als with US Federal gov data, not just DoD, as the requirement comes from OPM), I have found that some DAA's are much happier to approve software where there is a company behind it that could be sued and not just a random group of people who would be a pain to track down and are likely in multiple countries.