitted through approved channels at least 72 hours in advance for routine visits.

Personnel Clearance Requirements

Personnel access to classified programs is strictly controlled:

Clearance Verification

All VSI personnel accessing classified information must possess a personnel security clearance at the appropriate level, verified through applicable government clearance verification channels (DISS, CVS, or agency-specific systems) before access is granted.

Need-to-Know

Possession of a security clearance does not automatically grant access to classified information. Each individual must have a documented need-to-know for the specific classified information or program. Need-to-know determinations are made by the program security officer or Contracting Officer Representative.

Continuous Evaluation

VSI cleared personnel are subject to applicable continuous evaluation (CE) programs as required by Executive Order 13764 and applicable security authority. VSI cooperates fully with government continuous evaluation processes.

Foreign National Restrictions

Access to classified programs is restricted to U.S. persons unless specific Foreign Disclosure authorization is obtained. VSI will not assign foreign national personnel to classified programs without explicit government authorization.

Clearance Inquiries

Government contracting officers and program security officers may verify VSI cleared personnel through DISS (Defense Information System for Security) or by contacting the VSI Facility Security Officer through official channels.

OPSEC Protocols

Operational Security (OPSEC) is a systematic process VSI applies to protect sensitive information associated with classified program activities from adversary collection and exploitation.

OPSEC Planning

An OPSEC plan is developed for each classified engagement in coordination with the government OPSEC officer. The plan identifies critical information, potential threats, vulnerabilities, and countermeasures specific to the program.

Communications Security

All communications regarding classified programs are conducted through approved secure channels. Commercial communications platforms (email, voice, messaging) are not used for classified information. VSI coordinates with the program on approved secure communications infrastructure.

Personnel OPSEC Awareness

All VSI personnel assigned to classified programs receive OPSEC training covering: identification of critical information, threat awareness, indicators and vulnerabilities, and application of countermeasures. Training is documented and records available to government security officials.

Social Engineering Controls

VSI personnel are trained to recognize and report social engineering attempts targeting classified program information. Suspicious contact reporting procedures are established for each classified engagement.

OPSEC Violation Reporting

Any actual or suspected OPSEC violation, unauthorized disclosure of classified information, or suspicious contact must be reported immediately to the VSI FSO and the government program security officer. VSI maintains a 24-hour reporting capability for classified program security incidents.

Classified System Architecture

VSI deploys AI systems in classified environments using architectures approved for the applicable classification level:

Air-Gap Architecture

For the highest classification levels, VSI deploys fully air-gapped AI systems with no external network connectivity. All data transfers between classification levels are accomplished through government-approved cross-domain solutions (CDS). System updates are delivered through approved offline processes.

Classified Cloud

For programs using government-authorized classified cloud environments, VSI deploys within the accredited classified infrastructure. No commercial cloud services are used for classified processing.

Hardware Security

Classified deployments use government-approved hardware with required tamper-evident seals and physical protection measures. Hardware disposal follows NSA/CSS EPL (Evaluated Products List) guidance for appropriate sanitization.

Software Assurance

All software deployed in classified environments undergoes code review and vulnerability assessment appropriate to the classification level. Software from unapproved sources is not installed in classified environments without government authorization.

Audit & Logging

Classified systems maintain comprehensive audit logs of all system activities, user actions, and data accesses. Audit logs are protected at the classification level of the system and reviewed per program requirements.

Classified Information Handling

VSI handles classified information in strict accordance with:

Executive Order 13526 (Classified National Security Information) and implementing directives
Intelligence Community Directives (ICDs) for SCI programs, including ICD 503 (IT Systems Security)
NISPOM (32 CFR Part 117) for industrial security requirements
Agency-specific classification guides and security operating procedures
Applicable Special Access Program (SAP) security requirements for SAP-accesses programs

Marking & Handling

All classified information produced, used, or stored by VSI under classified engagements is marked and handled per the applicable classification authority's guidance. VSI personnel are trained in proper marking, storage, transmission, and destruction of classified materials.

Storage

Classified materials are stored in GSA-approved security containers appropriate to the classification level. Combinations to security containers are changed upon assignment, compromise, or transfer of custodian.

Destruction

Classified information is destroyed using NSA/CSS EPL-listed destruction devices or by government-authorized destruction services. Destruction is documented with certificates of destruction available to government security officials.

Engagement Tiers by Classification Level

VSI's classified engagement capability supports the following classification tiers:

Classification	Facility Req.	Personnel Req.	System Req.	VSI Capability
CUI / Unclassified	Standard office	Background check	FedRAMP Moderate	Full — Standard
Confidential	GSA-approved storage	Confidential clearance	Accredited systems	Full — Coordinated
Secret	Approved facility	Secret clearance	Accredited, air-gap capable	Full — Cleared Personnel
Top Secret	Approved TS facility	TS clearance	TS accredited systems	Available — Program Specific
TS/SCI	SCIF required	TS/SCI + polygraph (prog.)	SCIF-accredited systems	Available — SSO Coordinated
SAP	SAP facility or SCIF	SAP access granted	Program-specific	Coordinated — Classified Briefing

Classified Inquiry Contact

To initiate a classified program inquiry:

Classified Engagement Initiation

Unclassified Inquiry (Initial Contact):
Email: government@vsitechnologies.ai
Subject: "CLASSIFIED PROGRAM INQUIRY"
Include: Agency, program type (unclassified descriptor), classification level anticipated, contracting vehicle

VSI Facility Security Officer:
Contact information provided to verified government security personnel through official channels

Program Security Officer Coordination:
VSI FSO will coordinate directly with the government Program Security Officer (PSO) once initial contact is established through unclassified channels

DD Form 254:
Contracting Officers may submit draft DD Form 254 for review to government@vsitechnologies.ai

All classified program discussions are conducted exclusively through approved secure channels after initial unclassified contact.

Security Notice

Do not transmit classified information through any channel not approved for the applicable classification level. This website, email, and all standard commercial communications channels are UNCLASSIFIED. VSI will never request classified information through unclassified channels.

// Document Authorization //

Issuing Authority

VSI Technologies Legal & Compliance Division

Contact

legal@vsitechnologies.ai

Document Control

Reviewed annually or upon material change