Brand Guidance for Cloud Service Providers

Historically, FedRAMP only allowed the use of the FedRAMP name and logo for cloud service providers meeting FedRAMP requirements and were deemed FedRAMP Certified. Due to popular demand, a cloud provider can use the FedRAMP name OR name and logo by following the guidance outlined below and throughout this guide.

FedRAMP Certified Cloud Service Providers

A cloud service provider with this level of certification may refer to their product or service as “FedRAMP Certified” when meeting these requirements:

  • Received an official letter from the FedRAMP management office designating their certification status
  • Meet and maintain the FedRAMP security requirements
  • Utilized a FedRAMP Independent Assessment Service
  • Must have their completed security authorization package readily available for a federal agency either within the FedRAMP secure repository (Connect.gov) or your FedRAMP compatible trust center.
  • Must have an active listing on the FedRAMP Marketplace. The use of the FedRAMP name and logo must clearly align with the product or service named within the assessment materials used to earn the FedRAMP Certified designation.
  • The product or service name must be listed on the cloud provider’s FedRAMP Marketplace dedicated product page.