A non-government or contractor system is an unclassified information system owned or operated by or for a contractor, which may process, store, or transmit covered defense information.

Source: CFR 252.204–7012 Safeguarding covered defense information and cyber incident reporting.