FedRAMP Brand Use Policy

FedRAMP Name Trademark

The FedRAMP name is a registered trademark of GSA (USPTO registration number 5725620). Unauthorized use of the FedRAMP mark or confusingly similar marks that falsely suggest affiliation with, endorsement by, or certification from the FedRAMP program is prohibited and may constitute trademark infringement.

Non-Federal entities may only use the FedRAMP name and logo in compliance with the terms outlined in this guide. Non-Federal entities that are not current FedRAMP participants listed on the FedRAMP Marketplace do not have permission to use the FedRAMP name or logo.

Misuse of “FedRAMP”

  • Using “FedRAMP” or substantially similar marks to offer cloud security assessment or certification services in a manner likely to cause confusion about whether such services are officially part of the FedRAMP program.
  • Suggesting, implying, or stating that products, services, or organizations are FedRAMP-certified, FedRAMP-authorized, FedRAMP-sponsored, or FedRAMP-affiliated when they are not.
  • Creating marks that combine “Fed,” “Federal,” or “FedRAMP” with similar terms in ways likely to cause confusion with the official FedRAMP program.

Permitted Uses of “FedRAMP”

  • Truthful descriptive references to FedRAMP in marketing materials (e.g., “Our services help companies prepare for FedRAMP certification”). See “FedRAMP Marketplace Positioning Tips” for more examples.
  • Accurate statements about FedRAMP certification status for specific products/services. See “FedRAMP Marketplace Positioning Tips” for more examples.
  • Educational, editorial, or informational uses that clearly identify FedRAMP as a government program.
  • Use of “FedRAMP” in comparative advertising that is truthful and not misleading. See “FedRAMP Marketplace Positioning Tips” for more examples.
  • Unauthorized reproduction. Copying or reproducing the FR logo without the agency's permission infringes on their common law rights.
  • False implication of endorsement or affiliation. Using the logo in a way that suggests your product, service, or organization is officially endorsed, certified, or affiliated with the government program when it is not.
  • Modification or distortion of the logo. Altering colors, proportions, adding elements, or otherwise changing the logo in ways not authorized — this can misrepresent the FedRAMP program and dilutes the agency's common law rights. See “Incorrect Logo Usage” for examples.
  • Use outside the scope of any granted license or agreement. If GSA has authorized limited use (e.g., for a specific program, product, or time period), using the logo beyond those boundaries violates both the agreement and the underlying common law rights.
  • Commercial exploitation without authorization. Using the logo to sell, market, or promote goods and services without GSA's consent, particularly in ways that suggest official program participation or approval.
  • Use that disparages or tarnishes the FedRAMP program. Deploying the logo in contexts that damage the reputation or integrity of the FedRAMP program can constitute actionable misuse under unfair competition principles.
  • Passing off. Representing your own program, product, or organization as the government program itself, or close enough to cause public confusion about the source or sponsorship.

Logo and Name Violations

FedRAMP actively monitors proper use of the FedRAMP name and logo. This includes, but is not limited to, the use by any representatives such as advertising agencies, system integrators, resellers, partners, external events, etc. The following explains the general course of action for addressing logo violations:

  • Anyone who misuses the FedRAMP name and/or logo will be contacted in writing or by telephone/teleconference in coordination with GSA’s Office of the General Counsel.
  • FedRAMP will provide a distinct timeframe to correct the error(s). The timeframe will be dependent upon the medium in which the violation appeared and the severity of the violation.
  • Follow-up will be conducted to ensure that the error(s) has/have been corrected.

Certified Programs Using Similar Names

Organizations establishing security certification or authorization programs may not use names that create a likelihood of confusion with FedRAMP. The determination of likelihood of confusion considers factors including similarity of marks, similarity of services, channels of trade, and evidence of actual confusion. Organizations with questions about whether a proposed name would create confusion should contact FedRAMP.

Enforcement

GSA actively monitors and enforces its trademark rights. Entities believed to be using the FedRAMP mark improperly will be contacted and may be required to cease use, modify use, or provide disclaimers. Continued unauthorized use may result in legal action.

Failure to make the required changes may result in termination of a stakeholder’s participation in FedRAMP and/or legal action.

Questions about using the FedRAMP Logo? Please contact FedRAMP Communications at branding@fedramp.gov.