PreVeil押注CMMC强制令，让加密电子邮件成为国防采购必选品

做的是什么生意

PreVeil is an end-to-end encrypted email and file-sharing platform for organizations that handle sensitive data, installed as an overlay on Microsoft 365 or Google Workspace and marketed mainly to defense contractors that must meet CMMC, NIST 800-171 and ITAR rules.

启动资金：About $27M total raised, including a $20M Series C led by PSG (October 2022).

起因

PreVeil was founded in Boston in 2015 by former Apple and Airvana executives Randy Battat and Sanjeev Verma, building on MIT encryption research by CTO Raluca Ada Popa. The original pitch was end-to-end encryption that ordinary users can operate: data is encrypted on the device, no server, admin or even PreVeil can read it, and there is no single point of attack.

经过

The defense pivot came when NIST 800-171 and ITAR made CUI protection a contractual condition: PreVeil became the compliance path for small contractors that could not afford Microsoft's GCC High government cloud. PSG led a $20M Series C in October 2022 to expand beyond defense. DoD's CMMC 2.0 final rule (October 2024) and Phase 1 enforcement (November 2025) turned compliance into a purchase trigger, and by February 2026 PreVeil counted 2,500+ defense-contractor customers with 60+ perfect-110 CMMC certifications.

结果

Still running. On July 13, 2026 the Pentagon suspended CMMC Phase 2 — the third-party Level 2 certification due November 10, 2026 — citing prohibitive compliance costs, a severe assessor shortage, and harm to small suppliers, and opened a 60-day CMMC Reform Task Force review, leaving the regulatory tailwind the company bet on under reform.

可借鉴之处

初创公司可以借助监管规定获得客户基础，但同一监管机构也可能暂停它：向基础义务销售，而不是向特定的认证截止日期销售。