Steve McKim, Founder & CEO of Heaviside AI, LLC, a small business, supports the proposed GSAR clause regarding data safeguarding in LLMs. He argues that the core architectural requirements are commercially feasible and suggests strengthening the language to prefer machine-verifiable evidence of deletion and implementation over mere written attestations.

FERZ, Inc. supports the GSA's effort to establish a baseline for safeguarding Government Data in LLM systems and offers thirteen targeted recommendations to improve the draft clause. The company argues that the clause should better distinguish between evidence of process (like monitoring and traceability) and evidence of pre-execution authorization for "consequential actions."

The Cyber Strategy Institute, a small business specializing in AI governance, supports the proposed GSAR clause 552.239-7001 but provides detailed technical recommendations to improve its implementation. They argue for role-scoped flowdowns, autonomy-based proportionality, and clearer measurement standards for unbiased AI principles.

Distributed Solutions, Inc. (DSI) supports the GSA's objective of protecting Government Data within LLM systems but argues for specific clarifications to the proposed GSAR clause. They advocate for distinguishing between improvements to acquisition applications (like workflow automation and RPA) and improvements to the underlying LLM to avoid unnecessary compliance burdens on non-AI-centric systems.

Ghost Mesh Inc. supports the proposed clause but argues that it lacks a verification mechanism for contractor attestation. They recommend requiring tamper-evident, independently verifiable records and "keep-local" inference to ensure compliance with data safeguarding and model integrity requirements.

DAY1044 Solutions, a small business cybersecurity and AI consulting firm, supports the proposed GSAR clause regarding data safeguarding in LLMs. They recommend specific revisions to ensure that compliance obligations are realistically achievable for small businesses, specifically by aligning requirements with the roles of system integrators and commercial market standards.