Procurement Information
For Contracting Officers
Vendor registration data, NAICS codes, set-aside eligibility, and core competencies — everything needed to evaluate and award work to CanaStack Solutions.
Business Profile
| Legal Name | CanaStack Solutions LLC |
| Business Type | Limited Liability Company (LLC) |
| Entity Status | Active |
| Business Size | Small Business (verified) |
| Location | Richmond, VA |
| Year Established | 2026 |
SAM.gov Registration
| Unique Entity ID (UEI) | XBS2C6ZNJG85 |
| CAGE Code | Pending assignment |
| Registration Status | Active |
Virginia Supplier Portal (eVA)
| VLIN | VA10134634 |
| Vendor Customer Code | SUP360848 |
| eVA Status | Active |
NAICS Codes
Set-Aside Eligibility
VetCert application in process with SBA. Carlos Infante served 8 years USMC (0311 / 8152), including OIF and embassy security duty. SDVOSB status will be confirmed upon SBA certification.
Verified small business under all applicable NAICS codes.
Note: Virginia DMBE SWaM certification as a Service-Disabled Veteran Business is being pursued in parallel for Virginia state procurements.
Core Competencies
Full-stack application development with NIST 800-171 compliance controls integrated from Sprint 1. Scope defined before development begins. Fixed-price delivery with 12-month post-delivery warranty. NAICS: 541511, 541512.
Gap analysis against CMMC Level 2 (NIST SP 800-171), System Security Plan (SSP) development, Plan of Action & Milestones (POA&M), and SPRS score submission support. Note: CanaStack is not a C3PAO and does not perform certification assessments. NAICS: 541690.
Integration of AI and large language model capabilities into existing systems using on-premise GPU infrastructure. No cloud API data dependency. Suitable for federal environments requiring data residency controls. NAICS: 541511, 541512.
CI/CD pipeline design and implementation with automated security scanning, policy-as-code enforcement, and compliance gate automation. Reduces manual compliance overhead by embedding controls into the delivery pipeline. NAICS: 541511, 541519.
Differentiators
- 15 years DoD classified systems experience — Carlos has operated in federal environments since 2011. CanaStack is a new company, not a new career.
- Fixed-price contracts — every engagement is scoped, priced, and contracted before work begins. No time-and-materials creep. No surprise cost overruns.
- 12-month warranty — post-delivery defect warranty is a contractual commitment included in every engagement at no additional cost.
- Compliance-first architecture — NIST 800-171 controls are designed in, not retrofitted. Compliance artifacts are a byproduct of development, not a separate audit preparation effort.
- On-premise AI infrastructure — AI integration work runs on dedicated on-premise GPU hardware. No external cloud API data dependency for inference workloads.
- Single point of accountability — Carlos personally manages and delivers every engagement. No subcontracting, no junior staff rotations, no account manager buffer between the client and the engineer.
Past Performance
Full-stack operations dashboard integrating GitLab REST API for pipeline and deployment monitoring. Implemented NIST 800-171-aligned audit logging (control 3.3.1), role-based access controls, and automated alert routing. Delivered on fixed-price basis with full documentation.
CanaStack is actively pursuing first federal and state contract awards in Q3–Q4 2026. References and project documentation available upon request.
Contract Terms & Administration
| Contract Types | Fixed-Price (FFP); Fixed-Price with milestone-based invoicing |
| FAR Compliance | Contracts structured to align with applicable FAR provisions |
| Purchase Orders | Accepted |
| Payment Terms | Net 30; milestone invoicing available |
| Subcontracting | None — all work performed by CanaStack principal |
| Teaming | Open to prime/sub teaming arrangements |