The U.S. Department of Defense suspended CMMC Phase 2 for review; this is a market/regulatory risk for vendors serving regulated-defense compliance workflows, though GroundControl itself was not described as having a layoff, shutdown, or acquisition event.
Source