Secure Facilities and Cleared Environments
Maravilla Editorial Team · 2026-08-18 · 17 min read
In most buildings, the hard part of cleaning is the cleaning. In a secure facility, the cleaning is the easy part.
In most buildings, the hard part of cleaning is the cleaning.
In a secure facility, the cleaning is the easy part. The hard part is everything wrapped around it: who is permitted through the door, what investigation stands behind that permission, who walks with them, what may be removed from the space, what gets written down, and who is notified when any of it changes.
This is why facility security officers so often end up doing custodial work themselves, or paying escort hours to supervise a crew that cannot be left alone. The service exists; vendors who can operate inside the security envelope are scarce.
This guide explains how cleaning actually works in classified and access-controlled environments: the vocabulary, the personnel standards, the escort economics, and the documentation. It is written for contracting officers, facility security officers, and prime contractor sourcing teams evaluating whether a vendor understands the environment before letting them near it.
The short version:
- A facility clearance (FCL) is an eligibility determination about a *company*. A personnel clearance is about a *person*. They are separate, and a vendor needs the right combination for the work. - A company cannot buy or apply for an FCL on its own initiative. It must be sponsored in connection with a contract requiring classified access. - Access requires two things at once: a favorable eligibility determination and need-to-know. Eligibility alone is not access. - Uncleared crews are not necessarily disqualified, they are escorted, which converts a cleaning cost into a labor cost borne by your cleared staff. - Vetting is no longer periodic. Under Continuous Vetting, records are checked automatically throughout the period of eligibility rather than every five or ten years. - Contractors needing routine physical access to federally controlled facilities generally require PIV credentialing, which is a separate process from a clearance. - In a secure environment, the deliverable is not a clean room. It is a clean room plus a defensible record.
Why This Is a Personnel Security Problem, Not a Cleaning Problem
Custodial work has an awkward property in a secure facility: it requires unsupervised physical access to every space in the building, at the times of day when the fewest people are present, with a legitimate reason to handle every container in the room.
That is a near-perfect description of the access profile a security program is designed to constrain. Which is why the requirements attached to cleaning in these environments look wildly disproportionate to the task, and why they are not negotiable.
The practical consequence for the buyer is that the vendor selection criteria invert. In a commercial building, you evaluate quality, price, and reliability, and you assume any licensed vendor can legally do the work. Here, you first determine whether the vendor can lawfully be in the room at all. Quality and price are the second conversation.
The Vocabulary Your Vendor Should Already Know
If a vendor cannot use these terms correctly in a first meeting, that is your answer.
Facility clearance versus personnel clearance
Under the NISPOM rule at 32 CFR part 117, a facility clearance is defined as "an administrative determination that... an entity is eligible for access to classified information of a certain level" [§ 117.3(b)]. It attaches to the company, not to a person.
Two features of the FCL surprise vendors who have never held one.
It cannot be self-initiated. Eligibility runs through a contractual requirement: contractors are provided access to or possess classified information under a government contract, license, or agreement [§ 117.7(a)], and the entity eligibility determination is made by a Cognizant Security Agency [§ 117.9]. A company cannot decide to become cleared in advance of a need and simply file paperwork. It has to be sponsored.
It is location-specific in its obligations. A cleared contractor must "implement all applicable provisions of this rule at each of its cleared facility locations" [§ 117.7(e)]. Holding an FCL is an ongoing compliance program, not a certificate.
A personnel clearance is a separate determination about an individual, based on a personnel security investigation [§ 117.7(b)(1)(iv)].
"Authorized person" means two things, not one
This is the distinction most commonly muddled in vendor conversations. An authorized person is someone with a favorable determination of eligibility *and* need-to-know [§ 117.3(b)].
A cleared janitor does not automatically have access to every cleared space. Eligibility gets them into the category; need-to-know governs the room. Vendors who talk about clearances as if they were building keys have not worked in these environments.
Escort
An escort is a cleared person who accompanies and maintains constant observation [§ 117.3(b)]. It is a defined control, not an informal courtesy, and it is the mechanism that allows uncleared personnel to work in controlled space at all.
Reporting and self-inspection
Two obligations that tell you whether a vendor's program is real. Cleared contractors have affirmative reporting requirements to their Cognizant Security Agency, including adverse information [§ 117.8]. And they must conduct a "formal self-inspection at least annually," with senior management certifying in writing that the review was conducted [§ 117.7(h)].
Ask for the date of the last self-inspection. A vendor with a functioning program knows it without checking.
Cleaning in Secure and Classified Spaces: What Changes covers the operational differences in detail.
How Service Staff Are Actually Vetted
The vetting attached to a custodial position is not a single yes-or-no check. It is calibrated, and the calibration is driven by the position rather than by the job title.
Investigation scope follows position risk and sensitivity
Federal positions, including contractor positions, are designated using the Position Designation System, which assesses a position for risk level (high, moderate, or low) and sensitivity level (critical-sensitive, noncritical-sensitive, or special-sensitive). That designation determines what level of investigation the position requires, under the Federal Investigative Standards issued jointly by OPM and ODNI in December 2012.
This is why two custodial jobs in two federal buildings can carry entirely different screening requirements. The work looks identical. The position designation is not.
Vetting is continuous now, not periodic
The older model, an investigation at onboarding, a reinvestigation years later, and a long blind window between them, has been replaced. Under Continuous Vetting, automated record checks pull from criminal, terrorism, and financial databases as well as public records at any time during an individual's period of eligibility, with alerts assessed for validity before any investigative or adjudicative action. This sits inside the Trusted Workforce 2.0 reform effort begun in 2018, with the National Background Investigation Services platform as its technical backbone.
For a service contractor, this changes the operating discipline substantially. A workforce is no longer cleared once and forgotten. Eligibility is a live status that can change between one shift and the next, which means the vendor's HR and security functions have to be tightly coupled, and it means a vendor with high turnover and loose internal reporting is carrying risk that will eventually surface in your building.
PIV credentialing is a separate track
A clearance is about classified information. Routine physical access to a federally controlled facility is governed separately, through Personal Identity Verification credentialing: "a U.S. federal government-wide credential used to access federally controlled facilities and information systems at the appropriate security level," implemented under FIPS 201 and related NIST guidance.
Contractor employees are explicitly in scope: OPM credentialing standards cover employees of government contractors performing work for or on behalf of a federal department or agency. Background investigations for federal work generally trace to Executive Order 13467.
The practical point: "our people are cleared" and "our people are badged for your building" are different statements, and a competent vendor distinguishes them without being asked.
See Personnel Security Requirements for Facility Service Staff and Background Investigation Levels for Service Contractors.
Escort Procedures and the Cost Nobody Budgets
Here is the arithmetic that decides most secure-facility custodial contracts, and it rarely appears in the bid comparison.
An uncleared crew can work in controlled space under escort. Escort means a cleared person maintaining constant observation for the entire duration. So every hour of cleaning consumes an hour of your cleared staff's time.
Run the numbers on that. Four hours of nightly cleaning becomes four hours of a cleared employee: someone whose loaded labor cost is typically several times a custodian's, sitting in a corridor. Annualized, the escort cost frequently exceeds the entire cleaning contract, while also producing predictable secondary effects: cleaning gets deferred when no escort is available, coverage becomes irregular, and your security staff quietly begin resenting the arrangement.
Which is why organizations in this position tend to arrive at one of three answers:
1. Escort an uncleared crew, lowest contract price, highest true cost, worst consistency. 2. Have cleared staff clean their own spaces, no vendor cost, real opportunity cost, and typically the least consistent result of the three. 3. Contract a vendor whose personnel meet the access requirements, highest contract price, lowest total cost, and the only option that produces consistent coverage without consuming cleared labor.
The correct comparison is never the hourly rate. It is the hourly rate plus the escort burden plus the deferred-cleaning consequences. Any vendor who cannot help you build that comparison has not worked in this market.
Escort Procedures and Controlled Access Cleaning walks through how escorted work is structured when it is the right answer.
Compartmented and Accredited Spaces
Some spaces sit under stricter controls than the rest of a cleared facility. Sensitive Compartmented Information Facilities are the most commonly encountered example, and access to them is governed by the accrediting authority's requirements rather than by the building's general security plan.
In these environments the constraints tighten in ways that directly affect custodial work: what may be brought in, what may be taken out, which surfaces and equipment may be touched at all, whether cleaning may occur while the space is operational, and who must be present. Electronic devices, including equipment a cleaning crew would consider unremarkable, such as a phone used for checklist photos, are commonly prohibited.
The governing rule for a vendor is simple and absolute: the accrediting official's standing operating procedure controls, and nothing else does. Not the vendor's own best practice, not what worked at another site, not a general industry standard. A vendor who proposes their standard process for a compartmented space, rather than asking to be briefed on yours, has told you something important.
SCIF Environments: What Vendors Must Understand covers this in more depth.
Chain of Custody and Documentation
In an ordinary building, trash is trash. In a secure facility, the contents of a container are a classification question before they are a waste question, and the cleaning crew is the last set of hands on them.
That produces requirements that have no commercial equivalent:
- Waste streams are separated by classification, not by material. Classified waste follows a destruction process; it does not go in a dumpster. Crews must know, unambiguously, which containers they are permitted to touch. - Removal from the space is a controlled event. What leaves, when, by whom, witnessed by whom. - Found material has a procedure. A document left on a desk, an unsecured drive, an open container — the crew's correct action is defined in advance, and "tidy it away" is never it. - Records are contemporaneous and auditable. Who was in the space, when they entered and left, what was done, what was removed, who observed it. - Incidents get reported, not absorbed. This connects directly to the cleared contractor's reporting obligations under 32 CFR 117.8. A vendor whose instinct is to handle problems quietly is a liability in this environment.
The organizations that do this well treat the documentation as the deliverable and the cleaning as the byproduct. That inversion is the whole difference between a commercial janitorial vendor and one that can hold this work.
See Chain of Custody and Documentation in Secure Facilities.
Data Centers and Critical Infrastructure
Adjacent to the cleared world, and often confused with it: facilities that are not classified but are operationally critical.
The controls here derive from uptime and equipment integrity rather than from classification. Particulate control matters because dust is a hardware failure mode. Electrostatic discharge protocols matter because a static event can destroy equipment worth more than the annual cleaning contract. Water and standard chemicals may be restricted or banned outright near energized equipment. Access is typically escorted, logged, and camera-monitored. Work windows are narrow and inflexible.
The screening requirements are usually lighter than in a classified facility, but the operational discipline is comparable and the consequences of getting it wrong are immediate and measurable.
See Data Center and Critical Infrastructure Cleaning Protocols and the Data Centers & Critical Facilities service page.
What to Ask a Cleaning Subcontractor
For contracting officers and prime contractor sourcing teams, eight questions separate the vendors who understand this environment from the ones repeating language from a proposal template.
1. Do you hold a facility clearance? At what level, and under what sponsorship? 2. How many of your personnel currently hold eligibility, at what level, and what is your annual turnover in that group? 3. Describe your process when an employee's eligibility status changes mid-contract. 4. How do you handle a space where your crew must be escorted, and how do you help us cost that? 5. Walk me through your first action when a crew member finds unsecured material. 6. What does your access and activity record contain, and how long is it retained? 7. When was your last formal self-inspection, and who certified it? 8. Which of your current contracts most resembles this environment? *(Expect a general answer. A vendor who names specific secure sites and their configurations is demonstrating exactly the discretion problem you are screening for.)*
Question eight is the one that reveals the most. In this market, a vendor's willingness to describe other clients' security arrangements is a direct preview of how they will describe yours.
Working With Maravilla
Maravilla Cleaners is a certified small business (SBE/CBE), SAM.gov registered, based in Florida. We hold no facility clearance today, and we say so directly rather than let a vague answer do the work: our fit in access-controlled buildings is escorted, uncleared custodial support, operating inside whatever discretion and reporting protocol your facility security officer sets. Our capability statement - certifications, NAICS codes, and registration identifiers - is available on request.
Request our capability statement · Teaming inquiry
The Complete Secure Facilities Library
- Cleaning in Secure and Classified Spaces: What Changes - Personnel Security Requirements for Facility Service Staff - Escort Procedures and Controlled Access Cleaning - SCIF Environments: What Vendors Must Understand - Chain of Custody and Documentation in Secure Facilities - Background Investigation Levels for Service Contractors - Data Center and Critical Infrastructure Cleaning Protocols
Related guides
- Government Cleaning and Facility Maintenance Contracts · Set-Aside Contracting: HUBZone, MBE, and Small Business
Related pages
- Government Hub & Capability Overview · Federal Facility Maintenance · SLED Contracts — State, Local & Education · Secure & Classified Spaces · GSA Schedule Services · Certifications · Past Performance · Teaming & Subcontracting · Data Centers & Critical Facilities
Frequently Asked Questions
What is the difference between a facility clearance and a personnel clearance? A facility clearance is an administrative determination that a company is eligible for access to classified information at a given level (32 CFR 117.3(b)). A personnel clearance is a determination about an individual, based on a personnel security investigation. A company can hold an FCL while most of its employees hold no clearance at all, and cleared individuals can work for an uncleared company in some arrangements.
Can a cleaning company just apply for a facility clearance? No. Eligibility arises in connection with a contract, license, or agreement requiring classified access (32 CFR 117.7(a)), and the determination is made by a Cognizant Security Agency (§ 117.9). Sponsorship is required — a company cannot obtain an FCL speculatively.
Do cleaning crews need security clearances to work in a federal building? Not always. Many federal facilities are not classified environments, and routine physical access is handled through PIV credentialing rather than clearances. Classified spaces are different, and there the requirement is either cleared personnel or escorted uncleared personnel.
What does it mean that an escort is required? An escort is a cleared person who accompanies uncleared personnel and maintains constant observation throughout (32 CFR 117.3(b)). Every hour the crew works consumes an hour of cleared staff time, which is why escorted arrangements often cost more in total than a higher-priced cleared vendor.
Does having a clearance give a janitor access to every secure space? No. Access requires a favorable determination of eligibility *and* need-to-know. Eligibility is necessary but not sufficient; access is granted room by room, function by function.
How are custodial staff screened for federal work? Screening depth follows the position's designated risk and sensitivity level under the Position Designation System, applying the Federal Investigative Standards issued by OPM and ODNI in December 2012. Two custodial positions in two buildings can require very different investigations.
What is Continuous Vetting? Automated, ongoing record checks — criminal, terrorism, financial, and public records — run at any time during a person's period of eligibility, rather than only at periodic reinvestigation. It is part of Trusted Workforce 2.0, begun in 2018.
Can cleaning crews work inside a SCIF? Only under the accrediting authority's standing operating procedure, which governs entry, escort, permitted equipment, and timing. There is no general industry answer, and a vendor who offers one should be treated with caution.
How is cleaning in a data center different? The drivers are particulate control, electrostatic discharge protocols, restrictions on water and chemicals near energized equipment, and narrow work windows. Screening is usually lighter than in classified facilities; operational discipline is comparable.
Do you currently service classified or secure facilities? Not today. Maravilla holds no facility clearance, so any work in access-controlled buildings runs as escorted, uncleared custodial support - the crew works under your facility security officer's direct supervision, never independently in controlled space. If a contract requires FCL sponsorship, that determination runs through the contracting relationship, not something a vendor can self-initiate - the same rule this guide explains above.
Request Our Capability Statement
For contracting officers, facility security officers, and prime contractors evaluating an escorted, uncleared custodial subcontractor: our capability statement covers certifications, registration identifiers, and geographic coverage.
Request the capability statement · Start a teaming conversation
*This guide summarizes publicly available federal requirements in plain language for procurement and facility management purposes. It is not legal advice and does not constitute security guidance for any specific facility. Requirements vary by agency, accrediting authority, contract, and site. Citations reflect the sources and dates listed at the end of this document. Always follow your facility's governing security plan and standing operating procedures.*