{ "meta": { "last_change": "2026-08-21T12:51:24.746Z", "produced_by": "General Services Administration" }, "data": { "Products": [ { "fedramp_id": "F1607067912", "name": "18F - 18F Cloud.gov", "cloud_service_provider": "18F - 18F Cloud.gov", "cloud_service_offering": "CG-TTS - Cloud.Gov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cloud.gov%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2016-05-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2016-08-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2017-02-02T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 19, "reuse": 18, "ready_status": "Not Active", "ready_date": "2016-05-20T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2016-08-09T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2017-02-02T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2017-02-02T20:00:00.000Z", "annual_assessment": "2011-01-18T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "Alcohol and Tobacco Tax and Trade Bureau", "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Cybersecurity & Infrastructure Security Agency", "Defense Information Systems Agency", "Department of Health and Human Services", "Department of Labor", "Environmental Protection Agency", "Federal Deposit Insurance Corporation", "Federal Election Commission", "Federal Retirement Thrift Investment Board", "General Services Administration", "Library of Congress", "Millennium Challenge Corporation", "National Science Foundation", "Office of Natural Resources Revenue", "Office of Personnel Management", "Social Security Administration", "United States Trade and Development Agency" ], "agency_reuse": [ "" ], "service_description": "Cloud.gov is designed and operated by US government workers, for US government work. Cloud.gov reduces the barriers to rapid, incremental, compliant, secure, and scalable delivery of government services by all government agencies, leveraging best-of-breed modern practices. Cloud.gov provides a Platform-as-a-Service (PaaS) based on Cloud Foundry, enabling instant provisioning of services and environments, easy deployment of applications, and rapid scaling to match demand. Cloud.gov includes tools to quickly incorporate 800-53 NIST control documentation into easily-prepared and comprehensive System Security Plans (SSPs) for evaluation by local agency information security organizations or FedRAMP, reducing the time it takes for teams to gain Authority To Operate (ATO).", "fedramp_msg": "CG-TTS - Cloud.Gov previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "inquiries@cloud.gov", "security_email": "support@cloud.gov", "website": "https://www.cloud.gov/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2335047392", "name": "3rd Eye Technologies LLC.", "cloud_service_provider": "3rd Eye Technologies LLC.", "cloud_service_offering": "Mystic Message Archival", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/3rdEye%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-01-19T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2024-06-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2024-10-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-01-31T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": "2024-01-19T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-06-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-10-01T20:00:00.000Z", "cert_date": "2025-01-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-01-31T20:00:00.000Z", "annual_assessment": "2011-09-30T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Cybersecurity & Infrastructure Security Agency", "Department of Justice", "United States Marshals Service" ], "agency_reuse": [ "" ], "service_description": "Mystic Message Archival provides capture and archiving of SMS/MMS data through encrypted channels receiving data directly from cellular carriers. The data is stored on behalf of the agency it is being collected for in an encrypted content and data storage for retention based on each agencies policies. APIs make it possible to retrieve this data for later usage. All data is only accessibly by authorized personnel of each agency. Data is also exportable through a user interface which requires authentication through an identity management system vetted by each agency. Data is not accessible by anyone beyond the agencies scope and access is protected through whitelisting of IP addresses and firewalls at a network level. The authorization boundary is what dictates the realm of what is accessible in our platform.", "fedramp_msg": "", "sales_email": "info@t3rdeyetech.com", "security_email": "support@t3rdeyetech.com", "website": "https://3rdeyetechinc.com/mystic-message-archival/", "uei": "UZYNJMEQGAY4", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Legal & Policy", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2617641654", "name": "911inform", "cloud_service_provider": "911inform", "cloud_service_offering": "911inform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/911%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-03-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "911inform is a secure, cloud-based emergency response and situational intelligence platform designed for federal and enterprise environments requiring real-time visibility and coordinated response during critical incidents. Delivered within a FedRAMP-aligned SaaS architecture, the platform provides a centralized command-and-control interface for managing emergencies across facilities and agencies.\n\nAt its core is 911inform’s patented Location Discovery Solution (LDS), a Ray Baum’s Act-compliant technology that delivers precise, dynamic location data for 911 calls across PBX, softphone, and mobile devices. The platform enhances emergency response through patented interactive mapping, real-time cellular 9-1-1 call detection with location reporting, and automated multi-channel notifications.\n\n911inform enables secure communications and interoperability between organizations and first responders, delivering real-time situational intelligence to improve coordination and decision-making.\n\nDesigned for scalability and rapid deployment, 911inform integrates with existing telephony, security, and IT infrastructure while maintaining role-based access control, auditability, and secure data handling.\n\n \n\nSERVICES:\n\nRAY BAUM's Act Compliance\n\nKari’s Law Compliance\n\nCellular 9-1-1 Call reporting\n\nInteractive mapping with routing\n\nNotification and messaging services\n\nFirst Responder Coordination\n\nEmergency Location Services", "fedramp_msg": "", "sales_email": "govsales@911inform.com", "security_email": "security@911inform.com", "website": "https://911inform.com/", "uei": "W2GGANP2APL9", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Law Enforcement" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2532557612", "name": "A-LIGN", "cloud_service_provider": "A-LIGN", "cloud_service_offering": "A-SCEND", "logo": "https://www.fedramp.gov/assets/img/logos/3PAO_logos/ALIGN%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-08-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-09-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2025-09-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-08-27T20:00:00.000Z", "ip_prog_date2": "2025-09-02T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2025-09-17T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-09-17T20:00:00.000Z", "annual_assessment": "2011-09-04T04:00:00.000Z", "independent_assessor": "RISC Point", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "A-LIGN’s A-SCEND platform, an AI-powered audit management solution that streamlines evidence collection, accelerates review cycles, and enhances collaboration throughout the process.\n \nPurpose-built for frameworks like FedRAMP 20x, A-SCEND helps automate the authorization process, from machine-readable evidence generation to AI-assisted validation, reducing preparation time and manual effort.", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class B Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "Sales@a-lign.com", "security_email": "FedRAMPaccreditation@a-lign.com", "website": "https://www.a-lign.com/a-scend", "uei": "Q76FLNZDM992", "small_business": false, "business_categories": [ "Collaboration", "Customer Service", "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2000174962", "name": "Abbott, Inc.", "cloud_service_provider": "Abbott, Inc.", "cloud_service_offering": "LibreView for US Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Newyu%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-10-15T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-03-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-05-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-10-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-03-12T20:00:00.000Z", "cert_date": "2020-05-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-05-12T20:00:00.000Z", "annual_assessment": "2011-03-08T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "LibreView is intended for use by patients, caregivers and healthcare professionals to assist people with diabetes and their healthcare professionals in the review, analysis and evaluation of historical glucose meter data to support effective diabetes management. LibreView is developed, distributed, and supported by Abbott, a major manufacturer of glucose monitoring devices. Trademarks are the property of their respective owners.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "adcsecops@abbott.com", "website": "https://www.libreviewgov.com/", "uei": "", "small_business": false, "business_categories": [ "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2425960757", "name": "Abnormal AI", "cloud_service_provider": "Abnormal AI", "cloud_service_offering": "Abnormal AI for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Abnormal%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-07-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-03-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-07-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-03-12T20:00:00.000Z", "cert_date": "2025-04-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-11T20:00:00.000Z", "annual_assessment": "2011-03-11T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "Abnormal AI for Government (Abnormal Gov) is a cloud-native, API-based offering that provides holistic email security for cloud email platforms – Microsoft365 and Google Workspace, against the full spectrum of email attacks including advanced phishing, fraud, account compromise, supply chain compromise, user-reporting phishing, and more.\r\nThe platform connects via API to analyze thousands of signals from multiple data sets and precisely baseline known behavior of every employee within an organization and every vendor within the supply chain. Autonomous AI models enable Abnormal Gov to detect anomalous activity and stop never-before-seen attacks quickly and accurately. The platform also serves as an AI Security Co-worker by fully automating the triage and remediation of user-reported emails. AI models judge user-reported emails as safe, spam, or malicious and automatically remediate malicious emails across all affected users using AI, eliminating any manual intervention by security analysts. Additionally, AI models automatically learn the behavioral preferences of every employee through their folder movements of graymail and autonomously declutter inboxes from unwanted mail thereby boosting employee productivity.\r\n\r\nAbnormal Gov’s cloud email security product suite includes Inbound Email Security, Email Account Takeover Protection, AI Security Mailbox, Email Security Posture Management, and Email Productivity. The platform leverages a multi-tenant government cloud computing environment and is available for public, federal, state, local, and tribal governments.", "fedramp_msg": "N/A", "sales_email": "govsales@abnormal.ai", "security_email": "govsecurity@abnormal.ai", "website": "https://abnormal.ai/", "uei": "C1MPKNUNE761", "small_business": false, "business_categories": [ "Communication", "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2307441316", "name": "Absolute Security", "cloud_service_provider": "Absolute Security", "cloud_service_offering": "Absolute Secure Endpoint Product Suite", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Absolute%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-12-13T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2024-05-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2024-08-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": "2022-12-13T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-05-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-08-12T20:00:00.000Z", "cert_date": "2025-03-04T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Institutes of Health", "fedramp_auth": "2025-03-04T20:00:00.000Z", "annual_assessment": "2011-01-15T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Environmental Protection Agency", "FHFA Office of the Inspector General", "Fermi National Accelerator Laboratory", "National Heart, Lung, and Blood Institute", "VA Office of the Inspector General" ], "agency_reuse": [ "" ], "service_description": "Absolute Secure Endpoint offers an agent-based endpoint resilience solution powered by Absolute Persistence®; a patented technology embedded in the firmware of over 600 million devices. This unique technology ensures an unbreakable connection between endpoints and the Absolute Secure Endpoint SaaS platform, serving as a trusted source of truth for device and application health. It automates self-healing for mission-critical applications and security controls while providing a robust lifeline for protecting at-risk devices and data. Organizations can locate, freeze, and wipe lost or stolen devices in accordance with NIST standards, enabling IT and security teams to enhance cyber resilience, strengthen security posture, and maintain compliance.\n\nKey Capabilities:\nThe Absolute Secure Endpoint suite allows customers to remotely manage their endpoint devices through a Web UI (Customer Center (CC) Console) or Public APIs, delivering the following features:\n• Track Hardware: Monitor and manage device inventories.\n• Measure Device Usage: Analyze usage patterns to optimize resources.\n• Monitor Installed Software: Streamline compliance and software audits.\n• Assess Security Posture: Gain insights into endpoint security.\n• Monitor Critical Application Health: Ensure mission-critical applications run optimally.\n• Detect Unauthorized Device Movement: Prevent unauthorized access and data breaches.\n• Remotely Freeze Devices: Lock devices to prevent misuse.\n• Remotely Delete Data: Securely wipe sensitive information when necessary.\n• Enable Firmware Protection: Safeguard devices at the firmware level.\n• Make Critical Applications Self-Healing: Automatically restore essential applications.\n• Identify Sensitive Information on Devices: Detect and classify sensitive data.\n• Remotely Query & Remediate Devices at Scale: Address issues across large device populations.\n• Comply Module for Secure Endpoint: Strengthen endpoint compliance with advanced tools.\n\nSupported Use Cases:\nThe suite addresses a wide range of operational and security challenges:\n• Device Lifecycle Management: Simplify provisioning, maintenance, and decommissioning of devices.\n• Automate Hardware Audits: Improve audit accuracy while reducing manual effort.\n• Automate Software Audits: Ensure software compliance across endpoints.\n• Improve Help Desk Efficiency: Speed up the resolution of device issues.\n• Find and Fix Vulnerabilities: Detect and remediate endpoint weaknesses.\n• Enforce Security Standards: Apply consistent security policies across the organization.\n• Detect Endpoint Risks: Monitor and respond to emerging threats.\n• Respond to Endpoint Risks: Execute rapid, effective countermeasures.\n• Provide Evidence of Compliance: Demonstrate adherence to regulatory standards.\n• GDPR Compliance: Protect personal data and meet privacy requirements.\n• Next-Generation Cyber Resilience: Defend against evolving cyber threats with advanced protection.\n• Enterprise Security and Compliance: Meet rigorous security and regulatory requirements.\n• Firmware-Embedded Resilience: Protect devices persistently at the firmware level.\n• Validation of Secure and Compliant Devices: Ensure only compliant devices access corporate networks.\n• Optimized Remote Work Security: Strengthen security for remote and hybrid work environments.\n• Automated Remediation for Incidents: Automatically address critical errors and system issues to ensure seamless operation and stability.\n\nWith its innovative technology, advanced remediation capabilities, and comprehensive features, Absolute Secure Endpoint empowers organizations to build stronger, more resilient endpoint security ecosystems tailored to modern challenges.", "fedramp_msg": "N/A", "sales_email": "fedramp@absolute.com", "security_email": "fedcompliance@absolute.com", "website": "https://www.absolute.com/", "uei": "PN3DGMTHLXY4", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1834336116", "name": "Accenture Federal Services", "cloud_service_provider": "Accenture Federal Services", "cloud_service_offering": "Accenture Extended Detection and Response (XDR) for government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Accenture%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-12-10T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-10-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-01-28T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-12-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-10-18T20:00:00.000Z", "cert_date": "2020-01-28T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-01-28T20:00:00.000Z", "annual_assessment": "2011-10-18T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Retirement Thrift Investment Board", "Office of Financial Research", "Office of Natural Resources Revenue" ], "agency_reuse": [ "" ], "service_description": "Accenture Extended Detection and Response (XDR) for government service is a proactive security platform designed for Federal agencies and customers. This scalable threat monitoring service enables all Continental United States (CONUS) government entities trusted and reliable cyber defense at a fraction of the cost of traditional 24/7 in-house incident response programs. XDR provides security monitoring using real-time threat intel and Security Orchestration, Automation and Response (SOAR) capabilities to decrease the mean time to resolution on all security incidents. XDR is built in the cloud to provide maximum availability and scalability.", "fedramp_msg": "N/A", "sales_email": "xdr.sales@afs.com", "security_email": "xdr.compliance@afs.com", "website": "https://www.accenture.com/us-en/industries/accenture-federal-services", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1404043549", "name": "Accenture Federal Services", "cloud_service_provider": "Accenture Federal Services", "cloud_service_offering": "Accenture Federal Cloud ERP", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Accenture%20Logo.png", "status": "FedRAMP Certified (In Remediation)", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2016-03-21T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2016-06-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2016-06-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" }, { "date": "2026-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Authorized to FedRAMP Certified (In Remediation). Under remediation for not following \"Addressing FedRAMP Communication\" rule. See Notice 0016" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2016-03-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2016-06-20T20:00:00.000Z", "cert_date": "2016-06-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2016-06-24T20:00:00.000Z", "annual_assessment": "2011-08-11T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Energy Regulatory Commission", "National Science Foundation" ], "agency_reuse": [ "" ], "service_description": "Accenture Federal Cloud ERP is a secure cloud offering delivering virtualized back-office ERP solutions, covering Financial Management, Property/Asset Management, HR and Payroll, to US federal customers. Accenture leverages Oracle applications (E-Business Suite, PeopleSoft, OBIEE, Hyperion) and other COTS applications (Sunflower), cloud technology and assets from 20+ years of experience to help customers to meet their unique mission requirements.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "FedRAMP@afs.com", "website": "https://www.accenture.com/us-en/afs-industry-index.aspx", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2106555313", "name": "AchieveIt Online, LLC", "cloud_service_provider": "AchieveIt Online, LLC", "cloud_service_offering": "AchieveIt", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/AchieveIt%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-12-10T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-02-11T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-07-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-12-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-02-11T20:00:00.000Z", "cert_date": "2021-07-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-07-29T20:00:00.000Z", "annual_assessment": "2011-02-11T04:00:00.000Z", "independent_assessor": "Prescient Security, LLC.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "4", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "AchieveIt helps federal government agencies manage mission critical plans and initiatives. Our cloud-based software platform empowers teams to focus on executing strategic initiatives instead of working on manual tasks. With AchieveIt, leaders can monitor progress on key plans and initiatives in real-time using a single, automated platform that establishes uniformity and visibility across plans and initiatives, promotes accountability throughout the agency, and enables informed decision-making. Trusted by organizations such as the Department of Veterans Affairs, The Joint Pathology Center, and the United States Air Force, AchieveIt accelerates IT modernization efforts by helping federal agencies plan, manage, and report their mission-critical plans and initiatives.", "fedramp_msg": "N/A", "sales_email": "sales@achieveit.com", "security_email": "fedramp@achieveit.com", "website": "https://www.achieveit.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1302201919", "name": "Acquia Inc.", "cloud_service_provider": "Acquia Inc.", "cloud_service_offering": "Acquia Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Acquia%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-05-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2016-03-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2016-04-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 27, "reuse": 29, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2014-05-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2016-03-17T20:00:00.000Z", "cert_date": "2016-04-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2016-04-13T20:00:00.000Z", "annual_assessment": "2011-05-21T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "PaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1902240018", "csp": "MDRC", "cso": "SPROUT", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2501644859", "csp": "Vibrent Health", "cso": "Digital Health Research Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Agency for Healthcare Research and Quality", "Argonne National Laboratory", "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Bureau of Economic Analysis", "Commodity Futures Trading Commission", "Corporation for National & Community Service", "Department of Education", "Department of Transportation", "Department of the Treasury", "Federal Deposit Insurance Corporation", "Food and Drug Administration", "Health Resources and Services Administration", "Internal Revenue Service", "Justice Management Division", "NIH/National Institute on Alcohol Abuse and Alcoholism", "National Endowment for the Arts", "National Institute of Standards and Technology", "National Oceanic and Atmospheric Administration", "National Telecommunications and Information Administration", "Nuclear Regulatory Commission", "Office of Justice Programs", "Pension Benefit Guaranty Corporation", "Social Security Administration", "U.S. Election Assistance Commission", "U.S. International Development Finance Corporation", "United States Securities and Exchange Commission" ], "agency_reuse": [ "22-005", "22-005-09", "22-005-11" ], "service_description": "Acquia provides the leading cloud platform for building, delivering, and optimizing digital experiences.\n\nAcquia is the enterprise platform behind Drupal, the leading open-source content management system, recognized as a Magic Quadrant Leader by Gartner two years in a row. Our platform enables agencies to foster greater digital engagement with citizens and securely deliver mission essential information and services with greater speed, agility, and resiliency.\n\nThe City of LA, State of New York, FEMA, Department of Homeland Security and many other government agencies rely on the Acquia platform to build websites and digital experiences that meet the needs of their citizens, internal users and IT teams while moving their missions forward. These agencies know that a citizen-centric government requires more than simply taking the existing physical structure and making it digital. Today the term \"digital\" has taken on a new meaning. In the private sector, consumers can shop, pay bills, and even conduct banking online, and now they're expecting to conduct government business online in the same way. The most forward-thinking government IT managers are finding ways to meet expectations set by the private sector, and then going above and beyond to serve citizens.\nWith the Acquia Platform governments and agencies can use limited taxpayer dollars efficiently to build sites and experience that meet the needs of IT, deliver on the mission and give citizens crucial information they need.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@acquia.com", "website": "https://acquia.com/", "uei": "", "small_business": false, "business_categories": [ "Content Management System (CMS)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2214062312", "name": "Actsoft, Inc", "cloud_service_provider": "Actsoft, Inc", "cloud_service_offering": "Actsoft Workforce Manager for Gov.", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Actsoft%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-09-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-09-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-09-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-09-30T20:00:00.000Z", "cert_date": "2025-04-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-14T20:00:00.000Z", "annual_assessment": "2011-09-12T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Homeland Security" ], "agency_reuse": [ "" ], "service_description": "Workforce Manager for Gov is a fully-integrated platform, which facilitates the business needs of a agency with mobile employees. On top of robust features such as Wireless Forms, Timekeeping, Job Dispatching, and GPS Tracking, customers with vehicles can leverage the solution’s fleet components to monitor vehicle activities like stop times, idling, driver behavior, score cards, and telematics. \n\nThis intuitive, yet flexible solution addresses key market challenges such as ease of use, data collection, mobile resource management, implementation costs, and worker compliance and overall accountability. The synergy of tools in Workforce Manager for Gov brings agencies greater efficiency and productivity gains by automating and streamlining processes that help them save time, reduce labor costs, and lower vehicle-related expenses such as fuel and maintenance. Agencies benefit from an easily deployable solution that provides a significant return on investment.\n\nWorkforce Manager for Gov is equipped with enterprise-grade workforce management tools that are typically only found in high-priced business applications, making it affordable and accessible to all Government Agencies. This approach provides customers with a solution that delivers relevant information about daily field operations, helping agencies craft new business strategies to save both time and money.", "fedramp_msg": "N/A", "sales_email": "Gov@Actsoft.com", "security_email": "Security@Actsoft.com", "website": "https://www.actsoft.com/government-demo/", "uei": "CRZ1A1JTLQB6", "small_business": true, "business_categories": [ "Construction", "Data Management", "Fleet Management", "Human Resources", "Mobile Device Management (MDM)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2104942200", "name": "Acuant, Inc.", "cloud_service_provider": "Acuant, Inc.", "cloud_service_offering": "Connect, Ozone, & Facial Recognition System (COFRS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Acuant%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-11-30T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-08-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2021-11-24T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2020-11-30T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2021-08-09T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2021-11-24T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-11-24T20:00:00.000Z", "annual_assessment": "2011-11-24T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Reserve System" ], "agency_reuse": [ "" ], "service_description": "Acuant is a leading global provider of identity verification, regulatory compliance (AML/KYC) and digital\nidentity solutions. Acuant's Trusted Identity Platform is powered by AI and human assisted machine learning to deliver unparalleled results and operational efficiency. Acuant Connect, Ozone and Facial Recognition System (COFRS) combines four product lines to fulfill the need to authenticate an individual against an identity document they present to establish a trusted relationship. \n\nCOFRS is a Software as a Service (SaaS) solution that provides an extremely robust basis for identity proofing. The products together authenticate the physical and digital information protecting the authenticity and integrity of the document, provide an assessment of the degree of match of the individual to the photo(s) stored on the document, and perform presentation attack detection via liveness assessment of the individual performing the transaction.\n\n- AssureID Connect SaaS authenticates the physical security features of the document\n- Ozone eMRTD Authentication SaaS ensures the electronic data is cryptographically intact and digitally bound to a trusted issuing authority\n- Once the document has been determined to be authentic and unmodified from its initial issuance, Acuant FaceID Government SaaS performs a facial recognition match of the photo(s)\nfrom the document with the individual presenting the document\n- Acuant Passive Liveness SaaS performs presentation attack detection to thwart fraud \n\nDocument authentication is vital part of confirming the identity of an individual. Authenticating a document requires reviewing the physical document for the presence of known security features;features which are specific to each document type and series from a given issuer. The security features that are found on the presented document then need to be compared against the expected/known security features for the specific document and its issuer.\n\nAdditionally, with the advent of electronic identity documents, the electronic data stored on the document must be authenticated and validated using Public Key Infrastructure (PKI) components to cryptographically assess the data encoded in the chip of the document and their binding to the Issuer. Finally, to ensure the document belongs to the individual presenting the document, a biometric match comparing the image from the document to the individual should be made, and the liveness of the individual must be determined - especially in remote vetting situations.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "FedRAMPIncidentResponse@gbgplc.com", "website": "https://www.gbg.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2616957286", "name": "Adaptive Protocols, Inc. (Adaptiva)", "cloud_service_provider": "Adaptive Protocols, Inc. (Adaptiva)", "cloud_service_offering": "Adaptiva Onesite Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Adaptiva%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-14T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-04-14T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Prescient Security, LLC.", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Adaptiva OneSite Platform enables its customers to autonomously manage the distribution of software and patches to endpoints across a customer’s enterprise, within the customer network, or across the Internet. The OneSite Platform consists of four primary components:\n1) A customer on-premises server operated and managed by customers that hosts an Adaptiva-developed OneSite application used to manage software distribution to the customer’s endpoints.\n2) A content delivery network (CDN) that enables customers to place software in the cloud for retrieval by managed customer endpoints across the Internet.\n3) Adaptiva Cloud Services Relay Servers that receive messages from a customer’s on-premises server and managed clients on the Internet. The relay servers facilitate communication between the customer server and the Internet-facing devices. \n4) An Operations Manager (OpsMgr) server that is used by Adaptiva to manage OneSite cloud functionality and customer OneSite installation information.\nThe customer on-premises server provides functionality for the customer to manage the distribution of software to their endpoints. The server is owned and operated by the customer. Adaptiva support personnel do not have the ability to access or manage it. Software updates from Adaptiva are installed by the customer.\nThe Adaptiva OneSite Platform CDN is provided by Akamai, a FedRAMP-authorized Infrastructure-as-a-Service (IaaS) solution. The customer on-premises server running the OneSite application communicates with the CDN to upload the customer’s software that is in-turn accessed by the customer’s endpoints through commands conveyed by the relay server.\nThe relay server conveys command messages from a customer on-premises server to customer end points to direct the end points to download and install software. The relay server processes thousands of messages from on-premises servers to tens of thousands of customer endpoints. This server is hosted by DataBank, a FedRAMP-authorized IaaS and Platform-as-a-Service (PaaS) provider.\nAn OpsMgr server is used for activating customer servers to be allowed to use relays for internet clients to obtain metadata and keys. The OpsMgr also receives and stores the messaging statistics for customer server and end points from relay servers. This OpsMgr server is hosted by DataBank.", "fedramp_msg": "", "sales_email": "nick.healey@adaptiva.com", "security_email": "vern.leblanc@adaptiva.com", "website": "https://adaptiva.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Mobile Device Management (MDM)", "Network Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1832869359", "name": "Adobe", "cloud_service_provider": "Adobe", "cloud_service_offering": "Adobe Analytics", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Adobe%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-06-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-08-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-09-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-06-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-08-09T20:00:00.000Z", "cert_date": "2019-09-18T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Centers for Disease Control and Prevention", "fedramp_auth": "2019-09-18T20:00:00.000Z", "annual_assessment": "2011-12-31T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Centers for Disease Control and Prevention", "Library of Congress" ], "agency_reuse": [ "" ], "service_description": "Adobe Analytics provides real-time analytics and actionable insight modeling across customer journeys. Collect data to track, analyze, and optimize engagements across online and offline channels, including in-person, call centers, mail, online, and mobile. Start with award-winning web analytics that ingests targeted website traffic and executes robust reporting and analytics based on customizable configurations. Then bring in all data across channels for a unified view of engagements and the ability to analyze the effectiveness of every touchpoint. Mobile app analytics analyzes the performance of mobile engagements and helps understand how mobile app users engage. An array of functionality is available, including custom dashboards, ad-hoc analytics, Microsoft Excel integration, bulk data import, data enrichment, artificial intelligence (AI)-powered predictive models, advanced data visualizations, tag management, and data integrations between Adobe and select partners. Data can be exported for external purposes or integrated with other Adobe products to enrich existing datasets. Learn more here. https://business.adobe.com/products/analytics/adobe-analytics.html", "fedramp_msg": "N/A", "sales_email": "government@adobe.com", "security_email": "fedramp@adobe.com", "website": "https://business.adobe.com/products/analytics/adobe-analytics.html", "uei": "V6QLDTQZ7ZF7", "small_business": false, "business_categories": [ "Analytics", "Content Management System (CMS)", "Customer Service", "Education & Training", "Marketing & Sales" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2108360349", "name": "Adobe", "cloud_service_provider": "Adobe", "cloud_service_offering": "Adobe Acrobat Sign for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Adobe%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-03-09T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-03-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-05-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 10, "reuse": 9, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-03-15T20:00:00.000Z", "cert_date": "2022-05-25T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-05-25T20:00:00.000Z", "annual_assessment": "2011-03-09T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Nuclear Facilities Safety Board", "Department of Agriculture", "Department of Education", "Department of Energy", "Department of State", "Department of the Interior", "Federal Trade Commission", "Internal Revenue Service", "Office of Personnel Management", "State Office of the Inspector General" ], "agency_reuse": [ "" ], "service_description": "Adobe Acrobat Sign for Government is a security-enhanced instance of Adobe's industry-leading Software as a Service (SaaS) application that lets agencies rapidly replace manual, paper-based approval and signature processes with automated, all-digital workflows. Adobe Acrobat Sign for Government makes employees more productive in the office or working remotely by letting them sign documents, request signatures, and track processes from web and mobile devices - as well as inside applications they use every day. Signers can sign on desktop or mobile devices with no downloads or signups required. Adobe Acrobat Sign for Government capabilities include webforms, batch signing, automated workflows and document templates, multifactor signer authentication, and support for both citizen e-signatures and employee digital signatures (using PIV or CAC cards) in a single process. Adobe Acrobat Sign for Government is purely a web browser application with no mobile application required for use by customers. Additionally, customers can also leverage Adobe Acrobat Sign for Government's APIs for integration with their systems or 3rd-party services to expand their digital signing experiences. Integrations to Adobe Acrobat Sign carried out by an agency, for other Adobe products and 3rd-party cloud services, are considered customer responsibility and not a part of the Adobe Acrobat Sign authorization. Adobe Acrobat Sign for Government is designated for the sole use of U.S. federal, state, local, tribal, and territorial government customers, and U.S. government contractors and partners. Adobe Acrobat Sign is used by the majority of Fortune 100 companies. And, it's Microsoft's preferred e-signature solution. Learn more here. https://www.adobe.com/documentcloud/industries/government.html", "fedramp_msg": "N/A", "sales_email": "government@adobe.com", "security_email": "fedramp@adobe.com", "website": "https://www.adobe.com/documentcloud/industries/government.html", "uei": "V6QLDTQZ7ZF7", "small_business": false, "business_categories": [ "Collaboration", "Construction", "Finance", "Fleet Management", "Human Resources", "Law Enforcement", "Legal & Policy", "Marketing & Sales", "Operations Management", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1907354404", "name": "Adobe", "cloud_service_provider": "Adobe", "cloud_service_offering": "Adobe Campaign", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Adobe%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-02-04T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-08-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-09-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-02-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-08-09T20:00:00.000Z", "cert_date": "2019-09-03T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Centers for Disease Control and Prevention", "fedramp_auth": "2019-09-03T20:00:00.000Z", "annual_assessment": "2011-06-27T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Centers for Disease Control and Prevention", "Department of Education", "Department of Labor", "Department of the Interior" ], "agency_reuse": [ "" ], "service_description": "Adobe Campaign is a Gartner magic quadrant leader for multichannel marketing hubs that allows agencies to centrally configure, manage, and customize marketing campaigns to get the right information to the right people at the right time. Adobe Campaign includes visual campaign orchestration, integrated customer profiles, targeted segmentation, cross-channel execution, real-time interaction management, and operation reporting. Agencies can use it to push important information and content to targeted audiences through email, apps, direct mail, or text messaging to engage with citizens in the way they choose from any device. Adobe Campaign provides centralized workflow management for campaign creation at the federal scale, supported by reporting, to gauge the effectiveness of marketing campaigns. Adobe Campaign runs as a customizable Managed Service that reduces the load on IT resources while ensuring the highest levels of security and customer privacy - Adobe, Inc. is the data custodian, while the agency is the data owner of the custom environment. Learn more here. https://business.adobe.com/products/campaign/adobe-campaign.html", "fedramp_msg": "N/A", "sales_email": "government@adobe.com", "security_email": "fedramp@adobe.com", "website": "https://business.adobe.com/solutions/industries/government.html", "uei": "V6QLDTQZ7ZF7", "small_business": false, "business_categories": [ "Communication", "Customer Relations Management (CRM)", "Customer Service", "Health & Wellness", "Human Resources", "Marketing & Sales" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1832870021", "name": "Adobe", "cloud_service_provider": "Adobe", "cloud_service_offering": "Adobe Learning Manager", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Adobe%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-05-21T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-09-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-10-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 7, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-05-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-09-26T20:00:00.000Z", "cert_date": "2019-10-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-10-11T20:00:00.000Z", "annual_assessment": "2011-08-31T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [ { "id": "F1206111371", "csp": "CoSo Cloud, LLC.", "cso": "Knox Systems", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families", "Department of Veterans Affairs" ], "agency_reuse": [ "22-002-03", "22-005-01", "22-005-09", "22-011-05", "22-016-01", "22-027-01" ], "service_description": "Adobe Learning Manager (formerly Adobe Captivate Prime) is an award-winning cloud-hosted Learning Management System (LMS) that allows enterprise Learning and Development teams to drive personalized learning experiences for employees and partners of their organization across multiple devices. Adobe Learning Manager provides one learning platform to host, deliver, and track all agency education needs, from efficient onboarding to employee reskilling or compliance training at scale. Create customized learning with personalized experiences using training widgets and AI-powered intelligent learning recommendations based on profile data, skill group, peers, and other factors. Extensive APIs and Connectors provide the capability to seamlessly integrate with other enterprise applications like Zoom, LinkedIn, and Workday or bring in user information from HR systems. Adobe Learning Manager provides access to the best-in-class safety and security with Single Sign-On (SSO), 508, and General Data Protection Regulation (GDPR) compliance. With Adobe Learning Manager, agencies can take advantage of world-class streaming, step-by-step onboarding assistance, and 24 x 7 support with a dedicated Customer Success Manager. Learn more here. https://business.adobe.com/products/learning-manager/all-features.html", "fedramp_msg": "N/A", "sales_email": "government@adobe.com", "security_email": "fedramp@adobe.com", "website": "https://business.adobe.com/solutions/industries/government.html", "uei": "V6QLDTQZ7ZF7", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Content Management System (CMS)", "Design & Multimedia", "Education & Training", "Human Resources", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1509037236", "name": "Adobe", "cloud_service_provider": "Adobe", "cloud_service_offering": "Adobe Connect Managed Services (ACMS-GC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Adobe%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-02-19T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2019-06-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2019-02-19T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2019-06-27T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-06-27T20:00:00.000Z", "annual_assessment": "2011-12-24T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Corporation for National & Community Service", "Justice Management Division", "Office of the Comptroller of the Currency", "United States Marshals Service" ], "agency_reuse": [ "" ], "service_description": "Adobe Connect is a FedRAMP Moderate Software as a Service (SaaS) running on International Traffic and Arms Regulations (ITAR) compliant IT infrastructure, offering immersive online meeting experiences for real-time collaboration, large-scale webinars, and virtual classrooms in a secure environment. Go beyond screen sharing and web conferencing with customizable pods and layouts, polls, quizzes, drawing boards, simulations, breakout rooms, live video, screen sharing, chat, gamification, telephony integration, and persistent virtual rooms with strong access authentication. Section 508 accessibility, Health Insurance Portability, and Accountability Act of 1996 (HIPAA), Family Educational Rights and Privacy Act (FERPA), and Gramm-Leach Bliley Act (GLBA) compliance make it stand out as a secure and accessible platform adopted by the most regulated industries. Adobe Connect supports both a browser-centric experience and installable applications on desktops and mobile devices with bandwidth management settings to provide the best experience. For real-time situational awareness and common operating picture applications, Adobe Connect delivers a persistent virtual command center environment to scale across federal virtual operation briefings, citizen outreach, and emergency preparedness. Learn more here. https://www.adobe.com/products/adobeconnect.html", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/06/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "government@adobe.com", "security_email": "fedramp@adobe.com", "website": "https://business.adobe.com/solutions/industries/government.html", "uei": "V6QLDTQZ7ZF7", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Design & Multimedia", "Development Tools", "Education & Training", "Marketing & Sales" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1820435960", "name": "Adobe", "cloud_service_provider": "Adobe", "cloud_service_offering": "Adobe Creative Cloud for Enterprise", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Adobe%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-04-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-05-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-05-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 10, "reuse": 16, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-04-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-05-14T20:00:00.000Z", "cert_date": "2018-05-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-05-14T20:00:00.000Z", "annual_assessment": "2011-05-13T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [ { "id": "FR2106555313", "csp": "AchieveIt Online, LLC", "cso": "AchieveIt", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR1907354404", "csp": "Adobe", "cso": "Adobe Campaign", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1832869359", "csp": "Adobe", "cso": "Adobe Analytics", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" } ], "agency_authorizations": [ "Consumer Product Safety Commission", "Department of Agriculture", "Department of Education", "Federal Deposit Insurance Corporation", "Federal Retirement Thrift Investment Board", "Federal Trade Commission", "HUD Office of Inspector General", "National Science Foundation", "Tennessee Valley Authority", "United States Agency for Global Media" ], "agency_reuse": [ "22-005-04", "22-017", "22-022", "22-036", "22-061", "22-082" ], "service_description": "Adobe Creative Cloud for Enterprise is a cloud-based offering that allows agencies to use world-class creativity apps to create and collaborate efficiently with connected desktop and mobile apps and the enterprise-grade security that federal agencies require. Adobe Creative Cloud for Enterprise includes 20+ creative tools across graphic design, photography, video, 3D and Augmented Reality, user interface (UI) and user experience (UX), illustration, social media, built-in templates, artificial intelligence (AI) features, cloud services, and business features. Whether developing multichannel content, doing fast photo and digital editing, designing prototypes for mobile experiences, or taking on large-scale video production, Adobe Creative Cloud offers the latest innovations in digital design tools to deliver customizable assets that meet federal agency standards. The Adobe Creative Cloud for Enterprise offers options for flexible deployment, identity management with Federated ID and Single Sign-On (SSO), annual license true-ups, license management tools, and enterprise-level customer support. Learn more here. https://www.adobe.com/creativecloud/business/enterprise.html", "fedramp_msg": "N/A", "sales_email": "government@adobe.com", "security_email": "fedramp@adobe.com", "website": "https://business.adobe.com/solutions/industries/government.html", "uei": "V6QLDTQZ7ZF7", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Content Management System (CMS)", "Design & Multimedia", "Development Tools", "Education & Training", "Marketing & Sales", "Media" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1820435961", "name": "Adobe", "cloud_service_provider": "Adobe", "cloud_service_offering": "Adobe Document Cloud including Adobe Acrobat, Adobe Acrobat Sign, Adobe Acrobat AI Assistant, Adobe Acrobat Analyzer, and Adobe Acrobat Services (APIs)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Adobe%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-04-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-05-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-05-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 13, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-04-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-05-14T20:00:00.000Z", "cert_date": "2018-05-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-05-14T20:00:00.000Z", "annual_assessment": "2011-05-13T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [ { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1815547467", "csp": "Relocation Management Worldwide (RMW)", "cso": "Virtual Employee Network (VEN)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Agriculture", "Department of Veterans Affairs", "Federal Retirement Thrift Investment Board", "Federal Trade Commission", "HUD Office of Inspector General", "National Science Foundation", "Nuclear Regulatory Commission", "Tennessee Valley Authority", "United States Agency for Global Media" ], "agency_reuse": [ "22-007-03", "22-007-17", "22-007-25", "22-017", "22-067" ], "service_description": "Adobe Document Cloud is a digital document modernization solution that integrates Adobe’s pioneering technology with Adobe Acrobat, Adobe Acrobat Sign, Adobe Acrobat AI Assistant, Adobe Acrobat Analyzer, and Acrobat Services automation APIs to deliver 100% digital experiences to employees and constituents. It’s a portfolio of secure solutions that speeds service delivery and drives better constituent experiences by making manual processes fully digital and automated.\n\nDesktop, web, and mobile apps can be used standalone or as connected services that are easily integrated into your agency’s existing document processes, business applications, and enterprise systems. Innovative technology and artificial intelligence help agencies deliver modern, mobile-friendly automated document experiences and search-friendly document tagging without the need to reauthor documents from scratch.\n\nA list of current in-scope Adobe Document Cloud products and services included in the authorization boundary is available at: \n\nDocument Cloud\n\nAcrobat Reader & User Guide\n\nAcrobat Sign\n\nAcrobat AI Assistant\n\nAcrobat Analyzer\n\nAcrobat Services", "fedramp_msg": "N/A", "sales_email": "government@adobe.com", "security_email": "fedramp@adobe.com", "website": "https://business.adobe.com/solutions/industries/government.html", "uei": "V6QLDTQZ7ZF7", "small_business": false, "business_categories": [ "Collaboration", "Construction", "Finance", "Fleet Management", "Human Resources", "Law Enforcement", "Legal & Policy", "Marketing & Sales", "Operations Management", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1509037239", "name": "Adobe", "cloud_service_provider": "Adobe", "cloud_service_offering": "Adobe Experience Manager Managed Services (AEMMS-GC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Adobe%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-02-19T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2019-06-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2019-02-19T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2019-06-27T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-06-27T20:00:00.000Z", "annual_assessment": "2011-12-24T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture", "Department of the Interior", "Federal Deposit Insurance Corporation", "Immigration and Customs Enforcement", "Transportation Security Administration", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Adobe Experience Manager (AEM) is a FedRAMP Moderate Software as a Service (SaaS) enabling the ability to create, manage, and deliver digital experiences across every channel, including web, mobile apps, digital forms and communities, and on-site screens. Forrester ranks Adobe as the leader in agile content management, receiving the highest scores possible for current offerings, strategy, and market presence. This SaaS package includes Adobe Experience Manager Sites, Adobe Experience Manager Assets, and Adobe Experience Manager Forms for web content management, digital asset management, digital enrollment and smart forms, app development and management, and social communities capabilities. Agencies can build, share, and deliver personalized experiences across different channels from the same place and integrate digital enrollment and forms into websites and mobile experiences to streamline transactions. Adobe manages the most complex and mission-critical Adobe Experience Manager deployments all over the world and provides managed service cloud hosting and expert application support, enabling enterprises to concentrate on citizen engagement and digital transformation. Learn more here. https://business.adobe.com/products/experience-manager/adobe-experience-manager.html", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/07/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "government@adobe.com", "security_email": "fedramp@adobe.com", "website": "https://business.adobe.com/solutions/industries/government.html", "uei": "V6QLDTQZ7ZF7", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Customer Service", "Education & Training", "Marketing & Sales", "Media", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2615451803", "name": "Aeroplicity Inc.", "cloud_service_provider": "Aeroplicity Inc.", "cloud_service_offering": "Aeroplicity", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Aeroplicity%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-02-24T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2026-03-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2026-04-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2026-03-05T20:00:00.000Z", "ip_prog_date2": "2026-02-24T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-04-10T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-04-10T20:00:00.000Z", "annual_assessment": "2011-04-11T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Aeroplicity is a cloud-based software platform that supports CMMC-related compliance workflows and provides an enclave-oriented environment for handling controlled data, together with enterprise resource planning (ERP), maintenance and repair operations (MRO), governance, risk, and compliance (GRC) workflows, secure collaboration, secure file storage and sharing, document traceability, and operational recordkeeping.\r\nThe service supports organizations operating under CMMC, NIST 800-171, DFARS, ITAR, EAR, and related regulatory or contractual requirements by providing compliance workflow management, control evidence collection, audit support, record retention, and traceability for operational and compliance-related activities. Aeroplicity Compliance provides governance, risk, and compliance functions including compliance task management, supporting documentation, control evidence management, and audit-ready records.\r\nAeroplicity also provides ERP and operational workflow capabilities for procurement, inventory management, logistics, sales order processing, planning, maintenance execution, labor time tracking, training records, and related business processes. The platform supports traceability of documents, parts, materials, and operational activities, including QR code-based workflows connecting physical processes to digital records.\r\nThe service includes secure email and messaging, browser-based application access, shared workflow interfaces, file storage and sharing, audit logging, and workflow-based access to operational data across users and teams. Aeroplicity Browser provides browser-based, single-application virtual desktop access to platform functions and data, supporting controlled access workflows in which user interaction occurs within the service environment rather than through local endpoint processing or storage.\r\nApplications and functional components of the service include:\r\n- Aeroplicity Intelligence — AI-assisted analysis and decision-support tools\r\n- Browser — browser-based, single-application virtual desktop access\r\n- Compliance — governance, risk, and compliance workflows, control evidence management, and audit support\r\n- Email — secure email and messaging\r\n- File Share — secure file storage and file sharing\r\n- Interface — shared data access and workflow execution across users and teams\r\n- Inventory — inventory, stock, locations, lot control, and picking workflows\r\n- Logistics — shipping, receiving, and material movement workflows\r\n- Logs — audit logs, record retention, and activity history\r\n- Maintenance — work orders, task cards, and MRO execution\r\n- Marketplace — marketplace workflows\r\n- Planning — demand planning, scheduling, and resource preparation\r\n- Procurement — suppliers, RFQs, and purchase orders\r\n- Sales — quotes, sales orders, and related workflows\r\n- Times — labor time tracking and time recording\r\n- Traceability — digital traceability, document linkage, QR code workflows, and part-level records\r\n- Training — training records, qualifications, tracking, and related workflows", "fedramp_msg": "", "sales_email": "sales@aeroplicity.com", "security_email": "security@aeroplicity.com", "website": "https://aeroplicity.com/", "uei": "U9J5MT67H8B5", "small_business": true, "business_categories": [ "Artificial Intelligence (AI)", "Collaboration", "Communication", "Cybersecurity & Risk Management", "Data Management", "Education & Training", "Governance, Risk, and Compliance (GRC)", "Network Management", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2226146186", "name": "Agile Fleet", "cloud_service_provider": "Agile Fleet", "cloud_service_offering": "FleetCommander", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/AFL%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-02-11T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-04-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-02-11T20:00:00.000Z", "cert_date": "2026-04-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-04-02T20:00:00.000Z", "annual_assessment": "2011-10-17T04:00:00.000Z", "independent_assessor": "Securisea, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Low", "impact_level_number": "4", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "FleetCommander is a robust, customizable Fleet Management Information System (FMIS). \nThe platform offers seamless vehicle reservation capabilities, along with tools to analyze and forecast fleet demand and capacity. It also streamlines data collection for odometer readings, driver credentials, check-in and check-out activity, and more. With intuitive reporting and analytics features, FleetCommander provides the visibility and control needed to optimize fleet utilization, enhance compliance, and support data-driven decision-making.", "fedramp_msg": "N/A", "sales_email": "sales@agilefleet.com", "security_email": "fcsysadmin@agilefleet.com", "website": "https://www.agilefleet.com/", "uei": "ED1SN56ALLZ5", "small_business": true, "business_categories": [ "Fleet Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2322741394", "name": "AgileRank", "cloud_service_provider": "AgileRank", "cloud_service_offering": "Agile RTLS Suite (A-RTLS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/AgileRank%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-08-15T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-11-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-01-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-08-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-11-06T20:00:00.000Z", "cert_date": "2025-01-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-01-23T20:00:00.000Z", "annual_assessment": "2011-10-17T04:00:00.000Z", "independent_assessor": "ControlCase", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Agile Real Time Location System (A-RTLS) Suite is delivered as a Li-SaaS offering using a multi-tenant Government-only cloud computing environment. It is available to federal, state, local, and tribal governments. The Agile RTLS Suite (A-RTLS) solution utilizes the RTLS technicians’ phones/scanner, the asset’s barcode and the asset tag are scanned to capture the association RTLS needs to support asset tracking and inventory. The tagging application sends the association to the customer’s Real Time Location System. The mobile application also supports removing a tag to stop tracking an asset, battery status, and testing.", "fedramp_msg": "N/A", "sales_email": "sales@agilerank.com", "security_email": "security@agilerank.com", "website": "https://www.agilerank.com/", "uei": "Y5PTNH8M5GA1", "small_business": true, "business_categories": [ "Analytics", "Data Management", "Fleet Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "AGENCYHUDSAAS", "name": "AINS dba OPEXUS", "cloud_service_provider": "AINS dba OPEXUS", "cloud_service_offering": "AINS dba OPEXUS - eCase", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Opexus%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2012-12-18T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2014-02-19T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2014-02-21T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 46, "reuse": 45, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2012-12-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2014-02-19T20:00:00.000Z", "cert_date": "2014-02-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2014-02-21T20:00:00.000Z", "annual_assessment": "2011-02-21T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Chemical Safety And Hazard Investigation Board", "Commodity Futures Trading Commission", "Consumer Financial Protection Bureau", "Court Services and Offender Supervision Agency", "Department of Agriculture", "Department of Education", "Department of Energy", "Department of Health and Human Services", "Department of Housing and Urban Development", "Department of Labor", "Department of Transportation", "Department of Veterans Affairs", "Department of the Interior", "Environmental Protection Agency", "Export-Import Bank of the United States", "FHFA Office of the Inspector General", "Federal Deposit Insurance Corporation", "Federal Housing Finance Agency", "Federal Reserve System", "Federal Trade Commission", "General Services Administration", "HHS Office of the Inspector General", "Internal Revenue Service", "Millennium Challenge Corporation", "National Oceanic and Atmospheric Administration", "National Science Foundation", "Nuclear Regulatory Commission", "Office of Justice Programs", "Office of Personnel Management", "Office of the Comptroller of the Currency", "Pension Benefit Guaranty Corporation", "Small Business Administration", "Social Security Administration", "State Office of the Inspector General", "Tennessee Valley Authority", "U.S. Election Assistance Commission", "U.S. International Development Finance Corporation", "United States Agency for International Development", "United States Equal Employment Opportunity Commission", "United States Marshals Service", "United States Securities and Exchange Commission", "United States Trade and Development Agency", "VA Office of the Inspector General" ], "agency_reuse": [ "" ], "service_description": "eCASE is a dynamic case management and rapid application development platform that empowers professionals to elevate trust in public institutions. With secure and collaborative information and document management, robust reporting, adaptive workflows, role-based security, and comprehensive audit trail capabilities, eCASE helps public sector clients automate processes, reduce costs, improve transparency, and ultimately achieve better outcomes with less risk while maintaining compliance within demanding regulatory environments. eCase and eCase COTS solutions, including Correspondence, Audit, Investigations, Government Workforce Management, and FOIAXpress (the industry-leading, purpose-built FOIA case processing software) are FedRAMP-moderate certified SaaS. For more information, visit [opexustech.com](opexustech.com).", "fedramp_msg": "N/A", "sales_email": "", "security_email": "isso@opexustech.com", "website": "https://www.opexustech.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1206061353", "name": "Akamai", "cloud_service_provider": "Akamai", "cloud_service_offering": "Content Delivery Services", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Akamai%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2012-07-19T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2013-08-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 29, "reuse": 380, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2012-07-19T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2013-08-23T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2013-08-23T20:00:00.000Z", "annual_assessment": "2011-08-23T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2108360349", "csp": "Adobe", "cso": "Adobe Acrobat Sign for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234550858", "csp": "Concur Technologies, Inc.", "cso": "Concur Cloud for Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1509217359", "csp": "Cornerstone OnDemand", "cso": "Cornerstone Galaxy", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1206111371", "csp": "CoSo Cloud, LLC.", "cso": "Knox Systems", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1606087903A", "csp": "Deltek - Replicon", "cso": "Replicon Cloud Platform (Enterprise Time Tracking Platform)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814557199", "csp": "DNAnexus, Inc.", "cso": "DNAnexus Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1609267945", "csp": "DocuSign", "cso": "Docusign - IAM eSignature", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2524349489", "csp": "IBM", "cso": "IBM Data Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1718334757", "csp": "ID.me", "cso": "ID.me Identity Gateway", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2218073444", "csp": "Lucid Software, Inc.", "cso": "Lucid GovSuite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1711262842", "csp": "Medallia, Inc.", "cso": "Medallia GovCloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "MSO365MT", "csp": "Microsoft", "cso": "Microsoft 365 Government Community Cloud & Supporting Services", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2028977567", "csp": "NetDocuments Software, Inc.", "cso": "NetDocuments Document Management System (DMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1712871948", "csp": "Oracle", "cso": "Aconex for Defense", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1915765924", "csp": "Repario", "cso": "Repario Government Solutions (RGS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1719841002", "csp": "SAP National Security Services Inc. (SAP NS2)", "cso": "SAP NS2 Cloud Intelligent Enterprise", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919071020A", "csp": "SentinelOne", "cso": "SentinelOne Singularity Platform High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1823447014", "csp": "Slack Technologies", "cso": "Slack", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1935245314A", "csp": "Trellix", "cso": "Trellix GovCloud Security Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2110836406", "csp": "Trustwave Government Solutions", "cso": "Trustwave Fusion", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2132958724", "csp": "UiPath", "cso": "Automation Cloud Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "AGENCYWC2", "csp": "United States Department of the Treasury", "cso": "Treasury Cloud Moderate", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1804557312", "csp": "Veritone, Inc.", "cso": "Veritone Intelligent Digital Evidence Management System (iDEMS) for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1825941347A", "csp": "Zoom Video Communications, LLC", "cso": "Zoom for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Centers for Medicare & Medicaid Services", "Consumer Financial Protection Bureau", "Consumer Product Safety Commission", "Corporation for National & Community Service", "Council of the Inspectors General on Integrity and Efficiency", "Defense Information Systems Agency", "Defense Nuclear Facilities Safety Board", "Department of Agriculture", "Department of Homeland Security", "Department of Housing and Urban Development", "Department of Labor", "Department of Transportation", "Department of the Treasury", "Federal Deposit Insurance Corporation", "Food and Drug Administration", "General Services Administration", "Government National Mortgage Association", "Health Resources and Services Administration", "Internal Revenue Service", "National Aeronautics and Space Administration", "National Oceanic and Atmospheric Administration", "National Science Foundation", "Nuclear Regulatory Commission", "Presidio Trust", "Social Security Administration", "State Office of the Inspector General", "United States Census Bureau", "United States International Trade Commission" ], "agency_reuse": [ "" ], "service_description": "The Akamai Content Delivery Network provides an 100% available platform to improve the performance and customer experience of your web content while providing robust security protections for your infrastructure – all at the edge of the internet and at an unmatched global scale. Akamai’s solutions are configured through the Akamai Control Center customer portal or via APIs to automate your workflows. Akamai Intelligent Platform infrastructure solutions included in the JAB authorized boundary are:\nSecurity - WAAP, WAF, WEP Web Application and API protections powered by an adaptive security engine (ASE) help protect from a wide range of network and application-layer threats with less effort and overhead. This solution is built on our Intelligent Edge Platform and comes prebuilt with performance capabilities that are designed to ensure your websites, web applications, and APIs perform their very best. Cloud-based web application firewall (WAF) — which harnesses visibility across the platform to stop the most sophisticated denial-of-service (DoS), web application, and API-based attacks.\nSecure Content Delivery Network - for HTTP and HTTPS for delivering secure, high performing and highly available web applications and APIs at scale. \nEdge enterprise DNS Protection (with DNSSEC) and Global Traffic Management - designed so that Internet users can more reliably get to your websites or any other IP application. It applies an Internet-centric approach to global load balancing to provide high site availability and responsiveness to online user requests. \nNetStorage - Cloud Storage, cloud-based service designed to meet storage requirements while offering customers cost reduction and a simplified management effort. Globally distributed cloud-based storage that maximizes delivery and performance.\nMedia Services Live - Media streaming services - enabling agencies to stream and provide content to their viewers. Providing a consistent, high-quality viewing experience across the broad variety of network types — fixed or mobile — at varying connection speeds, globally.\r\n\r\nAkamai Enterprise Application Access (EAA) is a Zero Trust Network Access (ZTNA) solution that provides secure, identity-aware access to private applications without the need for a VPN. By closing all inbound firewall ports and integrating with existing identity providers, EAA ensures that only authorized users can access specific applications, significantly reducing the attack surface.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/07/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "dl-PubSecSales@akamai.com", "security_email": "fedramp_info@akamai.com", "website": "https://www.akamai.com/legal/compliance#fedramp", "uei": "MN5ENSRLDVK5", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Design & Multimedia", "Legal & Policy", "Media", "Network Management", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2535161278", "name": "Akamai", "cloud_service_provider": "Akamai", "cloud_service_offering": "Akamai Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Akamai%20Logo2.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-11-13T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-11-13T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS", "PaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Akamai Cloud offers customer facing services enabled by the underlying Akamai Platform and Backbone. All Akamai services are centrally managed offering one of the world’s largest interconnected cloud platforms.\nAkamai Cloud allows users to leverage multiple cloud delivery models from IaaS to SaaS with individual services accredited at differing levels. The Akamai Platform and Backbone provides a common delivery fabric for all of Akamai’s customer facing services and common controls that can be leveraged for all these services.\nEach service is capable of running diverse workloads, the Defense Edge initiative focuses on the accreditation of these services at the FRH and DoD IL5 levels. Delivery solutions can be accomplished across different security levels by offering secure workload guidance and configurations that are enforced at multiple infrastructure points within the underlying Platform and Backbone with the eventual goal of having each service capable of operating at the higher security attestation levels through these configuration options.\nServices offered to customer through the Akamai Cloud are grouped into three main categories:\n\nBuild, Secure, and Deliver\nThese categories cover cloud infrastructure and deployment tooling, workforce and API protection, as well as global delivery and performance enhancing utilities.\nSpecific services appropriate for High Availability are:\nAkamai Guardicore Segmentation\nApp & API Protector\nEnterprise Application Access\n\nEdge DNS\nGlobal Traffic Management\nIon\nmPulse\nProlexic", "fedramp_msg": "", "sales_email": "dl-PubSecSales@akamai.com", "security_email": "fedramp_info@akamai.com", "website": "https://www.akamai.com/resources/solution-brief/akamai-defense-edge", "uei": "", "small_business": false, "business_categories": [ "Communication", "Cybersecurity & Risk Management", "Media", "Mobile Device Management (MDM)", "Network Management", "Storage", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2411862686", "name": "Alation", "cloud_service_provider": "Alation", "cloud_service_offering": "Alation Cloud Service", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Alation%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-04-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-05-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to Legacy FedRAMP Ready" }, { "date": "2026-07-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": "2025-05-27T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-07-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Alation Cloud Service (ACS) is delivered as a software as a service (SaaS) offering using a multi-tenant Public Cloud computing environment. It is available to federal, state, local, and tribal government agency customers, federally funded research and development centers (FFRDCs), suppliers working with government agencies, suppliers regulated by regulations such as ITAR, and federal government contractors.\n\nAlation Cloud Service (ACS) is a data and AI management platform that enables organizations to catalog, govern, and operationalize their data assets and AI agents. ACS data layer provides a centralized repository of organizational data that includes Catalog, curated data elements, lineage and data quality. ACS context layer provides business context and semantic definitions on top of cataloged data. This layer includes data products, data products marketplace, and ontologies. ACS Agent layer includes Agent Studio that provides prebuilt agents as well as ability to create custom agents that operate on governed data and context layers. The ACS Governance layer provides policies and workflows to govern data, context and agent layers to support organizational compliance and audit requirements.", "fedramp_msg": "", "sales_email": "contactsales@alation.com", "security_email": "cloud-security@alation.com", "website": "https://www.alation.com/", "uei": "LNKPHZJJFU89", "small_business": false, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2616782844", "name": "Alclear Healthcare LLC (d/b/a CLEAR)", "cloud_service_provider": "Alclear Healthcare LLC (d/b/a CLEAR)", "cloud_service_offering": "CLEAR1 Gov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Clear1%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-03-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "CLEAR1 is CLEAR’s secure identity platform used to perform remote identity proofing for federal agencies and highly regulated environments. Identity is confirmed by correlating biometric signals, government-issued credentials, device attributes, and authoritative and credible evidence sources in real time.\r\n\r\nCLEAR1 protects high-stakes workflows such as onboarding, account creation and recovery, and sensitive data access. The platform is policy-driven and aligned to the NIST Digital Identity Guidelines, including IAL2 and AAL2, and is approved by the Kantara Initiative as meeting these standards. Our comprehensive security program meets high standards for data protection and privacy, and is built to protect personal information and keep users in control. By verifying the person — not just the documents — CLEAR1 helps federal programs advance trust and protect their users at scale.", "fedramp_msg": "", "sales_email": "CLEAR1Gov@clearme.com", "security_email": "fed-ramp-security@clearme.com", "website": "http://identity.clearme.com/", "uei": "S6ERTJZD1CP3", "small_business": false, "business_categories": [ "Analytics", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Operations Management", "System Administration", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2413241182", "name": "Altana", "cloud_service_provider": "Altana", "cloud_service_offering": "Altana Product Network", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Altana%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-11-25T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-11-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-02-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-11-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-11-07T20:00:00.000Z", "cert_date": "2026-02-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Space Force", "fedramp_auth": "2026-02-05T20:00:00.000Z", "annual_assessment": "2011-11-03T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "United States Space Force" ], "agency_reuse": [ "" ], "service_description": "Altana, the world’s first Value Chain Management System (VCMS), is a common operating picture for the global supply chain, connecting the most important organizations across the public and private sectors into a shared source of truth.\n\nAltana enables government agencies and the defense industrial base to see their actual value chains situated within a dynamic map of the global supply chain, focus on their priorities with AI support, and act to master their global value chains:\n\n- National Security: Altana provides government agencies and the military industrial base with a dynamic, networked, common operating picture of the global supply chain.\n\n- Law Enforcement: Altana helps regulators and enforcement agencies enforce laws across global value chain networks, and engage the private sector constructively on compliance from a shared source of truth.\n\n- Customs Enforcement and Trade Facilitation: Altana enables customs authorities to illuminate, enforce, and facilitate compliant global value chains for goods crossing their borders.\n\n- Economic Security: Altana enables policymakers to see, simulate, and collaborate across global value chains ensuring the security of critical industries and resources.\n\nAltana’s mission is to provide cutting-edge technology to deliver global-scale supply chain visibility, threat network visibility, federated customer data integration, and public-private engagement capabilities.", "fedramp_msg": "N/A", "sales_email": "federal@altana.ai", "security_email": "security@altana.ai", "website": "https://www.altana.ai/", "uei": "TRT5JBUD3WM1", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Law Enforcement", "Legal & Policy", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "AGENCYAMAZONEW", "name": "Amazon", "cloud_service_provider": "Amazon", "cloud_service_offering": "AWS US East/West", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Amazon%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2012-11-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2013-05-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 107, "reuse": 1169, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2012-11-02T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2013-05-01T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2013-05-01T20:00:00.000Z", "annual_assessment": "2011-11-13T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS", "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2335047392", "csp": "3rd Eye Technologies LLC.", "cso": "Mystic Message Archival", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000174962", "csp": "Abbott, Inc.", "cso": "LibreView for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2425960757", "csp": "Abnormal AI ", "cso": "Abnormal AI for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2307441316", "csp": "Absolute Security", "cso": "Absolute Secure Endpoint Product Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1302201919", "csp": "Acquia Inc.", "cso": "Acquia Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2104942200", "csp": "Acuant, Inc.", "cso": "Connect, Ozone, & Facial Recognition System (COFRS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1832870021", "csp": "Adobe", "cso": "Adobe Learning Manager", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1820435960", "csp": "Adobe", "cso": "Adobe Creative Cloud for Enterprise", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1907354404", "csp": "Adobe", "cso": "Adobe Campaign", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1820435961", "csp": "Adobe", "cso": "Adobe Document Cloud including Adobe Acrobat, Adobe Acrobat Sign, Adobe Acrobat AI Assistant, Adobe Acrobat Analyzer, and Adobe Acrobat Services (APIs)\r\n", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1726637760", "csp": "American Heart Association, Inc.", "cso": "American Heart Association Precision Medicine Platform(AHA-PMP)", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2012366611", "csp": "Amplifire", "cso": "Amplifire", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "F1210011608", "csp": "Appian", "cso": "Appian Government Cloud - Moderate", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1708752710", "csp": "Armedia, LLC", "cso": "Armedia Content Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2317139564", "csp": "Articulate Global LLC", "cso": "Articulate 360", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1908649566", "csp": "Aruba Networks", "cso": "Aruba Central", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2412062433", "csp": "Atlassian", "cso": "Atlassian Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2031222637", "csp": "Aurigo Software Technologies, Inc.", "cso": "Masterworks Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814168113", "csp": "Authentic8, Inc.", "cso": "Silo", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226322745", "csp": "Autodesk", "cso": "Autodesk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1923743650A", "csp": "Automattic, Inc.", "cso": "WordPress VIP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2333756970", "csp": "Axiad IDS Inc.", "cso": "Axiad Conductor", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2401047002", "csp": "Axonius Federal Systems", "cso": "Axonius Asset Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430123303", "csp": "Aztec Software", "cso": "Aztec Learning System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2128235497", "csp": "Bamboo Health, Inc.", "cso": "PMP Government-Gateway", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1506076709", "csp": "Blackboard", "cso": "Blackboard LMS", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2035056105", "csp": "Bluescape", "cso": "Bluescape with n8n for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1510057481", "csp": "BMC Helix, Inc.", "cso": "BMC Helix", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1916254386", "csp": "Boomi", "cso": "Boomi Enterprise Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2504148525", "csp": "Booz Allen Hamilton", "cso": "Footprint", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2530025267", "csp": "Caveonix, Inc.", "cso": "Caveonix", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2125059322", "csp": "Center for Translational Data Science (CTDS)", "cso": "Gen3 Data Ecosystems Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2018946952", "csp": "CGI Federal", "cso": "Sunflower Asset Management Cloud (SAMC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2334756650", "csp": "Chainalysis", "cso": "Reactor", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2328145448", "csp": "Chargie, LLC", "cso": "Electric Vehicle Infrastructure Platform for Government", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2511048038", "csp": "Check Point Software Technologies, Inc.", "cso": "Check Point Infinity Platform for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2514624801", "csp": "Checkmarx", "cso": "Checkmarx One for Government (CXG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2220549818", "csp": "CirrusMD", "cso": "CirrusMD Virtual Health Chat for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2518163100", "csp": "Cisco", "cso": "Spaces for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2315535023", "csp": "Cisco Systems Inc.", "cso": "Cisco Meraki US Government Region", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1605107897", "csp": "Cisco Systems Inc.", "cso": "Cisco Cloudlock for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2012534927", "csp": "Cisco Systems, Inc.", "cso": "Cisco Catalyst SD-WAN for Government (SDWAN-G)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2014656304", "csp": "Civis Analytics, Inc.", "cso": "Civis Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2200507410", "csp": "Copado", "cso": "Copado GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1509217359", "csp": "Cornerstone OnDemand", "cso": "Cornerstone Galaxy", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1206111371", "csp": "CoSo Cloud, LLC.", "cso": "Knox Systems", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416856649", "csp": "Creative Veteran Productions", "cso": "Federal Immersive Learning Management System (FED-ILMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416263030", "csp": "CrestPoint Solutions, Inc", "cso": "CrestPoint Environmental Management Service (CEMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2519759620", "csp": "Cribl Inc.", "cso": "Cribl.Cloud Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2402468053", "csp": "Darktrace Federal Inc.", "cso": "Cyber AI Mission Defense and Email Protection", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1834740315", "csp": "Databricks, Inc.", "cso": "Databricks on AWS US East/West", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324740262", "csp": "Databricks, Inc.", "cso": "Databricks on AWS GovCloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2023864279A", "csp": "Datadog, Inc.", "cso": "Datadog for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2112152882", "csp": "Datavant", "cso": "Datavant Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1606087903A", "csp": "Deltek - Replicon", "cso": "Replicon Cloud Platform (Enterprise Time Tracking Platform)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2414718666", "csp": "Digital Science UK Limited", "cso": "Overleaf", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2424945160", "csp": "dMetrics", "cso": "Minsky No-code ML/NLP Knowledge Graphing Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814557199", "csp": "DNAnexus, Inc.", "cso": "DNAnexus Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2432940371", "csp": "Docebo", "cso": "Docebo Learning Platform for Gov (DCBO-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2419537309", "csp": "DocketScope, Inc.", "cso": "DocketScope®", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1609267945", "csp": "DocuSign", "cso": "Docusign - IAM eSignature", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1823149273", "csp": "Duo Security (a Cisco Company)", "cso": "Duo Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2016131254", "csp": "Dynatrace", "cso": "Dynatrace Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2016962740", "csp": "Eightfold AI Inc.", "cso": "Eightfold Talent Intelligence Platform (TIP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2004446306", "csp": "Elastic", "cso": "Elastic Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2014363920", "csp": "Enel X North America", "cso": "Exchange Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "F1311252651", "csp": "ESRI", "cso": "Esri Managed Cloud Services Advanced Plus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1811073663A", "csp": "ESRI", "cso": "ArcGIS Online (AGO)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1412165928", "csp": "Everbridge", "cso": "Critical Event Management Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2207359708", "csp": "Evidence Prime", "cso": "Laser AI", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1827963145", "csp": "Exterro, Inc.", "cso": "Exterro E-Discovery and Legal Software Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2510664395", "csp": "ExtraHop Networks", "cso": "ExtraHop RevealX Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2427818523", "csp": "Feith Sytems and Software, Inc.", "cso": "RMA iQ™", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2311345531", "csp": "Figma", "cso": "Figma for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1828574469", "csp": "FM:Systems", "cso": "OpenBlue Employee", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2327655698", "csp": "Gallery Systems", "cso": "TMS Gov Cloud Suite ", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1829538820", "csp": "General Services Administration", "cso": "Login.gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2131766015", "csp": "Genesys", "cso": "Genesys Cloud CX", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1812058188", "csp": "GitHub", "cso": "GitHub Enterprise Cloud", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2234334891", "csp": "Glassbeam, Inc.", "cso": "Glassbeam Clinsights", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919750997", "csp": "HackerOne", "cso": "HackerOne Continuous Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2135040486", "csp": "HealthVerity", "cso": "Privacy Preserving Records Linkage (PPRL)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1728349078", "csp": "Hootsuite", "cso": "Hootsuite Enterprise", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "F1408115175", "csp": "Huddle US", "cso": "Huddle Enterprise Cloud Content Collaboration and File Sharing Portal for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2607452240", "csp": "IBM", "cso": "GO.gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2417469779", "csp": "IBM", "cso": "IBM Envizi ESG Reporting", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2122038682", "csp": "iBoss", "cso": "iboss Government Cloud Platform (IGCP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1718334757", "csp": "ID.me", "cso": "ID.me Identity Gateway", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2429166928", "csp": "Ideagen", "cso": "Ideagen Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2230244107", "csp": "Illumio, Inc.", "cso": "Illumio Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2017257053", "csp": "Infoblox", "cso": "Infoblox Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1710033970", "csp": "Infor", "cso": "Infor Government Solutions (IGS) Software as a Service", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2027958176", "csp": "Issio Solutions, Inc.", "cso": "Issio Information System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2212912561", "csp": "Itamar Medical", "cso": "Itamar Dispatcher Cloud (IDC)", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1816364586", "csp": "Ivanti", "cso": "Ivanti Neurons for ITSM (Formerly Service Manager)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1507116930", "csp": "Ivanti", "cso": "Ivanti Neurons for MDM (Formerly MobileIron)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102758152", "csp": "Juniper Networks", "cso": "Juniper Mist", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335051964", "csp": "Keyfactor", "cso": "Keyfactor for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1511167634", "csp": "Kiteworks USA, LLC", "cso": "Kiteworks Federal Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2201340492", "csp": "KnowBe4, Inc.", "cso": "KnowBe4 Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406453618", "csp": "LabArchives", "cso": "LabArchives for Government (LG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2120962552", "csp": "LaunchDarkly", "cso": "LaunchDarkly", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2020767053", "csp": "Level Access", "cso": "Accessibility Management Platform (AMP)", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2524251176", "csp": "LMI Solutions", "cso": "Atlas by LMI", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603297883", "csp": "Lookout, Inc.", "cso": "Lookout Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2218073444", "csp": "Lucid Software, Inc.", "cso": "Lucid GovSuite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2229642430", "csp": "Lumen", "cso": "Cloud Contact Center", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2129953050", "csp": "Manhattan Associates, Inc.", "cso": "Manhattan Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2225648574", "csp": "Mathematica Inc.", "cso": "Mathematica Cloud Support System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1728351539", "csp": "MAXIMUS Inc.", "cso": "Maximus Intelligent Virtual Assistant (MIVA) (formerly MIA)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1303191948", "csp": "MAXIMUS Inc.", "cso": "MAXIMUS Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1902240018", "csp": "MDRC", "cso": "SPROUT", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2210666939", "csp": "Melissa", "cso": "Melissa GovCloud Address Suite", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2032665434", "csp": "Menlo Security", "cso": "Cloud Security Platform powered by Isolation Core", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2206159758", "csp": "Merlin International", "cso": "Constellation GovCloud (CGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2126176344", "csp": "MicroStrategy", "cso": "MicroStrategy Cloud for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1910758409", "csp": "Mimecast", "cso": "Incydr Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2122150307", "csp": "MongoDB", "cso": "MongoDB Atlas for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335850270", "csp": "Movius Interactive Corporation", "cso": "Movius MultiLine and Movius Decentralized Distributed Secure Communications", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1506256801", "csp": "MSM Group, Inc.", "cso": "iSite Contract Management Portal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2304546222", "csp": "My Business Matches", "cso": "Vendor Event & Business Matchmaking Platform", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2119265538", "csp": "NEOGOV", "cso": "NEOGOV Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1607057910", "csp": "New Relic", "cso": "New Relic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1704655535", "csp": "NICE CXone", "cso": "NiCE CXone", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430847803", "csp": "NinjaOne", "cso": "NinjaOne for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213764335", "csp": "Noblis", "cso": "RunCyberAssurance", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1734750951", "csp": "OCLC Incorporated", "cso": "WorldShare Management Services", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "F1512167750", "csp": "Okta", "cso": "Okta IDaaS Regulated Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1721059275A", "csp": "OneStream Software", "cso": "OneStream Cloud - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2100059668", "csp": "OnSolve LLC", "cso": "OnSolve Platform for Critical Event Management", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2231648178", "csp": "Onspring Technologies, LLC", "cso": "Onspring GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2215946050", "csp": "OpenText", "cso": "ITMX Platform featuring Service & Asset Management, Universal Discovery, CMDB and Project & Portfolio Management", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2113346550", "csp": "OpenWater Software", "cso": "OpenWater Awards", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2301844932", "csp": "Orca Security", "cso": "Orca Cloud Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2409367364", "csp": "Pagefreezer Software Inc.", "cso": "Pagefreezer Website Archiving", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2310974411", "csp": "PagerDuty", "cso": "PagerDuty Operations Cloud", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2434554673", "csp": "Palantir Technologies Inc.", "cso": "Palantir Federal Cloud Service", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2001619708", "csp": "Palo Alto Networks, Inc.", "cso": "Idira Endpoint Privilege Manager for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2001619337", "csp": "Palo Alto Networks, Inc.", "cso": "Idira Identity Security Government Services Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2235229299", "csp": "Paperless Innovations, Inc.", "cso": "Actus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2135637226", "csp": "Pearson VUE", "cso": "Pearson Federal Cloud System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1818240234", "csp": "Perceptyx", "cso": "Perceptyx Insights Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2202555908", "csp": "Pexip Inc.", "cso": "Pexip Government Cloud (PGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102577114", "csp": "Pitney Bowes", "cso": "SendPro 360", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2127765215", "csp": "Point Blue Conservation Science", "cso": "Point Blue Science Cloud", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2432218524", "csp": "Power Settlements Consulting and Software, LLC (PSCS), a subsidiary of Yes Energy, LLC", "cso": "PowerCore™ (PC-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406651384", "csp": "Precisely Software", "cso": "Data Integrity Suite for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2322855016", "csp": "ProjectTeam, Inc.", "cso": "ProjectTeam for Government (Construction Project and Program Management)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1819168894", "csp": "Proofpoint, Inc.", "cso": "Proofpoint Targeted Attack Protection", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2113157410", "csp": "Public Health Foundation", "cso": "TRAIN Learning Network", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR1924942935", "csp": "Qgenda, LLC", "cso": "QGenda", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2313477206", "csp": "Quadient inc.", "cso": "S.M.A.R.T. - Federal Editions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1510137547", "csp": "Rackspace Government Solutions", "cso": "Rackspace Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1722838693", "csp": "Rave Mobile Safety", "cso": "Rave Safety Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2209555576", "csp": "RingMD USA Inc.", "cso": "RingMD Telemedicine", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2425742814", "csp": "San Luis Aviation, Inc.", "cso": "ESChat", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2418039495", "csp": "ScienceLogic, Inc.", "cso": "ScienceLogic Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2033152148", "csp": "Seven Bridges Genomics, Inc", "cso": "Seven Bridges Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2118043605", "csp": "Skillsoft", "cso": "Percipio", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1823447014", "csp": "Slack Technologies", "cso": "Slack", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603077867", "csp": "SMX (Formerly Smartronix)", "cso": "Elevate Intelligent Automation Platform (IAP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1809360201", "csp": "Snowflake Inc.", "cso": "The Data Cloud on AWS US East/West", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1809360202A", "csp": "Snowflake Inc.", "cso": "The Data Cloud on Azure Government (High)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2230451369", "csp": "Snyk", "cso": "Snyk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2002367706", "csp": "Somnoware Healthcare Systems", "cso": "Somnoware", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2035740126", "csp": "Sprinklr, Inc.", "cso": "Sprinklr CXM for Government (CXM)", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2135043135", "csp": "SRR International,Inc.", "cso": "CloudLCMS", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1918740338", "csp": "Sumo Logic", "cso": "Sumo Logic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1730842236", "csp": "T-Metrics, Inc.", "cso": "T-Metrics Cloud Contact Center (TCCC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2428653856", "csp": "Tactical Edge", "cso": "Total Visibility Anywhere", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1913835324", "csp": "TalaTek, LLC", "cso": "TalaTek intelligent Governance and Risk Integrated Solution (TiGRIS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213647361", "csp": "Talkdesk", "cso": "Talkdesk CX Cloud™ Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2100740435", "csp": "Tango", "cso": "Tango", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2110342613", "csp": "Tanium", "cso": "Tanium Cloud for US Government (TC-USG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2215045786", "csp": "Tenable", "cso": "Tenable Cloud Security for US Government - Ermetic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2028534270", "csp": "Trello", "cso": "Trello Enterprise Cloud", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2226231529", "csp": "Trend Micro Inc.", "cso": "Trend Vision One for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226228379", "csp": "Trend Micro Inc.", "cso": "Trend Cloud One for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2110836406", "csp": "Trustwave Government Solutions", "cso": "Trustwave Fusion", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2108649352", "csp": "Tyler Federal, LLC", "cso": "Tyler Federal Product Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "SOCRATA", "csp": "Tyler Technologies Data & Insights", "cso": "Tyler Data Platform, powered by Socrata", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2132958724", "csp": "UiPath", "cso": "Automation Cloud Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1506046707", "csp": "Unison", "cso": "Contracting SaaS", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2415334644", "csp": "United States Department of Agriculture", "cso": "AgCloud Managed Platform Services (AMPS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "AGENCYWC2", "csp": "United States Department of the Treasury", "cso": "Treasury Cloud Moderate", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125561001", "csp": "Unqork, Inc.", "cso": "Unqork for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1817874315", "csp": "Valimail", "cso": "Valimail Enforce Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2411443563", "csp": "Valley IT Solutions, LLC", "cso": "Kernos", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421252644", "csp": "Varonis", "cso": "Varonis DatAdvantage Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421252636", "csp": "Varonis", "cso": "Varonis Data Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1605107898", "csp": "VBrick Systems, Inc.", "cso": "VBrick Rev", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1804557312", "csp": "Veritone, Inc.", "cso": "Veritone Intelligent Digital Evidence Management System (iDEMS) for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416859101", "csp": "Verkada Inc", "cso": "Verkada Command Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2501644859", "csp": "Vibrent Health", "cso": "Digital Health Research Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1605037894", "csp": "Virtru", "cso": "Virtru Data Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2433985791", "csp": "Vyond", "cso": "Vyond for Government", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1924344515", "csp": "Wellspring Worldwide, Inc.", "cso": "Wellspring Tech Transfer and IP Management Suite (WTIMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2106045767", "csp": "WingSwept", "cso": "Case Management & Tracking System (CMTS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2207643307", "csp": "Wolters Kluwer", "cso": "TeamMate FedRAMP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2103344623", "csp": "Workday Inc.", "cso": "Workday Government Cloud (WGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1726564822", "csp": "Workiva", "cso": "Workiva Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1821856903", "csp": "Zendesk", "cso": "Zendesk Customer Support and Help Desk Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2219763604", "csp": "Zscaler, Inc.", "cso": "Zscaler Private Access - Government (Zero Trust Exchange - VPN Replacement)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families", "Agency for Healthcare Research and Quality", "American Battle Monuments Commission", "Argonne National Laboratory", "Bureau of Economic Analysis", "Bureau of Indian Education", "Bureau of Safety and Environmental Enforcement", "Bureau of Trust Funds Administration", "Centers for Medicare & Medicaid Services", "Commodity Futures Trading Commission", "Consumer Financial Protection Bureau", "Corporation for National & Community Service", "Customs and Border Protection", "Cybersecurity & Infrastructure Security Agency", "Department of Agriculture", "Department of Commerce", "Department of Education", "Department of Health and Human Services", "Department of Housing and Urban Development", "Department of Labor", "Department of State", "Department of Transportation", "Department of the Interior", "Export-Import Bank of the United States", "FHFA Office of the Inspector General", "Federal Aviation Administration", "Federal Communications Commission", "Federal Emergency Management Agency", "Federal Energy Regulatory Commission", "Federal Highway Administration", "Federal Housing Finance Agency", "Federal Retirement Thrift Investment Board", "Food and Drug Administration", "General Services Administration", "HHS Office of the Inspector General", "Health Resources and Services Administration", "Internal Revenue Service", "International Trade Administration", "Millennium Challenge Corporation", "National Aeronautics and Space Administration", "National Institute of Standards and Technology", "National Institutes of Health", "National Nuclear Security Administration / Kansas City Field Office", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "National Oceanic and Atmospheric Administration", "National Park Service", "National Renewable Energy Laboratory", "National Science Foundation", "Nuclear Regulatory Commission", "Office of Financial Research", "Office of Justice Programs", "Office of Personnel Management", "Office of Surface Mining and Reclamation Enforcement", "Office of the Comptroller of the Currency", "Social Security Administration", "Special Operations Command, Pacific", "Substance Abuse and Mental Health Service Administration", "Surface Transportation Board", "Tennessee Valley Authority", "US Fish and Wildlife Service", "United States Census Bureau", "United States Coast Guard", "United States Geological Survey", "United States International Trade Commission", "United States Patent and Trademark Office", "United States Securities and Exchange Commission", "Universal Service Administrative Company" ], "agency_reuse": [ "" ], "service_description": "Amazon US East/West is a multi-tenant public cloud for Federal, State and Local Government customers, as well as commercial customers, designed to meet a wide range of regulatory requirements, to include government compliance and security requirements. AWS leverages the Infrastructure-as-a-Service (IaaS) cloud computing model, which enables convenient, on-demand Internet access to a shared pool of configurable computing resources such as servers, storage, network infrastructure, and various other web services. Customers can rapidly provision or release computing resources on demand.\r\n\r\nFederal agencies interested in collaborative continuous monitoring with AWS should reach out to: aws-collaborative-conmon@amazon.com", "fedramp_msg": "AWS US East/West previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "aws-compliance-fedramp@amazon.com", "website": "http://www.aws.amazon.com/", "uei": "NQEWN6C1LSU5", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "AWS App Mesh", "AWS Backup", "AWS Batch", "AWS Certificate Manager (ACM)", "AWS Cloud Map", "AWS Cloud9", "AWS CloudFormation", "AWS CloudHSM", "AWS CloudTrail", "AWS CodeBuild", "AWS CodeCommit", "AWS CodeDeploy", "AWS CodePipeline", "AWS Config", "AWS Control Tower", "AWS DataSync", "AWS Database Migration Service (DMS)", "AWS Direct Connect", "AWS Directory Service", "AWS Elastic Beanstalk", "AWS Firewall Manager", "AWS Glue", "AWS Glue DataBrew", "AWS Ground Station", "AWS Health Dashboard", "AWS Identity and Access Management (IAM)", "AWS IoT Core", "AWS IoT Device Management", "AWS IoT Greengrass", "AWS Key Management Service (KMS)", "AWS Lambda", "AWS License Manager", "AWS Network Firewall", "AWS Organizations", "AWS Outposts (software)", "AWS Resource Access Manager (AWS RAM)", "AWS Secrets Manager", "AWS Security Hub CSPM", "AWS Serverless Application Repository", "AWS Service Catalog", "AWS Shield Advanced", "AWS Snowball Edge", "AWS Step Functions", "AWS Storage Gateway", "AWS Systems Manager", "AWS Transfer Family", "AWS Trusted Advisor", "AWS X-Ray", "Amazon Athena", "Amazon Aurora MySQL", "Amazon Cloud Directory", "Amazon CloudFront", "Amazon CloudWatch", "Amazon CloudWatch Logs", "Amazon Cognito", "Amazon Comprehend", "Amazon Comprehend Medical", "Amazon Connect", "Amazon Detective", "Amazon DynamoDB", "Amazon EC2 Image Builder", "Amazon ElastiCache", "Amazon Elastic Block Store (EBS)", "Amazon Elastic Compute Cloud (EC2)", "Amazon Elastic Container Registry (ECR)", "Amazon Elastic Container Service (ECS)", "Amazon Elastic File System (EFS)", "Amazon Elastic Kubernetes Service (EKS)", "Amazon Elastic MapReduce (EMR)", "Amazon EventBridge", "Amazon FinSpace", "Amazon Forecast", "Amazon GuardDuty", "Amazon Inspector Classic", "Amazon Kendra", "Amazon Keyspaces (for Apache Cassandra)", "Amazon Kinesis Data Streams", "Amazon Lex", "Amazon MQ", "Amazon Macie", "Amazon Managed Streaming for Apache Kafka (Amazon MSK)", "Amazon Neptune", "Amazon OpenSearch Service", "Amazon Polly", "Amazon Redshift", "Amazon Rekognition", "Amazon Route 53", "Amazon S3 Glacier", "Amazon SageMaker AI", "Amazon Simple Email Service (SES)", "Amazon Simple Notification Service (SNS)", "Amazon Simple Queue Service (SQS)", "Amazon Simple Storage Service (S3)", "Amazon Simple Workflow Service (SWF)", "Amazon Textract", "Amazon Transcribe", "Amazon Translate", "Amazon Virtual Private Cloud (VPC)", "AWS Application Migration Service (MGN)", "AWS Audit Manager", "AWS Clean Rooms", "AWS CloudShell", "AWS Elastic Disaster Recovery (AWS DRS)", "AWS Elemental MediaConvert", "AWS Entity Resolution", "AWS Fault Injection Service", "AWS Global Accelerator", "AWS HealthImaging", "AWS HealthLake", "AWS HealthOmics", "AWS IAM Identity Center", "AWS IoT Device Defender", "AWS IoT Events", "AWS Mainframe Modernization", "AWS Managed Services (AMS)", "AWS Network Manager", "AWS Parallel Computing Service", "AWS Private Certificate Authority", "AWS Resource Groups", "AWS Security Incident Response", "AWS Signer", "AWS Verified Access (AVA)", "AWS Web Application Firewall (WAF)", "AWS Web Application Firewall Classic (WAF Classic)", "AWS Well-Architected Tool", "AWS Wickr", "Amazon API Gateway", "Amazon AppFlow", "Amazon Aurora DSQL", "Amazon Aurora PostgreSQL", "Amazon Bedrock", "Amazon Bedrock Agentcore", "Amazon Chime SDK", "Amazon Data Firehose", "Amazon DataZone", "Amazon DevOps Guru", "Amazon DocumentDB (with MongoDB compatibility)", "Amazon FSx", "Amazon Inspector", "Amazon Managed Service for Apache Flink", "Amazon Managed Service for Prometheus", "Amazon MemoryDB", "Amazon Pinpoint and End User Messaging", "Amazon Q Business", "Amazon Q Developer in chat applications", "Amazon Quick", "Amazon RDS for Db2", "Amazon RDS for MariaDB", "Amazon RDS for MySQL", "Amazon RDS for Oracle", "Amazon RDS for Postgres", "Amazon RDS for SQL Server", "Amazon Security Lake", "Amazon Timestream for LiveAnalytics", "Amazon Verified Permissions", "Amazon WorkSpaces", "Amazon WorkSpaces Applications", "Amazon WorkSpaces Secure Browser" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1603047866", "name": "Amazon", "cloud_service_provider": "Amazon", "cloud_service_offering": "AWS GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Amazon%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-07-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2016-06-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 83, "reuse": 1216, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2015-07-27T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2016-06-21T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2016-06-21T20:00:00.000Z", "annual_assessment": "2011-06-21T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS", "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "F1607067912", "csp": "18F - 18F Cloud.gov", "cso": "CG-TTS - Cloud.Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335047392", "csp": "3rd Eye Technologies LLC.", "cso": "Mystic Message Archival", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000174962", "csp": "Abbott, Inc.", "cso": "LibreView for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2425960757", "csp": "Abnormal AI ", "cso": "Abnormal AI for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1834336116", "csp": "Accenture Federal Services", "cso": "Accenture Extended Detection and Response (XDR) for government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2104942200", "csp": "Acuant, Inc.", "cso": "Connect, Ozone, & Facial Recognition System (COFRS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1509037236", "csp": "Adobe", "cso": "Adobe Connect Managed Services (ACMS-GC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1509037239", "csp": "Adobe", "cso": "Adobe Experience Manager Managed Services (AEMMS-GC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2520950455", "csp": "Andesite AI, Inc.", "cso": "Andesite Azimuth for Government AAG", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1210011608", "csp": "Appian", "cso": "Appian Government Cloud - Moderate", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603157879", "csp": "Apptio an IBM company", "cso": "Apptio for Technology Business Management and Cloud Financial Management (TBM) ", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2330939028", "csp": "Aqua Security Software Inc.", "cso": "Aqua Platform for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2031936863", "csp": "Armis Federal LLC", "cso": "Armis FedRAMP Edition (AFE)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2427142353", "csp": "AutoRABIT Holding, Inc.", "cso": "AutoRABIT for Public Sector - CodeScan, Guard, & ARMOR", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2410056366", "csp": "Avature Federal Platform", "cso": "Avature Limited", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2401047002", "csp": "Axonius Federal Systems", "cso": "Axonius Asset Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430123303", "csp": "Aztec Software", "cso": "Aztec Learning System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918442180", "csp": "Bizagi Corp.", "cso": "Bizagi Cloud for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1302271924A", "csp": "BlackBerry", "cso": "BlackBerry Cloud - AtHoc Services for Government (High)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1506076709", "csp": "Blackboard", "cso": "Blackboard LMS", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2035056105", "csp": "Bluescape", "cso": "Bluescape with n8n for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1212191840A", "csp": "Box Inc.", "cso": "Box Enterprise Cloud Content Collaboration Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2510550050", "csp": "Bugcrowd Inc.", "cso": "Bugcrowd for Government (BCGOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2530025267", "csp": "Caveonix, Inc.", "cso": "Caveonix", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2421035110", "csp": "Cellebrite", "cso": "Cellebrite Government Cloud (CGC)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2317262742", "csp": "Ceribell", "cso": "Ceribell EEG", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2018946952", "csp": "CGI Federal", "cso": "Sunflower Asset Management Cloud (SAMC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2022243058", "csp": "CGI Federal", "cso": "Momentum Enterprise Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2334756650", "csp": "Chainalysis", "cso": "Reactor", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332984245", "csp": "ChargePoint, Inc.", "cso": "CP Fed Cloud", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2514624801", "csp": "Checkmarx", "cso": "Checkmarx One for Government (CXG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2330728655", "csp": "Chronus LLC", "cso": "Chronus for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2518163100", "csp": "Cisco", "cso": "Spaces for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1823368486", "csp": "Cisco AppDynamics", "cso": "AppDynamics GovAPM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2523656707", "csp": "Cisco Systems, Inc.", "cso": "Cisco ThousandEyes for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2012534927", "csp": "Cisco Systems, Inc.", "cso": "Cisco Catalyst SD-WAN for Government (SDWAN-G)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1819254092", "csp": "Citrix", "cso": "Citrix for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406760385", "csp": "Clarivate Analytics US LLC", "cso": "Clarivate Intellectual Property AI & Image Search Platform (CIPAI-ISP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2309544938", "csp": "Cloudera Government Solutions, Inc", "cso": "Cloudera for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2013059515", "csp": "Cofense", "cso": "Cofense PhishMe", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2306445868", "csp": "Cohesity", "cso": "Cohesity Cloud Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1706403967", "csp": "Collibra", "cso": "Collibra Platform for Government (CPG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234550858", "csp": "Concur Technologies, Inc.", "cso": "Concur Cloud for Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1915750265", "csp": "Continuum GRC, Inc.", "cso": "ITAM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1722160191", "csp": "CORAS", "cso": "CORAS Federal", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2122140784", "csp": "Covergent Solutions Inc dba Exiger Government Solutions (EGS)", "cso": "Exiger Federal Cloud (EFC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1807853629A", "csp": "CrowdStrike, Inc.", "cso": "CrowdStrike Falcon Platform for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2402468053", "csp": "Darktrace Federal Inc.", "cso": "Cyber AI Mission Defense and Email Protection", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2324740262", "csp": "Databricks, Inc.", "cso": "Databricks on AWS GovCloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2023864279A", "csp": "Datadog, Inc.", "cso": "Datadog for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2118743892", "csp": "Digital.ai", "cso": "Digital.ai Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1834172478", "csp": "Diligent, Inc.", "cso": "Diligent One Platform (D1P)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2424945160", "csp": "dMetrics", "cso": "Minsky No-code ML/NLP Knowledge Graphing Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2432940371", "csp": "Docebo", "cso": "Docebo Learning Platform for Gov (DCBO-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1507136931A", "csp": "Druva, Inc.", "cso": "Druva Data Resiliency Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603307884", "csp": "e-Builder, A Trimble Company", "cso": "Trimble Unity Construct Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1301251880", "csp": "Economic Systems", "cso": "Economic Systems Federal Human Resources Navigator", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2023601671", "csp": "eGain Corporation", "cso": "eGain Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2016962740", "csp": "Eightfold AI Inc.", "cso": "Eightfold Talent Intelligence Platform (TIP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2004446306", "csp": "Elastic", "cso": "Elastic Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2034966708", "csp": "End To End Computing", "cso": "Singularity", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1930046270", "csp": "EnergyCAP LLC.", "cso": "EnergyCAP", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1707156421", "csp": "Envisage Technologies LLC", "cso": "Acadis Readiness Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1916055736", "csp": "Everlaw, Inc.", "cso": "Everlaw Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1827963145", "csp": "Exterro, Inc.", "cso": "Exterro E-Discovery and Legal Software Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324454026", "csp": "FM:Systems", "cso": "OpenBlue Workplace", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1932554201", "csp": "Forcepoint", "cso": "ONE – Security Service Edge (SSE) – CASB/DLP/SWG/ZTNA/RBI", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2210851632", "csp": "GetWellNetwork", "cso": "GetWellNetwork - Get Well Anywhere - Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2411959145", "csp": "GitLab", "cso": "GitLab Dedicated for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324055183", "csp": "Govini", "cso": "Ark.ai", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2521554684", "csp": "H2O.AI for Government", "cso": "H2O.AI", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2411956235", "csp": "HB Healthcare Safety, SBC", "cso": "Healthcare Safeware", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1831429369", "csp": "HireVue", "cso": "Recruitment Assessments and Video Interviewing", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2017459185", "csp": "HP Inc.", "cso": "Workforce Experience Platform Collaboration", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2333538201", "csp": "Hypori, Inc.", "cso": "Hypori Government Cloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2607452240", "csp": "IBM", "cso": "GO.gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2524349489", "csp": "IBM", "cso": "IBM Data Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1512017638", "csp": "IdeaScale", "cso": "IdeaScale Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2230244107", "csp": "Illumio, Inc.", "cso": "Illumio Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2017257053", "csp": "Infoblox", "cso": "Infoblox Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1710033970", "csp": "Infor", "cso": "Infor Government Solutions (IGS) Software as a Service", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029331613", "csp": "Informatica LLC", "cso": "Informatica Intelligent Cloud Services (IICS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1821933307", "csp": "Innovest Systems, LLC", "cso": "Trust & Wealth Management Solutions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1724526654", "csp": "Intelliworx", "cso": "Intelliworx Cloud Workflow Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2104636677", "csp": "Ipsos America, Inc.", "cso": "Ipsos Research", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102758152", "csp": "Juniper Networks", "cso": "Juniper Mist", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2128462521", "csp": "Juvare, LLC", "cso": "Juvare Federal Cloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2118080669", "csp": "Knightscope, Inc.", "cso": "Knightscope Autonomous Security Robot (Knightscope ASR)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2528033654", "csp": "Knox Systems", "cso": "Knox Systems FedRAMP High Managed Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2422436886", "csp": "Laerdal Labs D.C.", "cso": "Laerdal -- SimCapture Cloud Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2235154356", "csp": "Lastwall Corp", "cso": "IDCommand", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1920363607", "csp": "LevelBlue", "cso": "LevelBlue Threat Detection and Response for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2428168490", "csp": "LogicMonitor", "cso": "LM for Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2218073444", "csp": "Lucid Software, Inc.", "cso": "Lucid GovSuite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1927682057", "csp": "M.C. Dean, Inc.", "cso": "InfraLink", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2129953050", "csp": "Manhattan Associates, Inc.", "cso": "Manhattan Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2235965777", "csp": "Mark43, Inc.", "cso": "Mark43 Public Safety Platform (PSP)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1902240018", "csp": "MDRC", "cso": "SPROUT", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332852130", "csp": "Medallia Inc.", "cso": "Mindful by Medallia", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1711262842", "csp": "Medallia, Inc.", "cso": "Medallia GovCloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2206159758", "csp": "Merlin International", "cso": "Constellation GovCloud (CGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2126176344", "csp": "MicroStrategy", "cso": "MicroStrategy Cloud for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2122150307", "csp": "MongoDB", "cso": "MongoDB Atlas for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335850270", "csp": "Movius Interactive Corporation", "cso": "Movius MultiLine and Movius Decentralized Distributed Secure Communications", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1818161169", "csp": "MuleSoft", "cso": "MuleSoft Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2224739070", "csp": "National Resident Matching Program", "cso": "iMatch", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2119265538", "csp": "NEOGOV", "cso": "NEOGOV Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1508127183", "csp": "NetComm", "cso": "Beacon", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213764335", "csp": "Noblis", "cso": "RunCyberAssurance", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134455708", "csp": "Nucleus Security, Inc", "cso": "Nucleus for Government (NucleusGov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2131856836", "csp": "Okta", "cso": "Okta IDaaS Government High Cloud (GHC)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2110251776", "csp": "Ontario Systems, LLC d/b/a Finvi", "cso": "Ontario Cloud Federal (OCF)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2526948870", "csp": "Ontic Technologies", "cso": "Ontic for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2215946050", "csp": "OpenText", "cso": "ITMX Platform featuring Service & Asset Management, Universal Discovery, CMDB and Project & Portfolio Management", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1301101857", "csp": "OpenText", "cso": "OpenText™ Core Application Security (Fortify On Demand)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1712871948", "csp": "Oracle", "cso": "Aconex for Defense", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2315464863", "csp": "Palantir Technologies", "cso": "Palantir Federal Cloud Service – Supporting Services (PFCS-SS)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2434554673", "csp": "Palantir Technologies Inc.", "cso": "Palantir Federal Cloud Service", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2001619708", "csp": "Palo Alto Networks, Inc.", "cso": "Idira Endpoint Privilege Manager for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1913470600", "csp": "Palo Alto Networks, Inc.", "cso": "Palo Alto Networks Government Cloud Services", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2001619337", "csp": "Palo Alto Networks, Inc.", "cso": "Idira Identity Security Government Services Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1306282198A", "csp": "Pegasystems", "cso": "Pega Cloud for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1716961549", "csp": "Peraton Corporation", "cso": "Next Generation Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1818240234", "csp": "Perceptyx", "cso": "Perceptyx Insights Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406651384", "csp": "Precisely Software", "cso": "Data Integrity Suite for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2224752400", "csp": "Privoro LLC", "cso": "Privoro Fulcrum Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2516365096", "csp": "Procore Technologies, Inc", "cso": "Procore for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125653037", "csp": "Qlik Technologies Inc.", "cso": "Qlik Cloud Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1606097904A", "csp": "Qualtrics, LLC", "cso": "Qualtrics XM Platform - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1733061545", "csp": "R&K Solutions, Inc", "cso": "GoRPM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1510137547", "csp": "Rackspace Government Solutions", "cso": "Rackspace Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2422240916", "csp": "Rapid7", "cso": "InsightGovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2309954376", "csp": "RecAccess", "cso": "RecAccess", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102031769", "csp": "Red Hat", "cso": "Red Hat OpenShift Service on AWS (ROSA)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1915765924", "csp": "Repario", "cso": "Repario Government Solutions (RGS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1931476240", "csp": "Rescale", "cso": "Rescale Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2100757165", "csp": "Research Dataware LLC", "cso": "IRBNet on GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102652499", "csp": "RSA Security LLC", "cso": "RSA® ID Plus for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234256499", "csp": "Rubrik", "cso": "Rubrik Security Cloud - Government (RSC-G)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2001938710A", "csp": "SailPoint Technologies, Inc.", "cso": "SailPoint Identity Security Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2003061248", "csp": "Salesforce", "cso": "Salesforce Government Cloud Plus", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2425742814", "csp": "San Luis Aviation, Inc.", "cso": "ESChat", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1602257856", "csp": "SAP National Security Services Inc. (SAP NS2)", "cso": "DoD Cloud Intelligent Enterprise – DD-CIE", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1719841002", "csp": "SAP National Security Services Inc. (SAP NS2)", "cso": "SAP NS2 Cloud Intelligent Enterprise", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1821062403", "csp": "Saviynt, Inc.", "cso": "Saviynt Enterprise Identity Cloud (EIC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2023666173", "csp": "Scale AI, Inc", "cso": "Scale AI Data Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2410866384", "csp": "Second Front Systems", "cso": "2F Game Warden", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1919071020A", "csp": "SentinelOne", "cso": "SentinelOne Singularity Platform High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2231561929", "csp": "Siemens Government Technologies ", "cso": "Mendix Cloud for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1506096710", "csp": "Skyhigh Security", "cso": "Skyhigh Security Service Edge (SSE) Government Cloud Services (Cloud Access Security Broker (CASB) & Secure Web Gateway (SWG) for Cloud)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1730866868", "csp": "Smartsheet", "cso": "Smartsheet Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603077867", "csp": "SMX (Formerly Smartronix)", "cso": "Elevate Intelligent Automation Platform (IAP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2334936522", "csp": "Socure, Inc.", "cso": "Socure for Government (SocureGov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000945223", "csp": "Software AG Government Solutions", "cso": "ARIS Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2135915901", "csp": "Solventum", "cso": "Solventum RevCycle Health Services Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213722684", "csp": "Spider Strategies", "cso": "Spider Impact for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2314156865", "csp": "Splunk", "cso": "Splunk Cloud Platform for FedRAMP High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1607197917", "csp": "Splunk", "cso": "Splunk Cloud Platform for FedRAMP Moderate", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2110342613", "csp": "Tanium", "cso": "Tanium Cloud for US Government (TC-USG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2403936773", "csp": "Telos Corporation", "cso": "Xacta SaaS", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2215045786", "csp": "Tenable", "cso": "Tenable Cloud Security for US Government - Ermetic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814276801", "csp": "Tenable Public Sector (TPS)", "cso": "Tenable Government Solutions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1819057982", "csp": "The Coleridge Initiative, Inc.", "cso": "Administrative Data Research Facility (ADRF)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2334748657", "csp": "ThreatConnect", "cso": "ThreatConnect For Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2118555665", "csp": "Totara Learning Inc.", "cso": "Totara Talent Development Government Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1602057825A", "csp": "TRAPWIRE", "cso": "TRAPWIRE Threat Detection and Analysis System ", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1512017637", "csp": "Trellix", "cso": "Trellix Email Security GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1935245314A", "csp": "Trellix", "cso": "Trellix GovCloud Security Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2226228379", "csp": "Trend Micro Inc.", "cso": "Trend Cloud One for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2110836406", "csp": "Trustwave Government Solutions", "cso": "Trustwave Fusion", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2505553757", "csp": "Turning Point Global Solutions, L.L.C", "cso": "Network Inventory and Optimization Solution (NiOS®)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2208555094", "csp": "UberEther", "cso": "IAM Advantage", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2009746321", "csp": "United Solutions", "cso": "US AI", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2415334644", "csp": "United States Department of Agriculture", "cso": "AgCloud Managed Platform Services (AMPS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1801046750", "csp": "United States Department of the Treasury", "cso": "Treasury Cloud (TCloud)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2125561001", "csp": "Unqork, Inc.", "cso": "Unqork for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2525556241XM", "csp": "Vanta", "cso": "Vanta Government Cloud", "status": "FedRAMP Certified", "impact_level": "20x Moderate", "impact_level_number": "6" }, { "id": "FR2025456731", "csp": "Vaultara, LLC", "cso": "Vaultara Flare Services", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1509237360", "csp": "Veracode", "cso": "Veracode Online Security Platform for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1804557312", "csp": "Veritone, Inc.", "cso": "Veritone Intelligent Digital Evidence Management System (iDEMS) for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416859101", "csp": "Verkada Inc", "cso": "Verkada Command Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1825232355A", "csp": "WellHive Holdings, LLC", "cso": "WellHive", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1924344515", "csp": "Wellspring Worldwide, Inc.", "cso": "Wellspring Tech Transfer and IP Management Suite (WTIMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2032042635", "csp": "WidePoint Integrated Solutions Corp.", "cso": "Intelligent Technology Management System (ITMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2308034636A", "csp": "Wiz, Inc.", "cso": "Wiz for U.S. Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2113557839", "csp": "Yello Dba Recsolu Inc", "cso": "Yello Government Recruiting Solution", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1731347234", "csp": "Zimperium", "cso": "Zimperium Mobile Endpoint Cyber Security", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1825941347A", "csp": "Zoom Video Communications, LLC", "cso": "Zoom for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2227062482", "csp": "Zscaler, Inc.", "cso": "Zscaler Internet Access - Government (Secure Web Gateway - vTIC) - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1719759604", "csp": "Zscaler, Inc.", "cso": "Zscaler Private Access - Government (Zero Trust Networking - VPN Replacement)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1720454205", "csp": "Zscaler, Inc.", "cso": "Zscaler Internet Access - Government (Secure Web Gateway - vTIC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Agency for Healthcare Research and Quality", "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Bureau of Labor Statistics", "Bureau of the Fiscal Service", "Consumer Product Safety Commission", "Corporation for National & Community Service", "Council of the Inspectors General on Integrity and Efficiency", "Cybersecurity & Infrastructure Security Agency", "Defense Health Agency", "Defense Information Systems Agency", "Department of Agriculture", "Department of Commerce", "Department of Education", "Department of Health and Human Services", "Department of Labor", "Department of State", "Department of the Interior", "Executive Office for United States Attorneys", "Federal Aviation Administration", "Federal Bureau of Prisons", "Federal Emergency Management Agency", "Federal Energy Regulatory Commission", "Federal Law Enforcement Training Centers", "Federal Reserve System", "Federal Retirement Thrift Investment Board", "Financial Crimes Enforcement Network", "Food and Drug Administration", "General Services Administration", "Government National Mortgage Association", "Immigration and Customs Enforcement", "Internal Revenue Service", "Justice Management Division", "Millennium Challenge Corporation", "Missile Defense Agency", "National Aeronautics and Space Administration", "National Institute of Standards and Technology", "National Institutes of Health", "National Nuclear Security Administration / Kansas City Field Office", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "National Oceanic and Atmospheric Administration", "National Science Foundation", "Nuclear Regulatory Commission", "Office of Justice Programs", "Office of Personnel Management", "Office of the Comptroller of the Currency", "Tennessee Valley Authority", "United States Census Bureau", "United States Coast Guard", "United States Marine Corps", "United States Securities and Exchange Commission", "Universal Service Administrative Company" ], "agency_reuse": [ "" ], "service_description": "AWS GovCloud (US) is an AWS Region designed to allow US government agencies and customers supporting the US government to move more sensitive workloads into the cloud. In addition to complying with FedRAMP requirements, the AWS GovCloud (US) framework adheres to U.S. International Traffic in Arms Regulations (ITAR) regulations. Additional information is available at http://aws.amazon.com/govcloud-us/.\r\n\r\nFederal agencies interested in collaborative continuous monitoring with AWS should reach out to: aws-collaborative-conmon@amazon.com", "fedramp_msg": "AWS GovCloud previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "aws-compliance-fedramp@amazon.com", "website": "https://aws.amazon.com/", "uei": "NQEWN6C1LSU5", "small_business": false, "business_categories": [ "Accounting", "Finance", "Operations Management" ], "service_last_90": [ "AWS Parallel Computing Service", "Amazon Managed Grafana", "Kiro" ], "all_others": [ "AWS Backup", "AWS Batch", "AWS Certificate Manager (ACM)", "AWS CloudFormation", "AWS CloudHSM", "AWS CloudTrail", "AWS CodeBuild", "AWS CodeCommit", "AWS CodeDeploy", "AWS CodePipeline", "AWS Config", "AWS DataSync", "AWS Database Migration Service (DMS)", "AWS Direct Connect", "AWS Directory Service", "AWS Elastic Beanstalk", "AWS Elemental MediaConvert", "AWS Firewall Manager", "AWS Glue", "AWS Identity and Access Management (IAM)", "AWS IoT Core", "AWS IoT Device Management", "AWS IoT Greengrass", "AWS Key Management Service (KMS)", "AWS Lambda", "AWS License Manager", "AWS Network Firewall", "AWS Organizations", "AWS Outposts (software)", "AWS Resource Access Manager (AWS RAM)", "AWS Resource Groups", "AWS Secrets Manager", "AWS Security Hub CSPM", "AWS Serverless Application Repository", "AWS Service Catalog", "AWS Snowball Edge", "AWS Step Functions", "AWS Storage Gateway", "AWS Systems Manager", "AWS Transfer Family", "AWS Trusted Advisor", "AWS X-Ray", "Amazon Athena", "Amazon Aurora MySQL", "Amazon Aurora PostgreSQL", "Amazon Chime SDK", "Amazon Cloud Directory", "Amazon CloudWatch", "Amazon CloudWatch Logs", "Amazon Cognito", "Amazon Comprehend", "Amazon Comprehend Medical", "Amazon Connect", "Amazon Detective", "Amazon DynamoDB", "Amazon ElastiCache", "Amazon Elastic Block Store (EBS)", "Amazon Elastic Compute Cloud (EC2)", "Amazon Elastic Container Registry (ECR)", "Amazon Elastic Container Service (ECS)", "Amazon Elastic File System (EFS)", "Amazon Elastic Kubernetes Service (EKS)", "Amazon Elastic MapReduce (EMR)", "Amazon EventBridge", "Amazon GuardDuty", "Amazon Inspector Classic", "Amazon Kendra", "Amazon Keyspaces (for Apache Cassandra)", "Amazon Kinesis Data Streams", "Amazon Lex", "Amazon MQ", "Amazon Managed Streaming for Apache Kafka (Amazon MSK)", "Amazon Neptune", "Amazon OpenSearch Service", "Amazon Polly", "Amazon Redshift", "Amazon Rekognition", "Amazon Route 53", "Amazon S3 Glacier", "Amazon SageMaker AI", "Amazon Simple Email Service (SES)", "Amazon Simple Notification Service (SNS)", "Amazon Simple Queue Service (SQS)", "Amazon Simple Storage Service (S3)", "Amazon Simple Workflow Service (SWF)", "Amazon Textract", "Amazon Transcribe", "Amazon Translate", "Amazon Virtual Private Cloud (VPC)", "Amazon WorkSpaces", "AWS Application Auto Scaling", "AWS Application Migration Service (MGN)", "AWS Cloud Map", "AWS CloudShell", "AWS Compute Optimizer", "AWS Control Tower", "AWS Elastic Disaster Recovery (AWS DRS)", "AWS Fault Injection Service", "AWS Glue DataBrew", "AWS Health Dashboard", "AWS IAM Identity Center", "AWS IoT Device Defender", "AWS IoT Events", "AWS IoT SiteWise", "AWS IoT TwinMaker", "AWS Managed Services (AMS)", "AWS Network Manager", "AWS Private Certificate Authority", "AWS Resilience Hub", "AWS Signer", "AWS Verified Access (AVA)", "AWS Web Application Firewall (WAF)", "AWS Web Application Firewall Classic (WAF Classic)", "AWS Well-Architected Tool", "AWS Wickr", "Amazon API Gateway", "Amazon Bedrock", "Amazon Data Firehose", "Amazon DocumentDB (with MongoDB compatibility)", "Amazon EC2 Image Builder", "Amazon FSx", "Amazon Inspector", "Amazon Kinesis Video Streams", "Amazon Location Service", "Amazon Managed Service for Apache Flink", "Amazon Managed Service for Prometheus", "Amazon MemoryDB", "Amazon Pinpoint and End User Messaging", "Amazon Quick", "Amazon RDS for MariaDB", "Amazon RDS for MySQL", "Amazon RDS for Oracle", "Amazon RDS for Postgres", "Amazon RDS for SQL Server", "Amazon Security Lake", "Amazon Timestream for LiveAnalytics", "Amazon Verified Permissions", "Amazon WorkSpaces Applications" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1726637760", "name": "American Heart Association, Inc.", "cloud_service_provider": "American Heart Association, Inc.", "cloud_service_offering": "American Heart Association Precision Medicine Platform(AHA-PMP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/REAN%20PMP%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-06-15T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-07-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-07-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2017-06-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-07-23T20:00:00.000Z", "cert_date": "2019-07-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Institutes of Health", "fedramp_auth": "2019-07-23T20:00:00.000Z", "annual_assessment": "2011-08-16T04:00:00.000Z", "independent_assessor": "NCC Group Security Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "4", "leveraged_systems": [], "agency_authorizations": [ "National Institutes of Health" ], "agency_reuse": [ "" ], "service_description": "The AHA's Precision Medicine Platform is a cloud-based data resource that revolutionizes how the research community accelerates solutions for cardiovascular diseases. It provides unprecedented, open access to cardiovascular data sets, cutting-edge tools and cloud-based workspaces for collaboration. Researchers can search, filter, and unlock the data that matters most to their work - allowing them to find new solutions for big health improvements faster than ever before. The Precision Medicine Platform is powered by Amazon Web Services and is a strategic initiative of the American Heart Association.", "fedramp_msg": "N/A", "sales_email": "pmp@heart.org", "security_email": "fedramp@heart.org", "website": "https://pmp.heart.org/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Data Management", "Education & Training", "Health & Wellness", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2012366611", "name": "Amplifire", "cloud_service_provider": "Amplifire", "cloud_service_offering": "Amplifire", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Amplifire%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-11-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-04-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-05-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-11-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-04-29T20:00:00.000Z", "cert_date": "2021-05-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-05-14T20:00:00.000Z", "annual_assessment": "2011-04-29T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "With nearly 3.5 billion learner interactions to date, the Amplifire training platform helps hospitals and health systems thrive by improving on-the-job performance of care team members and other employees. Patented algorithms detect and correct the knowledge gaps, doubts, and misconceptions that Amplifire has discovered in clinician's minds in every care setting. Healthcare systems have adopted Amplifire as a core operating asset that transforms training from a rote activity, where managers only hope for results, into a strategic tool that delivers a workforce aligned with evidence-based, best practices. Simply put, it saves lives while lowering costs.", "fedramp_msg": "N/A", "sales_email": "kinvie@amplifire.com", "security_email": "kftechops@amplifire.com", "website": "https://amplifire.com/", "uei": "", "small_business": true, "business_categories": [ "Education & Training" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2520950455", "name": "Andesite AI, Inc.", "cloud_service_provider": "Andesite AI, Inc.", "cloud_service_offering": "Andesite Azimuth for Government AAG", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Andesite%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-01-13T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-02-02T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-02-26T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-01-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-02-02T20:00:00.000Z", "cert_date": "2026-02-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-02-26T20:00:00.000Z", "annual_assessment": "2011-01-30T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Office of Personnel Management" ], "agency_reuse": [ "" ], "service_description": "Andesite Azimuth for Government is delivered as a SaaS offering using a one account per tenant SaaS cloud computing environment. It is available to federal, state, local, and tribal governments, as well as research institutions, federal contractors, government contractors etc.", "fedramp_msg": "", "sales_email": "fedramp@andesite.ai", "security_email": "fedramp@andesite.ai", "website": "https://andesite.ai/", "uei": "ZXVHNLYNKQA4", "small_business": true, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Network Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2620235600", "name": "Anecdotes", "cloud_service_provider": "Anecdotes", "cloud_service_offering": "Anecdotes", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Anecdotes%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-24T22:13:49.342Z", "category": "Status Change", "description": "Status set to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2026-01-13T20:00:00.000Z", "ip_prog_date2": "2026-03-18T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-06-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-06-23T20:00:00.000Z", "annual_assessment": "2011-06-24T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Anecdotes is an Agentic GRC platform that delivers continuous compliance for enterprises managing GRC at scale. Built on an audit-grade data foundation, it automates evidence collection, maps controls across 60+ industry frameworks and custom policies, and gives teams real-time visibility into their risk and compliance posture. Where traditional tools automate workflows, Anecdotes agents execute them end to end, replacing point-in-time assessments with continuous monitoring. \nAnecdotes is the first agentic GRC platform to achieve FedRAMP 20x Class C (Moderate) Certification, bringing Continuous Control Monitoring to organizations operating under federal cloud security standards.", "fedramp_msg": "", "sales_email": "hello@anecdotes.ai", "security_email": "security@anecdotes.ai", "website": "https://www.anecdotes.ai/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2529359931", "name": "Anitian", "cloud_service_provider": "Anitian", "cloud_service_offering": "FedFlex", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Anitian%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-08-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2025-08-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-07-24T20:00:00.000Z", "ip_prog_date2": "2025-08-01T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2025-08-07T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-08-07T20:00:00.000Z", "annual_assessment": "2011-08-25T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "FedFlex, an AI-powered compliance automation platform purpose-built to help SaaS companies achieve FedRAMP 20x authorizations faster, with greater confidence, and more flexibility. FedFlex combines pre-engineered security infrastructure, agentic AI, and expert advisory services to accelerate time-to-compliance while maintaining rigor.", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class B Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "sales@anitian.com", "security_email": "security@anitian.com", "website": "https://www.anitian.com/fedflex-platform-overview/", "uei": "DQHLH8C1PH66", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2527234065", "name": "Anomali", "cloud_service_provider": "Anomali", "cloud_service_offering": "Anomali Security Operations Platform (ASOP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Anomali%20Logo.png", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-07-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-29T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-07-27T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Anomali Cloud Service Offering consists of two integrated components: Security Analytics and ThreatStream, delivered as a unified cloud-native security platform. Security Analytics provides AI and cloud-native security information and event management (SIEM) capabilities including data collection and normalization from network devices, endpoints, applications, and cloud services; real-time event correlation and threat detection using machine learning algorithms; behavioral analytics and anomaly detection; incident response workflows; and query capabilities across petabytes of historical data stored in an integrated security data lake with configurable retention periods up to 7+ years. The platform supports ingestion of 30TB+ of data within hours and enables sub-second query response times across petabyte-scale datasets using natural language processing and AI-supported interfaces.\n\nThreatStream provides threat intelligence management capabilities including automated collection, normalization, and curation of threat intelligence from commercial feeds, open source intelligence, and information sharing centers; management of indicators of compromise (IOCs) and indicators of attack (IOAs) with automated deduplication and confidence scoring; correlation of external threat intelligence with internal security telemetry; distribution of actionable intelligence to integrated security tools via APIs and standard protocols; threat analysis and enrichment with MITRE ATT&CK framework mapping; and secure community-based threat sharing. The service operates as a multi-tenant Software-as-a-Service solution with role-based access controls, data encryption in transit and at rest, comprehensive audit logging, and RESTful APIs for integration with existing security infrastructure. Service boundaries include all data ingestion interfaces, processing engines, storage systems, user interfaces, APIs, and integration points necessary to deliver security analytics and threat intelligence management capabilities.", "fedramp_msg": "N/A", "sales_email": "dzdravkov@anomali.com", "security_email": "dhe@anomali.com", "website": "https://anomali.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1210011608", "name": "Appian", "cloud_service_provider": "Appian", "cloud_service_offering": "Appian Government Cloud - Moderate", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Appian%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-05-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2015-04-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2015-06-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 28, "reuse": 27, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2014-05-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2015-04-23T20:00:00.000Z", "cert_date": "2015-06-22T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Federal Transportation Administration", "fedramp_auth": "2015-06-22T20:00:00.000Z", "annual_assessment": "2011-04-23T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "Bureau of the Fiscal Service", "Defense Information Systems Agency", "Department of Agriculture", "Department of Education", "Department of Health and Human Services", "Department of Labor", "Department of State", "Department of Veterans Affairs", "Federal Aviation Administration", "Federal Deposit Insurance Corporation", "Federal Reserve System", "Federal Transportation Administration", "Food and Drug Administration", "Interior Business Center", "National Aeronautics and Space Administration", "National Nuclear Security Administration", "National Oceanic and Atmospheric Administration", "Nuclear Regulatory Commission", "Substance Abuse and Mental Health Service Administration", "Surface Transportation Board", "U.S. Election Assistance Commission", "United States Securities and Exchange Commission", "Universal Service Administrative Company" ], "agency_reuse": [ "" ], "service_description": "Appian Government Cloud (AGC) Moderate provides Appian’s process automation platform for moderate-impact workloads. AGC offers Platform-as-a-Service (PaaS) and Software-as-a-Service (SaaS) functionality, which empowers agencies to design, automate, and optimize their operations to increase efficiency and productivity. It's an ideal solution for government agencies looking to streamline processes, particularly in the areas of critical acquisitions, case management, and logistics. Any agency can use Appian to orchestrate and automate complex processes to improve its performance and better serve constituent needs.", "fedramp_msg": "N/A", "sales_email": "sales@appian.com", "security_email": "fedramp@appian.com", "website": "https://appian.com/", "uei": "QHL3D738D7L4", "small_business": false, "business_categories": [ "Analytics", "Contact Center", "Customer Relations Management (CRM)", "Customer Service", "Development Tools", "Finance", "Fleet Management", "Grant Management", "Human Resources", "Law Enforcement" ], "service_last_90": [ "" ], "all_others": [ "AI Copilot", "AI Skill", "Autoscale", "Portals", "Process HQ", "RPA" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2318051429", "name": "Appian", "cloud_service_provider": "Appian", "cloud_service_offering": "Appian Government Cloud - High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Appian%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-08-31T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-03-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-08-31T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-03-26T20:00:00.000Z", "cert_date": "2025-04-03T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Drug Enforcement Administration", "fedramp_auth": "2025-04-03T20:00:00.000Z", "annual_assessment": "2011-03-22T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Drug Enforcement Administration" ], "agency_reuse": [ "" ], "service_description": "Appian Government Cloud (AGC) provides Appian’s process automation platform for high-impact workloads. AGC offers Platform-as-a-Service (PaaS) and Software-as-a-Service (SaaS) functionality, which empowers agencies to design, automate, and optimize their operations to increase efficiency and productivity. It's an ideal solution for government agencies looking to streamline processes, particularly in the areas of critical acquisitions, case management, and logistics. Any agency can use Appian to orchestrate and automate complex processes to improve its performance and better serve constituent needs.", "fedramp_msg": "N/A", "sales_email": "sales@appian.com", "security_email": "agcsecurity@appian.com", "website": "https://appian.com/", "uei": "QHL3D738D7L4", "small_business": false, "business_categories": [ "Analytics", "Contact Center", "Customer Relations Management (CRM)", "Customer Service", "Development Tools", "Finance", "Fleet Management", "Grant Management", "Human Resources", "Law Enforcement" ], "service_last_90": [ "" ], "all_others": [ "AI Copilot", "AI Skill", "Appian Process Automation Platform", "Autoscale", "Portals", "Process HQ", "RPA" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2431264500", "name": "AppOmni", "cloud_service_provider": "AppOmni", "cloud_service_offering": "AppOmni SaaS Security for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/AppOmni%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-10-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-06-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-07-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-10-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-06-02T20:00:00.000Z", "cert_date": "2025-07-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Centers for Medicare & Medicaid Services", "fedramp_auth": "2025-07-02T20:00:00.000Z", "annual_assessment": "2011-06-02T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Centers for Medicare & Medicaid Services" ], "agency_reuse": [ "" ], "service_description": "AppOmni SaaS Security for Government is a SaaS security platform designed to protect SaaS applications with posture management, threat detection and response, and identity security capabilities. The AppOmni Platform uses an application programming interface (API) connector to scan customer SaaS instances to discover, protect, and continuously monitor SaaS applications and data. AppOmni can discover misconfigurations that can lead to SaaS data exposures, find out who has access to what data and what might be at risk, and identify unsanctioned third-party applications connected to the SaaS estate. AppOmni can protect data against unauthorized access, apply security best practices, and notify when anomalous activity occurs. Continuous monitoring provides security teams with visibility, providing data protection and supporting privacy and compliance standards. AppOmni helps organizations to enjoy the productivity benefits of SaaS and safeguard their applications and data.", "fedramp_msg": "N/A", "sales_email": "support@appomni.com", "security_email": "fedramp@appomni.com", "website": "https://appomni.com/industry-solutions/public-sector/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "AppOmni SaaS Security for Government" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1603157879", "name": "Apptio an IBM company", "cloud_service_provider": "Apptio an IBM company", "cloud_service_offering": "Apptio for Technology Business Management and Cloud Financial Management (TBM)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Apptio%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-01-27T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2017-12-19T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2018-04-05T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 7, "reuse": 6, "ready_status": "Not Active", "ready_date": "2017-01-27T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2017-12-19T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2018-04-05T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-04-05T20:00:00.000Z", "annual_assessment": "2011-04-03T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Customs and Border Protection", "Department of Commerce", "Department of Veterans Affairs", "Internal Revenue Service", "International Trade Administration", "National Oceanic and Atmospheric Administration", "United States Census Bureau" ], "agency_reuse": [ "" ], "service_description": "Apptio is a market leading SaaS provider of Technology Business Management (TBM) and cloud financial management solutions that help IT leaders measure, manage and communicate the cost, quality, consumption, and value of technology investments. \nIT leaders leverage Apptio's TBM suite of applications to optimize costs and to: \n- Optimize costs \n\n- Consolidate infrastructure and applications \n\n- Price and recover shared services \n\n- Execute cloud-first strategies \n\nCloud leaders lean on Apptio’s Cloudability Government application to: \n- Empower FinOps teams \n\n- Allocate cloud costs back to the agency \n\n- Enable team ownership across the cloud program \n\n- Optimize cloud costs across AWS, Azure and GCP", "fedramp_msg": "Apptio for Technology Business Management and Cloud Financial Management (TBM) previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "Apptio_FedRAMP@wwpdl.vnet.ibm.com", "website": "https://www.apptio.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2326654692", "name": "Aprimo US, LLC", "cloud_service_provider": "Aprimo US, LLC", "cloud_service_offering": "Aprimo", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Aprimo%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-09-06T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-11-22T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-06-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-09-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-11-22T20:00:00.000Z", "cert_date": "2025-06-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-06-09T20:00:00.000Z", "annual_assessment": "2011-11-20T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of State" ], "agency_reuse": [ "" ], "service_description": "Aprimo, and the products that make up its platform – Productivity Management, Plan & Spend (MRM) as well as Digital Asset Management (DAM), empowers organizations to increase business agility, gain better insights into their business and content as well as drive collaboration through the highest rated digital asset management and workflow engine in the industry. Aprimo allows for the coordination of content strategy and execution, breaks down department silos, establishes a content calendar, and allows for a full view of content performance. Aprimo allows teams to spend their time and effort on content and digital marketing strategies that drive business outcomes and drives collaboration between teams to reach your target audience in the right place at the right time. Aprimo users can also leverage Plan and Spend, which is a marketing budget software, that allows for content planning, and marketing spend management and also tracks expenses. Aprimo’s platform orchestrates the content journey starting from content planning all the way through asset distribution and content reuse. With this data, customers can understand the time, money, efficacy, and resources that go into producing content and creating their marketing strategies.", "fedramp_msg": "N/A", "sales_email": "fedrampsales@aprimo.com", "security_email": "fedrampsecurity@aprimo.com", "website": "https://www.aprimo.com/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Design & Multimedia", "Education & Training", "Legal & Policy", "Marketing & Sales", "Media", "Operations Management", "Research", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2330939028", "name": "Aqua Security Software Inc.", "cloud_service_provider": "Aqua Security Software Inc.", "cloud_service_offering": "Aqua Platform for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Aquasec%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-08-31T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-06-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-08-31T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-06-11T20:00:00.000Z", "cert_date": "2025-03-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Federal Student Aid", "fedramp_auth": "2025-03-31T20:00:00.000Z", "annual_assessment": "2011-06-10T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Student Aid" ], "agency_reuse": [ "" ], "service_description": "The Aqua Platform for Government is a Cloud Native Application Protection Platform (CNAPP) comprised of fully integrated security and compliance capabilities that visualize, prioritize, and eliminate risk in minutes across the full software development lifecycle. Automated policies for shift-left prevention and runtime detection and response reduce your attack surface and mitigate active attacks—before damaging losses can occur. Aqua empowers customers to unleash the full potential of their digital transformation and accelerate innovation with the confidence that their cloud native applications are secured from start to finish, at any scale. \n \nThe Aqua Platform is a full-suite cloud service offering that provides customers with the capability to scan, monitor, and manage applications, containers, virtual machines, and workloads, as well as to validate applicable compliance controls and regulations. The Aqua Platform comprises six different service modules, listed below, that provide various scanning and monitoring functionalities: \n\nSupply Chain: The Supply Chain module allows customers to perform container image and registry scanning, as well as to scan customer code, images and artifacts as a part of their build pipeline. \n\nWorkload Protection: Deploys sensors and agents within a customer’s cloud environment to provide protection on customer-defined components via Enforcer functionality. \n\nCyberCenter: The CyberCenter service monitors scans and uses comparison against a database aggregated from multiple threat intelligence sources to identify vulnerabilities and malware within container images. \n\nCloud Security Posture Management (CSPM): The CSPM module provides customers the ability to integrate with one or more cloud infrastructure accounts to scan the entire account, correlate events across the account, provide account-wide remediation, and monitor and write compliance controls across the account. From these scans, Aqua Platform for Federal provides customers with an overall score based on identified vulnerabilities and compliance with defined configuration policies. The CSPAAS service acts to allow interfacing between the USE and CSPM services within Aqua Platform for Government.", "fedramp_msg": "N/A", "sales_email": "federal@aquasec.com", "security_email": "fedramp@aquasec.com", "website": "https://www.aquasec.com/solutions/federal/", "uei": "UT1CMKQJZG78", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2529113288", "name": "Archive360 platform", "cloud_service_provider": "Archive360 platform", "cloud_service_offering": "Archive360 Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Archive360%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-05-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-06-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-05-08T20:00:00.000Z", "cert_date": "2026-06-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-06-09T20:00:00.000Z", "annual_assessment": "2011-05-08T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Railroad Retirement Board" ], "agency_reuse": [ "" ], "service_description": "Archive360 provides a modern archive and governance platform to address the challenge of a growing number of digital communications channels, legal and regulatory record retention, data privacy and security requirements. Compliantly collecting, retaining, and managing growing volumes of data from multiple channels in a timely manner is increasingly important to department and agency missions, and difficult without the proper tools. Archive360’s platform helps manage data consistent with digital record keeping requirements, such as the Federal Records Act, NARA Records Management Rules, and OMB directives on transition to electronic records. \nArchive360’s solutions enable adoption of the federal government’s Cloud First mandates, Executive Orders as to cloud optimization, and OMB’s directives including M-23-07. Archive360’s solutions have been successfully deployed and trusted by public sector agencies globally in the U.S., U.K., Canada, and Australia, including numerous components of U.S. security, civilian intelligence, educational, veterans’ agencies as well as individual US States.\nArchive360’s digital communications governance and archiving solution brings together data from common channels and legacy archives into a petabyte-scale platform that: \n• Ensures that digital communications are captured, governed, and readily accessible to authorized stakeholders\n• Provides extensive retention and disposition capabilities supporting government and agency records management requirements\n• Enables data classification across communication and data channels for granular governance controls\n• Supports file and data archiving use cases\n• Provides secure, scalable eDiscovery and FOIA-search capabilities through an intuitive user interface\n• Provides case management, tagging and annotation capabilities for investigations and review and production of data \n• Delivers cross-system visibility and control over data processing, retention, disposition and legal holds \n• Ensures data authenticity and chain of custody with a complete audit trail for actions (system and user) within the platform \n• Cloud-native platform that provides high-levels of data durability, resiliency, and immutability where required\n• Zero trust security model, which requires specific entitlement grants to access any data. The platform incorporates an entitlement engine, which allows for granular access controls, including restrictions based on role, class of data, functionality\n• Encryption of all data in motion and at rest, with the option for agency managed encryption keys\n\nSecurity and scalability are paramount for government departments and agencies to achieve their data governance mission. Archive360 deploys each agency in a dedicated SaaS environment, deployed to their own tenant. As a result, each department, agency or organizational unit has completely segregated data, administrative access, entitlements, and the ability to integrate into their security protocols. \n\nArchive360 is deployed as a cloud-native, microservices architecture. Archive360 can tailor the deployment to specific mission workloads and requirements. This deployment model mitigates data migration or exit risk at the end of a term, since the tenant can be turned over to the department or agency with the resident data.\n\nThroughout the platform, Archive360 maintains an extensive event audit history, supporting a complete chain of custody. This includes data processing, access, changes to configurations and controls, search, disposition, or export, all at an object level. This provides rapid traceability for audit and response purposes, and defensibility of authorized activities. \nSupported digital communication channels include:\n• SMTP and Journal Based Email\n• Microsoft M365 and Exchange\n• Microsoft Teams\n• Google Workspace\n• SMS and Mobile Data\n• FileShare Data\n• Legacy Email Archives", "fedramp_msg": "N/A", "sales_email": "info@archive360.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://www.archive360.com/", "uei": "", "small_business": false, "business_categories": [ "Communication", "Data Management", "Legal & Policy", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2531142081", "name": "ArcSuite AI (Formerly ArcProcure)", "cloud_service_provider": "ArcSuite AI (Formerly ArcProcure)", "cloud_service_offering": "ArcSuite AI", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Arcsuite%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-08T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-12-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "ArcSuite AI (formerly ArcProcure) is delivered as a Software-as-a-Service (SaaS) offering using a multi-tenant, government-only community cloud environment hosted in AWS GovCloud (US). It is available to U.S. federal agencies, state and local governments, tribal entities, and government contractors authorized to operate within AWS GovCloud (US).\nThe authorized service provides capabilities for procurement Workflow to include AI assisted document analysis and generation, document review, approval workflows, and source selection. The authorization boundary includes the web application, backend microservices, workflow engine, API services, encrypted data storage, audit logging functions, and the associated network and security infrastructure hosted in AWS GovCloud (US).", "fedramp_msg": "", "sales_email": "Jason.Zick@arcprocure.com", "security_email": "support@arcprocure.com", "website": "https://www.aframesolutions.com/", "uei": "JR1NGCDN8AF9", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Finance", "Grant Management", "Operations Management", "Research", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1708752710", "name": "Armedia, LLC", "cloud_service_provider": "Armedia, LLC", "cloud_service_offering": "Armedia Content Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Armedia%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-01-06T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-08-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-09-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-01-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-08-04T20:00:00.000Z", "cert_date": "2024-09-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-09-24T20:00:00.000Z", "annual_assessment": "2011-08-04T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Postal Regulatory Commission", "United States International Trade Commission" ], "agency_reuse": [ "" ], "service_description": "The Armedia Content Cloud (ACC) provides an operational, fully provisioned infrastructure that meets FedRAMP Moderate requirements. ACC is a digital transformation platform that allows public sector clients to meet agency requirements with enhanced reliability and security without major capital investment and reduced technical staff. ACC offers four applications to support digital transformation and hyperautomation – ArkCase for case management system; Hyland Alfresco for document, business process and records management system; Ephesoft Transact for Intelligent Document Processing; and the OpenText Documentum enterprise content management (ECM) system. ACC provides a wide array of digital transformation solutions to include Business Process Management, Case Management, Complaint Management, Correspondence Management, Document Management, eFiling and eDocket Management, FOIA Management, Intelligent Document Capture, Investigative Case Management, Legal Case Management, Matter Management, Public Records Request, Records Management, etc.", "fedramp_msg": "", "sales_email": "sales@armedia.com", "security_email": "security@armedia.com", "website": "http://www.armedia.com/", "uei": "YY5MPEDLKXE8", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Data Management", "Human Resources", "Law Enforcement", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "Armedia Content Cloud" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2031936863", "name": "Armis Federal LLC", "cloud_service_provider": "Armis Federal LLC", "cloud_service_offering": "Armis FedRAMP Edition (AFE)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Armis%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-05-12T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-07-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-01-09T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 10, "reuse": 9, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-05-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-07-11T20:00:00.000Z", "cert_date": "2023-01-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-01-09T20:00:00.000Z", "annual_assessment": "2011-07-14T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Brookhaven Site Office", "Cybersecurity & Infrastructure Security Agency", "Department of Health and Human Services", "Department of Labor", "Department of State", "Department of Veterans Affairs", "Federal Deposit Insurance Corporation", "National Science Foundation", "Office of the National Coordinator for Health Information Technology", "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "Armis FedRAMP Edition (AFE) is an agentless, enterprise-class security platform built off of the Armis Centrix™ engine to help organizations discover and secure managed, unmanaged, and IoT devices, including medical devices and industrial control systems (ICS). Armis discovers every managed, unmanaged, and IoT device in any environment, analyzes device behavior to identify risks, vulnerabilities or attacks, and protects critical business information and systems. Armis easily integrates with existing security products. AFE passively monitors wired and wireless traffic in the environment to identify every device and to understand its behavior without disruption. AFE analyzes this data in the AFE Risk Engine which uses device profiles and characteristics from the AFE Device Knowledgebase to identify each device, assess its risks & vulnerabilities, detect threats, and recommend remediation actions.\n\nVisibility:\n\nAFE closes the Continuous Diagnostic and Mitigation Dashboard visibility gap with unmanaged and IoT devices. AFE discovers and classifies every managed, unmanaged, and IoT device in the environment including servers, laptops, smartphones, VoIP phones, smart TVs, IP cameras, printers, 5G, HVAC controls, medical devices, industrial controls, and more. AFE can even identify off-network devices using Wi-Fi, Bluetooth, and other protocols in any environment. The comprehensive device inventory that AFE generates includes critical information such as device manufacturer, model, serial number, location, username, operating system, installed applications, and connections made over time. In addition to discovering and classifying a device, AFE calculates its risk score based on factors such as vulnerabilities, known attack patterns, as well as the behaviors observed of each device in the environment. This risk score helps security teams understand their attack surface and meet compliance with regulatory frameworks that require identification and prioritization of vulnerabilities.\n\nInsights:\n\nThe AFE Risk Engine continuously monitors the behavior of every device in the environment for behavioral anomalies. Working with the AFE Device Knowledgebase, AFE compares the real-time behavior of each device with:\n● Historical device behavior\n● Behavior of similar devices in the Customer's environment\n● Behavior of similar devices in other environments\n● Common attack techniques\n● Information from threat intelligence feeds\n\nActions:\n\nWith these types of critical device and behavioral insights, AFE is able to identify threats and attacks. When AFE detects a threat, it can alert security teams and trigger automated action to stop an attack. Through integrations with network infrastructure, as well as the Customer's existing security enforcement points like Cisco and Palo Alto Networks firewalls, and network access control (NAC) products such as Cisco ISE and Aruba ClearPass, AFE can restrict access or quarantine suspicious or malicious devices.\n\nEasy Integration:\n\nAFE requires no agents or additional hardware to deploy. AFE integrates with existing firewalls or NAC, security management systems such as SIEM, ticketing systems, and asset databases. These integrations allow AFE to leverage existing investments to achieve greater value and more automated response.\n\n\n\nVIPR Pro:\n\nArmis Centrix™ for VIPR Pro delivers a FedRAMP-authorized cyber exposure management solution that helps federal agencies bridge the gap between fragmented security data and actionable risk reduction. Built to solve extreme alert fatigue, VIPR Pro acts as a centralized aggregator that ingests, correlates, and de-duplicates static security findings; including traditional vulnerabilities, cloud misconfigurations, and application security flaws - from across an agency’s existing security stack. \n\nRather than hunting for active threats, the platform applies machine learning to consolidate disparate scan data, reducing finding volumes by up to 50-to-1. VIPR Pro contextualizes these findings by overlaying external threat intelligence, exploit likelihood, and agency-defined asset criticality to automatically prioritize the highest-impact exposures. Utilizing predictive AI to instantly determine asset ownership and initiate automated bulk-ticketing, the solution shortens manual assessment times by 80% and accelerates Mean Time to Remediation (MTTR) by up to 90%. Federal agencies can now operationalize their vulnerability management programs, orchestrate cross-departmental fixes, and maintain continuous compliance through a unified, fully auditable risk-resolution lifecycle.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@armis.com", "website": "https://www.armis.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2503350987", "name": "Artera", "cloud_service_provider": "Artera", "cloud_service_offering": "Artera Harmony Federal Edition", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Artera%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-03-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-05-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-28T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-03-05T20:00:00.000Z", "cert_date": "2026-05-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-05-19T20:00:00.000Z", "annual_assessment": "2011-03-04T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Artera Harmony Federal Edition, powered by its advanced virtual agents, is a comprehensive suite of patient communication tools that transform patient experience through voice, text, and web. Integrating directly into the agency healthcare system's tech stack, including EHRs and third-party vendors, Artera Harmony Federal Edition supports the entire patient journey. The secure platform improves patient engagement by:\n* Automating inbound and outbound communications to streamline critical workflows like pre-visit preparations, post-appointment follow-ups, prescription refills, and ongoing care coordination.\n* Triaging patient inquiries 24/7 and automating administrative tasks, which reduces the burden on front-desk staff and boosts operational efficiency.\n* Providing federal agency personnel with anywhere access to manage conversation workflows, customize communication templates, and oversee all patient communications.\n* Integrating into patients' native phone, SMS/text, and email applications for a truly seamless experience.\n\nIn addition to pursuing FedRAMP High Authorization, Artera’s best-in-class InfoSec approach keeps data safe, compliant and built for healthcare. Artera Harmony Federal Edition, including virtual agents, meets top industry standards – SOC 2 Type 2, HITRUST Certified and is HIPAA compliant. \n\nArtera Harmony Federal Edition is brought to you by Artera Government Solutions, an Artera business unit. Artera is trusted by 900+ provider organizations to engage 100 million patients annually. \n\nLearn more at https://artera.io/federal-healthcare-communication/.", "fedramp_msg": "N/A", "sales_email": "govsales@artera.io", "security_email": "security@artera.io", "website": "https://artera.io/", "uei": "L3FECCPGJDV6", "small_business": false, "business_categories": [ "Communication", "Contact Center", "Customer Relations Management (CRM)", "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2317139564", "name": "Articulate Global LLC", "cloud_service_provider": "Articulate Global LLC", "cloud_service_offering": "Articulate 360", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Articulate%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-03-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-02-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-03-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-02-23T20:00:00.000Z", "cert_date": "2023-03-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "HHS Office of the Inspector General", "fedramp_auth": "2023-03-31T20:00:00.000Z", "annual_assessment": "2011-02-23T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Fermi National Accelerator Laboratory", "HHS Office of the Inspector General", "National Nuclear Security Administration", "Nuclear Regulatory Commission", "Office of the Comptroller of the Currency", "Pension Benefit Guaranty Corporation", "United States Army", "United States Marshals Service" ], "agency_reuse": [ "" ], "service_description": "Articulate 360 is an annual subscription with everything you need to simplify the entire course development process. It includes desktop and web apps. Desktop apps run locally on your desktop or laptop computer, and web apps are software applications that run in a web browser.", "fedramp_msg": "N/A", "sales_email": "sales@articulate.com", "security_email": "security@articulate.com", "website": "https://articulate.com/360", "uei": "J8VML9HY5GN4", "small_business": false, "business_categories": [ "Development Tools", "Education & Training" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1908649566", "name": "Aruba Networks", "cloud_service_provider": "Aruba Networks", "cloud_service_offering": "Aruba Central", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Aruba%20Logo.png", "status": "FedRAMP Certified (In Remediation)", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-03-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-03-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-12-27T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" }, { "date": "2026-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Authorized to FedRAMP Certified (In Remediation). Under remediation for not following \"Addressing FedRAMP Communication\" rule. See Notice 0016" } ], "authorizations": 9, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-03-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-03-22T20:00:00.000Z", "cert_date": "2021-12-27T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-12-27T20:00:00.000Z", "annual_assessment": "2011-04-17T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Alabama Middle District", "Chemical Safety And Hazard Investigation Board", "Department of Defense Education Activity", "Office of Financial Research", "U.S. International Development Finance Corporation", "US Bankruptcy Court - Middle District of Tennessee", "US Bankruptcy Court - West District of Kentucky", "United States Marine Corps", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Aruba Central is the cloud-native, single-pane-of-glass console for all Aruba network and edge device operations providing unified management, AI and security for wired and wireless operations across customers campus, branch and data center environments.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@hpe.com", "website": "https://www.arubanetworks.com/products/network-management-operations/central/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2527132001", "name": "Asana Inc.", "cloud_service_provider": "Asana Inc.", "cloud_service_offering": "Asana", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Asana%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-05-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to FedRAMP In Process" }, { "date": "2026-06-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-05-01T20:00:00.000Z", "cert_date": "2026-06-22T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-06-22T20:00:00.000Z", "annual_assessment": "2011-05-01T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2527132001", "csp": "Asana Inc.", "cso": "Asana", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families" ], "agency_reuse": [ "22-005-09" ], "service_description": "Asana Gov is a secure work management platform designed to help public sector organizations and their industry partners plan, coordinate, and deliver work with clear ownership, shared visibility, and consistent workflows. Asana connects goals, work, workflows, and outcomes in a single system, providing end-to-end visibility into progress, dependencies, and how work across teams and programs contributes to organizational priorities. Whether you are working on a simple task or a complex project, Asana makes it easy to collaborate, streamline workflows, and achieve your goals by providing a centralized platform for collaboration.", "fedramp_msg": "N/A", "sales_email": "gov@asana.com", "security_email": "fedramp@asana.com", "website": "https://asana.com/product/asana-gov", "uei": "F2BAHEMPW8R4", "small_business": false, "business_categories": [ "Collaboration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2620071868", "name": "Asato Corporation", "cloud_service_provider": "Asato Corporation", "cloud_service_offering": "asato.ai", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Asato%20Logo2.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-31T21:38:44.291Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-31T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Asato provides an AI-native, SaaS platform for enterprise IT asset management, cost intelligence, operational data products, document/contract extraction, and governed agentic workflows. The platform normalizes heterogeneous enterprise data, supports evidence-backed analytics and automation, and is designed to operate with strong governance, auditability, and tenant isolation. For federal customers, the system would store, process, and transmit enterprise operational and business data such as software asset, contract, procurement, usage, and related metadata; the exact federal data types should be finalized based on the target use case.", "fedramp_msg": "", "sales_email": "", "security_email": "customer-success@asato.ai", "website": "https://www.asato.ai/", "uei": "", "small_business": true, "business_categories": [ "Artificial Intelligence (AI)", "Collaboration", "Communication", "Customer Relations Management (CRM)", "Data Management", "Finance", "Governance, Risk, and Compliance (GRC)", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2401839361", "name": "Ask Sage, Inc.", "cloud_service_provider": "Ask Sage, Inc.", "cloud_service_offering": "Ask Sage", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/AskSage%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-11-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-06-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-01-24T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-11-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-06-24T20:00:00.000Z", "cert_date": "2025-01-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-01-24T20:00:00.000Z", "annual_assessment": "2011-06-21T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Defense Information Systems Agency", "Department of Health and Human Services", "Department of Veterans Affairs", "Drug Enforcement Administration", "Fermi National Accelerator Laboratory" ], "agency_reuse": [ "" ], "service_description": "Ask Sage is a Multi-modal Generative AI platform designed specifically to enable secure access to Generative AI models for both government teams. Ask Sage is built on Generative AI technologies such as Azure OpenAI (GPT 3.5, GPT 4, GPT 4o etc.), AWS Bedrock Gov (LLMA3, Titan etc.), Google Vertex AI (Google Gemini Pro 1.5 etc.), and various open-source LLMs.\n\nAsk Sage also supports OpenAI Whisper, enabling Speech to Text capabilities on videos and audio files and DALL-E enabling image generation.\n\nThe platform's data ingest and training are model-agnostic, ensuring secure training of proprietary data without ingesting it into the models. This approach allows Ask Sage to implement data-centric security and label data on a per-user basis, sharing labels with team members as needed and preventing data spillage while enabling zero-trust security.\n\nAsk Sage can ingest custom data (up to CUI/FOUO), connect to APIs, and access data lakes for real-time insights, delivering human-like responses to assist teams with labor-intensive tasks and enabling them to focus on strategic initiatives. The platform can be fully automated by GPT agents, decision trees and plugin integrations to access data lakes, knowledge bases, and APIs.", "fedramp_msg": "", "sales_email": "sales@asksage.ai", "security_email": "security@asksage.ai", "website": "https://www.asksage.ai/", "uei": "W9X4EWLUBAW1", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Human Resources", "Legal & Policy", "Marketing & Sales", "Research" ], "service_last_90": [ "" ], "all_others": [ "ATO In a Box", "Acquisition In a Box", "Ask Sage In a Box", "CMMC In a Box" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2619434440", "name": "ASSYST", "cloud_service_provider": "ASSYST", "cloud_service_offering": "ComplySyncATO", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Assyst%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-15T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2026-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-01-12T20:00:00.000Z", "ip_prog_date2": "2026-03-19T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-05-06T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-05-06T20:00:00.000Z", "annual_assessment": "2011-05-07T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "ComplySyncATO is a Software-as-a-Service (SaaS) Governance, Risk, and Compliance (GRC) automation platform designed to support continuous authorization and monitoring activities within cloud environments. The Cloud Service Offering (CSO) enables organizations to manage compliance posture through automated validation, evidence collection, and reporting aligned with FedRAMP 20x requirements.\r\n\r\nComplySyncATO integrates with cloud services to collect operational data and supports integration with external systems and service providers, enabling aggregation of compliance data and a unified view of compliance posture across multiple environments. The service is designed to support low to moderate impact systems and enables organizations to demonstrate continuous security compliance in machine-readable formats such as OSCAL, JSON, and XML, as well as human-readable formats.", "fedramp_msg": "", "sales_email": "complysync@assyst.net", "security_email": "csafr@assyst.net", "website": "https://www.assyst.net/complysyncato", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management", "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2412062433", "name": "Atlassian", "cloud_service_provider": "Atlassian", "cloud_service_offering": "Atlassian Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Atlassion%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-07-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-12-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 12, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-07-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-12-23T20:00:00.000Z", "cert_date": "2025-03-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-14T20:00:00.000Z", "annual_assessment": "2011-12-22T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1916254386", "csp": "Boomi", "cso": "Boomi Enterprise Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603307884", "csp": "e-Builder, A Trimble Company", "cso": "Trimble Unity Construct Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Department of Agriculture", "Department of Energy", "Department of Justice", "Federal Aviation Administration", "Fermi National Accelerator Laboratory", "General Services Administration", "National Oceanic and Atmospheric Administration", "U.S. Election Assistance Commission" ], "agency_reuse": [ "22-007", "22-007-11", "22-007-25", "22-058" ], "service_description": "Atlassian Government Cloud is a Software as a Service (SaaS) offering that helps teams collaborate, track work, manage IT service delivery, support their DevOps practices and more - all with the security and control that agencies need. Available products include:\n\n- Jira for project management across business and software teams\n\n- Confluence for knowledge management and documentation\n\n- Jira Service Management for IT service management, including support, IT operations, customer service, and more\n\nFederal agencies interested in collaborative continuous monitoring with Atlassian Government Cloud should reach out to: agc-conmon-collab@atlassian.com", "fedramp_msg": "N/A", "sales_email": "government@atlassian.com", "security_email": "fedramp@atlassian.com", "website": "https://www.atlassian.com/government", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2403745080", "name": "ATOM EVSE", "cloud_service_provider": "ATOM EVSE", "cloud_service_offering": "Atom Power, Inc - ATOM EVSE", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Atom%20Logo.png", "status": "FedRAMP Certified (In Remediation)", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-11-29T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-03-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-03-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" }, { "date": "2026-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Authorized to FedRAMP Certified (In Remediation). Under remediation for not following \"Addressing FedRAMP Communication\" rule. See Notice 0016" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-11-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-03-27T20:00:00.000Z", "cert_date": "2024-03-28T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-03-28T20:00:00.000Z", "annual_assessment": "2011-03-27T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "General Services Administration" ], "agency_reuse": [ "" ], "service_description": "Atom Power designs EV charging infrastructure solutions to meet the electrification goals and needs for scaled operations. Each deployment is unified by our Atom Cloud Software Solution, with web and mobile applications that facilitate seamless charger access, comprehensive analytics, streamlined fleet management, operations management, secure payment processing, and efficient energy management, adaptable across local facilities, campuses, regions, or enterprises. This platform is built on a flexible, secure architecture fortified by end-to-end encryption, ensuring protection against spoofing and tampering for maximum customer and organizational data protection. Gain unparalleled visibility, protection, and control over your EV charging infrastructure with Atom Cloud Software Solution.", "fedramp_msg": "N/A", "sales_email": "srehard@atompower.com", "security_email": "itsec@atompower.com", "website": "https://www.atompower.com/", "uei": "LD9PWKTD7N35", "small_business": true, "business_categories": [ "Analytics", "Fleet Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2618738935", "name": "ATX Defense", "cloud_service_provider": "ATX Defense", "cloud_service_offering": "CMMC Space", "logo": "", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-05-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-05-01T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "CMMC Space is a consulting firm specializing in cybersecurity and organizational transformation for the U.S. defense and national security community, with a strong focus on helping small businesses achieve Cybersecurity Maturity Model Certification (CMMC) compliance. The company provides managed security services, including a CMMC-focused platform called \"CMMC Space\" that leverages Google Workspace to offer an affordable, all-in-one solution for compliance. Additionally, ATX Defense is an authorized CMMC Third-Party Assessor Organization (C3PAO), providing official assessments and gap analyses to help organizations prepare for and achieve certification.", "fedramp_msg": "", "sales_email": "sales@atxdefense.com", "security_email": "support@atxdefense.com", "website": "https://atxdefense.com/", "uei": "H6YBMH9MN3D3", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management", "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2031222637", "name": "Aurigo Software Technologies, Inc.", "cloud_service_provider": "Aurigo Software Technologies, Inc.", "cloud_service_offering": "Masterworks Cloud Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Aurigo%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-02-07T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2023-03-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2024-02-26T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2022-02-07T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-03-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-02-26T20:00:00.000Z", "cert_date": "2025-03-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Federal Highway Administration", "fedramp_auth": "2025-03-05T20:00:00.000Z", "annual_assessment": "2011-03-04T04:00:00.000Z", "independent_assessor": "Baker Tilly", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Highway Administration" ], "agency_reuse": [ "" ], "service_description": "Aurigo Masterworks is a capital planning and construction management solution designed exclusively for public agencies. Aurigo Masterworks empowers federal, state, and local governments with a secure, AI-native platform to plan, fund, and deliver infrastructure projects efficiently. With end-to-end capital planning, federal aid reimbursement, and construction project management, agencies can optimize investments and ensure regulatory compliance. Aurigo Masterworks integrates seamlessly with leading industry solutions like Autodesk and Bentley, providing a connected ecosystem for infrastructure planning. Agencies benefit from real-time insights, automation, and predictive analytics to mitigate risks and improve decision-making. With robust capabilities in civil rights and labor management, consultant service contracting, and permitting, Masterworks ensures transparency and accountability at every stage. The platform’s cloud-native architecture and stringent security controls meet the highest government standards, enabling agencies to streamline processes while safeguarding sensitive data. Public agencies can now confidently accelerate infrastructure projects while ensuring compliance with federal and state regulations. With Aurigo Masterworks, governments can modernize infrastructure management, maximize taxpayer value, and build resilient communities.\r\n\r\n \r\n\r\nMasterworks Cloud Platform includes:\r\n\r\n- Aurigo Masterworks\r\n\r\n- Aurigo Primus\r\n\r\n- Aurigo Essentials\r\n\r\n- Aurigo Engage\r\n\r\n- Lumina AI\r\n\r\n- Capital Planning\r\n\r\n- Federal Aid Reimbursement\r\n\r\n- Estimation and Bidding\r\n\r\n- Construction Project Management\r\n\r\n- Civil Rights and Labor Management\r\n\r\n- Consultant Service Contracting\r\n\r\n- Real Property Management\r\n\r\n- Permitting\r\n\r\n- Materials Testing and Management\r\n\r\n- Right of Way Management", "fedramp_msg": "N/A", "sales_email": "sales@aurigo.com", "security_email": "fedramp@aurigo.com", "website": "https://www.aurigo.com/masterworks-cloud-platform/", "uei": "", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Collaboration", "Communication", "Construction", "Customer Relations Management (CRM)", "Data Management", "Finance", "Grant Management", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "Aurigo Engage", "Capital Planning", "Civil Rights and Labor Management", "Construction Project Management", "Consultant Service Contracting", "Estimation and Bidding", "Federal Aid Reimbursement", "Materials Testing and Management", "Permitting", "Real Property Management", "Right of Way Management" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1814168113", "name": "Authentic8, Inc.", "cloud_service_provider": "Authentic8, Inc.", "cloud_service_offering": "Silo", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Silo%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-11-12T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-11-12T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-03-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 15, "reuse": 14, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-11-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-11-12T20:00:00.000Z", "cert_date": "2021-03-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Customs and Border Protection", "fedramp_auth": "2021-03-29T20:00:00.000Z", "annual_assessment": "2011-11-19T04:00:00.000Z", "independent_assessor": "Linford & Company", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Customs and Border Protection", "Cybersecurity & Infrastructure Security Agency", "Department of Education", "Department of Housing and Urban Development", "FHFA Office of the Inspector General", "Federal Housing Finance Agency", "Federal Maritime Commission", "Immigration and Customs Enforcement", "Internal Revenue Service", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "Nuclear Regulatory Commission", "Office of Financial Research", "United States Geological Survey", "United States Securities and Exchange Commission" ], "agency_reuse": [ "" ], "service_description": "Silo is a remote browser that embeds security, identity and data policies directly into the browser. Available from anywhere, policies follow users regardless of environment. By shifting exposure away from the user's network and devices, Silo reduces risk and improves internal processes. With a configurable, centrally managed browser, users unlock the power of SaaS.\nAuthentic8 is redefining how enterprises conduct business on the web with the Silo web isolation platform. Silo insulates and isolates all web data and code execution from user endpoints, providing powerful, proactive security while giving users full, interactive access to the web. Silo also gives IT complete control over how the web is used. Commercial enterprises and public sector organizations use Silo solutions to provide secure web access; to control web data, apps, and workflows; and to conduct sensitive online research.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@authentic8.com", "website": "https://www.authentic8.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2226322745", "name": "Autodesk", "cloud_service_provider": "Autodesk", "cloud_service_offering": "Autodesk for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Autodesk%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-07-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-07-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-08-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-07-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-07-29T20:00:00.000Z", "cert_date": "2024-08-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-08-14T20:00:00.000Z", "annual_assessment": "2011-07-21T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "General Services Administration" ], "agency_reuse": [ "" ], "service_description": "Autodesk for Government is a SaaS offering hosted in a multi-tenant cloud computing environment. It includes two specialized solutions for Architecture, Engineering, and Construction (AEC) projects: Autodesk Docs for Government and Autodesk BIM Collaborate Pro for Government. These solutions are available to federal, state, local, and tribal governments, government contractors, U.S. Public Education, Federally Funded Research Development Centers, and Department of Homeland Security PPD-21 Critical Infrastructure entities, addressing shared concerns about compliance and security. \r\n\r\nAutodesk Docs for Government is built on top of Autodesk Platform Services (APS) and provides document storage, management, and file sharing; model viewing; and communication among and across teams. Autodesk Docs for Government simplifies collaboration and data management from design to construction and streamlines document review and approval workflows. Access to APS APIs is also available with this offering. \r\n\r\nAutodesk BIM Collaborate Pro for Government includes Autodesk Docs for Government capabilities, except for API access, in addition to powerful co-authoring and design collaboration tools through two key modules: Revit Cloud Worksharing (RCW) and Design Collaboration. Teams can co-author cloud models, centralize all project design data, and improve collaboration. The Design Collaboration module includes issues tracking, design timelines, and design packages.", "fedramp_msg": "N/A", "sales_email": "ADSKFedRAMP@autodesk.com", "security_email": "fedramp.incident.response@autodesk.com", "website": "https://www.autodesk.com/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Construction", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "Autodesk BIM Collaborate Pro for Government", "Autodesk Docs for Government" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1923743650A", "name": "Automattic, Inc.", "cloud_service_provider": "Automattic, Inc.", "cloud_service_offering": "WordPress VIP", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/WP%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-11-09T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 7, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-11-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-12-05T20:00:00.000Z", "cert_date": "2025-03-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-12T20:00:00.000Z", "annual_assessment": "2011-11-09T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Brookhaven Site Office", "Department of Health and Human Services", "Department of Veterans Affairs", "Federal Maritime Commission", "National Aeronautics and Space Administration", "Other Executive Branch Subagency", "Surface Transportation Board" ], "agency_reuse": [ "" ], "service_description": "Built on WordPress, the Content Management System (CMS) that powers 43% of the web, WordPress VIP provides a secure, compliant platform for management for government entities. \n\nWith industry-leading security protocols, expert support, flexible architectures, plus 99.99% SLA, hourly backups, and reliable uptime, WordPress VIP takes the heavy lifting out of digitizing citizen services and modernizing legacy infrastructure. \n\nWordPress VIP is built on top of WordPress, an intuitive, easy-to-use CMS that many government employees already know. By adopting WordPress VIP, IT and technical staff can reduce the amount of support and training required to support their agency.\n\nBut maintaining WordPress and ensuring the security of a WordPress setup can be challenging, and many solutions built on WordPress do not meet the exacting requirements of federal agencies. Security is WordPress VIP's chief priority. Our data security best practices include end-to-end encryption from edge to origin, resource and data isolation, and encrypted offsite backups. We address physical security through an independently owned and operated network of industry-certified global data centers. Every origin server meets the International Organization of Standardization (ISO), International Electrotechnical Commission (IEC) 27001 certification, Standards for Attestation Engagements (SSAE) No. 18 (SOC1) and SOC2 Type 2, and includes ongoing surveillance reviews. At the application level, every instance is protected with Single Sign-On, SSL/HTTPS/HSTS, required 2FA, and logging and auditing at the application, web server, load balancing, database, and operating system layers. WordPress VIP also fully manages updates and version and responds to any potential security issues immediately, easing the burden of ongoing security and maintenance and lowering total cost of ownership.\n\nWhile our stringent security protocols protect sensitive information, our intuitive and easy-to-use content management workflows make it easy to provide citizens with up-to-date, accessible, and accurate information. Even those with little technical knowledge can successfully navigate WordPress VIP's editing interface with minimal training.", "fedramp_msg": "N/A", "sales_email": "fedramp@wpvip.com", "security_email": "compliance@wpvip.com", "website": "https://wpvip.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Content Management System (CMS)", "Design & Multimedia", "Media" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2427142353", "name": "AutoRABIT Holding, Inc.", "cloud_service_provider": "AutoRABIT Holding, Inc.", "cloud_service_offering": "AutoRABIT for Public Sector - CodeScan, Guard, & ARMOR", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Autorabit%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-10-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-11-24T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-06-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-10-21T20:00:00.000Z", "cert_date": "2025-11-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-11-24T20:00:00.000Z", "annual_assessment": "2011-03-26T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "CodeScan is a static code analysis tool that seamlessly integrates with the development and deployment processes of Salesforce and scans for code vulnerability and quality checks along the process. Besides that, to improve and enforce code standardization, it also allows you to define the quality profiles and the quality gates, which gives you the ability to enforce standards and use this tool to educate your developers.\n\nCodeScan is a company-built application and developed using Amazon RDS for PostgreSQL and has capabilities to integrate with external systems.\nCodeScan offers more than 700 built-in rules for security and quality along with the provision to define your own rules.\n\nGuard provides enterprises with an automated, proactive approach to Salesforce security. Instead of relying on manual reviews and reactive fixes, Guard continuously monitors for security gaps, enforces policies at scale, and automatically remediates issues before they become critical threats. With AutoRABIT Guard, enterprises can transform their Salesforce environments from a security liability into a well-governed, compliant, and resilient system without slowing down innovation or burdening teams with manual processes. By making security seamless, AutoRABIT Guard ensures that organizations can confidently scale their Salesforce investment while meeting the highest security and compliance.\n\nARMOR is a centralized DevSecOps and Release Management platform for Salesforce that unifies CI/CD, environment management, and data migration into a secure pipeline. It enforces governance through policy-driven automation, pre-deployment security analysis, and immutable audit trails, ensuring strict configuration control and metadata integrity across the software development lifecycle.", "fedramp_msg": "A federal agency has granted an Authorization to Operate (ATO) for this Cloud Service Offering (CSO). FedRAMP has placed the package in our review queue. FedRAMP has posted information about our review capabilities at [https://www.fedramp.gov/shutdown/].", "sales_email": "sales@autorabit.com", "security_email": "fedramp@autorabit.us", "website": "https://www.autorabit.com/solutions/public-sector/", "uei": "WGNBES7Y1ZT8", "small_business": true, "business_categories": [ "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "CodeScan, Guard, & ARMOR" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2410056366", "name": "Avature Federal Platform", "cloud_service_provider": "Avature Federal Platform", "cloud_service_offering": "Avature Limited", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Avature%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-05-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-10-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-05-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-10-03T20:00:00.000Z", "cert_date": "2025-03-28T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-28T20:00:00.000Z", "annual_assessment": "2011-09-30T04:00:00.000Z", "independent_assessor": "SecureIT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of State" ], "agency_reuse": [ "" ], "service_description": "Avature is a leading provider of enterprise Human Capital Management software solutions that comprise Avature’s Total Talent Management Framework solution suite. \n \nAvature Federal Platform is a highly configurable Human Capital Management System, which enables U.S. federal, state, and local government customers, as well as U.S. government contractors, and Federally Funded Research and Development Centers (FFRDCs) to implement modern approaches to help identify, attract, hire, develop and retain talented people in highly competitive labor markets. Avature’s suite of Human Capital Management SaaS (HCM SaaS) solutions can be implemented under a no-code methodology either individuality, in combination sets, or holistically. HCM SaaS solutions available on the Avature Federal Platform include: Applicant Tracking, Campus Recruiting, Career Sites & Talent Communities, Case Management, Events Management, Employee Social Learning/UpSkilling, Internal Talent Mobility, Performance Management.", "fedramp_msg": "", "sales_email": "federal@avature.net", "security_email": "federalsecurity@avature.net", "website": "https://www.avature.net/", "uei": "EGJ6E53XY2W7", "small_business": false, "business_categories": [ "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1506046708", "name": "Avaya Federal Solutions, Inc.", "cloud_service_provider": "Avaya Federal Solutions, Inc.", "cloud_service_offering": "Avaya Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Avaya%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-12-11T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2018-05-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2018-12-20T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-04-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": "2017-12-11T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-05-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-12-20T20:00:00.000Z", "cert_date": "2019-04-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-04-29T20:00:00.000Z", "annual_assessment": "2011-06-01T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Department of State", "Environmental Protection Agency", "United States House of Representatives" ], "agency_reuse": [ "" ], "service_description": "Avaya Government Cloud™ is a FedRAMP Certified, Class C Moderate, Rev. 5 secure government cloud communications environment for public-sector agencies that need unified communications, contact center operations, emergency response support, and citizen engagement within a government-ready architecture. The service also supports higher-level public-sector security requirements, including IL4 High Provisional Authorization for CUI-level voice and contact center communications, secure DISA BCAP and NIPRnet connectivity for Department of War missions, and 100% U.S. citizen-based support. \n\n \n\nAvaya Government Cloud provides a dedicated unified communications and contact center environment, with each agency supported by its own software stack and instance on a virtual platform. This approach helps agencies tailor the environment to mission requirements while supporting reliability, security, and operational control. Avaya Government Cloud is monitored and managed 24x7x365 and supports public-sector validation needs, including CMMC Level 2. \n\n \n\nAvaya Government Cloud supports secure unified communications for government operations, including enterprise voice, messaging, mobility, presence, collaboration, and communications support for headquarters, remote offices, secure facilities, field locations, and distributed teams. \n\n \n\nFor contact center environments, the platform supports citizen and agency service workflows across voice, self-service, and agent-assisted interactions. Supported functions include skills-based routing, reporting and management, call recording, quality monitoring, workforce management, proactive outbound communications, callback assistance, speech analytics, real-time transcription, agent guidance, advanced analytics, citizen self-service, and intelligent agent desktop capabilities as agency requirements and governance allow. \n\n \n\nAvaya Government Cloud supports emergency communications requirements through optional emergency calling capabilities designed to support Kari’s Law and RAY BAUM’S Act compliance. NG911 and 911inform integration can help provide real-time caller location data, emergency notifications to designated on-site teams, and situational awareness for first responders when a 911 call is made from supported endpoints. \n\n \n\nAvaya offers a single transition contract with zero contract overlap, designed to coordinate cloud, on-premises subscription, and maintenance needs under one path. This approach helps agencies simplify acquisition, avoid dual-contract costs, reduce redundant resources, and manage the financial impact of modernization as requirements evolve.", "fedramp_msg": "N/A", "sales_email": "FedRAMP@avaya.com", "security_email": "FedRAMP@avaya.com", "website": "https://www.avaya.com/govcloud", "uei": "NML3JFNVEAW6", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Contact Center", "Customer Relations Management (CRM)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2025827270", "name": "AvePoint Inc.", "cloud_service_provider": "AvePoint Inc.", "cloud_service_offering": "AvePoint Online Services for US Government (AOS-UG)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/AvePoint%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-07-08T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-01-29T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-03-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-07-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-01-29T20:00:00.000Z", "cert_date": "2021-03-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-03-31T20:00:00.000Z", "annual_assessment": "2011-01-29T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy", "Federal Retirement Thrift Investment Board", "HUD Office of Inspector General", "Internal Revenue Service", "National Aeronautics and Space Administration", "National Science Foundation", "Savannah River National Lab", "State Office of the Inspector General", "U.S. International Development Finance Corporation" ], "agency_reuse": [ "" ], "service_description": "AvePoint Online Services for US Government provides centralized management, governance, backup, migration, reporting, information lifecycle management, and more for your multi-SaaS workloads all in one platform. \r\n\r\nWhen collaborating across workplace technologies, proper governance, security, and resilience approaches are critical. Native capabilities often fall short, leading to operational inefficiencies, increased risk, and difficulty assuring compliance. As AvePoint’s Confidence Platform for the Public Sector, AvePoint Online Services for US Government supplements these native capabilities to achieve comprehensive data management and governance, and ensure your organization is prepared for AI while driving usage, adoption, and maximizing return on investment. \r\n\r\nWith AvePoint Online Services for US Government, public sector organizations can leverage the functionalities below to confidently navigate the complexities of modern digital collaboration, ensuring their data is secure, compliant, and efficiently managed. \r\n\r\nAvePoint Opus – Optimize cloud storage & manage information lifecycles for Microsoft 365 \r\nAvePoint tyGraph – Workforce analytics for Microsoft 365 \r\nAvePoint Virtual Assistant (AVA) - data recovery and AI chatbot \r\nCense – License Management for Microsoft 365 \r\nCloud Backup – Backup and protection for services in Microsoft 365, Microsoft Dynamics 365, Azure, Google Workspace, Google Classroom and Salesforce \r\nCloud Governance – Structured cloud workspace control for Microsoft 365 \r\nCloud Management – Automated Microsoft 365 administration \r\nConfide – Secure internal and external collaboration for complex projects \r\nCurricula – Corporate Learning Management System \r\nElements – Mult-tenant management for Microsoft 365, Dynamics, Azure, Salesforce, and Google Workspace \r\nEnPower – Access management for Microsoft 365 \r\nExamena – Digital Assessment management \r\nFly (SaaS) - SaaS based tenant-to-tenant migration solution to or within Microsoft 365 \r\nInsights – Security reporting for Microsoft 365 \r\nMyHub – Centralized collaboration Hub for Microsoft 365 \r\nPolicies - Microsoft 365 security management and enforcement. \r\nReCenter – End-user file restore for Microsoft 365 and Google Workspace", "fedramp_msg": "N/A", "sales_email": "salesgov@avepoint.com", "security_email": "fedramp@avepoint.com", "website": "https://www.avepoint.com/solutions/public-sector", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Cybersecurity & Risk Management", "Data Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2025827270A", "name": "AvePoint Inc.", "cloud_service_provider": "AvePoint Inc.", "cloud_service_offering": "AvePoint Online Services for US Government (AOS-UG) - High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/AvePoint%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-11T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-12-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "AvePoint Online Services for US Government provides centralized management, governance, backup, migration, reporting, information lifecycle management, and more for your multi-SaaS workloads all in one platform. \n\nAs AvePoint’s Confidence Platform for the Public Sector, AvePoint Online Services for US Government supplements these native capabilities to achieve comprehensive data management and governance, and ensure your organization is prepared for AI while driving usage, adoption, and maximizing return on investment. \n\nWith AvePoint Online Services for US Government, public sector organizations can leverage the functionalities below to confidently navigate the complexities of modern digital collaboration, ensuring their data is secure, compliant, and efficiently managed. \n\nAvePoint Opus – Optimize cloud storage & manage information lifecycles for Microsoft 365 \nAvePoint tyGraph – Workforce analytics for Microsoft 365 \nAvePoint Virtual Assistant (AVA) - data recovery and AI chatbot \nCense – License Management for Microsoft 365 \nCloud Backup – Backup and protection for services in Microsoft 365, Microsoft Dynamics 365, Azure, Google Workspace, Google Classroom and Salesforce \nCloud Governance – Structured cloud workspace control for Microsoft 365 \nCloud Management – Automated Microsoft 365 administration \nConfide – Secure internal and external collaboration for complex projects \nCurricula – Corporate Learning Management System \nElements – Mult-tenant management for Microsoft 365, Dynamics, Azure, Salesforce, and Google Workspace \nEnPower – Access management for Microsoft 365 \nExamena – Digital Assessment management \nFly (SaaS) - SaaS based tenant-to-tenant migration solution to or within Microsoft 365 \nInsights – Security reporting for Microsoft 365 \nMyHub – Centralized collaboration Hub for Microsoft 365 \nPolicies - Microsoft 365 security management and enforcement. \nReCenter – End-user file restore for Microsoft 365 and Google Workspace", "fedramp_msg": "", "sales_email": "salesgov@avepoint.com", "security_email": "fedramp@avepoint.com", "website": "https://www.avepoint.com/solutions/public-sector", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Cybersecurity & Risk Management", "Data Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2333756970", "name": "Axiad IDS Inc.", "cloud_service_provider": "Axiad IDS Inc.", "cloud_service_offering": "Axiad Conductor", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Axiad%20Logo4.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-09-06T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2024-08-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2025-06-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-07-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": "2023-09-06T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-08-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-06-11T20:00:00.000Z", "cert_date": "2025-07-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-07-17T20:00:00.000Z", "annual_assessment": "2011-06-11T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Centers for Disease Control and Prevention", "Department of Justice", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Axiad Conductor is a comprehensive credential management system that secures digital identities across users, machines, assets, and interactions. \r\n\r\n \r\n\r\nAxiad addresses the key requirements in The White House Executive Order (EO) 14028, focusing on phishing-resistant multi-factor authentication (MFA) and Zero Trust. In addition to helping agencies comply with EO 14028 and M-22-09, Axiad is trusted and proven to support the guidance from NIST and CISA.\r\n\r\n \r\n\r\nAxiad Conductor helps customers maximize their investments by seamlessly enhancing existing IAM tools. This approach simplifies the management of disparate IAM solutions in an ever-growing mix of cloud-based, on-prem, air-gapped, and hybrid infrastructures. Axiad Conductor leverages cloud-based PKI and supports the industry’s broadest range of credentials, including x.509-based TLS certificates, FIDO2, mobile MFA, YubiKeys, smart cards from Thales, Idemia and others, TPMs, and biometrics. It can also be applied in heterogeneous IT environments, such as agencies operating Windows, Mac, and Linux operating systems. Axiad Conductor works in any infrastructure or environment, allowing agencies to simplify, scale, and speed up deployments by up to 10 times. This results in lower IT overhead costs, increased user satisfaction, and fortified IAM processes that can withstand modern identity-based attacks.", "fedramp_msg": "", "sales_email": "info@axiad.com", "security_email": "security_officer@axiad.com", "website": "https://www.axiad.com/axiad-cloud/", "uei": "MGKAB33LAQ36", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "Axiad Cloud" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1703752011", "name": "Axon", "cloud_service_provider": "Axon", "cloud_service_offering": "US Axon FedCloud - High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Axon%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-02-24T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2022-04-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2022-11-22T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 21, "reuse": 20, "ready_status": "Not Active", "ready_date": "2022-02-24T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2022-04-02T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2022-11-22T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-11-22T20:00:00.000Z", "annual_assessment": "2011-04-02T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Bureau of Alcohol, Tobacco, Firearms and Explosives", "DOJ Office of the Inspector General", "Department of Agriculture", "Department of Veterans Affairs", "Executive Office for United States Attorneys", "FHFA Office of the Inspector General", "Food and Drug Administration", "Immigration and Customs Enforcement", "National Institutes of Health", "National Oceanic and Atmospheric Administration", "National Park Service", "National Science Foundation", "Office of Personnel Management", "Social Security Administration", "State Office of the Inspector General", "Treasury Inspector General for Tax Administration", "US Fish and Wildlife Service", "United States Coast Guard", "United States Forest Service", "VA Office of the Inspector General" ], "agency_reuse": [ "" ], "service_description": "US Axon FedCloud enables cloud-based workflows for digital evidence management, situational awareness, and records management to support the operational needs of agencies. The system operates as an isolated region of Axon Cloud Services that is dedicated to the US Federal community. US Axon FedCloud offerings include Axon Evidence, Axon Respond, and Axon Records while also acting as the core control center over Axon devices and client applications. These devices and client applications include in-car camera systems, body-worn cameras, TASER devices, Axon Interview Room, and Axon Upload XT.\n\nAxon Evidence acts as a central repository for customers' digital evidence and a central management console for Axon products and devices. With expansive ingest, smooth playback, and intuitive search, Axon Evidence makes it simple to connect and manage growing stores of data—video, photos, documents and more—in a single, secure system.\n\nAxon Respond is a real-time operations platform which integrates real-time situational awareness and unified communications within a modern incident management solution. Gathering data from sensors in the field, agencies are empowered to know when events occur before it's voiced through traditional contact methods and rapidly coordinate responses with a unified communications platform.\n\nAxon Records harnesses the power of automation to save countless hours in the report writing, submission, and review process, helping agencies get more efficiency by breaking down data silos. With direct access to body-worn camera, in-car and citizen-captured video footage, documents, images, and more, reports can be created faster. Critical evidence can be easily shared to remove the wall between digital evidence and reports.", "fedramp_msg": "US Axon FedCloud - High previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "fedsec@axon.com", "website": "https://www.axon.com/", "uei": "TBW7MGPYURM7", "small_business": true, "business_categories": [ "Data Management", "Law Enforcement" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2401047002", "name": "Axonius Federal Systems", "cloud_service_provider": "Axonius Federal Systems", "cloud_service_offering": "Axonius Asset Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Axonius%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-11-30T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-09-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-11-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-09-19T20:00:00.000Z", "cert_date": "2025-04-03T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-03T20:00:00.000Z", "annual_assessment": "2011-09-19T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Centers for Medicare & Medicaid Services", "Cybersecurity & Infrastructure Security Agency", "Environmental Protection Agency", "Social Security Administration" ], "agency_reuse": [ "" ], "service_description": "Axonius Asset Cloud is a SaaS offering using a single-tenant Public Cloud computing environment to provide customers with a comprehensive solution for managing their assets, both on-premises and in the cloud, optimizing their IT operations, and ensuring the security and compliance of their assets.\r\n \r\nWith Axonius Asset Cloud, organizations can discover and track their hardware and software assets, including servers, laptops, desktops, mobile devices, cloud-based applications, and identities and accounts. The software automatically collects data from a variety of sources, including network devices, operating systems, and third-party applications, and presents it in an easy-to-use dashboard. In addition to asset management, the solution offers SaaS management capabilities, allowing organizations to monitor and control their cloud-based applications and services. With Axonius Asset Cloud, organizations can gain insights into their SaaS usage, track license compliance, and optimize their cloud spend. Moreover, the solution provides advanced security features, including continuous monitoring and compliance checks, to ensure that assets are secure and compliant and provides a unified view of risk across the customer IT environment. It also integrates with existing security tools and workflows, making it easy to manage and remediate security issues. This solution enables organizations to gain extensive visibility into their assets, both on-premises and in the cloud, and manage them effectively.", "fedramp_msg": "", "sales_email": "info@axoniusfed.com", "security_email": "cyber@axoniusfed.com", "website": "https://www.axoniusfed.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Mobile Device Management (MDM)", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2430123303", "name": "Aztec Software", "cloud_service_provider": "Aztec Software", "cloud_service_offering": "Aztec Learning System", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Aztec%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-10-09T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-10-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-11-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-10-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-10-01T20:00:00.000Z", "cert_date": "2025-11-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Federal Bureau of Prisons", "fedramp_auth": "2025-11-13T20:00:00.000Z", "annual_assessment": "2011-09-30T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Bureau of Prisons" ], "agency_reuse": [ "" ], "service_description": "Aztec Learning System (“ALS”) provides a learning management system with content designed to facilitate teacher and student learning flows. Specifically designed for adult students, ALS includes adaptive learning, multiple media, advanced coaching tools, integrated reporting, analytics and user management.", "fedramp_msg": "A federal agency has granted an Authorization to Operate (ATO) for this Cloud Service Offering (CSO). FedRAMP has placed the package in our review queue. FedRAMP has posted information about our review capabilities at [https://www.fedramp.gov/shutdown/].", "sales_email": "sales@aztec.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://www.aztecsoftware.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Data Management", "Education & Training", "Operations Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2128235497", "name": "Bamboo Health, Inc.", "cloud_service_provider": "Bamboo Health, Inc.", "cloud_service_offering": "PMP Government-Gateway", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Bamboo%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-11-27T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-04-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-11-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-04-19T20:00:00.000Z", "cert_date": "2025-04-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-15T20:00:00.000Z", "annual_assessment": "2011-03-28T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "The PMP Government-Gateway, offered by Bamboo Health, is a Software as a Service (SaaS) solution designed for healthcare agencies and providers. This service allows for the query and report visualization of prescription dispensation information directly within the Electronic Health Records (EHR) system, ensuring that healthcare professionals can access a patient's comprehensive controlled substance prescription history without leaving their workflow.", "fedramp_msg": "N/A", "sales_email": "growthopportunities@bamboohealth.com", "security_email": "fedramp-security@bamboohealth.com", "website": "https://bamboohealth.com/", "uei": "", "small_business": false, "business_categories": [ "Data Management", "Health & Wellness", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2221456469", "name": "Bentley Systems, Incorporated", "cloud_service_provider": "Bentley Systems, Incorporated", "cloud_service_offering": "Bentley for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Bentley%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-04-07T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-02-20T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-03-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-04-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-02-20T20:00:00.000Z", "cert_date": "2026-03-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Army Corps of Engineers", "fedramp_auth": "2026-03-31T20:00:00.000Z", "annual_assessment": "2011-01-09T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "United States Army Corps of Engineers" ], "agency_reuse": [ "" ], "service_description": "Bentley Systems is a provider of infrastructure engineering software. Bentley for Government software solutions enable efficient planning, design, construction, and operation of critical public infrastructure assets. Bentley is committed to ensuring infrastructure engineers working for U.S. government agencies and contractors have access to secure cloud-connected software solutions that meet federal standards for confidentiality, integrity, and availability.\r\n\r\n \r\n\r\nProjectWise, part of Bentley Infrastructure Cloud, is a collaborative information management solution empowering engineering firms, construction contractors, departments of transportation, and federal agencies to share data and streamline workflows across project phases for more efficient, safer, and faster infrastructure project delivery.\r\n\r\n \r\n\r\nOpenGround is a secure, cloud-based geotechnical information management solution for collecting, managing, analyzing, reporting and sharing geotechnical data. OpenGround offers secure, enterprise-grade geotechnical data management and reporting, trusted by engineering consultants, departments of transportation, and federal agencies to enable collaboration at every stage of the ground investigation lifecycle.", "fedramp_msg": "N/A", "sales_email": "fedrampsales@bentley.com", "security_email": "fedrampsecurity@bentley.com", "website": "https://www.bentley.com/", "uei": "EN2MEYLMUK51", "small_business": false, "business_categories": [ "Collaboration", "Construction", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2231070252", "name": "BeyondTrust", "cloud_service_provider": "BeyondTrust", "cloud_service_offering": "BeyondTrust Identity Security For Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/BeyondTrust%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-01-17T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-06-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-04-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-01-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-06-28T20:00:00.000Z", "cert_date": "2024-04-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-04-17T20:00:00.000Z", "annual_assessment": "2011-06-27T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Consumer Product Safety Commission", "Federal Energy Regulatory Commission", "Health Resources and Services Administration", "National Endowment for the Arts", "National Institute of Standards and Technology", "National Mediation Board", "Office of Financial Research", "Small Business Administration" ], "agency_reuse": [ "" ], "service_description": "BeyondTrust delivers identity security solutions designed for U.S. government agencies through a unified ecosystem that consolidates controls, shares intelligence, and enforces Zero Trust across human, machine, and AI identities. All solutions are FedRAMP-authorized and hosted in a secure government cloud, supporting federal, state, local, and tribal organizations.\r\n-Zero Trust Privileged Access Management for Government: The solution enforces zero trust principles by providing essential identity security and control over remote connections, eliminating the need for traditional VPNs, and protecting common Paths to Privilege that attackers exploit. Provides secure, just-in-time access across cloud, on-premises, and OT environments. Enforces identity verification and privilege control, replacing VPNs while reducing common attack paths.\r\n-Remote Support for Government: Enables secure, auditable access for IT teams. Eliminates the need for traditional VPNs and standing privileges, ensuring access is granted only when necessary and under strict monitoring. With session logging including full video, audit reports contain granular details and metadata to ensure compliance is met.\r\n-Identity Security Insights for Government: Continuously assess and maps human, machine, and AI identities, detects privilege risks, and provides prescriptive recommendations to reduce risk. Aligns findings to MITRE ATT&CK and integrates with incident response workflows.\r\nPathfinder Platform\r\nPathfinder integrates these solutions, delivering shared visibility, coordinated response, and continuous Zero Trust enforcement.\r\nMission Benefits\r\nAgencies can enforce least privilege and just-in-time access, eliminate unnecessary escalation paths, reduce exposure from over-privileged accounts, and meet Zero Trust and FedRAMP compliance requirements while securing mission-critical operations.", "fedramp_msg": "N/A", "sales_email": "sales@beyondtrust.com", "security_email": "secure@beyondtrust.com", "website": "https://www.beyondtrust.com/solutions/compliance/fedramp", "uei": "", "small_business": false, "business_categories": [ "Contact Center", "Customer Service", "Cybersecurity & Risk Management", "Fleet Management", "Mobile Device Management (MDM)", "Network Management", "Operations Management", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "Identity Security Insights for Government", "Privileged Remote Access for Government", "Remote Support for Government" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1918442180", "name": "Bizagi Corp.", "cloud_service_provider": "Bizagi Corp.", "cloud_service_offering": "Bizagi Cloud for US Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Bizagi%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-04-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-03-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-07-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-04-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-03-17T20:00:00.000Z", "cert_date": "2020-07-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-07-15T20:00:00.000Z", "annual_assessment": "2011-03-17T04:00:00.000Z", "independent_assessor": "Kompleye", "service_model": [ "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Communications Commission", "General Services Administration" ], "agency_reuse": [ "" ], "service_description": "Bizagi is a leading provider of digital process automation. We help customers transform their businesses faster by providing the most agile and powerful solution on the market.\n\nThis is backed up by the Bizagi cloud which comes with enterprise class security and scalability as standard. Ensuring every automation need is met no matter how complex or high in volume.\n\nOur commercial model delivers ultimate flexibility and choice to customers, only charging for what is used, and every project delivered utilizing our innovative SPARK framework, guaranteeing quick speed to value and strong ROI. This is why 40% of the Forbes Top 50 are using Bizagi today.\n\nBizagi Cloud for US Government provides all the power of the Bizagi Digital Business platform directly in the cloud, offering a high performing Platform-as-a-Service (PaaS).", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@bizagi.com", "website": "https://www.bizagi.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2610538972", "name": "Bizzdesign US", "cloud_service_provider": "Bizzdesign US", "cloud_service_offering": "Bizzdesign GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Bizzdesign%20Logo.png", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-03T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-07-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-03-03T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-07-28T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Bizzdesign GovCloud is a Software-as-a-Service (SaaS) offering of our Alfabet solution, hosted in AWS GovCloud through dedicated (single) tenant environments for U.S. government agencies. Bizzdesign Alfabet includes industry-leading capabilities that accelerate business transformation and improve time-to-market for key initiatives.\n\nBizzdesign Alfabet specializes in five solutions under one platform during your transformation journey:\n• Strategic Portfolio Management (SPM)\n• Application Portfolio Management (APM)\n• Technology Portfolio Management (TPM)\n• Enterprise Architecture Management (EAM)\n• Business Architecture Management (BAM)\n\nBizzdesign Alfabet's unique capabilities include:\n• Portfolio-Wide Visibility & Analysis\n• Lean Portfolio Management\n• AI-Enhanced Portfolio Decision-Making\n• Value Accelerators Library\n• Smart Data Management\n• Executive-Ready Reporting\n• Scalability for any agency\n• Flexible Implementation and Onboarding\n\nBizzdesign Alfabet had been FedRAMP-authorized since 2020 under the ARIS FedRAMP Cloud Service Provider (CSP) listing, and we are proud to continue supporting the federal government market.", "fedramp_msg": "", "sales_email": "fedramp-sales@bizzdesign.com", "security_email": "fedramp-security@bizzdesign.com", "website": "https://bizzdesign.com/", "uei": "THG8K8T7MJR3", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Cybersecurity & Risk Management", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1302271924A", "name": "BlackBerry", "cloud_service_provider": "BlackBerry", "cloud_service_offering": "BlackBerry Cloud - AtHoc Services for Government (High)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/BlackBerry%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-10-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-10-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 21, "reuse": 20, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-10-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-10-29T20:00:00.000Z", "cert_date": "2025-04-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Federal Aviation Administration", "fedramp_auth": "2025-04-11T20:00:00.000Z", "annual_assessment": "2011-04-30T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Engraving and Printing", "Customs and Border Protection", "Department of Education", "Department of Energy", "Department of Health and Human Services", "Department of State", "Department of Veterans Affairs", "Department of the Treasury", "Environmental Management Consolidated Business Center", "Federal Aviation Administration", "Federal Trade Commission", "Immigration and Customs Enforcement", "Internal Revenue Service", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "National Nuclear Security Administration / Nevada Field Office", "Surface Transportation Board", "US Fish and Wildlife Service", "United States Mint", "United States Secret Service" ], "agency_reuse": [ "" ], "service_description": "BlackBerry's AtHoc is a networked crisis communication platform enabling corporations and government agencies to communicate and collaborate securely with their personnel and with other organizations through multiple devices during times of crises. BlackBerry's AtHoc platform addresses critical communications needs including: Account: AtHoc Account enables real-time visibility into location and status for effective personnel accountability and crisis handling before, during, and after emergencies. This integrated approach to personnel accountability enables inputs from managers about their team, call center operators, data streams from HR and travel systems, as well as self-reporting by individuals. Alert: AtHoc Alert provides a comprehensive crisis communication solution that unifies all channels and devices, empowering organizations, people, and communities to collaborate during critical events. AtHoc's flexible deployment options safeguards important personal information and enables enterprise-level command and control. Connect: AtHoc Connect empowers organizations to create their own permission-based network to establish interoperable communication and information sharing with organizations in their community. Collect: AtHoc Collect empowers your personnel in the field to be the \"eyes and ears\" of the operations center. AtHoc Collect enables on-scene personnel to report events, work progress, along with rich geo-tagged media that are worth a thousand words.", "fedramp_msg": "N/A", "sales_email": "cstrain@blackberry.com", "security_email": "securitycertifications@blackberry.com", "website": "https://www.blackberry.com/en/secure-communications/athoc", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1506076709", "name": "Blackboard", "cloud_service_provider": "Blackboard", "cloud_service_offering": "Blackboard LMS", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/BB%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-07-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-09-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-04-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-07-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-09-26T20:00:00.000Z", "cert_date": "2020-04-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-04-21T20:00:00.000Z", "annual_assessment": "2011-09-22T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture", "Department of Labor", "Department of State", "Department of Veterans Affairs", "Federal Aviation Administration", "Federal Deposit Insurance Corporation", "Federal Emergency Management Agency", "Federal Highway Administration", "National Geospatial-Intelligence Agency" ], "agency_reuse": [ "" ], "service_description": "Blackboard's LMS solution offers government and military agencies next-generation online, social and mobile tools that create a continuous learning environment, built around peer-to-peer interaction, content and discussions.", "fedramp_msg": "N/A", "sales_email": "David.palmer@blackboard.com", "security_email": "mason.yin@blackboard.com", "website": "https://www.blackboard.com/government", "uei": "", "small_business": false, "business_categories": [ "Education & Training", "Learning Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2507664687", "name": "BlackLine Systems, Inc.", "cloud_service_provider": "BlackLine Systems, Inc.", "cloud_service_offering": "BlackLine Government Solution", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/BlackLine%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-11-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-11-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "BlackLine Government Solution is a SaaS application designed to help customers with the financial close process.", "fedramp_msg": "", "sales_email": "mark.kershaw@blackline.com", "security_email": "FedRAMP@blackline.com", "website": "https://www.blackline.com/products/financial-close/", "uei": "", "small_business": false, "business_categories": [ "Accounting", "Finance" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2410560133", "name": "BlackOhm", "cloud_service_provider": "BlackOhm", "cloud_service_offering": "Omega Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Ohm%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-03T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-03-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Program Executive Office Simulation, Training and Instrumentation", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "ControlCase", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The BlackOhm Omega Platform is a real-time personnel and asset tracking service consisting of tracking devices and a single pane of glass management interface. Government agencies and entities seeking a FedRAMP certified service can use the Omega Platform to organize, monitor, and manage training exercises and field work in any environment. The Omega Platform provides advanced functionality for situational awareness, including:\r\n\r\n- Real-time and historical location data\r\n\r\n- Personnel-initiated emergency messages and acknowledgements\r\n\r\n- Event driven alerting\r\n\r\n- Configurable boundaries, restricted areas, map overlays, and points of interest\r\n\r\n- After-action reports and analytics", "fedramp_msg": "N/A", "sales_email": "info@blackohm.com", "security_email": "fedramp_security@blackohm.com", "website": "https://www.blackohm.com/", "uei": "", "small_business": true, "business_categories": [ "Communication", "Fleet Management", "Mobile Device Management (MDM)", "Network Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2035056105", "name": "Bluescape", "cloud_service_provider": "Bluescape", "cloud_service_offering": "Bluescape with n8n for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Bluescape%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-01-19T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-07-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-12-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-01-19T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-07-29T20:00:00.000Z", "cert_date": "2022-12-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Information Systems Agency", "fedramp_auth": "2022-12-13T20:00:00.000Z", "annual_assessment": "2011-07-29T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency" ], "agency_reuse": [ "" ], "service_description": "Bluescape is the secure workspace for government and defense operations, giving teams a common picture to act with speed and precision. FedRAMP-authorized and trusted across national security, it brings intelligence, plans, and imagery together in one place, so mission partners align quickly and make time-critical decisions with confidence. \r\n\r\nBluescape supports use cases such as operations centers, complex planning, intel and information analysis, and cyber/critical infrastructure monitoring.\r\n\r\nWith integrations to COTS and GOTS software packages, and a full API for custom content workflows, Bluescape supports mission partner and interagency collaboration requirements.\r\n\r\nUse the power of AI to summarize and make inquiries of document data within workspaces\r\nPlug in third-party AI and ML tools for data aggregation/analysis.\r\nn8n for Government by Bluescape\r\nAggregate and train data from multiple LLMs to produce appropriate mission analysis and other AI outputs in a secure environment.\r\nCreate pattern-of-life profiles for tracking targets and collect metadata to storyboard incident and event chronologies.\r\nVisualize and analyze geo-data\r\nStand up drone command centers with multiple live video and data feeds, sharable to unlimited mission partners.\r\nBuild your own integrations to connect to systems of record and port content upward through cross-domain solutions.\r\n \r\n\r\nBluescape has hardened its Government solution to DoD SRG IL4 control baselines and FedRAMP Moderate so that any Federal Civilian or Defense customer can create and handle rich media and operational content through any cross-domain solution -- from FedRAMP to NIPR to SIPR to JWICS.\r\n\r\nBluescape features include:\r\n\r\nDocument viewing and editing\r\nHigh-resolution image upload\r\nVideo upload + synchronized playback\r\nPresentation mode with Canvas Carousels\r\nMulti-page document export / Intelligence pkg production + exporter (PDF and PPTX)\r\nPersistent Infinite Whiteboard / Workspace\r\nLead/follow capability\r\nTask cards\r\nSupport for embedded web applications\r\nUser Access Management and Admin Console", "fedramp_msg": "N/A", "sales_email": "sales@bluescape.com", "security_email": "fedramp@bluescape.com", "website": "https://www.bluescape.com/", "uei": "DQZ3P2GM1LB3", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Data Management", "Design & Multimedia", "Education & Training", "Human Resources", "Law Enforcement", "Marketing & Sales", "Network Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "AI integrator", "Bluescape API services", "Collaborative Operations Center Feature Pack", "Enhanced Video Streaming Capabilities", "Integrations to authorized IL4 and FedRAMP Document Services", "Pattern-of-Life Profiler", "Screenshare+", "Visual Spatial Event Map", "n8n for Government by Bluescape" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2618123124", "name": "BlueVoyant Government Services", "cloud_service_provider": "BlueVoyant Government Services", "cloud_service_offering": "Supply Chain Command", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/BlueVoyant%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-05-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-05-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Supply Chain Command (SCC) is a web based end-to-end, comprehensive solution that delivers quantifiable risk reduction across your entire third-party ecosystem, higher levels of efficiency to risk management processes, and greater visibility across your supply chain.\nSCC drives cyber risk reduction at every stage of the third-party lifecycle, from sourcing & selection, on through ongoing monitoring and reassessment. The highly configurable solution set includes multiple levels of continuous monitoring based on vendor risk levels, and point-in-time risk assessments to support procurement and M&A decision making.\n\nSCC provides visibility and prioritization for the entire third-party ecosystem via validated mappings of externally facing digital infrastructure and provides continuous monitoring of third parties with identification and notification of zero-day vulnerabilities in as little as 90 minutes following disclosure. SCC further provides on demand easy to understand snapshots of acquisition or procurement targets’ cyber risk posture.", "fedramp_msg": "", "sales_email": "sales@bluevoyantgov.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://www.bluevoyantgov.com/", "uei": "FPQ6XDL31YX5", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Governance, Risk, and Compliance (GRC)", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1510057481", "name": "BMC Helix, Inc.", "cloud_service_provider": "BMC Helix, Inc.", "cloud_service_offering": "BMC Helix", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/BMC%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-09-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2015-09-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2016-05-05T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-09-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2015-09-30T20:00:00.000Z", "cert_date": "2016-05-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2016-05-05T20:00:00.000Z", "annual_assessment": "2011-12-01T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Corporation for National & Community Service", "Department of Agriculture", "Department of the Interior", "United States Forest Service" ], "agency_reuse": [ "" ], "service_description": "BMC Helix in the AWS cloud accelerates agencies on their enterprise modernization journey. Organizations that are migrating to the cloud require a process that is seamless, successful, and uncompromising on security. This is particularly important to federal agencies that are experiencing ever-changing and demanding missions. \r\n\r\nSome highlights of the BMC solution include but are not limited to: \r\n\r\n* BMC Helix Portfolio Management – A comprehensive graphical tool that seamlessly connects Project and Portfolio Management with idea sourcing, idea management, and demand generation \r\n* BMC Helix Operations Management with AIOps – Predictive IT with AIOps, with service-centric monitoring, advanced event management, root cause isolation, and intelligent automation to improve performance \r\n* BMC Helix Continuous Optimization – Predictive analytics to manage IT resources with support for Kubernetes and pods, microservices, containers, and multi-cloud \r\n* BMC Helix Discovery – Discovery and dependency modeling delivers instant visibility into hardware, software, and services across multi-cloud, hybrid, and on-premises environments \r\n* BMC Helix ITSM (with Digital Workplace) – The gold standard in service management (previously authorized – now updated to v21.3) \r\n\r\n BMC Helix empowers organizations to: \r\n\r\n* Enable proactive service resolution, providing the ability to monitor, service, and remediate events as they occur\r\n* Accelerate agency enterprise modernization\r\n* Drive innovation as part of their digital transformation \r\n* Reduce costs and increase efficiencies \r\n* Deliver the industry-leading enterprise service management SaaS solution from the AWS cloud \r\n* Deliver the industry-leading enterprise operations management with AIOps SaaS solution from the AWS cloud \r\n* Leverage a modern persona based UX optimized across devices\r\n* Manage with powerful, stunning reports and visualizations allowing data driven insights\r\n\r\nOptimized for ITIL® 4, a leader in the Gartner Magic Quadrant for IT Service Support Management Tools and optimized specifically for government agencies, BMC Helix is hosted in the FedRAMP compliant Amazon Web Services (AWS) cloud and can be tailored to the needs of any agency with rapid implementations, flexible configuration, huge scalability and easy upgrades.\r\n\r\nAgencies using this service\r\n* Corporation for National & Community Service (CNCS) \r\n* Department of Agriculture \r\n* Office of Personnel Management \r\n* United States Forest Service", "fedramp_msg": "N/A", "sales_email": "Scot@helixops.ai", "security_email": "soc@helixops.ai", "website": "https://www.helixops.ai/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Customer Service", "Cybersecurity & Risk Management", "Human Resources", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2429249027", "name": "Bonterra", "cloud_service_provider": "Bonterra", "cloud_service_offering": "Apricot for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Bonterra%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-01-07T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-01-07T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Bonterra Apricot for Government is a comprehensive case management solution designed to help agencies improve program outcomes, simplify complex workflows, and showcase their success — all while ensuring data security and compliance. \r\n \r\nCore capabilities \r\nIncrease program efficiency \r\n•\tOptimize processes and boost efficiency: Standardize and automate key steps and tasks to simplify workflows, reduce administrative burden, and keep programs on track — without any extra work for your team. \r\n•\tEnhance participant engagement and support: Quickly and easily communicate with participants to boost engagement and provide the support they need. \r\n•\tSecurely, easily manage data: Empower your team with real-time access to the data they need, while ensuring strict security and confidentiality of participant information. \r\n \r\nMeasure and improve impact \r\n• \tMeasure impact with data-driven insights: Develop a comprehensive framework for measuring program impact using our intuitive reporting tools and impact dashboards so you can continuously improve programs based on data. \r\n• \tSimplify data collection and management: Utilize customizable templates and tools to standardize data intake to consistently collect high-quality, accurate data. \r\n• \tDemonstrate impact and meet compliance: Easily create custom reports rooted in best practices to meet compliance standards and demonstrate program impact to funders", "fedramp_msg": "N/A", "sales_email": "jonah.jimenez@bonterratech.com", "security_email": "david.michel@bonterratech.com", "website": "https://www.bonterratech.com/apricot-government-case-management", "uei": "CCKSCMKJDAH5", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Contact Center", "Customer Relations Management (CRM)", "Data Management", "Grant Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1916254386", "name": "Boomi", "cloud_service_provider": "Boomi", "cloud_service_offering": "Boomi Enterprise Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Boomi%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-03-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-06-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-08-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-03-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-06-11T20:00:00.000Z", "cert_date": "2019-08-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-08-12T20:00:00.000Z", "annual_assessment": "2011-07-27T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2309544938", "csp": "Cloudera Government Solutions, Inc", "cso": "Cloudera for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603307884", "csp": "e-Builder, A Trimble Company", "cso": "Trimble Unity Construct Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2017257053", "csp": "Infoblox", "cso": "Infoblox Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1818240234", "csp": "Perceptyx", "cso": "Perceptyx Insights Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Brookhaven Site Office", "Los Alamos National Laboratory", "United States Agency for International Development" ], "agency_reuse": [ "22-007", "22-036", "22-051" ], "service_description": "Boomi Enterprise Platform is a cloud-native integration Platform-as-a-Service (iPaaS) technology that lets you connect everyone to everything. As a SaaS - based technology it is faster, easier to use, less costly, and more flexible than legacy integration tools and techniques. The Boomi iPaaS Enterprise Platform has been solving the needs of government customers with end-to-end capabilities by integrating applications, systems, and connecting people.\n\nBoomi delivers in three key areas for our customers:\n\n - Modernization and Digital Transformation: Boomi is a key part of any modern IT foundation and enables the transformation of operations, ensuring proper connectivity and smooth data exchange when applications and infrastructure are migrated and consolidated.\n\n - Accelerating Cloud Smart Adoption: Speeding up cloud adoption to boost operational efficiency and implement shared services to foster collaboration and increase engagement.\n\n - Improving Constituents' Experience: Bringing together workforce processes and workflows from across organizations for a streamlined approach to customer experience and serve employees, partners, contractors, and citizens better.\n\nCovered by our FedRAMP Authorization are the following cloud products:\n\n - Integration: Overcome IT complexity and break down data silos by integrating on-premises and cloud application, various data sources and devices with Boomi Integration. Create a fabric of connectivity to unlock productivity and thrive within your digital technology foundation. Boomi Integration accelerates time to value leveraging a drag and drop UI, data mapping tools, and a comprehensive library of connectors, coupled with support for various integration patterns enable you to build any integrations with exceptional speed.\n\n - Master Data Hub (MDH): Boomi Master Data Hub is a cloud-native master data management (MDM) solution that sits at the center of the various data silos within your organization - including your existing MDM solution, to provide you an easy to implement, scalable, flexible, and secure master data management hub as a service.\n\n - API Management (APIM): Boomi API Management supports the full lifecycle of APIs in a hybrid environment. Configure APIs and expose real-time integrations effortlessly. Centrally test and deploy APIs and enforce contracts and policies with an API gateway. Monitor the health of APIs with usage dashboards and engage API developers using the catalog and developer portal.\n\n - B2B/EDI Management: Effectively integrate with your vendors, suppliers, distributors, partners, and marketplaces to simplify processes and trade smarter. Built-in support for a wide variety of traditional and modern EDI standards including XML, X12, EDIFACT, HC7, RosettaNet, Tradacoms, as well as the ability to define custom standards. \n\n - Flow: The drag-and-drop interface simplifies how agencies connect data across systems, replace manual processes, and collaborate cross-functionally. Flow allows you to build applications at scale, easily connect your data and flexibly deploy apps anywhere they are needed.\n\n - Boomi Managed Cloud Services (MCS) leverages the Boomi Public Cloud solution and provides further isolation and ancillary services in support of a Boomi Private Cloud. The service has been engineered to address security at three distinct points: network, application, and data; this three-tiered security approach is designed to protect data from unauthorized parties, keep it safe in transit and at rest, and allow customer access as needed. Boomi manages all aspects of MCS runtime instances, sparing MCS customers any work involved in configuring, monitoring, and managing hardware and software for Boomi processes.\n\n- Boomi AI Agents: Boomi AI Agents are a comprehensive suite of AI-powered developer accelerators built by Boomi that take actions for and with developers to achieve specific goals. These agents have helped teams autonomously design integrations, enhance data privacy and monitoring, create documentation in record time, and more. Boomi AI Agents are ready-to-use upon purchase and seamlessly work to accelerate your development processes.\r\n\r\n- Boomi Event Streams: A fully managed, cloud-native event streaming service that enables real-time data movement across systems, applications, and services. Event Streams supports common enterprise messaging patterns like Publish-Subscribe (pub/sub) and queuing with guaranteed message delivery, ordering, and availability. When used in combination with Boomi Integration, it provides a highly scalable and reliable backbone for an “event driven integration” approach to building integrations.", "fedramp_msg": "N/A", "sales_email": "federal.sales@boomi.com", "security_email": "federal-security@boomi.com", "website": "https://boomi.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2017462201", "name": "Booz Allen Hamilton", "cloud_service_provider": "Booz Allen Hamilton", "cloud_service_offering": "Supply Chain Master Catalog (SCMC) Government Cloud Solution", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SCMC%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-04-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-10-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-11-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-04-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-10-01T20:00:00.000Z", "cert_date": "2020-11-04T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-11-04T20:00:00.000Z", "annual_assessment": "2011-10-01T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Offered as a SaaS solution, Prodigo Marketplace is a virtual e-commerce procurement product that enables maximum, sustained cost savings throughout VA's healthcare supply chain for all clinical and non-clinical supplies and services. By effectively driving contract utilization at the point-of-requisition, Prodigo Marketplace assures users are purchasing the right items from the right vendors at the right price. As VA's single purchasing gateway, enabled and sustained via Booz Allen Hamilton's secure cloud infrastructure, Prodigo Marketplace directs users to their preferred sources of supply. This online requisitioning tool offers users a simple, easy-to-use ordering experience; reducing clinical disruption and the time users spend on administrative tasks.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "dunker_tonia@bah.com", "website": "https://www.boozallen.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2504148525", "name": "Booz Allen Hamilton", "cloud_service_provider": "Booz Allen Hamilton", "cloud_service_offering": "Footprint", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Footprint%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-08-06T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-08-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-01-12T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-08-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-08-18T20:00:00.000Z", "cert_date": "2026-01-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-01-12T20:00:00.000Z", "annual_assessment": "2011-08-05T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "United States Forest Service" ], "agency_reuse": [ "" ], "service_description": "Footprint provides a secure and compliant foundation to accelerate launching solutions by leveraging existing baseline platform, business, and customer functions increasing speed to delivery while reducing cost. The modular structure and scalability of Footprint, which serves as the e-commerce platform powering solutions like Recreation.gov, allows for services and features to be quickly built on top of existing components and configured to meet specific customer use cases. Footprint enables real-time integrations with both Government and commercial systems.\n\nCloud Platform: Footprint is cloud-native software as a service (SaaS) solution built on AWS cloud, is API-driven, and is mobile first. Footprint achieves high reliability and availability through its distributed architectures, integration of the latest technology, infrastructure monitoring rapid infrastructure scaling, and the implementation of agile, microservices, Continuous Integration and Continuous Development (CI/CD), and DevSecOps. Combined these enable Footprint to achieve no system downtime for upgrades and maintenance.\n\nSecure: Compliant with NIST SP 800-53 Rev. 5 Control Baseline-Moderate, PCI DSS v4.0.1, FISMA-Moderate, fully implements FedRAMP Moderate, and uses strict security processes for access to protected data (e.g., Personally Identifiable Information (PII)).\n\nBusiness Driven: Footprint reduces time to market bringing core business functions such as account management, internal business management tools, multi-channel user communications and customer engagement, secure payment processing, financial transaction management, content management, cart and checkout, integratedanalytics, and real-time reporting and dashboards, and customer service management. These functions are configured to support specific client needs and are designed for self-service.\n\nCustomer Focused: The modern modular Web Content Accessibility Guidelines (WCAG) 2.2 Guideline and Section 508 compliant design driven by user-informed development and experience provides a consistent experience, reduces friction, supports complex workflows, and enables adaptation to client needs and look and feel. The system is designed as self-service and offers direct integration with help documentation, feedback channels, and customer support.\n\nMobile Application: Customer and management services are also delivered through fully mobile responsive user experience and native mobile applications for iOS and Android. The mobile app includes mobile-specific functions like ApplePay, Google Pay, QR code scanning, and the use of geolocation.", "fedramp_msg": "A federal agency has granted an Authorization to Operate (ATO) for this Cloud Service Offering (CSO). FedRAMP has placed the package in our review queue. FedRAMP has posted information about our review capabilities at [https://www.fedramp.gov/shutdown/].", "sales_email": "footprint@bah.com", "security_email": "footprint-security@bah.com", "website": "https://www.boozallen.com/expertise/products/footprint.html", "uei": "", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Communication", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Customer Service", "Data Management", "Finance", "Marketing & Sales", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1212191840A", "name": "Box Inc.", "cloud_service_provider": "Box Inc.", "cloud_service_offering": "Box Enterprise Cloud Content Collaboration Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Box%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-03-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-07-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 53, "reuse": 57, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-07-30T20:00:00.000Z", "cert_date": "2025-03-25T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-25T20:00:00.000Z", "annual_assessment": "2011-08-29T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "F1603307884", "csp": "e-Builder, A Trimble Company", "cso": "Trimble Unity Construct Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2524349489", "csp": "IBM", "cso": "IBM Data Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2104636677", "csp": "Ipsos America, Inc.", "cso": "Ipsos Research", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families", "Agency for Healthcare Research and Quality", "Argonne National Laboratory", "Bureau of Engraving and Printing", "Bureau of Indian Education", "Centers for Medicare & Medicaid Services", "Consumer Product Safety Commission", "Council of the Inspectors General on Integrity and Efficiency", "Defense Nuclear Facilities Safety Board", "Department of Agriculture", "Department of Energy", "Department of Health and Human Services", "Department of Justice", "Department of State", "Department of Veterans Affairs", "Department of the Interior Office of the Inspector General", "Department of the Navy", "Department of the Treasury", "Federal Aviation Administration", "Federal Communications Commission", "Federal Maritime Commission", "Federal Reserve System", "Federal Retirement Thrift Investment Board", "Fermi National Accelerator Laboratory", "First Responder Network Authority", "Food and Drug Administration", "Government National Mortgage Association", "HUD Office of Inspector General", "Health Resources and Services Administration", "Immigration and Customs Enforcement", "Interior Business Center", "Internal Revenue Service", "Library of Congress", "National Aeronautics and Space Administration", "National Endowment for the Arts", "National Institute of Standards and Technology", "National Institutes of Health", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "National Nuclear Security Administration / Nevada Field Office", "Nuclear Regulatory Commission", "Office of Personnel Management", "Savannah River National Lab", "Small Business Administration", "Tennessee Valley Authority", "U.S. Antarctic Program", "U.S. Commission for the Preservation of America's Heritage Abroad", "US Fish and Wildlife Service", "United States Forest Service", "United States International Trade Commission", "Universal Service Administrative Company" ], "agency_reuse": [ "" ], "service_description": "Box is a FedRAMP High, FedRAMP Moderate and DoD IL4 Authorized secure cloud content management, collaboration, and intelligent automation platform that enables federal agencies and the Department of Defense to securely manage, share, and analyze mission-critical content in the cloud.\n\nBuilt to support the rigorous compliance, security, and operational demands of U.S. federal and defense environments, Box provides a unified content platform where agencies can collaborate in real time, manage the full lifecycle of Controlled Unclassified Information (CUI), automate workflows, and maintain full control over sensitive data—whether in civilian, DoD, or Intelligence Community settings.\n\nBox delivers enterprise-grade security with end-to-end encryption, granular access controls, detailed audit trails, and native data governance capabilities—all managed in U.S.-based data centers by U.S. Persons. The platform integrates seamlessly with existing identity providers, zero trust architectures, and endpoint security solutions, supporting CAC/PIV authentication and aligning with NIST 800-53 Rev5, FedRAMP High, and DoD SRG IL4 control baselines.\n\nBoxAI, a secure, built-in suite of enterprise-grade artificial intelligence tools, enhances the power of content by enabling federal teams to summarize documents, extract insights, automate repetitive tasks, and make faster, smarter decisions—without compromising compliance. BoxAI operates entirely within the FedRAMP High boundary, ensuring that government data remains private, is never used to train AI models, and is governed according to strict federal standards.\n\nBox is committed to supporting agencies as they modernize IT operations, drive digital transformation, and accelerate mission outcomes—securely, intelligently, and at scale. With Box for Government and BoxAI, agencies gain the trusted content layer they need to operate with speed, agility, and confidence in today’s dynamic threat landscape.", "fedramp_msg": "N/A", "sales_email": "fedteam@box.com", "security_email": "compliance@box.com", "website": "https://www.box.com/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Content Management System (CMS)", "Data Management", "Finance", "Grant Management", "Human Resources", "Legal & Policy", "Marketing & Sales", "Research" ], "service_last_90": [ "" ], "all_others": [ "Box Cloud Content Management Platform", "BoxAI", "BoxApps", "BoxCanvas", "BoxDrive", "BoxGovernance", "BoxHubs", "BoxKeySafe", "BoxMobile", "BoxNotes", "BoxPlatform (APIs)", "BoxRelay", "BoxShield", "BoxShuttle (Moderate)", "BoxSign", "Upload/Download, File/Folder Management", "User Access Mgmt and Admin Console" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2425374322", "name": "BP Pulse", "cloud_service_provider": "BP Pulse", "cloud_service_offering": "Omega Charge Management System", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/BP%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-07-03T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-03-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-07-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-03-20T20:00:00.000Z", "cert_date": "2025-05-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-05-06T20:00:00.000Z", "annual_assessment": "2011-03-11T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "General Services Administration" ], "agency_reuse": [ "" ], "service_description": "Omega Charge Management software (CMS) automatically schedules EV charging during times when energy costs are lower while accounting for operational requirements. It comes with 99.9% platform uptime to help keep fleet operations running smoothly. This means fleet operators can spend less time managing charging while reducing energy costs. \n \nOmega provides complete visibility of EV fleet charging operations and sends real-time critical alerts all from one dashboard, maximizing vehicle uptime. Omega can also integrate with any vehicle, EVSE, telematics, or fleet management tool, so operators can use what works best for their fleet now and in future. This includes chargers from all major OEMs using Open Charge Point Protocol (OCPP) v1.6x. \n \nOur experts can also guide fleets through the electrification journey, from site design and charger installation to ongoing operations and maintenance. This includes a range of EV charging stations to suit specific fleet needs. Fleets can also pair this with our Charging-as-a-Service (CaaS) model to bundle CapEx costs into one monthly Opex, reducing upfront investment and making it easier to manage costs long-term.​", "fedramp_msg": "N/A", "sales_email": "hellobppulse@bp.com", "security_email": "support@bppulsefleet.com", "website": "https://bppulsefleet.com/fleet/products/charge-management-software/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Fleet Management", "Operations Management", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2522249893", "name": "Bridge Intelligence LLC. dba AssetIntel", "cloud_service_provider": "Bridge Intelligence LLC. dba AssetIntel", "cloud_service_offering": "Asset Management Suite (AMS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/AssetIntel%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-05-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-10-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-11-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-05-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-10-10T20:00:00.000Z", "cert_date": "2025-11-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-11-13T20:00:00.000Z", "annual_assessment": "2011-10-10T04:00:00.000Z", "independent_assessor": "Prescient Security, LLC.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "United States Army Corps of Engineers" ], "agency_reuse": [ "" ], "service_description": "Asset Management Suite (AMS) is a multi‑tenant Software‑as‑a‑Service platform operated in Microsoft Azure Government Cloud and authorized at the FedRAMP Moderate impact level.\nIt supports the full inspection and lifecycle management of transportation assets—bridges, tunnels, culverts, and related structures—through three in‑boundary modules:\n\n- inspectX – inventory, scheduling, field data collection, review, and PDF report generation for bridges and tunnels. Includes SNBIX, a module purpose-built for SNBI-compliant inspections and data formatting.\n- emergencyX – event monitoring, incident logging, and post‑event inspection tracking.\n- manageX – enables prioritization of maintenance and capital projects and supports long-term planning based on asset condition, risk, and funding.\n\nAMS follows a micro‑services, hub‑and‑spoke architecture. Core components (Login Service, Application Hub, Core Services) run on Windows Server VMs behind Azure Application Gateway and Web Application Firewall. Data is stored in Azure SQL (structured data) and Azure Blob Storage (multimedia) and exchanged via Azure Service Bus. All traffic is protected with TLS 1.2+ using FIPS 140‑validated cryptographic modules; secrets are managed in Azure Key Vault. User authentication and RBAC are handled through Azure Active Directory (IAL2/AAL2/FAL2). Audit and performance logs are forwarded to Datadog for continuous monitoring.\n \nOnly these components and services are included within the FedRAMP authorization boundary; no external customer‑managed services are in scope.", "fedramp_msg": "A federal agency has granted an Authorization to Operate (ATO) for this Cloud Service Offering (CSO). FedRAMP has placed the package in our review queue. FedRAMP has posted information about our review capabilities at [https://www.fedramp.gov/shutdown/].", "sales_email": "hooman@assetintel.co", "security_email": "ayush@bridge-intel.com", "website": "https://www.assetintel.co/", "uei": "SWTMU6PL3VJ8", "small_business": true, "business_categories": [ "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2000939520", "name": "Broad Institute, Inc.", "cloud_service_provider": "Broad Institute, Inc.", "cloud_service_offering": "Terra", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Terra%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-11-10T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-11-10T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-05-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-11-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-11-10T20:00:00.000Z", "cert_date": "2021-05-07T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Institutes of Health", "fedramp_auth": "2021-05-07T20:00:00.000Z", "annual_assessment": "2011-11-10T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "National Cancer Institute", "National Institutes of Health" ], "agency_reuse": [ "" ], "service_description": "Terra is a public, cloud-based platform that provides biomedical researchers with a flexible environment for doing secure and scalable analysis. Terra users can upload their data to the cloud or access datasets sponsored by partner organizations that are hosted through convenient data exploration interfaces. Users can prepare and process data with or without coding expertise, leveraging Terra's repository of best-practice, ready-to-use bioinformatics workflows. Once data is processed, results can be explored in real-time with Terra's in-app integration of interactive analysis tools such as JupyterLab and Jupyter Notebooks. Collaborating with other users is easy with Terra's built-in capabilities for sharing work selectively, protecting data from unwanted re-distribution.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@broadinstitute.org", "website": "https://app.terra.bio/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2510550050", "name": "Bugcrowd Inc.", "cloud_service_provider": "Bugcrowd Inc.", "cloud_service_offering": "Bugcrowd for Government (BCGOV)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Bugcrowd%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-11-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-01-27T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-02-19T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-11-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-01-27T20:00:00.000Z", "cert_date": "2026-02-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-02-19T20:00:00.000Z", "annual_assessment": "2011-01-27T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Cybersecurity & Infrastructure Security Agency" ], "agency_reuse": [ "" ], "service_description": "Bugcrowd for Government (BCGOV) is a Software-as-a-Service (SaaS) platform providing on-demand offensive security testing capabilities delivered through a vetted community of security researchers. The platform enables customers to establish and manage structured security programs, including Vulnerability Disclosure Programs (VDP), Bug Bounties, and Penetration Testing. BCGOV includes a centralized management portal for scope definition, asset management, and researcher engagement, a triage pipeline for vulnerability validation and severity rating, and APIs for integrating validated findings into customer remediation workflows.", "fedramp_msg": "", "sales_email": "publicsector@bugcrowd.com", "security_email": "fedramp@bugcrowd.com", "website": "https://www.bugcrowd.com/solutions/government/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Development Tools", "Network Management", "Operations Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2600545894", "name": "Butterfly Network Inc.", "cloud_service_provider": "Butterfly Network Inc.", "cloud_service_offering": "Butterfly Network Ultrasound", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Butterfly%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-03-05T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-07-21T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Butterfly Network’s Inc.’s Butterfly iQ+ / iQ3 Ultrasound System/ Compass AI (aka Butterfly Ultrasound Probe System) enables universal access to superior medical imaging, making high quality ultrasound easy-to-use, globally accessible, and intelligently connected.\n\nButterfly Ultrasound Probe System is the only ultrasound transducer that can perform “whole-body imaging” with a single handheld probe using semiconductor technology. Connected to a mobile phone or tablet, it is powered by Butterfly’s proprietary Ultrasound-on-Chip™ technology and harnesses the advantages of AI to deliver advanced imaging that is easy-to-use and improves patient outcomes.\n\nThe primary function of the Butterfly App is general-purpose diagnostic imaging, for use by qualified and trained healthcare professionals to enable the visualization and measurement of anatomical structures within the human body. The app is a free download from the Apple App Store or Google Play Store. The app and a vetted Butterfly account are required to use the Butterfly Ultrasound Probe System.\n\nThe Butterfly Cloud is hosted by Amazon Web Services (AWS) in multi availability zone fashion with cross-region data replication.\n\nThe development environment is where the initial software creation and code revision occurs. It's an area for developers to freely work on new updates without affecting the live application.\n\nThe staging environment, also known as the Quality Assurance (QA) environment, is the intermediary step where the software is tested in conditions that closely mirror the production environment. This is where thorough checks are conducted before any release.\n\nThe production environment is the live setting where the software is fully deployed for use by the end-users. It is the final and most stable environment, designed for uptime and reliability.\n\nButterfly Ultrasound Probe System offers two primary services: Public Cloud and Private or Enterprise Cloud:\n\nPublic Cloud: Designed for small groups, such as a team using the Butterfly web application, this service allows for the creation of an organization within the cloud. Team members can invite colleagues to join their organization. This multi-tenant approach enables different organizations, like those from various hospitals, to coexist simultaneously within the same public cloud infrastructure.\n\nPrivate Cloud: An upgrade from the public cloud, this service provides a unique domain tailored for specific institutions, such as hospitals, which may establish separate organizations for each department. Additionally, Enterprise Cloud offers enhanced features like Single Sign-On (SSO), allowing users to access the cloud services with their existing institutional credentials. Like the public cloud, multi-tenant approach enables different organizations, like those from various hospitals, to coexist simultaneously within the same private cloud infrastructure.\n\nThe Butterfly Ultrasound Probe System uses industry standard third-party interconnections to provide robust and up to date security tools to protect the integrity of the Butterfly Ultrasound Probe System and related information.", "fedramp_msg": "", "sales_email": "salesops@butterflynetinc.com", "security_email": "security@butterflynetinc.com", "website": "https://www.butterflynetwork.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Education & Training", "Fleet Management", "Health & Wellness", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2620331565", "name": "Cableteque Corp.", "cloud_service_provider": "Cableteque Corp.", "cloud_service_offering": "CabletequeGov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cable%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-28T21:36:24.440Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-27T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Cableteque is a SaaS platform enabling secure technical data exchange across the design-to-manufacturing lifecycle for electronics systems and assemblies. The platform supports cost estimating, design validation, manufacturability analysis, procurement automation, and manufacturing engineering workflows for defense stakeholders.\n\nThe system stores, processes, and transmitted within the system includes Controlled Unclassified Information (CUI) and Covered Defense Information (CDI) such as technical drawings, design specifications, bill of materials data, component and material specifications, cost and pricing data, and procurement records associated with defense electronics programs. The system also processes ITAR-regulated engineering design data.", "fedramp_msg": "", "sales_email": "sales@cableteque.com", "security_email": "support@cableteque.com", "website": "https://cableteque.com/", "uei": "ZGTXJ87N3EG5", "small_business": true, "business_categories": [ "Artificial Intelligence (AI)", "Data Management", "Governance, Risk, and Compliance (GRC)", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1923039219", "name": "Canon U.S.A., Inc.", "cloud_service_provider": "Canon U.S.A., Inc.", "cloud_service_offering": "Canon Office Cloud – Managed Print Services", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Canon%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-06-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-07-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-09-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-06-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-07-16T20:00:00.000Z", "cert_date": "2020-09-04T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-09-04T20:00:00.000Z", "annual_assessment": "2011-05-19T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Department of Health and Human Services" ], "agency_reuse": [ "" ], "service_description": "Canon Office Cloud is a managed print platform offering two services to help federal agencies manage their print environment.\n\nOutput and Scan Management Service: designed to help provide access control to documents, reduce overall printing costs, and improve office productivity. \n\nKey features include:\n· CAC/PIV/SIPR authentication to compatible Canon imageRUNNER ADVANCE devices \n· Secure Print feature provides document access control\n· Delegated printing\n· Document scanning to FedRAMP¬ authorized cloud services such as: Microsoft Teams, OneDrive, Google Drive, Exchange, and BOX\n· Tracking and reporting of print, scan, and copy costs\n\nFleet Auditing and Management Service: offers advanced auditing and fleet management capabilities. \nDevice-agnostic discovery enables users to track asset inventories, device use, automatic supply replenishment, and fleet health.\n\nKey features include:\n• Centralized usage reporting \n• Print device status and alerting \n• Customizable toner replenishment \n• Automated meter collection tools \n• Service-alert notifications \n• Inventory change tracking \n• Service-performance analysis \n• Robust fleet analysis and reporting \n• Device security audit and alerting \n• ServiceNow integration (optional)", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@cusa.canon.com", "website": "https://usa.canon.com/officecloud", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2009476860A", "name": "Casepoint LLC", "cloud_service_provider": "Casepoint LLC", "cloud_service_offering": "Casepoint Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Casepoint%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-04-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-07-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-04-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-07-17T20:00:00.000Z", "cert_date": "2025-04-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-01T20:00:00.000Z", "annual_assessment": "2011-07-11T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Animal and Plant Health Inspection Service", "Defense Contract Management Agency", "Defense Information Systems Agency", "Department of Agriculture", "Department of Veterans Affairs", "Federal Energy Regulatory Commission", "Immigration and Customs Enforcement", "United States Marshals Service", "United States Securities and Exchange Commission" ], "agency_reuse": [ "" ], "service_description": "Casepoint is a data discovery platform for legal, investigatory, compliance, and IT teams who struggle to get actionable insights for data-centric business processes like eDiscovery, investigations, and information requests. Casepoint empowers leading corporations and government organizations to reduce costs, lower risk, and improve time-to-insight. Casepoint’s easy-to-use AI-powered platform is purpose-built for organizations that require the highest level of security and scalability to meet the evolving demands of the modern data landscape.\r\n\r\nCasepoint Government is delivered as a SaaS offering using a multi-tenant government-only cloud computing environment and is used by government agencies to meet their complex needs, including:\r\nLegal Holds\r\nRegulatory Enforcement / Investigations\r\nLitigation (eDiscovery)\r\nFOIA / PRR\r\nCongressional Inquiries\r\nLegal Data Storage\r\nTask / Case Strategy and Management\r\nThe Casepoint Government platform includes Casepoint Legal Hold, Casepoint eDiscovery, Casepoint FOIA, Casepoint Filestore, APIs for cloud collections, task management, and an app builder. Casepoint Government provides agencies with the capabilities needed to manage large volumes of data in litigation, investigations, congressional inquiries, and FOIA requests, including cloud-based collections, processing, culling, review, and highly customizable productions. It also offers built-in artificial intelligence and analytics with advanced tools for predictive analysis, search, and data visualization.", "fedramp_msg": "N/A", "sales_email": "government@casepoint.com", "security_email": "IScompliance@casepoint.com", "website": "https://platform.casepointgov.com/", "uei": "NNBKLLXPY4L6", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2530025267", "name": "Caveonix, Inc.", "cloud_service_provider": "Caveonix, Inc.", "cloud_service_offering": "Caveonix", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Caveonix%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-19T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-03-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-04-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-12-19T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-03-26T20:00:00.000Z", "cert_date": "2026-04-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-04-06T20:00:00.000Z", "annual_assessment": "2011-03-10T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "National Heart, Lung, and Blood Institute" ], "agency_reuse": [ "" ], "service_description": "Caveonix is delivered as a SaaS offering using a multi-tenant Government Community Cloud computing environment. It is available to, federal, state, local, and tribal governments, as well as research institutions, federal contractors, government contractors.\n\nCaveonix provides a continuous cyber compliance automation platform which simplifies complex and expensive audits across more than 50 frameworks, regulations, and mandates.", "fedramp_msg": "", "sales_email": "sales@caveonix.com", "security_email": "security@cavhq.ai", "website": "https://cavhq.ai/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2421035110", "name": "Cellebrite", "cloud_service_provider": "Cellebrite", "cloud_service_offering": "Cellebrite Government Cloud (CGC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cellebrite%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-02-06T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-08-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2026-04-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-04-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2025-02-06T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-08-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-04-13T20:00:00.000Z", "cert_date": "2026-04-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-04-29T20:00:00.000Z", "annual_assessment": "2011-03-27T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Justice Management Division" ], "agency_reuse": [ "" ], "service_description": "The Cellebrite Government Cloud (CGC) is a SaaS solution that is operational within Amazon Web Services (AWS) GovCloud. \n\nThe CGC enables customers to extract and analyze digital forensic evidence from mobile devices, such as phones and tablets. Using Cellebrite’s Digital Forensics Suite and\nInvestigative Suite, customers can leverage features such as device unlocking, data extraction, data analysis, information sharing, and reporting without compromising the integrity or chain of custody of the mobile device.", "fedramp_msg": "N/A", "sales_email": "FederalSales@cellebrite.com", "security_email": "CGC.Security@cellebrite.com", "website": "https://www.cellebritefsi.com/", "uei": "MBBKMVW4UQN", "small_business": false, "business_categories": [ "Law Enforcement" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2125059322", "name": "Center for Translational Data Science (CTDS)", "cloud_service_provider": "Center for Translational Data Science (CTDS)", "cloud_service_offering": "Gen3 Data Ecosystems Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/UoC%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-03-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-04-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-03-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-04-19T20:00:00.000Z", "cert_date": "2023-03-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Heart, Lung, and Blood Institute", "fedramp_auth": "2023-03-20T20:00:00.000Z", "annual_assessment": "2011-04-29T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "National Cancer Institute", "National Heart, Lung, and Blood Institute" ], "agency_reuse": [ "" ], "service_description": "The Gen3 Data Ecosystems Platform system has been determined to have a security categorization of Moderate (M). The Gen3 Data Ecosystems Platform (Gen3) is an open-source multi-tenant Software as a Service (SaaS) platform for developing, configuring, and operating cloud-based data commons, data ecosystems (also known as data meshes), and workspaces for managing, analyzing, and sharing both open access and controlled access data.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "Gen3platform@data-commons.org", "website": "https://gen3.data-commons.org/", "uei": "", "small_business": false, "business_categories": [ "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2317262742", "name": "Ceribell", "cloud_service_provider": "Ceribell", "cloud_service_offering": "Ceribell EEG", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Ceribell%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-06-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-02-03T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-06-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-02-03T20:00:00.000Z", "cert_date": "2025-04-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-21T20:00:00.000Z", "annual_assessment": "2011-09-30T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "The Ceribell EEG System is an FDA cleared, AI-powered, neurodiagnostic platform that enables bedside diagnosis and real-time monitoring of suspected seizure patients. The SaaS EEG portal enables real-time streaming of Ceribell EEG data to allow physicians to securely review from anywhere. The cloud-hosted portal also powers continuous AI monitoring that provides a real-time Seizure Burden trendline and alerts indicating suspected status epilepticus.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "security@ceribell-federal.com", "website": "https://ceribell.com/", "uei": "DTFEVJUKBV74", "small_business": true, "business_categories": [ "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2018946952", "name": "CGI Federal", "cloud_service_provider": "CGI Federal", "cloud_service_offering": "Sunflower Asset Management Cloud (SAMC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CGI%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-02-03T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-01-31T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-11-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-02-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-01-31T20:00:00.000Z", "cert_date": "2023-11-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-11-06T20:00:00.000Z", "annual_assessment": "2011-01-31T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2018946952", "csp": "CGI Federal", "cso": "Sunflower Asset Management Cloud (SAMC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Justice Management Division" ], "agency_reuse": [ "22-021-01" ], "service_description": "CGI Federal Sunflower Asset Management Cloud (SAMC) is a suite of applications that enable management of personal property, fleet and real property from acquisition through disposal. Capabilities include tracking physical location and accountability for assets, performing physical inventory audits, work order and maintenance management, and excess/disposal screening and processing. Sunflower also supports integration with financial and procurement systems to manage financial accountability and reporting. Real property software features enable rent reconciliation, occupancy agreements, lease management, and Federal Real Property Profile (FRPP) reporting. The Sunflower suite also includes applications for creating custom reports and dashboards for data analysis and financial statement reconciliation.", "fedramp_msg": "N/A", "sales_email": "Brandon.Kriner@cgifederal.com", "security_email": "cgif.fedramp.security@cgifederal.com", "website": "https://www.cgi.com/sunflower", "uei": "TRKEP1HEBNS5", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Education & Training", "Finance", "Fleet Management", "Mobile Device Management (MDM)", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1206061350", "name": "CGI Federal", "cloud_service_provider": "CGI Federal", "cloud_service_offering": "CGI Federal IaaS Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CGI%20Federal.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2012-06-14T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2013-01-31T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2012-06-14T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2013-01-31T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2013-01-31T20:00:00.000Z", "annual_assessment": "2011-01-31T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "IaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administrative Office of the United States Courts", "Corporation for National & Community Service", "Department of Homeland Security", "Railroad Retirement Board", "United States Agency for Global Media", "United States Securities and Exchange Commission" ], "agency_reuse": [ "" ], "service_description": "CGI delivers centralized, simplified, highly secure and fully managed solutions specifically designed to support Federal agencies, local and state governments, and tribal organizations needs. solution-focused services such as web content management solutions, content delivery network solutions, and co-location - enabling side-by-side hosting of virtualized and physical environments to meet transactional and/or specialized performance requirements.\n\nCGI DIFFENTIATORS\n- FedRAMP P-ATO and DISA P-ATO\n- High-touch, customer-centric service model with global presence\n- Business-centric analysis and transition planning\n- Automated cloud service management via secure portal\n- Enabling IT professional services to meet business and mission needs\n- Continental United States (CONUS) data centers staffed by U.S. citizens\n- Flexible, secure cloud infrastructure designed and built for government\n- Standards-based cloud technology supports interoperability", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/07/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "", "security_email": "Cgif.fedramp.security@cgifederal.com", "website": "https://www.cgi.com/en", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2022243058", "name": "CGI Federal", "cloud_service_provider": "CGI Federal", "cloud_service_offering": "Momentum Enterprise Suite", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CGI%20Logo.png", "status": "FedRAMP Certified (In Remediation)", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-10-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-01-12T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2021-04-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" }, { "date": "2026-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Authorized to FedRAMP Certified (In Remediation). Under remediation for not following \"Addressing FedRAMP Communication\" rule. See Notice 0016" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2020-10-28T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2021-01-12T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2021-04-26T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-04-26T20:00:00.000Z", "annual_assessment": "2011-04-26T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "CGI's Momentum is a market-leading, full-featured, flexible web-based system built to support the full federal financial, budget, asset and procurement management lifecycles. Designed specifically for federal business operations, CGI's Momentum Enterprise Solution helps federal IT leaders fulfill federal mandates, in an agile and cost-effective way. With zero expensive customizations or software extensions, Momentum is a transparent, accountable and proven solution that comes out-of-the-box ready to strengthen your agency's ability to maximize taxpayer dollars and bolster its diverse business processes.", "fedramp_msg": "N/A", "sales_email": "Momentum.Support@cgifederal.com", "security_email": "cgif.fedramp.security@cgifederal.com", "website": "https://www.cgi.com/en/solutions/momentum-federal-erp", "uei": "TRKEP1HEBNS5", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2334756650", "name": "Chainalysis", "cloud_service_provider": "Chainalysis", "cloud_service_offering": "Reactor", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Reactor%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-08-06T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-08-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-09-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-08-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-08-12T20:00:00.000Z", "cert_date": "2025-09-16T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-09-16T20:00:00.000Z", "annual_assessment": "2011-08-11T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Immigration and Customs Enforcement" ], "agency_reuse": [ "" ], "service_description": "Reactor is a cryptocurrency investigation tool for tracing the flow of funds, which helps investigators as they identify and track bad actors who use cryptocurrencies for illicit activity. Reactor combines an intuitive interface with flexible visualization capabilities to map blockchain transactions into real-world entities, enabling users to combat criminal activity on the blockchain. Reactor is used by law enforcement, compliance officers, financial institutions, and governments around the world for criminal investigations.", "fedramp_msg": "", "sales_email": "cgs@chainalysis-gov.com", "security_email": "fedramp@chainalysis.com", "website": "https://www.chainalysis.com/", "uei": "KCJLLAYLT1B9", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Cybersecurity & Risk Management", "Finance", "Law Enforcement", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2332984245", "name": "ChargePoint, Inc.", "cloud_service_provider": "ChargePoint, Inc.", "cloud_service_offering": "CP Fed Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ChargePoint%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-08-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-01-18T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-01-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-08-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-01-18T20:00:00.000Z", "cert_date": "2024-01-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-01-23T20:00:00.000Z", "annual_assessment": "2011-01-18T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "General Services Administration" ], "agency_reuse": [ "" ], "service_description": "The information system manages the use of and processes the transactions/ sessions for electric vehicle charging for stations sold to US federal and associated customers. The cloud information system communicates with charging stations located at client sites, facilitating interactions between public and government users and the charging infrastructure, establishes/ initiates charging sessions, and accepts payments and/or account authorization for station use. The system stores customer/ organizational information to provide services to the end user/ customer/ organization. The system identifies and validates authorized users of the charging infrastructure and updates user/ organizational account with usage statistics.", "fedramp_msg": "", "sales_email": "fedramp@chargepoint.com", "security_email": "infosec@chargepoint.com", "website": "https://www.chargepoint.com/", "uei": "E3Y8C7CU9RD8", "small_business": false, "business_categories": [ "Fleet Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2328145448", "name": "Chargie, LLC", "cloud_service_provider": "Chargie, LLC", "cloud_service_offering": "Electric Vehicle Infrastructure Platform for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Chargie%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-07-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-01-18T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-01-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-07-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-01-18T20:00:00.000Z", "cert_date": "2024-01-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-01-23T20:00:00.000Z", "annual_assessment": "2011-01-18T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "General Services Administration" ], "agency_reuse": [ "" ], "service_description": "Chargie designs, installs and operates an Electronic Vehicle (EV) charging infrastructure system and management platform providing seamless management of charging stations and sessions. Chargie platforms require no integration with agency networks, systems or data. The Chargie platform ensures agency EV fleet and facilities managers the ability to maintain management and visibility of EV charging stations, sessions and reporting via a web-based portal in addition to a seamless charging experience for drivers with the Chargie mobile device app or RFID tag.", "fedramp_msg": "", "sales_email": "fedramp@chargie.com", "security_email": "security@chargie.com", "website": "https://chargie.com/", "uei": "NSDFW8DZAP24", "small_business": false, "business_categories": [ "Analytics", "Fleet Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2511048038", "name": "Check Point Software Technologies, Inc.", "cloud_service_provider": "Check Point Software Technologies, Inc.", "cloud_service_offering": "Check Point Infinity Platform for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Checkpoint%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-04-03T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-08-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-09-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-04-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-08-12T20:00:00.000Z", "cert_date": "2025-09-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-09-24T20:00:00.000Z", "annual_assessment": "2011-08-06T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Marine Mammal Commission" ], "agency_reuse": [ "" ], "service_description": "Check Point Infinity Platform for Government is designed to\nprovide a robust, unified cybersecurity solution tailored to meet the\nstringent security and compliance requirements of federal agencies.\nThis platform integrates advanced threat prevention, secure email,\nand centralized management capabilities to safeguard federal data\nand systems against evolving cyber threats. The initial package\nincludes the following components:\n\nHarmony Email: This solution provides advanced protection for email\nsuch as Microsoft 365 and GMail, against phishing, malware,\nransomware, and account takeover attacks. It ensures secure\ncommunication and collaboration for federal agencies by leveraging\nAI-driven threat detection and prevention.\n\nThreatCloud AI: ThreatCloud AI serves as the backbone of Check Point's\nthreat intelligence ecosystem. It aggregates and analyzes global\nthreat data in real-time, enabling proactive identification and\nmitigation of threats. ThreatCloud ensures that federal systems are\ncontinuously updated with the latest threat intelligence to prevent zero-\nday attacks and other sophisticated cyber threats.\n\nInfinity Portal: The Infinity Portal acts as a centralized management\nconsole, providing federal agencies with a single pane of glass to\nmanage their cybersecurity posture. It enables streamlined policy\nenforcement, real-time monitoring, and comprehensive reporting,\nensuring compliance with federal security standards.\n\nSystem Functionality and Use Case\nThe Check Point Infinity Platform for Government is designed to:\n\nProtect Federal Systems and Data: By integrating advanced threat\nprevention and real-time threat intelligence, the platform safeguards\nfederal systems against known and emerging cyber threats.\n\nEnhance Collaboration Security: Harmony Email and Collaboration\nensures secure communication and collaboration within and across\nfederal agencies, reducing the risk of data breaches and unauthorized\naccess.\n\nSimplify Security Management: The Infinity Portal provides\ncentralized visibility and control, enabling federal IT teams to\nefficiently manage their cybersecurity infrastructure and maintain\ncompliance with federal regulations.\n\nSupport Cloud-First Initiatives: The SaaS-based architecture aligns\nwith federal cloud adoption strategies, providing scalability, flexibility,\nand cost efficiency.\n\nFederal Data Stored, Processed, or Transmitted:\nThe \"Check Point Infinity Platform for Government\" is designed to\nhandle various types of federal data, including:\n\nPersonally Identifiable Information (PII): Such as employee or\ncitizen data processed through email and collaboration tools.\n\nSensitive But Unclassified (SBU) Data: Including internal agency\ncommunications, reports, and operational data.\n\nControlled Unclassified Information (CUI): Such as data related to\nfederal programs, contracts, or research that requires safeguarding.\n\nThreat Intelligence Data: Aggregated and analyzed within\nThreatCloud to enhance the security posture of federal systems.\nThe platform ensures that all data is stored, processed, and\ntransmitted in compliance with federal security standards, including\nencryption in transit and at rest, access controls, and continuous\nmonitoring to detect and respond to potential threats.", "fedramp_msg": "N/A", "sales_email": "USPublicSectorSales@checkpoint.com", "security_email": "fedramp@checkpoint.com", "website": "https://www.checkpoint.com/", "uei": "LKDTJYJEME67", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2514624801", "name": "Checkmarx", "cloud_service_provider": "Checkmarx", "cloud_service_offering": "Checkmarx One for Government (CXG)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Checkmarx%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-19T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-12-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2026-04-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-06-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2025-06-19T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-12-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-04-24T20:00:00.000Z", "cert_date": "2026-06-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-06-12T20:00:00.000Z", "annual_assessment": "2011-04-17T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "National Institutes of Health" ], "agency_reuse": [ "" ], "service_description": "Checkmarx One for Government (CXG) is a cutting-edge, cloud-native application security platform designed specifically for U.S. government agencies. Hosted in AWS GovCloud, CXG provides a secure, single-tenant environment that supports the most stringent compliance standards, enabling government entities to safely develop, deploy, and monitor applications in a highly secure manner.\n\nCXG offers a comprehensive suite of security modules, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Application Security Posture Management (ASPM). Additionally, CXG provides advanced add-ons for Malicious Package Detection, Container Security, and Infrastructure as Code (IaC) Security, all of which enable government agencies to secure applications from code to cloud and across the entire software development lifecycle (SDLC).\n\nSeamlessly integrating into developer workflows through IDE plugins (such as VSCode), CLI, API, and a web-based UI, CXG empowers developers to identify and fix vulnerabilities early in the SDLC. The platform provides actionable remediation guidance and risk-based prioritization, ensuring that vulnerabilities are addressed before they can impact mission-critical systems.\n\nCXG continuously scans proprietary code, open-source dependencies, containers, and IaC templates using Checkmarx Threat Intelligence to proactively detect exploitable risks. Its developer-first experience allows secure software development without disruption, and its compliance features ensure alignment with industry standard benchmarks for security and risk management. Hosted in AWS GovCloud and built to meet the highest U.S. government security standards, CXG automates security across DevSecOps pipelines.\n\nCXG also ensures continuous monitoring of security controls, providing real-time insights into the security posture of your applications and infrastructure. It is purpose-built to meet the unique security and compliance needs of U.S. government agencies, enabling a secure and resilient software development process in today’s complex cybersecurity landscape.", "fedramp_msg": "N/A", "sales_email": "fedramp@checkmarx.com", "security_email": "infosec@checkmarx.com", "website": "https://checkmarx.com/product/application-security-platform/", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2330728655", "name": "Chronus LLC", "cloud_service_provider": "Chronus LLC", "cloud_service_offering": "Chronus for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Chronus%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-09-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-11-14T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-09-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-11-14T20:00:00.000Z", "cert_date": "2025-04-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Information Systems Agency", "fedramp_auth": "2025-04-08T20:00:00.000Z", "annual_assessment": "2011-03-19T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency", "United States Coast Guard" ], "agency_reuse": [ "" ], "service_description": "Chronus for Government (CSO) is a SaaS based employee development solution that allows customers to automate and scale their mentoring and ERG programs. Chronus provides cloud-based talent development software that runs multiple enterprise mentoring, onboarding, executive coaching, and ERG programs from a single platform. Each program has the ability to have its own admin with access rights to their program only, and each program can have a unique configuration for matching methods, profile information, reporting, content, engagement plans, etc. Users will have a single global profile, and can participate in multiple programs.", "fedramp_msg": "N/A", "sales_email": "fedramp@chronus.com", "security_email": "techsupport@chronusgov.com", "website": "https://chronus.com/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Education & Training", "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1814240140", "name": "CircleCI", "cloud_service_provider": "CircleCI", "cloud_service_offering": "CircleCI Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CircleCi%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-04-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-09-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Authorization In Process to FedRAMP In Process" }, { "date": "2018-09-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP In Process to FedRAMP Certified" }, { "date": "2023-10-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Authorized to Legacy FedRAMP Ready. SBA rescinds ATO which is why we drop to FedRAMP Ready" }, { "date": "2024-11-21T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2024-12-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-01-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 21, "ready_status": "Not Active", "ready_date": "2023-10-02T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-11-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-12-17T20:00:00.000Z", "cert_date": "2018-09-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-09-26T20:00:00.000Z", "annual_assessment": "2011-09-23T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [ { "id": "FR1817874315", "csp": "Valimail", "cso": "Valimail Enforce Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2411443563", "csp": "Valley IT Solutions, LLC", "cso": "Kernos", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "General Services Administration" ], "agency_reuse": [ "22-011", "22-014-02", "22-015", "22-016-36" ], "service_description": "CircleCI is a highly configurable and powerful continuous integration and delivery platform that helps software teams confidently and securely release code by automating the build, test, and deploy process. Our cloud offering removes operational overhead as we oversee the setup, security, and maintenance of your continuous integration instances. With easy setup and configuration-as-code, CircleCI removes bottlenecks, allowing teams to focus on building great things, instead of waiting for great things to build. By enabling shorter iteration cycles and immediate feedback, innovation happens faster. The platform helps developers and QA find bugs and get fixes out quickly. Operations teams use CircleCI to simplify their tool chains without having to manage additional plugins and services. Scale is where https://circleci.com really shines. We're proud to support our customers, from small startups to the largest enterprises and government agencies on earth.", "fedramp_msg": "N/A", "sales_email": "sales@circleci.com", "security_email": "compliance@circleci.com", "website": "https://circleci.com/", "uei": "", "small_business": false, "business_categories": [ "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2220549818", "name": "CirrusMD", "cloud_service_provider": "CirrusMD", "cloud_service_offering": "CirrusMD Virtual Health Chat for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CirrusMD%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-05-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-04-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-10-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-05-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-04-24T20:00:00.000Z", "cert_date": "2024-10-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-10-23T20:00:00.000Z", "annual_assessment": "2011-10-17T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "CirrusMD Virtual Health Chat for Government increases access to Agency Care and is delivered as a SaaS offering using a multi-tenant Government Only Community cloud computing environment. The CirrusMD system provides a SaaS cloud-based service offering that is architected using best-of-breed security solutions, utilizing the government community deployment model, allowing for repeatable, secure, and elastic delivery of application services to the government user community. The system enables the government to meet its goals of agile computing, generating fiscal savings, and increasing utilization of federal IT platforms. The CirrusMD system is a government cloud-based service offering that is fully secure and complies with HIPAA and GDPR.\r\n\r\nCirrusMD owns and operates the CirrusMD Virtual Health Chat for Government information system within the SaaS cloud deployment model. The collection of events is within the trusted path of the environment and tailored for the Federal customer environment. The Federal customer does not manage or control the underlying SaaS cloud environment, including network, server, operating system, storage, or individual application capabilities, except for the connectivity between environments, which is all supported by the provider.", "fedramp_msg": "N/A", "sales_email": "sales@cirrusmd.com", "security_email": "FedRAMP@CirrusMD.com", "website": "https://www.cirrusmd.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2518163100", "name": "Cisco", "cloud_service_provider": "Cisco", "cloud_service_offering": "Spaces for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Spaces%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-04-03T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-11-10T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-11-25T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-04-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-11-10T20:00:00.000Z", "cert_date": "2025-11-25T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-11-25T20:00:00.000Z", "annual_assessment": "2011-10-23T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2523656707", "csp": "Cisco Systems, Inc.", "cso": "Cisco ThousandEyes for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "General Services Administration" ], "agency_reuse": [ "22-002-08", "22-034" ], "service_description": "Cisco Spaces for Government (formerly DNA Spaces) uses MAC address-based location data to gain insights into the behavior of end user devices and network connected objects in any place with wireless connectivity, allowing customers to make informed business decisions, optimize operations, and improve experiences. Spaces brings together multiple location-based service capabilities in a unified platform and user interface (the service). Cisco Spaces for Government enterprises operating in the physical world have limited to no visibility into the behavior of people and connected assets within their buildings. Cisco Spaces for Government solves this physical blind spot problem by sensing location intelligence from all underlying Cisco wireless network and translating it into business ready insights.", "fedramp_msg": "N/A", "sales_email": "cisco-fedramp@cisco.com", "security_email": "cisco-fedramp@cisco.com", "website": "https://www.cisco.com/c/en/us/solutions/enterprise-networks/dna-spaces/index.html", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Data Management", "Network Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1823368486", "name": "Cisco AppDynamics", "cloud_service_provider": "Cisco AppDynamics", "cloud_service_offering": "AppDynamics GovAPM", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/AppDynamics%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-06-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-04-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-06-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 45, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-06-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-04-27T20:00:00.000Z", "cert_date": "2020-06-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-06-10T20:00:00.000Z", "annual_assessment": "2011-05-22T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "F1511207635", "csp": "Cisco Systems Inc.", "cso": "Webex for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2119265538", "csp": "NEOGOV", "cso": "NEOGOV Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Cybersecurity & Infrastructure Security Agency", "National Science Foundation" ], "agency_reuse": [ "22-002-01", "22-002-02", "22-002-04", "22-002-08", "22-005", "22-005-20", "22-007-03", "22-007-07", "22-007-09", "22-007-22", "22-011-02", "22-011-03", "22-011-05", "22-011-06", "22-015", "22-016-01", "22-019", "22-020", "22-021-03", "22-021-04", "22-021-13", "22-022", "22-023", "22-025", "22-027-02", "22-027-07", "22-030", "22-032", "22-034", "22-035", "22-036", "22-036-01", "22-042", "22-051", "22-060", "22-061", "22-065", "22-067", "22-074" ], "service_description": "AppDynamics GovAPM is a software-as-a-service (SaaS) application performance monitoring (APM) solution. AppDynamics GovAPM provides end-to-end visibility into the performance of applications. AppDynamics application performance monitoring and business intelligence solutions provide organizations real-time visibility into application environments and strategic insights that drive business outcomes. By utilizing industry-leading monitoring and analytics features, IT departments can automatically identify performance anomalies and resolve issues before they impact customers or revenue streams. Our unique combination of application performance and business metrics gives enterprises the power to deliver reliable performance and a flawless customer experience.", "fedramp_msg": "N/A", "sales_email": "fedrampsales@appdynamics.com", "security_email": "splunk-fedramp@cisco.com", "website": "https://www.appdynamics.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Data Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2304757473A", "name": "Cisco Systems Inc.", "cloud_service_provider": "Cisco Systems Inc.", "cloud_service_offering": "Cisco Security Cloud for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cisco%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-06-12T22:13:11.139Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-08-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-06-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-06-12T20:00:00.000Z", "cert_date": "2026-08-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-08-06T20:00:00.000Z", "annual_assessment": "2011-06-04T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of State", "Federal Communications Commission", "National Endowment for the Arts" ], "agency_reuse": [ "" ], "service_description": "Cisco Security Cloud for Government provides cloud-based security solutions with multiple component products.\r\n\r\n \r\n\r\n\r\n\r\nCisco Umbrella for Government \r\n\r\nCisco Umbrella for Government delivers advanced, cloud-native cybersecurity, ensuring protection and compliance for government agencies to support their mission. It significantly uplevels government cybersecurity, offering comprehensive protection that meets the unique needs of government agencies. Cisco Umbrella for Government provides a comprehensive security suite with DNS-layer security and Secure Internet Gateway (SIG) capabilities, such as secure web gateway (SWG) , cloud-delivered firewall and intrusion prevention (Snort IPS), cloud access security broker (CASB), and data loss prevention (DLP), and integration with CISA Protective DNS. The feature set is comparable to the Cisco Umbrella product in use by over 30,000 Enterprise customers. Cisco Secure Access for Government includes more robust SSE capabilities than Cisco Umbrella for Government. Agencies looking for ZTNA and a high-performance architecture should choose Secure Access for Government.\r\n\r\n \r\n\r\n\r\n\r\nCisco Secure Access for Government\r\n\r\nCisco Secure Access for Government is a comprehensive Security Service Edge solution grounded in Zero Trust, that empowers Federal, State, and Local agencies to secure their workforce and data, simplify operations, and advance their mission with confidence. Its adaptive security capabilities, powered by Cisco Talos and AI, enable real-time threat detection, behavioral analysis, and predictive defense—ensuring proactive protection of your people and data against evolving cyber risks. With a comprehensive zero trust approach and a unique unified client, users gain seamless, secure access to critical applications across devices and locations—without compromising usability or performance. When paired with Catalyst® SD-WAN, Cisco Secure Access for Government delivers a holistic SASE solution. Enhanced integration with Catalyst SD-WAN will be available in 2026.\r\n\r\nKey capabilities include:\r\n\r\nA single platform for IT teams that centralizes management, streamlines policy enforcement, and reduces overhead. AI-driven automation accelerates response times and reduces human error, which integrates with solutions like Duo and Cisco SD-WAN will enable a compliant, Zero Trust architecture tailored for public sector needs.\r\nCloud-native and continuously updated, Cisco Secure Access removes hardware complexity and scales effortlessly to meet the demands of dynamic government environments. The result: stronger security, improved user experience, and simplified operations—all built to protect the mission and serve the public. \r\nSecure Access for Government includes the following: Secure Internet Access (SIA) and Secure Private Access (SPA). Both products have Essentials and Advantage SKUs.\r\nOffers robust protection against modern-day cyber threats through Zero Trust Network Access, DNS security, Secure Web Gateway (SWG), Data Loss Prevention (DLP), Cloud-Delivered Firewall (FWaaS), Cloud Access Security Broker (CASB), VPN as-a-Service (VPNaaS), Advanced Malware Protection, and Talos® Threat Intelligence capabilities.\r\nExtends DNS security with an Integration with the Cybersecurity and Infrastructure Security Agency (CISA’s) Protective DNS (PDNS).\r\n \r\n\r\n\r\n\r\nCisco Security Cloud Control\r\n\r\nCisco Security Cloud Control is a security platform that allows you to manage your security products and achieve security outcomes from a single integrated interface. Integrating security products in the platform is a streamlined experience. Within Security Cloud Control, user and group management occurs at the platform level. Roles are assigned to these users and groups to define their privileges for administering Security Cloud Control and the integrated products. Navigation between products and tools is intuitive and standardized with a common platform menu and toolbar for all integrated products.\r\n\r\n\r\n\r\n\r\nCisco Security Cloud Control - Firewall Management for Government \r\n\r\nCisco Security Cloud Control - Firewall Management for Government delivers cloud-native firewall policy and device management through a unified management plane accessible through an intuitive web-based console. It enables centralized, scalable, and secure orchestration of Cisco next-generation firewalls (NGFWs) — including ASA and Secure Firewall Threat Defense (FTD) devices — across hybrid, cloud, and on-premises environments. With real-time visibility into traffic and threats, automated policy and object updates, and zero-touch provisioning for remote deployments - Security Cloud Control Firewall Management for Government reduces operational complexity for IT teams while strengthening cyber resilience and enabling secure modernization across mission-critical infrastructure. This product will now also include AIOps features like Policy Analyzer & Optimizer, Feature adoption, and a summary dashboard for customers to ensuring faster and accurate anomaly detection using Artificial Intelligence. A SAL Eventing License Utilization Dashboard will also be available to the customers.\r\n\r\n \r\n\r\n\r\n\r\nCisco Multicloud Defense for Government \r\n\r\nCisco Multicloud Defense for Government is designed to provide consistent, automated protection across multicloud environments, including AWS, Azure, GCP, and OCI. It integrates network security with multicloud networking, offering multi-directional protection to stop inbound attacks, prevent lateral movement, and block data exfiltration. With its centralized SaaS control plane, Cisco Multicloud Defense simplifies security management, enabling organizations to create and enforce unified security policies across all cloud environments in real-time. By leveraging advanced features such as dynamic policy management, continuous asset discovery, and automation, Cisco Multicloud Defense empowers organizations to reduce complexity, enhance operational efficiency, and maintain robust security across their multi-cloud infrastructure.\r\n\r\n \r\n\r\n\r\n\r\nCisco Secure Email Threat Defense for Government\r\n\r\nCisco Secure Email Threat Defense for Government exemplifies our ongoing commitment to delivering trusted, government-grade email security for agencies, contractors, and organizations handling regulated or sensitive data. Secure Email Threat Defense, a cloud-scale advanced email security layer, harnesses AI powered detections to provide comprehensive protection against advanced email threats, integrated as an API-based supplemental control or with the addition of new pre-delivery inline gateway protection.\r\n\r\nBeyond the governance and compliance benefits, Cisco Secure Email Threat Defense for Government delivers a set of advanced protection capabilities that align directly with real-world email threat risks — especially for organizations that are particularly sensitive to BEC, phishing, QR Code/Quishing Detection, brand impersonation, or high-risk personnel.\r\n\r\n \r\n\r\n\r\n\r\nDuo Federal\r\n\r\nDuo’s Federal Editions can verify the identity of users with secure and easy to use two-factor authentication methods that helps public sector entities satisfy NIST 800-63-3 and 53/63/171 authentication requirements. In addition to verifying users’ identities, Duo’s solution checks the security health of every device authenticating into the environment, at the time of access. Admins can use Duo to enforce stricter device and application access policies, such as blocking login requests based on location or anonymous networks. Duo ensures only trusted users and devices can access protected applications. This complete security solution prevents modern attackers that often target multiple areas - including credential theft and the exploitation of known software vulnerabilities affecting outdated software versions.", "fedramp_msg": "", "sales_email": "secure-gov@cisco.com", "security_email": "cisco-fedramp@cisco.com", "website": "http://www.cisco.com/go/secure-access-gov", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1605107897", "name": "Cisco Systems Inc.", "cloud_service_provider": "Cisco Systems Inc.", "cloud_service_offering": "Cisco Cloudlock for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CloudLock%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2016-05-05T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-11-14T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-12-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 44, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2016-05-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-11-14T20:00:00.000Z", "cert_date": "2017-12-04T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2017-12-04T20:00:00.000Z", "annual_assessment": "2011-11-14T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "F1511207635", "csp": "Cisco Systems Inc.", "cso": "Webex for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "General Services Administration" ], "agency_reuse": [ "22-002-01", "22-002-02", "22-002-04", "22-002-08", "22-005", "22-005-20", "22-007-03", "22-007-07", "22-007-09", "22-007-22", "22-011-02", "22-011-03", "22-011-05", "22-011-06", "22-015", "22-016-01", "22-019", "22-020", "22-021-03", "22-021-04", "22-021-13", "22-022", "22-023", "22-025", "22-027-02", "22-027-07", "22-030", "22-032", "22-034", "22-035", "22-036", "22-036-01", "22-042", "22-051", "22-060", "22-061", "22-065", "22-067", "22-074" ], "service_description": "Cisco Cloudlock is the cloud-native Cloud Access Security Broker (CASB) that helps accelerate use of the cloud. Cisco Cloudlock secures your cloud users, data, and apps, combating account compromises, data breaches, and cloud app ecosystem risks, while facilitating compliance through a simple, open, and automated API-driven approach. Cisco Cloudlock is a simple, open, and automated solution that combats cloud account compromises, malicious insiders, data breaches, compliance violations, and cloud app ecosystem risks. With crowd-sourced security analytics across billions of data points, advanced machine learning, and the data scientist-led CyberLab, Cisco Cloudlock provides actionable cybersecurity intelligence that provides visibility and control over the most critical cloud security risks.\n\nCloud User Security: Cross-platform User and Entity Behavior Analytics (UEBA) for SaaS, IaaS, PaaS, and IDaaS environments leverages advanced machine learning algorithms to detect anomalies. Cloudlock can also detect activities outside of whitelisted countries and actions across distances at impossible speeds. **Cloud Data Security:** Cloud Data Loss Prevention (DLP) continuously monitors cloud environments to detect and secure sensitive information through countless out-of-the-box policies as well as highly-tunable custom policies. Automated response actions can remediate risk in the event of a policy violation, including end-user notifications, encryption, transfer of ownership, quarantine, and more.\n\nCloud App Security: The Cisco Cloudlock Apps Firewall discovers cloud apps connected via OAuth to your corporate environment, and provides a crowd-sourced Community Trust Rating for individual apps, as well as the ability to ban or whitelist them based on risk profile and access scope, increase employee awareness with email alerts, and revoke apps in bulk across the entire user base.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "cisco-fedramp@cisco.com", "website": "https://umbrella.cisco.com/products/cloud-access-security-broker-casb", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2315535023", "name": "Cisco Systems Inc.", "cloud_service_provider": "Cisco Systems Inc.", "cloud_service_offering": "Cisco Meraki US Government Region", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Meraki%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-05-03T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-12-21T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-02-18T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-05-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-12-21T20:00:00.000Z", "cert_date": "2025-02-18T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Cybersecurity & Infrastructure Security Agency", "fedramp_auth": "2025-02-18T20:00:00.000Z", "annual_assessment": "2011-12-20T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Antitrust Division", "Cybersecurity & Infrastructure Security Agency", "Department of Agriculture", "Department of Education", "National Mediation Board", "National Oceanic and Atmospheric Administration" ], "agency_reuse": [ "" ], "service_description": "Cisco Meraki for Government provides a secure and efficient way to support your networking transformation within budget. Our cloud-managed platform simplifies networking to make it easier to deploy, manage, and optimize networks – driving IT modernization and enabling hybrid work. Meraki helps future proof networks and allows agencies to stay ahead of changing citizen and regulatory demands while improving employee productivity.​\n\nMeraki has developed the most sophisticated platform in the industry based on cloud-first operations, network intelligence (AI), and open APIs to better integrate and automate processes, while providing a way to customize the monitoring and management of a network. The Meraki platform is built with a modern cloud-managed architecture that is able to quickly scale to meet the needs of customers worldwide. ​\n\nWe have taken that knowledge and technical sophistication to create a tailored solution for the U.S. Government. Our solution gives government agencies the ability to quickly deploy, scale and manage cloud networks anywhere in the world in an effort to help meet their cloud-first initiatives. Security is a high priority of our solution, which is why we created a separate platform that stores data on U.S. soil and includes FIPS to further protect government telemetry data from device to cloud. ​Meraki will offer certain MS (Switching), MR (Wireless) and MX (Security and SD-WAN) devices as part of the offering.", "fedramp_msg": "N/A", "sales_email": "merakifederal@cisco.com", "security_email": "cisco-fedramp@cisco.com", "website": "https://meraki.cisco.com/", "uei": "", "small_business": false, "business_categories": [ "Network Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1511207635", "name": "Cisco Systems Inc.", "cloud_service_provider": "Cisco Systems Inc.", "cloud_service_offering": "Webex for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cisco%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-04-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2016-01-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2016-02-02T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 43, "reuse": 42, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-04-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2016-01-04T20:00:00.000Z", "cert_date": "2016-02-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2016-02-02T20:00:00.000Z", "annual_assessment": "2011-08-24T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Antitrust Division", "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Consumer Product Safety Commission", "Customs and Border Protection", "Cybersecurity & Infrastructure Security Agency", "Defense Information Systems Agency", "Department of Agriculture", "Department of Education", "Department of Health and Human Services", "Department of Labor", "Department of State", "Department of Veterans Affairs", "Environmental Protection Agency", "Executive Office for United States Attorneys", "Farm Credit Administration", "Federal Deposit Insurance Corporation", "Federal Reserve System", "First Responder Network Authority", "General Services Administration", "Immigration and Customs Enforcement", "Indian Health Services", "National Aeronautics and Space Administration", "National Institute of Standards and Technology", "National Mediation Board", "National Nuclear Security Administration / Kansas City Field Office", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "National Nuclear Security Administration / Nevada Field Office", "National Oceanic and Atmospheric Administration", "National Science Foundation", "Nuclear Regulatory Commission", "Office of Financial Research", "Office of the Comptroller of the Currency", "Strategic Petroleum Reserve", "United States Citizenship and Immigration Services", "United States International Trade Commission", "United States Patent and Trademark Office", "United States Securities and Exchange Commission", "Universal Service Administrative Company", "VA Office of the Inspector General" ], "agency_reuse": [ "" ], "service_description": "Webex for Government addresses the U.S. public sector’s collaboration needs in a single, secure package, relieving customers of the complexity of managing multiple point products from different vendors. \n\nThe Webex for Government Suite provides a core set of capabilities that enable a hybrid workforce to collaborate securely and effectively from anywhere, on any device, and with anyone. Those core capabilities include: \n\n• Webex for Government Meetings simplifies your company’s workflows at scale. Equip your team with the most powerful tool to meet and exceed your agency’s goals.\n• Webex for Government Messaging keeps work flowing in between meetings with rich messaging and secure file sharing for continuous teamwork.\n• Webex for Government Calling is a proven cloud calling solution that delivers enterprise-grade calling functionality, enabling you to replace your on-premises PBX network with a globally trusted cloud calling solution. Webex Calling also provides powerful tools like voice queues and call routing to strengthen customer relationships.\n• Webex for Government Webinars simplifies webinar delivery and drives engagement with immersive content and interactive audience experiences.\n• Webex for Government Control Hub provides a centralized and comprehensive administrative portal for all your collaboration services.\n• Virtual Visitation Service is an advanced scheduling portal feature to allow configuration of business rules, workflows, and zero touch device connectivity within Webex for Government Meetings. \n\nWhether you need to collaborate with remote colleagues, reach hybrid users, host webinars, address customer complaints, or offer technical support remotely, the Webex for Government Suite is the secure, compliant, collaboration solution. With Webex for Government Suite, you can reimagine your work by optimizing collaboration through AI-enabled software and hardware. It also helps you to reimagine your workspaces through collaboration devices that are purpose-built for your diverse needs and spaces. This collaboration solution can take your hybrid work setup from “good enough” to one that empowers your teams to collaborate seamlessly and securely so that you can focus on delivering additional business outcomes.\n\nThe Cisco Unified Communication Manager Cloud for Government service is now included in the Webex for Government ATO. Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) is a complete unified communications service from the Cisco Cloud. It is built to provide government-level security so that organizations can collaborate with anyone, anywhere, on any device. The service is hosted by Cisco, sold by Cisco Powered partners.", "fedramp_msg": "N/A", "sales_email": "collab-usgov@cisco.com", "security_email": "collab-usgov-security@cisco.com", "website": "https://www.webex.com/industries/government.html", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "Unified Communications Manager Cloud for Government (UCMC-G)", "Virtual Visitation Service for Webex for Government", "Webex for Government Calling" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2012534927", "name": "Cisco Systems, Inc.", "cloud_service_provider": "Cisco Systems, Inc.", "cloud_service_offering": "Cisco Catalyst SD-WAN for Government (SDWAN-G)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cisco%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-01-17T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-02-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-03-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-01-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-02-23T20:00:00.000Z", "cert_date": "2024-03-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-03-14T20:00:00.000Z", "annual_assessment": "2011-02-23T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of State", "Food and Drug Administration", "HHS Office of the Inspector General", "National Endowment for the Arts", "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "Cisco Catalyst SD-WAN for Government (SDWAN-G), powered by Cisco Viptela/IOS XE, is a highly secure, cloud-scale architecture that is open, programmable, and scalable. All vetted and monitored through the rigorous FedRAMP authorization process. Use it to connect data centers, branches, campuses, and colocation facilities to improve network speed, security, and efficiency. Cisco Catalyst SDWAN-G is a cloud-delivered overlay WAN architecture connecting branches to data centers and multi-cloud environments through a single fabric and single pane of glass. Cisco Catalyst SDWAN-G helps ensure a predictable user experience for applications optimized for SaaS, IaaS, and PaaS connections. Comprehensive on-premises and cloud-based security protect against cyberthreats while enabling IT teams to accelerate the transition to a Secure Access Service Edge (SASE) architecture where and when it is needed.\n \nCisco Catalyst SD-WAN Government (SDWAN-G) is owned, operated, and supported directly by Cisco for use in government offerings, providing the following capabilities:\n \n - Enhanced Visibility: Extend your network visibility and observability with our core government self-service portal. You'll gain actionable insights to help you transform network operations from reactive to highly proactive model.\n \n - Right Security, Right Place: On-premises or cloud-based security with secure SDWAN-G helps to accelerate the transition to a secure access service edge (SASE) architecture where and when it's needed.\n \n - Operational Simplicity: With a highly visualized interface and intuitive user experience for simplified configuration, management, operation, and monitoring across the Cisco Catalyst SDWAN-G fabric. The Cisco Catalyst SDWAN-G solution comes with pre-configured templates to automate and expedite the deployment of most common use cases. Guided step-by-step configuration designed to intelligently expedite onboarding of new devices, and full integration of unified communication, and security into Cisco Catalyst SDWAN-G.\n \nThe Cisco Catalyst SDWAN-G solution is segregated into four planes with four key components: \n \nManager\n \n- In the management plane, the Cisco Catalyst SD-WAN Manager is the centralized network management system and represents the user interface of the solution. Network administrators and operators can configure, provision, troubleshoot, and manage the entire overlay network from a simple graphical dashboard.\n \nValidator\n \n- In the orchestration plane, the Cisco Catalyst SD-WAN Validator automatically orchestrates connectivity between edge devices and Controllers. The Validator is largely responsible for the provisioning process as well as first-line authentication, control/management information distribution, and facilitating Network Address Translation (NAT) traversal.\n \nController\n \n- In the control plane, the Cisco Catalyst SD-WAN Controller is the component responsible for enforcing policies centrally. When branches come online, their routing information is exchanged with the Controller and not directly with other branches. The Controller works with the Validator to authenticate edge devices as they join the network and to orchestrate connectivity among the edge devices.\n \nEdge Devices\n \n- In the data plane, the Edge devices are responsible for establishing the network fabric and handle the transmission of data traffic. Edge devices come in multiple forms, virtual and physical, and are selected based on the connectivity, throughput, and functional needs of the site. The operating system of the Edge devices is securely developed and tested as part of Cisco’s Secure Development Lifecycle (CSDL) prior to releasing a version for the customer to deploy. In-boundary scanning of the operating system deployed with Edge devices for Cisco Catalyst SDWAN-G are scanned as part of Cisco’s continuous monitoring strategy.\n\nCollectively, the architecture of the Cisco Catalyst SDWAN-G fabric simplifies IT operations with automated provisioning, unified policies, streamlined management to help ensure rapid updates and resolutions, advanced network functionality, resiliency, and security. From a single pane of glass, Cisco Catalyst SDWAN-G helps organizations avoid complex configurations and frequent policy changes that lead to uneven user experiences, thereby increasing overall network efficiency and reliability.\n \nLink to Secure Configuration Guidance:\nhttps://sec.cloudapps.cisco.com/security/center/resources/Cisco-Catalyst-SD-WAN-HardeningGuide\nhttps://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe.html\n\nOverview of documentation supplied by provider: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/system-overview.html\n\nTrust Center landing page with access instructions: In process\n\nNext Ongoing Certification Report Date: Feb 22nd, 2027\n\nPublic JSON format aligned to FedRAMP schema: TBD\n\nAutomation ensuring human-readable & JSON consistency: In process", "fedramp_msg": "N/A", "sales_email": "sdwan-usgov@cisco.com", "security_email": "sdwan_g_fedops@cisco.com", "website": "https://www.cisco.com/go/sdwan", "uei": "LQJKCX84CJB4", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Network Management", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2523656707", "name": "Cisco Systems, Inc.", "cloud_service_provider": "Cisco Systems, Inc.", "cloud_service_offering": "Cisco ThousandEyes for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ThousandEyes%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-05-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-02-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-03-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-05-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-02-17T20:00:00.000Z", "cert_date": "2026-03-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Cybersecurity & Infrastructure Security Agency", "fedramp_auth": "2026-03-05T20:00:00.000Z", "annual_assessment": "2011-02-17T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Cybersecurity & Infrastructure Security Agency", "Department of Agriculture" ], "agency_reuse": [ "" ], "service_description": "Cisco ThousandEyes for Government (ThousandEyes for Government) is software as a service (SaaS)-based network intelligence platform that provides visibility into the performance of applications and network infrastructure across the internet. ThousandEyes for Government uses a combination of active monitoring and real user data to provide insight into the performance of networks, applications, and services from a global perspective. ThousandEyes for Government is designed to help customers quickly identify and resolve network and application performance issues, improve user experience, and optimize the performance of critical applications and services.", "fedramp_msg": "N/A", "sales_email": "cisco-fedramp@cisco.com", "security_email": "cisco-fedramp@cisco.com", "website": "https://www.thousandeyes.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Communication", "Cybersecurity & Risk Management", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1819254092", "name": "Citrix", "cloud_service_provider": "Citrix", "cloud_service_offering": "Citrix for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Citrix%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-10-08T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-06-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2022-04-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": "2020-10-08T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2021-06-15T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2022-04-18T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-04-18T20:00:00.000Z", "annual_assessment": "2011-04-11T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture", "Department of State", "Department of Veterans Affairs", "Federal Aviation Administration", "United States Agency for International Development", "United States Geological Survey" ], "agency_reuse": [ "" ], "service_description": "Citrix for Governmentis comprised of:\n\n-Citrix Cloud platform provides capabilities to administer Citrix services. It allows customers to create, manage, and deploy workspaces with applications and data to their end-users from a single console, connecting to customer resources on any cloud or infrastructure a customer chooses.\n\n-Citrix DaaS (Desktop as a Service) provides virtualization solutions allowing control of virtual machines, desktops, applications, and security while providing users access from anywhere on any device. This hybrid cloud solution enables secure access to virtual applications, desktops, and data from cloud and on-premises infrastructure.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/06/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "", "security_email": "FedRAMP@cloud.com", "website": "https://www.citrix.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1819254092A", "name": "Citrix Systems, Inc.", "cloud_service_provider": "Citrix Systems, Inc.", "cloud_service_offering": "Citrix for Government - High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Citrix%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-03-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Citrix for Government (Citrix Cloud Government) is a sovereign cloud environment that is isolated from and operates independently of Citrix Cloud. These services enable U.S. government agencies and other customers in support of Public Sector to use Citrix Cloud Government in accordance with applicable regulatory and compliance requirements. Citrix Cloud Government operates within defined geographic boundaries and stores and replicates services and data to deliver Citrix cloud services. Citrix uses multiple public or private cloud environments located in one or more U.S. states to provide these services. \n\nCitrix for Government consists of the following components: \n\nThe Citrix Cloud platform provides centralized administration for Citrix services. It enables customers to create, manage, and deploy workspaces—including applications and data—to end users from a single console, while connecting to customer resources across any cloud or infrastructure of their choice. \n\nCitrix DaaS (Desktop as a Service) provides virtualization capabilities that support the management of virtual machines, desktops, applications, and security controls, while enabling users to access resources from any location and on a wide range of devices. This hybrid cloud solution provides secure access to virtual applications, desktops, and data across cloud and on-premises infrastructure.", "fedramp_msg": "", "sales_email": "David.smith@citrix.com", "security_email": "FedRAMP@cloud.com", "website": "https://www.citrix.com/", "uei": "LGZ7VZW7G724", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Collaboration", "Communication", "Contact Center", "Customer Service", "Cybersecurity & Risk Management", "Development Tools", "Human Resources", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2014656304", "name": "Civis Analytics, Inc.", "cloud_service_provider": "Civis Analytics, Inc.", "cloud_service_offering": "Civis Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Civis%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-02-02T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-06-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-02-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-02-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-06-25T20:00:00.000Z", "cert_date": "2025-02-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-02-05T20:00:00.000Z", "annual_assessment": "2011-06-09T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "United States Agency for International Development" ], "agency_reuse": [ "" ], "service_description": "Civis Platform is a modern, end-to-end data management, analytics, and AI platform—purpose-built for the public sector in a simple, scalable SaaS environment.\n\nWith Civis Platform, in-house public sector data teams can seamlessly integrate their data, build and manage data warehouses, develop machine learning and AI models, and deploy reports—all within a single platform. This eliminates the need for fragmented SaaS tools or complex cloud service configurations.\n\nCivis Platform deploys in hours—not months—and includes services onboarding and training tailored for public sector teams to ensure successful deployments from day one.", "fedramp_msg": "N/A", "sales_email": "info@civisanalytics.com", "security_email": "security@civisanalytics.com", "website": "https://www.civisanalytics.com/", "uei": "CGGSNAR9NDE3", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Data Management", "Development Tools", "Research", "Storage", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2406760385", "name": "Clarivate Analytics US LLC", "cloud_service_provider": "Clarivate Analytics US LLC", "cloud_service_offering": "Clarivate Intellectual Property AI & Image Search Platform (CIPAI-ISP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Clarivate%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-09-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2024-09-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2024-10-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2024-09-16T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-09-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-10-21T20:00:00.000Z", "cert_date": "2025-04-16T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Patent and Trademark Office", "fedramp_auth": "2025-04-16T20:00:00.000Z", "annual_assessment": "2011-10-20T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "The Clarivate Intellectual Property AI & Image Search Platform (CIPAI-ISP) is a search engine of Clarivate’s intellectual property datasets (such as designs, patents, trademarks). Users can search by uploading an image or text as query into the web search interface. Matched results are returned and displayed in the user interface for users to analyze and generate reports. \r\n\r\nCIPAI-ISP is delivered via SaaS. It is hosted in AWS GovCloud. It is available to federal, state, local, and tribal governments, as well as federal contractors, government contractors.", "fedramp_msg": "N/A", "sales_email": "government_support@clarivate.com", "security_email": "HEP.security.officer@clarivate.com", "website": "https://clarivate.com/", "uei": "KCEFDML72122", "small_business": false, "business_categories": [ "Analytics", "Legal & Policy", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2323961436", "name": "Claroty", "cloud_service_provider": "Claroty", "cloud_service_offering": "xDome for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Claroty%20Logo2.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-02-20T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-02-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Claroty’s xDome for Government is a SaaS-based Cyber Physical Security (CPS) FedRAMP High Cloud Service Offering (CSO) that enables security outcomes for visibility across diverse IOT/OT use cases, vulnerability management, exposure management, as well as threat detection, and asset purpose and efficiency.", "fedramp_msg": "", "sales_email": "sales@clarotygov.us", "security_email": "FedRAMP@clarotygov.us", "website": "https://claroty.com/", "uei": "DWDPHUUNCAR3", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2210850126", "name": "Cleartronic, Inc. dba. ReadyOp Communications, Inc.", "cloud_service_provider": "Cleartronic, Inc. dba. ReadyOp Communications, Inc.", "cloud_service_offering": "ReadyOp", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ReadyOp%20Logo.png", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-01-13T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-07-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-01-13T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-07-27T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "ControlCase", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "ReadyOp Platform is delivered as a SaaS offering with PaaS components using a multi-tenant Government-only cloud computing environment. It is available to federal, state, local, and tribal governments, as well as research institutions, federal contractors, and other government contractors, etc.", "fedramp_msg": "N/A", "sales_email": "sales@readyop.com", "security_email": "infosec@readyop.com", "website": "https://www.readyop.com/", "uei": "FYWCMHHUS9A4", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Content Management System (CMS)", "Data Management", "Fleet Management", "Grant Management", "Human Resources", "Law Enforcement", "Operations Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2625525331", "name": "Clearview AI, Inc.", "cloud_service_provider": "Clearview AI, Inc.", "cloud_service_offering": "Clearview GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Clearview%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-30T22:14:49.259Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-06-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Clearview GovCloud is delivered as a SaaS offering using a multi-tenant Government-Only Cloud computing environment. It is available to federal, state, local, and tribal governments to investigate crimes, enhance public safety, secure our communities and provide justice to victims.\n \nClearview AI offers a revolutionary, web-based investigative platform for government agencies to use as a tool to help generate high-quality investigative leads. The user-friendly interface offers advanced administrative tools for oversight, reporting and compliance. To get started, a probe image is uploaded and a required intake form is completed for the agency’s oversight. A vector is created from the probe image and searched against image sources collected from the public internet or agency managed custom galleries. Potential facial image match results are returned with a source URL to the public image. The end user, as part of the human in- the-loop process, verifies and supports returned results with further investigative steps.\n \nClearview AI’s platform searches against a proprietary database of 60+ billion facial images sourced from public-only web sources, including news media, mugshot websites, public social media, and other open sources. Clearview AI’s algorithm is trained on a large, diverse, custom-built dataset of millions of facial images and is tested by NIST, achieving over 99% accuracy across all demographics.", "fedramp_msg": "", "sales_email": "fedramp-sales@clearviewai.us", "security_email": "fedramp-security@clearviewai.us", "website": "https://www.clearview.ai/gov", "uei": "E5BEYXDQYJS6", "small_business": false, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Law Enforcement", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2309544938", "name": "Cloudera Government Solutions, Inc", "cloud_service_provider": "Cloudera Government Solutions, Inc", "cloud_service_offering": "Cloudera for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cloudera%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-02-09T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-10-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-02-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-10-18T20:00:00.000Z", "cert_date": "2025-05-07T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-05-07T20:00:00.000Z", "annual_assessment": "2011-10-18T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Cloudera for Government is a secure and governed cloud service platform that offers a broad set of enterprise data cloud services with data analytics and artificial intelligence functionality. With Cloudera for Government, users can create and manage secure data lakes, self-service analytics, and machine learning services without installing and managing the data platform software. Cloudera for Government services are managed by Cloudera, but the customer’s data remains under their control in their AWS cloud account.\n\nCloudera for Government lets customers:\n• Control cloud costs by automatically spinning up workloads when needed, scaling them as the load changes over time and suspending their operation when complete.\n• Isolate and control workloads based on user type, workload type, and workload priority.\n• Combat proliferating silos and centrally control customer and operational data across multi-cloud and hybrid environments.\n\nCloudera for Government contains several layers of infrastructure, operations software, networks, and the CDP services. The two primary components of the solution are the CDP Control Plane and the Customer Workload Environment.\nThe CDP Control Plane provides a set of core services that perform several functions across the platform. Control Plane services are implemented in a microservice architecture running on Kubernetes. These services can be configured and scaled independently based on their function. Each service performs a specialized function, and services can also communicate with other services within the Control Plane. Each set of microservices that performs a specific function is isolated from other sets of microservices. This segregation permits each set of microservices to have its own identity, allowing for differentiation of access between system components. \n\nThe Workload Environment is a cloud account that has been associated with a customer tenant inside the Control Plane. A tenant is a group of users that share access to a specific set of resources and a billing relationship with Cloudera. In general, each Cloudera for Government customer is a single tenant, but large organizations may have multiple tenants. When a CDP service, such as a data lake, gets created, it gets created within a Workload Environment. The customer Workload Environment is separate from the Control Plane and resides within the customer’s AWS account outside the system authorization boundary.", "fedramp_msg": "", "sales_email": "government@cloudera.com", "security_email": "security@cloudera.com", "website": "https://www.cloudera.com/", "uei": "LL1ACECJ2YZ3", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Network Management", "Operations Management", "Research", "Storage", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "Cloudera AI", "Control Plane Services", "Data Discovery and Exploration", "Data Engineering", "Data Mart", "DataHub", "Management Console", "SDX", "Streams Messaging" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2000863987A", "name": "Cloudflare", "cloud_service_provider": "Cloudflare", "cloud_service_offering": "Cloudflare for Government - High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cloudflare%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-11-12T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-08-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 24, "reuse": 23, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-11-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-07-01T20:00:00.000Z", "cert_date": "2026-08-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-08-06T20:00:00.000Z", "annual_assessment": "2011-06-09T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "Argonne National Laboratory", "Commodity Futures Trading Commission", "Cybersecurity & Infrastructure Security Agency", "DHS Headquarters", "Department of Commerce", "Department of State", "Federal Energy Regulatory Commission", "Federal Reserve System", "Fermi National Accelerator Laboratory", "First Responder Network Authority", "Health Resources and Services Administration", "Justice Management Division", "National Institute of Standards and Technology", "National Oceanic and Atmospheric Administration", "National Telecommunications and Information Administration", "Savannah River National Lab", "Social Security Administration", "State Office of the Inspector General", "Tennessee Valley Authority", "U.S. Election Assistance Commission", "United States Census Bureau", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Cloudflare is a global network, designed to help agencies enhance the security, performance and reliability for any Internet-connected service. Our FedRAMP offering protects entire agency networks, helps agencies build Internet-scale applications efficiently, accelerates any website or Internet application, wards off DDoS attacks, keeps hackers at bay, and helps agencies in their journey to Zero Trust. Learn more at https://www.cloudflare.com/public-sector/", "fedramp_msg": "", "sales_email": "publicsector@cloudflare.com", "security_email": "fedramp-team@cloudflare.com", "website": "https://www.cloudflare.com/cloudflare-for-government/", "uei": "JV9YXS9MLA48", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Media", "Network Management", "Operations Management", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "API Shield", "Analytics", "Argo Tunnel", "Bot Management", "CASB", "Cache Reserve", "Cloudflare Access", "Cloudflare Images", "Cloudflare Logs", "Cloudflare Spectrum", "Cloudflare Stream", "Cloudflare Tunnel", "Cloudflare Zero Trust", "Cloudflare for SaaS", "Content Delivery Network CDN)", "Data Localization", "Domain Name System (DNS)", "Durable Objects", "Hyperdrive", "L3/L4 DDoS Protection", "L7 DDoS Protection", "Load Balancing", "Magic Firewall", "Magic Transit", "Magic WAN", "Network Interconnect", "R2", "Rate Limiting", "Remote Browser Isolation", "SSL/TLS", "SSL/TLS for SaaS", "Secure Web Gateway", "Tiered Cache", "Turnstile", "WAN-as-a-Service", "Waiting Room", "Warp ZT", "Web Analytics", "Web Application Firewall (WAF) with API Protection", "Workers", "Workers KV", "Zero Trust Network Access" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2533236012", "name": "CobbleStone Software", "cloud_service_provider": "CobbleStone Software", "cloud_service_offering": "Contract Insight", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cobblestone%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-01-28T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-01-28T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "CobbleStone Contract Insight contract management software is delivered as SaaS offering using a multi-tenant public cloud computing environment. It is available to federal, state, local, and tribal governments, as well as research institutions, federal contractors, government contractors, education systems, and more. CobbleStone contract lifecycle management software (CLM) increases efficiency and security with a web-enabled solution that helps users:\r\n\r\n* Simplify and enhance the entire contract lifecycle\r\n* Conduct advanced searching and reporting\r\n* Complete tasks and achieve goals with email and calendar alerts for key dates\r\n* Track financials to control spend\r\n* Increase agreement collaboration and visibility\r\n* Improve contract cycle times with automated workflow and electronic signatures\r\n* Contract writing with pre-approved templates and clauses\r\n* Artificial intelligence (AI) data extraction and negotiation with playbooks redlining\r\n* Run advanced reports\r\n* And much more", "fedramp_msg": "", "sales_email": "sales@cobblestonesoftware.com", "security_email": "ITCG@cobblestonesystems.com", "website": "https://www.cobblestonesoftware.com/", "uei": "VAL8HSETZFG7", "small_business": true, "business_categories": [ "Construction", "Customer Relations Management (CRM)", "Data Management", "Finance", "Grant Management", "Legal & Policy", "Marketing & Sales", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2013059515", "name": "Cofense", "cloud_service_provider": "Cofense", "cloud_service_offering": "Cofense PhishMe", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cofense%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-03-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-10-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-02-12T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 8, "reuse": 7, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-03-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-10-02T20:00:00.000Z", "cert_date": "2021-02-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-02-12T20:00:00.000Z", "annual_assessment": "2011-10-02T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Alcohol and Tobacco Tax and Trade Bureau", "Department of Education", "Department of Health and Human Services", "Federal Deposit Insurance Corporation", "General Services Administration", "Immigration and Customs Enforcement", "Social Security Administration", "Surface Transportation Board" ], "agency_reuse": [ "" ], "service_description": "Cofense PhishMe enables organizations to improve employee resiliency to phishing attacks through real-life simulated phishing scenarios. Thousands of the world's largest organizations in both public and private sector rely on PhishMe to condition employees to recognize and report phishing attacks. \n\nPhishMe enables trained awareness and compliance personnel to run simulated attacks using email templates that look like actual phishing attacks and includes on-the-spot educational content that displays when recipients click on one of the simulated phishing emails. For example, a scenario email might alert recipients that their (e.g. banking) credentials were compromised and ask the recipients to click a link in the email to reset their password. If a recipient does click the link, PhishMe displays educational content to help that individual recognize the characteristics of a phishing email. Through these safe examples, PhishMe customers can help their employees develop an awareness of the risks that real phishing emails pose and reduce their susceptibility of engaging with such emails in the future. \n\nTo maximize the effectiveness of simulation campaigns and reduce the burden on awareness teams, Cofense PhishMe provides a combination of unique capabilities:\n\n- Content is based on real phishing attacks gleaned from real threat intelligence. That means that the scenarios you run are as realistic as possible, ensuring your organization is conditioned to the latest threats.\n\n- Responsive Delivery allows simulation operators to deliver phishing simulations while the user is active in their inbox, which drives higher scenario engagement. \n\n- Predefined playbooks with scenario recommendations based on user behavior and best practices. \n\n- PhishMe helps organizations transform their employees into the last line of active defense against phishing attacks - the leading cause of data breaches - through education, ongoing simulations, and an easy to use reporting tool, Cofense Reporter, so organizations can swiftly detect, respond to and thwart phishing attacks in their tracks.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "federal@cofense.com", "website": "https://cofense.com/solutions/industry/federal-government/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Education & Training" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2627211780", "name": "Cognition USG, Inc.", "cloud_service_provider": "Cognition USG, Inc.", "cloud_service_offering": "Cognition Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cognition%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-06T22:13:15.349Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-07-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Cognition Platform (known as Devin) and accompanying suite of AI tools provide capabilities to support the software development lifecycle for U.S. federal agencies and contractors. Devin is a model‑agnostic platform that uses machine learning models and AI techniques to perform deep codebase analysis and system interpretation, as well as automated code generation, testing, review, and deployment. Granular sandboxing and enterprise controls manage AI‑generated changes and allow organizations to balance performance and cost while maintaining security and compliance requirements. The platform supports engineering and security teams in protecting their codebases, modernizing legacy languages (including COBOL and Fortran), increasing developer throughput, and accelerating migrations and application modernization activities for mission‑critical federal systems.", "fedramp_msg": "", "sales_email": "public.sector@cognition.ai", "security_email": "security@cognition.ai", "website": "https://cognition.com/", "uei": "SM1QTNRZK8U4", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Cybersecurity & Risk Management", "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2434758320", "name": "Cognitus, an IBM Company", "cloud_service_provider": "Cognitus, an IBM Company", "cloud_service_offering": "LambdaX Contract Lifecycle Management (CLM) for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cognitus%20Logo2.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-02-28T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-02-28T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Kompleye", "service_model": [ "IaaS", "PaaS", "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "LambdaX is a Contract Lifecycle Management (CLM) platform operated by Cognitus, an IBM company. It supports the creation, negotiation, approval, execution, storage, management, and analysis of contractual agreements within a defined authorization boundary.\n\nThe system provides centralized contract authoring, workflow automation, document management, AI-assisted processing, reporting, and analytics. LambdaX serves government agencies, contractors, and enterprise organizations that require controlled access to contract data and structured lifecycle governance. All processing described below occurs within the system's authorization boundary, and connections to external systems and services occur only through controlled, documented interconnections.\n\nLambdaX has achieved FedRAMP Moderate Readiness and is operated in accordance with the applicable FedRAMP Moderate security control baseline. FedRAMP 20x alignment is currently on the product roadmap.\n\nLambdaX supports deployment in secure cloud and customer-managed on-premises environments, with security controls aligned to organizational compliance requirements.\n\nKey Features\n1.\tContract intake automation\nAI extracts contract fields, clauses, CLINs, and delivery terms from procurement documents, reducing manual effort while improving data consistency and traceability.\n\n2.\tSecure cloud & on-premises deployment\nSupports deployment in secure cloud and customer-managed on-premises environments, including architectures designed to meet FedRAMP Moderate requirements.\n\n3.\tFAR / DFARS compliance automation\nAutomatically classifies clauses, validates flowdowns, and maintains auditable records to support FAR and DFARS compliance.\n\n4.\tERP synchronization & revenue integrity\nSynchronizes contract, pricing, billing, and financial data with enterprise ERP systems to reduce manual processing and improve financial accuracy.\n\n\nFunctional Capabilities Within Authorization Boundary\n1.\tContract Authoring and Assembly\nThe system supports drafting and assembly of contracts using structured templates, configurable datasets, and a centralized clause and master-data library. Users create, edit, and version contract documents within the application using a built-in editor.\n\n2.\tNegotiation and Collaboration\nThe system enables controlled internal and external collaboration, including multi-user editing, version tracking, redlining, side-by-side version comparison, and maintenance of audit history for document changes. All collaborators, including external parties, access the system through authenticated, role-scoped sessions within the authorization boundary.\n\n3.\tApproval Workflows\nLambdaX includes configurable, multi-stage workflow routing for contract review, modification, and approval, with task assignment, reassignment/delegation, and threaded comments. Workflow actions are logged and tracked within the system.\n\n4.\tExecution Support\nThe platform supports integration with electronic signature services through controlled interconnections for execution of agreements. Executed contracts are stored within the system repository.\n\n5.\tCentralized Repository and Search\nThe system maintains a centralized contract repository with metadata tagging and search across metadata, clause text, and document content, together with structured formatting.\n\n6.\tObligation and Milestone Tracking\nThe system enables tracking of key contract dates, milestones, deliverables, and obligations.\n\n7.\tAnalytics and Reporting\nLambdaX provides reporting and analytical capabilities on contract data, including configurable dashboard widgets, structured risk indicators, and performance metrics.\n\n8.\tAI-Assisted Processing\nLambdaX provides AI-assisted document field and clause extraction, confidence scoring, clause classification, identification of non-standard contractual language, and configurable risk assessment based on defined business rules. AI and embedding requests are processed through a centralized AI Gateway that provides usage metering, request logging, and auditability. All AI processing occurs within the system's authorization boundary and is governed by the platform's access controls, security policies, and audit logging.\n\n9.\tAI Safety and Data Protection\nThe system provides configurable detection and masking of sensitive or personal data elements (e.g., names, identifiers, and financial values) prior to AI processing or external sharing, and supports configurable controls over automated agent behavior. These safeguards operate on a best-effort basis and supplement — but do not replace — the system's access controls and encryption.\n\n10.\tExternal System Integration\nThe system provides API-based integration for interoperability with external enterprise systems (e.g., ERP, CRM, and financial systems). All integrations occur through controlled, documented API endpoints and interconnections within or at the edge of the defined system boundary.\n\n\nNon-Functional Characteristics\n1.\tAccess Control\nThe system enforces Role-Based Access Control (RBAC), including role, group, and team-based assignment, to restrict access to data and functions based on assigned privileges.\n\n2.\tAuthentication\nThe system supports federated authentication via Single Sign-On (OpenID Connect) and multi-factor authentication (MFA) using time-based one-time password (TOTP) authenticator applications. Session management provides per-session control and termination.\n\n3.\tEncryption in Transit\nAll communications are encrypted using TLS 1.2 or higher with FIPS-validated cryptographic modules.\n\n4.\tEncryption at Rest\nAll data stored within the system boundary is encrypted at rest using FIPS 140-2/140-3 validated cryptographic modules.\n\n5.\tAudit Logging and Monitoring\nSystem and user activities — including authentication events, field changes, document edits, and workflow actions — are logged to support monitoring, incident response, and forensic review.\n\n6.\tHosting Environment\nLambdaX can be hosted on FedRAMP-ready cloud infrastructure that provides redundancy and secure network segmentation within the defined authorization boundary. It can also be deployed on-premises to support customer-specific security, compliance, and data-sovereignty requirements.", "fedramp_msg": "N/A", "sales_email": "mdemo@ibm.com", "security_email": "msarker@ibm.com", "website": "https://cognitus.com/products/clm/", "uei": "E7DJP76PBX63", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Finance", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2306445868", "name": "Cohesity", "cloud_service_provider": "Cohesity", "cloud_service_offering": "Cohesity Cloud Services for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cohesity%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-05-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-06-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-05-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-06-06T20:00:00.000Z", "cert_date": "2024-05-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-05-06T20:00:00.000Z", "annual_assessment": "2011-05-09T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture" ], "agency_reuse": [ "" ], "service_description": "Cohesity Cloud Services for Government is a portfolio of fully-managed data security and management offerings, including backup as a service (BaaS) for protecting mission-critical cloud-native, SaaS, and on-premises workloads. The multi-layered data security architecture, policy-based automation, and global data reduction help secure and protect data, and simplify IT operations. Flexible data retention and rapid recovery to any point in time enable organizations to meet their demanding business SLAs and improve ROI.", "fedramp_msg": "N/A", "sales_email": "ccsgsales@cohesity.com", "security_email": "fed.security@cohesity.com", "website": "https://helios.gov-cohesity.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2600044765", "name": "CoLab", "cloud_service_provider": "CoLab", "cloud_service_offering": "CoLab AI Inc", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CoLab%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-03-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-06-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-03-31T20:00:00.000Z", "cert_date": "2026-06-03T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-06-03T20:00:00.000Z", "annual_assessment": "2011-03-31T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "CoLab is delivered as an SaaS offering using a multi-tenant government-community cloud computing environment. It is available to the public, federal, state, and tribal governments, as well as research institutions, federal contractors, government contractors.", "fedramp_msg": "", "sales_email": "sales@colabsoftware.com", "security_email": "security@colabgovcloud.com", "website": "https://www.colabsoftware.com/", "uei": "", "small_business": true, "business_categories": [ "Collaboration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2128562231", "name": "Collabware", "cloud_service_provider": "Collabware", "cloud_service_offering": "Collabspace", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Collabware%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-12-03T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2022-12-14T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2023-07-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": "2021-12-03T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2022-12-14T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2023-07-28T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-07-28T20:00:00.000Z", "annual_assessment": "2011-07-20T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Mediation & Conciliation Service", "Federal Retirement Thrift Investment Board", "Immigration and Customs Enforcement" ], "agency_reuse": [ "" ], "service_description": "Collabspace is a highly scalable, cloud-based records and information management solution. Collabspace enables organizations to stream content from multiple repositories into a data lake for the purposes of managing content lifecycle for NARA compliance, and to facilitate faster execution of FOIA requests processes. Collabspace employs advanced enterprise search and records management capabilities such as OCR and audio/video transcription to help categorize and analyze records for proper retention and disposition.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/06/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "sales@collabware.com", "security_email": "fedramp@collabware.com", "website": "https://collabware.com/", "uei": "W53NBJ3KYAM7", "small_business": true, "business_categories": [ "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1706403967", "name": "Collibra", "cloud_service_provider": "Collibra", "cloud_service_offering": "Collibra Platform for Government (CPG)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Collibra%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-11-16T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-09-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-11-27T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-11-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-09-12T20:00:00.000Z", "cert_date": "2019-11-27T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-11-27T20:00:00.000Z", "annual_assessment": "2011-09-12T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Commodity Futures Trading Commission", "Department of Health and Human Services", "Federal Reserve System", "Health Resources and Services Administration", "Office of Financial Research", "Office of the Comptroller of the Currency", "Tennessee Valley Authority", "United States Patent and Trademark Office", "Universal Service Administrative Company" ], "agency_reuse": [ "" ], "service_description": "The Collibra Data Intelligence Cloud is your system of record for data. It delivers the only end-to-end, integrated Data Intelligence platform that is purpose-built to automate data workflows and deliver trusted data insights to users. Collibra connects IT and the business by removing the fragmentation and complexity of traditional data management technologies. The Collibra Data Intelligence Cloud enables Data Citizens to easily access trustworthy data, automate processes, manage compliance and, ultimately, make their data meaningful.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@collibra.com", "website": "http://www.publicsector.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2417149419", "name": "Commvault Systems, Inc.", "cloud_service_provider": "Commvault Systems, Inc.", "cloud_service_offering": "Commvault Clumio Data Protection Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Clumio%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-27T21:35:38.379Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-24T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Clumio Data Protection Platform is delivered as a SaaS offering using Amazon Web Services public cloud computing environment. Clumio is a backup and recovery solution that helps AWS customers build resilience into their applications, data lakes, and sensitive information. Air gapped and immutable by design, Clumio helps organizations recover from ransomware and operational disruptions, automate data compliance, and optimize storage costs.\n\nClumio is available to AWS customers for the public, federal, state, local, and tribal governments, as well as research institutions, federal contractors and government contractors.", "fedramp_msg": "", "sales_email": "clumiosalespub@commvault.com", "security_email": "FedRAMP_Security@commvault.com", "website": "https://www.frm-us1.frm.prod-clumio.com/", "uei": "XAXKNJGAZ4H2", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Governance, Risk, and Compliance (GRC)", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2115384377", "name": "Commvault Systems, Inc.", "cloud_service_provider": "Commvault Systems, Inc.", "cloud_service_offering": "Commvault Cloud for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Metallic%20Logo5.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-05-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2022-06-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2023-07-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-05-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": "2021-05-24T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-06-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-07-12T20:00:00.000Z", "cert_date": "2024-05-16T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-05-16T20:00:00.000Z", "annual_assessment": "2011-07-12T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Engraving and Printing", "Department of Agriculture", "Department of the Treasury", "Environmental Management Consolidated Business Center", "National Institute of Standards and Technology", "United States International Trade Commission" ], "agency_reuse": [ "" ], "service_description": "Commvault Cloud for Government delivers a fully automated cyber resilient SaaS data backup and recovery solution, with automated deployment, reduced overhead, automated patching and upgrades, continuous security monitoring, and requiring no Agency maintenance. Fully differentiated storage enables the move to cloud by providing the option to leverage cloud or on-premises storage within the web console for hybrid cloud workloads that require synchronization to sustain operational readiness and mission delivery.\r\n\r\nCommvault Cloud for Government capabilities include the following workloads:\r\n\r\n-Microsoft 365 - For Exchange, Teams, SharePoint, and OneDrive\r\n-Dynamics 365 - For CE applications + Power Platform\r\n-Salesforce - For Salesforce\r\n-Active Directory - For Entra ID and Active Directory\r\n-VM & Kubernetes – Azure VM, Kubernetes, Microsoft Hyper-V, VMWare, AWC EC2, VMWare Cloud\r\n-Endpoint – For Laptops and Desktops\r\n-File & Object – For Windows Server, Azure Blob & Files, OCI Object Storage, Amazon S3, Linux/Unix\r\n-File & Object Archive – For compliance ready archiving\r\n-Database – For Microsoft SQL, Oracle, SAP HANA\r\n-Air Gap Protection (AGP) – secure and scalable cloud storage from Azure in minutes, delivering against your organization’s hybrid cloud strategy is available for Commvault Complete™ and HyperScale™ X deployments.\r\nThe web-based console, called Command Center, provides a holistic customer data platform with both default and customizable configurations, -automated procedures for critical data protection and recovery tasks. Command Center delivers fully automated alerts on pre-set data anomalies, integrated audit reports, key word search (e.g., identifying PII or potential data spillages) and the ability remediate data issues at the granular level (e.g., file, specific email) using integrated indexing and metadata tags designed to protect data at IL4 & IL 5.", "fedramp_msg": "N/A", "sales_email": "ccarter@commvault.com", "security_email": "FedRAMP_Security@commvault.com", "website": "https://www.commvault.com/news/introducing-commvault-cloud-powered-by-metallic-ai", "uei": "XAXKNJGAZ4H2", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "Air Gap Protection Hybrid cloud for Commvault Complete™ and HyperScale™ X deployments", "Data Protection for Active Directory", "Data Protection for Azure VM Kubernetes Microsoft Hyper-V VMWare AWC EC2 VMWare Cloud", "Data Protection for Database (Microsoft SQL Oracle SAP HANA)", "Data Protection for Dynamics 365, Data Protection for Salesforce", "Data Protection for Endpoints", "Data Protection for File & Object (Windows Server Azure Blob & Files OCI Object Storage Amazon S3 Linux/Unix)", "Data Protection for Microsoft 365 (Exchange Teams SharePoint and OneDrive)" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1506246782", "name": "Complete Discovery Source", "cloud_service_provider": "Complete Discovery Source", "cloud_service_offering": "Complete Discovery Source Federal Cloud (CDS-F)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CDS%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-06-14T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-07-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-02-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 7, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2014-06-14T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-07-19T20:00:00.000Z", "cert_date": "2018-02-07T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-02-07T20:00:00.000Z", "annual_assessment": "2011-12-20T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Antitrust Division", "DOE Office of the Inspector General", "Department of Commerce", "Farm Credit Administration", "Federal Deposit Insurance Corporation", "Federal Trade Commission", "United States Census Bureau" ], "agency_reuse": [ "" ], "service_description": "Complete Discovery Source (CDS) is a pioneer in the eDiscovery industry, providing litigation technology and hosting, advisory services, and managed services to support complex discovery matters. With a team of seasoned legal experts and technicians, we provide leading-edge technology, advanced analytics, and a secure, scalable infrastructure to support the data initiatives of State and Federal agencies and departments. CDS is the first choice of the Am Law 100 and Fortune 500 and is recognized as Best in End-to-End eDiscovery by the National Law Journal and New York Law Journal. CDS supports more than 25 eDiscovery technologies including Relativity and Clearwell. CDS is headquartered in New York with regional offices in Washington DC, Chicago, and Houston. The company maintains highly secure ISO 27001 certified hosting and SSAE 16 Type 2 audited data centers in the US and EU.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "government@cdslegal.com", "website": "https://cdslegal.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2234550858", "name": "Concur Technologies, Inc.", "cloud_service_provider": "Concur Technologies, Inc.", "cloud_service_offering": "Concur Cloud for Public Sector", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Concur%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-01-18T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-03-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-01-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 22, "reuse": 36, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-01-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-03-21T20:00:00.000Z", "cert_date": "2024-01-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Information Systems Agency", "fedramp_auth": "2024-01-17T20:00:00.000Z", "annual_assessment": "2011-08-30T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2607452240", "csp": "IBM", "cso": "GO.gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Argonne National Laboratory", "Bureau of the Fiscal Service", "Department of Agriculture", "Department of Energy", "Department of Homeland Security", "Department of the Interior", "Environmental Protection Agency", "Federal Energy Regulatory Commission", "Fermi National Accelerator Laboratory", "General Services Administration", "Immigration and Customs Enforcement", "Internal Revenue Service", "National Gallery of Art", "National Science Foundation", "Nuclear Regulatory Commission", "Pension Benefit Guaranty Corporation", "Savannah River National Lab", "Smithsonian Institution", "Strategic Petroleum Reserve", "United States Patent and Trademark Office" ], "agency_reuse": [ "22-002-09", "22-012", "22-019", "22-024", "22-030", "22-033", "22-034", "22-050", "22-051", "22-063", "22-069", "22-074", "22-080", "22-088", "22-099" ], "service_description": "Concur Cloud for Public Sector (CCPS) is a Government-Only Community Cloud environment that hosts SAP Concur’s extensive suite of travel and expense cloud solutions, hosted on AWS GovCloud Infrastructure. CCPS is designed for the U.S. Public Sector, managed by SAP Concur personnel on U.S. soil, and ensures data security, confidentiality, and availability without compromising usability standards of travel and spend management solutions. SAP Concur U.S. soil requirements do not necessarily extend to external services leveraged by CCPS. Customers can be federal, state, local, tribal, territorial, federally funded research centers (FFRDCs), contractors working on behalf of the government, or lab entities. Concur Cloud for Public Sector provides a comprehensive environment that accommodates the complex processes of government travel and expense. Users are able to access the Federal Travel Regulation (FTR)- and Joint Travel Regulation (JTR)-compliant Concur Cloud applications via standard web browsers or on a smartphone with our SAP Concur mobile app. CCPS brings commercial functionality and scalability to government agencies while still meeting government-mandated security and regulatory needs. \n\nConcur Travel and Expense (CTE): Includes a web application portal to communicate with system users and provide access to all services. The web application gives users the ability to facilitate travel booking services, change travel reservations, and authorize travel. From vouchering services to documenting trip approvals and expense reimbursements, the web application provides accurate accounting information to government systems in compliance with the Federal Travel Regulation (FTR) and the Joint Travel Regulation (JTR). Users access applications within CCPS by using standard web browsers via a URL or by using SAP Concur mobile applications for supported smart phone and tablet computer platforms. All data collected by Concur applications is made available to customers via reporting enabled by the Cognos reporting tool that provides reports and the ability to create and/or manage new reports.\n\nConcurGov: SAP Concur's travel and expense solution provided to U.S. Federal Civilian customers under the ETS2 contract. ConcurGov includes services that are not included with CTE, such as GovPay, within the CCPS CSO.\n\nGlobal Distribution Systems (GDSs): Travel content aggregators that sell content on behalf of airlines, hotels, rail, and rental car companies. Many organizations that provide travel services sell their content only through one or more GDS.\n\nDirect Connect Providers: Travel providers (airlines, hotels, rail, and rental car companies) that do not use GDSs but instead sell their travel content directly.\n\nTravel Management Companies (TMCs): Travel management companies that book travel on behalf of agency users, provide reservation fulfillment, reporting, and mid- and back-office systems as part of the entire end-to-end travel reservation process.\nE-Receipt Providers: Travel providers (airlines, hotels, rail, and rental car companies) that electronically transmit electronic receipts to SAP Concur for inclusion in travel voucher requests.\n\nThe following SAP Concur products and services are available in CCPS: \n• Advanced Care\n• Budget\n• Central Reconciliation\n• Client Web Services\n• Company Bill Statements\n• Consultative Intelligence\n• Custom Connector – Expense\n• Data Delivery Services (DDS)\n• Detect by Oversight\n• Concur Travel & Expense\n• Concur Travel only (Direct)\n• ConcurGov\n• Concur Expense only\n• Data Extract Service\n• Essential Care\n• ExpenseIt\n• Extract Services\n• Intelligent Audit\n• Intelligence\n• Production Sandbox Environment\n• Concur Request\n• SAP Integration\n• Select Care\n• TripLink\n• User Support Desk for Public Sector\n• Verify", "fedramp_msg": "N/A", "sales_email": "tony.rollins@sap.com", "security_email": "SAP_Concur_CCPS_FedRAMP_Security_Inbox@sap.com", "website": "https://www.concur.com/", "uei": "WYWDHGHWCQ54", "small_business": false, "business_categories": [ "Accounting", "Finance", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "Advanced Care", "Budget", "Central Reconciliation", "Client Web Services", "Company Bill Statements", "Concur Expense only", "Concur Request", "Concur Travel & Expense", "Concur Travel and Expense", "Concur Travel only (Direct/Indirect)", "ConcurGov", "Consultative Intelligence", "Custom Connector - Expense", "Detect by Oversight", "Essential Care", "ExpenseIt", "Extract Services", "Intelligence", "Production Sandbox Environment", "SAP Integration", "Select Care", "TripLink", "User Support Desk for Public Sector" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2409863458XL", "name": "Confluent", "cloud_service_provider": "Confluent", "cloud_service_offering": "Confluent Cloud for Government (CCG)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Confluent%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2026-01-27T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2026-03-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-12-05T20:00:00.000Z", "ip_prog_date2": "2025-01-27T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-03-06T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-03-06T20:00:00.000Z", "annual_assessment": "2011-09-04T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Confluent Cloud for Government (CCG) Software-as-a-Service\n(SaaS) is a fully managed, cloud-native Kafka service for connecting\nand processing data using a cloud computing environment. It enables\nits customers to focus on business needs instead of managing the\nunderlying infrastructure supporting their Kafka instances(s). It is\navailable to public, federal, state, local and tribal governments, as well\nas research institutions, federal contractors, government contractors,\netc.\n\nThe CCG offering is comprised of two components – the Cloud\nControl Plane and Data Plane (Kafka clusters). The Cloud Control\nPlane is hosted in Amazon Web Services (AWS) GovCloud and\nGoogle Cloud Platform (GCP) and is used by customers to select and\ndeploy their managed Kafka resources to a Satellite Cluster. The\nSatellite Cluster consists of one or many Kubernetes nodes running\nKafka, with the one or many availability zones (AZs) deployed based\non options selected by the customer. A customer can choose to\ndeploy a Satellite Cluster to AWS GovCloud. The Control Plane is\nused to manage resources in Satellite Clusters using the Control\nPipeline. All customer data is retained in Satellite Clusters and no\ncustomer data from the Satellite Clusters is sent to the Control Plane.", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class C Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "FedRAMP@confluent.io", "security_email": "securitycompliance@confluentgov.com", "website": "https://www.confluent.io/industry-solutions/public-sector/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2207365631", "name": "Consensus Cloud Solutions", "cloud_service_provider": "Consensus Cloud Solutions", "cloud_service_offering": "Enterprise Cloud Fax Government (ECFax)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ECFax%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-10-10T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-04-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-02-11T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-10-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-04-09T20:00:00.000Z", "cert_date": "2025-02-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-02-11T20:00:00.000Z", "annual_assessment": "2011-03-28T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "ECFax® is a unified, secure, cloud-based managed service solution that modernizes manual or semi-automated faxing processes and eliminates the need for multiple faxing solutions. \r\n\r\nBuilt with a human-centered design approach, ECFax® simplifies fax services, improves the user experience, provides secure data transfer for PHI/PII, and reduces administrative costs. The solution gives agencies more control over their fax data transfer processes, eliminates the need to manage multiple vendors, and offers 24/7 state-of-the-art faxing capability and help desk support.\r\nECFax® delivers faxes digitally across multiple endpoints, including multifunction devices, shared folders, distribution lists, and inboxes: yielding operational efficiencies and reducing the need for standalone hardware.\r\nThe solution is:\r\n●\tScalable: Hosted on Amazon Web Services GovCloud, ECFax® scales on- demand to hundreds of millions of pages per month through auto-scaling and elastic load balancing.\r\n●\tTransparent: Performance dashboards provide visibility into service usage and operational status, which allows for near real-time production metrics.\r\n●\tSecure: ECFax and add on components are FedRAMP High certified and meet the most important security and quality assurance protocols for data protection—including FIPS 140-2. \r\n\r\nECFax® Services was developed specifically for the cloud, government agencies benefit from rapid scaling, efficiency and speed.\r\nECFax® is:\r\n●\tAccessible via AWS GovCloud;\r\n●\tSection 508 Compliant\r\n●\tDesigned to meet the highest security standards required by government agencies \r\nIn addition, the solution:\r\n●\tIntegrates with other applications via Restful API\r\n●\tSupports IDP-initiated SSO for authentication \r\n●\tFacilitates standardization across multiple locations", "fedramp_msg": "N/A", "sales_email": "ecfax@consensus.com", "security_email": "ecfaxsecurity@consensus.com", "website": "https://www.consensus.com/products/ecfax/", "uei": "C47BNA8GM833", "small_business": true, "business_categories": [ "Communication", "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2621650811", "name": "Consus Industries, Inc.", "cloud_service_provider": "Consus Industries, Inc.", "cloud_service_offering": "Consus Gateway", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Consus%20Logo2.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-03T22:14:34.918Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-06-03T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Consus Gateway is delivered as a Software as a Service (SaaS) offering using a multi-tenant Government-Only Community Cloud computing environment. It is available to federal contractors and other organizations eligible to consume services hosted in AWS GovCloud (US), GCP Assured Workloads, and Azure Government. The CSO is an OpenAI-compatible AI model routing service: customer applications submit requests to a single API endpoint, and the gateway routes each request to the appropriate large-language-model (LLM) provider hosted within a FedRAMP-authorized cloud environment (AWS Bedrock, GCP Vertex AI, or Azure OpenAI Service). The system is designed with a zero-persistence architecture: prompt and response content are processed entirely in ephemeral AWS Lambda memory and are never written to disk, logged, or stored in any persistent data store. The only persistent records are operational metadata (request identifier, API key identifier, timestamp, model name, token counts, latency, source IP) used for billing, accountability, and continuous monitoring. The intended user base is United States federal agencies and US-person contractor organizations supporting federal missions.", "fedramp_msg": "", "sales_email": "sales@consusindustries.co", "security_email": "security@consusindustries.co", "website": "https://consus.io/", "uei": "MWP8JNZA4BR9", "small_business": true, "business_categories": [ "Artificial Intelligence (AI)", "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1833967442", "name": "Contegix", "cloud_service_provider": "Contegix", "cloud_service_offering": "Valiantys Federal (Formerly Contegix)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/VAS%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-11-20T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2015-04-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2015-05-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 14, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2014-11-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2015-04-08T20:00:00.000Z", "cert_date": "2015-05-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2015-05-21T20:00:00.000Z", "annual_assessment": "2011-03-26T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "PaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2230244107", "csp": "Illumio, Inc.", "cso": "Illumio Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1821062403", "csp": "Saviynt, Inc.", "cso": "Saviynt Enterprise Identity Cloud (EIC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1924344515", "csp": "Wellspring Worldwide, Inc.", "cso": "Wellspring Tech Transfer and IP Management Suite (WTIMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of State", "Federal Trade Commission" ], "agency_reuse": [ "22-005-06", "22-005-12", "22-007", "22-007-13", "22-007-19", "22-007-20", "22-011-03", "22-016-19", "22-036", "22-067", "22-070" ], "service_description": "SecureCloud is provided by Valiantys Federal as a FedRAMP moderate Platform as a Service (PaaS) offering. The solution offers a multi-tenant, cloud-based, environment, with the option for deployment of single-tenant environments if required. Valiantys Federal solutions are designed to provide end-to-end managed hosting that empowers customers to retain complete control over the application environment, while dramatically reducing the time and cost associated with in-house administration. SecureCloud supports and deploys a variety of technologies based on tenant requirements. Valiantys also offers a cadre of US-based personnel specializing in deployment, configuration, and management of Atlassian tools, as well as optimizing DevSecOps workflows.\r\nManaged hosting services include performance monitoring and troubleshooting, Operating System management and patching, managed backups, and managed firewalls. Valiantys Federal also manages system owner approved configuration changes supporting the tenant’s environment.\r\nProviding a secure operating environment is at the forefront of SecureCloud and with that focus, Valiantys Federal provides a variety of services to meet tenant requirements for NIST, CMMC, and 800-171 requirements including audit capabilities, disaster recovery, and incident response support. These services include DoD STIG hardened servers, vulnerability scanning, a dedicated SIEM server, and the option for Disaster Recovery as a Service to meet agency specific RTO/RPOs for mission critical applications.", "fedramp_msg": "N/A", "sales_email": "sales@valiantysfederal.com", "security_email": "Security@valiantysfederal.com", "website": "https://www.valiantysfederal.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2325657620", "name": "Content Guru", "cloud_service_provider": "Content Guru", "cloud_service_offering": "Storm Cloud Contact Center", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ContentGuru%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-08-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-08-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-08-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-08-20T20:00:00.000Z", "cert_date": "2025-03-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-20T20:00:00.000Z", "annual_assessment": "2011-08-05T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of State" ], "agency_reuse": [ "" ], "service_description": "Content Guru's cloud contact center solution, storm, delivers a single-stack, end-to-end customer experience solution, providing not just the essentials of CCaaS (Contact Center as a Service), but a seamless customer journey. Content Guru brings together different channels of communication in a single platform, allowing federal agencies to focus on delivering outstanding citizen experiences.\n \nAs well as its core CCaaS capabilities, storm includes cutting-edge CRM, powerful reporting and analytics tools, workforce engagement management, customized audio conferencing for command control applications, unified communications, and deep API integrations. With all the data stored securely in one customer data platform, government agencies can easily turn insight into actions.\n \nThese powerful capabilities are supported by AI-driven Intelligent Automation and delivered with a minimum of 99.999% reliability – allowing Federal government agency customers to benefit from a hyper-scale, agile solution.", "fedramp_msg": "N/A", "sales_email": "PublicSectorSales@contentguru.com", "security_email": "SecurityIncident@stormfedramp.com", "website": "https://contentguru.com/en-us", "uei": "PG3LCNXQLWY5", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Contact Center", "Customer Relations Management (CRM)", "Customer Service" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1915750265", "name": "Continuum GRC, Inc.", "cloud_service_provider": "Continuum GRC, Inc.", "cloud_service_offering": "ITAM", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Continuum%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-12-23T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-12-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-11-15T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-12-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-12-23T20:00:00.000Z", "cert_date": "2021-11-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-11-15T20:00:00.000Z", "annual_assessment": "2011-12-23T04:00:00.000Z", "independent_assessor": "Sentar, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Small Business Administration" ], "agency_reuse": [ "" ], "service_description": "Auto-mapped standards, automated documentation, real-time status, risk & maturity. When it comes to Compliance Cartography, no one is more comprehensive, secure and automated saving you time, trouble and money. Serving the enterprise to the start-up community. Continuum GRC is a software as a service (SaaS) product that is purpose build for users who perform audit & compliance assessments, risk assessment & risk management, governance & policy development, and all other manner of audits and assessments.\n\nContinuum GRC modules include support for the world’s frameworks including NIST 800-53. DoD SRG, CMMC, 800-171, 800-66, 800-30, FedRAMP, StateRAMP, CJIS, DFARS, HIPAA, ITRM, AICPA SOC 1, SOC 2, GDPR, ISO 27001, NERC CIP, EUCS, C5, PCI DSS, LADMF and hundreds of others.\n\nIn addition to pre-configured questionnaires, assessment modules, and forms, the Continuum GRC ITAM SaaS application has creation tools that provide drag-n-drop easy custom creation for system administrators to construct their own assessment modules in 26 languages. Real time reports on Compliance Status, Risk Scores, Maturity Scores, workflows, tasking records, evidence management, and historical performance helping you stay proactive; not reactive.\n\nUse Continuum GRC to replace existing tools, templates, and manual processes in place to support internal compliance and GRC requirements. The automation of Continuum GRC reduces manual labor, complexity of and between frameworks, produces reports, SSPs, POA&Ms, graphics, dashboards, and related outputs all sustained over the entire lifecycle of the program all within a single view with a unified source for governance, risk and compliance that supercharges performance and eliminates complexity.\n\nFor a complete list of features and capabilities, please visit https://continuumgrc.com/subscription-options/.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "FedRAMP@ContinuumGRC.com", "website": "https://continuumgrc.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2200507410", "name": "Copado", "cloud_service_provider": "Copado", "cloud_service_offering": "Copado GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Copado%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-02-23T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-10-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-04-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-02-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-10-28T20:00:00.000Z", "cert_date": "2023-04-28T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-04-28T20:00:00.000Z", "annual_assessment": "2011-10-28T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "Federal Deposit Insurance Corporation", "United States Census Bureau" ], "agency_reuse": [ "" ], "service_description": "Copado GovCloud is a cloud DevOps platform designed to make Salesforce releases faster, more efficient, and scalable across hundreds of production and sandbox instances. Copado GovCloud integrates with all major Git solutions and ensures developers, administrators, and low-code Salesforce users can all commit changes to a central Git repository or seamlessly deploy from a QA environment to production. Copado is used by small organizations and large enterprises across a wide range of industries to accelerate time to market for Salesforce applications, enhance developer efficiency, increase security visibility, improve Salesforce testing capabilities and enable digital cloud transformations. The services in scope for Copado GovCloud are:\n\n- Deploying Salesforce metadata to production and sandbox instances, with Git integration for version control and branch management. \n- Change management including agile development processes, quality gates, and code scanning. \n- Continuous deployment and continuous integration, including visual pipeline configuration.\n- Compliance rules for Salesforce metadata, including rule creation, monitoring, and enforcement of policies across user stories, Git snapshots, and deployments. * Test data seeding across sandboxes ensuring accurate quality assurance prior to production deployments.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@copado.com", "website": "https://www.copado.com/industries/public-sector", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2419424565", "name": "Cora Systems", "cloud_service_provider": "Cora Systems", "cloud_service_offering": "Project Portfolio Management (PPM)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cora%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-02-12T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-02-12T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Cora PPM provides US Government agencies and DoD with a single Enterprise solution to manage all projects, programs, and initiatives, across their entire portfolio.\n\nBy providing a single solution, Cora PPM ensures that all aspects of Project execution, from CIO to the Project Manager and any Contractors in support, have a single experience to ensure that their projects are on-time and on budget.\n\nCora PPM enables organizations and agencies the ability to manage: Workforce Planning, Enterprise and Project Financials, Scheduling, Project Controls, Risks and Opportunities, Timesheets, Forecasting, Contractor Portal, and more all with embedded Workflow, Smart Forms and Registers all in a single experience.\n\nWith more Agencies looking to execute their Mission’s with fewer resources or strained Staff, Cora PPM enables quicker decision making and execution by ensuring that all Project management data is within reach with the right context.\n\nThe platform supports both dynamic as well as locked down Role creation to ensure the right data is available to the right staff.\n\nEmbedded Audit controls ensure that as Projects iterate, all changes and versions are available for quick recall to ensure that information is never lost.\n\nSupporting both Project management execution, as well as ideation and innovation in a single Enterprise platform with Click to Config controls, ensures both a high ROI and lower TCO from other solutions in the marketplace.\n\nWith both on-prem and cloud utilization, Cora PPM ensures Agencies with Classified Programs and Projects can leverage PPM excellence regardless of Mission parameters.", "fedramp_msg": "N/A", "sales_email": "info@corasystems.com", "security_email": "security@corasystems.com", "website": "https://corasystems.com/industry/govcon-program-management-software/", "uei": "WASCVP1DMA45", "small_business": true, "business_categories": [ "Accounting", "Analytics", "Construction", "Data Management", "Finance", "Grant Management", "Operations Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2407275137", "name": "Coralogix Inc.", "cloud_service_provider": "Coralogix Inc.", "cloud_service_offering": "Coralogix U.S. GovOps", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Coralogix%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-03-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-09-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2026-07-23T18:00:30.821Z", "category": "Status Change", "description": "Status changed from Ageny In Process to FedRAMP In Process" }, { "date": "2026-08-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2024-03-29T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-09-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-07-06T20:00:00.000Z", "cert_date": "2026-08-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-08-14T20:00:00.000Z", "annual_assessment": "2011-07-01T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Student Aid" ], "agency_reuse": [ "" ], "service_description": "Coralogix US GovOps is a Software as a Service (SaaS) cloud analytics platform for customer’s observability data including logs, metrics, traces and security data using a real-time streaming pipeline. This solution provides monitoring, visualization, and alerting capabilities by enabling users to define different data pipelines per use case. Customers are able to analyze and monitor all system data in a single, centralized platform where any data can be connected in any format, from any source, to visualize and query together using any syntax for extensive event correlation and streamlined troubleshooting.", "fedramp_msg": "", "sales_email": "ariel@coralogix.com", "security_email": "security@coralogix.com", "website": "http://coralogix.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Network Management", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1722160191", "name": "CORAS", "cloud_service_provider": "CORAS", "cloud_service_offering": "CORAS Federal", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CORAS%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-11-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-02-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2021-07-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": "2020-11-05T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2021-02-04T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2021-07-27T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-07-27T20:00:00.000Z", "annual_assessment": "2011-07-23T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency", "Department of the Navy" ], "agency_reuse": [ "" ], "service_description": "CORAS® is an agentic-AI decision intelligence platform developed to meet the operational needs of federal agencies, including the Department of Defense. It provides a secure environment for analyzing complex data, modeling scenarios, and executing workflows within structured decision frameworks. The platform is designed for use in environments that require high accountability, traceability, and compliance.\r\n\r\nAt the center of the platform is Gary, a secure, LLM-powered orchestrator that understands mission context, executes real-time scenarios, and activates purpose-built AI agents to generate insights, automate workflows, and accelerate outcomes. Whether you're navigating budget tradeoffs, forecasting readiness, or aligning performance across programs, Gary turns plain-English questions into mission-aligned action — instantly.\r\n\r\nKey Capabilities:\r\n\r\n· Live “what-if” modeling using real data and driver logic\r\n\r\n· Auto-generated documents, briefings, and charts with traceable sources\r\n\r\n· Conversational access to complex decision structures — no dashboards required\r\n\r\n· Fully compliant with DoD IL5 and FedRAMP High standards\r\n\r\n· Embedded agents for data validation, workflow automation, SmartBoard execution, and more\r\n\r\nBuilt for structure, not just search. CORAS reasons over driver trees, KPIs, and operational dependencies — making it the go-to platform for decision intelligence in federal environments.", "fedramp_msg": "CORAS Federal previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "Fedramp@CORAS.ai", "security_email": "Fedramp@CORAS.ai", "website": "https://company.coras.ai/fedramp", "uei": "N2D4L65472N5", "small_business": true, "business_categories": [ "Analytics", "Finance", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2621342703", "name": "Corelight", "cloud_service_provider": "Corelight", "cloud_service_offering": "Corelight Open NDR Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Corelight%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-02T22:14:32.235Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-06-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Corelight Open NDR is delivered as a SaaS offering using a multi-\ntenant SaaS cloud computing environment. It is an open, evidence-\nbased Network Detection and Response platform built on community-\ndriven open-source technologies like Zeek and Suricata, designed to\nprovide comprehensive network visibility, detect advanced threats\nusing multi-layered analytics (AI/ML, behavioral, signatures), and\naccelerate incident response by generating enriched, forensic-grade\nnetwork telemetry.\n\nOpen NDR focuses on providing open core and open data for\nflexibility, customization, and seamless integration with existing\nsecurity tools like SIEM, EDR, and XDR. It is available to federal\ngovernment agencies, as well as government contractors etc.).", "fedramp_msg": "", "sales_email": "aj.laforty@corelight.com", "security_email": "security-fedramp@corelight.com", "website": "https://corelight.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Cybersecurity & Risk Management", "Data Management", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2602662279", "name": "Coretsu Inc.", "cloud_service_provider": "Coretsu Inc.", "cloud_service_offering": "Coretsu Government Suite", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Coretsu%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-08T22:17:38.010Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-06-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Coretsu Government Suite is a SaaS service that consists of a platform aimed towards providing the Federal Government and commercial users access to public government information that is enhanced using AI. \n\nData flows through the system from user inputs which are then processed by AI to make requests to public databases via API calls. Data is then returned and further processed by AI to provide the user with information relevant to their queries.", "fedramp_msg": "", "sales_email": "info@coretsu.com", "security_email": "security@coretsu.com", "website": "https://www.coretsu.us/", "uei": "U77VUFCUNLJ3", "small_business": true, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Governance, Risk, and Compliance (GRC)", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2029183077", "name": "Cority Software Inc.", "cloud_service_provider": "Cority Software Inc.", "cloud_service_offering": "CorityOne", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cority%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-02-16T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-09-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2022-05-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-08-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 10, "reuse": 9, "ready_status": "Not Active", "ready_date": "2021-02-16T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-09-28T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-05-04T20:00:00.000Z", "cert_date": "2022-08-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-08-29T20:00:00.000Z", "annual_assessment": "2011-05-04T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Brookhaven Site Office", "Department of Agriculture", "Department of Health and Human Services", "Department of the Interior", "Federal Aviation Administration", "National Science Foundation", "Office of Personnel Management", "Strategic Petroleum Reserve", "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "Cority gives every employee from the field to the board room the power to make a difference, reducing risks and creating a safer, healthier, and more sustainable world. Cority's people-first software solutions were built by EHS and sustainability experts who know the pressures businesses and agencies face. Time-tested, scalable, and configurable, CorityOne consists of a comprehensive suite of solutions for managing environmental, health, safety, sustainability, and quality programs. The responsible business platform combines datasets from across the organization to enable improved efficiencies, actionable insights, data-driven decisions, and more accurate reporting on performance. Trusted by over 1300 organizations globally, Cority deeply cares about helping people work toward a better future for everyone.  \n\n- Waste Management, Water Management, Air Management, Chemical Management \n- Impact Management, Sustainability Performance, ESG Management \n- Occupational Health, Employee Health, Industrial Hygiene, Industrial Ergonomics, Healthcare Systems, Office Ergonomics, COVID-19 Response \n- Incident Management, Audit & Inspections, Compliance Management, Mobile Solutions, Risk Management, Management of Change \n- Injury and Illness, Behaviour-Based Security, Contractor Safety \n- Data Quality, Benchmarks, CorInsights, CorAnalytics \n- Supplier Management, Quality Management, Product Management \n\nCority's iterative deployment methodology and ability to integrate easily with other optional third-party services result in painless data migrations, software aligned to business processes, and low project risk. When agencies choose to join the Cority Community, they will benefit from the collaboration of thousands of other users and be supported by Cority software and EHS experts committed to Agency customer success. Cority leads the way in application and data center security, with certifications for ISO27001, ISO270017, ISO20018, SOC Type 2, and HIPAA", "fedramp_msg": "N/A", "sales_email": "contactus@cority.com", "security_email": "fedramp@cority.com", "website": "https://www.cority.com/", "uei": "JJKKJ9PYWAP1", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Cybersecurity & Risk Management", "Data Management", "Education & Training", "Health & Wellness", "Human Resources", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1509217359", "name": "Cornerstone OnDemand", "cloud_service_provider": "Cornerstone OnDemand", "cloud_service_offering": "Cornerstone Galaxy", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cornerstone%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-04-09T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2015-09-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2016-02-02T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 22, "reuse": 21, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-04-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2015-09-22T20:00:00.000Z", "cert_date": "2016-02-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2016-02-02T20:00:00.000Z", "annual_assessment": "2011-09-30T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Commodity Futures Trading Commission", "Consumer Financial Protection Bureau", "Defense Information Systems Agency", "Department of Commerce", "Department of State", "Department of the Navy", "Department of the Treasury", "Federal Communications Commission", "Federal Housing Finance Agency", "Federal Trade Commission", "First Responder Network Authority", "Food and Drug Administration", "Library of Congress", "National Cancer Institute", "National Credit Union Administration", "Nuclear Regulatory Commission", "Small Business Administration", "United States Agency for International Development", "United States Capitol Police", "United States Postal Service", "United States Securities and Exchange Commission", "Warfighting Acquisition University" ], "agency_reuse": [ "" ], "service_description": "Cornerstone Galaxy, the complete AI-powered Workforce Agility platform, allows organizations to identify skills gaps and development opportunities, retain and engage top talent, and provide multi-modal learning experiences to meet the diverse needs of the modern public sector workforce delivered through a Software-as-a-Service (SaaS) model. This allows our customers to securely access our applications, via a web browser, from anywhere and at anytime. Cornerstone’s multi-tenant, multi-user, on-demand applications eliminate any hardware, software, or infrastructure related administration.\r\n\r\n \r\n\r\nBased in Santa Monica, California, the company's solutions are used by over 7,000 customers worldwide, spanning 140 million users across 186 countries in 42 languages. To learn more about Cornerstone, visit us on X (formerly Twitter), Facebook and our blog. For more information, visit https://www.cornerstoneondemand.com/.", "fedramp_msg": "N/A", "sales_email": "sdobberowsky@csod.com", "security_email": "FedRAMP@csod.com", "website": "http://www.cornerstoneondemand.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Content Management System (CMS)", "Education & Training", "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1206111371", "name": "Knox Systems, Inc.", "cloud_service_provider": "Knox Systems, Inc.", "cloud_service_offering": "Knox Systems", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Knox%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2012-09-12T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2015-07-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-06-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2012-09-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2015-07-29T20:00:00.000Z", "cert_date": "2017-06-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Food and Drug Administration", "fedramp_auth": "2017-06-21T20:00:00.000Z", "annual_assessment": "2011-04-19T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "Defense Information Systems Agency", "Federal Law Enforcement Training Centers", "Food and Drug Administration", "Internal Revenue Service", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Knox Systems provides a multi-tenant cloud platform for delivering commercial software to federal government customers. Customer applications deploy on Knox's managed infrastructure across AWS, Azure, and Google Cloud Platform using Kubernetes containers, serverless functions, or virtual machines. Knox provides 24/7 Security Operations Center and Network Operations Center management, continuous security monitoring, vulnerability scanning, patch management, and incident response for all customer workloads. This includes:\n\nAdobe Connect is designed for immersive synchronous online meeting experiences for training, large-scale webinars, and virtual classroom meetings for a distributed workforce.\n\nAdobe Learning Manager (ALM) is an asynchronous Learning Management System that enables Learning and Development teams to drive personalized learning experiences across multiple devices.\n\nClass Technologies Inc. (class.com) is the next generation virtual learning environment that enables active learning, collaboration, and engagement in online classes and virtual instructor-led training.\n\nSpacelift delivers a FedRAMP-compliant IaC automation platform for secure and efficient cloud infrastructure management. It streamlines OpenTofu, Terraform, Pulumi, and Kubernetes workflows with robust policy enforcement and secret management for government agencies.\n\nTovuti LMS and Tovuti Waypoints: Best of Class Compliance Training and AI Course Authoring in Minutes not Months - Tovuti LMS is a FedRAMP Moderate authorized platform built for federal agencies, delivering secure learner management, automated compliance tracking, role-based access controls, and real-time reporting across your workforce. For AI course authoring, Tovuti Waypoints converts your agency’s source materials into interactive, Section 508-compliant SCORM courses. Instantly transform policy PDFs and procedures into ready-to-deploy training, accelerating your response to new mandates with a platform built for both speed and security.\n\nCelonis Process Mining (CPM4) is the world’s leading data-driven process optimization platform that helps organizations automatically discover inefficiencies, ensure compliance, and identify improvement opportunities across business processes through real-time analytics and visualization.\n\nBackupta is a Resilience Platform for Okta that ensures uninterrupted identity and access management. It delivers secure backup, disaster recovery, and rapid restoration of tenants or objects. Tenant cloning and failover strengthen business continuity, while proactive monitoring and audit logs enhance security.\n\nKovr.AI accelerates compliance authorizations (FedRAMP, CMMC, DOD SRG) from months to minutes by automating gap assessments and ATO package generation, instantly identifying compliant controls and remediation needs, then auto-generating required authorization documentation including SSPs, POA&Ms, and policies. The platform connects to environments via read-only integrations—or accepts direct evidence uploads—enabling teams to rapidly and continuously monitor and assess their security configurations, logs, policies, evidence, and artifacts using state-of-the-art Large Language Models (LLMs).\n\nOutSystems enables federal agencies to rapidly build, manage, and scale mission-critical digital solutions with government-grade security, reliability, and governance built in. The platform supports the entire software development lifecycle, including integrated DevSecOps capabilities, enabling teams to deliver better frontline digital services and modernize core mission systems significantly faster. Agencies can accelerate delivery without extensive re-skilling, expanding development teams, or taking on the risks and costs associated with vendor lock-in.\n\nArmis APEX Manage provides federal administrators a \"single pane of glass\" to aggregate operational data across multi-tenant Armis Centrix deployments. It eliminates manual per-tenant logins by centralizing health metrics and consolidated reporting into a unified oversight interface.\n\nResilinc Supply Chain Risk and Compliance Platform - Resilinc provides federal agencies with enterprise-level visibility and risk management across multi-tier supplier networks. The platform utilizes AI-driven workflows to automate disruption monitoring, forced labor compliance assessments (including UFLPA), and trade impact analysis. This SaaS solution streamlines oversight, allowing organizations to proactively identify and mitigate vulnerabilities within the global supply chain.\n\nBigID provides an automated foundation for data security, privacy, and governance across the federal enterprise. The platform proactively discovers, architectures, and inventories sensitive data and AI assets across all environments—including multi-cloud, on-premises data centers, and data pipelines. By utilizing advanced machine learning for deep data classification, BigID enables agencies to automatically identify PII, PHI, and CUI. This visibility allows organizations to mitigate risk, enforce granular access controls, and ensure regulatory compliance. From automating data lifecycle management to securing the data fed into AI models, BigID transforms fragmented information into a secure, searchable, and compliant asset.\n\nProcurement Sciences offers a secure, end-to-end AI platform purpose-built for government contractors to find, qualify, manage, and win federal and SLED opportunities. The Awarded AI platform uses advanced generative and agentic AI to identify and surface relevant opportunities, evaluate bid/no-bid fit, manage capture and pipeline activities, extract and shred requirements, generate structured proposal outlines and first drafts, and automate compliance review and quality checks prior to submission. With human-in-the-loop oversight embedded across AI-powered workflows, the platform accelerates response timelines, strengthens compliance accuracy, improves proposal quality, and drives revenue growth without compromising security.\n\nPresage Technologies delivers a contactless physiological and behavioral assessment platform leveraging advanced video-based capture and analysis across in-person and fully remote environments. The platform identifies physiological signals and micromovements from video input, surfacing actionable response patterns and real-time indicators through an intuitive interface that empowers expert analysts to observe, annotate, and interpret findings with speed and confidence. Purpose-built for federal agencies and authorized mission partners, the system supports a broad range of high-value use cases and decision-making workflows requiring non-contact assessment at scale.\n\nBrightfin is a ServiceNow-native telecom and IT financial management application that consolidates enterprise wireless, wireline, and cloud spend into a single platform for invoice processing, cost allocation, asset lifecycle management, and carrier integrations. Brightfin provides finance, IT, and procurement teams with authoritative control over telecom and technology costs directly within their ServiceNow environment.\n\nServal is an AI-native enterprise service management platform that automates employee requests, onboarding/offboarding, just-in-time access, and more. Serval allows IT, Security, HR, and other functions to eliminate repetitive work with AI agents while maintaining enterprise-grade security and governance.\n\nGovEagle is a purpose-built software-as-a-service (SaaS) platform that helps U.S. government contractors plan, analyze, draft, and manage responses to federal solicitations, addressing the mission need for faster, higher-quality, and more compliant proposal development. The authorization boundary is a multi-tenant SaaS application hosted in AWS GovCloud (US) with logical isolation between customer tenants, used by contractors' business development, capture, and proposal teams to process business and proposal data that may include Controlled Unclassified Information (CUI).\n\nFieldguide is an AI-native platform transforming how audit, advisory, and assurance work gets done. Purpose-built for regulated environments, Fieldguide brings professionals and agentic AI together to modernize engagement delivery from planning through close, enabling audit and advisory practitioners to deliver higher-quality work, strengthen client experiences, and unlock growth for the decade ahead.", "fedramp_msg": "N/A", "sales_email": "sales@knoxsystems.com", "security_email": "fedramp-security@knoxsystems.com", "website": "http://www.knoxsystems.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Development Tools", "Education & Training", "Learning Management", "Operations Management", "System Administration" ], "service_last_90": [ "Brightfin", "GovEagle", "Serval", "eSSESSMENT" ], "all_others": [ "Adobe Connect", "Adobe LM", "Armis APEX Manage", "Backupta", "BigID", "Celonis Process Mining (CPM4)", "Class for Zoom", "Kovr.AI", "OutSystems 11", "Procurement Sciences", "Resilinc Supply Chain Risk and Compliance Platform", "Spacelift", "Tovuti LMS" ], "service_acronym": "KSI", "trust_center": null, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guide" ], "url": "https://knoxsystems.com/secure-configuration-guides", "repositoryDescription": "Knox Systems Secure Configuration Guides for agency customers", "authenticationRequired": false }, "certified_services": [ { "serviceName": "Adobe Connect", "serviceDescription": "Adobe Connect is designed for immersive synchronous online meeting experiences for training, large-scale webinars, and virtual classroom meetings for a distributed workforce.", "dateAvailable": "2017-06-21" }, { "serviceName": "Adobe Learning Manager (ALM)", "serviceDescription": "Adobe Learning Manager (ALM) is an asynchronous Learning Management System that enables Learning and Development teams to drive personalized learning experiences across multiple devices.", "dateAvailable": "2017-06-21" }, { "serviceName": "Class Technologies", "serviceDescription": "Class Technologies Inc. (class.com) is the next generation virtual learning environment that enables active learning, collaboration, and engagement in online classes and virtual instructor-led training.", "dateAvailable": "2017-06-21" }, { "serviceName": "Spacelift", "serviceDescription": "Spacelift delivers a FedRAMP-compliant IaC automation platform for secure and efficient cloud infrastructure management. It streamlines OpenTofu, Terraform, Pulumi, and Kubernetes workflows with robust policy enforcement and secret management for government agencies.", "dateAvailable": "2017-06-21" }, { "serviceName": "Tovuti LMS and Tovuti Waypoints", "serviceDescription": "Tovuti LMS and Tovuti Waypoints: Best of Class Compliance Training and AI Course Authoring in Minutes not Months - Tovuti LMS is a FedRAMP Moderate authorized platform built for federal agencies, delivering secure learner management, automated compliance tracking, role-based access controls, and real-time reporting across your workforce. For AI course authoring, Tovuti Waypoints converts your agency’s source materials into interactive, Section 508-compliant SCORM courses. Instantly transform policy PDFs and procedures into ready-to-deploy training, accelerating your response to new mandates with a platform built for both speed and security.", "dateAvailable": "2017-06-21" }, { "serviceName": "Celonis Process Mining (CPM4)", "serviceDescription": "Celonis Process Mining (CPM4) is the world’s leading data-driven process optimization platform that helps organizations automatically discover inefficiencies, ensure compliance, and identify improvement opportunities across business processes through real-time analytics and visualization.", "dateAvailable": "2017-06-21" }, { "serviceName": "Backupta", "serviceDescription": "Backupta is a Resilience Platform for Okta that ensures uninterrupted identity and access management. It delivers secure backup, disaster recovery, and rapid restoration of tenants or objects. Tenant cloning and failover strengthen business continuity, while proactive monitoring and audit logs enhance security.", "dateAvailable": "2017-06-21" }, { "serviceName": "Kovr.AI", "serviceDescription": "Kovr.AI accelerates compliance authorizations (FedRAMP, CMMC, DOD SRG) from months to minutes by automating gap assessments and ATO package generation, instantly identifying compliant controls and remediation needs, then auto-generating required authorization documentation including SSPs, POA&Ms, and policies. The platform connects to environments via read-only integrations—or accepts direct evidence uploads—enabling teams to rapidly and continuously monitor and assess their security configurations, logs, policies, evidence, and artifacts using state-of-the-art Large Language Models (LLMs).", "dateAvailable": "2017-06-21" }, { "serviceName": "OutSystems", "serviceDescription": "OutSystems enables federal agencies to rapidly build, manage, and scale mission-critical digital solutions with government-grade security, reliability, and governance built in. The platform supports the entire software development lifecycle, including integrated DevSecOps capabilities, enabling teams to deliver better frontline digital services and modernize core mission systems significantly faster. Agencies can accelerate delivery without extensive re-skilling, expanding development teams, or taking on the risks and costs associated with vendor lock-in.", "dateAvailable": "2017-06-21" }, { "serviceName": "Armis APEX Manage", "serviceDescription": "Armis APEX Manage provides federal administrators a \"single pane of glass\" to aggregate operational data across multi-tenant Armis Centrix deployments. It eliminates manual per-tenant logins by centralizing health metrics and consolidated reporting into a unified oversight interface.", "dateAvailable": "2017-06-21" }, { "serviceName": "Resilinc Supply Chain Risk and Compliance Platform", "serviceDescription": "Resilinc Supply Chain Risk and Compliance Platform - Resilinc provides federal agencies with enterprise-level visibility and risk management across multi-tier supplier networks. The platform utilizes AI-driven workflows to automate disruption monitoring, forced labor compliance assessments (including UFLPA), and trade impact analysis. This SaaS solution streamlines oversight, allowing organizations to proactively identify and mitigate vulnerabilities within the global supply chain.", "dateAvailable": "2017-06-21" }, { "serviceName": "BigID", "serviceDescription": "BigID provides an automated foundation for data security, privacy, and governance across the federal enterprise. The platform proactively discovers, architectures, and inventories sensitive data and AI assets across all environments—including multi-cloud, on-premises data centers, and data pipelines. By utilizing advanced machine learning for deep data classification, BigID enables agencies to automatically identify PII, PHI, and CUI. This visibility allows organizations to mitigate risk, enforce granular access controls, and ensure regulatory compliance. From automating data lifecycle management to securing the data fed into AI models, BigID transforms fragmented information into a secure, searchable, and compliant asset.", "dateAvailable": "2017-06-21" }, { "serviceName": "Procurement Sciences", "serviceDescription": "Procurement Sciences offers a secure, end-to-end AI platform purpose-built for government contractors to find, qualify, manage, and win federal and SLED opportunities. The Awarded AI platform uses advanced generative and agentic AI to identify and surface relevant opportunities, evaluate bid/no-bid fit, manage capture and pipeline activities, extract and shred requirements, generate structured proposal outlines and first drafts, and automate compliance review and quality checks prior to submission. With human-in-the-loop oversight embedded across AI-powered workflows, the platform accelerates response timelines, strengthens compliance accuracy, improves proposal quality, and drives revenue growth without compromising security.", "dateAvailable": "2017-06-21" }, { "serviceName": "Presage Technologies", "serviceDescription": "Presage Technologies delivers a contactless physiological and behavioral assessment platform leveraging advanced video-based capture and analysis across in-person and fully remote environments. The platform identifies physiological signals and micromovements from video input, surfacing actionable response patterns and real-time indicators through an intuitive interface that empowers expert analysts to observe, annotate, and interpret findings with speed and confidence. Purpose-built for federal agencies and authorized mission partners, the system supports a broad range of high-value use cases and decision-making workflows requiring non-contact assessment at scale.", "dateAvailable": "2017-06-21" }, { "serviceName": "Brightfin", "serviceDescription": "Brightfin is a ServiceNow-native telecom and IT financial management application that consolidates enterprise wireless, wireline, and cloud spend into a single platform for invoice processing, cost allocation, asset lifecycle management, and carrier integrations. Brightfin provides finance, IT, and procurement teams with authoritative control over telecom and technology costs directly within their ServiceNow environment.", "dateAvailable": "2017-06-21" }, { "serviceName": "Serval", "serviceDescription": "Serval is an AI-native enterprise service management platform that automates employee requests, onboarding/offboarding, just-in-time access, and more. Serval allows IT, Security, HR, and other functions to eliminate repetitive work with AI agents while maintaining enterprise-grade security and governance.", "dateAvailable": "2017-06-21" }, { "serviceName": "GovEagle", "serviceDescription": "GovEagle is a purpose-built software-as-a-service (SaaS) platform that helps U.S. government contractors plan, analyze, draft, and manage responses to federal solicitations, addressing the mission need for faster, higher-quality, and more compliant proposal development. The authorization boundary is a multi-tenant SaaS application hosted in AWS GovCloud (US) with logical isolation between customer tenants, used by contractors' business development, capture, and proposal teams to process business and proposal data that may include Controlled Unclassified Information (CUI).", "dateAvailable": "2017-06-21" }, { "serviceName": "Fieldguide", "serviceDescription": "Fieldguide is an AI-native platform transforming how audit, advisory, and assurance work gets done. Purpose-built for regulated environments, Fieldguide brings professionals and agentic AI together to modernize engagement delivery from planning through close, enabling audit and advisory practitioners to deliver higher-quality work, strengthen client experiences, and unlock growth for the decade ahead.", "dateAvailable": "2026-08-12" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "AWS US East/West", "useCase": "Underlying IaaS for customer workloads." }, { "fedRampCertifiedThirdPartyInformationResource": "Azure Government", "useCase": "Underlying IaaS for customer workloads." }, { "fedRampCertifiedThirdPartyInformationResource": "Google Cloud Platform", "useCase": "Underlying IaaS for customer workloads." } ], "nonCertified": [] } }, { "fedramp_id": "F1308202329", "name": "Coupa Software Inc", "cloud_service_provider": "Coupa Software Inc", "cloud_service_offering": "Coupa Spend Management for Federal", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Coupa%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-10-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-09-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2021-11-10T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-03-10T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": "2020-10-22T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-09-14T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-11-10T20:00:00.000Z", "cert_date": "2022-03-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-03-10T20:00:00.000Z", "annual_assessment": "2011-11-10T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Brookhaven Site Office", "Federal Reserve System", "National Nuclear Security Administration / Lawrence Livermore National Laboratory" ], "agency_reuse": [ "" ], "service_description": "Coupa Spend Management for Federal is a cloud and mobile platform for managing procurement/acquisition/contract related processes. It covers the end-to-end process, including supplier identification, sourcing, contracting, procurement against contracts, invoicing, payments, and spend analytics to ensure compliance and efficiency.\n\nKey capabilities include:\n\n- Consumer-grade end user and supplier experience to ensure broad adoption of the platform and maximize the value of each dollar spent. Proven, secure solution that offers extensive configuration options, avoiding the need for custom code that is expensive to write and maintain \n\n- Full auditability for FAR/DFARS processes, including related contract documents and communications across internal agency team members and external vendors. Reduction in manual and paper-based processes using the latest in Artificial Intelligence (AI), Machine Learning (ML), and Image Recognition.\n\n-Support for compliance with Cost Accounting Standards (CAS) and other regulatory and/or compliance mandates.", "fedramp_msg": "N/A", "sales_email": "sales@coupa.com", "security_email": "scott.beale@coupa.com", "website": "https://www.coupa.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2122140784", "name": "Covergent Solutions Inc dba Exiger Government Solutions (EGS)", "cloud_service_provider": "Covergent Solutions Inc dba Exiger Government Solutions (EGS)", "cloud_service_offering": "Exiger Federal Cloud (EFC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Exiger%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-03-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-07-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-07-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-03-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-07-25T20:00:00.000Z", "cert_date": "2024-07-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Nuclear Security Administration", "fedramp_auth": "2024-07-02T20:00:00.000Z", "annual_assessment": "2011-07-10T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of the Interior", "National Nuclear Security Administration", "Nuclear Regulatory Commission", "U.S. International Development Finance Corporation" ], "agency_reuse": [ "" ], "service_description": "Exiger Government Solutions (EGS) developed a Software-as-a-Service (SaaS) product named 1Exiger which provides access to multiple modules - Due Diligence Intelligence (DDIQ), Third Party Management (3PM), Supply Dynamics (SDX), and Analytics.", "fedramp_msg": "N/A", "sales_email": "egssales@exiger.com", "security_email": "security@exiger.com", "website": "https://www.exiger.com/industries/public-sector/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Customer Relations Management (CRM)", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Legal & Policy", "Marketing & Sales", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2122140784A", "name": "Covergent Solutions Inc dba Exiger Government Solutions (EGS)", "cloud_service_provider": "Covergent Solutions Inc dba Exiger Government Solutions (EGS)", "cloud_service_offering": "Exiger Federal Cloud (EFC) - High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Exiger%20Logo2.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-05-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-05-13T22:12:56.367Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-05-13T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-05-13T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Exiger Government Solutions (EGS) developed a Software-as-a-Service (SaaS) product named 1Exiger which provides access to multiple modules - Due Diligence Intelligence (DDIQ), Third Party Management (3PM), Supply Dynamics (SDX), and Analytics.", "fedramp_msg": "", "sales_email": "egssales@exiger.com", "security_email": "security@exiger.com", "website": "https://www.exiger.com/industries/public-sector/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2416856649", "name": "Creative Veteran Productions", "cloud_service_provider": "Creative Veteran Productions", "cloud_service_offering": "Federal Immersive Learning Management System (FED-ILMS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CVP%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-08-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-05-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-06-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-08-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-05-28T20:00:00.000Z", "cert_date": "2025-06-27T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-06-27T20:00:00.000Z", "annual_assessment": "2011-05-28T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "The Federal Immersive Learning Management System (FED ILMS) is an Immersive Learning Management System (ILMS) which allows for training to occur in multiple modalities. Includes:\n- Live Meeting (Webinar Capabilities)\n- eLearning (SCORM, xAPI, CMI5, etc.)\n- On-Demand Video content\n- Documents\n- Immersive Learning (3D based serious gaming, in multi-player or single player mode)\n\nUser interactions are tracked for the purposes of determining when the user has met requirements of various courses. \n\nIn addition, the application has the following features:\nAccreditation System: Application has a complete accreditation system, which allows for the tracking of certificate requirements for any content in the system and puts the user through a number of requirements in order to achieve certification. This includes pre/post tests, evaluations, confirmation of acceptance, etc.\n\nEvent Registration System: System has a complete registration system to manage Live Webinar registration as well as course registration. \n\nExhibit Hall Capabilities: Create the ability to create templated “Spaces” or content areas that can be edited by “space editors” which includes a complete capability for the delegation of editing content in the space to the right department or person that manages that space. Spaces create an area where the “exhibitor” can share documents, live chat, provide contact information, display videos, and have “Ad-Hoc” live meetings.\n\nOpen AI: Application will, through the use of Cognitive Search, index the content in the application tagging it to a particular space, exhibit space, webinar, eLearning course, etc. This indexed content is then integrated with Open AI using the RAG pattern to feed the LLM to have a conversation within the content, which is context based (within a space, related to a course, etc.)\n\nGame API: External immersive learning experiences (serious Games) use the Game API to manage the user’s session, which includes the ability to set and get user progress, mark objectives as met, etc. In addition, the Game API allows for the management of VoIP in the case of multi-player games, and also for the real-time communications using Sockets over https for presence management and other real-time multi-player communication needs.\n\nSearch Capabilities: Application has a comprehensive search feature which allows users to search the system across all content types and one click open the content from the search results, whether this content is a Webinar, an Exhibit Space, a Serious Game, or a Document.\n\nRating and Favorites: System has the ability for the user to rate (providing this is enabled), and mark any content or space in the system as favorite, and this shows up in the user’s favorites as well “My Office” \n\nMy Office: This is the space within the application where the user sees all of the training they have done, can print certificates, finish any certificate requirements they have not completed on any of the course or content they have consumed, access their favorites, edit their profiles, etc.\n\nSocial Features: Application has real-time group chat and real-time one-on-one chat available throughout the application for real-time chat scenarios. This is useful within the context of spaces, live webinars, etc. The application also has a simple moderated Forums capability to allow the user to participate in forums which can be scoped to a space, content, or general in nature.\n\nCMS: The application has an administrative interface, called the “CMS” which allows the client administrator to manage all aspects of the platform. Access can be granularly assigned to only the features required, through which elevated access can be made available to manage system settings which are sensitive in nature.", "fedramp_msg": "N/A", "sales_email": "sales@creativevet.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://www.creativevet.com/", "uei": "", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Content Management System (CMS)", "Data Management", "Education & Training", "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2416263030", "name": "CrestPoint Solutions, Inc", "cloud_service_provider": "CrestPoint Solutions, Inc", "cloud_service_offering": "CrestPoint Environmental Management Service (CEMS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CrestPoint%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-19T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-03-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-06-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-03-19T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-03-23T20:00:00.000Z", "cert_date": "2026-06-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-06-01T20:00:00.000Z", "annual_assessment": "2011-03-04T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "CrestPoint Environmental Management Service (CEMS) Platform \n In accordance with FedRAMP requirements and policies, CrestPoint Solutions has completed the FedRAMP review process and is ready to support agency requests.\nThe CrestPoint Environmental Management Service (CEMS) Platform or the Unified FME Platform is delivered as a SaaS offering using a multi-tenant Public Cloud computing environment. It is a multipurpose modular system available to hospitals, healthcare facilities, data centers, public commercial facilities, federal, state, local, and tribal governments, as well as research institutions, federal contractors, and government contractors. The system is used by mission-critical facilities such as hospitals and data centers for managing operational and facility data including infrastructure data and asset management. \n \nFor VA hospitals and other healthcare facilities, CEMS helps the EVS team manage infection prevention efforts. It provides the necessary oversight to manage and monitor EVS operations in a consolidated approach for the following EVS scopes of service: managing and tracking quality inspections and deficiencies for performance improvement, tracking bed turnover, reporting and analyzing textile care production data and cost of operations, managing day-to-day EVS key performance metrics, managing EVS key performance indicators (KPI), and incorporating integrated pest management (IPM) actions taken to address identified/reported deficiencies.\n \nCEMS was uniquely designed to efficiently help EVS Leadership manage regulatory mandates such as the VHA Directive 1850 and others like The Joint Commission (TJC) Environment of Care (EC) Standards, CDC Sanitization Guidelines, CMS Infection Control, EPA/OSHA Medical Waste Regulations, Healthcare Laundry Accreditation Council (HLAC) Standards, and Integrated Pest Management (IPM) Protocols. These are mandated directives. Failure to adequately track infection prevention efforts, the various deficiencies, and the management of the EVS Key Performance Indicators (KPI) will directly affect the health and well-being of veterans and patients. A possible consequence is an infection outbreak or even an epidemiological outbreak.\n \nAs a result of these digital records, EVS staff and management have access to improved metrics that help put patients first, providing them with much better quality of care, faster response times and improved safety. Electronic records enable EVS teams to address patient needs in real time, eliminating wait times and backlog in EVS operations.\nFor Data Centers and infrastructure management, CEMS provides an integrated detailed specification and graphical representation of equipment for capacity planning. CEMS is used for power, space, and power requirements. It facilitates the automation and verification of scheduled and preventative maintenance, true-ups and end-of-life notifications. CEMS addresses today’s critical infrastructure challenges such as: floor space management, network connectivity, asset management, live power and environmental monitoring, critical AC - DC power systems, integrates with live data, Intelligent business analytics. It has the capability for multiple site management, measures PUE and/or DCiE, capacity planning, an intuitive, web-based graphical user interface (GUI), online collaboration and scheduling tools, easily manages work orders and resources, and provides a centralized repository for site drawings.\nOur commitment to FedRAMP requirements reflects our dedication to protecting sensitive data and upholding the highest security standards.", "fedramp_msg": "", "sales_email": "fojuola@crestpt.com", "security_email": "edomingo@crestpt.com", "website": "https://www.crestpt.com/", "uei": "TBJ1YGY1WFQ3", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Data Management", "Fleet Management", "Health & Wellness", "Network Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2519759620", "name": "Cribl Inc.", "cloud_service_provider": "Cribl Inc.", "cloud_service_offering": "Cribl.Cloud Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cribl%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-12-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-01-28T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-09-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-12-04T20:00:00.000Z", "cert_date": "2026-01-28T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-01-28T20:00:00.000Z", "annual_assessment": "2011-12-05T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "The Cribl.Cloud Government system is a cloud-based and vendor-agnostic observability pipeline that offers government entities the flexibility to collect, reduce, enrich, normalize, and route any type of federal data from any source to any destination within their existing data infrastructure to support official government business. \n\n-Cribl.Cloud Government is a software-as-a-service (SaaS) platform that consists of five products: Stream, Edge, Lake, Lakehouse and Search. \n-Stream is a data collection, reduction, enrichment, and routing system for observability data; Edge is an intelligent, scalable, edge-based data collection system for logs, metrics, and application data\n-Lake is a data lake solution aimed at long-term, full-fidelity data storage for IT and security data.\n- Lakehouse automates the management of diverse data types across user-defined storage tiers in Cribl Lake.\n- Search performs federated “search-in-place” queries on any data, in any form.", "fedramp_msg": "N/A", "sales_email": "sales@cribl.io", "security_email": "security@cribl.io", "website": "https://www.cribl.io/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Fleet Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2627547824", "name": "CrowdStrike, Inc.", "cloud_service_provider": "CrowdStrike, Inc.", "cloud_service_offering": "CrowdStrike Falcon Platform IL5 SaaS", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CrowdStrike%20Logo.png", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to FedRAMP In Process" } ], "authorizations": 1, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-06-29T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-08-03T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of Homeland Security" ], "agency_reuse": [ "" ], "service_description": "The primary purpose of the CrowdStrike Falcon Platform is to provide organizations with a comprehensive cybersecurity solution that encompasses the following system functions:\n\nEndpoint Security - Advanced endpoint security capabilities to protect laptops, desktops, servers, and virtual machines from various cyber threats.\n\nThreat Intelligence - Cloud-based intelligence engine to collect and analyze threat data from millions of endpoints worldwide.\n\nManaged Security - Managed security services with a team of security experts actively monitoring and responding to security events.\n\nCloud Security - Cloud security capabilities to protect organizations' cloud environments.\n\nSecurity and IT Operations - Integration of security and IT operations for a unified view of security posture.\n\nIdentity Protection - Identity protection capabilities to safeguard user identities and prevent unauthorized access.\n\nNext-Gen SIEM - Logging and analysis capabilities to collect, correlate, and analyze security events and logs.", "fedramp_msg": "", "sales_email": "sales@crowdstrike.com", "security_email": "fedramp@crowdstrike.com", "website": "https://www.crowdstrike.com/solutions/falcon-on-govcloud/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1807853629A", "name": "CrowdStrike, Inc.", "cloud_service_provider": "CrowdStrike, Inc.", "cloud_service_offering": "CrowdStrike Falcon Platform for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CrowdStrike%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-12-04T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2024-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2025-02-28T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 38, "reuse": 108, "ready_status": "Not Active", "ready_date": "2023-12-04T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-12-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-02-28T20:00:00.000Z", "cert_date": "2025-03-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-12T20:00:00.000Z", "annual_assessment": "2011-03-20T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2607452240", "csp": "IBM", "cso": "GO.gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2524349489", "csp": "IBM", "cso": "IBM Data Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2528033654", "csp": "Knox Systems", "cso": "Knox Systems FedRAMP High Managed Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2218073444", "csp": "Lucid Software, Inc.", "cso": "Lucid GovSuite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2230451369", "csp": "Snyk", "cso": "Snyk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2108649352", "csp": "Tyler Federal, LLC", "cso": "Tyler Federal Product Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2525556241XM", "csp": "Vanta", "cso": "Vanta Government Cloud", "status": "FedRAMP Certified", "impact_level": "20x Moderate", "impact_level_number": "6" } ], "agency_authorizations": [ "Agency for Healthcare Research and Quality", "Argonne National Laboratory", "Bureau of Labor Statistics", "Consumer Product Safety Commission", "Cybersecurity & Infrastructure Security Agency", "Defense Information Systems Agency", "Department of Energy", "Department of Health and Human Services", "Department of Justice", "Department of Veterans Affairs", "Environmental Management Consolidated Business Center", "Federal Deposit Insurance Corporation", "Federal Reserve System", "Federal Retirement Thrift Investment Board", "Federal Student Aid", "Federal Trade Commission", "Fermi National Accelerator Laboratory", "Food and Drug Administration", "General Services Administration", "Government National Mortgage Association", "Immigration and Customs Enforcement", "Indian Health Services", "Internal Revenue Service", "Justice Management Division", "National Nuclear Security Administration", "National Training Center", "Office of Financial Research", "Pension Benefit Guaranty Corporation", "Presidio Trust", "Social Security Administration", "Strategic Petroleum Reserve", "Substance Abuse and Mental Health Service Administration", "Tennessee Valley Authority", "U.S. Election Assistance Commission", "United States Patent and Trademark Office" ], "agency_reuse": [ "22-002-02", "22-002-04", "22-002-06", "22-002-09", "22-005", "22-005-04", "22-005-06", "22-005-09", "22-007-04", "22-007-17", "22-007-22", "22-011", "22-011-05", "22-012", "22-014-02", "22-015", "22-015-01", "22-017", "22-017-01", "22-017-03", "22-017-12", "22-019", "22-020", "22-021-01", "22-021-06", "22-022", "22-023", "22-024", "22-025", "22-027", "22-027-09", "22-028", "22-030", "22-031", "22-032", "22-033", "22-034", "22-037", "22-039", "22-040", "22-042", "22-042-02", "22-044", "22-045", "22-046", "22-050", "22-051", "22-054", "22-058", "22-062", "22-063", "22-069", "22-074", "22-075", "22-080", "22-084", "22-088", "22-092", "22-099" ], "service_description": "The primary purpose of the CrowdStrike Falcon Platform is to provide organizations with a comprehensive cybersecurity solution that encompasses the following system functions:\r\n\r\n \r\n\r\nEndpoint Security - Advanced endpoint security capabilities to protect laptops, desktops, servers, and virtual machines from various cyber threats.\r\n\r\nThreat Intelligence - Cloud-based intelligence engine to collect and analyze threat data from millions of endpoints worldwide.\r\n\r\nManaged Security - Managed security services with a team of security experts actively monitoring and responding to security events.\r\n\r\nCloud Security - Cloud security capabilities to protect organizations' cloud environments.\r\n\r\nSecurity and IT Operations - Integration of security and IT operations for a unified view of security posture.\r\n\r\nIdentity Protection - Identity protection capabilities to safeguard user identities and prevent unauthorized access.\r\n\r\nNext-Gen SIEM - Logging and analysis capabilities to collect, correlate, and analyze security events and logs.\r\n\r\nCharlotte AI - Delivers automated triage analysis for endpoint, identity and cloud detections and enables security teams to activate LLM inferencing within Falcon Fusion SOAR workflows.", "fedramp_msg": "", "sales_email": "sales@crowdstrike.com", "security_email": "fedramp@crowdstrike.com", "website": "https://www.crowdstrike.com/solutions/falcon-on-govcloud/", "uei": "JXV5KPM56S34", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "Charlotte AI", "Counter Adversary Elite", "Counter Adversary Operations", "Discover IoT / Insight IoT", "Falcon Adversary Intelligence", "Falcon Adversary Intelligence Premium", "Falcon Adversary OverWatch", "Falcon Cloud Security", "Falcon Cloud Security for Containers", "Falcon Cloud Security for Managed Containers", "Falcon Complete", "Falcon Data Protection", "Falcon Device Control", "Falcon Discover", "Falcon External Attack Surface Management", "Falcon FileVantage", "Falcon Firewall Management", "Falcon For IT", "Falcon Forensics", "Falcon Foundry", "Falcon Fusion", "Falcon Identity Protection", "Falcon Insight XDR", "Falcon Next-Gen SIEM", "Falcon Prevent", "Falcon SIEM Connector", "Falcon Sandbox", "Falcon Spotlight", "Falcon for Mobile" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2135180018", "name": "CuraPatient", "cloud_service_provider": "CuraPatient", "cloud_service_offering": "Composite Apps/ CuraPatient", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Curapatient%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-11-08T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2026-01-09T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": "2024-11-08T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-01-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "2011-05-07T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "In accordance with FedRAMP requirements and policies the CSP CuraPatient has completed the FedRAMP review process and is ready to support agency requests. \r\n\r\nCuraPatient provides a secure, user-friendly experience Artificial Intelligence (AI) powered digital platform that drives sustainable efficiency across complex operations. The platform provides secure integration with client systems and multi-device accessibility, including native iOS, Android, and responsive web applications. CuraPatient’s core functionalities streamline key processes such as medical claims processing, patient engagement, reduce administrative tasks and support scalable/ secure operations. Our commitment to FedRAMP requirements reflects our dedication to protecting sensitive data, ensuring we maintain and uphold the highest security standards.", "fedramp_msg": "N/A", "sales_email": "sales@curapatient.com", "security_email": "infosec@curapatient.com", "website": "https://curapatient.com/", "uei": "CB6BNZA248C3", "small_business": true, "business_categories": [ "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2618046015", "name": "Cyera", "cloud_service_provider": "Cyera", "cloud_service_offering": "Cyera for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cyera%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-04-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Cyera for Government is an agentless, cloud-native SaaS data security platform. Cyera for Government provides continuous visibility, AI-powered data classification, and protection for federal data across hybrid-cloud, SaaS, and on-premises environments. The system functions as a centralized data security control plane, enabling agencies to discover sensitive information, assess risk posture, and enforce security policies in real-time. By unifying Data Security Posture Management (DSPM) with advanced Data Loss Prevention (DLP) and Artificial Intelligence Security Posture Management (AI-SPM), the platform provides the foundation for securing the federal AI lifecycle.\nCyera for Government enables the automated discovery and contextual classification of structured and unstructured data. It utilizes an AI-native classification engine to identify Federal Information, including Personally Identifiable Information (PII), Protected Health Information (PHI), and Controlled Unclassified Information (CUI).\nBeyond discovery, the platform delivers automated risk remediation and continuous monitoring to close security gaps before they are exploited. By analyzing data access patterns and permissions, Cyera identifies over-privileged users and \"shadow data\" that bypasses traditional controls. This proactive approach allows agencies to implement Zero Trust Data Access (ZTDA) architectures, ensuring that sensitive federal assets remain resilient against insider threats and external breaches.\nCyera for Government is specifically engineered to streamline regulatory compliance with federal mandates such as NIST 800-53, CMMC, HIPAA, and FISMA. The platform provides out-of-the-box reporting and audit trails that simplify the assessment and authorization process.", "fedramp_msg": "", "sales_email": "fedramp-sales@cyera.io", "security_email": "fedramp-operations@cyera.io", "website": "https://cyera.io/", "uei": "T9M2M1H16HS9", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Storage", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2108731521", "name": "CyLogic", "cloud_service_provider": "CyLogic", "cloud_service_offering": "CyCloud for VMware Cloud Foundation", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CyLogic%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-03-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2026-05-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from No Status Found to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-05-12T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "JAB", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Fortreum, LLC", "service_model": [ "IaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "CyCloud is a modern Infrastructure-as-a-Service (IaaS) platform engineered to deliver VMware Cloud Foundation (VCF). It provides enterprise-grade compute, software-defined storage, networking, lifecycle management, automation, and self-service cloud operations within a fully integrated architecture. The platform provides standardized infrastructure, predictable operations, rapid deployment, repeatable compliance, and reduced operational risk for U.S. Government, defense, and regulated industry workloads.\n\nDeployed within carrier-dense, cloud-adjacent facilities, CyCloud provides direct access to hundreds of carriers, major network exchanges, global backbone providers, satellite connectivity providers, defense network ecosystems, and direct private connectivity to major cloud service providers. This delivers low-latency connectivity, rapid interconnection options, regional resiliency, reduced transit complexity, and optimized reach for mission-critical applications and data.", "fedramp_msg": "", "sales_email": "sales@cylogic.com", "security_email": "fedramp@cylogic.com", "website": "https://www.cylogic.com/", "uei": "MBX7D3Q84VM5", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Cybersecurity & Risk Management", "Data Management", "Legal & Policy", "Network Management", "Operations Management", "Storage", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "IaaS", "NSX-T", "VCD", "VCF", "VMware Cloud Director", "VMware Cloud Foundation" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2310956122", "name": "Cyware Labs, Inc.", "cloud_service_provider": "Cyware Labs, Inc.", "cloud_service_offering": "Cyware Cyber Fusion Center (CFC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cyware%20Logo2.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-10-08T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2024-10-08T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Cyware Labs, Inc. (Cyware) Cyber Fusion Center (CFC) is an offering of full-stack Cyber\r\nsecurity solutions for strategic, tactical, and operational intelligence sharing and threat\r\nresponse automation as well as orchestration services. Cyware Labs, Inc, Cyber Fusion Center (CFC) - Modules are -\r\n\r\n1. CFC Threat Intel Exchange (CTIX) includes Threat Intelligence Platform (TIP)\r\n2. CFC Collaborate (CSAP)\r\n3. CFC Respond (CFTR)\r\n4. CFC Orchestrate (CO)\r\n\r\nCFC Collaborate (CSAP): A mobile-enabled automated alert aggregation, dissemination, and strategic threat intelligence sharing platform for real-time situational awareness and enhanced collaboration between an organization’s security teams. Features include machine-to-machine orchestration, machine-to-human, orchestration, human-to-machine orchestration, role, location, and business alignment-based alerting, Cyware alerts, mobile-enabled intel sharing, macro intel ingestion, and crisis notifications.\r\n\r\nCFC Threat Intel Exchange (CTIX): A smart, client-server threat intelligence\r\nplatform (TIP) for ingestion, enrichment, analysis, and bi-directional sharing of threat data\r\nwithin an organization’s trusted network. Features include any-to-any threat feed\r\norchestration, micro threat intel ingestion, a hub & spoke sharing model, enrichment,\r\ncorrelation, and analysis of data, internal intel ingestion, automated intel actioning, and a\r\nmulti-level intel view.\r\n\r\nCFC Respond (CFTR): A threat response automation platform that combines cyber fusion, advanced orchestration, and automation to stay ahead of increasingly sophisticated cyber threats affecting organizations in real-time. Features include malware management, a connect-the-dots threat analysis, incident response & management, triage management, threat actor tracking engine, vulnerability management, custom dashboards and reports, and a case management workflow.\r\n\r\nCFC Orchestrate (CO): A universal, security orchestration gateway for executing on-demand or event-triggered tasks across deployment environments. Features include flexible API, system playbooks, powerful customization, audit playbook extensions, the ability to export and import logic, nested playbooks, and granular access control.", "fedramp_msg": "N/A", "sales_email": "sales@cyware.com", "security_email": "grc@cyware.com", "website": "https://www.cyware.com/products/government-agencies-public-sector", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2623848170", "name": "DailyPay", "cloud_service_provider": "DailyPay", "cloud_service_offering": "DailyPay for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Dailypay%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-08T22:17:40.501Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-06-04T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "DailyPay is the leader in On-Demand Pay, trusted by the most forward-thinking employers committed to enhancing their employees' financial health. Our open technology platform can deliver instant access to earned wages and a robust suite of financial wellness solutions, giving our partners a decisive edge in attracting, engaging, and retaining top talent. DailyPay is delivered as a SaaS offering using a multi-tenant Government-Only cloud computing environment. It is available to federal, state, local, and tribal governments, as well as research institutions, federal contractors, and government contractors.", "fedramp_msg": "", "sales_email": "fedramp@dailypay.com", "security_email": "fedramp-security@dailypay.com", "website": "https://www.dailypay.com/industries/public-sector/#public-sector-tabs", "uei": "GR7JCY23X286", "small_business": false, "business_categories": [ "Finance", "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2402468053", "name": "Darktrace Federal Inc.", "cloud_service_provider": "Darktrace Federal Inc.", "cloud_service_offering": "Cyber AI Mission Defense and Email Protection", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Darktrace%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-02-27T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-03-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-02-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-03-12T20:00:00.000Z", "cert_date": "2025-04-25T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-25T20:00:00.000Z", "annual_assessment": "2011-03-11T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "Darktrace Federal’s AI-powered solutions actively defend US Federal Government on-premises networks, cloud, OT, email systems, and zero trust architectures from cyber disruptions and ensure mission resilience. Rather than relying on signatures or historic attack data, Darktrace Federal's Self-Learning AI understands the normal operational behavior of each organization to identify unusual activities and autonomously respond in real-time. The Cyber AI platform consists of Cyber AI Mission Defense (CAMD) and Cyber AI Email Protection (CAEP) to form an adaptive knowledge of every device, user, peer group, network segment, and email communication. Together, CAMD and CAEP empower federal agencies to defend their digital ecosystems against sophisticated threats including nation-state attacks, insider threats, zero-days, phishing attacks and more.", "fedramp_msg": "", "sales_email": "Sales@darktracefederal.com", "security_email": "FedRAMP_Security_Info@darktracefederal.com", "website": "https://darktracefederal.com/", "uei": "CJTXF51LYM58", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Network Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1404304159", "name": "DataBank Holdings", "cloud_service_provider": "DataBank Holdings", "cloud_service_offering": "FedRAMP Compliant CloudPlus", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Databank%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-04-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-09-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-06-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 7, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2017-04-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-09-29T20:00:00.000Z", "cert_date": "2018-06-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-06-08T20:00:00.000Z", "annual_assessment": "2011-05-29T04:00:00.000Z", "independent_assessor": "360 Advanced Compass Rose", "service_model": [ "IaaS", "PaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1818459251", "csp": "Sirsi Corporation (SirsiDynix)", "cso": "EOS.Web", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2312052740", "csp": "VLogic Systems, Inc.", "cso": "VLogicFM", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" } ], "agency_authorizations": [ "Farm Credit Administration", "Immigration and Customs Enforcement" ], "agency_reuse": [ "22-016-07", "22-017-04", "22-017-11", "22-045", "22-059" ], "service_description": "DataBank’s CloudPlus transforms traditional enterprise applications delivering secure FedRAMP compliant 100% uptime cloud hosting solutions. Focused on public, dedicated private, and hybrid Cloud computing platforms designed to meet a wide range regulatory requirements including FISMA, FedRAMP, HIPAA and PCI.\n\nSaaS providers, federal agencies and System Integrators who require FedRAMP can significantly lower operating costs, eliminate capital expenditures and drastically improve service delivery at a predictable monthly cost. By combining the latest scalable Cloud technology DataBank can help you reduce the time it takes to adopt new cloud IT capabilities. CloudPlus delivers highly available and secured cloud hosting, which includes monitoring, backups and recovery and 24x7x365 technical support. CloudPlus includes all of the hardware infrastructure, software licenses, bandwidth, load balancers, clustering infrastructure, storage, security software and tools along with the experts responsible for installing, configuring and maintaining global scale application platforms with support for the majority of Windows and Linux application stacks and database platforms. Partnered with a number of purchasing vehicles to make cloud procurement easy.", "fedramp_msg": "N/A", "sales_email": "sales@databank.com", "security_email": "Compliance@DataBank.com", "website": "https://www.databank.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Network Management", "Operations Management", "Storage", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1834740315", "name": "Databricks, Inc.", "cloud_service_provider": "Databricks, Inc.", "cloud_service_offering": "Databricks on AWS US East/West", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Databricks%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-10-07T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-06-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-09-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 24, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-10-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-06-30T20:00:00.000Z", "cert_date": "2022-09-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Centers for Medicare & Medicaid Services", "fedramp_auth": "2022-09-29T20:00:00.000Z", "annual_assessment": "2011-06-30T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2527132001", "csp": "Asana Inc.", "cso": "Asana", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2412062433", "csp": "Atlassian", "cso": "Atlassian Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324740262", "csp": "Databricks, Inc.", "cso": "Databricks on AWS GovCloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2310974411", "csp": "PagerDuty", "cso": "PagerDuty Operations Cloud", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2230451369", "csp": "Snyk", "cso": "Snyk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Centers for Medicare & Medicaid Services", "Consumer Financial Protection Bureau", "Customs and Border Protection", "Cybersecurity & Infrastructure Security Agency", "United States Patent and Trademark Office" ], "agency_reuse": [ "22-002-04", "22-005", "22-005-01", "22-005-06", "22-005-09", "22-007", "22-007-03", "22-007-22", "22-007-28", "22-011-03", "22-014-02", "22-019", "22-021", "22-021-04", "22-022", "22-022-01", "22-034", "22-036", "22-067", "22-069" ], "service_description": "The Databricks Data Intelligence Platform is a unified, AI-powered platform built on a lakehouse architecture to provide an open, unified foundation for all data and governance, and is powered by a Data Intelligence Engine & Apache Spark™ that understands the uniqueness of your data. It enables organizations to process, govern, and extract actionable insights from all their data using both Machine Learning (ML) and generative Artificial Intelligence (AI) including Large Language Models (LLMs). It unifies data engineering, analytics (SQL), and AI workloads, simplifying data management and accelerating analytics with features like automated ETL, advanced query optimization, and AI-driven data cataloging. The platform’s Data Intelligence Engine understands the unique semantics and usage patterns of an organization’s data, offering natural language access, tailored recommendations, and robust governance and privacy controls.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "federal-compliance@databricks.com", "website": "https://www.databricks.com/solutions/industries/federal-government", "uei": "JJZCW7PZP8Q4", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Research", "Storage" ], "service_last_90": [ "" ], "all_others": [ "AI/BI", "AutoML", "Classic Compute", "Dashboards", "Databricks Apps", "Databricks Assistant", "Databricks SQL (DBSQL)", "Delta Live Tables", "Delta Sharing", "Feature Store", "Genie", "Lakeflow Connect", "Lakeflow Declarative Pipelines", "Lakeflow Jobs & Workflows", "MLFlow", "Photon", "Repos", "Serverless Compute", "Unity Catalog" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2324740262", "name": "Databricks, Inc.", "cloud_service_provider": "Databricks, Inc.", "cloud_service_offering": "Databricks on AWS GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Databricks%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-06-05T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-03-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-02-26T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-06-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-03-21T20:00:00.000Z", "cert_date": "2025-02-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-02-26T20:00:00.000Z", "annual_assessment": "2011-03-19T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2516365096", "csp": "Procore Technologies, Inc", "cso": "Procore for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Education", "Department of Health and Human Services", "Federal Reserve System", "Food and Drug Administration", "Immigration and Customs Enforcement", "National Nuclear Security Administration / Lawrence Livermore National Laboratory" ], "agency_reuse": [ "22-007" ], "service_description": "The Databricks Data Intelligence Platform is a unified, AI-powered platform built on a lakehouse architecture to provide an open, unified foundation for all data and governance, and is powered by a Data Intelligence Engine & Apache Spark™ that understands the uniqueness of your data. It enables organizations to process, govern, and extract actionable insights from all their data using both Machine Learning (ML) and generative Artificial Intelligence (AI) including Large Language Models (LLMs). It unifies data engineering, analytics (SQL), and AI workloads, simplifying data management and accelerating analytics with features like automated ETL, advanced query optimization, and AI-driven data cataloging. The platform’s Data Intelligence Engine understands the unique semantics and usage patterns of an organization’s data, offering natural language access, tailored recommendations, and robust governance and privacy controls.", "fedramp_msg": "N/A", "sales_email": "federal-compliance@databricks.com", "security_email": "federal-compliance@databricks.com", "website": "https://www.databricks.com/solutions/industries/federal-government", "uei": "JJZCW7PZP8Q4", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Research", "Storage" ], "service_last_90": [ "" ], "all_others": [ "AutoML", "Classic Compute", "Dashboards", "Databricks SQL (DBSQL)", "Delta Live Tables", "Delta Live Tables (DLT)", "Delta Sharing", "Feature Store", "Feature Store, Jobs & Workflows", "Jobs & Workflows", "Lakeview", "Photon", "Repos", "Unity Catalog" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2525247858", "name": "Databricks, Inc.", "cloud_service_provider": "Databricks, Inc.", "cloud_service_offering": "Databricks on Azure Commercial", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Databricks%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-12-10T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-01-16T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-06-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-12-10T20:00:00.000Z", "cert_date": "2026-01-16T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-01-16T20:00:00.000Z", "annual_assessment": "2011-12-10T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Centers for Medicare & Medicaid Services" ], "agency_reuse": [ "" ], "service_description": "The Databricks Data Intelligence Platform is a unified, AI-powered platform built on a lakehouse architecture to provide an open, unified foundation for all data and governance, and is powered by a Data Intelligence Engine & Apache Spark™ that understands the uniqueness of your data. It enables organizations to process, govern, and extract actionable insights from all their data using both Machine Learning (ML) and generative Artificial Intelligence (AI) including Large Language Models (LLMs). It unifies data engineering, analytics (SQL), and AI workloads, simplifying data management and accelerating analytics with features like automated ETL, advanced query optimization, and AI-driven data cataloging. The platform’s Data Intelligence Engine understands the unique semantics and usage patterns of an organization’s data, offering natural language access, tailored recommendations, and robust governance and privacy controls.", "fedramp_msg": "N/A", "sales_email": "federal-compliance@databricks.com", "security_email": "federal-compliance@databricks.com", "website": "https://azure.microsoft.com/en-us/products/databricks", "uei": "JJZCW7PZP8Q4", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Research", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2023864279A", "name": "Datadog, Inc.", "cloud_service_provider": "Datadog, Inc.", "cloud_service_offering": "Datadog for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DataDog%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-05-07T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-05-05T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to FedRAMP Certified" } ], "authorizations": 14, "reuse": 13, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-05-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-05-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-05-05T20:00:00.000Z", "annual_assessment": "2011-04-01T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Labor Statistics", "Bureau of the Fiscal Service", "Department of Veterans Affairs", "Federal Aviation Administration", "Federal Emergency Management Agency", "Federal Energy Regulatory Commission", "Federal Retirement Thrift Investment Board", "Federal Student Aid", "Internal Revenue Service", "National Aeronautics and Space Administration", "Office of Financial Research", "United States Census Bureau", "United States Geological Survey" ], "agency_reuse": [ "" ], "service_description": "Datadog is an AI-powered observability and security platform that unifies metrics, traces, logs, security signals, and more across your stack into a single pane of glass. Observe any stack at any scale, secure applications from code to cloud, and act faster with automated workflows all in Datadog. Streamline collaboration between Development, Operations, and Security teams with AI-powered insights and automated remediation for faster troubleshooting and improved system health and security.\n\nDatadog for Government extends these capabilities to U.S. government agencies, educational institutions, and the organizations that support them. Hosted on AWS GovCloud, it supports hybrid, multi-cloud, and on-prem environments. Federal, state, and local teams can accelerate IT modernization, strengthen security posture, and support initiatives like Zero Trust and cloud migration—delivering secure, reliable digital services with confidence.\n\nThe services in scope for Datadog for Government are:\n\nInfrastructure Metrics – Observe, analyze, and alert on metrics across hosts, containers, and cloud environments.\n\nCloud Network Monitoring – Provide multi-cloud visibility into network flows in granular detail and enable users to aggregate and monitor that data.\n\nNetwork Device Monitoring – Monitor the health and performance of network devices such as routers, switches, and firewalls.\n\nCloud Cost Management – Analyze and optimize cloud spend with visibility into resource usage and cost drivers.\n\nApplication Performance Monitoring (APM) – Collect, search, and analyze traces across fully distributed architectures.\n\nContinuous Profiler – Continuously analyze code-level performance to identify resource bottlenecks and optimize application efficiency.\n\nServerless Monitoring – Monitor the performance and execution of serverless functions across cloud environments.\n\nDatabase Monitoring – Provide visibility into database performance, query activity, and resource utilization.\n\nLog Management – Collect, enrich, monitor, and analyze logs from all systems for troubleshooting, auditing, visualization, and alerting.\n\nError Tracking – Capture, visualize, and browse errors reported by services.\n\nSensitive Data Scanner – Identify and monitor sensitive data within logs to support compliance and data protection requirements.\n\nAudit Trail – Track user activity and configuration changes for auditing and compliance purposes.\n\nArchive Search – Enable long-term retention and search of log data for compliance and forensic analysis.\n\nCloud Security Monitoring – Enable real time threat detection and investigate security alerts across infrastructure metrics, distributed traces, and logs. This capability encompasses Cloud SIEM, Cloud Workload Security, Cloud Security Platform Monitoring, and Cloud Security Vulnerability Management.\n\nReal User Monitoring (RUM) – Collect user actions (e.g., button clicks) to understand user activity within a page.\n\nSession Replay – Reconstruct user sessions to visually analyze user behavior and troubleshoot issues.\n\nSynthetic Monitoring – Monitor applications and API endpoints via simulated user requests and browser rendering.\n\nIncident Management – Detect, manage, and respond to incidents with workflows for alerting, collaboration, and resolution.\n\nMobile Application – Access the Datadog platform from mobile devices.", "fedramp_msg": "N/A", "sales_email": "fed@datadoghq.com", "security_email": "fedramp@datadoghq.com", "website": "https://www.datadoghq.com/", "uei": "L8UFWSCC3JF5", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2625055623", "name": "DataRobot", "cloud_service_provider": "DataRobot", "cloud_service_offering": "DataRobot for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DataRobot%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-02T22:13:09.922Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-02T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "DataRobot’s DataRobot for Government is a SaaS solution that uses artificial intelligence (AI) to help businesses and teams develop, deliver, and govern AI at scale. With DataRobot for Government, customers will be able to explore, build, train, and manage advanced machine learning and generative AI models. DataRobot for Government will display the best-performing models and provide insight on how they work, allowing businesses to improve efficiency in their AI workflows. DataRobot leverages Kubernetes, powered by Amazon Elastic Kubernetes Service (Amazon EKS), to set up the environment. Multiple Amazon EKS clusters and VPCs are used to provide single tenancy isolation.", "fedramp_msg": "", "sales_email": "zach.maurer@datarobot.com", "security_email": "jennifer.brown@datarobot.com", "website": "https://www.datarobot.com/", "uei": "ULWEN7VLP4B3", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2112152882", "name": "Datavant", "cloud_service_provider": "Datavant", "cloud_service_offering": "Datavant Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Datavant%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-06-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-06-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-12-15T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-06-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-06-29T20:00:00.000Z", "cert_date": "2022-12-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Center for Advancing Translational Sciences", "fedramp_auth": "2022-12-15T20:00:00.000Z", "annual_assessment": "2011-11-03T04:00:00.000Z", "independent_assessor": "Linford & Company", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "National Center for Advancing Translational Sciences" ], "agency_reuse": [ "" ], "service_description": "Datavant Cloud enables privacy-preserving health data connectivity for federal government customers, stakeholders, and collaborators. Our privacy-preserving record linkage (PPRL) solution links person-level data across data silos using universal patient keys without exposing personally identifiable information (PII) or protected health information (PHI). Data governance controls are built-in to Datavant’s unique PPRL deployment model, providing assurance to data originators and data stewards that their data can only be processed by the right entity, for the right purpose, under the right conditions. \n\nDatavant features include:\n- Governance controls that enable an array of data-sharing models including data collaboratives, registries, repositories, project-specific data-sharing, and single vs. bi-directional data linkages. \n- Trust frameworks that provide linkage honest broker, zero trust, and peer-to-peer models, providing data originators and data recipients with flexibility to connect data using their desired trust models.\n- De-identified cohort discovery with Datavant’s extensive ecosystem of interoperable real world datapartners to discover shared cohorts and populations without needing to share underlying data.\n\nDatavant services include:\n- Datavant DeID+Link\n- Datavant Match\n- Datavant Desktop\n- Datavant Web Portal features:\n- Overlaps, Overlaps API\n- Explore\n\nDatavant solutions can be deployed on-premise, in virtualized environments, in cloud, and integrated locally within your native systems via our API.", "fedramp_msg": "N/A", "sales_email": "federal@datavant.com", "security_email": "security@datavant.com", "website": "https://datavant.com/", "uei": "", "small_business": false, "business_categories": [ "Data Management", "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1507317125", "name": "Decision Lens Inc.", "cloud_service_provider": "Decision Lens Inc.", "cloud_service_offering": "Decision Lens Software", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Decision%20Lens%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-06-10T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2015-08-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2015-12-21T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2014-06-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2015-08-06T20:00:00.000Z", "cert_date": "2015-12-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Forest Service", "fedramp_auth": "2015-12-21T20:00:00.000Z", "annual_assessment": "2011-04-01T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "Federal Housing Finance Agency", "General Services Administration", "National Park Service" ], "agency_reuse": [ "" ], "service_description": "The Decision Lens Software is a cloud-based prioritization and resource optimization software solution. Decision Lens enables governmental organizations to make critical decisions in program and project prioritization and resourcing, modernization, resource allocation and optimization, and workforce planning. This cloud-based software, which is hosted on the FedRAMP-authorized Amazon Web Services (AWS) Infrastructure as a Service (IaaS), rapidly engages decision-makers to achieve better outcomes in a resource-constrained environment. Driven by sophisticated analytics, the Decision Lens Software empowers organizations to identify those investments that will deliver the best future outcomes.", "fedramp_msg": "N/A", "sales_email": "sales@decisionlens.com", "security_email": "isso@decisionlens.com", "website": "https://www.decisionlens.com/", "uei": "NYGLJTMSF3K4", "small_business": true, "business_categories": [ "Analytics", "Data Management", "Finance" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2618648262", "name": "Defense Cybersecurity Group", "cloud_service_provider": "Defense Cybersecurity Group", "cloud_service_offering": "Midwatch", "logo": "", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-04-16T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Midwatch is a secure enclave engineered for the protection of Controlled Unclassified Information (CUI). It provides Federal Agencies and the Defense Industrial Base (DIB) with a secure environment to handle and share sensitive data requiring moderate security controls. Through the use of Virtual Desktop Infrastructure (VDI), Midwatch ensures strict logical separation between secure workloads and an organization’s broader enterprise information systems.\n\nMidwatch enables secure, high-performance collaboration across several critical workflows, including:\nSensitive Data Collaboration: Secure co-authoring and collaboration on sensitive information and complex documentation stacks.\nAdvanced Engineering: Specialized support for CAD workflows and AI/ML GPU-accelerated workloads.\nSoftware Engineering: Secure Software Development and DevSecOps via an integrated Gitflow platform, implemented in alignment with the Secure Software Development Framework (SSDF).\nOperational Management: Integrated project management and secure task orchestration.\nRemote Device Management: Midwatch ViPR provides a secure gateway between the VDI infrastructure and physical office or workshop floors, facilitating controlled and audited file transfers to engineering peripheral devices.\n\nThe Midwatch authorization boundary consists of a DevSecOps platform, VDI infrastructure, Midwatch ViPR remote access services, workflow automation, and vulnerability management tools, all hosted within a dedicated cloud organization. The environment is hardened through a segmented VPC architecture with Google Cloud Armor edge protection, the implementation of a Zero Trust Network Architecture (ZTNA) for all access requests, and robust data protection featuring centralized logging and Customer-Managed Encryption Keys (CMEK).\n\nMidwatch is deployed as a government-community cloud within the Google Cloud Platform (GCP) using US-only data centers. The system utilizes a microservices-based architecture powered by Docker and K3s/K8s/GKE Autopilot.", "fedramp_msg": "", "sales_email": "info@cybersecgru.com", "security_email": "security@dcg.cui-secure.us", "website": "https://cybersecgru.com/", "uei": "X8M3VQX188Y8", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Cybersecurity & Risk Management", "Data Management", "Design & Multimedia", "Development Tools", "Mobile Device Management (MDM)", "Operations Management", "Research", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2427252775", "name": "Dejero Labs, Inc.", "cloud_service_provider": "Dejero Labs, Inc.", "cloud_service_offering": "Dejero Control and Concentrator", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Dejero%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-07-10T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-01-22T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-02-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-07-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-01-22T20:00:00.000Z", "cert_date": "2026-02-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Customs and Border Protection", "fedramp_auth": "2026-02-17T20:00:00.000Z", "annual_assessment": "2011-01-21T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Customs and Border Protection" ], "agency_reuse": [ "" ], "service_description": "Dejero Control and Concentrator is a cloud-based system that provides users the ability and flexibility to centrally manage and control their Dejero deployed equipment to provide high speed reliable connectivity", "fedramp_msg": "N/A", "sales_email": "jehan.karim@dejero.com", "security_email": "security@dejero.com", "website": "https://www.dejero.com/", "uei": "", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Design & Multimedia", "Fleet Management", "Law Enforcement", "Media" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1210161615", "name": "Deloitte", "cloud_service_provider": "Deloitte", "cloud_service_offering": "Evidence Management System (EMS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Deloitte%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-12-16T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2015-12-16T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2016-02-12T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to Legacy FedRAMP Ready" }, { "date": "2016-03-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP Certified" } ], "authorizations": 11, "reuse": 10, "ready_status": "Not Active", "ready_date": "2016-02-12T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-12-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2015-12-16T20:00:00.000Z", "cert_date": "2016-03-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2016-03-15T20:00:00.000Z", "annual_assessment": "2011-01-20T04:00:00.000Z", "independent_assessor": "MindPoint Group, A Tyto Athene Company", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Centers for Disease Control and Prevention", "Department of Justice", "Department of Labor", "Federal Deposit Insurance Corporation", "Food and Drug Administration", "Internal Revenue Service", "National Labor Relations Board", "Pension Benefit Guaranty Corporation", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "The Deloitte Government and Public Sector Technology Center (GPS TC) provides Software-as-a-Service (SaaS) to government agencies, legal departments, and public entities utilizing machine technology and web services. Deloitte Evidence Management System (EMS) provides advanced technology and experienced staff to assist government agencies responding to requests stemming from litigation, congressional inquiries, FOIA, investigations, and other similar use cases. Our capabilities assist other offerings that need to collect, extract, or analyze unstructured data.\r\n\r\n \r\n\r\nDeloitte EMS draws on years of experience providing government and public sector clients secure eDiscovery solutions and support. Deloitte’s highly skilled technical resources engage a full array of EDRM data management solutions and services that include identifying, preserving, collecting, reviewing, producing, dispositioning, and archiving. Clients who partner with Deloitte can utilize a wide variety of application software in a secure and scalable environment to address their identified mission requirements.\r\n\r\n \r\n\r\n- Disclosure/FOIA (SecureReleaseTM) Advanced Analytics (i.e. active learning, culling data)\r\n\r\n- NavigAite: A Generative AI solution that leverages Relativity, a Large Language Model (LLM) and prompt engineering to summarize, classify, and redact text across extensive document collections\r\n\r\n- SmarText: An OCR solution that leverages LLMs to organize documents, perform data extraction and analysis, and identify redactions for documents integrated with SecureReleaseTM or other document review platforms and tools\r\n\r\n- Information Governance\r\n\r\n- Program Integrity\r\n\r\n- Investigations (i.e., criminal, financial, employment)\r\n\r\n- Data Collection including mobile data/devices, social media, websites, O365 Project and Contract Management Trial Support\r\n\r\n- Customizable and tailored workflows", "fedramp_msg": "N/A", "sales_email": "", "security_email": "USGPSBISOISSM@deloitte.com", "website": "http://www.deloitte.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1606087903A", "name": "Deltek - Replicon", "cloud_service_provider": "Deltek - Replicon", "cloud_service_offering": "Replicon Cloud Platform (Enterprise Time Tracking Platform)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Deltek%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-05-12T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-01-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-02-11T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-05-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-01-23T20:00:00.000Z", "cert_date": "2026-02-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-02-11T20:00:00.000Z", "annual_assessment": "2011-01-23T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture" ], "agency_reuse": [ "" ], "service_description": "The Replicon Cloud Platform (RCP) is a Software as a Service (SaaS) solution providing cloud-based time tracking, expense management, and resource scheduling capabilities. The platform enables organizations to capture and manage employee time, project costs, expense reports, and resource allocation. RCP delivers workforce management analytics, project cost controls, and operational reporting through a secure, multi-tenant cloud infrastructure.", "fedramp_msg": "", "sales_email": "fedrampsales@hello.deltek.com", "security_email": "RepliconFedRAMP@deltek.com", "website": "https://www.deltek.com/en/time-tracking/replicon", "uei": "", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Collaboration", "Customer Service", "Data Management", "Finance", "Human Resources", "Marketing & Sales", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2405880485", "name": "Deltek, Inc.", "cloud_service_provider": "Deltek, Inc.", "cloud_service_offering": "Costpoint GovCon Cloud Moderate (CP GCCM)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Deltek%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-12T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-12-12T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Deltek's Costpoint GovCon Cloud Moderate (CP GCCM) supports government contractors with project management, accounting, labor and material management and business intelligence functionalities. CP GCCM provides unstructured data classification and customizable rules to protect the privacy of customers, employees, and partners, as well as an organization’s intellectual property. In addition, the CP GCCM supports capabilities for content protection including data classification and access controls, data retention, and regulation.\n\nCP GCCM offers additional security to support government contractors in meeting their DFARS contractual requirements and helps accelerate DCAA/DCMA and CMMC compliance initiatives. CP GCCM allows contractors a secure process to handle more highly sensitive information, Controlled Unclassified Information (CUI) and ITAR data, eliminating the complexity of additional IT infrastructure or staff.", "fedramp_msg": "", "sales_email": "fedrampsales@hello.deltek.com", "security_email": "USSO@deltek.com", "website": "https://www.deltek.com/en/government-contracting/costpoint/cloud", "uei": "X33ZSBRJNNL9", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Customer Relations Management (CRM)", "Finance", "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2100845343", "name": "DevResults", "cloud_service_provider": "DevResults", "cloud_service_offering": "DevResults", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DevResults%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-01-07T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-08-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-09-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-01-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-08-18T20:00:00.000Z", "cert_date": "2021-09-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-09-09T20:00:00.000Z", "annual_assessment": "2011-08-18T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of State" ], "agency_reuse": [ "" ], "service_description": "DevResults is a web application with tools for data capture, analysis, reporting, visualizations, project management, and team collaboration. DevResults was designed to streamline fragmented data processes into a single proven system, allowing for the utilization of data for decision making across activities and throughout government agencies, non-profit organizations, and private sector companies. Over the past decade, DevResults has supported partners with managing data, measuring progress, and learning from the results. DevResults will allow users across an organization and around the world to better utilize data for management and decision-making.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@devresults.com", "website": "https://www.devresults.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2410651313", "name": "Dewberry", "cloud_service_provider": "Dewberry", "cloud_service_offering": "DimensionalView®", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Dewberry%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-01-29T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-01-29T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "DimensionalView® is a secure, reliable cloud-based Platform as a Service (PaaS) hosted in Azure. It allows government users to capture, store, analyze, and visualize spatial and non-spatial data and create custom low-code-no-code applications and workflow management solutions in a collaborative workspace.\n\nThe system provides the following capabilities:\n\n· Identity and access-controlled data and document collaboration\n\n· Custom mapping, dashboarding, and reporting\n\n· Field inspections and data collection on mobile devices\n\n· No-code, low-code or full custom-coded applications depending on need\n\n· Secure and reliable data\n\n· Monitoring, logging, and reporting consistent with FedRAMP Moderate standards and guidelines", "fedramp_msg": "N/A", "sales_email": "pdean@dewberry.com", "security_email": "msherman@dewberry.com", "website": "https://www.dewberry.com/services/technology/dimensionalview", "uei": "K3WDSCEDY1V5", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Data Management", "Development Tools", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2508262726", "name": "Dexcom Inc.", "cloud_service_provider": "Dexcom Inc.", "cloud_service_offering": "Dexcom Clarity for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Dexcom%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-01-23T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-01-23T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-07-27T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Dexcom Clarity for Government online software is an important part of the Dexcom Continuous Glucose Monitoring (CGM) system. It provides a holistic and retrospective view of CGM User diabetes management by highlighting glucose patterns, trends, and statistics to help providers make diabetes management decisions.\nCGM Users can connect their Dexcom Clarity data to the clinic account using a secure code. During visits, providers can upload CGM User receiver data to the clinic account directly. \nDexcom has deployed a separate Google Cloud organization for the federal system in Google Cloud Central US region with multiple zones for redundancy.\nDexcom Clarity for Government includes a subset of the services and features available in the commercial system and leverages cloud-native and cloud-managed services wherever possible.\nDexcom Clarity for Government includes Dexcom Clarity for Government, applications and their associated services and utilities and uses private Google Kubernetes Engine (GKE) clusters with the Autopilot feature for their compute.", "fedramp_msg": "N/A", "sales_email": "jose.sanchez@dexcom.com", "security_email": "FedRAMPSecurityInbox@dexcom.com", "website": "https://clarity.dexcom.us/professional/", "uei": "RV5DCZ7N11J3", "small_business": false, "business_categories": [ "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2414718666", "name": "Digital Science UK Limited", "cloud_service_provider": "Digital Science UK Limited", "cloud_service_offering": "Overleaf", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Overleaf%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-08-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-10-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-01-29T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-08-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-10-29T20:00:00.000Z", "cert_date": "2025-01-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Census Bureau", "fedramp_auth": "2025-01-29T20:00:00.000Z", "annual_assessment": "2011-10-28T04:00:00.000Z", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Federal Reserve System", "United States Census Bureau" ], "agency_reuse": [ "" ], "service_description": "Overleaf is delivered as a SaaS offering using a multi-tenant Public Cloud cloud computing environment. Overleaf is an online collaborative writing and publishing tool that makes the whole process of writing, editing and publishing scientific and technical documents much quicker and easier. Overleaf provides the convenience of an easy-to-use LaTeX editor with real-time collaboration and the fully compiled output produced automatically.", "fedramp_msg": "N/A", "sales_email": "federal@overleaf.com", "security_email": "fedramp@overleaf.com", "website": "https://www.overleaf.com/for/government", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2118743892", "name": "Digital.ai", "cloud_service_provider": "Digital.ai", "cloud_service_offering": "Digital.ai Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Digital.ai.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-01-14T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-04-05T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-07-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-01-14T20:00:00.000Z", "cert_date": "2022-04-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-04-05T20:00:00.000Z", "annual_assessment": "2011-01-14T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "National Aeronautics and Space Administration" ], "agency_reuse": [ "" ], "service_description": "Digital.ai Government Cloud an AI-Powered DevOps Platform that empowers US Government agencies to unify, secure and generate predictive insights across the software lifecycle, increasing business value with integrated software delivery, and driving down technical debt through enterprise connections. Additional information is available at https://digital.ai/government. The following Digital.ai Government Cloud services are FedRAMP authorized: Digital.ai Agility", "fedramp_msg": "N/A", "sales_email": "trey.doescher@digital.ai", "security_email": "fedramp-info@digital.ai", "website": "https://digital.ai/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1834172478", "name": "Diligent, Inc.", "cloud_service_provider": "Diligent, Inc.", "cloud_service_offering": "Diligent One Platform (D1P)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Diligent%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-09-19T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-07-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-11-20T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 8, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-09-19T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-07-02T20:00:00.000Z", "cert_date": "2019-11-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-11-20T20:00:00.000Z", "annual_assessment": "2011-09-09T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2422240916", "csp": "Rapid7", "cso": "InsightGovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Defense Finance and Accounting Service", "Department of Agriculture", "Department of Commerce", "Department of Health and Human Services", "First Responder Network Authority", "Office of Financial Systems Policy and Oversight", "State Office of the Inspector General" ], "agency_reuse": [ "22-027-07" ], "service_description": "Diligent’s D1P GRC platform is the only enterprise-grade solution purpose-built to manage the full lifecycle of FedRAMP, DOD/DISA IL and CMMC compliance—from initial SSP development to ongoing POA&M updates, ConMon, and audit readiness. Designed with automation at its core and trusted by federal agencies, integrators, and 3PAOs, Diligent eliminates spreadsheet chaos and empowers teams to focus on actual security—not documentation.\r\n\r\n \r\n\r\nPurpose-Built for Complex Cybersecurity Compliance\r\n\r\nDiligent delivers deep automation and pre-configured workflows for:\r\n\r\n- FedRAMP (Low, Moderate & High)\r\n- DOD / DISA Impact Levels (2, 4, 5)\r\n- CMMC (Level 1, 2 and beyond)\r\n- NIST 800-53, NIST 800-171, SOC 2, and ISO 27001 and other major compliance frameworks\r\n- Support for custom frameworks and policy libraries\r\n \r\n\r\nCore Capabilities\r\n\r\n- Live SSP and ATO Package Management\r\n- Automatically generates and maintains OSCAL and human-readable SSPs. Track versioning, delta changes, and live control status from a single system.\r\n- Automated POA&M Generation and Updates\r\n- POA&Ms are created directly from scan data, control testing, or manual input. Linked to owners, evidence, due dates, and tracked in real time with alerting.\r\n- Continuous Monitoring, ConMon & Risk Insights\r\n- Real-time dashboards ingest data from 130+ tools including vulnerability scanners, cloud providers, HR systems, and ticketing platforms. Evidence collection is automatic and centralized for audit readiness.\r\n-Control Inheritance and Framework Mapping\r\n-Cross-map and inherit controls across frameworks. “Write once, apply many” saves time and ensures consistency for multi-standard organizations.\r\n-Multi-Tenant Partner and Reseller Enablement\r\n-Native support for MSSPs, C3PAOs, and resellers. Role-based access, tenant-level data separation, and white-labeled deployments available.\r\n-API and Integration Ecosystem\r\n-With over 130 out-of-box integrations and a robust open API, Diligent connects seamlessly to your stack—cloud, on-prem, or hybrid.\r\n \r\n\r\nDeployment & Security\r\n\r\n- Hosted on AWS GovCloud with three available options: FedRAMP moderate (primarily SLED), FedRAMP moderate and DOD IL5 (primarily for - Federal and some DOD), and FedRAMP moderate and DOD IL for DOD only (requires DoDIN access).\r\n- Built with security-first architecture, supporting unique customer keys, data segregation, and FIPS 140-2 validated encryption.\r\n \r\n\r\nWhat Sets Diligent Apart\r\n\r\n- FedRAMP, DOD and CMMC are core, not bolt-ons—we’ve built workflows around these frameworks from the ground up.\r\n- Automation beyond templates—real-time evidence ingest, compliance task enforcement, and live control dashboards.\r\n- Used by regulators, 3PAOs, integrators, and contractors—proven across the full compliance ecosystem.\r\n-Designed to scale—whether you’re managing 1 ATO or 50, Diligent supports your growth.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@diligent.com", "website": "https://www.diligent.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Governance, Risk, and Compliance (GRC)", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1805752046", "name": "Distributed Solutions, Inc.", "cloud_service_provider": "Distributed Solutions, Inc.", "cloud_service_offering": "AEON", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DSI%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-05-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-09-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-04-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-05-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-09-28T20:00:00.000Z", "cert_date": "2019-04-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Office of Justice Programs", "fedramp_auth": "2019-04-08T20:00:00.000Z", "annual_assessment": "2011-09-28T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "Federal Election Commission", "Federal Energy Regulatory Commission", "Library of Congress", "National Science Foundation" ], "agency_reuse": [ "" ], "service_description": "AEON is a powerful business process automation and management Software as a Service (SaaS) developed by Distributed Solutions, Inc. (DSI) that solves complex business process needs across the Government. AEON has been successfully deployed for Program Office Management, Project Budgeting and Planning, Document Generation, Complete Acquisition Lifecycle Management, Contract Writing, Invoice and Deliverable Tracking, Grants and Audit Management, Vendor Engagement, and Collaboration Portals.\n\nAEON solutions provide no-code dynamic configurations, rapid implementation, and on-demand customer business process change. AEON's sophisticated modern software design enables seamless version upgrades guaranteed to maintain business process continuity and integration survivability while delivering new features. The AEON SaaS eliminates stovepipes across an enterprise by delivering common data standards, business processing rules, collaboration, and shared integrations; this design facilitates cost-effective scaling of multiple solutions on the same platform.\n\nAEON automates and modernizes business offices through the agile implementation of customer best practices, unique policies, Federal regulations (FAR/DFARS), stakeholder collaboration, digital signatures, workflows, evaluations, and other process management needs. Data can be accessed for real-time decision-making, business intelligence, interactive dashboards, and executive reporting.\n\nAvailable as an end-to-end solution, AEON is also capable of assisting customers seeking to improve their business process while maximizing existing investments in technology and human capital. AEON can leverage current customer environments to fill known gaps in legacy business tools and deliver significant process improvements. DSI's AEON software platform is built on the Microsoft stack for industry leading technology, performance, security, and maintenance. DSI partners with Project Hosts to deliver the AEON Solution in a FedRAMP compliant cloud hosted on Microsoft's world-class Azure Government infrastructure.", "fedramp_msg": "N/A", "sales_email": "sales@distributedinc.com", "security_email": "dsisecurity@distributedinc.com", "website": "https://distributedinc.com/", "uei": "YZP2G9722L48", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Content Management System (CMS)", "Data Management", "Legal & Policy", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2000951694", "name": "DLH Corporation", "cloud_service_provider": "DLH Corporation", "cloud_service_offering": "DLH Infinibyte Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DLH%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-02-19T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-09-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2021-09-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-03-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2020-02-19T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-09-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-09-21T20:00:00.000Z", "cert_date": "2022-03-16T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Institutes of Health", "fedramp_auth": "2022-03-16T20:00:00.000Z", "annual_assessment": "2011-09-21T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "National Institutes of Health" ], "agency_reuse": [ "" ], "service_description": "Infinibyte Cloud is a secure, flexible, and highly available public cloud platform-as-a-service (PaaS) that allows customers to host federal applications in a FedRAMP Moderate compliant environment. Infinibyte Cloud is a multi-tenant hosting platform that provides comprehensive managed solutions including the setup, configuration, security hardening, management, patching, monitoring, scanning, backup, and support of customer environments comprised of virtual machines, operating systems, and databases. The information security architecture leverages \"defense in depth\" concepts to provide multiple layers of security controls for customer systems. Infinibyte Cloud supports a number of operating systems, databases, services, and applications, including Microsoft Windows Server, Red Hat Enterprise Linux, AlmaLinux, Microsoft Active Directory, Microsoft SQL Server, Oracle Database, MySQL, MongoDB, Microsoft IIS, Apache HTTP Server.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@infinibytecloud.com", "website": "https://www.dlhcorp.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2424945160", "name": "dMetrics", "cloud_service_provider": "dMetrics", "cloud_service_offering": "Minsky No-code ML/NLP Knowledge Graphing Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Dmetrics%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-06-07T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-08-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-09-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-06-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-08-20T20:00:00.000Z", "cert_date": "2025-09-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Technical Information Center", "fedramp_auth": "2025-09-24T20:00:00.000Z", "annual_assessment": "2011-08-07T04:00:00.000Z", "independent_assessor": "ControlCase", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency" ], "agency_reuse": [ "" ], "service_description": "Minsky No-code ML/NLP Knowledge Graphing Platform allows analysts to create personalized ML agents that continuously scan large PAI/CAI datasets on their behalf. Minsky identifies and extracts entities, actions, and flashpoints relevant to the analyst's AoR. Minsky learns from each analyst in order to deliver answers that align with the SMEs' understanding of threat network behavior, sidestepping the need for technical middlemen and radically reducing the flash to bang of data science. Minsky operates in all DoD priority languages, ensuring that non-technical SMEs can track global threat networks, identify risk in supply chains, perform literature and budgetary review, and analyze other text data of their choosing.", "fedramp_msg": "N/A", "sales_email": "sales@dmetrics.com", "security_email": "security-ps@dmetrics.com", "website": "https://dmetrics.com/", "uei": "LFYVK791N3X1", "small_business": true, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Data Management", "Education & Training", "Grant Management", "Health & Wellness", "Law Enforcement", "Operations Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1814557199", "name": "DNAnexus, Inc.", "cloud_service_provider": "DNAnexus, Inc.", "cloud_service_offering": "DNAnexus Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DNAnexus%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-02-21T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-06-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-10-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-02-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-06-18T20:00:00.000Z", "cert_date": "2018-10-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-10-15T20:00:00.000Z", "annual_assessment": "2011-06-18T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "PaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Health and Human Services", "Food and Drug Administration", "National Cancer Institute" ], "agency_reuse": [ "" ], "service_description": "The DNAnexus Platform is a public cloud analysis and data management platform for processing high-throughput molecular data; for combining molecular, clinical, and real-world data to discover relationships relevant to patient and population health, precision medicine, drug discovery and regulatory approval; and for enabling a network of government, academic, and commercial collaborators to securely form research communities. DNAnexus presents a Platform-as-a-Service including a brandable, customizable web interface, and an API for integration with upstream and downstream systems such as Laboratory Information Management, Clinical Trial Management, Electronic Data Capture, and clinical interpretation and reporting systems.\n\nPrecision.FDA.gov (https://precision.fda.gov/) the FDA's web service for collaborative advancement of regulatory standards for Next Generation Sequencing-based drugs and devices, is enabled by the DNAnexus Platform API, leveraging the Platform's secure and compliant analysis and data management services to deliver a fit-for-purpose interface to a secure community of researchers from government, academic, and commercial sectors.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "compliance@dnanexus.com", "website": "https://www.dnanexus.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2432940371", "name": "Docebo", "cloud_service_provider": "Docebo", "cloud_service_offering": "Docebo Learning Platform for Gov (DCBO-GOV)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Docebo%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-10-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-04-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-10-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-04-17T20:00:00.000Z", "cert_date": "2025-05-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-05-21T20:00:00.000Z", "annual_assessment": "2011-04-17T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "DCBO-GOV is delivered as a Learning Management System (LMS) SaaS offering that empowers the organization, deployment, and reporting of training and learning opportunities using a multi-tenant Government-Only Cloud computing environment hosted within AWS GovCloud. It is available to federate, state, local, and tribal governments, their agencies, and associated contractors as well as federally funded research centers (FFRDCs) or lab entities.", "fedramp_msg": "N/A", "sales_email": "fedrampsales@docebo.com", "security_email": "fedrampsecurity@docebogov.org", "website": "https://www.docebo.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Content Management System (CMS)", "Education & Training", "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2419537309", "name": "DocketScope, Inc.", "cloud_service_provider": "DocketScope, Inc.", "cloud_service_offering": "DocketScope®", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DOK%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-06-21T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-09-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-06-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-09-30T20:00:00.000Z", "cert_date": "2025-04-16T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-16T20:00:00.000Z", "annual_assessment": "2011-09-30T04:00:00.000Z", "independent_assessor": "SteelToad", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Centers for Medicare & Medicaid Services", "Department of Education", "Department of Veterans Affairs", "National Oceanic and Atmospheric Administration" ], "agency_reuse": [ "" ], "service_description": "Regulatory agencies use DocketScope® software to analyze public comments received as part of notice-and-comment rulemaking and other government agency actions, such as requests for information. Our SaaS product automatically loads comments from Regulations.gov and other sources, including FDMS extracts, identifies identical and similar comments, tags comments containing keywords, and highlights differences between similar comments. Users categorize comment submissions (e.g., unique, duplicate, or form letter, commenter type, etc.), manage an outline of issues raised by commenters, and map substantive text from comments to those issues with just a few clicks. Automation and optional AI support users to maximize accuracy and efficiency. DocketScope’s dashboard delivers real-time visibility of progress and findings. Users also can easily generate a variety of standard or tailored reports. DocketScope empowers agencies by simplifying the analysis of public comments, increasing staff productivity and improving quality.", "fedramp_msg": "N/A", "sales_email": "sales@docketscope.com", "security_email": "security@docketscope.com", "website": "https://www.docketscope.com/", "uei": "RU58TJ58LXF7", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Data Management", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2528336463", "name": "Document Storage Systems, Inc. (DSS, Inc.)", "cloud_service_provider": "Document Storage Systems, Inc. (DSS, Inc.)", "cloud_service_offering": "DSS Health Cloud (DSSHC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DSS%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-08-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-07-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-08-28T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-06-15T20:00:00.000Z", "cert_date": "2026-07-27T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-07-27T20:00:00.000Z", "annual_assessment": "2011-06-09T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "DSS Health Cloud is delivered as a PaaS/SaaS offering using a multitenant Government-Only Cloud computing environment. It is available to VA Hospital system(s). As a cloud-based solution hosted in AWS GovCloud, the DSS Health Cloud provides to VA Clinicians, Administrators, Managers, and Users the TeleCare Record Management Plus-Clinical Triage (TRMW), Patient Case Manager High Reliability Organization (PCM HRO/VSPM), RxTracker (RTVX), and Juno EHR (JEHR) applications for the purpose of conducting clinical and administrative activities in a reliable and high-security federal cloud environment.\n\nSaaS\nThe following SaaS applications are provided within the DSS Health Cloud solution.\n\nTeleCare Record Manager Plus-Clinical Triage (TRMW) is a web based application that provides VHA healthcare facilities with an intuitive, user-friendly interface for telecare triage providers. TRM Plus-CT creates progress notes which are then seamlessly incorporated into the patient’s existing EHR.\n• Centralized web-based interface which allows users to access all VistA facilities from a single interface.\n• Enterprise-wide ad hoc analytics that delivers reporting at the local, VISN, or enterprise level.\n• Seamlessly integrated with VistA Scheduling Enhancements (VSE) to allow creation, update, and cancelation of appointments.\n• Is VA Technical Reference Model compliant.\nPatient Case Manager High Reliability Organization (PCM HRO) standardizes workflows and combines data visualization tools and analytics to reduce Veteran suicide prevention care variation and impact Mental Health SAIL metrics.\n• Actively monitors suicide prevention processes, performance, and outcomes.\n• Automates data capture and reporting to prevent lapses in care.\n• Improves transparency in the management of high-risk patients across the enterprise\n• Automates identification and escalation of scenarios requiring intervention.\n• Automates case load reporting and changes over time.\nWith PCM, hospitals leverage real-time data and analytics for greater oversight and more effective, standardized workflows. Providers will save time, reduce medical errors, and ensure every patient receives the care and satisfaction they deserve.\n• Improve Patient Safety\n• • Monitor Quality and Performance\n• • Maximize Patient Throughput with the Patient Flow Module\n\nRxTracker is a single, comprehensive ePrescribing solution that gives providers the ability to effectively perform their full clinical workflow for all care settings: inpatient, outpatient, and ambulatory.\n1. Proactive and Reactive Patient Safety Alerts\n2. EPCS\n3. Metrics, Reporting, and Auditing\n\nJuno EHR is a cloud-based electronic health record suite of applications that automates administrative and clinical workflows within a healthcare organization. The solution provides features to manage all aspects of patient care such as scheduling, registration, clinical notes, order entry, and electronic prescription.\nAll DSS Health Cloud Software applications, with their corresponding components, are hosted within the SaaS authorization boundary. Applications are VA VistA integrated and follow a role-based design model. Using the VA provided and managed PIV smart card, users are authenticated through the VA Identity Authentication Management System (IAM). During the login authentication process, users with active and valid credentials are logged into the application following all FedRAMP High, VA, and organization protocols. All web transactions and data transmissions between the applications and the integrated VistA database go through a VPC/Palo Alto Firewall into the VA Network. The VPC/Palo Alto firewall controls access and monitors LS 1.2 CI/CD pipelines, external services, communication with the VA Network, and with the internet.\nSoftware application input activities are recorded into audit logs, which meet the FedRAMP high-security level as well as DSS organizational auditing security standards. All audit logs are collected by the Splunk SIEM tool, which triggers near-real-time alerts and notifications to DSS Health Cloud Engineers for analysis and continuous monitoring. Logs are stored within the FedRAMP authorization boundary into S3 buckets for seven years for after-the fact investigations of security incidents and to meet regulatory and organizational information retention requirements.\n\nPaaS\nDSS Health Cloud offers the VA hospital Systems a robust and secure multi-tenant PaaS platform that allows flexible integration with other VA vendors' software applications.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "cyberops@dssinc.com", "website": "https://www.dssinc.com/", "uei": "EJL2XFJ1BZJ1", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Health & Wellness", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1605027893", "name": "DocuSign", "cloud_service_provider": "DocuSign", "cloud_service_offering": "DocuSign CLM", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DocuSign%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-05-03T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-05-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-08-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 42, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-05-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-05-19T20:00:00.000Z", "cert_date": "2017-08-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Animal and Plant Health Inspection Service", "fedramp_auth": "2017-08-24T20:00:00.000Z", "annual_assessment": "2011-08-26T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "F1605027893", "csp": "DocuSign", "cso": "DocuSign CLM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1609267945", "csp": "DocuSign", "cso": "Docusign - IAM eSignature", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Bureau of Land Management", "Department of Agriculture", "Federal Aviation Administration", "National Endowment for the Arts" ], "agency_reuse": [ "22-005", "22-005-01", "22-005-02", "22-005-08", "22-005-09", "22-007-03", "22-007-11", "22-007-22", "22-011", "22-011-01", "22-011-02", "22-011-06", "22-011-10", "22-014-02", "22-014-06", "22-016-03", "22-017-08", "22-017-12", "22-018", "22-019", "22-021-06", "22-023", "22-027-06", "22-027-07", "22-030", "22-032", "22-034", "22-036", "22-039", "22-042", "22-044", "22-055", "22-060", "22-061", "22-068" ], "service_description": "DocuSign CLM is a secure contract lifecycle management product in DocuSign's Agreement Cloud. DocuSign CLM manages contracts in addition to all other types of documents across desktop, mobile, and partner applications like Salesforce. DocuSign CLM goes beyond standard document and contract management with advanced workflows that automate manual tasks and complex processes to speed time-to-revenue. Businesses use DocuSign CLM to optimize collaboration and processes across internal departments, as well as with prospects and customers.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "FedRAMP@DocuSign.com", "website": "https://www.docusign.com/products/clm", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1609267945", "name": "DocuSign", "cloud_service_provider": "DocuSign", "cloud_service_offering": "Docusign - IAM eSignature", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DocuSign%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2016-10-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-06-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-08-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 35, "reuse": 49, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2016-10-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-06-28T20:00:00.000Z", "cert_date": "2017-08-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2017-08-10T20:00:00.000Z", "annual_assessment": "2011-07-14T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2311952621", "csp": "Ernst & Young LLP", "cso": "EY Grants Accelerator", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2032565438", "csp": "Kahua, Inc.", "cso": "Kahua Government Network", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2516365096", "csp": "Procore Technologies, Inc", "cso": "Procore for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families", "Agency for Healthcare Research and Quality", "Bureau of Engraving and Printing", "Department of Commerce", "Department of Health and Human Services", "Department of Labor", "Department of State", "Department of Veterans Affairs", "Drug Enforcement Administration", "Federal Aviation Administration", "Federal Communications Commission", "Federal Deposit Insurance Corporation", "First Responder Network Authority", "Food and Drug Administration", "General Services Administration", "Health Resources and Services Administration", "Interior Business Center", "Los Alamos National Laboratory", "National Aeronautics and Space Administration", "National Endowment for the Arts", "National Institute of Standards and Technology", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "National Telecommunications and Information Administration", "Nuclear Regulatory Commission", "Office of Financial Research", "Other Federal Entity", "Pension Benefit Guaranty Corporation", "Pipeline and Hazardous Materials Safety Administration", "Strategic Petroleum Reserve", "Tennessee Valley Authority", "United States Army", "United States Census Bureau", "Universal Service Administrative Company" ], "agency_reuse": [ "22-007", "22-007-03", "22-007-09", "22-011-02", "22-014-02", "22-019", "22-024", "22-025", "22-036", "22-042", "22-067" ], "service_description": "DocuSign is a San Francisco- and Seattle-based company that provides electronic signature technology and Digital Transaction Management services to facilitate electronic exchanges of contracts and signed documents. DocuSign's features include authentication services, user identity management and workflow automation. Signatures processed by DocuSign are comparable to traditional signatures based on the product's compliance with the ESIGN Act as well as the European Union's Directive 1999/93/EC on electronic signatures. DocuSign Federal is a SaaS application oriented towards federal government entities. Operated and managed as a government community cloud, DocuSign Federal provides government customers with an enterprise signing service to facilitate paperless workflow management. More information about DocuSign Federal can be found at https://www.docusign.com/federal (https://www.docusign.com/solutions/industries/government/federal).", "fedramp_msg": "N/A", "sales_email": "", "security_email": "FedRAMP@DocuSign.com", "website": "https://www.docusign.com/solutions/industries/government/federal", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2600167032", "name": "Drata", "cloud_service_provider": "Drata", "cloud_service_offering": "Drata Trust Management Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Drata%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-10-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-11-21T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2025-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-10-02T20:00:00.000Z", "ip_prog_date2": "2025-11-21T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2025-12-05T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-12-05T20:00:00.000Z", "annual_assessment": "2011-12-12T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "The Drata Trust Management Platform automates and centralizes governance, risk, compliance (GRC) and trust management for over 8,000 organizations worldwide, from emerging startups to large enterprises across technology, government, financial services, and healthcare. The platform supports the following capabilities: automated compliance monitoring and evidence collection for 26+ frameworks including FedRAMP 20x KSIs; policy management and automated policy distribution and acknowledgement; risk management, providing end-to-end automation and visibility for risk identification, assessment, treatment, and monitoring; Vendor Risk Management (VRM) including centralized vendor onboarding, monitoring, risk scoring, and reporting; cross-mapping of controls across multiple frameworks and Drata’s Control Framework (DCF); Audit Hub to consolidate auditor communication and facilitate real-time audit feedback from a 3PAO; open API for integrations, custom workflows, and support for custom GRC engineering; compliance-as-code (CaC); User Access Reviews (UAR); dashboards for compliance and risk metrics; available integrations with 300+ major SaaS, cloud, and productivity tools to monitor controls compliance; enterprise Trust Center providing public/private portals for sharing security and compliance posture with customers and prospects, and a modern GRC (Governance, Risk, Compliance) platform with scalable enterprise features supporting public- and private-sector needs. The company was founded in 2020 and is headquartered in San Diego, CA.", "fedramp_msg": "", "sales_email": "federal@drata.com", "security_email": "security@drata.com", "website": "https://drata.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Governance, Risk, and Compliance (GRC)", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1507136931A", "name": "Druva, Inc.", "cloud_service_provider": "Druva, Inc.", "cloud_service_offering": "Druva Data Resiliency Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Druva%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-09-19T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-05-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 13, "reuse": 12, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-09-19T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-05-04T20:00:00.000Z", "cert_date": "2025-03-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-26T20:00:00.000Z", "annual_assessment": "2011-05-28T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Corporation for National & Community Service", "Council of the Inspectors General on Integrity and Efficiency", "Federal Aviation Administration", "Federal Deposit Insurance Corporation", "National Aeronautics and Space Administration", "National Cancer Institute", "National Oceanic and Atmospheric Administration", "National Science Foundation", "Office of Financial Research", "Strategic Petroleum Reserve", "United States Geological Survey", "United States International Trade Commission", "VA Office of the Inspector General" ], "agency_reuse": [ "" ], "service_description": "Druva is a leading provider of data security and cyber resilience solutions, delivering a true cloud-native, fully managed SaaS platform for secure, air-gapped, zero trust, and immutable data protection across cloud, on-premises, and edge environments. Leveraging AWS GovCloud, Druva’s FedRAMP-authorized solution provides secure backup and disaster recovery while meeting strict U.S. government compliance standards. By centralizing data protection in a single platform, Druva strengthens incident response, cyber remediation, ransomware recovery and governance to help organizations reduce risk, cut costs, and simplify operations.", "fedramp_msg": "", "sales_email": "FederalSales@druva.com", "security_email": "Security@druva.com", "website": "https://www.druva.com/brand", "uei": "QKJDN5BY3KV7", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2410060106", "name": "DTEX Systems, Inc.", "cloud_service_provider": "DTEX Systems, Inc.", "cloud_service_offering": "DTEX InTERCEPT for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DTEX%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-08-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-07-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-09-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-08-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-07-30T20:00:00.000Z", "cert_date": "2025-09-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-09-11T20:00:00.000Z", "annual_assessment": "2011-07-30T04:00:00.000Z", "independent_assessor": "Linford & Company", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Energy Regulatory Commission", "Federal Trade Commission" ], "agency_reuse": [ "" ], "service_description": "The DTEX InTERCEPT for Government platform is a SaaS offering that combines Data Loss Prevention, User Behavior Analysis, and User Activity Monitoring to detect and mitigate insider risks before data loss occurs, enabling agencies to meet the requirements of the CNSSD 504 directive for UAM with built-in UEBA. \n\nDTEX InTERCEPT for Government ingests behavioral telemetry into the platform, and uses data science and AI to surface early-warning indicators for detecting and deterring insider risks.", "fedramp_msg": "N/A", "sales_email": "gov@dtexsystems.com", "security_email": "fedramp@dtexsystems.com", "website": "https://dtexsystems.com/", "uei": "RNMZVVMLJVC4", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1823149273", "name": "Duo Security (a Cisco Company)", "cloud_service_provider": "Duo Security (a Cisco Company)", "cloud_service_offering": "Duo Federal", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Duo%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-11-07T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-08-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-11-15T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 15, "reuse": 263, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-11-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-08-16T20:00:00.000Z", "cert_date": "2019-11-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-11-15T20:00:00.000Z", "annual_assessment": "2011-08-11T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "F1302201919", "csp": "Acquia Inc.", "cso": "Acquia Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2031222637", "csp": "Aurigo Software Technologies, Inc.", "cso": "Masterworks Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814168113", "csp": "Authentic8, Inc.", "cso": "Silo", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918442180", "csp": "Bizagi Corp.", "cso": "Bizagi Cloud for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125059322", "csp": "Center for Translational Data Science (CTDS)", "cso": "Gen3 Data Ecosystems Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2220549818", "csp": "CirrusMD", "cso": "CirrusMD Virtual Health Chat for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2518163100", "csp": "Cisco", "cso": "Spaces for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1823368486", "csp": "Cisco AppDynamics", "cso": "AppDynamics GovAPM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1511207635", "csp": "Cisco Systems Inc.", "cso": "Webex for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2315535023", "csp": "Cisco Systems Inc.", "cso": "Cisco Meraki US Government Region", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2523656707", "csp": "Cisco Systems, Inc.", "cso": "Cisco ThousandEyes for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029183077", "csp": "Cority Software Inc.", "cso": "CorityOne", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416263030", "csp": "CrestPoint Solutions, Inc", "cso": "CrestPoint Environmental Management Service (CEMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2016131254", "csp": "Dynatrace", "cso": "Dynatrace Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2016962740", "csp": "Eightfold AI Inc.", "cso": "Eightfold Talent Intelligence Platform (TIP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1311252651", "csp": "ESRI", "cso": "Esri Managed Cloud Services Advanced Plus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1827963145", "csp": "Exterro, Inc.", "cso": "Exterro E-Discovery and Legal Software Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324454026", "csp": "FM:Systems", "cso": "OpenBlue Workplace", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1834348080", "csp": "GDC Integration, Inc.", "cso": "General Support System (GSS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2210851632", "csp": "GetWellNetwork", "cso": "GetWellNetwork - Get Well Anywhere - Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1800263217", "csp": "Innovative Discovery, LLC", "cso": "Innovative Driven Government Cloud (IDGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2104636677", "csp": "Ipsos America, Inc.", "cso": "Ipsos Research", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2032565438", "csp": "Kahua, Inc.", "cso": "Kahua Government Network", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406453618", "csp": "LabArchives", "cso": "LabArchives for Government (LG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2229642430", "csp": "Lumen", "cso": "Cloud Contact Center", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2119265538", "csp": "NEOGOV", "cso": "NEOGOV Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1508127183", "csp": "NetComm", "cso": "Beacon", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2028977567", "csp": "NetDocuments Software, Inc.", "cso": "NetDocuments Document Management System (DMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2231648178", "csp": "Onspring Technologies, LLC", "cso": "Onspring GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2526948870", "csp": "Ontic Technologies", "cso": "Ontic for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2215946050", "csp": "OpenText", "cso": "ITMX Platform featuring Service & Asset Management, Universal Discovery, CMDB and Project & Portfolio Management", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2322855016", "csp": "ProjectTeam, Inc.", "cso": "ProjectTeam for Government (Construction Project and Program Management)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1733061545", "csp": "R&K Solutions, Inc", "cso": "GoRPM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2001938710A", "csp": "SailPoint Technologies, Inc.", "cso": "SailPoint Identity Security Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2210352243", "csp": "SAS Institute, Inc.", "cso": "SAS AI and Analytics for Government on FedRAMP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2028958787", "csp": "Signature Performance, Inc.", "cso": "ClaimsXM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2035740126", "csp": "Sprinklr, Inc.", "cso": "Sprinklr CXM for Government (CXM)", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1918740338", "csp": "Sumo Logic", "cso": "Sumo Logic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134635186", "csp": "Synack", "cso": "On-Demand Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1912051231", "csp": "TechTrend, Inc.", "cso": "Federal GovCloud (FGC) DevSecOps", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2118555665", "csp": "Totara Learning Inc.", "cso": "Totara Talent Development Government Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226228379", "csp": "Trend Micro Inc.", "cso": "Trend Cloud One for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421252636", "csp": "Varonis", "cso": "Varonis Data Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2312052740", "csp": "VLogic Systems, Inc.", "cso": "VLogicFM", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" } ], "agency_authorizations": [ "Argonne National Laboratory", "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Department of Energy", "Department of State", "Department of Veterans Affairs", "FHFA Office of the Inspector General", "Federal Deposit Insurance Corporation", "Federal Housing Finance Agency", "National Mediation Board", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "Treasury Inspector General for Tax Administration", "US Fish and Wildlife Service", "United States Agency for International Development", "United States Trade and Development Agency" ], "agency_reuse": [ "" ], "service_description": "Duo’s Federal Editions can verify the identity of users with secure and easy to use two-factor authentication methods that helps public sector entities satisfy NIST 800-63-3 and 53/63/171 authentication requirements. In addition to verifying users’ identities, Duo’s solution checks the security health of every device authenticating into the environment, at the time of access. Admins can use Duo to enforce stricter device and application access policies, such as blocking login requests based on location or anonymous networks. Duo ensures only trusted users and devices can access protected applications. This complete security solution prevents modern attackers that often target multiple areas - including credential theft and the exploitation of known software vulnerabilities affecting outdated software versions.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "cisco-fedramp@cisco.com", "website": "https://duo.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2016131254", "name": "Dynatrace", "cloud_service_provider": "Dynatrace", "cloud_service_offering": "Dynatrace Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Dynatrace%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-04-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-06-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-07-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 13, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-04-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-06-16T20:00:00.000Z", "cert_date": "2020-07-27T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-07-27T20:00:00.000Z", "annual_assessment": "2011-06-16T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2234963115", "csp": "NCR Government, LLC", "cso": "NCR VOYIX GOVERNMENT CLOUD", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603077867", "csp": "SMX (Formerly Smartronix)", "cso": "Elevate Intelligent Automation Platform (IAP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213647361", "csp": "Talkdesk", "cso": "Talkdesk CX Cloud™ Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Argonne National Laboratory", "Department of Commerce", "Department of Energy", "Department of State", "Drug Enforcement Administration", "Federal Aviation Administration", "Federal Communications Commission", "Nuclear Regulatory Commission", "Social Security Administration" ], "agency_reuse": [ "22-005-06", "22-005-12", "22-016-18", "22-034", "22-045" ], "service_description": "Dynatrace exists to make software work perfectly. Our platform combines broad and deep observability and continuous runtime application security with advanced AIOps to provide answers and intelligent automation from data. This enables agencies to modernize and automate cloud operations, deliver software faster and more securely, and ensure flawless digital experiences.", "fedramp_msg": "N/A", "sales_email": "willie.hicks@dynatrace.com", "security_email": "team-devops-fedramp@dynatrace.com", "website": "https://www.dynatrace.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1603307884", "name": "e-Builder, A Trimble Company", "cloud_service_provider": "e-Builder, A Trimble Company", "cloud_service_offering": "Trimble Unity Construct Government Edition", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Trimble%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-05-08T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-10-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2022-09-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-08-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2019-05-08T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-10-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-09-14T20:00:00.000Z", "cert_date": "2023-08-30T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-08-30T20:00:00.000Z", "annual_assessment": "2011-09-14T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "Trimble Unity Construct Government Edition, powered by e-Builder, is a cloud-based construction program management solution for capital projects that delivers trusted insight into performance across the entire project lifecycle. Designed to help facility owners and those who act on their behalf throughout the entire construction lifecycle, Trimble Unity Construct provides the capabilities below in one integrated suite:\r\n\r\n-Capital Planning\r\n-Cost Management and Controls\r\n-Process Automation\r\n-Reports and Dashboards\r\n-Scheduling\r\n-Document Management\r\n-Resource Management\r\n-Collaborative Communication", "fedramp_msg": "N/A", "sales_email": "e-builderfedramp@trimble.com", "security_email": "e-builderfedrampsecurity@trimble.com", "website": "https://e-builder.net/", "uei": "XLRUKJJEFMD1", "small_business": false, "business_categories": [ "Construction" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1301251880", "name": "Economic Systems", "cloud_service_provider": "Economic Systems", "cloud_service_offering": "Economic Systems Federal Human Resources Navigator", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/EconSys%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2013-06-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2014-05-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 23, "reuse": 22, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2013-06-26T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2014-05-01T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2014-05-01T20:00:00.000Z", "annual_assessment": "2011-04-13T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Cybersecurity & Infrastructure Security Agency", "DHS Headquarters", "DOJ Office of the Inspector General", "Defense Information Systems Agency", "Department of Energy", "Department of Health and Human Services", "Department of the Interior", "Drug Enforcement Administration", "Environmental Protection Agency", "Federal Aviation Administration", "Federal Deposit Insurance Corporation", "Federal Housing Finance Agency", "Federal Law Enforcement Training Centers", "Federal Retirement Thrift Investment Board", "Federal Trade Commission", "General Services Administration", "Library of Congress", "Office of Personnel Management", "Office of the Comptroller of the Currency", "Peace Corps", "Pension Benefit Guaranty Corporation", "Surface Transportation Board" ], "agency_reuse": [ "" ], "service_description": "FedHR Navigator provides U.S. Federal agencies with human resources (HR) tools and utilities that are tailored to the needs and requirements of the U.S. Federal government. FedHR Navigator is available to agency customers as a subscription and allows for agencies to choose what parts of the application to purchase. The application allows users to create forms and cases and route them through the agency's business process. The application also features specialized tools to support Federal HR including our retirement benefits calculator, PD+, our position management repository, and supports integrations with Federal government systems. FedHR Navigator supports talent acquisition, position management and classification, performance management, awards, personnel actions, benefits, retirement, separation, employee and labor relations, and workforce planning. FedHR also features specialized reporting and data visualization for Diversity, Equity, Inclusion and Accessibility.", "fedramp_msg": "Economic Systems Federal Human Resources Navigator previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "sales@econsys.com", "security_email": "support@econsys.com", "website": "https://www.econsys.com/fedhr-navigator/", "uei": "RUG6TVTY19U9", "small_business": true, "business_categories": [ "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2023601671", "name": "eGain Corporation", "cloud_service_provider": "eGain Corporation", "cloud_service_offering": "eGain Suite", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/eGain%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-06-03T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-06-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-12-15T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-06-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-06-03T20:00:00.000Z", "cert_date": "2021-12-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Internal Revenue Service", "fedramp_auth": "2021-12-15T20:00:00.000Z", "annual_assessment": "2011-06-03T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "Internal Revenue Service" ], "agency_reuse": [ "" ], "service_description": "eGain Suite is delivered as a SaaS offering using a multi-tenant Government\r\nOnly cloud computing environment. It is available to federal, state, local, and\r\ntribal governments, as well as research institutions, federal contractors,\r\ngovernment contractors.\r\n\r\nThe eGain Suite includes the following applications:\r\n\r\n• eGain Chat is a real-time chat assistance to website visitors.\r\n\r\n• eGain Cobrowse allows agents to provide real-time assistance to customers. Agent can share and co-navigate HTML and JavaScript content via web browser with a customer to provide support.\r\n\r\n• eGain CallTrack is a case management solution for the resolution of customer issues with call taking, logging, and tracking capability.\r\n\r\n• eGain Mail+Social handles large volumes of email, webform, and social inquiries with automated routing, workflows. Letter and fax interactions are also handled in this service, with PDF-based output.\r\n\r\n• eGain Secure Messaging is a secure email messaging system that authenticates the customer before allowing the viewing of confidential information.\r\n\r\n• eGain Knowledge+AI is a knowledge management software including AI that provides agents and other users answers from a common knowledge base using AI technologies including generative AI.\r\n\r\n• eGain SelfService+AI provides self-service experiences that enable customer self-service and enables context-aware escalations to live customer service agents if required by the customer. This service also uses eGain Knowledge+AI for delivery of article information.\r\n\r\n• eGain Virtual Assistant is a virtual agent providing a way for users to get answers and assistance on an organization’s website. A user chats with the virtual assistant (also called virtual agent or chatbot). The chatbot provides answers to any queries input within the chatbot.\r\n\r\n• eGain AI Agent is an interactive generative AI tool using chatbot capability. It will provide answers (on approved knowledge sources) and present them inside the chatbot to the user/agent. It will ask clarification questions to ensure it provides the right answers and context to the user/agent.\r\n\r\n• eGain Notify, enables outbound notification messages to customers.\r\n\r\n• eGain Offers uses browsing behavior and other attributes, to proactively serve a targeted offer to website visitors.\r\n\r\n• eGain Contact Center Analytics is an analytics tool to measure, manage, interactions within contact centers with customers.\r\n\r\n• eGain Advisor Desktop is a desktop for contact center agents.", "fedramp_msg": "N/A", "sales_email": "marketingteam@egain.com", "security_email": "fedrampinfosec@egain.com", "website": "https://www.egain.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Collaboration", "Communication", "Contact Center", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Customer Service" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2024952734", "name": "Egnyte, Inc", "cloud_service_provider": "Egnyte, Inc", "cloud_service_offering": "EgnyteGov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Egnyte%20Logo4.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-12T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-06-26T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The EgnyteGov Software as a Service (SaaS) solution is a US Government-Only collaboration and enterprise file synchronization and sharing Software as a Service (SaaS) application. The Egnyte platform consists of two (2) utilities; Egnyte Connect and Egnyte Protect, together these make up the entirety of the platform.\nThe Egnyte Connect \nThe Egnyte Connect service hosts the collaboration and integration portions of the EgnyteGov SaaS Solution, enabling customers to implement their individual business processes, leveraging a variety of available integrations for business applications. \nEgnyte Protect\nEgnyte Protect service is a Content Governance solution enabling IT teams to analyze and classify content, facilitate problem mitigation, and protect an organization’s information while complying with regulatory requirements. Egnyte Protect provides unstructured data classification and customizable rules to protect the privacy of customers, employees, and partners, as well as an organization’s intellectual property.", "fedramp_msg": "N/A", "sales_email": "Fedramp@egnyte.com", "security_email": "FedRAMP_Security@Egnyte.com", "website": "https://www.egnyte.com/products/governance", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Data Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2016962740", "name": "Eightfold AI Inc.", "cloud_service_provider": "Eightfold AI Inc.", "cloud_service_offering": "Eightfold Talent Intelligence Platform (TIP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Eightfold%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-02-24T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2023-03-03T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2024-03-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": "2022-02-24T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-03-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-03-04T20:00:00.000Z", "cert_date": "2025-04-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-10T20:00:00.000Z", "annual_assessment": "2011-01-29T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency", "Defense Innovation Unit" ], "agency_reuse": [ "" ], "service_description": "The Eightfold Talent Intelligence Platform (TIP) is a SaaS solution that uses advanced AI to optimize every phase of the talent lifecycle including recruiting, retention, and workforce development. By centralizing talent operations and automating workflows, TIP helps public-sector agencies reduce costs, improve efficiency, and meet compliance requirements. TIP has varying capabilities or \"modules\" which can be used separately or together based on the specific needs of the organization. These modules include Talent Acquisition, Talent Management, Talent Flex, Resource Management, Talent Tracking, and Workforce Exchange.", "fedramp_msg": "N/A", "sales_email": "publicsectorsales@eightfold.ai", "security_email": "fedramp@eightfold.ai", "website": "https://eightfold.ai/", "uei": "NVUAEHWNWDJ8", "small_business": true, "business_categories": [ "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "Resource Management", "Talent Acquisition", "Talent Flex", "Talent Management", "Talent Tracking", "Workforce Exchange" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2004446306", "name": "Elastic", "cloud_service_provider": "Elastic", "cloud_service_offering": "Elastic Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Elastic%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-01-15T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-05-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 8, "reuse": 41, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-01-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-05-27T20:00:00.000Z", "cert_date": "2020-07-22T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Customs and Border Protection", "fedramp_auth": "2020-07-22T20:00:00.000Z", "annual_assessment": "2011-05-27T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2000174962", "csp": "Abbott, Inc.", "cso": "LibreView for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2427142353", "csp": "AutoRABIT Holding, Inc.", "cso": "AutoRABIT for Public Sector - CodeScan, Guard, & ARMOR", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2523656707", "csp": "Cisco Systems, Inc.", "cso": "Cisco ThousandEyes for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1706403967", "csp": "Collibra", "cso": "Collibra Platform for Government (CPG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029183077", "csp": "Cority Software Inc.", "cso": "CorityOne", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2519759620", "csp": "Cribl Inc.", "cso": "Cribl.Cloud Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2230244107", "csp": "Illumio, Inc.", "cso": "Illumio Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2118080669", "csp": "Knightscope, Inc.", "cso": "Knightscope Autonomous Security Robot (Knightscope ASR)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226144516", "csp": "MARi, LLC", "cso": "MARi", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335153827", "csp": "MasterControl", "cso": "Quality Excellence Gov (Qx Gov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234963115", "csp": "NCR Government, LLC", "cso": "NCR VOYIX GOVERNMENT CLOUD", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2516365096", "csp": "Procore Technologies, Inc", "cso": "Procore for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2209555576", "csp": "RingMD USA Inc.", "cso": "RingMD Telemedicine", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2032042635", "csp": "WidePoint Integrated Solutions Corp.", "cso": "Intelligent Technology Management System (ITMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Council of the Inspectors General on Integrity and Efficiency", "Customs and Border Protection", "Cybersecurity & Infrastructure Security Agency", "General Services Administration", "Joint Special Operations Command", "National Institute of Standards and Technology", "Tennessee Valley Authority", "US Fish and Wildlife Service" ], "agency_reuse": [ "22-002", "22-002-08", "22-005", "22-005-08", "22-005-12", "22-005-14", "22-005-20", "22-007", "22-007-17", "22-007-22", "22-007-25", "22-011-05", "22-014-02", "22-016-18", "22-016-19", "22-017", "22-021-04", "22-025", "22-027-02", "22-027-07", "22-034", "22-036", "22-044", "22-045", "22-060", "22-062", "22-067", "22-092" ], "service_description": "Elastic Cloud is a family of software-as-a-service (SaaS) products that includes the Elasticsearch Service (ESS). ESS is a service in which Elastic hosts and manages Elastic Stack components, including Elasticsearch and Kibana, on infrastructure from multiple public cloud providers including Amazon Web Services (AWS). ESS offerings include advanced Elastic Stack features such as security, alerting, monitoring, reporting, machine learning, and graphing capabilities. ESS deployments allow customers to launch with use-case-configured templates, including hot-warm-cold architecture, CPU-optimized workloads, I/O optimized workloads, and memory optimized workloads. ESS also includes enhanced security features such as default encryption at rest and Security Assertion Markup Language (SAML) and native authentication for hosted deployments.", "fedramp_msg": "N/A", "sales_email": "info@elastic.co", "security_email": "fedramp@elastic.co", "website": "https://www.elastic.co/industries/public-sector/fedramp", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2523939103", "name": "Elastic Cloud Hosted", "cloud_service_provider": "Elastic Cloud Hosted", "cloud_service_offering": "Elastic Cloud Hosted - High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Elastic%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-03-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-03-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Federal Emergency Management Agency", "fedramp_auth": "2026-03-23T20:00:00.000Z", "annual_assessment": "2011-03-09T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Emergency Management Agency" ], "agency_reuse": [ "" ], "service_description": "Elastic Cloud is a fully managed SaaS offering that brings the power of the Elastic Stack — including Elasticsearch, Kibana, and advanced capabilities like machine learning, alerting, and monitoring — to the cloud.\n\nDesigned for key use cases in Observability, Security, Search (including Vector Search), Elastic Cloud makes it easy to ingest, search, and analyze data from any source in real time.\nDeployments are preconfigured with use-case-optimized hardware profiles for logging, search, and analytics workloads, and can be customized to meet your performance or compliance needs. Elastic Cloud supports enterprise-grade security with features like role-based access control, SAML authentication, and encryption aligned with FedRAMP High standards.\n\nAs an open platform, Elastic Cloud also supports cross-cluster search and hybrid data architectures, allowing customers to unify data across Elastic’s cloud, self-managed environments, and other Elastic-compatible data sources.", "fedramp_msg": "N/A", "sales_email": "federal@elastic.co", "security_email": "fedramp@elastic.co", "website": "https://elastic.co/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Fleet Management", "Network Management", "Operations Management", "Research", "Storage", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2309381948", "name": "Elekta Solutions", "cloud_service_provider": "Elekta Solutions", "cloud_service_offering": "Elekta ProKnow Federal", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Elekta%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-12-15T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-08-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-06-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-12-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-08-12T20:00:00.000Z", "cert_date": "2026-06-25T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-06-25T20:00:00.000Z", "annual_assessment": "2011-08-08T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "ProKnow provides tool to customize clinical metrics and their objectives into scorecards both for individual patients and across populations. Scorecards help you drive standardization, inspire quality, remove unwanted variation, and justify reimbursement.", "fedramp_msg": "", "sales_email": "john.chenoweth@elekta.com", "security_email": "john.chenoweth@elekta.com", "website": "https://www.elekta.com/products/oncology-informatics/elekta-one/real-world-outcomes/proknow/", "uei": "", "small_business": false, "business_categories": [ "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2034966708", "name": "End To End Computing", "cloud_service_provider": "End To End Computing", "cloud_service_offering": "Singularity", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ETE%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-03-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2022-03-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to Agency Authorization In Process" }, { "date": "2023-02-03T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-03-17T20:00:00.000Z", "cert_date": "2023-02-03T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-02-03T20:00:00.000Z", "annual_assessment": "2011-03-21T04:00:00.000Z", "independent_assessor": "Linford & Company", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "United States Access Board" ], "agency_reuse": [ "" ], "service_description": "End To End Computing's (EEC) Singularity is a SaaS-based Managed Security Service platform providing customers with MSSP services such as CISO\\ISSO support, Security Operation Centers (SOC), and DevSecOps. The Singularity platform consists of two modules, Continuous Monitoring (CM) and DevSecOps. Both modules can also be leveraged to provide shared cybersecurity services across organizations and departments.\n\nSingularity CM - The Continuous Monitoring module provides 24/7 SOC support enabling organizations with the visibility required to effectively manage risk. EEC managed SOC utilizes the module to conduct incident response, Managed Detection Response(MDR), Managed SIEM and vulnerability management services. Additionally, the executive dashboard provides agencies with the ability to manage Plan of Action Milestones (POAMs) with ease. \n\nSingularity DevSecOps - This is a Comprehensive CI\\CD pipeline to enable organizations to deliver holistic, all-in-one solutions that protect applications from the inside while simplifying implementation across a range of environments. Organizations can leverage the capabilities of the platform to protect applications from the beginning of the application development process to solve the root causes of risks, as well as after the applications are placed in production. This is done by providing organizations with access to Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Runtime Application Self Protection (RASP), and Interactive Application Security Testing (IAST) capabilities to protect applications from cyber threats.", "fedramp_msg": "N/A", "sales_email": "sales@eecomputing.com", "security_email": "security@eecomputing.com", "website": "https://eecomputing.com/singularity/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Customer Service", "Cybersecurity & Risk Management", "Network Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2014363920", "name": "Enel X North America", "cloud_service_provider": "Enel X North America", "cloud_service_offering": "Exchange Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Enel%20X%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-04-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-08-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-09-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-04-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-08-28T20:00:00.000Z", "cert_date": "2020-09-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-09-10T20:00:00.000Z", "annual_assessment": "2011-08-28T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "General Services Administration" ], "agency_reuse": [ "" ], "service_description": "Enel X's Exchange application focuses on enabling our customers to get the best price on energy by using an online reverse auction. Customers in de-regulated energy markets can choose their energy provider. We enable competition by conducting auctions for these energy providers to compete for a customers' business, increasing liquidity and driving down price. We also provide additional consulting services like budgeting, market intelligence, and risk management. The Exchange provides an automated alerts notifications to customers based on price change trigger. It also alerts about contract change notifications, market updates, and market intelligence updates, regional news and insights, and customer price charts.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@enel.com", "website": "https://www.enelx.com/n-a/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1930046270", "name": "EnergyCAP LLC.", "cloud_service_provider": "EnergyCAP LLC.", "cloud_service_offering": "EnergyCAP", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/EnergyCAP%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-08-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-10-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-12-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-08-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-10-07T20:00:00.000Z", "cert_date": "2020-12-07T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-12-07T20:00:00.000Z", "annual_assessment": "2011-11-16T04:00:00.000Z", "independent_assessor": "Securisea, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Reclamation", "Department of State", "Federal Reserve System", "National Aeronautics and Space Administration" ], "agency_reuse": [ "" ], "service_description": "Our award-winning EnergyCAP software is the foundation of a comprehensive utility bill accounting and energy management program. Serving as the hub for your vendor, utility, and facility data, EnergyCAP’s powerful analysis and reporting functions deliver value across energy management, sustainability, accounting, and building operations. EnergyCAP is proven to streamline operations, enable in-depth analysis, and deliver long-term energy and cost savings.\n\nEnergyCAP’s software and services are available on the GSA Advantage pricing schedule.", "fedramp_msg": "N/A", "sales_email": "Sales@EnergyCAP.com", "security_email": "FedRAMP@EnergyCAP.com", "website": "https://www.energycap.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Data Management", "Fleet Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2606141075", "name": "Entratus", "cloud_service_provider": "Entratus", "cloud_service_offering": "Entratus Conversational AI Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Entratus%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-02T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2026-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2026-01-27T20:00:00.000Z", "ip_prog_date2": "2026-03-12T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-05-06T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-05-06T20:00:00.000Z", "annual_assessment": "2011-05-07T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Our cloud-based platform enables organizations to build and deploy intelligent virtual assistants capable of:\n\nMulti-Channel Engagement: Natural language conversations via voice, web, and SMS channels with seamless handoff capabilities.\nFlexible API Integration: Connect to various data sources and third-party systems for real-time information retrieval and processing.\nCompliance-First Architecture: Built-in audit trails, conversation recording transcript generation, and comprehensive logging for regulatory requirements.\nScalable Multi-Tenant Infrastructure: Supporting enterprise, government agencies, and commercial applications.\n\nSecurity & Compliance Features\n\nEnd-to-end encryption for all data in transit and at rest.\nComprehensive audit logging of all system interactions and decision chains.\nRole-based access control with multi-factor authentication.\nAutomated quality assurance through scorecard systems.\nHuman-in-the-loop oversight capabilities.\n\nPlatform Capabilities\n\nCustom AI agent development for specific business processes.\nIntegration with public APIs (e.g., insurance quoting).\nWorkflow automation and intelligent routing.\nReal-time transcription and analytics.\nBias monitoring and performance evaluation tools.\n\nOur platform provides organizations with the tools to create transparent, auditable, and efficient AI-powered customer interactions while maintaining strict security and compliance standards required for sensitive data handling.", "fedramp_msg": "", "sales_email": "sales@entratus.us", "security_email": "GRC@entratus.us", "website": "https://www.entratus.us/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Contact Center", "Customer Service" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1707156421", "name": "Envisage Technologies LLC", "cloud_service_provider": "Envisage Technologies LLC", "cloud_service_offering": "Acadis Readiness Suite", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Acadis%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-05-09T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-04-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-06-05T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-05-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-04-30T20:00:00.000Z", "cert_date": "2019-06-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-06-05T20:00:00.000Z", "annual_assessment": "2011-12-01T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Indian Affairs", "Customs and Border Protection", "DHS Headquarters", "Department of Veterans Affairs", "Drug Enforcement Administration", "Federal Law Enforcement Training Centers", "Immigration and Customs Enforcement", "National Nuclear Security Administration / Nevada Field Office" ], "agency_reuse": [ "" ], "service_description": "Acadis Readiness Suite is a Software-as-a-Service (SaaS) training and readiness management platform operated by Envisage Technologies LLC. The service is deployed in AWS GovCloud (US) and authorized at the FedRAMP Moderate baseline. Acadis supports federal, public safety, and government training organizations in managing compliance-driven and high-risk training operations. The platform provides capabilities for training program management, certification tracking, scheduling, and operational reporting across distributed organizations.", "fedramp_msg": "N/A", "sales_email": "federal-sales@acadis.com", "security_email": "fedramp@acadis.com", "website": "https://www.acadis.com/", "uei": "N8MAWLN45HN5SAM", "small_business": false, "business_categories": [ "Education & Training" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2330135650", "name": "Eptura, Inc", "cloud_service_provider": "Eptura, Inc", "cloud_service_offering": "Archibus", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Eptura%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-03-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-10-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-03-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-10-07T20:00:00.000Z", "cert_date": "2025-04-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-17T20:00:00.000Z", "annual_assessment": "2011-10-04T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Connect and operationalize facilities, assets, and infrastructure securely. \n\nArchibus by Eptura connects the built environment to manage assets, facilities, and employees across portfolios while prioritizing security and protection of federal information. \n\nArchibus for Government has a robust FedRAMP offering that is centered on Archibus Web Central which organizes facilities and infrastructure management tasks in an intuitive web browser interface. \n\nWorkplace Services\nmodule focuses on employee workspace booking, meeting room booking, and service requests. \n\nArchibus Space\noffers tasks for creating a space inventory -- a listing of the space that a company occupies, its occupiable and non-occupiable areas, how each department is using the occupiable areas, the common areas, and how personnel are assigned to rooms within the\n inventory. There’s also the capability to internally bill departments for their space usage and build from your current inventory to plan your future space needs. \n\nSustainability & Risk\nmodule encompasses business applications that work proactively to forecast and minimize risks to the organization: its staff, its productivity, or its competitive viability.\n \n\nReal Property\nmodule helps create an electronic inventory of properties and leases, complete with detailed data on occupancy, leased-out and available area, taxes, regularly occurring required actions, compliance with regulations, costs, and more. \n\nMaintenance\nmodule helps manage reactive (on demand) maintenance and preventive maintenance by providing tools for scheduling employees and outside contractors, budgeting costs, routing work throughout the system, updating the system with details about completed jobs,\n and assessing performance and response. \n\nThe Assets\nmodule includes\napplications that provide different levels of integration between asset management and the suite of Archibus by Eptura applications. Manage assets throughout the lifecycle; optimize the use and disposal of assets. Manage information targeted to the various stakeholders working with assets -- IT, finance, facilities, and department heads. \n\nCapital Projects\nmodule encompasses\n business applications that identify problems, identify funding, and plan capital to execute the strategic plan, which includes condition assessments, capital budgeting, individual capital project, and building commissioning.", "fedramp_msg": "N/A", "sales_email": "government@eptura.com", "security_email": "security@eptura.com", "website": "https://eptura.com/industries/government/archibus-for-government/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Data Management", "Finance", "Fleet Management", "Health & Wellness", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2626164349", "name": "Ericsson", "cloud_service_provider": "Ericsson", "cloud_service_offering": "Ericsson - NetCloud Federal (NCF)", "logo": "", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-21T21:35:36.259Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-20T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "NetCloud Federal is a cloud-based SaaS platform for managing Enterprise Wireless WAN routers and networks at scale. It offers secure lifecycle management and operational intelligence for Ericsson Cradlepoint FIPS 140-3 compliant 5G routers.", "fedramp_msg": "", "sales_email": "fedramp.isso@ericsson.com", "security_email": "fedramp.isso@ericsson.com", "website": "https://cradlepoint.com/about/trust/", "uei": "", "small_business": false, "business_categories": [ "Communication", "Cybersecurity & Risk Management", "Fleet Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2311952621", "name": "Ernst & Young LLP", "cloud_service_provider": "Ernst & Young LLP", "cloud_service_offering": "EY Grants Accelerator", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/EY%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-10-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-10-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-07-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-10-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-10-02T20:00:00.000Z", "cert_date": "2025-07-25T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-07-25T20:00:00.000Z", "annual_assessment": "2011-09-30T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Corporation for National & Community Service" ], "agency_reuse": [ "" ], "service_description": "EY Grants Accelerator (EYGA) is a cloud-native solution designed to streamline the entire grant lifecycle for grantmaking organizations. EYGA offers an external-facing portal that allows applicants to explore grant opportunities, submit and manage applications, access post award reports, receive secure messages, and maintain their account and profile information. This portal can be customized to align with agency branding guidelines and is a responsive website accessible through any modern web browser, adapting based on the device being used. The administrator workspace equips staff to efficiently manage the entire grant process from pre-award through closeout. It includes features such as system notifications, communication tools, internal notes, views, configurable workflows, form design, document management, e-signature, and reporting. EYGA is hosted within EY Government and Public Sector Azure Government platform, which provides support including but not limited to flexible deployment, identity management, security operations and governance for the EYGA application.", "fedramp_msg": "", "sales_email": "EYGASupport@ey.com", "security_email": "gps.tech.enclave.infosec.gov@ey.com", "website": "https://www.ey.com/en_us/alliances/ey-grants-accelerator", "uei": "", "small_business": false, "business_categories": [ "Grant Management", "Health & Wellness", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1311252651", "name": "ESRI", "cloud_service_provider": "ESRI", "cloud_service_offering": "Esri Managed Cloud Services Advanced Plus", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Esri%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-01-14T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2015-08-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2015-08-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-01-14T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2015-08-06T20:00:00.000Z", "cert_date": "2015-08-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2015-08-20T20:00:00.000Z", "annual_assessment": "2011-09-22T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2330135650", "csp": "Eptura, Inc", "cso": "Archibus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Agriculture", "Department of Health and Human Services", "National Endowment for the Arts", "United States Census Bureau" ], "agency_reuse": [ "22-036" ], "service_description": "Esri is a leading provider of geographic information systems (GIS) with decades of experience hosting solutions for customers. Esri Managed Cloud Services provides organizations with ready-to-use instances of ArcGIS running in the cloud and includes the infrastructure (facilities, hardware, network, and security), the software (Esri and third party), application deployment, testing, ongoing data management (data updates, backup, and archive), technical support, monitoring, and supporting 24/7 Security Operations Center. The environment has been architected following FISMA, NIST, and CIS guidance to facilitate FedRAMP moderate geospatial Platform-as-a-Service (PaaS) and Software-as-a-Service (SaaS) authorizations of our customer environments. EMCS enables quickly sharing geospatial content and providing access to critical information while the organization maintains complete control over the access to their services and maps. EMCS leverages the Amazon Web Services East / West Regions FedRAMP moderate cloud infrastructure.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "AES_Security@esri.com", "website": "https://www.esri.com/en-us/arcgis/services/managed-cloud", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1811073663A", "name": "ESRI", "cloud_service_provider": "ESRI", "cloud_service_offering": "ArcGIS Online (AGO)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Esri%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-04-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-05-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 19, "reuse": 23, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-04-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-05-08T20:00:00.000Z", "cert_date": "2024-07-22T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-07-22T20:00:00.000Z", "annual_assessment": "2011-06-27T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2235965777", "csp": "Mark43, Inc.", "cso": "Mark43 Public Safety Platform (PSP)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2214346691", "csp": "Secunetics, Inc.", "cso": "Gobo Framework (Gobo)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families", "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Council of the Inspectors General on Integrity and Efficiency", "DOJ Office of the Inspector General", "Department of Agriculture", "Department of Energy", "Department of Transportation", "Department of Veterans Affairs", "Department of the Interior", "Federal Aviation Administration", "Federal Communications Commission", "Federal Deposit Insurance Corporation", "Federal Energy Regulatory Commission", "Fermi National Accelerator Laboratory", "Food and Drug Administration", "National Aeronautics and Space Administration", "National Endowment for the Arts", "United States Army Corps of Engineers" ], "agency_reuse": [ "22-002-07", "22-005-11", "22-014", "22-017" ], "service_description": "ArcGIS Online, hosted by Esri, is a secure and scalable software as a service (SaaS) platform that supports organizations in adopting and managing mapping and spatial analysis workflows. The platform is built on resilient technology managed by Esri, eliminating the need for purchasing and maintaining infrastructure and additional resources. It allows for the storage, collection, editing, and analysis of data in a connected solution that integrates with existing business systems. ArcGIS Online enables collaboration and enhances decision-making with both internal and external stakeholders by providing access to maps, apps, and data from any device, anywhere.", "fedramp_msg": "N/A", "sales_email": "Sales@Esri.com", "security_email": "FedRAMP@Esri.com", "website": "https://arcgis.com/", "uei": "WUK9A5UR33S7", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Content Management System (CMS)", "Data Management", "Development Tools", "Operations Management", "Research", "Storage", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2523143582", "name": "ETHERFAX", "cloud_service_provider": "ETHERFAX", "cloud_service_offering": "ETHERFAX GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Etherfax%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-09-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-11-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-06-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-09-19T20:00:00.000Z", "cert_date": "2025-11-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Oceanic and Atmospheric Administration", "fedramp_auth": "2025-11-13T20:00:00.000Z", "annual_assessment": "2011-09-04T04:00:00.000Z", "independent_assessor": "Sentar, Inc.", "service_model": [ "IaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of Justice", "National Oceanic and Atmospheric Administration" ], "agency_reuse": [ "" ], "service_description": "ETHERFAX GovCloud is a secure, scalable, and compliant cloud-based fax solution designed to modernize enterprise faxing while offering the flexibility to leverage existing investments. Built with a security-first posture, our US government community cloud-based fax solution has been engineered to meet the federal government’s rigorous FedRAMP HIGH security standards. Hosted in AWS' FedRAMP HIGH GovCloud environment that utilizes FIPS-140-3 certified cryptographic algorithms, our data exchange solutions ensure the highest levels of data protection and encryption for government workflows. Leveraging the power of AWS GovCloud and supported by a dedicated US-based team, GovCloud delivers high availability, resiliency, and seamless integrations for government and regulated industries.\n\nKey Features:\n\nIntegrations\n• GovCloud Microsoft Teams: Seamlessly integrates with Microsoft Teams in GovCloud for streamlined communication workflows.\n• GovCloud Office 365: Supports Office 365 in GovCloud environments, enabling secure collaboration and faxing.\n• Google Workspace: Integrates with Google Workspace for enhanced productivity and interoperability.\n• GovCloud API: Provides a robust API for custom integrations, allowing organizations to tailor ETHERFAX to their specific needs.\n\nHigh Availability and Resiliency\n• AWS GovCloud East and West: Deployed across AWS GovCloud (US-East and US-West) regions, AWS GovCloud ensures high availability and resiliency through geographically distributed data centers, supporting mission-critical workloads.\n• Elastic Cloud Computing: Dynamically scale resources to meet demand, delivering consistent performance during peak usage.\n\nScalability and Data Security\n• Containerization: Utilizes containerized architecture to enable on-demand scaling, providing flexibility and efficiency for fluctuating workloads.\n• Segregated S3 Buckets: Employs isolated Amazon S3 buckets to segregate data, ensuring data separation and enhancing security and compliance.\n\nCompliance\n• FedRAMP High IL5: Meets stringent FedRAMP High and DoD Impact Level 5 (IL5) requirements, suitable for sensitive and regulated workloads.\n• Section 508: Ensures accessibility compliance for users with disabilities, adhering to federal standards.\n• HITRUST and PCI Level 4 Certified: Certified to meet rigorous healthcare and payment card industry security standards, ensuring robust data protection.\n\nSeamless Integration with Existing Systems \n• RightFax or Biscom: Transition to a more secure cloud platform with the option to integrate with RightFax or Biscom, enabling continued use of your current fax infrastructure without a costly rip-and-replace approach.\n• Leverage Existing Investments: Choose to maintain your existing workflows and configurations while upgrading to a modern, cloud-based solution.\n\nDedicated Support\n• US-Based Support Team: ETHERFAX offers a dedicated, US-based support team available to assist with implementation, troubleshooting, and ongoing maintenance, ensuring reliable service for all customers.\n\nETHERFAX GovCloud combines the flexibility of cloud technology with the security and compliance required for government and regulated industries. By leveraging AWS GovCloud’s isolated infrastructure, containerized scalability, and segregated data storage, ETHERFAX provides a future-proof fax solution with the option to integrate seamlessly with existing systems and modern collaboration tools. With a commitment to compliance and a US-based support team, ETHERFAX GovCloud empowers organizations to modernize faxing while maintaining security, reliability, and operational efficiency.", "fedramp_msg": "A federal agency has granted an Authorization to Operate (ATO) for this Cloud Service Offering (CSO). FedRAMP has placed the package in our review queue. FedRAMP has posted information about our review capabilities at [https://www.fedramp.gov/shutdown/].", "sales_email": "GovSales@etherfax.net", "security_email": "esturniolo@etherfax.net", "website": "https://etherfax.net/government", "uei": "XDQFEKBVGHP6", "small_business": true, "business_categories": [ "Communication", "Health & Wellness", "Law Enforcement", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1412165928", "name": "Everbridge", "cloud_service_provider": "Everbridge", "cloud_service_offering": "Critical Event Management Suite", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Everbridge%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-02-06T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-03-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-07-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 28, "reuse": 28, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-02-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-03-31T20:00:00.000Z", "cert_date": "2018-07-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-07-26T20:00:00.000Z", "annual_assessment": "2011-06-07T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2135637226", "csp": "Pearson VUE", "cso": "Pearson Federal Cloud System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Argonne National Laboratory", "Brookhaven Site Office", "Bureau of Safety and Environmental Enforcement", "Commodity Futures Trading Commission", "Corporation for National & Community Service", "Defense Nuclear Facilities Safety Board", "Department of Agriculture", "Department of Labor", "Department of the Treasury", "Environmental Protection Agency", "Federal Deposit Insurance Corporation", "Federal Housing Finance Agency", "Federal Reserve System", "Federal Retirement Thrift Investment Board", "Fermi National Accelerator Laboratory", "General Services Administration", "National Labor Relations Board", "Nuclear Regulatory Commission", "Office of Personnel Management", "Office of the Comptroller of the Currency", "Pantex Field Office", "Pension Benefit Guaranty Corporation", "Social Security Administration", "Tennessee Valley Authority", "U.S. International Development Finance Corporation", "United States Patent and Trademark Office", "United States Securities and Exchange Commission", "Warfighting Acquisition University" ], "agency_reuse": [ "22-042" ], "service_description": "Everbridge is a global provider of SaaS-based unified critical communications solutions. During mission-critical business events or man-made or natural disasters, the Everbridge platform enables customers to quickly and reliably deliver the right message and reach the right people, on the right device, in the right location, at the right time. Utilizing sophisticated communications technologies, Everbridge has the ability to deliver and verify messages in near real-time to more than 100 different communication devices, in over 200 countries and territories, in multiple languages - all simultaneously.", "fedramp_msg": "N/A", "sales_email": "Daniel.murphy@Everbridge.com", "security_email": "security@everbridge.com", "website": "https://www.everbridge.com/", "uei": "", "small_business": true, "business_categories": [ "Communication" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2615854261", "name": "Everbridge", "cloud_service_provider": "Everbridge", "cloud_service_offering": "Critical Event Management - GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Everbridge%20Logo2.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2026-05-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": "2026-03-30T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-05-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Everbridge Critical Event Management GovCloud is a suite of applications that empower the government community to detect, manage, and respond to critical events affecting personnel, facilities, and operations. The end-to-end platform integrates AI-assisted capabilities across applications such as mass notification and incident communication, real-time risk intelligence, geospatial common operating picture, crisis response management, and workflow automation to help agencies know earlier, respond faster, and improve continuously when managing threats and emergencies. \r\n \r\nCommunications: \r\nRobust mass notification and incident communications capabilities enable personnel and stakeholders to share relevant information and situational awareness. This enables organizations to efficiently execute Emergency Mass Notification, Recall/Relocation, Personnel Accountability, Traveler and Lone Worker Safety, and targeted Emergency Response Team Coordination. The platform supports common alerting protocols and is capable of integrating with other alerting modalities. Notification delivery is provided through multiple channels including: text messages, emails, voice calls, mobile app notifications, desktop alerting. It provides two-way communication capabilities enabling recipients to acknowledge receipt, confirm safety, request assistance, and/or receive location-specific information during emergencies. \r\n\r\nVisual Command Center: \r\nVisual Command Center (VCC) is the visualization and orchestration engine for Everbridge Critical Event Management GovCloud. VCC delivers a centralized common operating picture — integrating high fidelity contact, asset, and geospatial data — to enhance situational awareness and incident response. Through a single, unified view, organizations gain real-time threat intelligence and collaborative response capabilities, enabling them to mitigate or eliminate the impact of critical events on an unprecedented scale.\r\n\r\nRisk Intelligence: \r\nThe Everbridge Risk Intelligence Monitoring Center (RIMC) analyzes thousands of trustworthy, vetted, and hyper-local data sources – across over 100 risk categories – using machine-learning and AI technology, complemented by an experienced team of global risk analysts. Everbridge’s real-time alerting streamlines your organization’s ability to monitor and analyze worldwide events, dramatically increasing your ability to respond to risks that threaten your people, organization, supply chain. \r\n\r\nResponse Management: \r\nResponse Management digitizes response plans, shares documentation, tracks tasks and streamlines communications workflows for coordinated response efforts during crisis and other critical events. The platform supports collaborative decision-making and provides real-time status dashboards, situation reports (SITREPS) and after-action reporting (AAR) capabilities to provide full auditability and identify improvement opportunities for future events.\r\n\r\nEverbridge Critical Event Management GovCloud is designed to be highly secure and scalable, supporting federal agencies in protecting personnel, maintaining operational continuity, and strengthening organizational resilience across diverse threat scenarios including natural disasters, IT/cybersecurity incidents, civil unrest, workplace safety events, and more.", "fedramp_msg": "", "sales_email": "fedramp@everbridge.com", "security_email": "security@everbridge.com", "website": "https://everbridge.com/fedramp", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Cybersecurity & Risk Management", "Governance, Risk, and Compliance (GRC)", "Law Enforcement", "Operations Management", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2413540464", "name": "Everfox", "cloud_service_provider": "Everfox", "cloud_service_offering": "Everfox ULTRA", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Everfox%20Logo2.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-01-22T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-01-22T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Everfox ULTRA is a cloud-delivered, Hardsec-enforced service offering using a multi-tenant cloud computing environment to deliver a secure web browsing service designed to meet stringent security standards, including FedRAMP compliance. It provides a verifiably secure and isolated web browsing experience that prevents web threats, including zero-day attacks, zero-click exploits, and AI-accelerated phishing. Everfox ULTRA uses trusted Garrison Isolation Appliances (GIAs) and Garrison Transfer Appliances (GTAs) located in several global datacenters to isolate end users from potentially harmful websites, transforming risky web content into safe, interactive video streams. This approach ensures a high-assurance, performant user experience without compromising security. Additionally, the Everfox ULTRA Cloud Platform ensures that users' internet data is preserved between browsing sessions, allowing for a seamless and continuous browsing experience.\n \nThe GIA is engineered in line with the National Cross Domain Strategy & Management Office (NCDSMO) \"\"Raise the Bar\"\" (RTB) guidelines, ensuring it meets the high-security standards required for cross domain solutions. Everfox is committed to strict adherence to worldwide mandates, including FedRAMP, ensuring that the ULTRA Cloud Platform meets the necessary compliance requirements for federal agencies.", "fedramp_msg": "N/A", "sales_email": "ULTRA.fedsales@everfox.com", "security_email": "fedramp@everfox.com", "website": "https://www.everfox.com/products/threat-protection-solutions/remote-browser-isolation", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1916055736", "name": "Everlaw, Inc.", "cloud_service_provider": "Everlaw, Inc.", "cloud_service_offering": "Everlaw Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Everlaw%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-03-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-01-15T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-07-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-03-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-01-15T20:00:00.000Z", "cert_date": "2020-07-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-07-17T20:00:00.000Z", "annual_assessment": "2011-01-15T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Homeland Security", "Department of Justice", "Department of the Interior", "Executive Office for United States Attorneys", "Federal Trade Commission", "Justice Management Division", "Office of the Secretary of Transportation", "Peace Corps", "United States Secret Service" ], "agency_reuse": [ "" ], "service_description": "Everlaw helps legal teams and government agencies navigate the increasingly complex ediscovery landscape to chart a straighter path to the truth. Trusted by law firms, corporations, and government agencies of all sizes, Everlaw's combination of intuitive experience, advanced technology, and partnership with customers empowers organizations to tackle the most pressing technological and data challenges. By combining speed, security, and ease of use in a unified, comprehensive solution, Everlaw unlocks the collaborative power of cross-functional teams to investigate issues more thoroughly, uncover truth more quickly, and present their findings more clearly, transforming their approach to litigation, investigations, compliance, and FOIA requests. As a cloud-native platform built on AWS GovCloud (US), Everlaw is committed to innovation that future-proofs agencies against emerging data types and other evolving needs. Founded in 2010 and based in Oakland, California, Everlaw's mission is to promote justice by illuminating truth.", "fedramp_msg": "N/A", "sales_email": "federal@everlaw.com", "security_email": "federal@everlaw.com", "website": "https://www.everlaw.com/federal-government/", "uei": "VL9GLDMAN889", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Data Management", "Law Enforcement", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2207359708", "name": "Evidence Prime", "cloud_service_provider": "Evidence Prime", "cloud_service_offering": "Laser AI", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/EP%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-06-03T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2022-06-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to Agency Authorization In Process" }, { "date": "2022-08-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-06-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-06-03T20:00:00.000Z", "cert_date": "2022-08-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Institutes of Health", "fedramp_auth": "2022-08-23T20:00:00.000Z", "annual_assessment": "2011-06-03T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "National Institutes of Health" ], "agency_reuse": [ "" ], "service_description": "LASER is a system automating the development of Living Systematic Reviews using natural language processing (NLP) and artificial intelligence techniques, which synthesizes available knowledge about a given health problem continuously and with minimal human involvement. As a result, LASER speeds up the process of literature reviews, decreases its costs, and improves the quality of the reviews allowing overworked human specialists to focus on the essential elements offloading much of the repetitive tasks to the AI-enabled system. LASER also provides a human-centric user interface, enabling smooth interaction with suggestions provided by the AI.\n\nLASER supports classical systematic reviews as well as enables quick verification of the quality of the reviews by the regulators and the sponsors, makes it possible to perform a larger number of reviews for personalized medicine or the creation of high-quality rapid assessments in the face of epidemics or ecological disasters.\n\nLASER is built with larger organizations in mind, providing a high level of security as well as enterprise-grade management of projects, teams, roles, shared dictionaries, and customizable workflow processes. LASER helps with the following steps of literature reviews: creation of the review protocol, construction and execution of a search strategy, T&A screening, screening of full texts, data extraction, quality assessment, export of data to meta-analysis tools.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@evidenceprime.com", "website": "https://laser.ai/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1305132147", "name": "Ex Libris", "cloud_service_provider": "Ex Libris", "cloud_service_offering": "Higher-Ed Platform (Alma, Primo, Leganto, Esploro)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ExLibris%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-06-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-08-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-09-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 10, "reuse": 9, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-06-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-08-30T20:00:00.000Z", "cert_date": "2019-09-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-09-10T20:00:00.000Z", "annual_assessment": "2011-07-14T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Health and Human Services", "Environmental Protection Agency", "Food and Drug Administration", "Internal Revenue Service", "National Aeronautics and Space Administration", "National Cancer Institute", "National Institute of Standards and Technology", "Nuclear Regulatory Commission", "United States Geological Survey", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Ex Libris Higher-Ed Platform, consisting of Alma, Primo, Leganto, Esploro and Rialto, is an open platform that provides common cross-product services while ensuring reliability, security, and ease of integration with 3rd-party products and tools.", "fedramp_msg": "N/A", "sales_email": "dave.hemingway-turner@clarivate.com", "security_email": "HEP.security.officer@clarivate.com", "website": "https://exlibrisgroup.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2518756614", "name": "Exostar", "cloud_service_provider": "Exostar", "cloud_service_offering": "Managed Access Gateway with Managed Microsoft 365", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Exostar%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-09T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-12-09T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Exostar's Managed Access Gateway (MAG) with Managed M365 (MM365) service (“MAG + MM365”) is comprised of two main services with additional service add-ons detailed below:\r\n\r\n \r\n\r\nMAG is Exostar’s comprehensive portal solution for registration, account management, and authentication as a means of providing controlled access to Exostar hosted applications and applications located within other enterprise domains. MAG allows enterprises to enable controlled access to information and applications. A standard deployment approach ensures that a single sign-on (SSO) federation infrastructure can be seamlessly extended to support integration with Exostar. \r\n\r\nThe MAG solution provides the following capabilities:\r\n\r\nOrganization Registration Workflows, including:\r\nOrganization account established with administrative assignments.\r\n“Subscription” based access to the customer’s (Service Provider) application(s).\r\nUser Registration Workflows, including:\r\nUser account enrollment with role assignment.\r\nDelegated approval\r\nAccount attributes management (account lifecycle).\r\nProvisioning Workflows, including:\r\nProvisioning of new organization and user account attributes to Service Provider (applications).\r\nPropagation of organization and user account changes to Service Provider (account lifecycle).\r\n \r\n\r\nManaged M365 (MM365) provides customer with a Microsoft Office 365 GCC High Teams subscription hosting Teams, Exchange, SharePoint, and OneDrive, with Exostar performing the administrative and authentication controls. The customer retains control of their user lists, adding and removing personnel as needed, while Exostar handles security monitoring and common account monitoring duties. Exostar also provides the basic management and monitoring functions for the subscription. Customers may engage services for single-tenant or multi-tenant services.\r\n\r\n \r\n\r\nAdditional services customers may subscribe to:\r\n\r\n \r\n\r\nExostar Managed Secure Desktop (EMSD) - EMSD provides an in-boundary, pre-hardened virtual desktop instance to allow customers to view and work with federal customer data in a compliant manner. Customers may engage services for single-tenant or multi-tenant services.\r\n\r\n \r\n\r\nCustomers of MAG can review user guides, including guides for the Organization Administrator which outline the secure configuration of the system, here: https://www.myexostar.com/knowledge-base/mag-training-resources/", "fedramp_msg": "", "sales_email": "Sales@exostar.com", "security_email": "SecurityOffice@exostar.com", "website": "https://www.exostar.com/", "uei": "VA34K8JHV226", "small_business": false, "business_categories": [ "Collaboration", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1827963145", "name": "Exterro, Inc.", "cloud_service_provider": "Exterro, Inc.", "cloud_service_offering": "Exterro E-Discovery and Legal Software Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Exterro%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-08-14T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-08-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-04-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-08-14T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-08-14T20:00:00.000Z", "cert_date": "2021-04-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-04-20T20:00:00.000Z", "annual_assessment": "2011-03-21T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Deposit Insurance Corporation", "General Services Administration" ], "agency_reuse": [ "" ], "service_description": "Exterro offers government agencies a comprehensive platform to manage their diverse needs, from data mapping to incident response, digital forensics, ediscovery and litigation management, and regulatory compliance, including a purpose-built FOIA solution. Exterro understands none of these challenges exist in isolation. Rather, they are interconnected and based in the complex and growing data landscape government agencies must manage. \r\n\r\nExterro solutions can be customized to meet our customers specific requirements, ranging from modular components to address your most pressing concerns to an end-to-end solution encompassing multiple needs. Governments trust Exterro to locate, analyze, and safeguard their data, staying ahead of legal, security, and regulatory risks using our user-friendly, automated, and cost-effective platform.\r\nWith Exterro’s FedRAMP-authorized solutions, federal, state, local, and tribal governments can:\r\n●\tAutomate and Defensibly Manage E-Discovery: Simplify legal hold, collection, processing, review, and production with a single, integrated platform that minimizes risk and reduces costs.\r\n●\tStreamline FOIA & Public Records Requests: Collect, review, redact, and produce responsive information faster while maintaining accuracy, security, and transparency.\r\n●\tEnsure Compliance & Reduce Risk: Maintain a strict chain of custody, leverage in-place preservation, and generate auditable workflows to meet litigation, regulatory, and public disclosure requirements.\r\n●\tLeverage AI with Confidence: Exterro Intelligence accelerates early case assessment, reduces review volumes, and provides accurate, actionable insights.\r\nTrusted across the public sector by government entities and agencies, Exterro software helps them respond faster, reduce costs, and maintain trust by ensuring accuracy, transparency, and defensibility in every process.", "fedramp_msg": "N/A", "sales_email": "fedramp_info@exterro.com", "security_email": "fedsecurity@exterro.com", "website": "https://www.exterro.com/solutions/government", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Law Enforcement", "Legal & Policy", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2510664395", "name": "ExtraHop Networks", "cloud_service_provider": "ExtraHop Networks", "cloud_service_offering": "ExtraHop RevealX Federal", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/EH%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-02-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-08-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-09-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-02-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-08-12T20:00:00.000Z", "cert_date": "2025-09-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Energy Information Administration", "fedramp_auth": "2025-09-15T20:00:00.000Z", "annual_assessment": "2011-08-07T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Energy Information Administration" ], "agency_reuse": [ "" ], "service_description": "ExtraHop RevealX Federal is delivered as a SaaS offering using a multi-tenant public cloud computing environment tailored specifically to meet the stringent government FedRAMP compliance requirements. It is available to federal, state, local, and tribal governments, research institutions, and government contractors as well as commercial and non-government organizations. This special environment resides in the FedRAMP-authorized Amazon Web Services (AWS) US-East regions.\n\nRevealX Federal is an enterprise-class network detection and response (NDR) solution that helps you detect malicious behaviors and focus investigations into the highest risk threats. RevealX Federal leverages cloud-scale artificial intelligence (AI) and machine learning (ML) to deliver real-time threat detection and network performance analytics, and can automatically gather and contextualize related information.\nExtraHop RevealX Federal production environment includes applications, containerized microservices, operating systems, and AWS resources and services that support the delivery of ExtraHop RevealX Federal cloud services.\n\nExtraHop RevealX Federal production environment includes applications, containerized microservices, operating systems, and AWS resources and services that support the delivery of ExtraHop RevealX Federal cloud services.", "fedramp_msg": "N/A", "sales_email": "federal-info@extrahop.com", "security_email": "fedramp-pmo@extrahop.com", "website": "https://www.extrahop.com/solutions/industry/public-sector", "uei": "HVDJKNC19AN5", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Network Management", "Operations Management", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2531062517", "name": "F5, Inc.", "cloud_service_provider": "F5, Inc.", "cloud_service_offering": "F5 Distributed Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/F5%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-10-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-10-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "F5 Distributed Cloud Services is a security and networking platform that provides PaaS-delivered application services and deployable edge-based software components. The platform includes Web Application Firewall (WAF), API security, L7 DDoS mitigation, DNS, secure multi-cloud networking, and observability. Services are delivered via US-based points of presence and can also be deployed on deployable customer edge (CE) software nodes to support hybrid and on-premises environments. For FedRAMP-authorized use, F5 enforces strict controls to ensure that system logs and customer data are processed and stored exclusively within U.S. regions.", "fedramp_msg": "", "sales_email": "f5fedramp1@f5.com", "security_email": "F5FedRAMPModerateSec@f5.com", "website": "https://www.f5.com/", "uei": "LPH1U4GHAVY9", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Development Tools", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2427818523", "name": "Feith Sytems and Software, Inc.", "cloud_service_provider": "Feith Sytems and Software, Inc.", "cloud_service_offering": "RMA iQ™", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Feith%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-07-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-02-11T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-07-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-02-11T20:00:00.000Z", "cert_date": "2025-05-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-05-08T20:00:00.000Z", "annual_assessment": "2011-02-10T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture" ], "agency_reuse": [ "" ], "service_description": "RMA iQ™ is delivered as SaaS offering using a multi-tenant Government Only cloud computing environment. It is available to the DoD, federal, state, local and tribal government communities as well as their respective contractors.\r\n\r\nFeith RMA iQ is a SaaS platform designed to support federal agencies in managing records efficiently. It helps Records Managers address challenges such as large volumes of records, complex retention schedules, and compliance with federal records regulations.\r\n\r\nKey Features\r\n\r\n-Automated Classification and Retention: Employs artificial intelligence to classify records and apply GRS and RCS retention schedules, reducing manual effort and improving accuracy.\r\n-Efficient Record Retrieval: Offers advanced search tools to help users locate records quickly, supporting timely responses to internal and external inquiries.\r\n-Seamless Integration: Integrates with various agency information systems, including M365, allowing staff to work within familiar platforms and minimizing training requirements.\r\n-Security and Compliance: Enforces role-based controls to safeguard CUI and PII, ensuring adherence to federal security standards.\r\n\r\nOptional Add-Ons\r\n\r\n-FOIA Workbench: Facilitates compliance with Freedom of Information Act requirements through tools for review, tracking requests, and redacting sensitive information.\r\n-Declassification Module: Streamlines declassification workflows, identifies sensitive content, and provides audit trails to maintain compliance.\r\n-Case Management: Centralizes case records, supports customizable workflows, and enables secure collaboration.\r\n-Document and Workflow Management: Enhances document handling with version control, metadata tagging, content sharing, workflow automation, and analytics.\r\n-RMA iQ supports federal agencies in securely and effectively managing records. By automating processes, integrating with existing systems, and offering optional tools for specialized Federal missions, the platform helps improve productivity, ensures compliance with regulations, and strengthens knowledge management across agencies.\r\n\r\nThe system is a browser-based application with an optional client-side component (Feith Sync) that can be installed locally within the agency network to synchronize local file shares.", "fedramp_msg": "N/A", "sales_email": "more-info@feith.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://www.feith.com/", "uei": "", "small_business": true, "business_categories": [ "Collaboration", "Content Management System (CMS)", "Data Management", "Legal & Policy", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2311345531", "name": "Figma", "cloud_service_provider": "Figma", "cloud_service_offering": "Figma for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Figma%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-06-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-08-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-02-28T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 10, "reuse": 10, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-06-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-08-01T20:00:00.000Z", "cert_date": "2025-02-28T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-02-28T20:00:00.000Z", "annual_assessment": "2011-07-31T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2106555313", "csp": "AchieveIt Online, LLC", "cso": "AchieveIt", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" } ], "agency_authorizations": [ "Administration for Children & Families", "Alcohol and Tobacco Tax and Trade Bureau", "Argonne National Laboratory", "Cybersecurity & Infrastructure Security Agency", "Department of State", "Department of the Treasury", "Federal Student Aid", "General Services Administration", "Internal Revenue Service", "Justice Management Division" ], "agency_reuse": [ "22-036" ], "service_description": "Figma is a design and development platform for teams who build\r\nproducts together. Figma for Government's authorization boundary currently covers Figma Design, FigJam, Figma Slides, Dev Mode, Figma\r\nDraw, and Figma Make.", "fedramp_msg": "", "sales_email": "fedramp-interest@figma.com", "security_email": "fedramp-security@figma.com", "website": "https://www.figma.com/", "uei": "ECZWCX1KXYU5", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Customer Service", "Design & Multimedia", "Development Tools", "Education & Training", "Marketing & Sales", "Media", "Research" ], "service_last_90": [ "" ], "all_others": [ "FigJam", "Figma" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2335850594XL", "name": "Filevine", "cloud_service_provider": "Filevine", "cloud_service_offering": "Filevine Platform", "logo": "https://fedramp.gov/assets/img/logos/CSP_logos/Filevine%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-12T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-09-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2025-09-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" }, { "date": "2026-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Authorized to FedRAMP Certified. Uplift from FedRAMP 20x Low pilot to FedRAMP 20x Moderate pilot" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2026-01-16T20:00:00.000Z", "ip_prog_date2": "2026-03-10T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-05-06T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-05-06T20:00:00.000Z", "annual_assessment": "2011-09-22T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Vinesign is the electronic signature component of the Filevine suite. It enables government legal teams, contract and compliance departments, and related legal services to prepare, send, and execute documents electronically in compliance with legal and security standards. Vinesign provides an auditable record of document execution, supports records governance requirements, and integrates with Filevine case and contract management tools to maintain continuity of documentation workflows.", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class C Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "sales@filevine.com", "security_email": "security@filevine.com", "website": "https://www.filevine.com/integrations/vinesign/", "uei": "S1D2HMBF2432", "small_business": false, "business_categories": [ "Collaboration", "Data Management", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2527955211", "name": "Flock Safety", "cloud_service_provider": "Flock Safety", "cloud_service_offering": "Flock Safety Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Flock%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-10T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-07-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2025-07-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-07-10T20:00:00.000Z", "ip_prog_date2": "2025-07-24T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2025-07-25T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-07-25T20:00:00.000Z", "annual_assessment": "2011-08-25T04:00:00.000Z", "independent_assessor": "Baker Tilly", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Flock Safety is a public safety solution that assists cities, businesses, schools, and law enforcement agencies in collaboratively eliminating crime and maintaining community safety. Flock develops and manufactures license plate reading (LPR) technology, audio recognition sensors, video cameras, and accompanying software to capture objective evidence required by law enforcement to solve crimes.", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class B Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "fedramp@flocksafety.com", "security_email": "security@flocksafety.com", "website": "https://www.flocksafety.com/", "uei": "", "small_business": false, "business_categories": [ "Law Enforcement" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2324454026", "name": "FM:Systems", "cloud_service_provider": "FM:Systems", "cloud_service_offering": "OpenBlue Workplace", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/FM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-07-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-04-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-07-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-04-12T20:00:00.000Z", "cert_date": "2025-04-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-11T20:00:00.000Z", "annual_assessment": "2011-04-12T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Education", "Department of Veterans Affairs", "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "OpenBlue Workplace is an Integrated Workplace Management Solution (IWMS) designed for space management and optimization, asset management, move management, facility maintenance, strategic real estate planning, and facility project management. \r\n\r\nThe core system consists of Space + Asset Management with Strategic Planning. Additionally, optional modules may be licensed for the core system for move management, facility maintenance, real estate and lease management and project management as part of the Integrated Workplace Management System. \r\n\r\nThis web-based solution enables organizations to manage, analyze and report on facilities and real estate operation and maintenance (O&M) information. With objective facility data and digital automation, customers gain insight into how their real estate portfolio is performing, identify opportunities to reduce costs, create efficiencies across workplace management processes and deliver exceptional workplace experiences to their employees. The system is a web-based application requiring only a browser for the client. \r\n\r\nCAD and BIM technicians may leverage an entirely optional AutoCAD™ or Revit™ client side plug-in that communicates to OpenBlue Workplace via web services. This bi-directional system’s integration simplifies the floorplan management process for technicians as it keeps both systems in sync when changes are made. The AutoCAD and Revit plug-ins add the ability to edit digital floorplan files within OpenBlue Workplace but are not a required component for the system. There is also an optional HR Data Feed available to import customer users into the system. OpenBlue Workplace is hosted as a single tenant server in the AWS GovCloud FedRAMP environment. \r\n\r\nOpenBlue Workplace uses a self-described data model—the OpenBlue Workplace Data Dictionary—that lets system administrators configure the system to add, modify or remove fields, tables, data views, data forms, notification rules, reports, and business logic. The Data Dictionary is unique to the individual client database, allowing each organization to design and configure the system according to their unique business requirements.\r\n\r\nThe OpenBlue Workplace Management Suite and associated modules allow facility and real estate professionals to use a common database and system to address a wide range of business requirements and to share facility information enterprise wide.", "fedramp_msg": "", "sales_email": "FedRAMPsales@fmsgov.com", "security_email": "FedRamp@fmsgov.com", "website": "https://fmsystems.com/industries/government/", "uei": "CYC1K9AT5SZ1", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1828574469", "name": "FM:Systems", "cloud_service_provider": "FM:Systems", "cloud_service_offering": "OpenBlue Employee", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/FM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-07-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-10-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-10-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 7, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-07-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-10-19T20:00:00.000Z", "cert_date": "2018-10-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-10-23T20:00:00.000Z", "annual_assessment": "2011-11-04T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Education", "Department of Veterans Affairs", "Interior Business Center", "National Aeronautics and Space Administration", "Tennessee Valley Authority", "United States Census Bureau", "VA Office of the Inspector General" ], "agency_reuse": [ "" ], "service_description": "OpenBlue Employee, formerly FMS:Employee, offers solutions for organizations with powerful, integrated scheduling features. Built for flexible, collaborative workplaces and designed to increase efficiency and productivity for in-office and remote employees. OpenBlue Employee features desk and resource scheduling, interactive floor plans, contactless workflows, visitor management, and much more. \r\n\r\nRoom & Resource Scheduling - Quickly find and reserve rooms, equipment and services for your remote and in-office employees.\r\n\r\nHoteling & Desk Sharing - Give employees easy access to calendars and reserve spaces with the convenience of mobile scheduling.\r\n\r\nService Management - Streamline complex orders and keep service providers one step ahead of your fast-paced organization with pricing and inventory controls and a dynamic management console.\r\n\r\nInteractive Floor plans - Desk-sharing initiatives are the future of modern workplaces as cloud and mobile technologies offer an ‘anytime, anywhere’ work style.\r\n\r\nOutlook Integration - Make the most of your Outlook calendar by integrating with our room booking and resource scheduling software.\r\n\r\nEvent & Visitor Management - Ensure events and visitors are managed properly from start to finish. Set up new events and capture critical information with a few simple clicks.\r\n\r\nIoT Sensor Integration - Measure actual workspace utilization and identify patterns and trends to build a smarter workspace.\r\n\r\nWorkplace Services & Booking Hardware - Simplify operations and encourage collaboration with streamlined service management and interactive booking hardware.\r\n\r\nReporting & Analytics - Dive into the data and analyze trends by location, person, or department to understand what spaces are underutilized and under-performing.", "fedramp_msg": "N/A", "sales_email": "FedRAMPsales@fmsgov.com", "security_email": "FedRamp@fmsgov.com", "website": "https://fmsystems.com/products/hybrid-workplace/room-scheduling/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1932554201", "name": "Forcepoint", "cloud_service_provider": "Forcepoint", "cloud_service_offering": "ONE – Security Service Edge (SSE) – CASB/DLP/SWG/ZTNA/RBI", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Forcepoint%20Logo.png", "status": "FedRAMP Certified (In Remediation)", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-10-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-09-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-11-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" }, { "date": "2026-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Authorized to FedRAMP Certified (In Remediation). Under remediation for not following \"Addressing FedRAMP Communication\" rule. See Notice 0016" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-10-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-09-01T20:00:00.000Z", "cert_date": "2020-11-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-11-23T20:00:00.000Z", "annual_assessment": "2011-09-01T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Transportation" ], "agency_reuse": [ "" ], "service_description": "Forcepoint ONE is a cloud-native distributed Security Service Edge (SSE) platform that delivers distributed Zero Trust protection on devices, on the network and in the cloud. \n\nForcepoint ONE provides unified threat and data protection for safely accessing cloud, web, and private applications—all managed from a single platform. It enables policies for Cloud Access Security Broker (CASB), Zero Trust Network Access (ZTNA), Secure Web Gateway (SWG), Data Loss Prevention (DLP) and other security technologies to be managed easily and consistently in a single location. \n\n\nProducts:\n- ZTNA - Enable secure remote access to private applications in cloud or private datacenters, providing a better experience and protection than traditional VPNs.\n- SWG - Distributed Secure Web Gateway (SWG) provides secure internet and web access while mitigating risk, improving IT visibility, and enhancing application performance. \n- CASB - Cloud Access Security Broker (CASB) monitors and protects cloud apps and data on any app, from BYOD, managed, and unmanaged devices.\n- RBI - Remote Browser Isolation (RBI) with Content Disarm Reconstruction (CDR) extracts and verifies information before delivering to destination, provides a layer of abstraction by browser operation in cloud-hosted VM, and separates end user device from web-borne malware risks\n\nUse Cases:\n- Secure Bring your own Device (BYOD)\n- Secure the Web and Shadow IT\n- Protect Access to On-premises Apps.\n- Secure the Remote and Hybrid Worker\n- Defend against Malware with Advanced Protection\n- Prevent Data Leakage across the device and cloud\n- Secure IaaS", "fedramp_msg": "N/A", "sales_email": "", "security_email": "FedRAMP@forcepoint.com", "website": "https://www.forcepoint.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2523857656", "name": "Forescout Technologies, Inc.", "cloud_service_provider": "Forescout Technologies, Inc.", "cloud_service_offering": "Forescout for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Forescout%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-21T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-03-03T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-03-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-03-03T20:00:00.000Z", "cert_date": "2026-03-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-03-20T20:00:00.000Z", "annual_assessment": "2011-03-02T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Emergency Management Agency" ], "agency_reuse": [ "" ], "service_description": "Forescout Technologies is a cybersecurity company that helps organizations gain complete situational awareness of their cyber-physical and digital environments. With a focus on IT, OT, and IoT, Forescout delivers comprehensive visibility and automated control, using AI to secure the enterprise across increasingly complex and distributed networks.\n\nForescout Cloud, part of the Forescout 4D Platform, is designed to provide continuous monitoring, asset intelligence, and policy enforcement. Built to support hybrid environments, the platform helps agencies manage security risk, strengthen compliance, and operationalize zero trust principles.\n\nComplete discovery and classification of all IT, OT, and IoT assets provide real-time visibility into all connected assets—managed, unmanaged, virtual, and physical. The platform delivers device taxonomy, identity, and AI-powered context augmentation to maintain an up-to-date inventory that informs security decisions and eliminates blind spots in critical infrastructure protection.\n\nZero Trust security architectures are enabled through policy-based access controls that support dynamic segmentation and enforcement. Device trust is continuously evaluated based on contextual insights and AI modeling, ensuring that only compliant and authorized devices can access network resources.\n\nRegulatory and compliance requirements are met by continuously monitoring device posture against security policies. The platform provides detailed reporting and integrates with governance and risk management tools to support audit readiness, AI-based recommendations, and risk mitigation to drive operational efficiency.\n\nNetwork activity and attacks are monitored to detect anomalies and indicators of compromise. The platform enables automated or guided response actions through integrations with broader security operations tools, helping reduce dwell time, minimize lateral movement, and contain threats.\n\nForescout Cloud is purpose-built to provide federal agencies with the visibility, control, and automation needed to protect modern, heterogeneous environments. It helps reduce risk, ensure compliance, and enable secure operations aligned with federal cybersecurity priorities.", "fedramp_msg": "N/A", "sales_email": "fscloud-fedramp@forescout.com", "security_email": "fedramp_comms@forescout.com", "website": "https://www.forescout.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Network Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2327655698", "name": "Gallery Systems", "cloud_service_provider": "Gallery Systems", "cloud_service_offering": "TMS Gov Cloud Suite", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/GallerySystems%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-09-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-09-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-11-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-09-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-09-09T20:00:00.000Z", "cert_date": "2025-11-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-11-13T20:00:00.000Z", "annual_assessment": "2011-08-21T04:00:00.000Z", "independent_assessor": "Kompleye", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of the Interior", "Department of the Treasury" ], "agency_reuse": [ "" ], "service_description": "TMS Gov Cloud Suite is delivered as a SaaS offering using a multi-tenant Government Only cloud computing environment. It is available to federal government customers. The TMS Gov Cloud Suite application enables collection managers, museum conservators, and curators to efficiently and effectively perform physical and digital asset management. This federal offering of the system is provided by Gallery Systems and hosted on the AWS Cloud, to offer increased security to federal customers. The system is a 3-tiered web application (web front-end, business logic layer, and data layer) that implements a defense-in-depth security posture.", "fedramp_msg": "A federal agency has granted an Authorization to Operate (ATO) for this Cloud Service Offering (CSO). FedRAMP has placed the package in our review queue. FedRAMP has posted information about our review capabilities at [https://www.fedramp.gov/shutdown/].", "sales_email": "sales@gallerysystems.com", "security_email": "systems@gallerysystems.com", "website": "https://www.gallerysystems.com/", "uei": "", "small_business": true, "business_categories": [ "Collaboration", "Content Management System (CMS)", "Data Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1834348080", "name": "GDC Integration, Inc.", "cloud_service_provider": "GDC Integration, Inc.", "cloud_service_offering": "General Support System (GSS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/GDCII%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-02-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-07-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-05-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-02-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-07-08T20:00:00.000Z", "cert_date": "2021-05-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-05-10T20:00:00.000Z", "annual_assessment": "2011-07-30T04:00:00.000Z", "independent_assessor": "RISC Point", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture", "Federal Aviation Administration", "Small Business Administration" ], "agency_reuse": [ "" ], "service_description": "GDCI provides proven, efficiently priced Federalized SaaS Human Resource\r\nApplications to support the critical human capital functions across the employee\r\nlifecycle.\r\n\r\nTime, Attendance & Leave:\r\nPaycheck 8 reduces the challenging and time consuming effort of tracking and reporting time, attendance, and leave (including VLTP and FLMA). Utilizing agency/department\r\nbusiness rules, Paycheck8 pre-edits to eliminate and reduce time-entry errors, corrected T&A’s and Leave balances. \r\n\r\nLabor and Employee Relations:\r\nLabor-Employee Relations Information System (LERIS) is a state-of-the-art case management and reporting system designed to meet the needs of the labor/employee relations specialist, EEO case manager and other HR specialists, along with agency leadership.\r\n\r\nPerformance Management:\r\nePM is a proven web-based HR system developed to support the effective management, process development, and performance tracking of the appraisal process from start to finish, while maintaining compliance with performance and awards laws.\r\n\r\nOnboarding:\r\neForms is innovative technology designed to improve productivity and eliminate redundant manual data entry for new employee enrollment. It is inclusive of the new hire process and management of enrollment forms and procedures.\r\n\r\nHR Self Service:\r\nConnect HR is an easy to manage HR dashboard designed to leverage the benefits of single sign on, role management, collaboration, communication, business intelligence and document management.\r\n\r\nPersonnel Actions & Awards Tracking:\r\neTracker is a tool developed to easily and efficiently manage, process and track Request for Personnel Action (SF 52), Notification of Personnel Action (SF 50) and Awards Processing.\r\n\r\nUniform Management:\r\nThe Uniform Allowance Management System (UNAW) conveniently provides complete processing, tracking and approval of uniform allowance requests online.\r\n\r\nOrganizational Chart Automation:\r\nFedChart is a workforce planning tool that automates the creation, maintenance, and updating of organizational charts, adhering to agency-specific business rules and\r\nrequirements. Utilizing federal HR data, FedChart visualizes an agency’s organizational structure, positions, and workforce costs.\r\n\r\nHR Data Reporting Automation:\r\nFedLens is a research-based, three module tool designed to enhance data-driven workforce management and planning through automated reports, trend analysis, and predictive analytics. It comprises three modules (Diagnostics, Snapshots, and Predictions) which provide insight based on data benchmarked against standards from the Office of Personnel Management (OPM).\r\n\r\nFEVS Data Reporting Automation:\r\nFedViews is an automated tool for Federal Employee Viewpoint Survey (FEVS) reporting, trend analysis, and workforce planning. It assists federal agencies in generating FEVS reports in compliance with OPM requirements and enables federal HR leaders to compare viewpoint data over time, identify trends, and benchmark scores across departments and within agencies. Action planning modules allow agencies to develop targeted action planning to improve engagement over time.", "fedramp_msg": "N/A", "sales_email": "sales@gdcii.com", "security_email": "fedramp@gdcii.com", "website": "https://gdcii.com/", "uei": "Z7NGCYXV616", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1829538820", "name": "General Services Administration", "cloud_service_provider": "General Services Administration", "cloud_service_offering": "Login.gov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Login.gov%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-07-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-07-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-07-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 20, "reuse": 22, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-07-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-07-03T20:00:00.000Z", "cert_date": "2019-07-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-07-15T20:00:00.000Z", "annual_assessment": "2011-03-17T04:00:00.000Z", "independent_assessor": "Vaultes", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2311952621", "csp": "Ernst & Young LLP", "cso": "EY Grants Accelerator", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2327655698", "csp": "Gallery Systems", "cso": "TMS Gov Cloud Suite ", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Centers for Medicare & Medicaid Services", "Cybersecurity & Infrastructure Security Agency", "Department of Agriculture", "Department of Education", "Department of Labor", "Department of State", "Department of Veterans Affairs", "Federal Deposit Insurance Corporation", "Federal Reserve System", "General Services Administration", "Internal Revenue Service", "National Institute of Standards and Technology", "Office of Personnel Management", "Pension Benefit Guaranty Corporation", "Strategic Petroleum Reserve", "Tennessee Valley Authority", "United States International Trade Commission", "United States Securities and Exchange Commission" ], "agency_reuse": [ "22-017", "22-024", "22-027" ], "service_description": "Login.gov offers the public secure and private online access to participating government programs. With one login.gov account, users can sign in to multiple government agencies. Our goal is to make managing federal benefits, services and applications easier and more secure.", "fedramp_msg": "N/A", "sales_email": "partners@login.gov", "security_email": "security@login.gov", "website": "https://www.login.gov/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2131766015", "name": "Genesys", "cloud_service_provider": "Genesys", "cloud_service_offering": "Genesys Cloud CX", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Genesys%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-04-19T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-11-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-06-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 11, "reuse": 10, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-04-19T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-11-17T20:00:00.000Z", "cert_date": "2023-06-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-06-26T20:00:00.000Z", "annual_assessment": "2011-11-17T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "Centers for Disease Control and Prevention", "Department of Labor", "Department of Veterans Affairs", "Department of the Navy", "Federal Deposit Insurance Corporation", "Federal Emergency Management Agency", "Food and Drug Administration", "General Services Administration", "Small Business Administration", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Genesys Cloud™ is an AI-powered experience orchestration platform with a full suite of omnichannel contact center capabilities, built-in workforce engagement management (WEM) and artificial intelligence (AI). It is available to the public, federal, state, local, and tribal governments, as well as research institutions, federal contractors and government contractors. \n\nFeatures and capabilities include: \n\nAll-in-One open platform - Genesys Cloud is a multi-tenant SaaS offering with a comprehensive set of native Contact Center-as-a-Service (CCaaS) product capabilities built on a single platform — running on Amazon Web Services (AWS). \n\nNative AI - Genesys Cloud has built-in conversational and predictive AI capabilities. It utilizes technologies such as predictive analytics, machine learning, and natural language understanding to automate, route and personalize interactions.\n\n Omnichannel routing - Genesys Cloud supports calls, email, web, text and social messages. A single routing engine leverages a variety of routing algorithms, evaluation and scoring methods to determine the next best action while maintaining context, intent, and desired outcome.\n\n Speech-enabled IVR & self-service – Genesys Cloud offers multilingual speech-enabled IVR with natural language understanding (NLU) technology. Automated bot assistants provide continuous support for routine queries.\n\n Workforce Engagement Management - A native suite of AI-powered WEM capabilities supports employee onboarding and includes workforce schedule management (WFM), coaching, speech & text analytics, quality management, performance management and gamification.\n\n Outbound campaigns – Genesys Cloud supports outbound dialing and digital campaigns for sending proactive notifications or contacting contact lists of people in accordance with programmable rules.\n\n Analytics and reporting – Genesys Cloud provides real-time dashboards and analytics for contact center management, with customizable reporting and drill-down capabilities for performance analysis.\n\nIntegrations - The platform includes a rich set of open APIs, integration methods and an ecosystem of 600+ pre-built solutions and applications available via the AppFoundry® Marketplace.", "fedramp_msg": "N/A", "sales_email": "PublicSectorSales@genesys.com", "security_email": "FedRAMPGCCX@genesys.com", "website": "https://www.genesys.com/fedramp/genesys-cloud-cx", "uei": "DD9KMGMUZM47", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Collaboration", "Communication", "Contact Center", "Customer Relations Management (CRM)", "Customer Service" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1918150046", "name": "Geotab", "cloud_service_provider": "Geotab", "cloud_service_offering": "Geotab Telematics Platform Government (GTP Gov)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/GeoTab%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-07-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2019-09-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2020-04-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-07-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 3, "ready_status": "Not Active", "ready_date": "2019-07-02T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-09-19T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-04-24T20:00:00.000Z", "cert_date": "2020-07-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-07-21T20:00:00.000Z", "annual_assessment": "2011-04-24T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2403745080", "csp": "ATOM EVSE", "cso": "Atom Power, Inc - ATOM EVSE", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" } ], "agency_authorizations": [ "Consumer Product Safety Commission", "General Services Administration" ], "agency_reuse": [ "22-019" ], "service_description": "The Geotab Telematics Platform (Government) (GTP Gov) is an end-to-end vehicle Telematics product, providing fleet management tools to Government fleets.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@geotab.com", "website": "https://www.geotab.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2601536221", "name": "Get A-Head", "cloud_service_provider": "Get A-Head", "cloud_service_offering": "Get A-Head (Keel Mind)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Getahead%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-04T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-12-04T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Get A-Head Platform is delivered as a Software-as-a-Service (SaaS) offering using a multi-tenant SAAS cloud computing environment. A cloud-based SaaS platform deployed in AWS GovCloud that enables secure real-time audio communication and content delivery for behavioral health and training use cases. It is available to federal, state, local, and tribal governments, as well as research institutions and federal contractors.\n\nTo simplify the tracking, delivery, and administration of clinical training Get A-Head provides institutions with a digital ecosystem that centralizes and optimizes the interactions between supervisors, counseling trainees, and those seeking mental health support. \n\nDeveloped through the lens of both those seeking and providing mental health care, Get A-Head supports efficient communication between supervisor, trainee, and client, facilitate access to notes, and recorded sessions, across all devices (i.e., smartphones, laptops, desktops, and tablets) in a secure HIPAA & PIPEDA compliant environment.\n\nThe service includes authentication, user access management, secure media distribution, and activity logging through AWS native services, Keycloak, and internal microservices. All components are containerized and orchestrated using AWS services, and encryption is applied end-to-end using FIPS 140-3 validated cryptographic modules. The authorization boundary includes the application services, identity and access management, storage, logging, monitoring, and backup components required to operate the platform in AWS GovCloud.", "fedramp_msg": "", "sales_email": "fedrampsales@keel.digital", "security_email": "fedrampsecurity@keel.digital", "website": "https://www.keelmind.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Communication", "Content Management System (CMS)", "Education & Training", "Health & Wellness", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2210851632", "name": "GetWellNetwork", "cloud_service_provider": "GetWellNetwork", "cloud_service_offering": "GetWellNetwork - Get Well Anywhere - Federal", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/GetWell%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-08-09T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-08-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-09-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-08-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-08-23T20:00:00.000Z", "cert_date": "2024-09-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-09-11T20:00:00.000Z", "annual_assessment": "2011-08-22T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "GetWell Anywhere Federal (GWA-F) is a comprehensive digital patient engagement platform designed to guide, educate, entertain, navigate, and survey patients throughout their entire care journey. From pre-procedure preparation to the ED waiting room, inpatient settings, and post-discharge recovery, GWA-F ensures continuous support. Integrated with EMR systems, it provides automated, personalized, and proactive guidance for each patient, achieving scalable, individualized care through web and mobile applications. Additionally, GWA-F automates repetitive tasks for clinicians—such as patient education, EMR documentation, and non-clinical requests—allowing them to focus on providing top-of-license care.", "fedramp_msg": "N/A", "sales_email": "fedramp@getwellnetwork.com", "security_email": "infosec@getwellnetwork.com", "website": "https://www.getwellnetwork.com/", "uei": "KB21TQABY6M4", "small_business": false, "business_categories": [ "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1812058188", "name": "GitHub", "cloud_service_provider": "GitHub", "cloud_service_offering": "GitHub Enterprise Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/GitHub_Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-04-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-10-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-10-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 21, "reuse": 223, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-04-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-10-04T20:00:00.000Z", "cert_date": "2018-10-04T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-10-04T20:00:00.000Z", "annual_assessment": "2011-10-04T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [ { "id": "FR2106555313", "csp": "AchieveIt Online, LLC", "cso": "AchieveIt", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "F1302201919", "csp": "Acquia Inc.", "cso": "Acquia Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2317139564", "csp": "Articulate Global LLC", "cso": "Articulate 360", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2527132001", "csp": "Asana Inc.", "cso": "Asana", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1923743650A", "csp": "Automattic, Inc.", "cso": "WordPress VIP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430123303", "csp": "Aztec Software", "cso": "Aztec Learning System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2504148525", "csp": "Booz Allen Hamilton", "cso": "Footprint", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421035110", "csp": "Cellebrite", "cso": "Cellebrite Government Cloud (CGC)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2332984245", "csp": "ChargePoint, Inc.", "cso": "CP Fed Cloud", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2220549818", "csp": "CirrusMD", "cso": "CirrusMD Virtual Health Chat for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2014656304", "csp": "Civis Analytics, Inc.", "cso": "Civis Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416856649", "csp": "Creative Veteran Productions", "cso": "Federal Immersive Learning Management System (FED-ILMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1834740315", "csp": "Databricks, Inc.", "cso": "Databricks on AWS US East/West", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324740262", "csp": "Databricks, Inc.", "cso": "Databricks on AWS GovCloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2023864279A", "csp": "Datadog, Inc.", "cso": "Datadog for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2112152882", "csp": "Datavant", "cso": "Datavant Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2100845343", "csp": "DevResults", "cso": "DevResults", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1814557199", "csp": "DNAnexus, Inc.", "cso": "DNAnexus Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2004446306", "csp": "Elastic", "cso": "Elastic Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234334891", "csp": "Glassbeam, Inc.", "cso": "Glassbeam Clinsights", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2521554684", "csp": "H2O.AI for Government", "cso": "H2O.AI", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2135040486", "csp": "HealthVerity", "cso": "Privacy Preserving Records Linkage (PPRL)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1408115175", "csp": "Huddle US", "cso": "Huddle Enterprise Cloud Content Collaboration and File Sharing Portal for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2607452240", "csp": "IBM", "cso": "GO.gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1718334757", "csp": "ID.me", "cso": "ID.me Identity Gateway", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2429166928", "csp": "Ideagen", "cso": "Ideagen Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1512017638", "csp": "IdeaScale", "cso": "IdeaScale Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2017257053", "csp": "Infoblox", "cso": "Infoblox Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029331613", "csp": "Informatica LLC", "cso": "Informatica Intelligent Cloud Services (IICS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226144516", "csp": "MARi, LLC", "cso": "MARi", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335153827", "csp": "MasterControl", "cso": "Quality Excellence Gov (Qx Gov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2225648574", "csp": "Mathematica Inc.", "cso": "Mathematica Cloud Support System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1902240018", "csp": "MDRC", "cso": "SPROUT", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2310974411", "csp": "PagerDuty", "cso": "PagerDuty Operations Cloud", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2004753002", "csp": "Relativity ODA LLC", "cso": "RelativityOne Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1931476240", "csp": "Rescale", "cso": "Rescale Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2209555576", "csp": "RingMD USA Inc.", "cso": "RingMD Telemedicine", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2204842850", "csp": "Rosalind, Inc.", "cso": "ROSALIND", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1809360201", "csp": "Snowflake Inc.", "cso": "The Data Cloud on AWS US East/West", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1809360202A", "csp": "Snowflake Inc.", "cso": "The Data Cloud on Azure Government (High)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2230451369", "csp": "Snyk", "cso": "Snyk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918740338", "csp": "Sumo Logic", "cso": "Sumo Logic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213647361", "csp": "Talkdesk", "cso": "Talkdesk CX Cloud™ Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125561001", "csp": "Unqork, Inc.", "cso": "Unqork for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1817874315", "csp": "Valimail", "cso": "Valimail Enforce Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2411443563", "csp": "Valley IT Solutions, LLC", "cso": "Kernos", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2525556241XM", "csp": "Vanta", "cso": "Vanta Government Cloud", "status": "FedRAMP Certified", "impact_level": "20x Moderate", "impact_level_number": "6" }, { "id": "F1605037894", "csp": "Virtru", "cso": "Virtru Data Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2433985791", "csp": "Vyond", "cso": "Vyond for Government", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1924344515", "csp": "Wellspring Worldwide, Inc.", "cso": "Wellspring Tech Transfer and IP Management Suite (WTIMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1821856903", "csp": "Zendesk", "cso": "Zendesk Customer Support and Help Desk Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" } ], "agency_authorizations": [ "Argonne National Laboratory", "Bureau of Economic Analysis", "Consumer Product Safety Commission", "Council of the Inspectors General on Integrity and Efficiency", "Department of Agriculture", "Department of Education", "Department of the Interior", "Environmental Protection Agency", "Federal Energy Regulatory Commission", "General Services Administration", "National Aeronautics and Space Administration", "National Institute of Standards and Technology", "National Institutes of Health", "National Mediation Board", "National Science Foundation", "National Telecommunications and Information Administration", "Nuclear Regulatory Commission", "Office of Financial Research", "Other Executive Branch Subagency", "Substance Abuse and Mental Health Service Administration", "United States Securities and Exchange Commission" ], "agency_reuse": [ "" ], "service_description": "GitHub is a collaborative development platform inspired by the way you work. From open source (https://github.com/open-source) to business (https://github.com/business), you can plan, build, review, and ship software at work - all while tracking bugs and discussing ideas. You can securely develop your organization's software on GitHub, whether you work for a small startup or a large agency.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "security@github.com", "website": "https://government.github.com/", "uei": "WR2ZN519GFX4", "small_business": false, "business_categories": [ "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2411959145", "name": "GitLab", "cloud_service_provider": "GitLab", "cloud_service_offering": "GitLab Dedicated for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Gitlab%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-06-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-04-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-06-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-04-02T20:00:00.000Z", "cert_date": "2025-05-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-05-15T20:00:00.000Z", "annual_assessment": "2011-03-24T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "General Services Administration", "National Oceanic and Atmospheric Administration" ], "agency_reuse": [ "" ], "service_description": "Adopt modern and efficient cloud-based technologies while safeguarding the security of federal information with GitLab Dedicated for Government. GitLab offers the most comprehensive, developer-preferred, customizable DevSecOps Platform as a single-tenant SaaS deployment. Delivered as a dedicated, isolated environment for each customer, this solution features data residency controls, advanced search capabilities, secure private networking, enterprise encryption, and integration with identity providers (IDPs).\n\nGitLab Dedicated for Government strategically consolidates development tools, delivering measurable improvements in deployment velocity while maintaining strict security compliance. The solution streamlines workflows through integrated automation, configurable security controls, and end-to-end visibility across the entire software lifecycle. With GitLab, government agencies can accelerate innovation while ensuring their supply chain remains secure from code to cloud.", "fedramp_msg": "N/A", "sales_email": "sales-pubsec@gitlab.com", "security_email": "", "website": "https://about.gitlab.com/solutions/public-sector/", "uei": "N2E6J5DFLSP3", "small_business": false, "business_categories": [ "Collaboration", "Cybersecurity & Risk Management", "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2234334891", "name": "Glassbeam, Inc.", "cloud_service_provider": "Glassbeam, Inc.", "cloud_service_offering": "Glassbeam Clinsights", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Glassbeam%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-11-09T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-01-16T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-11-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-01-16T20:00:00.000Z", "cert_date": "2025-05-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-05-23T20:00:00.000Z", "annual_assessment": "2011-01-08T04:00:00.000Z", "independent_assessor": "Linford & Company", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Glassbeam’s Clinsights™ solutions transform healthcare operations through actionable insights. The patented cloud-based platforms are designed to transform and analyze multi-structured data, leveraging Artificial Intelligence (AI) to enhance Healthcare performance and efficiency.", "fedramp_msg": "", "sales_email": "sales@glassbeam.com", "security_email": "fedramp-security@glassbeam.com", "website": "https://www.glassbeam.com/solutions/", "uei": "LZN5WRC2RW53", "small_business": true, "business_categories": [ "Analytics", "Data Management", "Health & Wellness", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2035860874", "name": "Global Telehealth Services, inc.", "cloud_service_provider": "Global Telehealth Services, inc.", "cloud_service_offering": "GTS VirtualHealth Platform (GTS-VP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/GTS%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-01-03T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2022-05-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2022-06-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-07-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2022-01-03T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-05-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-06-24T20:00:00.000Z", "cert_date": "2024-07-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-07-17T20:00:00.000Z", "annual_assessment": "2011-07-17T04:00:00.000Z", "independent_assessor": "SecureIT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "The GTS-VP offers Customer Agencies a powerful, flexible and convenient solution to provide Remote Patient Monitoring (RPM), Real Time Telehealth visits, and Store and Forward Technology (labs, images, and clinical data) services. The GTS-VP connects healthcare providers, patients, and patient families to communicate healthcare information from remote patient monitoring tools and through video-teleconferencing. The GTS-VP integrates with RPM medical devices from most any manufacturer and can be readily configured to work across multiple disease types and chronic conditions. The GTS-VP is also designed to make use of existing agency workflows and business processes with the ability to expand to address conditions and incorporate devices and capabilities that have yet to be developed.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@globaltelehealthservices.com", "website": "https://www.globaltelehealthservices.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2616932229", "name": "Glytec, LLC", "cloud_service_provider": "Glytec, LLC", "cloud_service_offering": "Glucommander", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Glytec%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-14T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-04-14T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Prescient Security, LLC.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Glytec’s Glucommander® is an FDA-cleared software-as-a-medical-device (SaMD), utilized for diabetes management and automated insulin titration. Glucommander is purpose-built to improve patient safety and clinical outcomes. Glucommander provides clinicians, hospitalists, and medical facilities with constant, data-driven dosing recommendations that stabilize blood glucose levels and decrease the incidences of hypoglycemia, length of stays and readmissions.", "fedramp_msg": "", "sales_email": "government@glytec.com", "security_email": "fedrampsecurity@glytec.com", "website": "https://glytec.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Data Management", "Health & Wellness", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2604952026", "name": "Google", "cloud_service_provider": "Google", "cloud_service_offering": "Gemini for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Google%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-10-31T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2026-01-21T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-10-31T20:00:00.000Z", "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-01-21T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-01-21T20:00:00.000Z", "annual_assessment": "2011-01-21T04:00:00.000Z", "independent_assessor": "Federal Risk and Authorization Management Program", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program", "U.S. Election Assistance Commission" ], "agency_reuse": [ "" ], "service_description": "Gemini for Government is delivered as a Public Cloud offering utilizing a multi-tenant Artificial Intelligence (AI) and Machine Learning (ML) cloud computing environment, spanning both Platform as a Service (PaaS) and Software as a Service (SaaS) models.\nIt is available to the federal, state, local, and tribal governments, as well as research institutions, federal contractors, and government contractors, to enable secure and responsible application of generative AI for public sector missions.", "fedramp_msg": "", "sales_email": "geminiforgov@google.com", "security_email": "fedramp+gemini@google.com", "website": "https://cloud.google.com/blog/topics/public-sector/introducing-gemini-for-government-supporting-the-us-governments-transformation-with-ai/", "uei": "NQV3T7DDKNT6", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Customer Service", "Data Management", "Design & Multimedia", "Education & Training", "Legal & Policy", "Operations Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1805751477", "name": "Google", "cloud_service_provider": "Google", "cloud_service_offering": "Google Services (Google Cloud Platform Products and underlying Infrastructure)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Google%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-02-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2019-12-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 27, "reuse": 429, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2019-02-05T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2019-12-04T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-12-04T20:00:00.000Z", "annual_assessment": "2011-11-22T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS", "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2425960757", "csp": "Abnormal AI ", "cso": "Abnormal AI for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2214062312", "csp": "Actsoft, Inc", "cso": "Actsoft Workforce Manager for Gov.", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2431264500", "csp": "AppOmni", "cso": "AppOmni SaaS Security for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2412062433", "csp": "Atlassian", "cso": "Atlassian Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814168113", "csp": "Authentic8, Inc.", "cso": "Silo", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226322745", "csp": "Autodesk", "cso": "Autodesk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918442180", "csp": "Bizagi Corp.", "cso": "Bizagi Cloud for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2424553196", "csp": "BLINK CHARGING", "cso": "BLINK GOV", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2504148525", "csp": "Booz Allen Hamilton", "cso": "Footprint", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1212191840A", "csp": "Box Inc.", "cso": "Box Enterprise Cloud Content Collaboration Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2000939520", "csp": "Broad Institute, Inc.", "cso": "Terra", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125059322", "csp": "Center for Translational Data Science (CTDS)", "cso": "Gen3 Data Ecosystems Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1605107897", "csp": "Cisco Systems Inc.", "cso": "Cisco Cloudlock for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2014656304", "csp": "Civis Analytics, Inc.", "cso": "Civis Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000863987A", "csp": "Cloudflare", "cso": "Cloudflare for Government - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1706403967", "csp": "Collibra", "cso": "Collibra Platform for Government (CPG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234550858", "csp": "Concur Technologies, Inc.", "cso": "Concur Cloud for Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2325657620", "csp": "Content Guru", "cso": "Storm Cloud Contact Center", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2200507410", "csp": "Copado", "cso": "Copado GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1206111371", "csp": "CoSo Cloud, LLC.", "cso": "Knox Systems", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1807853629A", "csp": "CrowdStrike, Inc.", "cso": "CrowdStrike Falcon Platform for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2100845343", "csp": "DevResults", "cso": "DevResults", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2414718666", "csp": "Digital Science UK Limited", "cso": "Overleaf", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1814557199", "csp": "DNAnexus, Inc.", "cso": "DNAnexus Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2410060106", "csp": "DTEX Systems, Inc.", "cso": "DTEX InTERCEPT for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2004446306", "csp": "Elastic", "cso": "Elastic Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2510664395", "csp": "ExtraHop Networks", "cso": "ExtraHop RevealX Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1932554201", "csp": "Forcepoint", "cso": "ONE – Security Service Edge (SSE) – CASB/DLP/SWG/ZTNA/RBI", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1834348080", "csp": "GDC Integration, Inc.", "cso": "General Support System (GSS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918150046", "csp": "Geotab", "cso": "Geotab Telematics Platform Government (GTP Gov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1206081364", "csp": "Google", "cso": "Google Workspace", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2031155471", "csp": "Iron Mountain", "cso": "Iron Mountain InSight", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2212912561", "csp": "Itamar Medical", "cso": "Itamar Dispatcher Cloud (IDC)", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1927682057", "csp": "M.C. Dean, Inc.", "cso": "InfraLink", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226144516", "csp": "MARi, LLC", "cso": "MARi", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1910758409", "csp": "Mimecast", "cso": "Incydr Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234963115", "csp": "NCR Government, LLC", "cso": "NCR VOYIX GOVERNMENT CLOUD", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2119265538", "csp": "NEOGOV", "cso": "NEOGOV Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2105946715", "csp": "Netskope, Inc.", "cso": "Netskope NewEdge Government.", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1913470600", "csp": "Palo Alto Networks, Inc.", "cso": "Palo Alto Networks Government Cloud Services", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1606097904A", "csp": "Qualtrics, LLC", "cso": "Qualtrics XM Platform - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1722838693", "csp": "Rave Mobile Safety", "cso": "Rave Safety Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2309954376", "csp": "RecAccess", "cso": "RecAccess", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2204842850", "csp": "Rosalind, Inc.", "cso": "ROSALIND", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234256499", "csp": "Rubrik", "cso": "Rubrik Security Cloud - Government (RSC-G)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2214346691", "csp": "Secunetics, Inc.", "cso": "Gobo Framework (Gobo)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2033152148", "csp": "Seven Bridges Genomics, Inc", "cso": "Seven Bridges Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2035740126", "csp": "Sprinklr, Inc.", "cso": "Sprinklr CXM for Government (CXM)", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1722532017", "csp": "stackArmor", "cso": "Clarity", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2130949241", "csp": "StackArmor", "cso": "Rally", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134635186", "csp": "Synack", "cso": "On-Demand Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1901136437", "csp": "Synergetics Incorporated", "cso": "Open Federal Logistics Information System (OpenFLIS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213647361", "csp": "Talkdesk", "cso": "Talkdesk CX Cloud™ Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2215045786", "csp": "Tenable", "cso": "Tenable Cloud Security for US Government - Ermetic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2009746321", "csp": "United Solutions", "cso": "US AI", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1605037894", "csp": "Virtru", "cso": "Virtru Data Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2433985791", "csp": "Vyond", "cso": "Vyond for Government", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1825232355A", "csp": "WellHive Holdings, LLC", "cso": "WellHive", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2103344623", "csp": "Workday Inc.", "cso": "Workday Government Cloud (WGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1726564822", "csp": "Workiva", "cso": "Workiva Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1821856903", "csp": "Zendesk", "cso": "Zendesk Customer Support and Help Desk Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1720454205", "csp": "Zscaler, Inc.", "cso": "Zscaler Internet Access - Government (Secure Web Gateway - vTIC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Brookhaven Site Office", "Centers for Disease Control and Prevention", "Customs and Border Protection", "Cybersecurity & Infrastructure Security Agency", "Defense Information Systems Agency", "Department of Agriculture", "Department of Education", "Department of Energy", "Department of Health and Human Services", "Department of Homeland Security", "Department of State", "Department of Veterans Affairs", "Federal Retirement Thrift Investment Board", "Fermi National Accelerator Laboratory", "Food and Drug Administration", "General Services Administration", "Immigration and Customs Enforcement", "Internal Revenue Service", "National Aeronautics and Space Administration", "National Institutes of Health", "National Mediation Board", "National Oceanic and Atmospheric Administration", "United States Census Bureau", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "The Google Services offering consists of two primary layers: Google Cloud Platform (GCP) and Google Common Infrastructure (GCI). The Google Cloud Platform is made up of customer facing services. The services within the Google Cloud Platform sit on top of Google Common Infrastructure, which is infrastructure private to Google that is responsible for the implementation of common controls for all Google service offerings. These two pieces work together to provide the Google Services offering.\n\nGCP is an extensive suite of products from Google-controlled development environments to customer-managed environments (e.g. Google Compute Engine) offering flexibility via fully customizable virtual machines and utilization of other services like: fully-managed databases and data analytics tools, networking services including virtual load balancing and virtual private cloud solutions, access management tools, Cloud project management tools, machine learning capabilities, and developer tools.\n\nAssured Workloads is a GCP feature which turns on specific project configurations per the target compliance regime for customers. Products discretely integrate with Assured Workloads and enforce the organization policies themselves.\n\n** The entire authorized security boundary of Google Services is documented, assessed, and managed against the FedRAMP High baseline of security and privacy controls. Services that are denoted with an asterisk (*) do not meet the SA-9(5) requirement. Please review the JAB P-ATO letter for more information.", "fedramp_msg": "Google Services (Google Cloud Platform Products and underlying Infrastructure) previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "fedramp+services@google.com", "website": "https://cloud.google.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Fleet Management", "Network Management", "Operations Management", "Storage", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "AlloyDB", "App Engine", "Assured Workloads", "Cloud Domains", "Cloud Router", "Cloud Run", "Direct VPC Egress (replaced Serverless VPC Access)", "Document AI", "Google Cloud Managed Service for Apache Kafka (excluding Kafka Connect and Kafka Schema Registry)", "Google Kubernetes Engine (GKE)", "Google Security Operations SIEM (Google SecOps SIEM)", "Google Security Operations SOAR (Google SecOps SOAR)", "Infrastructure Manager", "Integration Connectors", "Looker (Google Cloud Core)", "Managed Service for Apache Airflow (formerly Cloud Composer)", "Memorystore for Redis Cluster", "Memorystore for Valkey", "Migrate to Virtual Machines", "Network Connectivity Center", "Network Intelligence Center", "Persistent Disk", "Privileged Access Manager", "Pub/Sub", "Recommender", "Resource Manager", "Secure Source Manager", "Secure Web Proxy (Cloud SWP)", "Security Command Center (Excluding Enterprise)", "Service Directory", "Text-to-Speech", "Traffic Director", "Virtual Private Cloud (includes Private Google Access, Private Service Connect, Private Services Access, VPC Flow Logs)" ], "all_others": [ "AI Protection", "Access Approval*", "Access Context Manager", "Access Transparency", "Admin Console", "Agent Assist", "Agent Search on Gemini Enterprise Agent Platform (formerly Vertex AI Search)", "Apigee", "App Hub", "Application Integration", "Artifact Analysis", "Artifact Registry (replaced Container Registry)", "Assured Open Source Software (Assured OSS)", "Audit Manager", "Backup and DR Service", "Backup for GKE", "Batch*", "BigQuery", "BigQuery Data Transfer Service", "Bigtable", "Binary Authorization", "CX Insights (formerly Conversational Insights)", "Certificate Authority Service", "Certificate Manager", "Cloud Asset Inventory", "Cloud Billing*", "Cloud Build", "Cloud CDN*", "Cloud DNS", "Cloud Data Fusion", "Cloud Data Loss Prevention API", "Cloud Deploy", "Cloud Endpoints*", "Cloud Error Reporting*", "Cloud External Key Manager (Cloud EKM)", "Cloud Functions for Firebase*", "Cloud HSM (Hardware Security Module)", "Cloud Healthcare API (formerly Cloud Healthcare)", "Cloud Identity", "Cloud Interconnect", "Cloud Intrusion Detection System (Cloud IDS)", "Cloud Key Management Service (Cloud KMS)", "Cloud Load Balancing: Application Load Balancer", "Cloud Load Balancing: Passthrough Network Load Balancer", "Cloud Load Balancing: Proxy Network Load Balancer", "Cloud Logging", "Cloud Monitoring", "Cloud NAT (Network Address Translation)", "Cloud Natural Language API", "Cloud Next Generation Firewall (Cloud NGFW) - Essentials", "Cloud Next Generation Firewall (Cloud NGFW) - Standard", "Cloud Profiler*", "Cloud Quotas", "Cloud SDK", "Cloud SQL", "Cloud Scheduler*", "Cloud Service Mesh (formerly Anthos Service Mesh)", "Cloud Shell*", "Cloud Source Repositories*", "Cloud Storage", "Cloud Storage for Firebase*", "Cloud Tasks", "Cloud Trace*", "Cloud Translation API", "Cloud VPN", "Cloud Vision API", "Cloud Workstations", "Compute Engine", "Data Security Posture Management", "Data Studio (formerly Looker Studio (including Pro))", "DataStream*", "Database Center", "Database Migration Service*", "Dataflow", "Dataform", "Datastore*", "Dialogflow CX", "Dialogflow ES", "Earth Engine*", "EventArc Standard (excluding Advanced)", "Filestore (Basic HDD and Basic SSD tiers)", "Firebase Authentication*", "Firestore (replaced Datastore; excluding Firestore with MongoDB compatibility)", "Firewall Insights", "GKE Config Sync (formerly Config Sync)", "GKE Hub", "GKE Identity Service (formerly Anthos Identity Service (AIS) - [Hybrid Identity])", "Gemini Enterprise", "Gemini Enterprise for Customer Experience (GECX) (formerly Conversational AI and Contact Center AI)*", "Google Cloud Armor", "Google Cloud Marketplace", "Google Cloud Migration Center", "Identity Platform*", "Identity and Access Management (IAM)", "Identity-Aware Proxy (IAP) (excluding IAP for TCP)", "Key Access Justification", "Knowledge Catalog (formerly Dataplex Universal Catalog; replaced Data Catalog)", "Managed Service for Apache Spark (formerly Dataproc)", "Metadata on Gemini Enterprise Agent Platform (Vertex ML Metadata)", "Model Armor", "Network Service Tiers*", "Organization Policy Service", "Sensitive Data Protection (formerly Cloud DLP)", "Spanner", "Storage Transfer Service", "Talent Solution*", "VPC Service Controls", "Video Intelligence API*", "Web Risk API*", "Workflows*", "reCAPTCHA Enterprise*" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1206081364", "name": "Google", "cloud_service_provider": "Google", "cloud_service_offering": "Google Workspace", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Google%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-12-16T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-05-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2021-10-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 20, "reuse": 634, "ready_status": "Not Active", "ready_date": "2020-12-16T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2021-05-25T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2021-10-28T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-10-28T20:00:00.000Z", "annual_assessment": "2011-10-27T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2335047392", "csp": "3rd Eye Technologies LLC.", "cso": "Mystic Message Archival", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2307441316", "csp": "Absolute Security", "cso": "Absolute Secure Endpoint Product Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1302201919", "csp": "Acquia Inc.", "cso": "Acquia Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1726637760", "csp": "American Heart Association, Inc.", "cso": "American Heart Association Precision Medicine Platform(AHA-PMP)", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2431264500", "csp": "AppOmni", "cso": "AppOmni SaaS Security for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2330939028", "csp": "Aqua Security Software Inc.", "cso": "Aqua Platform for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1908649566", "csp": "Aruba Networks", "cso": "Aruba Central", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2527132001", "csp": "Asana Inc.", "cso": "Asana", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814168113", "csp": "Authentic8, Inc.", "cso": "Silo", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1923743650A", "csp": "Automattic, Inc.", "cso": "WordPress VIP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2025827270", "csp": "AvePoint Inc.", "cso": "AvePoint Online Services for US Government (AOS-UG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1916254386", "csp": "Boomi", "cso": "Boomi Enterprise Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000939520", "csp": "Broad Institute, Inc.", "cso": "Terra", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2009476860A", "csp": "Casepoint LLC", "cso": "Casepoint Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2530025267", "csp": "Caveonix, Inc.", "cso": "Caveonix", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2330728655", "csp": "Chronus LLC", "cso": "Chronus for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2309544938", "csp": "Cloudera Government Solutions, Inc", "cso": "Cloudera for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000863987A", "csp": "Cloudflare", "cso": "Cloudflare for Government - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2306445868", "csp": "Cohesity", "cso": "Cohesity Cloud Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2325657620", "csp": "Content Guru", "cso": "Storm Cloud Contact Center", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1915750265", "csp": "Continuum GRC, Inc.", "cso": "ITAM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2200507410", "csp": "Copado", "cso": "Copado GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416263030", "csp": "CrestPoint Solutions, Inc", "cso": "CrestPoint Environmental Management Service (CEMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1807853629A", "csp": "CrowdStrike, Inc.", "cso": "CrowdStrike Falcon Platform for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2324740262", "csp": "Databricks, Inc.", "cso": "Databricks on AWS GovCloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1834740315", "csp": "Databricks, Inc.", "cso": "Databricks on AWS US East/West", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2023864279A", "csp": "Datadog, Inc.", "cso": "Datadog for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2112152882", "csp": "Datavant", "cso": "Datavant Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1606087903A", "csp": "Deltek - Replicon", "cso": "Replicon Cloud Platform (Enterprise Time Tracking Platform)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2100845343", "csp": "DevResults", "cso": "DevResults", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2414718666", "csp": "Digital Science UK Limited", "cso": "Overleaf", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2432940371", "csp": "Docebo", "cso": "Docebo Learning Platform for Gov (DCBO-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1609267945", "csp": "DocuSign", "cso": "Docusign - IAM eSignature", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1605027893", "csp": "DocuSign", "cso": "DocuSign CLM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1823149273", "csp": "Duo Security (a Cisco Company)", "cso": "Duo Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2016962740", "csp": "Eightfold AI Inc.", "cso": "Eightfold Talent Intelligence Platform (TIP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1827963145", "csp": "Exterro, Inc.", "cso": "Exterro E-Discovery and Legal Software Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2510664395", "csp": "ExtraHop Networks", "cso": "ExtraHop RevealX Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1834348080", "csp": "GDC Integration, Inc.", "cso": "General Support System (GSS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918150046", "csp": "Geotab", "cso": "Geotab Telematics Platform Government (GTP Gov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1812058188", "csp": "GitHub", "cso": "GitHub Enterprise Cloud", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2411959145", "csp": "GitLab", "cso": "GitLab Dedicated for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2521554684", "csp": "H2O.AI for Government", "cso": "H2O.AI", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1919750997", "csp": "HackerOne", "cso": "HackerOne Continuous Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2135040486", "csp": "HealthVerity", "cso": "Privacy Preserving Records Linkage (PPRL)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1831429369", "csp": "HireVue", "cso": "Recruitment Assessments and Video Interviewing", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1718334757", "csp": "ID.me", "cso": "ID.me Identity Gateway", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1512017638", "csp": "IdeaScale", "cso": "IdeaScale Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2017257053", "csp": "Infoblox", "cso": "Infoblox Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1724526654", "csp": "Intelliworx", "cso": "Intelliworx Cloud Workflow Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2027958176", "csp": "Issio Solutions, Inc.", "cso": "Issio Information System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2128462521", "csp": "Juvare, LLC", "cso": "Juvare Federal Cloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2406453618", "csp": "LabArchives", "cso": "LabArchives for Government (LG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2218073444", "csp": "Lucid Software, Inc.", "cso": "Lucid GovSuite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226144516", "csp": "MARi, LLC", "cso": "MARi", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2119265538", "csp": "NEOGOV", "cso": "NEOGOV Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2105946715", "csp": "Netskope, Inc.", "cso": "Netskope NewEdge Government.", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1607057910", "csp": "New Relic", "cso": "New Relic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2131856836", "csp": "Okta", "cso": "Okta IDaaS Government High Cloud (GHC)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2526948870", "csp": "Ontic Technologies", "cso": "Ontic for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2310974411", "csp": "PagerDuty", "cso": "PagerDuty Operations Cloud", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2235229299", "csp": "Paperless Innovations, Inc.", "cso": "Actus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1818240234", "csp": "Perceptyx", "cso": "Perceptyx Insights Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2516365096", "csp": "Procore Technologies, Inc", "cso": "Procore for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2113157410", "csp": "Public Health Foundation", "cso": "TRAIN Learning Network", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR1924942935", "csp": "Qgenda, LLC", "cso": "QGenda", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "F1606097904A", "csp": "Qualtrics, LLC", "cso": "Qualtrics XM Platform - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2102031769", "csp": "Red Hat", "cso": "Red Hat OpenShift Service on AWS (ROSA)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1931476240", "csp": "Rescale", "cso": "Rescale Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2209555576", "csp": "RingMD USA Inc.", "cso": "RingMD Telemedicine", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2425742814", "csp": "San Luis Aviation, Inc.", "cso": "ESChat", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1821062403", "csp": "Saviynt, Inc.", "cso": "Saviynt Enterprise Identity Cloud (EIC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2214346691", "csp": "Secunetics, Inc.", "cso": "Gobo Framework (Gobo)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919071020A", "csp": "SentinelOne", "cso": "SentinelOne Singularity Platform High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2033152148", "csp": "Seven Bridges Genomics, Inc", "cso": "Seven Bridges Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1823447014", "csp": "Slack Technologies", "cso": "Slack", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1809360201", "csp": "Snowflake Inc.", "cso": "The Data Cloud on AWS US East/West", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1809360202A", "csp": "Snowflake Inc.", "cso": "The Data Cloud on Azure Government (High)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2230451369", "csp": "Snyk", "cso": "Snyk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213722684", "csp": "Spider Strategies", "cso": "Spider Impact for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1607197917", "csp": "Splunk", "cso": "Splunk Cloud Platform for FedRAMP Moderate", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2314156865", "csp": "Splunk", "cso": "Splunk Cloud Platform for FedRAMP High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2130949241", "csp": "StackArmor", "cso": "Rally", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918740338", "csp": "Sumo Logic", "cso": "Sumo Logic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134635186", "csp": "Synack", "cso": "On-Demand Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213647361", "csp": "Talkdesk", "cso": "Talkdesk CX Cloud™ Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1912051231", "csp": "TechTrend, Inc.", "cso": "Federal GovCloud (FGC) DevSecOps", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814276801", "csp": "Tenable Public Sector (TPS)", "cso": "Tenable Government Solutions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2118555665", "csp": "Totara Learning Inc.", "cso": "Totara Talent Development Government Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2009746321", "csp": "United Solutions", "cso": "US AI", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2125561001", "csp": "Unqork, Inc.", "cso": "Unqork for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1817874315", "csp": "Valimail", "cso": "Valimail Enforce Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2525556241XM", "csp": "Vanta", "cso": "Vanta Government Cloud", "status": "FedRAMP Certified", "impact_level": "20x Moderate", "impact_level_number": "6" }, { "id": "FR1804557312", "csp": "Veritone, Inc.", "cso": "Veritone Intelligent Digital Evidence Management System (iDEMS) for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2433985791", "csp": "Vyond", "cso": "Vyond for Government", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2401742096", "csp": "WillCo Tech", "cso": "CyberSTAR™", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2103344623", "csp": "Workday Inc.", "cso": "Workday Government Cloud (WGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2113557839", "csp": "Yello Dba Recsolu Inc", "cso": "Yello Government Recruiting Solution", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1821856903", "csp": "Zendesk", "cso": "Zendesk Customer Support and Help Desk Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1720454205", "csp": "Zscaler, Inc.", "cso": "Zscaler Internet Access - Government (Secure Web Gateway - vTIC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2219763604", "csp": "Zscaler, Inc.", "cso": "Zscaler Private Access - Government (Zero Trust Exchange - VPN Replacement)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Community Living", "Centers for Medicare & Medicaid Services", "Customs and Border Protection", "Cybersecurity & Infrastructure Security Agency", "Defense Information Systems Agency", "Department of Agriculture", "Department of Energy", "Department of State", "Department of Transportation", "General Services Administration", "HUD Office of Inspector General", "Immigration and Customs Enforcement", "Internal Revenue Service", "Job Corps", "National Aeronautics and Space Administration", "National Archives and Records Administration", "National Institute of Standards and Technology", "National Mediation Board", "Social Security Administration" ], "agency_reuse": [ "" ], "service_description": "Google Workspace (formerly G Suite) is comprised of Google’s multi-tenant public and hybrid cloud instances and leverages Google Services.\n\n** The entire authorized security boundary of Google Services is documented, assessed, and managed against the FedRAMP High baseline of security and privacy controls. Services that are denoted with an asterisk (*) do not meet the SA-9(5) requirement. Please review the JAB P-ATO letter for more information.", "fedramp_msg": "Google Workspace previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "fedramp+workspace@google.com", "website": "https://workspace.google.com/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication" ], "service_last_90": [ "" ], "all_others": [ "*Appsheet", "Admin SDK: Admin Settings API, Apps Email Audit API, Calendar Resource API, Directory API (replaced Provisioning API), Domain Shared Contacts API, Email Settings API, Enterprise License Manager API, Groups Migration API, Groups Settings API, Reports API, Reseller API", "Android and Chrome Device Management", "Calendar", "Chrome Sync (Google Workspace for Education domains only)", "Classroom", "Cloud Search (including 3P)", "Contacts", "Directory Sync", "Docs", "Docs APIs: Apps Activity API, Calendar API, Contacts API, Drive REST API (replaced Documents List API), Gmail", "Drawings", "Drive", "Forms", "Gemini App", "Gemini for Workspace", "Gmail", "Google Chat", "Google Drive for Work", "Google Meet", "Google Meet - Livestream", "Google Tasks", "Google Vids", "Google Workspace Security Center (for Google Workspace Enterprise and Google Workspace Enterprise for Education domains only)", "Groups for Business", "Jamboard", "Keep", "New Sites", "REST API (replaced Email Migration API), Sheets API, Sites API, Tasks API", "Secure LDAP", "Sheets", "Sites Classic", "Slides", "Vault", "Voice" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1815734543", "name": "Gordian", "cloud_service_provider": "Gordian", "cloud_service_offering": "Gordian Federal Cloud powered by RSMeans Data", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Gordian%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-10-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-11-19T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2022-07-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": "2020-10-28T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2021-11-19T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2022-07-02T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-07-02T20:00:00.000Z", "annual_assessment": "2011-06-23T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "Federal Aviation Administration", "National Aeronautics and Space Administration", "National Institute of Standards and Technology", "Social Security Administration", "US Fish and Wildlife Service" ], "agency_reuse": [ "" ], "service_description": "Gordian Federal Cloud is an enterprise Software as a Service (SaaS) solution powered by RSMeans data. The cloud-based solution is a comprehensive suite of modules designed to securely provide federal users with the tools and cost data to better manage construction and facilities estimates, contracts and pricing proposals. Decision-makers are empowered with up-to-date information that will deliver accurate and competitive bids, minimize the risk of cost overruns, reduce variability and gain control over costs.\n\nGordian is the leader in facility and construction cost data, software and services for all phases of the building lifecycle. A pioneer of Job Order Contracting, Gordian’s solutions also include our proprietary RSMeans data and a comprehensive suite of Facilities Planning solutions. From planning to design, procurement, construction and operations, Gordian’s solutions help clients maximize efficiency, optimize cost savings and increase building quality.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/07/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "fedramp@gordian.com", "security_email": "fedramp@gordian.com", "website": "https://www.gordian.com/solutions/industry/federal/fedramp/", "uei": "R8JXSHBYMJS2", "small_business": false, "business_categories": [ "Construction" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2617333263", "name": "GovDash", "cloud_service_provider": "GovDash", "cloud_service_offering": "GovDash", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/GovDash%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-04-28T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "GovDash is a cloud-native, multi-tenant SaaS platform purpose-built for public-sector business development. Delivered in a secure hybrid-cloud environment and accessed through any modern browser, it unifies the core work areas (Discover, Capture Cloud, Proposal Cloud, Contract Cloud, Word Assistant, and a secure Data Library) so federal contractors and subcontractors can manage the entire opportunity-to-award process from a single workspace.\n\nAcross these modules, AI-driven workflows accelerate each stage of the contracting lifecycle: Discover provides search and business development research tooling; Capture Cloud pinpoints relevant opportunities and guides solution architecture; Proposal Cloud automates compliance matrices, outlines, content drafting, and in-document graphics editing; Contract Cloud centralizes award data, CPARS, and status reporting; and the Data Library stores reusable credentials and documents. Together, these capabilities enable teams to find bids faster, craft higher-quality proposals with less manual effort, and maintain full visibility over contracts after award.", "fedramp_msg": "", "sales_email": "hello@govdash.com", "security_email": "security@govdash.com", "website": "https://www.govdash.com/", "uei": "WU1ZMXGYYLH3", "small_business": true, "business_categories": [ "Collaboration", "Customer Relations Management (CRM)", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2002757173", "name": "Government Retirement & Benefits, Inc.", "cloud_service_provider": "Government Retirement & Benefits, Inc.", "cloud_service_offering": "GRB Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/GRB%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-03-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-08-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-04-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 11, "reuse": 10, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-03-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-08-07T20:00:00.000Z", "cert_date": "2022-04-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-04-15T20:00:00.000Z", "annual_assessment": "2011-08-07T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of the Fiscal Service", "Department of Agriculture", "Department of Education", "Department of Justice", "Department of Veterans Affairs", "Department of the Interior", "Immigration and Customs Enforcement", "National Aeronautics and Space Administration", "Office of Personnel Management", "United States Census Bureau", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "The GRB Platform is a complete Software-as-a-Service (SaaS) cloud-based Federal Retirement and Benefits Administration solution that meets the goals and objectives of the HR Line of Business (HRLoB). Offered on a subscription basis for unlimited use and developed specifically for the Federal sector, the GRB Platform combines tools and capabilities for human resource specialists, managers, and employees into a common system. The GRB Platform contains a flexible bi-directional interface used to communicate with an Agency's payroll/HRIS system, third party benefits providers, and any outside parties as necessary.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@grbinc.com", "website": "https://www.grbinc.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2324055183", "name": "Govini", "cloud_service_provider": "Govini", "cloud_service_offering": "Ark.ai", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Govini%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-01-07T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-01-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-01-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-01-07T20:00:00.000Z", "cert_date": "2025-04-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Information Systems Agency", "fedramp_auth": "2025-04-29T20:00:00.000Z", "annual_assessment": "2011-06-21T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Defense Contract Management Agency", "Defense Information Systems Agency" ], "agency_reuse": [ "" ], "service_description": "Ark.ai IL5 is delivered as a SaaS offering using a multi-tenant Government-Only Cloud, AWS GovCloud, cloud computing environment. It is available to federal governments and agencies, federal contractors, and government contractors. Ark.ai IL5 is designed and architected for the national security enterprise, specializing in defense acquisition and analytics.", "fedramp_msg": "N/A", "sales_email": "accreditation@govini.com", "security_email": "devops@govini.com", "website": "https://ark.ai/", "uei": "C92MYZJBLR97", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Fleet Management", "Grant Management", "Legal & Policy", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1311252652", "name": "Granicus", "cloud_service_provider": "Granicus", "cloud_service_offering": "GovDelivery Communications Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Granicus%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-02-11T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2016-04-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 46, "reuse": 45, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2015-02-11T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2016-04-08T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2016-04-08T20:00:00.000Z", "annual_assessment": "2011-04-08T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Bureau of Public Affairs", "Consumer Financial Protection Bureau", "Consumer Product Safety Commission", "Council of the Inspectors General on Integrity and Efficiency", "Defense Information Systems Agency", "Department of Agriculture", "Department of Education", "Department of Energy", "Department of Homeland Security", "Department of Labor", "Department of State", "Department of Veterans Affairs", "Department of the Interior", "Department of the Treasury", "Environmental Protection Agency", "Farm Credit Administration", "Federal Aviation Administration", "Federal Deposit Insurance Corporation", "Federal Housing Finance Agency", "Federal Retirement Thrift Investment Board", "Federal Trade Commission", "First Responder Network Authority", "Food and Drug Administration", "General Services Administration", "HUD Office of Inspector General", "Internal Revenue Service", "Justice Management Division", "National Credit Union Administration", "National Institute of Food and Agriculture", "National Institute of Standards and Technology", "National Nuclear Security Administration / Nevada Field Office", "National Oceanic and Atmospheric Administration", "National Science Foundation", "Nuclear Regulatory Commission", "Office of Electricity", "Office of Financial Research", "Office of Personnel Management", "Office of the Comptroller of the Currency", "State Office of the Inspector General", "United States Census Bureau", "United States Geological Survey", "United States International Trade Commission", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "More than 1,000 public sector organizations use Granicus' highly secure cloud communications solutions every day to enhance the citizen experience for greater than 150 million people. As the only FedRAMP-authorized marketing automation platform, Granicus' GovDelivery Communications Cloud serves federal, state, and local government customers and is the most secure marketing solution available for any public-sector organization. The Advanced Package for Communications Cloud and the Targeted Messaging Service are feature offerings available with Granicus' GovDelivery Communications Cloud.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/07/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "", "security_email": "fedrampinfo@granicus.com", "website": "http://www.granicus.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2620251735", "name": "Ground Control Software Inc.", "cloud_service_provider": "Ground Control Software Inc.", "cloud_service_offering": "GroundControl", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/GroundControl%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-08T22:17:37.365Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-06-04T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Ground Control Software Inc. is a San Jose-based technology\ncompany that provides a cloud-based SaaS platform called\nGroundControl, designed specifically for the manufacturing sector.\nThe platform focuses on quality control documentation workflows,\noffering secure storage, transmission, and interactive processing\ncapabilities while integrating large language models and neural\nnetwork technologies to accelerate AI adoption in an industry that has\nbeen slow to embrace such tools. The company maintains strict\nsecurity and compliance standards, including ITAR (International\nTraffic in Arms Regulations) registration with the U.S. Department of\nDefense and self-attestation to NIST 800-171. Its infrastructure is\nhosted on FedRAMP-authorized services, including AWS\nGovernment, at a High security impact level.", "fedramp_msg": "", "sales_email": "sales@gndctl.com", "security_email": "itsec@gndctl.com", "website": "https://gndctl.com/", "uei": "", "small_business": true, "business_categories": [ "Artificial Intelligence (AI)", "Collaboration", "Data Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2626247309", "name": "Groupize, Inc.", "cloud_service_provider": "Groupize, Inc.", "cloud_service_offering": "Groupize", "logo": "", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-24T22:13:50.122Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-06-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Groupize Group Travel takes the complexity out of travel management: travel for meetings – from air and hotel to real-time reporting, Groupize handles booking, spend, and traveler experience in one place.", "fedramp_msg": "", "sales_email": "info@groupize.com", "security_email": "fedramp@groupize.com", "website": "https://groupize.ai/", "uei": "DAU9DU4P1FA5", "small_business": true, "business_categories": [ "Finance", "Governance, Risk, and Compliance (GRC)", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2521554684", "name": "H2O.AI for Government", "cloud_service_provider": "H2O.AI for Government", "cloud_service_offering": "H2O.AI", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/H2O%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-03-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-04-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-05-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-03-26T20:00:00.000Z", "cert_date": "2026-04-16T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-04-16T20:00:00.000Z", "annual_assessment": "2011-03-18T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of Homeland Security" ], "agency_reuse": [ "" ], "service_description": "H2O.ai Cloud for Government (H2O-GOV) is the unified AI platform that delivers the convergence of predictive, generative, agentic, and AI observability & governance for federal agencies. Hosted on AWS GovCloud and fully deployed and managed by H2O.ai, H2O.ai Cloud for Government provides agencies with a secure, mission-ready AI technology stack with dedicated tenancy and full sovereignty over agency data, prompts, and models, without the operational burden of standing up and maintaining the underlying infrastructure. \n\nOverview \n• H2O-GOV accelerates federal AI adoption with a single sovereign AI enterprise-grade control plane, and a platform purpose-built for secure government workloads. This platform reduces the time and resources needed for AI model development, fine-tuning, and evaluation by simplifying workflows; minimizing manual coding and fine-tuning; and automating data preprocessing, including imputation, encoding, standardization, feature engineering, and performance assessment. It also improves the reliability, safety, and effectiveness of RAG and LLM-based applications. Agency data is AI-ready from the start. The platform is LLM and machine learning model-agnostic, enabling you to connect a wide range of LLMs. It is fully scalable, includes guardrails, summarization, cost controls, telemetry for chargeback, and customization options. \n \n• The platform supports critical federal mission areas, including cybersecurity threat detection, mission analytics, fraud and anomaly detection, predictive maintenance, document triage and extraction, and secure generative AI assistants grounded in agency knowledge. Backed by FedRAMP High authorization, encryption at rest and in transit, dedicated-tenant isolation, and federated SSO integration with agency identity providers, H2O-GOV enables agencies to deploy AI confidently across regulated and sensitive workloads. \n \n• A built-in management layer streamlines user provisioning enforces granular role-based access control (RBAC), and delivers workload and usage monitoring, giving federal program managers the visibility, observability, and governance required to operate AI responsibly at mission scale. H2O.ai's operations team handles provisioning, scaling, patching, software updates, and 24/7 platform support under the FedRAMP-authorized boundary. \n\nPlease note: H2O.ai Cloud for Government is delivered as a product platform. H2O.ai additionally offers professional services and expert guidance to accelerate deployment and, where required, tailored modeling.", "fedramp_msg": "N/A", "sales_email": "sales@h2o.ai", "security_email": "securitycompliance@projecthosts.com", "website": "https://h2o.ai/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Law Enforcement", "Legal & Policy", "Network Management", "Operations Management", "Research", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "Enterprise h2oGPTe", "H2O AI App Store", "H2O Driverless AI", "H2O Eval Studio", "H2O Hydrogen Torch", "H2O LLM Studio", "H2O Label Genie", "H2O MLOPs", "H2O-3" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1919750997", "name": "HackerOne", "cloud_service_provider": "HackerOne", "cloud_service_offering": "HackerOne Continuous Security Testing Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/HackerOne%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-05-08T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-04-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 47, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-05-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-04-24T20:00:00.000Z", "cert_date": "2020-05-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-05-06T20:00:00.000Z", "annual_assessment": "2011-02-28T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [ { "id": "FR1812058188", "csp": "GitHub", "cso": "GitHub Enterprise Cloud", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2201340492", "csp": "KnowBe4, Inc.", "cso": "KnowBe4 Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Consumer Financial Protection Bureau", "Department of State", "General Services Administration" ], "agency_reuse": [ "22-002", "22-003", "22-005-11", "22-005-21", "22-007", "22-007-04", "22-007-07", "22-007-17", "22-007-22", "22-007-27", "22-011-02", "22-011-09", "22-011-10", "22-013", "22-015", "22-017", "22-019", "22-020", "22-021-01", "22-021-06", "22-022", "22-023", "22-025", "22-027-06", "22-027-07", "22-030", "22-031", "22-031-01", "22-032", "22-033", "22-034", "22-040", "22-042-02", "22-044", "22-051", "22-055-01", "22-058", "22-061", "22-068", "22-069", "22-074" ], "service_description": "HackerOne is a multi-tenant Vulnerability Disclosure and crowdsourced Bug Bounty platform. Organizations rely on HackerOne to detect unknown security vulnerabilities in public-facing systems as well as sensitive assets that are not publicly disclosed. This is done by giving customers access to the world’s largest community of crowdsourced security researchers. Researchers then conduct remote, internet based, crowdsourced vulnerability discovery and disclosure services against internet-accessible assets, including public-facing websites, networks, systems, and applications.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@hackerone.com", "website": "https://www.hackerone.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2629158373", "name": "Halcyon Tech, Inc.", "cloud_service_provider": "Halcyon Tech, Inc.", "cloud_service_offering": "Halcyon", "logo": "", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-31T21:38:47.798Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-29T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Securisea, Inc.", "service_model": [], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Halcyon's Anti-Ransomware Platform is an agent-based Software as a Service (SaaS) deployment that provides multiple layers of protection against ransomware attacks while complementing existing Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) solutions. The platform leverages machine learning (ML) models trained specifically to identify and disrupt ransomware activity. The solution consists of a lightweight endpoint agent that combines multiple proprietary prevention engines with ML models designed exclusively to detect ransomware throughout the attack lifecycle. The SaaS platform provides centralized policy management, security event visibility, reporting, administrative functions, and APIs, and is designed to integrate with existing security technologies and operational workflows.\n\nHalcyon incorporates a capsule network-based machine learning architecture with the following characteristics:\n\nCollaborative decision-making in which individual ML models communicate with one another and provide weighted decisions to improve detection accuracy.\nThe ability to learn and make highly accurate detection decisions using less training data than traditional convolutional neural network approaches.\n\nTelemetry collected from protected endpoints is analyzed through multiple detection engines to evaluate process behavior over time, enabling the identification of suspicious or malicious ransomware activity. The platform supports automated response actions, including endpoint isolation, to contain ransomware activity and captures ransomware encryption key material, when available, to support recovery of encrypted data.\n\nHalcyon Data Exfiltration Protection (DXP)\n\nThe Halcyon Data Exfiltration Protection (DXP) module extends the Anti-Ransomware Platform by detecting ransomware-related data exfiltration activity associated with double-extortion attacks. DXP analyzes network communications and process behavior to identify suspicious data movement that may indicate active ransomware operations.\n\nDXP Capabilities:\n-Detects ransomware-related data exfiltration activity before sensitive information is transmitted outside the environment.\n-Supports detection and disruption of ransomware-related data theft associated with extortion campaigns.\n-Provides early indication of active threat actor activity to support investigation and containment.\n-Analyzes process behavior to improve detection accuracy while reducing false positives.\n-Integrates with supported EDR and XDR platforms to enhance response and investigation workflows.\n\nRansomware Operations Center (ROC)\n\nAs part of the Halcyon Anti-Ransomware Platform, the Ransomware Operations Center (ROC) provides continuous monitoring and operational support for ransomware-related activity. The ROC reviews platform-generated detections, validates ransomware events, supports investigation, containment, recovery, and response coordination with authorized customer personnel. The ROC leverages telemetry generated by the Halcyon platform to support ransomware monitoring, response, and recovery operations on a 24x7x365 basis.", "fedramp_msg": "", "sales_email": "", "security_email": "security@halcyon.ai", "website": "https://halcyon.ai/", "uei": "PK9FZJ44PN21", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2621445678", "name": "Halo", "cloud_service_provider": "Halo", "cloud_service_offering": "Halo", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Halo%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-05-06T22:13:09.316Z", "category": "Status Change", "description": "Status set to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2026-01-15T20:00:00.000Z", "ip_prog_date2": "2026-03-09T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-05-06T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-05-06T20:00:00.000Z", "annual_assessment": "2011-05-07T04:00:00.000Z", "independent_assessor": "DataLock Consulting Group", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Halo is a multi-tenant cloud platform that provides a unified operating environment for service management, workflow automation, reporting, and compliance operations. The platform is designed to support organizations in managing operational processes, security workflows, and regulated service delivery from a single, integrated system.\n\nFor Governance, Risk, and Compliance (GRC), Halo supports FedRAMP, CMMC, and DoD compliance programs by enabling compliance activities to be managed as part of day-to-day operations rather than as a separate workstream. Halo's GRC module provides functionality for vulnerability and risk management, Plan of Action and Milestones (POA&M) tracking, asset inventory, deviation management, OSCAL-based system documentation, and cross-framework control mapping. It also supports continuous monitoring packages, Key Security Indicator validation, and Ongoing Authorization deliverables in both human-readable and machine-readable formats.\n\nIn addition to GRC, the Halo platform supports broader enterprise service management capabilities, including IT Service Management (ITSM), Enterprise Service Management (ESM), Configuration Management (CMDB), and Service Level Management (SLM). These include core ITIL practices such as change management, incident management, user access management, self-service portals, automated task assignment and escalation, SLA tracking, and executive dashboards.", "fedramp_msg": "", "sales_email": "sales@imaginehalo.com", "security_email": "fedramp-security@usehalo.com", "website": "https://usehalo.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2411956235", "name": "HB Healthcare Safety, SBC", "cloud_service_provider": "HB Healthcare Safety, SBC", "cloud_service_offering": "Healthcare Safeware", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/HB%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-03-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-11-12T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-08-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-03-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-11-12T20:00:00.000Z", "cert_date": "2025-08-18T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-08-18T20:00:00.000Z", "annual_assessment": "2011-04-16T04:00:00.000Z", "independent_assessor": "Lazarus Alliance, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Healthcare Safeware® is delivered as a SaaS offering using a multi-tenant Government-only community cloud computing environment. It is available to any agency in the federal government. Safeware® manages the workflow for healthcare clinical case reviews, captures quality, safety, and patient experience data, analyzes the data, and provides prioritization for needed process improvements that will improve healthcare outcomes for veterans and federal employees.", "fedramp_msg": "N/A", "sales_email": "huddleston@hbhealthcaresafety.org", "security_email": "huddleston@hbhealthcaresafety.org", "website": "https://hbhealthcaresafety.org/healthcare-safeware/", "uei": "MSFQLTACVNZ5", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Data Management", "Health & Wellness", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2135040486", "name": "HealthVerity", "cloud_service_provider": "HealthVerity", "cloud_service_offering": "Privacy Preserving Records Linkage (PPRL)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/HealthVerity%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-09-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-05-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-10-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-09-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-05-10T20:00:00.000Z", "cert_date": "2022-10-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-10-17T20:00:00.000Z", "annual_assessment": "2011-05-10T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Centers for Disease Control and Prevention", "National Science Foundation" ], "agency_reuse": [ "" ], "service_description": "The HealthVerity Privacy Preserving Record Linkage identity management solution is the leading SaaS solution that de-identifies and matches individuals at scale in a privacy-protecting fashion across multiple datasets with the highest level of accuracy. It acts as an honest broker service that permits centralized de-identified linkage of individual person-level records across systems, organizations, and settings over time. HealthVerity technology supports key applications that require the ability to create a unique anonymized identifier that can unify data across source systems while meeting privacy standards such as HIPAA. The solution can be implemented using either batch processing or real-time API-enabled record linkage to support multi-party data integration needs for applications and analytics.", "fedramp_msg": "N/A", "sales_email": "GovCompliance@healthverity.com", "security_email": "FedRAMP@healthverity.com", "website": "https://healthverity.com/", "uei": "PGF2LY9481C7", "small_business": true, "business_categories": [ "Analytics", "Data Management", "Health & Wellness", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1831429369", "name": "HireVue", "cloud_service_provider": "HireVue", "cloud_service_offering": "Recruitment Assessments and Video Interviewing", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Hirevue%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-08-15T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-03-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-05-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-08-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-03-12T20:00:00.000Z", "cert_date": "2019-05-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-05-10T20:00:00.000Z", "annual_assessment": "2011-03-12T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Customs and Border Protection", "Department of the Treasury", "Office of Personnel Management", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "HireVue helps global enterprises gain a competitive advantage in the modern talent marketplace with video interviewing software and recruitment assessments. The HireVue platform is transforming the way organizations discover, hire, and develop talent. By combining video interviews with predictive, validated I-O science and artificial intelligence.\n\nBased in Sandy, Utah, HireVue works with more than 700 customers across government and commercial industry, powering millions of annual interviews in over 180 countries. To learn more, visit us at (www.hirevue.com).", "fedramp_msg": "N/A", "sales_email": "federal@hirevue.com", "security_email": "fedramp@hirevue.com", "website": "https://www.hirevue.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "Hirevue GovCloud", "Talent 2 Opportunity (T2O)" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1728349078", "name": "Hootsuite", "cloud_service_provider": "Hootsuite", "cloud_service_offering": "Hootsuite Enterprise", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Hootsuite%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-12-16T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-02-26T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-03-11T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-12-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-02-26T20:00:00.000Z", "cert_date": "2021-03-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-03-11T20:00:00.000Z", "annual_assessment": "2011-03-02T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "Department of the Interior", "General Services Administration", "Library of Congress", "National Oceanic and Atmospheric Administration", "National Telecommunications and Information Administration" ], "agency_reuse": [ "" ], "service_description": "Hootsuite is an enterprise social media management platform used by governments and agencies to engage with citizens, manage crisis communications, and deliver services and information via social media. By managing all social media activity through a single, secure platform, agencies with large and distributed teams can engage directly with citizens across public and private social channels without compromising control over messaging and access. Hootsuite's real-time social listening capabilities, integrations with compliance partners, and ecosystem of more than 200 connected applications help agencies monitor and measure public sentiment, stay compliant with FOIA and other public records laws, and integrate social media across their organization.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@hootsuite.com", "website": "https://www.hootsuite.com/industries/government", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Customer Relations Management (CRM)", "Marketing & Sales", "Media" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2017459185", "name": "HP Inc.", "cloud_service_provider": "HP Inc.", "cloud_service_offering": "Workforce Experience Platform Collaboration", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Vyopta%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-12-28T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-09-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-10-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-12-28T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-09-30T20:00:00.000Z", "cert_date": "2021-10-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-10-12T20:00:00.000Z", "annual_assessment": "2011-09-30T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Labor", "Department of Veterans Affairs", "General Services Administration", "Social Security Administration" ], "agency_reuse": [ "" ], "service_description": "Workforce Experience Platform (WXP) Collaboration, formerly the Vyopta Platform, is now part of HP Inc’s portfolio of technology solutions. WXP Collaboration provides monitoring and analytics for collaboration and unified communication technology. It’s suite of applications delivers single-pane-of-glass, enterprise-wide visibility, and insights across multi-vendor collaboration environments to improve IT efficiency, increase end user productivity, and accelerate workplace transformation and technology migrations.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "wxpcollab-infosec@hp.com", "website": "https://workforceexperience.hp.com/wxp-collaboration/", "uei": "SMLNZ8X9SHE7", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2502963317", "name": "HP Inc.", "cloud_service_provider": "HP Inc.", "cloud_service_offering": "HP Managed Services for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/HP%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-01-28T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-08-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-09-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-01-28T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-08-07T20:00:00.000Z", "cert_date": "2025-09-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Air Force", "fedramp_auth": "2025-09-29T20:00:00.000Z", "annual_assessment": "2011-07-29T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2502963317", "csp": "HP Inc.", "cso": "HP Managed Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "United States Air Force" ], "agency_reuse": [ "22-016-07" ], "service_description": "HP Managed Services for Government delivers a flexible SaaS solution that integrates a suite of services, hardware, and supplies to deliver a comprehensive, end-to-end Print and PC managed solution. The cloud-based centralized service management approach for devices enables agencies to securely share information and data across teams, tasks, and workplaces, while HP fully manages the technology stack to ensure the confidentiality, integrity, and availability of agency data throughout the HP Managed Services platform.\n\nThe HP Managed Print Services (MPS) solution provides agencies with a centralized service to support their fleet of printers including capability to: request, manage and dispatch service requests; provide continual maintenance including firmware updates; automate consumable print supply provisioning, and view the fleet for usage, security, and optimization characteristics.\n\nThe HP Managed Device Services (MDS) solution provides agencies Asset Management support of their PC fleet and accessories as a total device management solution across locations with a holistic view of PC asset information in the cloud.\nThe HP Federal Services portal offers the ability to manage service requests throughout the request life cycle.", "fedramp_msg": "N/A", "sales_email": "fedramp@hp.com", "security_email": "fedrampsecurity@hp.com", "website": "https://reinvent.hp.com/us_gov-sales-specialist", "uei": "SMLNZ8X9SHE7", "small_business": false, "business_categories": [ "Collaboration", "Fleet Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1408115175", "name": "Huddle US", "cloud_service_provider": "Huddle US", "cloud_service_offering": "Huddle Enterprise Cloud Content Collaboration and File Sharing Portal for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Huddle%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-10-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2015-02-11T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2015-04-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 7, "reuse": 7, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2014-10-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2015-02-11T20:00:00.000Z", "cert_date": "2015-04-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2015-04-17T20:00:00.000Z", "annual_assessment": "2011-08-07T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2429166928", "csp": "Ideagen", "cso": "Ideagen Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Community Living", "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Defense Information Systems Agency", "Federal Aviation Administration", "Health Resources and Services Administration", "National Institute of Standards and Technology" ], "agency_reuse": [ "22-007" ], "service_description": "Huddle provides the most secure, easy-to-use, and tightly integrated workspaces for government agencies to collaborate with each other and contractors. Its zero-trust architecture provides a highly controlled environment that is fully auditable for data governance and compliance.\n- Total control over who can access, view, and edit workspaces and documents.\n- Integrations with Microsoft Office ensure a seamless experience.\n- Fully auditable workspaces with trackable tasks and assignments.\n- Supports stringent security and risk mitigation strategies.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@huddle.com", "website": "https://www2.ideagen.com/us-government/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1802451335", "name": "Human Resources Technologies, Inc. (HRTec)", "cloud_service_provider": "Human Resources Technologies, Inc. (HRTec)", "cloud_service_offering": "Federal High Impact Virtualized Environment (FedHIVE)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/FedHive%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-07-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2020-08-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2020-12-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": "2018-07-11T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2020-08-18T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2020-12-07T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-12-07T20:00:00.000Z", "annual_assessment": "2011-12-02T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "IaaS", "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Department of Agriculture", "Los Alamos National Laboratory", "National Institutes of Health" ], "agency_reuse": [ "" ], "service_description": "FedHIVE® is the only FedRAMP High Authorized accelerator platform delivering Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) capabilities within a single High-impact authorization boundary. Originally granted a Joint Authorization Board (JAB) Provisional Authority to Operate (P-ATO) at the FedRAMP High baseline, FedHIVE enables broad reuse across Federal and DoD agencies and significantly reduces redundant security assessment efforts. FedHIVE implements and continuously manages over 400 NIST SP 800-53 Rev. 5 High baseline security controls within its boundary, including 24/7 Security Operations Center (SOC) operations, automated continuous monitoring, vulnerability management, patching, incident response, and independent third-party validation activities. The environment is designed to protect Controlled Unclassified Information (CUI) and Personally Identifiable Information (PII) at the FIPS PUB 199 High level and currently supports multiple federal agencies, including DoD, U.S. Space Force, TSA, and the Department of State. FedHIVE also holds a DISA Provisional Authorization at IL4 and IL5, is GovRAMP (StateRAMP) authorized, and meets the Cybersecurity Maturity Model Certification(CMMC) Level 2.\r\nFedHIVE accelerates the authorization process by providing sponsorship and enabling full High baseline control inheritance, allowing SaaS providers to achieve FedRAMP High ATO status significantly faster and at substantially lower total cost than building and sustaining a High environment independently. Unlike models that require containerization or major re-architecture, FedHIVE supports lift-and-shift migration of legacy systems, COTS applications, and complex enterprise stacks with minimal re-engineering; containers are supported but not required. The platform enables hybrid architectures spanning private GovCloud and hyperscaler environments such as AWS, Google Cloud, and Azure within the same authorized boundary, eliminating the need to re-initiate compliance when scaling. By managing the full security stack—including infrastructure, platform services, data protection, identity, and continuous monitoring—FedHIVE reduces compliance duplication, lowers long-term operational burden, and provides an economically efficient alternative to multi-million-dollar DIY FedRAMP High builds. Its compliance team includes former working-level FedRAMP and DISA personnel who have executed authorization and assessment activities within the federal ecosystem, strengthening implementation rigor and operational readiness.\r\nFedHIVE enables the secure federal deployment of commercial and enterprise solutions and mission applications within its authorized High-impact environment including:\r\n1Kosmos Platform - Powered by biometric verification, government-issued credential validation, and advanced liveness detection, the 1Kosmos Platform ensures the right person accesses the right systems. Purpose-built for high-impact federal systems, it also delivers phishing-resistant authentication and a digital identity wallet. Deploy as a complete identity solution or modular components: identity verification, digital wallet, or passwordless MFA. Zero passwords. Zero shared secrets. Zero trust, verified.\r\n \r\nACF Customer Experience Platform - ACF Customer Experience Platform is a cloud-based SaaS solution hosted on Microsoft Azure that helps enterprise organizations manage customer interactions through appointment scheduling, queue management, automated communications, and AI-powered analytics. Serving 500+ clients across healthcare, government, banking, retail, and education sectors.\r\n \r\nAllocore ULP-UGP-UFP Software - Allocore’s ULP, UGP, and UFP platforms provide FedRAMP High–authorized, cloud‑based lifecycle management for federal loans and grants, delivering advanced origination, workflow automation, servicing, compliance, and auditability aligned with federal program requirements. Together, they integrate AI‑driven fraud detection, real‑time risk assessment, and cross‑program data intelligence to help agencies prevent improper payments and strengthen program integrity across lending and grant operations.\r\n \r\nArcher Risk and Resilience Management (RRM) - Archer Risk and Resilience Management enables organizations to strengthen resilience by identifying critical products, services, and dependencies, defining impact tolerances, and coordinating risk‑driven actions across business, IT, operational risk, and cyber teams. It provides integrated visibility into resiliency risks, supports preparation for disruptions such as natural disasters or cyber events, and helps organizations adapt, withstand, and recover through structured scenario analysis and operational resilience workflows.\r\n \r\nContegix TrueStack (TSX) - a secure, FedRAMP-authorized, and DoD-compliant managed application platform designed to help government and regulated agencies deploy collaborative tools like Atlassian (Jira, Confluence), GitLab, and MatterMost. It focuses on Zero Trust security, handling compliance, hosting, and maintenance to streamline secure DevSecOps. \r\n \r\nContegix TrustStack Atlassian Confluence - Delivered on Contegix’s FedRAMP High authorized cloud platform, providing secure, compliant hosting of Atlassian Confluence for federal agencies.\r\n \r\nContegix TrustStack Atlassian JIRA - Hosted within Contegix’s FedRAMP High authorized cloud environment to enable secure Jira use and migration for agencies requiring high‑impact compliance.\r\n \r\nContegix TrustStack Mattermost - A secure collaboration platform offered through Contegix’s FedRAMP‑certified DevSecOps ecosystem, supporting high‑impact environments and compliant deployment of Mattermost.\r\n \r\nDell PowerStore - Dell PowerStore delivers high‑performance, all‑flash storage with advanced data reduction and automation to support mission‑critical government workloads. Its secure, efficient NVMe architecture and always‑on protection help agencies modernize infrastructure, improve resilience, and meet evolving demands across hybrid environments.\r\n \r\nDell PowerSwitch - Dell PowerSwitch provides flexible, high‑performance Ethernet switching from edge to core, helping government agencies modernize networks with open architectures, scalable designs, and secure, reliable connectivity. Its agility and efficiency support mission‑ready operations across data centers, campuses, and cloud environments.\r\n \r\nFirst Due Fire and EMS RMS Software - First Due and E-9 Corporation deliver a FedRAMP HIGH -authorized solution unifying Fire incident reporting, ePCR, fire prevention, scheduling, analytics, and response. Trusted by over 3,000 civilian jurisdictions, every DoW branch, and a growing number of Federal Civilian agencies, the all-in-one suite streamlines operations and protects mission-critical data.\r\n \r\nFormAssembly Gov Cloud Fed – Provides a FedRAMP High–authorized, no‑code platform to securely manage and automate sensitive data collection. It modernizes processes from simple paper forms to sophisticated, multi-respondent processes through role‑based access controls, encryption, audit trails, and integrations with gov‑preferred systems such as Salesforce Government Cloud, Microsoft 365 Government, and Google Workspace FedRAMP.\r\n \r\nHitachi - Hitachi’s government‑ready storage platforms deliver mission‑focused performance, cyber‑resilience, and scalability across core data centers and edge environments. Designed for secure, compliant, and hybrid‑cloud operations, they support AI‑driven workloads while ensuring high availability and robust data protection for critical agency needs.\r\n \r\nHPE Greenlake - HPE GreenLake for Government delivers a secure, on‑premises, pay‑per‑use cloud platform that scales with public‑sector demand. It provides data sovereignty, strong security, simplified procurement, and hybrid‑cloud agility—modernizing IT while preserving control and ensuring resilient, compliant service delivery for agencies.\r\n \r\nHPE Mist - Simplified network operations delivering the best user experiences. Mist and the Marvis AI engine across all networking domains—wireless, wired, SD-WAN, Location Services, IOT and Access Control with an end-to-end approach that simplifies IT operations—from deployment to proactive troubleshooting and rapid issue resolution—to boost productivity with fewer trouble tickets, reduce OpEx, and optimize end-user experiences.\r\nHorizon3.ai Node Zero Federal - NodeZero delivers FedRAMP High-authorized autonomous security testing and validation. Continuously hack, fix, and verify exploitable attack paths across your entire infrastructure, from weak credentials and misconfigurations to exposed data, failed controls, and weak policies without disrupting missions. Accelerate ATO readiness, prioritize remediation, and harden defenses beyond CVEs and patchable vulnerabilities.\r\n \r\nOneNet Emergency Management Platform – Platform as a Service (PaaS) cloud-native Emergency Management Platform providing Computer-Aided Dispatch OneNet CAD, ESRI native OneNet MAP, OneNet MOBILE and OneNet Revere (iOS and Android). Purpose-built for federal and DoW force protection and public safety, its microservices architecture ensures high availability, real-time multi-agency coordination, and mission-critical resilience. OneNet was designed for and is FedRAMP HIGH authorized having been deployed for years within DoW components.\r\n \r\nPortworx - Portworx delivers a secure, Kubernetes‑native data platform that helps government agencies modernize mission‑critical applications with resilient, scalable, and automated container storage. It simplifies operations across hybrid and multi‑cloud environments, providing robust data protection, disaster recovery, and encryption to support compliant, high‑availability digital services.\r\n \r\nRed Hat OpenShift - Red Hat OpenShift provides a secure, enterprise‑grade Kubernetes platform that helps government agencies modernize applications across on‑prem, hybrid, and multi‑cloud environments. With built‑in automation, CI/CD, and consistent operations, it strengthens mission agility, accelerates modernization, and supports compliant, resilient service delivery.\r\n \r\nRegScale Continuous Controls Monitoring – Streamline your governance, risk, and compliance processes with shift-left security and compliance as code. RegScale’s CCM platform delivers constant audit-readiness and continuously self-updating paperwork. Designed as a cloud-native solution, RegScale also delivers hybrid and on-premises options, enabling integration of compliance as code into the CI/CD pipelines, speeding up certification, reducing costs, and future-proofing security posture.\r\n \r\nTungsten TotalAgility® (formerly Kofax TotalAgility) is an AI-powered automation platform that enables U.S. government agencies to securely process documents, automate workflows, and manage case-driven operations. The platform combines intelligent document processing (IDP), agent-driven automation, and knowledge discovery to help agencies streamline and optimize content-intensive processes. Within the FedRAMP authorization boundary, TotalAgility is implemented as a scalable SaaS solution hosted in a government-authorized Microsoft Azure environment and incorporates security controls aligned with FedRAMP High requirements.\r\n \r\nVMware - VMware enables government agencies to modernize mission‑critical IT with secure, scalable virtualization and private‑cloud architecture. Its solutions support Zero Trust, application modernization, resilient infrastructure, and seamless workload mobility—helping agencies protect citizen data, improve efficiency, and accelerate digital transformation across hybrid environments.", "fedramp_msg": "Federal High Impact Virtualized Environment (FedHIVE) previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "info@fedhive.com", "security_email": "Fedramp_security@fedhive.com", "website": "https://www.fedhive.com/", "uei": "GJ4HVG535VM9", "small_business": true, "business_categories": [ "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Human Resources", "Network Management", "Operations Management", "Storage", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "1Kosmos BlockID", "Allocore ULP-UGP-UFP Software", "Archer Risk and Resilience Management (RRM)", "Contegix TrustStack Atlassian Confluence", "Contegix TrustStack Atlassian JIRA", "Contegix TrustStack Mattermost", "Dell PowerStore", "Dell PowerSwitch", "FileCloud", "First Due Fire and EMS RMS Software", "Form Assembly Government Cloud", "HPE Alletra", "HPE Aruba", "HPE GreenLake", "HPE ProLiant Servers", "Horizon3.ai Node Zero", "OneNet", "Red Hat OpenShift", "RegScale Governance, Risk and Compliance", "Tungsten TotalAgility Cloud®", "VMware Cloud Foundation" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2333538201", "name": "Hypori, Inc.", "cloud_service_provider": "Hypori, Inc.", "cloud_service_offering": "Hypori Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Hypori%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-08-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-08-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-08-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-08-30T20:00:00.000Z", "cert_date": "2025-03-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Army", "fedramp_auth": "2025-03-20T20:00:00.000Z", "annual_assessment": "2011-02-02T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency" ], "agency_reuse": [ "" ], "service_description": "Hypori Government Cloud provides Virtual Mobility Infrastructure (VMI), a solution that hosts a mobile operating system on a centralized server in a data center that is accessed by thin clients on the user’s end point. Hypori Government Cloud creates a Zero Trust architecture to provide secure access to Controlled Unclassified Information (CUI) and customer data and resources. In the Hypori environment, the user’s device effectively becomes a “window” into a virtualized mobile workspace that is operating in the Amazon GovCloud and delivered via a Software as a Service (SaaS) model. Hypori uses a thin client application to create a virtual image of the user’s unique virtual mobile workspace. The client captures touch and sensor data from the end user physical device and routes it back to the Virtual Workspace through a secure and encrypted TLS tunnel.\r\n\r\nThe Hypori Client has been tested by multiple Red Teams to ensure it meets the most rigorous security posture. It is Common Criteria Certified by the National Information Assurance Partnership (NIAP) for Android, and iOS platforms. NIAP ensures that all certified products “demonstrate exact compliance to the applicable technology protection profile.” This certification verifies that the “Hypori Client is a thin client that communicates only with a Hypori Virtual Workspace on a Hypori Server and not with other servers or applications.” It validates the cryptographic elements of communication with the Hypori environment, that no data is at rest on the user device and no PII is transmitted or stored on the physical end user device. Additionally, the Hypori Client does not trust the mobile device host. It uses application shielding and cryptographic key protection capabilities to defend against compromised end points. It also has limited runtime OS attestation checks before it will launch. If it detects tampering of the client components, it will not connect to the environment. The data on the client is limited to the trust key chain. The mutual Transport Layer Security (TLS) tunnel certificate is stored with the operating system (OS) protected key store on the device, but no other data is on the end user mobile device.\r\n\r\nThe backend environment consists of a series of subnets which form a cluster. Each cluster is designed to support numerous virtual workspace instances. To the user, the experience is virtually identical to when the application and data was on the user’s mobile device. Private keys within the Virtual Workspace are protected using the Android keystore in combination with the Cloud Service Provider key protection system. The Private keys are encrypted in accordance with Hypori’s National Institute of Standards and Technology (NIST) Federal Information Processing Standard (FIPS) 140-2.", "fedramp_msg": "N/A", "sales_email": "sales@hypori.com", "security_email": "fedramp_compliance@hyporifederal.us", "website": "https://www.hypori.com/", "uei": "TR1XHJJ6N1Q3", "small_business": true, "business_categories": [ "Communication" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1208031461", "name": "IBM", "cloud_service_provider": "IBM", "cloud_service_offering": "IBM Platform Services for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IBM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2013-03-07T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2015-07-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 20, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2013-03-07T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2015-07-17T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2015-07-17T20:00:00.000Z", "annual_assessment": "2011-08-05T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2524349489", "csp": "IBM", "cso": "IBM Data Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1728053006", "csp": "IBM", "cso": "IBM Automation Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Corporation for National & Community Service", "Department of Commerce", "Department of State", "FHFA Office of the Inspector General", "Federal Deposit Insurance Corporation", "Federal Reserve System", "Food and Drug Administration", "General Services Administration", "Presidio Trust" ], "agency_reuse": [ "22-002-02", "22-002-06", "22-007-13", "22-008", "22-010", "22-011-05", "22-019", "22-021", "22-027-01", "22-027-06", "22-032", "22-045" ], "service_description": "IBM Platform Services provides core services for managing devices, applications, content, identity & access management, end-to-end visibility, dynamic resource allocation, and improved operational risk and resiliency. These services work together to modernize device management, IAM, observability, application resource monitoring, and providing clients with AI-driven recommendations and tips that are prioritized and customized for your applications. \r\n\r\nIBM MaaS360 for Government is a comprehensive, cloud-based unified endpoint management and security platform for devices, applications and content built on a secure multi-tenant architecture. Government agencies use MaaS360 to protect data and optimize productivity, enabling employees to work anytime and anywhere through trusted mobile interactions. MaaS360 offers device management and security without the added costs and complexities of deploying hardware and software, dealing with intricate configurations, and dedicating additional resources to support the solution on an ongoing basis. MaaS360 allows administrators to manage and enable security on smartphones, tablets and laptops and increase end users’ productivity by enabling secure access to their enterprise data on their endpoint devices. \r\n\r\nIBM Verify for Government is an Identity-as-a-Service (IDaaS) platform enabling organizations to secure and modernize experiences for workforce and citizens. IBM Verify provides modern Single-sign-on (SSO) using standard protocols (SAML, OIDC, OAuth, etc.), supports legacy protocols and access to thousands of popular cloud service applications, and in-house applications, with hundreds of pre-built templates for faster integration. IBM Verify manages the lifecycle of users and groups through a scalable and elastic directory, provides granular, attribute-based policies, and supports multi-factor authentication. Government agencies can provide a digital first experience for secure and frictionless authentication for citizens. \r\n\r\nIBM Instana for Government is a leading full-stack observability tool that automatically and continuously delivers the highest-fidelity data in one-second granularity, with end-to-end distributed tracing of every call or request, and provides a graphing model with dynamic maps to show you how everything is related. IBM Instana for Government allows you to see the exact data you want in the context you need to quickly determine the cause of an issue and take immediate action to fix it. Government agencies can monitor their entire stack with end-to-end visibility across shared services and gain real-time contextual understanding to find and fix problems faster.\r\n\r\nIBM Turbonomic for Government is the leading Application Resource Management (ARM) solution that dynamically allocates resources in real-time boosting efficiency, minimizing cloud expense, and preventing downtime. IBM Turbonomic for Government delivers continuously optimized application resource performance across hybrid multi-cloud environments providing intelligence automation and proactive resource management that scales existing resources efficiently; preemptive analytics to help maximize resource utilization; dynamic resource allocation; and seamless integration across on premises, public, private, hybrid and multiple cloud domains.\r\n\r\nIBM Concert for Government is the connective tissue that harmonizes data from disparate tools and environments, transforming it into actionable knowledge aimed at improving operational risk and resiliency and freeing up teams to focus more on innovation. IBM Concert for Government provides AI-driven recommendations and tips that are prioritized and customized for your applications. Get automated data analysis from disparate systems and tools, identify operational issues before they escalate, increase efficiency with Concert’s recommendations and automation of repetitive tasks. Government agencies can uncover crucial insights about their operations and get application-specific recommendations for improvement.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/07/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "SaaS-4Gov-Sales@wwpdl.vnet.ibm.com", "security_email": "SaaS-4Gov-SecurityAdmin@wwpdl.vnet.ibm.com", "website": "https://www.ibm.com/products/maas360", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "IBM Concert for Government", "IBM Instana for Government", "IBM MaaS360 for Government", "IBM Turbonomic for Government", "IBM Verify for Government" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1211011660", "name": "IBM", "cloud_service_provider": "IBM", "cloud_service_offering": "IBM Cloud for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IBM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-05-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2019-11-14T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 14, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2018-05-04T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2019-11-14T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-11-14T20:00:00.000Z", "annual_assessment": "2011-08-14T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "IaaS", "PaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR1728053006", "csp": "IBM", "cso": "IBM Automation Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Argonne National Laboratory", "Federal Communications Commission", "Social Security Administration", "United States Forest Service" ], "agency_reuse": [ "22-002-06", "22-007-13", "22-008", "22-010", "22-011-05", "22-019", "22-021", "22-027-01", "22-027-06", "22-032", "22-045" ], "service_description": "IBM Cloud for Government is a high performance, high security Cloud, providing both Infrastructure and Platform Cloud Services. IBM Cloud for Government delivers seamless integrated computing environments across multiple data centers. IBM integrates and automates infrastructure and platform services empowering federal agencies with complete control, security, scalability and ease-of-management via an Agency Portal and Secure Open API. The Agency portal and API provide administrators and developers with direct access to more than 100 backend systems, services and activities. IBM Cloud for Government is designed for optimized network management, various performance levels and enhanced security. It provides automated provisioning of services in public, private, and hybrid cloud offerings with quick and easy access to developer tools. Services include orchestration of bare metal and virtual servers, networking services, VMWare, and development tools such as with object storage, auto scaling, and load balancing.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/07/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "", "security_email": "IC4G@wwpdl.vnet.ibm.com", "website": "https://www.ibm.com/cloud/federal", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1728053006", "name": "IBM", "cloud_service_provider": "IBM", "cloud_service_offering": "IBM Automation Services for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IBM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-05-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-12-11T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-03-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 11, "reuse": 10, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-05-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-12-11T20:00:00.000Z", "cert_date": "2019-03-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-03-12T20:00:00.000Z", "annual_assessment": "2011-06-06T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administrative Office of the United States Courts", "Bureau of Engraving and Printing", "Commodity Futures Trading Commission", "Department of Justice", "Federal Deposit Insurance Corporation", "Federal Emergency Management Agency", "General Services Administration", "Internal Revenue Service", "National Archives and Records Administration", "National Nuclear Security Administration", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "IBM® Automation Services for Government (IAS4G) is delivered as a Software-as-a-Service (SaaS) offering operating within a secure, multi-tenant cloud computing environment authorized under the Federal Risk and Authorization Management Program (FedRAMP). IAS4G provides a portfolio of automation products that deliver enterprise-grade asset management and real estate solutions designed specifically for U.S. Federal agencies. The environment is architected to meet the FedRAMP Moderate baseline, ensuring that federal data is managed, processed, and protected in accordance with the FedRAMP defined NIST SP 800-53 Rev. 5 security control requirements. IAS4G leverages the underlying security controls, policies, and inherited protections from other IBM FedRAMP service offerings including IBM Cloud for Government or IBM Platform Services for Government hosted on AWS GovCloud. \r\n\r\n \r\n\r\nService Offering Components \r\n\r\nThe IAS4G offering consists of multiple components integrated within the single FedRAMP authorization boundary: \r\n\r\n \r\n\r\n1. IBM® Maximo Application Suite (MAS) as a Service for Government \r\n\r\nIBM® Maximo Application Suite (MAS) as a Service for Government is an intelligent Enterprise Asset Management (EAM) platform that enables predictive maintenance, operational insight, and optimization of asset performance across complex enterprise environments. Delivered as a FedRAMP-authorized SaaS offering, MAS as a Service leverages advanced analytics and IoT capabilities to optimize equipment performance, extend asset lifecycles and reduce operational downtime and costs. \r\n\r\nNote - MAS Manage is the strategic direction for the existing Maximo EAM and Maximo Real Estate and Facilities (MREF) is the strategic direction for the existing TRIRIGA solution. \r\n\r\nFor additional product information, refer to: https://www.ibm.com/products/maximo\r\n\r\n \r\n\r\n2. IBM® webMethods Hybrid Integration SaaS for Government\r\n\r\nIBM® webMethods Hybrid Integration SaaS for Government is a fully managed, cloud-native integration platform built to meet the security, compliance, and operational demands of U.S. federal, state, and local government agencies.\r\n\r\nApplication Integration — Connect SaaS applications and enterprise systems using flexible no-code, low-code, and pro-code tooling, enabling agencies to automate workflows without sacrificing control or customization.\r\nAPI Management — Manage the full API lifecycle in one place, from creation and publishing to security enforcement, usage analytics, and governance — ensuring APIs remain consistent, secure, and auditable.\r\nHybrid Control Plane — Centrally manage and govern integrations and APIs across both cloud and on-premises environments through a single, unified control plane, reducing complexity and administrative overhead.\r\nDevelop Anywhere, Deploy Anywhere — Deploy integration runtimes and API gateways in any environment — cloud, on-premises, or edge — while maintaining centralized visibility, management, and policy enforcement across the board. \r\nFor additional product information, refer to: https://www.ibm.com/products/webmethods-hybrid-integration \r\n\r\n \r\n\r\n3. IBM® Enterprise Asset Management on Cloud for U.S. Federal (Maximo®) \r\n\r\nIBM® Enterprise Asset Management on Cloud for U.S. Federal (Maximo®) is a comprehensive asset management solution for managing physical assets within a unified platform. The service enables agencies to monitor asset health, plan maintenance activities, and optimize operational performance through real-time analytics and IoT integrations. Maximo supports federal mission operations by centralizing asset data across facilities, infrastructure, and field environments, helping agencies improve resource allocation and reduce operational costs. It is highly configurable to meet agency-specific requirements without code modifications and is seamlessly integrated with both on-premises and cloud-based systems. \r\n\r\nFor additional product information, refer to: https://www.ibm.com/products/maximo/asset-management \r\n\r\n \r\n\r\n4. IBM® Facilities and Real Estate Management on Cloud for U.S. Federal (TRIRIGA®) \r\n\r\nIBM® Facilities and Real Estate Management on Cloud for U.S. Federal (TRIRIGA®) enables agencies to enhance visibility, control, and automation of real estate portfolios, facility operations, capital projects, and energy management programs. TRIRIGA supports data-driven decision-making by providing role-based workspaces, configurable process automation, and integration with IoT and analytics data sources. Through TRIRIGA, federal users can visualize and virtualize facilities, optimize space utilization, and drive operational efficiency while maintaining compliance with applicable federal sustainability and energy mandates. \r\n\r\nFor additional product information, refer to: https://www.ibm.com/products/tririga", "fedramp_msg": "N/A", "sales_email": "SaaS-4Gov-Sales@wwpdl.vnet.ibm.com", "security_email": "SaaS-4Gov-SecurityAdmin@wwpdl.vnet.ibm.com", "website": "https://www.ibm.com/products?field_hierarchy_01[0][0]=Software&field_hierarchy_03[0][0]=SaaS", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2417469779", "name": "IBM", "cloud_service_provider": "IBM", "cloud_service_offering": "IBM Envizi ESG Reporting", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IBM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-03-12T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-08-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-09-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-03-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-08-29T20:00:00.000Z", "cert_date": "2024-09-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-09-13T20:00:00.000Z", "annual_assessment": "2011-08-24T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "General Services Administration" ], "agency_reuse": [ "" ], "service_description": "IBM Envizi ESG Suite is an ESG reporting software from IBM® Envizi™ integrates a suite of products that help you capture and manage all your ESG data in a single system of record and report with confidence knowing that your data is auditable and finance-grade.\nIBM Envizi ESG Suite is a cloud based, SaaS solution that consolidates enterprise ESG data for analysis and reporting. It simplifies data collection by capturing and tracking ESG and sustainability program data such as forecasts, timelines, cash flow, objectives and deliverables in a central system. It provides a data management foundation designed to create a single, trusted data source for all ESG reporting and opportunity identification. Key features include automatic data capture, data normalizations, data structuring and hierarchy management, data audits and health checks.", "fedramp_msg": "N/A", "sales_email": "Fedramp-Envizi-Sales@wwpdl.vnet.ibm.com", "security_email": "Fedramp-Envizi@wwpdl.vnet.ibm.com", "website": "https://www.ibm.com/products/envizi", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1206081363", "name": "IBM", "cloud_service_provider": "IBM", "cloud_service_offering": "SmartCloud for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IBM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-06-19T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2019-11-14T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2018-06-19T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2019-11-14T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-11-14T20:00:00.000Z", "annual_assessment": "2011-11-14T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Bureau of the Fiscal Service", "Customs and Border Protection", "Department of Education", "Federal Retirement Thrift Investment Board" ], "agency_reuse": [ "" ], "service_description": "IBM's SmartCloud for Government (SCG) is a secure multi-tenant Infrastructure as a Service (IaaS) cloud computing environment for U.S. Federal customers.\n\nSCG services include provisioning of compute, memory, network, OS, and storage resources to meet client production and development/test computing needs.\n\n\nSCG IaaS services can be bundled with enterprise class, fully managed, cloud hosting services, including:\n\nOS Provisioning and Administration\nEnterprise System Management\nSecurity Operation Center (SOC)\nStorage Management and Backup.\nIBM SCG required services\nStorage management\nFirewall and Network Administration (Boundary management services)\nService Desk\nAccess Management\nCloud Network\nIBM SCG rated services\nSCG Cloud-VM/CPU\nSCG Cloud-Memory\nSCG Cloud-Network\nSCG Load Balancer\nSOC-SOAR\nStandard Endpoint Protection Services\nSystem Vulnerability Scanning\nSecurity Governance and Compliance\n \n\nThese SCG IaaS capabilities can also be leveraged to support a broad range of IBM and 3rd party software offerings using a PaaS or SaaS delivery model.\n\nThe SCG solutions are delivered from IBM Federal Data Centers (FDC) that are expressly designed and managed to meet FISMA requirements.\n\nIBM SCG enables customers to choose cloud solutions and services that meet their workload requirements and helps Government agencies deliver business outcomes with faster time to value and a lower total cost of ownership", "fedramp_msg": "IBM SmartCloud for Government was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; Continuous monitoring oversight is now provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov", "sales_email": "", "security_email": "ibm.scg.compliance@ibm.com", "website": "http://www-01.ibm.com/software/lotus/cloud/government/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "IBM zCloud Platform as a Service", "SCG Distributed Systems Services" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2607452240", "name": "IBM", "cloud_service_provider": "IBM", "cloud_service_offering": "GO.gov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IBM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-05-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-06-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 15, "reuse": 14, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-03-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-05-11T20:00:00.000Z", "cert_date": "2026-06-04T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-06-04T20:00:00.000Z", "annual_assessment": "2011-05-06T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Chemical Safety And Hazard Investigation Board", "Consumer Product Safety Commission", "Corporation for National & Community Service", "Council of the Inspectors General on Integrity and Efficiency", "Department of Agriculture", "Department of Housing and Urban Development", "Export-Import Bank of the United States", "General Services Administration", "National Aeronautics and Space Administration", "National Capital Planning Commission", "National Gallery of Art", "National Mediation Board", "U.S. AbilityOne Commission", "U.S. Election Assistance Commission", "United States Coast Guard" ], "agency_reuse": [ "" ], "service_description": "The GO.gov system is a multi-component System of Systems (SoS) designed to provide an integrated suite of travel, expense, integration, notification, and reporting services in support of Federal agencies. GO.gov’s core purpose is to streamline and standardize federal travel and expense operations while maintaining compliance with federal security and privacy regulations. GO.gov integrates several commercial Software-as-a-Service (SaaS) and Platform-as-a-Service (PaaS) offerings with secure hosting environments within AWS GovCloud (US) and AWS East/West commercial regions to provide a unified, end-to-end business capability.", "fedramp_msg": "", "sales_email": "", "security_email": "ETSNext.Incident.Reporting@ibm.com", "website": "https://go.gov/", "uei": "", "small_business": false, "business_categories": [ "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2504062150", "name": "IBM", "cloud_service_provider": "IBM", "cloud_service_offering": "IBM Federal ATOM", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IBM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-02-06T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-02-20T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to Legacy FedRAMP Ready" }, { "date": "2025-09-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2025-11-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": "2025-02-20T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-02-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-09-15T20:00:00.000Z", "cert_date": "2025-11-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-11-13T20:00:00.000Z", "annual_assessment": "2011-09-15T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "Internal Revenue Service" ], "agency_reuse": [ "" ], "service_description": "IBM Federal ATOM is a cloud-based service tailored for federal clients. It’s delivered as a SaaS solution in an AWS government-only cloud, allowing agencies to adopt shared services with artificial intelligence, automation, data tools & technologies for designing, building, and scaling business processes. IBM Federal ATOM leverages AI, data, and automation technologies such as business process management, integration services, business rules, robotic process automation, data pipelines, Lakehouse, business intelligence, advanced analytics, natural language processing, machine learning and generative AI. The core offering includes intelligent document processing, pension claims processing, healthcare and disability claims processing, Freedom of Information Act (FOIA) request processing, medical records sourcing, fraud detection & investigative case management, and Generative AI assistants & autonomous agents.", "fedramp_msg": "A federal agency has granted an Authorization to Operate (ATO) for this Cloud Service Offering (CSO). FedRAMP has placed the package in our review queue. FedRAMP has posted information about our review capabilities at [https://www.fedramp.gov/shutdown/].", "sales_email": "iaatom@ibm.com", "security_email": "ibmatom@servicenowservices.com", "website": "https://ibm-atom.com/", "uei": "HQE7ENQ5K9K4", "small_business": false, "business_categories": [ "Analytics", "Customer Relations Management (CRM)", "Cybersecurity & Risk Management", "Data Management", "Grant Management", "Health & Wellness", "Legal & Policy", "Marketing & Sales", "Network Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2135730387", "name": "IBM", "cloud_service_provider": "IBM", "cloud_service_offering": "IBM Federal HR Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IBM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-12-03T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-10-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-06-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-12-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-10-04T20:00:00.000Z", "cert_date": "2023-06-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-06-08T20:00:00.000Z", "annual_assessment": "2011-10-04T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "General Services Administration", "National Credit Union Administration", "Office of Personnel Management", "Railroad Retirement Board" ], "agency_reuse": [ "" ], "service_description": "IBM’s Federal HR Cloud solution for federal government offers a configurable human capital management SaaS solution. As part of this solution, IBM delivers functionality for the complete suite of core HR processing including personnel action processing, compensation management, benefits administration, performance management, time and leave management, payroll services, employee and manager self-service, intelligent automation, and cognitive decision support to allow HR leaders enable cognitive HR enterprise.", "fedramp_msg": "N/A", "sales_email": "surafel.belew@ibm.com", "security_email": "federal_hrcloud@wwpdl.vnet.ibm.com", "website": "https://www.ibm.com/services/talent-management/hr-transformation", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Data Management", "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2524349489", "name": "IBM", "cloud_service_provider": "IBM", "cloud_service_offering": "IBM Data Services for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IBM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-09-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2026-01-22T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-02-10T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2025-07-11T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-09-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-01-22T20:00:00.000Z", "cert_date": "2026-02-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Customs and Border Protection", "fedramp_auth": "2026-02-10T20:00:00.000Z", "annual_assessment": "2011-01-21T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Customs and Border Protection" ], "agency_reuse": [ "" ], "service_description": "IBM Data Services for Government is delivered as SaaS offering using a multi-tenant cloud computing environment. IBM Data Services for Government is a portfolio of AI products that accelerates the impact of generative AI in core workflows to drive productivity.\n\nIBM watsonx.ai for Government is an integrated AI development studio that makes building and deploying AI simple and scalable. It includes tools, foundation models, and flexible runtimes ready for use as-a-Service. IBM watsonx.ai provides a suite of developer-focused capabilities such as SDKs, APIs, retrieval augmented generation (RAG) frameworks and templates, and more to streamline AI application development. Clients can access business-ready foundation models ranging from IBM Granite, open source models and models from partners such as Meta, to build AI applications for any agency use case.\n\nIBM watsonx.data for Government is a data management suite built for AI providing services to improve gen AI accuracy and performance using unified structured and unstructured data with a no-code, low-code and pro-code user experiences that foster self-service access to data insights. IBM watsonx.data has a unique multi-engine architecture optimized for price and performance. Clients can automate the ingestion, enrichment, and delivery of unstructured data at scale and unify it with structured data. The result? Context-aware and accurate AI that fuels confident decision-making.\n\nIBM watsonx.governance for Government is an end-to-end AI governance service that seamlessly integrates with your existing systems to automate and accelerate responsible AI workflows to help save time, reduce costs and comply with regulations. Clients can direct, manage, and monitor their AI using a single service to speed up responsible, transparent, and explainable AI. IBM watsonx.governance automates and scales end-to-end AI governance enabling clients to seamlessly develop, deploy, monitor and replace models across any IBM or third-party services such as OpenAI and Amazon SageMaker. Take advantage of automated tools that provide risk metrics to stay ahead of threats and simplify compliance with services that automate the process of identifying regulatory changes and translating them into enforceable policies.\n\nIBM watsonx Orchestrate for Government is a single solution to build, test, and deploy AI agents, assistants that automate workflows and processes with generative AI. Clients can browse custom-built agents, IBM watsonx agents and trusted partner solutions. Search by domain, use case or application name to quickly find the right agent for the job. IBM watsonx Orchestrate seamlessly integrates with existing business systems, connects to any AI model or automation tool, and enables collaboration between AI assistants and agents in one unified experience. The outcome? Less manual work. Faster decisions. A more efficient business, at scale. IBM watsonx Orchestate enables AI agents to plan, coordinate and take action together. Whether it’s one agent handling a task or a team collaborating across tools, watsonx Orchestrate intelligently assigns the right agents and resources to get work done, without human micromanagement.\n\nIBM watsonx.data intelligence for Government transforms raw data into actionable insights swiftly, unify data governance, quality, lineage and sharing, and empower data consumers with reliable and contextualized data. IBM watsonx.data intelligence accelerates data discovery, resolves quality issues and automates data governance. Clients can discover and assess data quality at scale—wherever your data resides—with automated capabilities for data profiling, cleansing, monitoring and more. Ensure accuracy, trust and compliance by mapping the journey of your data. Break organizational siloes and enable faster data sharing by automating the delivery of data products\n\nIBM watsonx.data integration for Government service provides a unified control plane for modern data movement, helping government agencies connect, transform, and deliver trusted data wherever it resides. Start with ETL and ELT pipelines for batch integration, then expand as needs evolve to include streaming, replication, and unstructured data, all supported by built-in observability. Deploy and run pipelines across cloud, on-premises, or hybrid environments while maintaining consistent governance and control. By turning raw data into AI-ready data, watsonx.data integration unifies sources, fuels model training, and enhances AI’s contextual understanding. It selects the optimal integration style to meet goals for performance, cost, latency, and security, ensuring fast and reliable access to trusted data across the entire data fabric.", "fedramp_msg": "N/A", "sales_email": "SaaS-4Gov-Sales@wwpdl.vnet.ibm.com", "security_email": "SaaS-4Gov-SecurityAdmin@wwpdl.vnet.ibm.com", "website": "https://ibm.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Content Management System (CMS)", "Data Management", "Development Tools", "Legal & Policy", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1208031461A", "name": "IBM", "cloud_service_provider": "IBM", "cloud_service_offering": "IBM Platform Services for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IBM%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-03T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-03-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "IBM Platform Services provides core services for managing devices, applications, content, identity & access management, end-to-end visibility, dynamic resource allocation, and improved operational risk and resiliency. These services work together to modernize device management, IAM, observability, application resource monitoring, and providing clients with AI-driven recommendations and tips that are prioritized and customized for your applications. \r\n\r\nIBM MaaS360 for Government is a comprehensive, cloud-based unified endpoint management and security platform for devices, applications and content built on a secure multi-tenant architecture. Government agencies use MaaS360 to protect data and optimize productivity, enabling employees to work anytime and anywhere through trusted mobile interactions. MaaS360 offers device management and security without the added costs and complexities of deploying hardware and software, dealing with intricate configurations, and dedicating additional resources to support the solution on an ongoing basis. MaaS360 allows administrators to manage and enable security on smartphones, tablets and laptops and increase end users’ productivity by enabling secure access to their enterprise data on their endpoint devices. \r\n\r\nIBM Verify for Government is an Identity-as-a-Service (IDaaS) platform enabling organizations to secure and modernize experiences for workforce and citizens. IBM Verify provides modern Single-sign-on (SSO) using standard protocols (SAML, OIDC, OAuth, etc.), supports legacy protocols and access to thousands of popular cloud service applications, and in-house applications, with hundreds of pre-built templates for faster integration. IBM Verify manages the lifecycle of users and groups through a scalable and elastic directory, provides granular, attribute-based policies, and supports multi-factor authentication. Government agencies can provide a digital first experience for secure and frictionless authentication for citizens. \r\n\r\nIBM Instana for Government is a leading full-stack observability tool that automatically and continuously delivers the highest-fidelity data in one-second granularity, with end-to-end distributed tracing of every call or request, and provides a graphing model with dynamic maps to show you how everything is related. IBM Instana for Government allows you to see the exact data you want in the context you need to quickly determine the cause of an issue and take immediate action to fix it. Government agencies can monitor their entire stack with end-to-end visibility across shared services and gain real-time contextual understanding to find and fix problems faster.\r\n\r\nIBM Turbonomic for Government is the leading Application Resource Management (ARM) solution that dynamically allocates resources in real-time boosting efficiency, minimizing cloud expense, and preventing downtime. IBM Turbonomic for Government delivers continuously optimized application resource performance across hybrid multi-cloud environments providing intelligence automation and proactive resource management that scales existing resources efficiently; preemptive analytics to help maximize resource utilization; dynamic resource allocation; and seamless integration across on premises, public, private, hybrid and multiple cloud domains.\r\n\r\nIBM Concert for Government is the connective tissue that harmonizes data from disparate tools and environments, transforming it into actionable knowledge aimed at improving operational risk and resiliency and freeing up teams to focus more on innovation. IBM Concert for Government provides AI-driven recommendations and tips that are prioritized and customized for your applications. Get automated data analysis from disparate systems and tools, identify operational issues before they escalate, increase efficiency with Concert’s recommendations and automation of repetitive tasks. Government agencies can uncover crucial insights about their operations and get application-specific recommendations for improvement.", "fedramp_msg": "", "sales_email": "SaaS-4Gov-Sales@wwpdl.vnet.ibm.com", "security_email": "SaaS-4Gov-SecurityAdmin@wwpdl.vnet.ibm.com", "website": "https://www.ibm.com/products/maas360", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2122038682", "name": "iBoss", "cloud_service_provider": "iBoss", "cloud_service_offering": "iboss Government Cloud Platform (IGCP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/iboss%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-08-10T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-02-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-07-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-08-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-02-07T20:00:00.000Z", "cert_date": "2022-07-25T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "International Trade Administration", "fedramp_auth": "2022-07-25T20:00:00.000Z", "annual_assessment": "2011-08-17T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Nuclear Facilities Safety Board", "Office of Personnel Management" ], "agency_reuse": [ "" ], "service_description": "FedRAMP Authorized Zero Trust Security Service Edge for Government, Defense, and Defense Industrial Base\r\nThe iboss Government Cloud Platform (IGCP) is a state-of-the-art, FedRAMP Moderate Authorized solution designed to provide Zero Trust Security Service Edge (SSE/SASE) for U.S. Federal agencies, defense contractors, Managed Security Service Providers (MSSPs), and organizations entrusted with Controlled Unclassified Information (CUI). IGCP's architecture is built to deliver Zero Trust Network Access (ZTNA), aligning with Cybersecurity Maturity Model Certification (CMMC) requirements and NIST 800-171/172 controls. This ensures compliance and robust security for sensitive government data.\r\n\r\n===== DEPLOYMENT FLEXIBILITY =====\r\nDirect Agency Deployment: Federal agencies can deploy IGCP directly as their Zero Trust SASE platform, with full control over policies, configurations, and security operations through the unified management console.\r\nMSSP Service Delivery: MSSPs can leverage IGCP's multi-tenant architecture to deliver managed security services to multiple defense contractors and federal customers from a single platform, streamlining compliance and security operations.\r\n===== COMPLIANCE FRAMEWORKS SUPPORTED =====\r\n• CMMC 2.0 Requirements (addresses 78 of 110 NIST SP 800-171 controls)\r\n• NIST SP 800-171 (Protecting CUI)\r\n• NIST SP 800-172 (Enhanced Security Requirements for CUI)\r\n• NIST SP 800-207 (Zero Trust Architecture)\r\n• NIST Cybersecurity Framework (CSF)\r\n• DFARS 7012 (Safeguarding Covered Defense Information)\r\n• CJIS (Criminal Justice Information Services)\r\n• HIPAA (Health Insurance Portability and Accountability Act)\r\n• ITAR (International Traffic in Arms Regulations)\r\n• EAR (Export Administration Regulations)\r\nGovernment agencies and defense contractors are constantly challenged by evolving cyber threats, increasing renewal costs, and the complexity of managing multiple legacy security products. To address these issues, iboss offers both direct deployment for agencies and Managed Security Service Provider (MSSP) solutions. By delivering a SaaS-based Zero Trust SASE platform and comprehensive managed security services, iboss enables organizations to shift their security focus from physical buildings to the continuous protection of people and resources, regardless of where work occurs.\r\n\r\n===== FEDERAL MSSP SASE PLATFORM FEATURES =====\r\nPurpose-built for both direct agency use and MSSP operations, the Federal MSSP SASE Platform streamlines and enhances service delivery through several key features:\r\nFor MSSPs:\r\n• Multi-Tenant Management: Allows MSSPs to manage all customers from a single, unified interface\r\n• Pooled Device Licensing: Enables licenses to be shared across tenants, providing greater flexibility\r\n• Billing in Arrears: Monthly billing cycles designed to align seamlessly with MSP operations\r\n• Audit-Ready Compliance Reports: Pre-configured CMMC and NIST 800-171 compliance reports for each tenant\r\n\r\nFor Direct Agency Deployment:\r\n• Unified Management Console: Single pane of glass for policy management, threat monitoring, and compliance reporting\r\n• Zero Trust Policy Engine: Centralized policy creation and enforcement across all users, devices, and applications\r\n• Real-Time Security Analytics: Comprehensive visibility into all network traffic and security events\r\n• Automated Compliance Monitoring: Continuous assessment against FedRAMP, CMMC, and NIST requirements\r\nThis structure supports rapid scaling while maintaining profitability and operational efficiency in the federal compliance market.\r\n\r\n===== CORE CAPABILITIES =====\r\nZero Trust Architecture (NIST 800-207 Aligned): Enforces least-privilege access and continuous verification for users, devices, and applications, eliminating implicit trust throughout the network. Implements all core Zero Trust principles including identity-based segmentation, encrypted traffic, and continuous monitoring.\r\nSecure Access Service Edge (SASE): Integrates advanced cloud security functions with wide-area networking to ensure secure and optimized connectivity for both remote and on-premises users. Converges networking and security into a unified cloud-delivered service.\r\nZero Trust Network Access (ZTNA) & VPN Replacement: Offers granular, identity-based access to applications without exposing the network, effectively replacing traditional VPNs with a secure, modern alternative. Provides application-level access control with continuous authentication and authorization.\r\n\r\nIntegrated SD-WAN Capabilities: IGCP provides native SD-WAN functionality for secure, optimized WAN connectivity, enabling intelligent traffic routing, application prioritization, and multi-link failover. Additionally, IGCP seamlessly integrates with existing third-party SD-WAN solutions, allowing organizations to enhance their current infrastructure with advanced Zero Trust security without requiring a complete replacement of their networking architecture.\r\nSecure Web Gateway (SWG): Advanced URL filtering, SSL/TLS inspection, malware detection, and content filtering to protect users from web-based threats.\r\nCloud Access Security Broker (CASB): Comprehensive visibility and control over SaaS applications, shadow IT discovery, and data loss prevention for cloud services.\r\nFirewall as a Service (FWaaS): Next-generation firewall capabilities delivered from the cloud, including intrusion prevention, application control, and threat intelligence integration.\r\nData Loss Prevention (DLP): Protects CUI and FCI from unauthorized disclosure through content inspection, contextual analysis, and policy-based blocking. Integrates with Microsoft Purview for enhanced data classification.\r\nAdvanced Threat Protection: Multi-layered defense including anti-malware, ransomware protection, sandboxing, and threat intelligence feeds to detect and prevent sophisticated attacks.\r\nContainerized Cloud Architecture: Patented isolation technology ensuring each organization's traffic is processed in dedicated containerized gateways, guaranteeing data never mixes with other customers—critical for federal data protection requirements.\r\n\r\n===== DEFENSE CONTRACTOR ENABLEMENT =====\r\n\r\nIGCP supports organizations within the Defense Industrial Base (DIB) by securing CUI, FCI, and ITAR data flows. This enables compliance with Department of Defense mandates, CMMC 2.0 requirements, and the Presidential Executive Order on Cybersecurity (EO 14028). With pre-mapped controls addressing 78 of the 110 NIST SP 800-171 requirements, IGCP significantly accelerates the path to CMMC Level 2 certification.\r\n\r\nCMMC Control Family Coverage:\r\n• Access Control (AC): 82% coverage\r\n• Audit and Accountability (AU): 100% coverage\r\n• Identification and Authentication (IA): 100% coverage\r\n• System and Communications Protection (SC): 94% coverage\r\n• System and Information Integrity (SI): 90% coverage\r\n• Incident Response (IR): 83% coverage\r\n===== KEY BENEFITS =====\r\n✓ FedRAMP Moderate Authorized Zero Trust SASE for government-grade security\r\n✓ CMMC 2.0 Compliance Accelerator addressing 78 of 110 required controls\r\n✓ NIST 800-207 Zero Trust Architecture fully aligned with federal mandates\r\n✓ Cloud-native architecture providing scalability and resilience without hardware\r\n✓ Rapid deployment for hybrid and remote workforces (cloud-delivered, no appliances)\r\n✓ Comprehensive compliance for CMMC, NIST 800-171/172, DFARS, CJIS, HIPAA, and ITAR\r\n✓ Unified Zero Trust Platform with integrated ZTNA, SWG, CASB, FWaaS, DLP, and SD-WAN\r\n✓ Containerized data isolation ensuring federal data never mixes with other customers\r\n✓ Continuous monitoring with real-time threat detection and automated incident response\r\n✓ Cost optimization by consolidating 5-8 security point products into one platform\r\n\r\n===== USE CASES =====\r\nFederal Agency Modernization: Replace legacy VPNs and security appliances with cloud-native Zero Trust, enabling secure hybrid work while reducing infrastructure costs.\r\nDefense Contractor CMMC Compliance: Achieve CMMC Level 2 certification faster with pre-mapped controls, audit-ready documentation, and integrated CUI protection.\r\nMSSP Service Delivery: Deliver FedRAMP-authorized managed security services to multiple defense contractors from a single multi-tenant platform.\r\nRemote Workforce Security: Secure access to applications and data for teleworking federal employees and contractors from any device, anywhere.\r\nCloud Migration Security: Protect agencies migrating to AWS, Azure, Google Cloud, and other cloud environments with consistent security policies.\r\nBranch Office Connectivity: Connect distributed offices, remote sites, and field operations with secure SD-WAN and Zero Trust access.\r\nThird-Party Access: Provide secure, time-limited access to contractors, partners, and vendors without VPN credentials or network exposure.\r\nIncident Response: Rapidly isolate compromised users or devices, block threats in real-time, and generate forensic audit trails for security investigations.\r\n===== TECHNICAL ARCHITECTURE =====\r\n\r\nDeployment Model: Cloud-delivered Security Access Service Edge (SASE)\r\nAgent Options: Native agents for Windows, macOS, Linux, iOS, Android; agentless options for managed devices\r\nIdentity Integration: Supports SAML, OAuth, OIDC, Active Directory, Azure AD, Okta, Ping Identity, PIV/CAC cards\r\nSIEM Integration: Native integration with Splunk, QRadar, ArcSight, Microsoft Sentinel, and other SIEM platforms\r\nAPI Access: RESTful APIs for automation, orchestration, and integration with existing security tools\r\nPerformance: Processes over 150 billion daily transactions globally with sub-10ms latency\r\nAvailability: 99.99% uptime SLA with automated failover and geo-redundant infrastructure\r\n===== SUPPORT & SERVICES =====\r\nFederal Support Team: Dedicated 24/7/365 support team with federal expertise and cleared personnel\r\nOnboarding Services: Comprehensive deployment planning, configuration, and migration services\r\nCompliance Assistance: Guidance on CMMC assessments, NIST control implementation, and audit preparation\r\n\r\nContinuous Monitoring: FedRAMP-required continuous monitoring with monthly POA&M updates\r\nSecurity Operations: Optional 24/7 managed security services including threat hunting and incident response\r\nTraining & Enablement: Administrator training, user awareness programs, and best practice workshops", "fedramp_msg": "N/A", "sales_email": "fedsales@iboss.com", "security_email": "fedramp@ibossgov.com", "website": "https://www.iboss.com/", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management", "Education & Training", "Health & Wellness", "Law Enforcement", "Learning Management", "Legal & Policy", "Mobile Device Management (MDM)", "Network Management", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2022963780", "name": "Icertis Inc.", "cloud_service_provider": "Icertis Inc.", "cloud_service_offering": "Icertis Contract Intelligence (ICI) for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Icertis%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-04-20T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "ICI is delivered as a SaaS offering using a multi-tenant Government Only Community cloud computing environment. It is available to federal, state, local, and tribal governments, as well as research institutions, federal contractors, government contractors etc.\n\nThe Icertis Contract Intelligence (ICI) for Government system is a contract lifecycle management service that is configurable and adaptable to business needs through the use of templates, AI-powered clause management, smart contract workflows, Role-based access controls, proposal management, and obligation management. In addition, it includes reporting and dashboards for assessment data as well as integration features to authorized external systems (DocuSign Federal) for secure digital contract signing.", "fedramp_msg": "N/A", "sales_email": "Fedramp@icertis.com", "security_email": "fedramp@icertis.com", "website": "https://www.icertis.com/solutions/industry/public-sector/government/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1718334757", "name": "ID.me", "cloud_service_provider": "ID.me", "cloud_service_offering": "ID.me Identity Gateway", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ID.me%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-05-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-01-22T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-06-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 7, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-05-28T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-01-22T20:00:00.000Z", "cert_date": "2021-06-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-06-10T20:00:00.000Z", "annual_assessment": "2011-01-22T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Alcohol and Tobacco Tax and Trade Bureau", "Department of Education", "Department of Veterans Affairs", "Federal Deposit Insurance Corporation", "Internal Revenue Service", "Social Security Administration", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "ID.me's Identity Gateway is a shared service for citizen and employee facing authentication and consists of a NIST 800-63-3 Identity Assurance Level 1 and 2 and Authenticator Assurance Level 1 and 2 as well as a NIST 800-63-2 Level of Assurance 1, 2, and 3 certified Credential Service Provider, a Credential Broker, and an Attribute Exchange. ID.me is the only citizen facing Credential Service Provider with a Supervised Remote capability that enables all users, including individuals without credit history and who live overseas, to reach Identity Assurance Level 2 without needing to visit a location in-person. ID.me is capable of immediately upgrading any government Identity Provider or login system to NIST IAL2/AAL2 within the look and feel of the agency’s brand.\n\nAn Intelligent Policy Engine provides a dynamic orchestration capability that enables agencies to configure adaptive Risk-Based Authentication and Attribute Based Access Control by policy. Once configured, the Intelligent Policy Engine dynamically routes users through Identity Proofing and Multi-Factor Authentication based on their demographic need and preference. ID.me’s Identity Gateway integrates directly with applications or with all Identity and Access Management platforms via open protocols like SAML 2.0, OAuth 2.0, and OpenID Connect. ID.me’s Credential Service Provider certification is available at (https://www.idmanagement.gov/trust-services/%23consumer-identity-credentials) and the Kantara Initiative Trust Registry (https://kantarainitiative.org/trust-registry/). Kantara is a GSA approved Trust Framework Solution provider. To learn more about ID.me, visit https://www.id.me/business/identity-gateway.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "FedRAMP-compliance@id.me", "website": "https://www.id.me/business/identity-gateway", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2429166928", "name": "Ideagen", "cloud_service_provider": "Ideagen", "cloud_service_offering": "Ideagen Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Ideagen%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-09-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-03-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-09-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-03-12T20:00:00.000Z", "cert_date": "2025-05-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-05-09T20:00:00.000Z", "annual_assessment": "2011-03-10T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "Ideagen Government Cloud technology helps organizations optimize operations by digitizing their management systems. The integrated solution provides functionality for Quality, Environmental Health and Safety (EHS), Asset Management (EAM), Enterprise Risk Management (ERM), Training Management, Document Management, Contractor Assurance, Work Planning & Control, Compliance Management, and more.\r\n \r\nIdeagen Government Cloud is delivered as a SaaS offering using a multi-tenant public cloud computing environment. It is available to the public, federal, state, local, and tribal governments, as well as research institutions, federal contractors, and government contractors.", "fedramp_msg": "N/A", "sales_email": "info@ideagen.com", "security_email": "fedramp@ideagen.com", "website": "https://www.ideagen.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Cybersecurity & Risk Management", "Data Management", "Health & Wellness", "Legal & Policy", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1512017638", "name": "IdeaScale", "cloud_service_provider": "IdeaScale", "cloud_service_offering": "IdeaScale Gov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IdeaScale%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-07-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2017-07-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2017-10-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-10-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": "2017-07-13T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2017-07-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-10-13T20:00:00.000Z", "cert_date": "2017-10-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Food and Drug Administration", "fedramp_auth": "2017-10-19T20:00:00.000Z", "annual_assessment": "2011-10-19T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Housing Finance Agency", "Food and Drug Administration", "Nuclear Regulatory Commission", "Transportation Security Administration" ], "agency_reuse": [ "" ], "service_description": "IdeaScale is an innovation management SaaS provider that uses crowdsourcing to help organizations find and develop the next big thing, whether it's new policies and services or new cost-savings and employee engagement measures, IdeaScale allows organizations to solicit input from personnel and other stakeholders and collaboratively transform that input into actionable project plans.\n\nThe IdeaScale Gov offering provides these innovation management and crowdsourcing capabilities in a secure environment for federal agency use and benefit, allowing agencies to make the most of the collective knowledge of their numbers.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@ideascale.com", "website": "https://ideascale.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2230244107", "name": "Illumio, Inc.", "cloud_service_provider": "Illumio, Inc.", "cloud_service_offering": "Illumio Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Illumio%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-12-08T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-09-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-08-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-12-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-09-14T20:00:00.000Z", "cert_date": "2024-08-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-08-21T20:00:00.000Z", "annual_assessment": "2011-09-06T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "HHS Office of the Inspector General" ], "agency_reuse": [ "" ], "service_description": "Illumio Government Cloud delivers Zero Trust Segmentation, including microsegmentation, across multi-cloud and data center workloads and endpoints for government agencies and departments. This offering includes Illumio Core and Illumio Endpoint. \n\nIllumio Core provides Zero Trust Segmentation for cloud and data center workloads. Illumio Core stops ransomware and cyberattacks from spreading by delivering intelligent visibility, radically simple label-based policy creation,\n and automated segmentation and enforcement. \n\nKey features: \n\n- Gain real-time visibility into traffic flows, application dependencies, and connectivity across all agent and agentless workloads, including containers, IoT, and virtual machines. \n- Simplify policy generation and automate enforcement to support Zero Trust initiatives with segmentation in minutes. \n- Stop the spread of ransomware and contain cyberattacks by preventing lateral movement — regardless of architecture, size, or complexity. \n \n\nIllumio Endpoint extends Zero Trust Segmentation to endpoint devices. Illumio Endpoint is flexible enough to handle dynamic work-from-home settings without impacting endpoint performance. It also prevents unnecessary communication from end-user devices to other endpoints or the data center to further reduce your attack surface. \n\nKey features: \n\n- Apply dynamic segmentation policies based on context, automatically changing if the device moves from the corporate environment to being on the go or at home. \n- Prevent the spread of ransomware between endpoints by blocking all but necessary communication among laptops, VDIs and workstations. \n- Gain complete visibility and control of both endpoints and server workloads in one single map. \n\n\nIllumio Government Cloud is an easy, fast, and proven Zero Trust Segmentation solution that uses a lightweight agent known as the Virtual Enforcement Node (VEN). The VEN is a local component of Illumio Government Cloud and is installed on each workload within a customer’s environment. It provides workload information and enforces policy rules by managing Linux iptables or Windows Filtering Platform (WFP) policies. The VEN is included in the Illumio Government Cloud FedRAMP package.", "fedramp_msg": "N/A", "sales_email": "federalsales@illumio.com", "security_email": "security@illumio.com", "website": "https://www.illumio.com/solutions/government", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Legal & Policy", "Network Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2510341317", "name": "Incode Technologies Inc.", "cloud_service_provider": "Incode Technologies Inc.", "cloud_service_offering": "Incode Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Incode%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-09-25T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Incode provides a secure and flexible identity verification platform that enables agencies to strengthen trust, prevent fraud, and modernize how they deliver services to the public. The platform's modular, no-code design allows agencies to configure custom verification flows that include ID validation, face match with liveness, fraud checks, watchlists, and document capture, all within a single streamlined solution. A centralized dashboard provides full visibility and control over sessions, identities, compliance, and user management, simplifying oversight and ensuring accountability. For users, Incode makes identity verification fast and seamless, reducing friction while maintaining the highest security and privacy standards. By combining compliance tools with an intuitive experience for the public, Incode empowers government organizations to achieve zero trust goals while improving efficiency and access to essential services.", "fedramp_msg": "", "sales_email": "contact@incode.com", "security_email": "security@incode.com", "website": "https://incode.com/", "uei": "GRC4T5JHH397", "small_business": false, "business_categories": [ "Analytics", "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2531865690", "name": "Infinite Convergence Solutions, Inc.", "cloud_service_provider": "Infinite Convergence Solutions, Inc.", "cloud_service_offering": "NetSfere Enterprise", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/NSfere%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-24T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "NetSfere Enterprise is a secure messaging service and platform from Infinite Convergence Solutions, Inc. NetSfere provides the industry’s first and only quantum-proof security and message delivery capabilities, including global cloud-based service availability, device-to-device E2EE, and administrative controls for seamless communication over text, voice, and video with complete control by IT teams.\n\nDesigned to meet government regulations and industry specific challenges your organization is up against, NetSfere's next-generation approach allows employees to safely communicate business information in real-time via a user-friendly web/desktop interface or mobile messaging app, eliminating the need to use risky and non-compliant consumer-grade messaging apps for federal & local government institutions and commercial enterprises alike.\n\nThe service leverages Infinite Convergence's experience in delivering mobility solutions to tier 1 mobile operators globally. NetSfere is also compliant with global regulatory requirements, including GDPR, HIPAA, SOC2, ISO 27001, 27701, and many others. Infinite Convergence Solutions has offices in the United States, Germany, London, India and Singapore. For more information, visit www.netsfere.com.", "fedramp_msg": "", "sales_email": "Sales.FedRAMP@netsfere.com", "security_email": "Security.FedRAMP@netsfere.com", "website": "https://netsfere.com/fedramp", "uei": "WLNXYKJCJYL6", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Cybersecurity & Risk Management", "Data Management", "Finance", "Health & Wellness", "Human Resources", "Law Enforcement", "Legal & Policy", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2017257053", "name": "Infoblox", "cloud_service_provider": "Infoblox", "cloud_service_offering": "Infoblox Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Infoblox%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-09-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-07-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-12-15T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-09-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-07-01T20:00:00.000Z", "cert_date": "2022-12-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Census Bureau", "fedramp_auth": "2022-12-15T20:00:00.000Z", "annual_assessment": "2011-07-01T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Consumer Product Safety Commission" ], "agency_reuse": [ "" ], "service_description": "Infoblox Government Cloud is a FedRAMP-authorized cloud-native SaaS offering in AWS GovCloud (US) that provides centralized management of DNS, DHCP, and IP address management (DDI), and network-centric asset visibility across hybrid and multi-cloud environments through Universal DDI, Universal Asset Insights, and the Threat Defense component services TIDE and Dossier.\n \n\nThrough a single portal, APIs, and role-based access controls, the service helps agencies enforce DDI policy, maintain an authoritative asset inventory, identify IP conflicts and non-compliant or orphaned assets, and accelerate threat investigation and response with curated intelligence and analyst research tools.", "fedramp_msg": "N/A", "sales_email": "sales@infobloxfederal.com", "security_email": "fedramp@infoblox.com", "website": "https://www.infoblox.com/products/universal-ddi-management/", "uei": "UMGCATUGKJ79", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Network Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1710033970", "name": "Infor", "cloud_service_provider": "Infor", "cloud_service_offering": "Infor Government Solutions (IGS) Software as a Service", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Infor%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-07-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2018-04-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2018-07-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2017-07-25T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2018-04-18T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2018-07-10T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-07-10T20:00:00.000Z", "annual_assessment": "2011-07-10T04:00:00.000Z", "independent_assessor": "SecureIT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Naval Nuclear Propulsion Program" ], "agency_reuse": [ "" ], "service_description": "Infor Government Solutions (IGS) is composed of integrated cloud application suites that align to specific industries such as Public Sector, Aerospace & Defense, Industrial, Automotive, and Healthcare.These cloud suites are web-architected solutions powered by the Infor Operating Service Platform (Infor OS), a modern technology foundation for driving digital transformation. IGS supports workloads for essential business capabilities such as Financial & Supply Management, Manufacturing ERP, and Human Capital Management as well as fully integrated operational capabilities such as Asset & Maintenance Management, Business Intelligence & Analytics.\n\nIGS is hosted in an isolated government-only region of AWS GovCloud (US). AWS GovCloud adheres to U.S. International Traffic in Arms Regulations (ITAR), Federal Risk and Authorization Management Program (FedRAMP), Criminal Justice Information Services (CJIS) requirements, and Department of Defense (DoD) Cloud Computing Security Requirements Guide (SRG) Impact Levels 2, 4, and 5. IGS offerings are categorized using NIST SP 800-53 and the FedRAMP baseline to withstand a Moderate impact level. In addition to IGS' FedRAMP Joint Authorization Board (JAB) authorization, IGS is also compliant for Health Insurance Portability and Accountability Act of 1996 (HIPAA) and NIST SP 800-171, rev 1, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations.\n\nInfor Platform: Infor Operating Service Platform (InforOS) delivers high performance, support for open standards, interoperability, enhanced productivity, responsive design, and mobile access via a wide range of devices. The components of Infor OS work together to unify the user experience (UX) for the following enterprise capabilities, using human-centered design to support the mission. \n\nInfor Federated Security (IFS) provides single sign-on (SSO) to provisioned IGS applications and authorizes users for role-based access by synchronizing with customer solutions for multi-factor authentication (MFA).\n\nEnterprise Portal is a comprehensive platform for social collaboration, business process improvement and contextual analytics; it provides web portal access and presentation to all IGS applications available to the customer. \n\nHomepages provides customers the ability to build custom, dynamic pages or select from Infor-provided widgets. Homepages offers a flexible and highly configurable way to present IGS application information and analytics data to users. Intelligent Open Network (ION)is a configurable integration platform-as-a-service (iPaaS) that provides customers with event-based business process automation and the flexibility to orchestrate end-to-end processes across a complex web of enterprise applications. \n\nION API Gateway provides a secure, scalable API gateway for all API calls and programmatic access to IGS applications with API Discovery Services, Policy Management, and Throttling features.\n\nDocument Managementenables customers to capture, create, manage and access organization-specific business documents and use contextual intelligence to display documents with relation to their business purpose.\n\nData Lake delivers schema-on-read intelligence, a fast, flexible data consumption framework, and metadata management to provide customers with needed data for making key decisions.\n\nFinancials & Supply Management:Improve operations throughout your organization with the security, scalability, and flexibility of Infor's financial management solutions. Configurable to suit the unique needs of your industry, Infor's innovative solutions expands data usability, helps meet complex reporting requirements, and eliminates duplicate records and spreadsheets to improve financial performance.\n\nCS Financials & Supply Management is an integrated finance and supply management software suite that couples modern General Ledger operations with tools to effectively manage the full source-to-settle process. Establish a single close process across your entire organization and gain real-time visibility into receivables and billing, payables and matching, cash management, lease accounting, asset accounting, and project ledgers.\n\nExpense Management comprises a suite of four integrated applications (Expense Reports, Travel Plans, Payment Requests, and Timesheets) that can be used either individually or in any combination to automate expense-related business processes, enforce policy compliance, cut administrative costs, and reduce the risk of accidental errors and intentional fraud.\n\nManufacturing ERP: Infor s manufacturing offerings provide ready-to-run solutions, built specifically to meet the needs of Government, Industrial, Aerospace & Defense, and Automotive companies and organizations. They provide deep, proven capabilities in key areas such as global finance, materials and inventory management, manufacturing production, product lifecycle management, project management, regulatory compliance, and field service management.\n\nCS Aerospace & Defense: Infor LN embodies over 25 years of experience and best practices in industrial manufacturing, equipment, automotive, high tech, aerospace and defense, distribution, and service management. Features includes industry-specific purchase and quality management, contract management and flowdown, multisite support, and built-in processes for ETO, MTO, MTS, and repetitive manufacturing.\n\nCS Industrial with Mobility: Infor SyteLine provides an end-to-end ERP solution for both discrete and process manufacturers, which includes advanced planning and scheduling, complex product configuration, mixed mode processes, and lean production methods.\n\nFactory Track™ is a manufacturing automation solution that supports field service and quality capabilities within Infor manufacturing ERPs and enhances warehousing functions for a paperless shop floor and greater operational efficiency. Warehouse mobility provides real-time barcoding and data collection for inventory operations and traceability. Time tracking provides a comprehensive time and attendance management for labor recording and machine time recording.\n\nInfor Supplier Exchange™ is used by automotive manufacturers to publish demand (requirements) and Advance Ship Notices (ASNs) to the Web. The platform provides online collaboration between customers and different types of companies in the manufacturing industry, including logistics service providers, outside processors, purchase parts suppliers, and discrete purchase order suppliers. Features include Global Track and Trace, supplier performance, damaged material notices as supports multiple currencies and multiple languages.\n\nHuman Capital Management (HCM): Infor HCM provides a powerful set of cloud-based human capital management solutions to replace complex processes, workflows, and systems. Sophisticated, yet intuitive technology, empowers your HR professionals to deliver streamlined workforce processes.\n\nGlobal HR empowers HR departments to unify both data and processes and has the industry's broadest feature set of configurable, simplified, flexible and personalized core HR capabilities. GHR helps manage the person system of record, absence management, time entry, and benefits administration workflows. Cloud-based, mobile-enabled HR software frees your global teams from time-consuming transactional tasks enabling timely, accurate, and insightful data to all of your relevant HR and business applications.\n\nTalent Management is an integrated set of applications and performance management software organically built to support your strategic people initiatives by unlocking the potential of your organization's talent. Identify, hire, develop, reward, and retain the best of the best, all using a single, unified user experience.\n\nWork Force Management is a comprehensive labor optimization, planning, and time and attendance solution managing employee resource demand, labor performance, and business analytics. WFM addresses all aspects of labor compliance and performance needs with time and attendance, demand-driven scheduling, workforce scheduling, and absence management tools, mitigating potential compliance errors and reducing costs.\n\nPayroll is a scalable solution integrating personnel information seamlessly with compensation, benefits, absence, time-entry management, and employee self-services. Infor Payroll reduces administration workload and duplication of effort with a powerful control monitoring system. Update your payroll practices with a reliable and highly secure solution that meets the needs of complex pay job costing components.\n\nAsset & Maintenance Management: Hexagon's Enterprise Asset Management (EAM) with Mobility enables everyone involved in asset maintenance and management - owners, inspectors, managers, engineers, field techs, investment strategists - to find out more about the criticality, condition, reliability, and performance of assets, large and small. Based on ISO 55000, asset performance management (APM), asset investment planning (AIP), and GIS capabilities allow organizations to track assets and make data-driven decisions about when to repair, refurbish, retire, or replace.\n\nFacilities Management is configured with 14 separate workflows with out-of-the-box functionality. Infor EAM is pre-loaded with American Society of Heating, Refrigerating, and Air-Conditioning Engineers (ASHRAE) standards for equipment classifications, along with standard structures for mechanical, electrical, plumbing, and architectural systems. A two-way integration with OpenCAD Building Information Management (BIM) allows virtual walkthroughs of 3D building models, transforming design, construction, and maintenance capabilities.\n\nMaintenance, Repair & Overhaul (MRO) is a configurable solution to manage activities across different types of assets, including Fleets, Equipment, Labs and Utilities. Infor EAM's best-in-class features automatically create and assign work orders for preventive and corrective maintenance, automate purchasing and inventory management, manage inspections, schedule resources, and can leverage IoT and analytics to predict asset failure and support condition-based and reliability-centered maintenance programs.\n\nBusiness Intelligence & Analytics: Infor Burst is a native cloud business intelligence (BI) and data analytics platform for enterprise reporting, dynamic dashboards, and self-service data discovery that helps organizations understand and optimize complex processes in less time than traditional BI solutions. Built with patented data warehouse automation and machine learning technologies, Burst's \"networked BI\" approach creates a curated semantic data layer that maintains data lineage and connects teams and applications across the enterprise via a trusted network for faster insights and smarter decisions. Democratize data access while still maintaining centralized compliance and governance with new auditing features and granular user access controls.\n\nDynamic Enterprise Performance Management (d/EPM) delivers business and financial performance management applications for Infor ERP solutions that allow organizations to centralize data, build plans tailored to their business, and forecast more accurately. d/EPM is an in-memory analytics platform that provides instant consolidation of data and immediate user feedback.\n\nGovernance Risk and Compliance (GRC)is a versatile and extensible governance, risk, and compliance software that customers can use to mitigate performance or security risks, minimize inefficiencies, and verify user permissions, while remaining compliant with laws, regulations, and industry standards.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/06/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "", "security_email": "IGS@Infor.com", "website": "https://www.infor.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2029331613", "name": "Informatica LLC", "cloud_service_provider": "Informatica LLC", "cloud_service_offering": "Informatica Intelligent Cloud Services (IICS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Informatica%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-10-08T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-10-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-02-02T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-10-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-10-08T20:00:00.000Z", "cert_date": "2022-02-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-02-02T20:00:00.000Z", "annual_assessment": "2011-10-08T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1819057982", "csp": "The Coleridge Initiative, Inc.", "cso": "Administrative Data Research Facility (ADRF)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Customs and Border Protection", "Department of State", "Federal Retirement Thrift Investment Board", "Office of Justice Programs", "Tennessee Valley Authority" ], "agency_reuse": [ "22-025", "22-034" ], "service_description": "IICS for FedRAMP is a microservices-based, cloud-native data management solution which leverages industry-leading metadata capabilities to accelerate and automate core data management and data governance functions. IICS includes support for both Cloud Data Integration and Cloud Application Integration: \n\nCloud Data Integration \n\nBuilt on a next-generation, microservices-driven software as a service (SaaS), Informatica Cloud Data Integration enables you to connect to industry-leading applications and data sources across on-premises and the cloud and allows you to integrate the data sources at scale. Optimize the performance of your development teams by employing a codeless UI; using drag-and-drop interfaces, and making complex integrations simple. \n\nCloud Application Integration \n\nInformatica Cloud Application Integration (CAI) service offers a single, trusted solution to support any integration pattern, data set, user-type, or endpoint to automate business processes, expedite transactions, and enable real-time analytics. It is based on a modular, microservices-based architecture for agile support of future business requirements. CAI supports multiple new and unique integration patterns, which include on-premises to cloud real-time data integration, real-time/B2B application integration, process orchestration, data synchronization, and more. Users can integrate multi-cloud and hybrid applications without writing a single line of code. \n\nEach of the above services leverages Informatica's Secure Agent, which runs all your Cloud Data Integration and Cloud Application Integration workloads inside the customer’s infrastructure, ensuring the highest levels of security and performance.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "public.sector.compliance@salesforce.com", "website": "https://www.informatica.com/solutions/industry-solutions/public-sector.html", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2321143030", "name": "Information First, Inc.", "cloud_service_provider": "Information First, Inc.", "cloud_service_offering": "Content Manager Records Management Application (RMA) Cloud Service Offering (CSO)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IF%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-10-10T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2024-10-10T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Information First’s Content Manager Records Management Application (RMA) Cloud Service Offering (CSO) is a secure, scalable, DoD 5015.02-certified Records Management Application (RMA) providing Enterprise Content Management (ECM), NARA-compliant Electronic Document and Records Management (EDRM), and workflows for Freedom of Information Act (FOIA), Privacy Act, and case management.\r\n\r\nLeveraging Commercial-off-the-Shelf (COTS) software from OpenText, the Content Manager RMA CSO can be accessed from either a desktop client or a web browser interface providing agency customers with simple, straightforward records management features that can support virtually any file type and be tailored to meet the needs of any organization.\r\nThe Content Manager RMA CSO is fully configurable, with features such as check-in/check-out and versioning, redaction and renditions, file plans and disposition workflows, metadata management, OCR, search and query functions, dashboards and role-based access control, allowing agency customers to have full control over their records management processes at every stage of a record's lifecycle.\r\n\r\nThe Content Manager RMA CSO facilitates compliance with NARA’s Universal Electronic Records Management requirements, DoD 8180.01, OMB M-19-21 and M-23-07. The RMA CSO also meets NIST SP 800-145 essential characteristics for cloud computing, including on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service while also incorporating AI and machine learning for advanced search and auto-categorization.\r\n\r\nThe Content Manager RMA is delivered as a SaaS offering using a multi-tenant Government Community Cloud computing environment, available to federal, state, local, tribal, territorial, federally funded research centers (FFRDCs), contractors working on behalf of the government, or lab entities.", "fedramp_msg": "N/A", "sales_email": "sales@info-first.com", "security_email": "fedramp@info-first.com", "website": "https://www.info-first.com/content-manager-msaas.html", "uei": "L4YRB111WR81", "small_business": true, "business_categories": [ "Collaboration", "Construction", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Cybersecurity & Risk Management", "Data Management", "Design & Multimedia", "Human Resources", "Legal & Policy", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2525557617", "name": "InfusionPoints", "cloud_service_provider": "InfusionPoints", "cloud_service_offering": "XBU40", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IP%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-06T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2026-04-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": "2026-03-06T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-04-10T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-04-10T20:00:00.000Z", "annual_assessment": "2011-04-11T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "XBU40 Enclave Platform\r\n\r\n\r\n\r\nXBU40 Enclave Platform-as-a-Service     is InfusionPoints’ secure cloud platform designed to support organizations pursuing and maintaining FedRAMP 20x authorization. Built on AWS GovCloud, it delivers a secure-by-design environment with automated compliance\r\n validation, continuous monitoring, and authorization readiness. The platform is operated through Command Center and powered by AuditShield for automated evidence validation and KSI monitoring.\r\n\r\n\r\nPlatform Management – Command Center\r\n\r\n\r\nCommand Center is the platform management interface used to operate and monitor XBU40 Enclave environments. It provides centralized visibility into infrastructure security, vulnerability posture, Key Security Indicators\r\n (KSIs), and compliance evidence. Through Command Center, organizations maintain a real-time view of operational and compliance status across their environment.\r\n\r\n\r\nCore Service Capabilities\r\n\r\n\r\nXBU40 Enclave Platform combines secure infrastructure with integrated compliance automation to support\r\nFedRAMP 20x authorization and continuous monitoring. The service includes secure hosting in AWS GovCloud, platform management through Command Center, vulnerability lifecycle management, and automated KSI validation\r\n through AuditShield. These capabilities allow organizations to maintain continuous authorization readiness.\r\n\r\n\r\nSecure Hosting Environment\r\n\r\n\r\nXBU40 provides a secure-by-design hosting architecture engineered to support FedRAMP 20x Moderate environments. The platform includes identity and access controls, network protection, encryption, and centralized logging\r\n aligned with government cloud security practices. Environments are supported by InfusionPoints Cloud Operations and Security Operations teams.\r\n\r\n\r\nVulnerability and Exposure Management\r\n\r\nXBU40 provides continuous vulnerability scanning, prioritization, and remediation tracking across hosted environments. Findings are managed through integrated workflows that support remediation and validation. This ensures systems maintain a\r\ncontinuously monitored vulnerability posture aligned with FedRAMP 20x KSIs.\r\n\r\n\r\nTrust Center\r\n\r\n\r\nThe Trust Center provides a centralized view of system compliance posture and Key Security Indicators. It allows stakeholders to access evidence artifacts, compliance documentation, and monitoring dashboards in real time. This transparency enables assessors\r\n and agencies to validate security posture through live operational evidence.\r\n\r\n\r\nAuditShield – Automated Evidence and KSI Validation\r\n\r\n\r\nAuditShield is the automation engine within the XBU40 Enclave Platform that continuously validates compliance posture. It collects and verifies evidence through APIs, serverless validation functions, and infrastructure\r\n telemetry. Each validation maps directly to a \r\nFedRAMP 20x KSI, preserving artifacts and timestamps for assessor review.\r\n\r\n\r\n\r\nContinuous Authorization Monitoring\r\n\r\n\r\nXBU40 supports continuous authorization readiness through automated monitoring and validation of system security posture. The platform evaluates infrastructure configuration, vulnerability lifecycle status, security telemetry, and KSI validation results. All\r\n evidence and compliance artifacts are maintained within Command Center to ensure environments remain\r\ncontinuously audit-ready.", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class C Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "Sales@InfusionPoints.com", "security_email": "InfPtsFedRAMP@InfusionPoints.com", "website": "https://xbu40.com/", "uei": "", "small_business": false, "business_categories": [ "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1800263217", "name": "Innovative Discovery, LLC", "cloud_service_provider": "Innovative Discovery, LLC", "cloud_service_offering": "Innovative Driven Government Cloud (IDGC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Innovative%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-10-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-06-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-07-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2017-10-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-06-01T20:00:00.000Z", "cert_date": "2018-07-25T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Office of the Comptroller of the Currency", "fedramp_auth": "2018-07-25T20:00:00.000Z", "annual_assessment": "2011-10-16T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "FHFA Office of the Inspector General", "Federal Deposit Insurance Corporation", "Office of the Comptroller of the Currency" ], "agency_reuse": [ "" ], "service_description": "The Innovative Driven Government Cloud (ID Gov-Cloud) is a Software as a Service (SaaS) offering that provides secure and scalable government legal document services within a compliant cloud environment. Built on industry-leading technologies Relativity and Nuix and paired with expert consulting, agencies can leverage the full scope of eDiscovery services within one scalable platform, including (but not limited to) processing, document review, advanced analytics, assisted review, legal hold services, and production.\r\n\r\n \r\n\r\nEvery service package is within a secure and user-friendly customer interface. Government agencies also gain the added capabilities of Innovative Discovery's government project management teams and optimal workflows, benefitting from years of experience supporting complex government electronic discovery requests.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@innovativedriven.com", "website": "https://www.innovativedriven.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1821933307", "name": "Innovest Systems, LLC", "cloud_service_provider": "Innovest Systems, LLC", "cloud_service_offering": "Trust & Wealth Management Solutions", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Innovest%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-06-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-01-24T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-04-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-06-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-01-24T20:00:00.000Z", "cert_date": "2019-04-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-04-23T20:00:00.000Z", "annual_assessment": "2011-01-24T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Trust Funds Administration" ], "agency_reuse": [ "" ], "service_description": "A browser-based, highly secure, integrated, real-time trust accounting and wealth management platform offered in a multi-currency Software as a Service (SaaS) environment.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "inn-fedramp@sscinc.com", "website": "https://www.innovestsystems.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2605341343", "name": "IntelliGRC, Inc.", "cloud_service_provider": "IntelliGRC, Inc.", "cloud_service_offering": "IntelliGRC", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IntelliGRC%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-11-24T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-11-24T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2025-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-11-24T20:00:00.000Z", "ip_prog_date2": "2025-11-24T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2025-12-05T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-12-05T20:00:00.000Z", "annual_assessment": "2011-12-12T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "IntelliGRC is an AI-powered, all US-based and developed FedRAMP-aligned multi-tenant Governance, Risk, and Compliance (GRC) SaaS platform purpose-built for Service Providers (MSPs/MSSPs), cybersecurity consultants, and regulated organizations that must achieve, manage and maintain audit-ready compliance at scale. The platform combines asset-centric scoping, context-aware control mapping, intelligent automation, bidirectional cross tenant shared implementations, and practitioner-trained AI features to streamline assessments, evidence collection, ongoing monitoring, and compliance program management across multiple frameworks. \n\nDesigned with deep operational expertise from cybersecurity assessors and compliance practitioners, IntelliGRC enables service providers to deliver consistent, repeatable, and high-caliber compliance outcomes for their customers while reducing manual effort and SME dependency. IntelliGRC is widely used by organizations across the Defense Industrial Base (DIB), research institutions, and service providers supporting CMMC, NIST SP 800-171, NIST CSF, HIPAA, ISO 27001, SOC 2, and FedRAMP-related requirements. Used in over 30+ CMMC L2 Certification Assessments.\n\nA fully multi-tenant architecture allows providers to centrally manage multiple customer environments, distribute governance content, standardize workflows, and operationalize compliance-as-a-service (GRCaaS). IntelliGRC’s integrated AI assistant—trained on IntelliGRC methodologies and cybersecurity compliance best practices—supports evidence analysis, control interpretation, gap evaluation, and documentation generation. Our mission is to make authentic, tangible, actionable, high-caliber, and scalable cybersecurity compliance accessible.", "fedramp_msg": "", "sales_email": "Sales@intelligrc.com", "security_email": "FedRAMP@intelligrc.com", "website": "https://intelligrc.com/", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management", "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2532766956", "name": "IntelliGRC, Inc.", "cloud_service_provider": "IntelliGRC, Inc.", "cloud_service_offering": "IntelliGRC", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IntelliGRC%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-04T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-12-04T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "IntelliGRC is an AI-powered, all US-based and developed FedRAMP-aligned multi-tenant Governance, Risk, and Compliance (GRC) SaaS platform purpose-built for Service Providers (MSPs/MSSPs), cybersecurity consultants, and regulated organizations that must achieve, manage and maintain audit-ready compliance at scale. The platform combines asset-centric scoping, context-aware control mapping, intelligent automation, bidirectional cross tenant shared implementations, and practitioner-trained AI features to streamline assessments, evidence collection, ongoing monitoring, and compliance program management across multiple frameworks. \n\nDesigned with deep operational expertise from cybersecurity assessors and compliance practitioners, IntelliGRC enables service providers to deliver consistent, repeatable, and high-caliber compliance outcomes for their customers while reducing manual effort and SME dependency. IntelliGRC is widely used by organizations across the Defense Industrial Base (DIB), research institutions, and service providers supporting CMMC, NIST SP 800-171, NIST CSF, HIPAA, ISO 27001, SOC 2, FedRAMP, etc. Used in over 30+ CMMC L2 Certification Assessments.\n\nA fully multi-tenant architecture allows providers to centrally manage multiple customer environments, distribute governance content, standardize workflows, and operationalize compliance-as-a-service (GRCaaS). IntelliGRC’s integrated AI assistant—trained on IntelliGRC methodologies and cybersecurity compliance best practices—supports evidence analysis, control interpretation, gap evaluation, and documentation generation. Our mission is to make authentic, tangible, actionable, high-caliber, and scalable cybersecurity compliance accessible.", "fedramp_msg": "", "sales_email": "Sales@intelligrc.com", "security_email": "FedRAMP@intelligrc.com", "website": "https://intelligrc.com/", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management", "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1724526654", "name": "Intelliworx", "cloud_service_provider": "Intelliworx", "cloud_service_offering": "Intelliworx Cloud Workflow Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Intelliworx%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-10-03T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-05-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-08-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 32, "reuse": 31, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2017-10-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-05-30T20:00:00.000Z", "cert_date": "2018-08-22T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-08-22T20:00:00.000Z", "annual_assessment": "2011-05-30T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Chemical Safety And Hazard Investigation Board", "Consumer Financial Protection Bureau", "Consumer Product Safety Commission", "Corporation for National & Community Service", "Department of Agriculture", "Department of Education", "Department of Energy", "Department of Housing and Urban Development", "Department of Transportation", "Department of Veterans Affairs", "Department of the Interior", "Federal Bureau of Prisons", "Federal Communications Commission", "Federal Deposit Insurance Corporation", "Federal Energy Regulatory Commission", "Federal Housing Finance Agency", "Federal Retirement Thrift Investment Board", "Federal Trade Commission", "Immigration and Customs Enforcement", "Institute of Museum and Library Services", "Morris K. Udall and Stewart L. Udall Foundation", "National Credit Union Administration", "National Endowment for the Humanities", "National Labor Relations Board", "Pension Benefit Guaranty Corporation", "Social Security Administration", "Tennessee Valley Authority", "Treasury Inspector General for Tax Administration", "U.S. Commission for the Preservation of America's Heritage Abroad", "United States Agency for International Development", "United States Commission on Civil Rights" ], "agency_reuse": [ "" ], "service_description": "Intelliworx offers a Platform to automate complex business, workflow, application management, and forms/document solutions. This Platform provides the ability to simplify complex data collection processes into intelligent interviews that can be combined to create complete end to end business solutions. This is done by collecting information from the public or employees through adaptive interviews to ensure accuracy, completeness, and simplicity. Once information is collected and submitted, appropriate stakeholders are notified for review, approval, and correction as needed. The information can be used in future sessions or integrated into other business solutions and systems of records.", "fedramp_msg": "N/A", "sales_email": "sales@itwx.com", "security_email": "security@itwx.com", "website": "https://intelliworxit.com/", "uei": "ZD7ZTDMLKWR1", "small_business": true, "business_categories": [ "Data Management", "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2617664138", "name": "Inteum Company", "cloud_service_provider": "Inteum Company", "cloud_service_offering": "Minuet", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Minuet%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-10T22:12:59.929Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-06-09T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Linford & Company", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Minuet is a suite of tools to protect, manage, and market intellectual property portfolios. It is a SaaS offering using a multi-tenant Government-Only cloud computing environment. It is available to federal, state, local, and tribal governments, as well as research institutions, federal contractors, and government contractors.", "fedramp_msg": "", "sales_email": "sales@inteum.com", "security_email": "govsupport@inteumgov.us", "website": "https://www.inteum.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Content Management System (CMS)", "Finance", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2124663764", "name": "Intrepid Networks LLC", "cloud_service_provider": "Intrepid Networks LLC", "cloud_service_offering": "Intrepid Networks Government Platform (INGP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Intrepid%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-01-19T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2024-04-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2026-01-15T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-03-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2024-01-19T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-04-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-01-15T20:00:00.000Z", "cert_date": "2026-03-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Air Force Research Laboratory", "fedramp_auth": "2026-03-05T20:00:00.000Z", "annual_assessment": "2011-07-01T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "United States Marshals Service" ], "agency_reuse": [ "" ], "service_description": "Intrepid Networks Government Platform (INGP) is a secure, cyber-hardened platform that brings public safety and government teams together in one unified system. At its core is Intrepid Response©, a real-time operations and intelligence platform that connects teams from mission planning to first alert through final reporting. \r\nIntrepid Response© enables coordination across agencies during day-to-day operations, planned events and incidents of any scale. Agencies are able to plan, manage, execute, and document missions within a single, intuitive platform. It delivers a shared operational picture, secure encrypted communications, emergency alerts, multimedia sharing, and customizable digital forms—helping agencies streamline daily operations and digitize standard operating procedures with clarity and accountability.", "fedramp_msg": "N/A", "sales_email": "jasonwinslow@intrepid-networks.com", "security_email": "FedRAMP@intrepid-networks.com", "website": "https://intrepid-networks.com/", "uei": "LU9HZUP959K9", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Law Enforcement" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2104636677", "name": "Ipsos America, Inc.", "cloud_service_provider": "Ipsos America, Inc.", "cloud_service_offering": "Ipsos Research", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Ipsos%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-02-18T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-02-18T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-12-21T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-02-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-02-18T20:00:00.000Z", "cert_date": "2021-12-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-12-21T20:00:00.000Z", "annual_assessment": "2011-02-18T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Centers for Disease Control and Prevention", "Department of Veterans Affairs", "Social Security Administration" ], "agency_reuse": [ "" ], "service_description": "Ipsos: Multi-Modal Survey Research and AI-Powered Data Analytics for the Public Sector\n\nIpsos delivers a secure, FedRAMP Moderate Authorized platform designed to help federal agencies gather critical data and translate it into actionable intelligence. We provide end-to-end support for the entire research lifecycle, from survey design and deployment to advanced, AI-driven analysis.\n\nCore Capabilities:\n\nOur platform supports a full range of data collection methods to reach any audience, including:\n\n* Digital Surveys: Modern, responsive web-based surveys with the capability to distribute invitations via email and SMS.\n* Paper-Based Logistics: We manage the complete paper survey lifecycle, partnering with vetted vendors for printing and mailing, while handling all high-speed scanning and data capture in-house.\n \nNext-Generation AI Analytics:\n\nOur platform securely accesses a suite of leading Large Language Models (LLMs) through AWS Bedrock, a managed service that has achieved FedRAMP High authorization. This allows us to transform vast amounts of unstructured text from open-ended survey responses into clear, data-driven insights. Our AI engine can:\n\n* Automatically Classify Verbatims: Instantly categorize thousands of qualitative responses into key themes.\n* Extract Actionable Insights: Identify and summarize key takeaways, emerging trends, and critical recommendations.\n* Enhance Data Quality and Security: Automatically identify and flag comments containing extreme keywords or potential Personally Identifiable Information (PII) for manual review, redaction, and follow-up, ensuring data integrity and compliance.\n* Generate Executive Summaries: Produce concise narratives to support rapid and informed decision-making.\n \n\nWhy Ipsos for Government?\n\nOur combination of multi-modal survey expertise and secure, AI-powered analytics empowers public sector organizations across all verticals—including healthcare, defense, and civilian agencies—to understand public sentiment, evaluate program effectiveness, and make mission-critical decisions with greater speed and confidence. All data is managed within our secure GovCloud environment, adhering to the strictest contractual and regulatory standards.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "global_security@ipsos.com", "website": "https://www.ipsos.com/en-us/solutions/list?search=Public%20Affairs", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2031155471", "name": "Iron Mountain", "cloud_service_provider": "Iron Mountain", "cloud_service_offering": "Iron Mountain InSight", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-03-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2022-03-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2023-04-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2021-03-05T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-04-13T20:00:00.000Z", "cert_date": "2025-03-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Secret Service", "fedramp_auth": "2025-03-26T20:00:00.000Z", "annual_assessment": "2011-04-12T04:00:00.000Z", "independent_assessor": "Lazarus Alliance, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "United States Secret Service" ], "agency_reuse": [ "" ], "service_description": "The Iron Mountain InSight system is a cloud-based Software-as-a-Service (SaaS) solution that provides customers with a content services platform that leverages Machine Learning (ML) and Artificial Intelligence (AI) to automatically classify, extract, and enrich physical and digital content.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@ironmountain.com", "website": "https://www.ironmountain.com/services/insight-digital-experience-platform", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2535459236", "name": "Iron Mountain", "cloud_service_provider": "Iron Mountain", "cloud_service_offering": "Iron Mountain InSight for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-01-30T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-04-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-09-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-01-30T20:00:00.000Z", "cert_date": "2026-04-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-04-15T20:00:00.000Z", "annual_assessment": "2011-04-15T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Internal Revenue Service" ], "agency_reuse": [ "" ], "service_description": "The Iron Mountain InSight system is a cloud-based Software-as-a-Service (SaaS) solution that provides customers with a content services platform that leverages Machine Learning (ML) and Artificial Intelligence (AI) to automatically classify, extract, and enrich physical and digital content.", "fedramp_msg": "", "sales_email": "", "security_email": "fedramp@ironmountain.com", "website": "https://www.ironmountain.com/services/insight-digital-experience-platform", "uei": "", "small_business": false, "business_categories": [ "Content Management System (CMS)", "Customer Relations Management (CRM)", "Data Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2614247985", "name": "Ironclad Inc.", "cloud_service_provider": "Ironclad Inc.", "cloud_service_offering": "Ironclad CLM", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Ironclad%20Logo2.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-02-25T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-02-25T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Tevora Business Solutions, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "An authorization boundary provides a diagrammatic illustration of a CSO’s internal services,\ncomponents, and other devices, along with connections to external services and systems.\nPlease note that external services include external cloud services that are not FedRAMP\nAuthorized, corporate shared services, and the external entities to which the system must\nconnect to receive updates for products installed within the system boundary.\n\nAn authorization boundary accounts for all federal information, data, and metadata that flow\nthrough a CSO. If the CSO has strong configuration management and change management\nbuilt into the system development life cycle, the development environment can be outside the CSO boundary. This means that there is a 3PAO validated, reproducible and effective way to make service changes without impacting the production environment.\n\nThe authorization boundary diagram displays all in-scope system components for the Ironclad FedRAMP environment and is depicted with a prominent red border. All components outside of the authorization boundary are shown externally to the red border. The authorization boundary encompasses the Ironclad application and supporting infrastructure hosted entirely within GCP in the us-central1 region. All components depicted within the boundary directly support the operation, security, monitoring, and administration of the CLM system.\n\nWithin the authorization boundary, the FedRAMP environment consists of customer-facing\napplication services, internal application services, and data storage components deployed on GCP. Application components communicate with one another using Google-managed\nnetworking services and all internal data flows are encrypted in transit using TLS 1.2 or higher. Data at rest within the authorization boundary is encrypted using customer-specific encryption keys and uses FIPS 140-2-validated cryptographic modules or higher where available.\n\nIngress and egress to the authorization boundary are controlled through a load balancer and\nWAF that provide a single logical entry point for external connections. The WAF is configured to restrict and allow traffic based on approved ports, protocols, and services defined in the PPSM list. Network traffic entering or leaving the environment traverses these boundary protection mechanisms, and all external communications are encrypted in transit using TLS 1.2 or higher.\n\nDevelopment and test environments are depicted and logically separated from the production environment. Access to development and test environments is restricted to authorized Ironclad personnel. Backup storage is provided through Google-managed backup services within the authorized environment and is depicted on the diagram. Backup data is encrypted at rest and in transit using FIPS-validated cryptographic modules.", "fedramp_msg": "", "sales_email": "sales-strategic@ironcladhq.com", "security_email": "security@ironcladhq.com", "website": "https://ironcladapp.com/request-demo", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2614439182", "name": "Island", "cloud_service_provider": "Island", "cloud_service_offering": "Island Enterprise Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Island%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-02-24T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-02-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Island Enterprise Browser is a Government-Community cloud environment that resides in the AWS GovCloud West (Oregon) region. Island leverages the UberEther IAM Advantage (IAMA) PaaS for implementation, management, and monitoring of the AWS GovCloud infrastructure housing Island Enterprise components and inherits FedRAMP High control environments from both AWS and UberEther IAMA.\nIsland Enterprise Browser has been implemented on Amazon Elastic Kubernetes Services (EKS) to provide a microservices-based architecture. The production environment includes applications, operating systems, and AWS FedRAMP-authorized resources and services that support this architecture. The major components include:\nWeb services for access control as well as compute nodes on UberEther-managed instances managed by EKS\nAccess control for customer users to the front end through HTTPS (TLSv1.2 at a minimum)\nAccess control for internal Island Enterprise Browser users to the back end through privileged AWS Identity and Access Management (IAM) user access from AWS Workspaces instances\n\nDatabases/Storage:\nMySQL databases through Amazon Relational Database Service (RDS) as the primary data store  \nAmazon Simple Storage Service (S3) for static content and object storage \nAWS CloudFront for managed caching  \n\nNetworking:\nVirtual Private Cloud (VPC) with public and private subnets \nRoute tables for traffic flow between subnets  \nAWS Firewall and Security groups, acting as virtual firewalls and access control lists \nAmazon EKS and application load balancers (ALBs) \nAmazon Route53 for external and internal DNS \nAWS Certification Manager for public certificates \nAWS Workspaces for remote internal access to the environment \nAWS Internet Gateway and NAT Gateway for access between VPCs \n\nUberEther-Provided AWS Services for monitoring, management, logging, authentication, and support of the system environment and components", "fedramp_msg": "", "sales_email": "monty@island.io", "security_email": "micah.hedges@island.io", "website": "https://www.island.io/", "uei": "MAC6N2DUZG11", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Customer Relations Management (CRM)", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Finance", "Human Resources", "Law Enforcement", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2027958176", "name": "Issio Solutions, Inc.", "cloud_service_provider": "Issio Solutions, Inc.", "cloud_service_offering": "Issio Information System", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Issio%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-08-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" }, { "date": "2024-09-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Certified to Legacy FedRAMP Ready" }, { "date": "2026-05-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Authorized to FedRAMP Certified. Recertification" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2024-09-11T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-05-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-05-06T20:00:00.000Z", "cert_date": "2022-08-03T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-08-03T20:00:00.000Z", "annual_assessment": "2011-05-06T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Issio Solutions, a SaaS workforce optimization system, provides data analytics, automated communication, and staff scheduling solutions. Issio refines workforce processes and offers real-time and predictive visibility into staffing across entire health care systems, facilitating proactive decision-making that helps control labor costs, while enhancing patient care and staff satisfaction.", "fedramp_msg": "N/A", "sales_email": "sales@issio.net", "security_email": "fedramp@issio.net", "website": "https://www.issio.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Communication", "Data Management", "Health & Wellness", "Human Resources", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1303221956", "name": "IT-CNP", "cloud_service_provider": "IT-CNP", "cloud_service_offering": "GovDataHosting Cloud Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IT-CNP%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-02-23T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2019-04-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2019-02-23T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2019-04-03T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-04-03T20:00:00.000Z", "annual_assessment": "2011-04-03T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS", "PaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Centers for Medicare & Medicaid Services", "Commission of Fine Arts", "Department of Health and Human Services", "Federal Deposit Insurance Corporation" ], "agency_reuse": [ "" ], "service_description": "IT-CNP’s FedRAMP Class D (High) certified GovDataHosting Cloud Platform is delivered as a fully managed, FISMA-compliant Platform-as-a-Service (PaaS) offering using multi-tenant Federal Government cloud and private cloud computing environment deployment models. The GovDataHosting Cloud Platform is deployed over both our own purpose-built GovDataHosting IaaS and AWS GovCloud IaaS, giving customers a choice of underlying infrastructure under one identical, fully managed PaaS authorization. The GovDataHosting Cloud Platform supports the full range of federal mission needs — low, moderate, and high impact information systems — under a single high-baseline authorization. Rather than selling raw infrastructure and leaving security and compliance to the customer, our platform bundles fully managed infrastructure, platform runtime, security operations, and compliance documentation into one predictable subscription — eliminating the multi-vendor cost and complexity of assembling a compliant environment from raw Infrastructure-as-a-Service (IaaS) components. Certified support personnel manage every layer beneath the customer application: physical datacenter security, redundant power/cooling, network, storage, hypervisor servers, operating systems, databases, web and application runtimes, patching, backup, disaster recovery, identity and access management, continuous monitoring, and the underlying NIST SP 800-53 control set. This fully managed security and compliance model maximizes control inheritance, so customers inherit the heavy lifting of FedRAMP High compliance and remain responsible only for application-layer controls — letting program teams focus on their system mission and software application delivery instead of infrastructure and platform compliance. 100% of our datacenters and 24/7/365 mission-critical support are provided from the continental United States by U.S. persons, and the platform is available exclusively to U.S. Federal, state, and local government entities and their respective authorized contractors. The GovDataHosting Cloud Platform enables government customers to quickly and cost effectively deploy FedRAMP and NIST SP 800-53 compliant information systems while leveraging elastic compute, memory, disk, and network resources that scale up or down to accommodate periodic spikes in processing demand — available under flexible fixed monthly subscription or consumption-based billing models to match each program’s budget and procurement preferences.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/07/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "info@govdatahosting.com", "security_email": "fedramp@govdatahosting.com", "website": "http://www.govdatahosting.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "Backup and Disaster Recovery Management Service", "Configuration Management / Change Control Service", "Continuous Monitoring (ConMon) Service", "Data Loss Prevention (DLP) Service", "Endpoint/Antivirus (AV), File Integrity Monitoring (FIM)/Whitelisting Service", "Incident Response and Contingency Tracking Service", "Inherited Firewall/VPN and Web Application Firewall (WAF) Service", "Log Aggregation Service", "Managed Operating System, Database, and Application Runtime Service", "Multi-factor Authentication Service", "OS/Database/Application Vulnerability Scanning and Patch Management Service", "Security Information and Event Management (SIEM) Service", "Ticketing System Service" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2212912561", "name": "Itamar Medical", "cloud_service_provider": "Itamar Medical", "cloud_service_offering": "Itamar Dispatcher Cloud (IDC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Itamar%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-03-02T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-06-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-07-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-06-09T20:00:00.000Z", "cert_date": "2022-07-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-07-01T20:00:00.000Z", "annual_assessment": "2011-02-02T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "The Zoll-Itamar Dispatcher Cloud (IDC) supports health care providers conducting home sleep apnea tests utilizing the WatchPAT device. The provider integrates the IDC APIs into supported patient management systems to initialize WatchPAT devices and collect test results. The patients take the sleep study using the device and a proprietary Mobile application that communicates and transfers sleep study data to IDC in a secure manner.", "fedramp_msg": "N/A", "sales_email": "fedramp@itamar-medical.com", "security_email": "fedramp@itamar-medical.com", "website": "https://www.itamar-medical.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1507116930", "name": "Ivanti", "cloud_service_provider": "Ivanti", "cloud_service_offering": "Ivanti Neurons for MDM (Formerly MobileIron)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Ivanti%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-12-23T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2016-11-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2016-12-08T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-12-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2016-11-07T20:00:00.000Z", "cert_date": "2016-12-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2016-12-08T20:00:00.000Z", "annual_assessment": "2011-12-31T04:00:00.000Z", "independent_assessor": "Deloitte & Touche LLP", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1816364586", "csp": "Ivanti", "cso": "Ivanti Neurons for ITSM (Formerly Service Manager)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Energy", "National Institutes of Health", "National Mediation Board", "Office of Financial Research" ], "agency_reuse": [ "22-007-22", "22-011-03", "22-034" ], "service_description": "MobileIron Government Cloud provides Government agencies with the foundation of the first mobile-centric, zero trust security platform to securely access and protect data across the digital workplace. MobileIron's zero trust approach validates the device, to ensure that only authorized users, devices, apps, and services can access business resources. With MobileIron, Government agencies can secure and manage data on any device across multiple operating systems such as iOS, Android, Windows 10, macOS, Zebra and Oculus. MobileIron technology automatically provisions enterprise settings such as Wi-Fi and VPN, secures corporate email and email attachments, applications and content delivery for both GSE and BYOD programs. With MobileIron, IT departments can deliver the right resources to authorized personnel while protecting sensitive government data, preserving the privacy of end-user data, and maintaining the seamless native device experience. MobileIron Government Cloud has been purpose built to provide a cloud-based, scalable architecture that enables rapid deployment and scales up to millions of users. The MobileIron Unified Endpoint Management (UEM) platform incorporates identity, context, and privacy enforcement to set the appropriate level of access to data and services while allowing IT departments to securely manage their global mobile workforce from a single console. . When user choice and end user experience matters, MobileIron Cloud provides the simplest onboarding and superior on device experience which improves user productivity.\n\nMobileIron Government Cloud offering now includes MobileIron Threat Defense (MTD). MTD builds upon MobileIron's mobile-centric, zero trust security framework by providing a single app that continually detects and remediates against known and unknown (zero-day) device, network and app-level threats on Android and iOS devices, with or without cellular or Wi-Fi connectivity. Deployment and activation of MTD on mobile devices is accomplished silently on managed and unmanaged devices in order to drive towards 100 percent user adoption. In addition to protecting federal data from mobile attacks, MTD helps federal agencies to comply with regulatory requirements, reduce total cost of ownership, and drive business innovation with secure mobile devices, apps, and cloud services.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "FedRAMPAuditandCompliance@ivanti.com", "website": "https://www.ivanti.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1816364586", "name": "Ivanti", "cloud_service_provider": "Ivanti", "cloud_service_offering": "Ivanti Neurons for ITSM (Formerly Service Manager)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Ivanti%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-09-05T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2019-07-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2019-07-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-11-19T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 9, "ready_status": "Not Active", "ready_date": "2018-09-05T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-07-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-07-10T20:00:00.000Z", "cert_date": "2019-11-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Oceanic and Atmospheric Administration", "fedramp_auth": "2019-11-19T20:00:00.000Z", "annual_assessment": "2011-02-28T04:00:00.000Z", "independent_assessor": "Deloitte & Touche LLP", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2029331613", "csp": "Informatica LLC", "cso": "Informatica Intelligent Cloud Services (IICS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1902240018", "csp": "MDRC", "cso": "SPROUT", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Agriculture", "National Oceanic and Atmospheric Administration", "Strategic Petroleum Reserve" ], "agency_reuse": [ "22-002-02", "22-005", "22-005-09", "22-021-02", "22-042", "22-044", "22-070" ], "service_description": "Ivanti Service Manager, powered by HEAT, helps IT teams meet today's government and user demands for effective service delivery and support. The solution, with workflow automation, mobile and integrated Voice support, enables IT teams to quickly deploy and configure a world-class service management solution. Cloud deployment is available from FedRAMP compliant AWS data centers in North America.\n\nService Manager is designed to be the central point of contact between users, employees and the IT organization. It offers first and second line support to users, where incidents, problems or inaccuracies in IT systems are reported. The solution can also be an important source of management information for reporting and auditing purposes.\n\nIvanti Service Manager fully supports Incident, Problem, Change and Release Management, Self-Service, 3rd party integration and more, and is Pink Verified on 13 ITIL processes, to improve IT support performance and efficiency.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "FedRAMPAuditandCompliance@ivanti.com", "website": "https://www.ivanti.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2324452533", "name": "Joint Commission Resources", "cloud_service_provider": "Joint Commission Resources", "cloud_service_offering": "Tracers with AMP®", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/JCR%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-10-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-04-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-06-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-10-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-04-23T20:00:00.000Z", "cert_date": "2025-06-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-06-02T20:00:00.000Z", "annual_assessment": "2011-04-15T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Tracers with AMP® is a SaaS patient safety platform built to provide healthcare organizations with a single platform for continuous compliance, digital tracing, and rounding. Tracers with AMP® enables users to efficiently collect, analyze and visualize real-time data. Tracers with AMP® provides user-friendly, interactive dashboards and easy-to-build automated reports to help proactively identify risk areas, prioritize improvements, compare key performance indicators, document changes and track progress over time. Users can collect and aggregate data for: The Joint Commission Accreditation and Certification Program Requirements, Centers for Medicare & Medicaid Services (CMS) Requirements for Hospitals, Critical Access Hospitals and Ambulatory Surgery Centers, rounding activities related to patient safety, Environment of Care, Infection Prevention, Leadership, Management and many more. Through Tracers with AMP®, users can: track and enter Plans of Correction, Plans of Action (POA), crosswalk The Joint Commission Standards and Elements of Performance (EPs) to CMS Requirements, download Evidence of Standards Compliance (ESC) and multiple cycles of Requirements for Improvement (RFIs) to analyze findings over time.", "fedramp_msg": "N/A", "sales_email": "eproductmanager@jcrinc.com", "security_email": "Fedramp@jcrinc.com", "website": "https://www.jcrinc.com/what-we-offer/software/do-more-with-tracers-with-amp/", "uei": "RB5HMSXE5P63", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Data Management", "Education & Training", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2622238925", "name": "Judi Health™", "cloud_service_provider": "Judi Health™", "cloud_service_offering": "Judi®", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Judi%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-15T21:35:28.098Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-13T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Judi Health™ is an enterprise health technology company providing benefit administration solutions to employers, health plans, unions, and government entities. Built on Judi®, a proprietary enterprise health platform, Judi Health supports healthcare benefit administration across pharmacy, medical, dental, and vision. \n \nAt its core, Judi® is a modern, modular, cloud-native, secure, end-to-end platform that enables Unified Claims Processing™, bringing together medical, pharmacy, dental, and vision claims administration through a single, unified platform. Built on a fully independent and programmable REST API architecture, Judi® supports benefit administration, claims processing, payments, reporting, care navigation, consumer engagement tools, data management, and AI-powered workflows. \n \nJudi Health delivers these capabilities through three complementary business lines: \n \n• Judi Rx™ – pharmacy benefit management and administration solutions. \n• Judi Care™ – medical, dental, and vision benefit administration solutions. \n• Judi Cloud™ – the licensed SaaS offering of Judi®, enabling benefits administration and Unified Claims Processing™ across a configurable system spanning eligibility, claims, payments, reporting, and healthcare data management. \n \nBy unifying medical and pharmacy data within a single platform, Judi Health reduces administrative complexity, improves transparency and operational efficiency, and provides a scalable, single source of truth for healthcare administration. Supporting commercial, Medicare, and Medicaid organizations, Judi® delivers the flexibility, scalability, and connectivity required to power modern healthcare administration.", "fedramp_msg": "", "sales_email": "nvanhook@judi.com", "security_email": "judi-fedramp@judi.com", "website": "https://www.judi.health/", "uei": "G5JDSD5J51C6", "small_business": false, "business_categories": [ "Analytics", "Customer Service", "Data Management", "Health & Wellness", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2102758152", "name": "Juniper Networks", "cloud_service_provider": "Juniper Networks", "cloud_service_offering": "Juniper Mist", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Juniper%20Logo.jpg", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-02-22T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-10-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-02-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-10-08T20:00:00.000Z", "cert_date": "2025-03-28T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-28T20:00:00.000Z", "annual_assessment": "2011-10-04T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "National Oceanic and Atmospheric Administration" ], "agency_reuse": [ "" ], "service_description": "Juniper Mist Government Cloud uses a combination of artificial intelligence, machine learning, and data science techniques to optimize user experiences and simplify operations across the wireless, wired, and SD-WAN branch and campus environments. Data is ingested from numerous sources, including Juniper Mist Access Points, Switches, Session Smart Routers (SSR), and Firewalls (SRX) for end-to-end insight into user experiences. These devices work in concert with Mist AI to optimize user experiences from client to cloud, including automated event correlation, root cause identification, Self-Driving Network™ operations, network assurance, proactive anomaly detection, and more. Juniper also leverages Mist AI for next-generation customer support. For example, it is the foundational element behind Marvis, the industry’s first AI-driven Virtual Network Assistant, providing extensive insight and guidance to IT staff via a natural language conversational interface. As a result, Mist AI saves operators time and money with faster problem resolution and fewer onsite visits. In addition, users benefit from a network infrastructure that is more predictable, reliable, and measurable. \n \nMarvis Virtual Network Assistant is the first virtual network assistant (VNA) purpose-built with Mist AI for enterprise WLANs, LANs, and WANs. It transforms network operations from reactive troubleshooting to proactive remediation through self-driving actions. \n \nJuniper Wi-Fi Assurance service is based on machine learning and driven by Mist AI. It replaces manual troubleshooting tasks with automated wireless operations to make Wi-Fi predictable, reliable, and measurable, providing unique visibility into user service levels. \n \nJuniper Mist Wired Assurance service brings Mist AI to switching. It sets a new network management standard with AI-driven operations and automation, improving the experiences of devices connected to resources through Juniper EX/QFX Series Ethernet Switches for branch and campus deployments. \n \nJuniper Mist WAN Assurance service simplifies operations and improves visibility into end-user experiences while shortening the time to repair wired and wireless devices. \n \nPremium Analytics offers network visibility and business intelligence to drive your digital transformation journey.", "fedramp_msg": "N/A", "sales_email": "mist-govcloud-sales@juniper.net", "security_email": "mist-security@juniper.net", "website": "https://www.juniper.net/us/en/products/mist-ai.html", "uei": "GYF8MBJ5CH61", "small_business": false, "business_categories": [ "Analytics", "Customer Service", "Education & Training", "Finance", "Health & Wellness", "Law Enforcement", "Media", "Network Management", "Operations Management", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2128462521", "name": "Juvare, LLC", "cloud_service_provider": "Juvare, LLC", "cloud_service_offering": "Juvare Federal Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Juvare%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-11-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-10-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-05-05T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-11-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-10-11T20:00:00.000Z", "cert_date": "2023-05-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-05-05T20:00:00.000Z", "annual_assessment": "2011-10-11T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Customs and Border Protection", "Department of Veterans Affairs", "Federal Emergency Management Agency", "National Guard Bureau", "National Nuclear Security Administration" ], "agency_reuse": [ "" ], "service_description": "The Juvare Federal Cloud powers the Unified Command Platform (UCP), Juvare’s flagship federal solution for daily operations and emergency response. \r\nBuilt on the WebEOC platform which has supported Federal Defense and Federal Civilian agencies and programs for nearly 30 years, UCP has proven performance and provides federal clients with:\r\n-\tA common operating picture (COP) for real-time decision making;\r\n-\tBusiness continuity tools to ensure Continuity of Operations and Continuity of Government (COOP & COOG)\r\n-\tEnd-to-end case management for secure, accountable oversight and investigation of allegations of waste, fraud, and abuse\r\n-\tTracking and accountability of personnel and resources, from deployed troops and staff, to domestic and international facilities and physical assets\r\n-\tFully integrated multi-channel alerting & notifications, providing both automated and just in time communications that ensure teams remain prepared, informed, and effective in response efforts\r\n-\tDefense interoperability with JADC2, command-level systems, and DoW stakeholders\r\nBuilt by experienced professionals, UCP provides:\r\n-\tOff-the-shelf workflows + DesignStudio, a low-code/no-code workflow and form editor, reducing deployment time while enabling the clients to easily adapt to changing processes\r\n-\tMulti-channel alerts and notifications via text/SMS, mobile push, voice, email, platform inbox, Teams/Slack, and other webhook applications\r\n-\tA modern interface supporting single sign-on with PIV/CAC cards, role-based access and views, and integrated geospatial intelligence with Esri ArcGIS mapping\r\n-\tJuvare Exchange, a collaborative tool that allows for secure workflow, file sharing, and collaboration capabilities that can bridge across agencies and departments\r\n-\tJAI, a suite of AI-assisted capabilities that increase user efficiency with search, summarization, and data visualization, as well as performing a growing list of agentic tasks and automations\r\n-\tJuvare Analyze, a robust insights and analytics tool that helps users enhance their Common Operating Picture (COP), conduct multi-dataset visualizations, and perform time-series analyses \r\n-\tInvestigative Case Management System (ICMS) and Law Enforcement Availability Pay (LEAP), two powerful features that aid federal agents, OIGs, and OPRs in end-to-end investigative processes\r\n-\tIntegrated data from third-party platforms via Juvare Connectors, including CADs, threat intelligence systems, live video feeds, and other data sources\r\n-\tStreamlined data integrations from select partners, offering visibility and workflows for drone detection, advanced weather data, wildfire detection and response, all-weather observation using SAR/TAK, power outage management, and fleet/asset management", "fedramp_msg": "N/A", "sales_email": "", "security_email": "sales@juvare.com", "website": "https://www.juvare.com/", "uei": "TAK1K4GKKGE1", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Data Management", "Fleet Management", "Law Enforcement", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2032565438", "name": "Kahua, Inc.", "cloud_service_provider": "Kahua, Inc.", "cloud_service_offering": "Kahua Government Network", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Kahua%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-01-07T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-01-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-03-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-01-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-01-07T20:00:00.000Z", "cert_date": "2022-03-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-03-15T20:00:00.000Z", "annual_assessment": "2011-01-07T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of State", "Department of Veterans Affairs", "Federal Aviation Administration", "Federal Reserve System", "General Services Administration", "National Institute of Standards and Technology", "National Nuclear Security Administration / Kansas City Field Office", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "National Science Foundation" ], "agency_reuse": [ "" ], "service_description": "Government agencies and their community use Kahua`s collaborative construction management solutions to improve efficiency, lower costs and reduce project risk throughout the lifecycle of their capital programs. Kahua’s purpose-built solutions for agencies, program managers and contractors enable rapid implementation that minimizes time-to-value and enhances user adoption. And with the industry’s only low-code application platform agencies can easily customize existing Kahua apps or even build their own new apps to run their programs and projects at peak efficiency today and rapidly adapt as conditions dictate.\r\n\r\nAnd for DOD contractors, Kahua’s FedRAMP authorization means we’re CMMC ready by default—helping you meet compliance requirements while staying focused on delivering mission-critical projects.\r\n\r\nKahua`s collaborative solutions include:\r\n* Capital Planning\r\n* Design Management\r\n* Bid Management\r\n* Cost Management\r\n* Construction Administration\r\n* Asset Handover\r\n* CMMC Readiness", "fedramp_msg": "N/A", "sales_email": "sales@kahua.com", "security_email": "fedramp@kahua.com", "website": "https://www.kahua.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Construction" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2609659556", "name": "Kaseware, Inc", "cloud_service_provider": "Kaseware, Inc", "cloud_service_offering": "Kaseware Investigative Case Management System", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Kaseware%20Logo.png", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-23T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-08-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-12-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Kaseware for U.S. Government is delivered as a Software-as-a-Service (SaaS) offering using a multi-tenant hybrid cloud computing environment. The service is available to U.S. defense and federal civilian agencies, as well as state, local, and tribal government organizations. Kaseware is a cloud-based investigative and case management system designed to support the collection, management, analysis, and secure sharing of investigative, incident, and intelligence-related information. Kaseware provides authorized users with a configurable platform to create, manage, store, search, and analyze structured and unstructured data associated with cases, investigations, incidents, evidence, tasks, and related entities. Kaseware is deployed using a cloud-native, microservices-based architecture hosted within a Federal Risk and Authorization Management Program (FedRAMP) compliant cloud environment. The system supports both multi-tenant and single-tenant deployment models, depending on customer requirements, and includes logical separation of tenant data enforced through access controls and configuration.", "fedramp_msg": "", "sales_email": "philip.mcginty@kaseware.com", "security_email": "joeben.slivka@kaseware.com", "website": "https://www.kaseware.com/", "uei": "DAE5L844FFB3", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Data Management", "Law Enforcement", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2116544598A", "name": "Keeper Security", "cloud_service_provider": "Keeper Security", "cloud_service_offering": "Keeper ICAM & Identity Security Platform for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Keeper%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-11-17T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-11-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-12-18T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-11-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-11-17T20:00:00.000Z", "cert_date": "2025-12-18T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-12-18T20:00:00.000Z", "annual_assessment": "2011-11-17T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Reclamation", "FHFA Office of the Inspector General", "First Responder Network Authority", "Millennium Challenge Corporation", "National Oceanic and Atmospheric Administration" ], "agency_reuse": [ "" ], "service_description": "Keeper ICAM & Identity Security Platform for Government is a cloud-native platform built on zero-trust and zero-knowledge principles that secures access for human and non-person entities across servers, web applications and databases. It unifies password and credential management, secrets management, privileged access management, secure remote access, session monitoring and recording, and remote browser isolation in one platform, delivering the credential, privileged access, secrets, and non-person-entity pillars of ICAM. Authorized at the FedRAMP High baseline, Keeper ICAM & Identity Security Platform for Government continuously verifies every access request regardless of location or device, and simplifies compliance with delegated administration, enforcement policies, event tracking and customizable audit logs.", "fedramp_msg": "", "sales_email": "fedramp@keepersecurity.com", "security_email": "fedramp@keepersecurity.com", "website": "https://www.keepersecurity.com/industries/public-sector.html", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2335051964", "name": "Keyfactor", "cloud_service_provider": "Keyfactor", "cloud_service_offering": "Keyfactor for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Keyfactor%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-03-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-04-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-05-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-03-28T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-04-07T20:00:00.000Z", "cert_date": "2026-05-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-05-13T20:00:00.000Z", "annual_assessment": "2011-02-24T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of State" ], "agency_reuse": [ "" ], "service_description": "Keyfactor for Government is delivered as a SaaS offering using a multi-tenant Government Community cloud computing environment. The Keyfactor for Government cloud service offering provides a Certificate Lifecycle Automation and Management (CLAaaS) solution for US Federal Departments and Agencies to manage digital certificate lifecycle across their enterprise. \n\nKeyfactor for Government enables Certificate Lifecycle Automation and Management through our Keyfactor Command web-based console, which simplifies and organizes certificate inventory, alerting and reporting, issuance, and automation. Our solution provides visibility and management of all public and private certificates in use across the customer’s on-premise and cloud environments and enables workflow automations to prevent outages due to expired certificates. \n\nKeyfactor for Government allows you to: \n - Securely connect to your on-premise Microsoft or EJBCA Certificate Authority and/or to public CAs from Entrust, DigiCert, or Sectigo. \n - Inventory certificates across your enterprise and/or cloud environments. \n - Automate the issuance and deployment of certificates", "fedramp_msg": "N/A", "sales_email": "federal-sales@keyfactor.com", "security_email": "infosec@keyfactorfederal.com", "website": "https://www.keyfactor.com/resources/content/keyfactor-for-federal-government", "uei": "PD9UTGRAF852", "small_business": false, "business_categories": [ "Communication", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Legal & Policy", "Mobile Device Management (MDM)", "Network Management", "Operations Management", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1511167634", "name": "Kiteworks USA, LLC", "cloud_service_provider": "Kiteworks USA, LLC", "cloud_service_offering": "Kiteworks Federal Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Kiteworks%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-12-17T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-03-02T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-06-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 16, "reuse": 17, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-12-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-03-02T20:00:00.000Z", "cert_date": "2017-06-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2017-06-01T20:00:00.000Z", "annual_assessment": "2011-05-24T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1819057982", "csp": "The Coleridge Initiative, Inc.", "cso": "Administrative Data Research Facility (ADRF)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Bureau of Labor Statistics", "Consumer Financial Protection Bureau", "Corporation for National & Community Service", "Council of the Inspectors General on Integrity and Efficiency", "Department of Agriculture", "Department of Energy", "Department of Labor", "Department of the Interior", "FHFA Office of the Inspector General", "First Responder Network Authority", "Food and Drug Administration", "Internal Revenue Service", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "National Science Foundation", "Other Federal Entity", "VA Office of the Inspector General" ], "agency_reuse": [ "22-025", "22-034" ], "service_description": "The Kiteworks Private Data Network is a FedRAMP Authorized service at the Moderate Impact Level that provides data security, governance, and compliance capabilities. The service consists of the following core components and functions:\r\n\r\nSystem Components\r\n\r\n- Virtual private cloud (VPC) environment with dedicated servers for each customer\r\n- Encrypted file storage system\r\n- Data transfer protocols including SFTP, HTTPS, and SMTP\r\n- Authentication and authorization services\r\n- Audit logging and monitoring systems\r\n- Security scanning and threat detection services\r\n\r\nCore Functions\r\n\r\n- File transfer and sharing capabilities via web interface, email, SFTP, MFT, and APIs\r\n- Role- and attribute-based access control and user authentication\r\n- File encryption at rest and in transit using FIPS 140-3 validated cryptographic modules\r\n- Audit logging of all system and user activities\r\n- Integration with customer directory services (LDAP/Active Directory, etc., see below)\r\n- Multi-factor authentication support\r\n- DLP integration\r\n- Embedded antivirus\r\n\r\nPossessionless Editing (SafeEDIT) System Components and Functions\r\n\r\n- File streaming service for secure remote data access and collaboration\r\n- Data rendering system for file type conversion\r\n- Audit logging system for data interactions\r\n- Versioning system for file changes\r\n- Authorization validation service\r\n- File integrity verification system\r\n- Session management service\r\n- Access revocation controls\r\n- Activity monitoring system\r\n\r\nSecurity Features\r\n\r\n- Customer-managed encryption keys\r\n- Single-tenant deployment providing data isolation between customers\r\n- Continuous security monitoring and scanning\r\n- File-level role- and attributed-based access controls\r\n- Remote device management capabilities\r\n- Security event logging and reporting\r\n- Integration with customer SIEM systems\r\n\r\nCompliance Capabilities\r\n\r\n- Audit log generation and retention\r\n- Policy enforcement mechanisms\r\n- Compliance reporting tools\r\n- Data locality controls\r\n- Access tracking and monitoring\r\n- Chain of custody documentation\r\n\r\nIntegration Interfaces\r\n\r\n- REST APIs for system integration and SCIM authentication support\r\n- SMTP interface for email services\r\n- SFTP/FTPS/CIFS/SMB interfaces for file transfer\r\n- LDAP/AD, SAML 2.0, Kerberos, PIV/CAC, time-based one-time password (TOTP) authenticators, SMS, and SFTP certificate connectors for authentication\r\n- SIEM integration for security monitoring\r\n- DLP and CDR system integrations\r\n- The system operates within a defined authorization boundary and undergoes continuous monitoring and regular security assessments in accordance with FedRAMP requirements.\r\n\r\nTo learn more about what Kiteworks can do for government agencies, please visit: https://www.kiteworks.com/solutions/government/", "fedramp_msg": "N/A", "sales_email": "sales@kiteworks.com", "security_email": "frank.balonis@kiteworks.com", "website": "https://www.kiteworks.com/solutions/government/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2435353186", "name": "Kiteworks USA, LLC", "cloud_service_provider": "Kiteworks USA, LLC", "cloud_service_offering": "Kiteworks Secure Gov Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Kiteworks%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-06T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2026-03-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": "2026-03-06T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-03-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Centers for Disease Control and Prevention", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Kiteworks Private Data Network (PDN) secures sensitive information across all communication channels with centralized controls, automated enforcement, and comprehensive visibility—without sacrificing operational efficiency. The service consists of the following core components and functions:\r\n\r\nSystem Components\r\n- Virtual private cloud (VPC) environment with dedicated servers for each customer\r\n- Encrypted file storage system - Data transfer protocols including SFTP, HTTPS, and SMTP\r\n- Authentication and authorization services\r\n- Audit logging and monitoring systems\r\n- Security scanning and threat detection services\r\n\r\nCore Functions\r\n- File transfer and sharing capabilities via web interface, email, SFTP, MFT, and APIs\r\n- Secure Data Forms\r\n- Role- and attribute-based access control and user authentication\r\n- File encryption at rest and in transit using FIPS 140-3 validated cryptographic modules\r\n- Audit logging of all system and user activities\r\n- Integration with customer directory services (LDAP/Active Directory, etc., see below)\r\n- Multi-factor authentication support\r\n- DLP integration\r\n- Embedded antivirus\r\n\r\nPossessionless Editing (SafeEDIT) System Components and Functions\r\n- File streaming service for secure remote data access and collaboration\r\n- Data rendering system for file type conversion\r\n- Audit logging system for data interactions\r\n- Versioning system for file changes\r\n- Authorization validation service\r\n- File integrity verification system\r\n- Session management service\r\n- Access revocation controls\r\n- Activity monitoring system\r\n\r\nSecurity Features\r\n- Customer-managed encryption keys\r\n- Single-tenant deployment providing data isolation between customers\r\n- Continuous security monitoring and scanning\r\n- File-level role- and attributed-based access controls\r\n- Remote device management capabilities\r\n- Security event logging and reporting\r\n- Integration with customer SIEM systems\r\n\r\nCompliance Capabilities\r\n- Audit log generation and retention\r\n- Policy enforcement mechanisms\r\n- Compliance reporting tools\r\n- Data locality controls\r\n- Access tracking and monitoring\r\n- Chain of custody documentation\r\n\r\nIntegration Interfaces\r\n- REST APIs for system integration and SCIM authentication support\r\n- SMTP interface for email services\r\n- SFTP/FTPS/CIFS/SMB interfaces for file transfer\r\n- LDAP/AD, SAML 2.0, Kerberos, PIV/CAC, time-based one-time password (TOTP) authenticators, SMS, and SFTP certificate connectors for authentication\r\n- SIEM integration for security monitoring\r\n- DLP and CDR system integrations\r\n- The system operates within a defined authorization boundary and undergoes continuous monitoring and regular security assessments in accordance with FedRAMP requirements.\r\n\r\nTo learn more about what Kiteworks can do for government agencies, please visit: https://www.kiteworks.com/solutions/government/", "fedramp_msg": "N/A", "sales_email": "sales@kiteworks.com", "security_email": "compliance@kiteworks.com", "website": "https://www.kiteworks.com/solutions/government/", "uei": "", "small_business": false, "business_categories": [ "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2118080669", "name": "Knightscope, Inc.", "cloud_service_provider": "Knightscope, Inc.", "cloud_service_offering": "Knightscope Autonomous Security Robot (Knightscope ASR)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Knightscope%20Logo.png", "status": "FedRAMP Certified (In Remediation)", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-05-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-01-11T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-01-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" }, { "date": "2026-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Authorized to FedRAMP Certified (In Remediation). Under remediation for not following \"Addressing FedRAMP Communication\" rule. See Notice 0016" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-05-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-01-11T20:00:00.000Z", "cert_date": "2025-01-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-01-17T20:00:00.000Z", "annual_assessment": "2011-12-22T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "The Knightscope Autonomous Security Robot (ASR) is a fully autonomous security robot equipped with four (4) cameras, microphones, and speakers, for 360-degree video and audio. The ASRs navigate the area(s) of operation autonomously and stream live video back to the user via a web browser. The ASRs run 24/7 on its own including autonomously recharging itself without any human intervention have the following capabilities:\n- People Detection – The ASR can detect people by time and location.\n- License Plate Recognition – The ASR can identify and detect license\nplates.\n- Thermal Imaging – Equipped with a FLIR thermal camera, the ASR can\nmonitor for heat anomalies above a pre-determined temperature.\n- Audio – The ASR can be used to broadcast pre-recorded or custom audio\nmessages and initiate a live intercom call.\n\nThe core platform of Knightscope ASR is the Knightscope Security Operations Center (KSOC), a fully functional, browser-based user interface included with every subscription which allows customers to access ASR fleet information around the clock. Customers can use the KSOC interface to:\n- View current ASR locations\n- Access live (or recorded) video and audio from an ASR\n- Select pre-determined patrol routes (for mobile ASRs)\n- Broadcast pre-recorded or custom audio messages through an ASR,\nusing an intercom chat function or a phone call over a live channel, or sound an alarm\n- View alerts\n\nAlerts can be configured to trigger based on pre-defined criteria, such as detection of any person or identification of a specific license plate. In the event of an alert, KSOC can send email messages, text messages, or voice messages to\nnotify designated people about the event. The notifications contain limited information informing the user that an event has been detected by the ASR. Any forensic data related to the event, including a snapshot, date and time, and\nlocation must be viewed within KSOC.", "fedramp_msg": "N/A", "sales_email": "JMG@knightscope.com", "security_email": "MSL@Knightscope.com", "website": "http://www.knightscope.com/", "uei": "JAJTVBGY2K53", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "ASR", "KSOC" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2201340492", "name": "KnowBe4, Inc.", "cloud_service_provider": "KnowBe4, Inc.", "cloud_service_offering": "KnowBe4 Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/KB4%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-08-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-02-03T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-11-14T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 24, "reuse": 29, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-08-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-02-03T20:00:00.000Z", "cert_date": "2023-11-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-11-14T20:00:00.000Z", "annual_assessment": "2011-02-02T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2427142353", "csp": "AutoRABIT Holding, Inc.", "cso": "AutoRABIT for Public Sector - CodeScan, Guard, & ARMOR", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430123303", "csp": "Aztec Software", "cso": "Aztec Learning System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1902240018", "csp": "MDRC", "cso": "SPROUT", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2433985791", "csp": "Vyond", "cso": "Vyond for Government", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" } ], "agency_authorizations": [ "Bureau of Engraving and Printing", "Consumer Product Safety Commission", "Department of Energy", "Department of Homeland Security", "Department of Labor", "Drug Enforcement Administration", "FHFA Office of the Inspector General", "Federal Deposit Insurance Corporation", "Federal Housing Finance Agency", "Federal Trade Commission", "Justice Management Division", "National Endowment for the Arts", "National Labor Relations Board", "National Mediation Board", "National Nuclear Security Administration / Nevada Field Office", "Pantex Field Office", "Small Business Administration", "State Office of the Inspector General", "Strategic Petroleum Reserve", "Tennessee Valley Authority", "U.S. Election Assistance Commission", "United States Agency for International Development" ], "agency_reuse": [ "22-005", "22-005-09", "22-021-07", "22-027", "22-036" ], "service_description": "The KnowBe4 Platform includes the following in-scope: KSAT Learning Management System and all included training content (ModStore, Compliance Plus), KSAT Simulated Phishing Platform, PhishER / PhishER Plus, Phish Alert Button, SecurityCoach (SCH) and AI Defense Agents (AIDA) (excluding AIDA Deepfakes).\r\n\r\nKnowBe4 products currently excluded from scope: Free Tools (SecondChance, RanSim, Password Exposure Test, Weak Password Test, Breached Password Test, Browser Password Inspector), AIDA Deepfakes, KCES (KnowBe4 Cloud Email Security of Defend / Prevent), Protect, Workspace and Webform.\r\n\r\nKSAT (KnowBe4 Security Awareness Training), which includes security awareness training and simulated phishing, is designed to provide users with an interactive platform to better manage IT security problems of social engineering, spear-phishing, and ransomware attacks. The ModStore and Compliance Plus are libraries of available training modules that can be used within the KSAT platform or in external learning management systems.\r\n\r\nPhishER (and its add-on PhishER Plus) is a Security Orchestration, Automation, and Response (SOAR) platform that can be used to manage emails that KSAT users report as suspicious or malicious. The purpose of this platform is to provide an organization with a way to evaluate suspicious emails making it through to the inbox of users.\r\n\r\nSecurityCoach (SCH) helps strengthen your organization’s security culture by delivering immediate feedback to your users at the moment risky behavior occurs.\r\n\r\nAI Defense Agents (AIDA) is a suite of AI Agents for human risk management that continuously automates administration and content personalization so security teams can focus on strategic risk decisions rather than operational tasks. Each included AIDA Agent is optional to enable.\r\n\r\nThe Phish Alert Button (PAB) is an optional component placed in the inbox of a customer end user. This allows end users to report a suspected phishing simulation and any suspicious email message to their security team. The PAB integrates with KSAT and PhishER / PhishER Plus.\r\n\r\nKnowBe4 products share a central configuration and authentication settings area located within the KnowBe4 Platform. This is included in scope and is used throughout the KnowBe4 suite of products.", "fedramp_msg": "N/A", "sales_email": "federal@knowbe4.com", "security_email": "infosec@knowbe4.com", "website": "https://www.knowbe4.com/federal", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management", "Education & Training" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2113552479", "name": "Knowledge Services", "cloud_service_provider": "Knowledge Services", "cloud_service_offering": "dotStaff", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/KS%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-11-19T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2024-11-19T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Knowledge Services dotStaff is a Software as a Service (SaaS) offering that includes a Vendor Management System and a Survey Management module. The dotStaff Vendor Management System allows for organizations to manage the contractor life cycle, statement of work bidding, tracking, and selection where contingent or temporary labor is used. Government customers enter position requisitions or projects that are viewable by Contractors, who can submit responsive bids. Activity associated with the winning bid is entered, tracked, and reported. The Survey Management module provides survey automation capabilities, and can be configured to survey certain locations, property types and/or resident classifications. Customers can send survey links, schedule face to face interviews, request information through the Survey Management module.\n\nSurvey Management\nThe dotStaff Survey module delivers real-time, automated surveys which enhance access to actionable data. The module automates and improves the performance of in-person, mobile, web-based, and telephone surveys, including scheduling and data reporting. \n\nVendor/Consortium Management\nThe dotStaff Vendor Management System allows for organizations to manage the contractor life cycle, statement of work bidding, tracking, and selection where contingent or temporary labor is used.\n\nField Based/Mobile Worker Management\nAll services allow field-based and mobile workforce support through the dotStaff mobile application.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@knowledgeservices.com", "website": "https://www.knowledgeservices.com/", "uei": "", "small_business": false, "business_categories": [ "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2528033654", "name": "Knox Systems", "cloud_service_provider": "Knox Systems", "cloud_service_offering": "Knox Systems FedRAMP High Managed Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Knox%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-08-15T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2026-03-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2026-03-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2025-08-15T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-03-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-03-30T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-03-30T20:00:00.000Z", "annual_assessment": "2011-03-09T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Emergency Management Agency" ], "agency_reuse": [ "" ], "service_description": "Knox Systems provides a multi-tenant cloud platform for delivering commercial software to federal government customers. Customer applications deploy on Knox's managed infrastructure across AWS, Azure, and Google Cloud Platform using Kubernetes containers, serverless functions, or virtual machines. Knox provides 24/7 Security Operations Center and Network Operations Center management, continuous security monitoring, vulnerability scanning, patch management, and incident response for all customer workloads. This includes:\r\n\r\nAdobe Connect is designed for immersive synchronous online meeting experiences for training, large-scale webinars, and virtual classroom meetings for a distributed workforce.\r\n\r\nBackupta is a Resilience Platform for Okta that ensures uninterrupted identity and access management. It delivers secure backup, disaster recovery, and rapid restoration of tenants or objects. Tenant cloning and failover strengthen business continuity, while proactive monitoring and audit logs enhance security.\r\n\r\nPeregrine enables public safety and government agencies to integrate, model, and access data from agency and authorized partner systems within a unified platform, allowing information about people, places, and events to be understood in context across systems. Peregrine supports workflows such as search, analysis, reporting, alerting, relationship mapping, and operational monitoring by providing a secure, continuously updated, permission-aware view of agency data for authorized users.\r\n\r\nSift is a SaaS platform for time-series telemetry ingestion, storage, visualization, and rule-based monitoring of mission-critical hardware systems. It serves mission operators, test engineers, and data analysts across federal agencies and their defense and aerospace contractors, providing interactive dashboards and programmatic query access to machine telemetry and associated operational metadata.\r\n\r\nAltana Product Network (APN) is a SaaS offering in AWS GovCloud that uses artificial intelligence to create a single source of truth for the global supply chain. It integrates customer and external datasets to map suppliers, shipments, compliance, and risk, and is used by customer administrators and end users through a web portal with SAML 2.0 federation. The boundary is supported by EKS-based microservices, Databricks data pipelines, and core AWS services such as RDS, S3, OpenSearch, and ElastiCache.\r\n\r\nSierra is a multi-tenant SaaS Cloud Service Offering (CSO) that enables Federal agencies to build, deploy, and operate conversational AI agents that interact with the agency's constituents and employees across chat, voice, email, and other channels primarily to handle customer support, case intake, benefits inquiries, and similar service workflows autonomously so agencies can resolve high-volume citizen interactions at scale economically.\r\n\r\nThe Acsense IAM Resilience Platform is a cloud-based SaaS solution that serves as an Identity Control Plane, providing unified backup & recovery, disaster recovery on a separate remote tenant, configuration management, and compliance assurance capabilities for enterprise identity and access management (IAM) environments. The platform is IDP-agnostic by design, primarily supporting both Okta (Workforce and CIAM) and Microsoft Entra ID deployments.The system enables authorized administrators to back up enterprise identity infrastructure (including human and non-human identities/machine identities), track and compare configuration changes with full role attribution, map dependencies, detect configuration drift in approximately 10 minutes, and leverage Continuous Resilience Validation to ensure a tested ~10-minute Recovery Time Objective (RTO) during operational incidents, ransomware attacks, or outages. The authorization boundary includes the Acsense SaaS application, supporting management services, application APIs, data processing services, and storage components operated in cloud infrastructure environments. The platform is used by enterprise and government administrators, security teams, and IT operations personnel to process identity-related business data and limited personally identifiable information (PII) associated with IAM objects and user accounts. The service is delivered as a multi-tenant SaaS platform with customer-isolated data storage (or as a single, separated tenant) and relies on external identity provider APIs and cloud infrastructure services to perform authorized backup, synchronization, monitoring, and recovery operations.\r\n\r\nSwimlane's Turbine is a multi-tenant SaaS agentic AI security automation platform which uses low-code technology to unify disparate cybersecurity tools into a centralized system of action. By utilizing agentic AI (Hero AI) alongside a visual, drag-and-drop playbook builder, the platform automates complex Security Operations Center (SOC) workflows, vulnerability management, and incident triage without requiring extensive custom coding. This comprehensive AI SOC orchestration eliminates alert fatigue for security teams, tracks compliance, and provides real-time ROI reporting to accelerate threat responses and protect large organizations globally.\r\n\r\nDeterminate is an SDLC collaboration and deployment automation platform. It specifically caters to the Nix ecosystem for reproducible and declarative software projects. Determinate processes and delivers software source code (FlakeHub, a source artifact repository) and compiled artifacts (FlakeHub Cache, a binary artifact repository) to end users as multi-tenant SaaS. Users publish their software via the customer's coding forge, like GitHub or GitLab.\r\n\r\nThe Vannevar platform supports government agencies and other authorized government users by running guided, agent-assisted workflows across disparate datasets and proprietary data to reduce the time required to turn raw information into investigative outputs. Within the platform, users can ingest and analyze digital artifacts and other government-provided data, correlate and search across those sources, and leverage agents to generate consistent work products. These workflows enable digital forensic sensemaking, investigative development and enrichment, and the production of shareable products for downstream action.\r\n\r\nTractian is an asset health monitoring platform that gives government agencies the intelligence to keep critical physical assets running in support of mission readiness, with security and compliance built for U.S. federal requirements. Wireless sensors and AI analytics support the whole asset health lifecycle, detecting developing failures, tracking how they progress, and guiding teams through to resolution before an issue becomes downtime or a safety event. The platform is deployed within Knox’s FedRAMP High Authorized environment on AWS GovCloud, and it helps agencies and contractors get more output and reliability from the equipment they already have, without adding headcount, capital expense, or new risk.\r\n\r\nMissionML Studio is a platform used to build, prototype, and productionize AI-enabled government workflow applications and securely host and monitor them. It is deployed as a secure, fully managed, single-tenant cloud platform where government program managers build and prototype custom AI workflow applications tailored to their mission needs and process operational, analytical, and mission data, while ensuring isolation for each customer environment.\r\n\r\nVectra AI delivers AI-native security and observability that helps federal security teams build and demonstrate resilience against modern cyber threats. The platform provides unified observability across on-premises networks, identity, cloud, SaaS, IoT/OT, edge, and AI infrastructure to identify active threats, prioritize investigation and response, and help agencies proactively reduce cyber risk and strengthen security posture. Federal security analysts, incident responders, administrators, and security leaders use the platform to monitor activity, investigate suspicious behavior, hunt for threats, contain compromised identities or devices, and assess gaps in security coverage. The platform provides contextual investigation, natural-language assistance, attack-path visualization, operational reporting, and evidence that supports continuous monitoring, compliance, and SOC optimization. More than 2,000 organizations use Vectra AI, which was named a Leader in the 2025 and 2026 Gartner® Magic Quadrant™ for Network Detection and Response.", "fedramp_msg": "N/A", "sales_email": "sales@knoxsystems.com", "security_email": "FedRAMP-Security@knoxsystems.com", "website": "https://www.knoxsystems.com/", "uei": "NMSFSAMF88Z3", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Education & Training", "Operations Management", "System Administration" ], "service_last_90": [ "Acsense IAM Resilience Platform", "Determinate", "MissionML Studio", "Sierra", "Sift", "Swimlane Turbine", "Tractian", "Vannevar", "Vectra AI" ], "all_others": [ "Peregrine" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2526240411", "name": "Koniag Government Services", "cloud_service_provider": "Koniag Government Services", "cloud_service_offering": "Koniag Government Services Electronic Health Record System (KGS EHRS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/KGS%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-03-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-06-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-06-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-03-05T20:00:00.000Z", "cert_date": "2026-06-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Drug Enforcement Administration", "fedramp_auth": "2026-06-17T20:00:00.000Z", "annual_assessment": "2011-03-04T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Drug Enforcement Administration" ], "agency_reuse": [ "" ], "service_description": "The Koniag Government Services Electronic Health Record System (KGS EHRS) is a Software as a Service (SaaS) solution that provides an electronic health record system for occupational health and medical records. This system centralizes and digitizes patient medical records, enabling healthcare professionals and agency stakeholders to efficiently access, retrieve, and share patient data.", "fedramp_msg": "N/A", "sales_email": "kgsehrs-sales@koniag-gs.com", "security_email": "kgsehrs-security@koniag-gs.com", "website": "https://www.koniag-gs.com/health/", "uei": "", "small_business": true, "business_categories": [ "Collaboration", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Health & Wellness", "Law Enforcement", "Legal & Policy", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2607537684", "name": "Kovr.ai", "cloud_service_provider": "Kovr.ai", "cloud_service_offering": "Kovr Nova", "logo": "", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-05-14T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-05-14T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Kovr AI is a patented AI-native cyber compliance automation platform purpose-built for organizations navigating the most demanding federal and commercial cybersecurity frameworks including FedRAMP, Cybersecurity Maturity Model Certification (CMMC 2.0), NIST SP 800-53, NIST SP 800-171, DoD Security Requirements Guide (SRG), FISMA, DoD Risk Management Framework (RMF), PCI-DSS, ISO 27001, and more. Designed to replace the manual, document-heavy workflows that have historically made federal authorization a multi-year, multi-million-dollar undertaking, Kovr compresses the path from readiness to Authorization to Operate (ATO) by automating the most labor-intensive phases of the compliance lifecycle.\n \nKovr's AI-powered engine empowers users with evidence processing, control analysis, and artifact generation including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and Security Requirements Traceability Matrices (SRTMs) directly from system documentation inputs reducing artifact preparation time from weeks to days. The platform natively supports NIST SP 800-53 Rev 5 and 800-171 control baselines, OSCAL-format exports, and continuous controls monitoring (CCM), enabling organizations to maintain their authorization posture between assessment cycles and satisfy evolving continuous monitoring requirements across FedRAMP Rev 5, CMMC, and DoD SRG frameworks.\n \nArtemis, Kovr's secure AI enclave, allows ISSOs, compliance officers, and security teams to generate control implementation narratives, draft assessment responses, and accelerate evidence collection without exposing sensitive system data to external AI services. Pre-built connectors and automated evidence ingestion eliminate manual artifact management, while integrated POA&M lifecycle tracking provides real-time visibility into remediation status.", "fedramp_msg": "", "sales_email": "compliance@fortreum.com", "security_email": "security@kovr.ai", "website": "https://kovr.ai/", "uei": "FFSRKN1D56E3", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2406453618", "name": "LabArchives", "cloud_service_provider": "LabArchives", "cloud_service_offering": "LabArchives for Government (LG)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/LabArchives%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-03-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-11-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-03-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-11-06T20:00:00.000Z", "cert_date": "2025-04-22T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-22T20:00:00.000Z", "annual_assessment": "2011-11-05T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "National Cancer Institute" ], "agency_reuse": [ "" ], "service_description": "LabArchives for Government (LG) is a cloud-based SaaS web application that consists of three independent applications: Electronic Lab Notebook (ELN), Inventory, and Scheduler. LG ELN is a cloud-based electronic lab notebook designed for research that enables researchers to capture, manage, store, and share information and data. LG Scheduler is a scheduling solution for labs and research organizations. LG Inventory organizes, tracks, and helps with ordering lab inventory.", "fedramp_msg": "", "sales_email": "klocke@labarchives.com", "security_email": "security@dotmatics-gov.com", "website": "https://www.labarchives.com/", "uei": "QJT4CCNQK6M9", "small_business": false, "business_categories": [ "Collaboration", "Content Management System (CMS)", "Data Management", "Fleet Management", "Grant Management", "Research", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2422436886", "name": "Laerdal Labs D.C.", "cloud_service_provider": "Laerdal Labs D.C.", "cloud_service_offering": "Laerdal -- SimCapture Cloud Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SimCapture%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-03-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-04-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-06-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-03-28T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-04-02T20:00:00.000Z", "cert_date": "2025-06-27T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-06-27T20:00:00.000Z", "annual_assessment": "2011-03-28T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "SimCapture Cloud Government is delivered as a SaaS offering using a multi-tenant Government Only cloud computing environment. It is available to hospitals and healthcare education programs for the purpose of recording, debriefing, and tracking of healthcare simulation experiences.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "lldc_fedramp@laerdal.com", "website": "https://laerdal.com/products/simulation-training/operate-assess-debrief/simcapture/", "uei": "", "small_business": false, "business_categories": [ "Education & Training" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2235154356", "name": "Lastwall Corp", "cloud_service_provider": "Lastwall Corp", "cloud_service_offering": "IDCommand", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Lastwall%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-01-21T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-02-18T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-01-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-02-18T20:00:00.000Z", "cert_date": "2025-04-25T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Innovation Unit", "fedramp_auth": "2025-04-25T20:00:00.000Z", "annual_assessment": "2011-02-18T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Innovation Unit" ], "agency_reuse": [ "" ], "service_description": "IDCommand™ by Lastwall is a mission-ready Identity Platform purpose-built for the unique demands of U.S. government and defense environments.\r\nAt its core, IDCommand delivers secure, seamless access enabling a Zero Trust architecture - allowing agencies to modernize their authentication without compromising on compliance, control, or security posture.\r\n\r\nIDCommand supports the identity standards federal agencies trust - including SAML 2.0, OIDC, PIV/CAC, and FIDO2/WebAuthn - for strong, passwordless login experiences that eliminate credential vulnerabilities and streamline secure access. Whether you're operating in government, national security, or critical infrastructure, IDCommand makes it easy to implement Public Key Infrastructure (PKI) by design - so secure identity can be deployed quickly and confidently at scale.\r\n\r\nOur adaptive access engine continuously assesses risk in real time - factoring in device posture, patch levels, geographic context, and other environmental signals to deliver intelligent, policy-driven access decisions. These capabilities support alignment with key federal frameworks such as NIST SP 800-53 Rev.5 (Security and Privacy Controls for Information Systems and Organizations), NIST SP 800-63 (Digital Identity) and NIST SP 800-207 (Zero Trust architecture).\r\n\r\nEngineered for high-security domains, IDCommand integrates seamlessly into existing architectures - empowering federal teams to deploy modern identity controls that prioritize mission continuity, not complexity.", "fedramp_msg": "N/A", "sales_email": "sales@lastwall.com", "security_email": "security@lastwall.com", "website": "https://www.lastwall.com/", "uei": "DGLNFE65EYH3", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2120962552", "name": "LaunchDarkly", "cloud_service_provider": "LaunchDarkly", "cloud_service_offering": "LaunchDarkly", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/LaunchDarkly%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-07-15T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-06-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-01-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 39, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-07-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-06-27T20:00:00.000Z", "cert_date": "2023-01-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Centers for Medicare & Medicaid Services", "fedramp_auth": "2023-01-06T20:00:00.000Z", "annual_assessment": "2011-07-08T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2106555313", "csp": "AchieveIt Online, LLC", "cso": "AchieveIt", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2504148525", "csp": "Booz Allen Hamilton", "cso": "Footprint", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2519759620", "csp": "Cribl Inc.", "cso": "Cribl.Cloud Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2201340492", "csp": "KnowBe4, Inc.", "cso": "KnowBe4 Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2310974411", "csp": "PagerDuty", "cso": "PagerDuty Operations Cloud", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2516365096", "csp": "Procore Technologies, Inc", "cso": "Procore for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226231529", "csp": "Trend Micro Inc.", "cso": "Trend Vision One for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2308034636A", "csp": "Wiz, Inc.", "cso": "Wiz for U.S. Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" } ], "agency_authorizations": [ "Centers for Medicare & Medicaid Services" ], "agency_reuse": [ "22-002", "22-002-08", "22-003", "22-007", "22-007-07", "22-007-22", "22-007-27", "22-013", "22-014-05", "22-016-08", "22-021-01", "22-021-06", "22-022-01", "22-027-01", "22-027-06", "22-031", "22-031-01", "22-032", "22-034", "22-034-02", "22-036", "22-040", "22-042", "22-042-02", "22-044", "22-051", "22-058", "22-061", "22-062", "22-068", "22-069", "22-074" ], "service_description": "LaunchDarkly is the feature management platform that teams use to safely deliver and control software through feature flags. By separating code deployments from feature releases, feature management enables organizations to deploy faster, reduce risk, and iterate continuously. Government agencies use feature management to control new feature rollouts, quickly resolve incidents, and increase productivity of development teams while using fewer resources. They are improving their DevSecOps processes, facilitating Continuous Integration/Continuous Delivery (CI/CD), and shipping more code safer than ever. LaunchDarkly enables: \n\n- Resolution of incidents in less than 200 milliseconds, without costly rollbacks that threaten other features.\n- Powerful targeting capabilities that provide complete control over which users or microservices can see new features.\n- Safe testing in production—empowering teams with real-world QA testing in place of costly pre-production environments.\n- CI/CD development processes that improve developer productivity and new feature release times.\n- Hypothesis driven development, including experimentation and percentage rollouts. \n\nLaunchDarkly provides developers and business stakeholders with a central location to manage the rollout of new features. At the same time, it can enforce change management policies through scheduling, approval workflows, and custom role-based access control down to the feature level. Agencies can implement their own policies around the use of personally identifiable information (PII) and can take full advantage of targeting without needing to store user PII within the LaunchDarkly Federal SaaS environment. Additional hosting options and an offline mode are available for organizations with more restrictive policies.", "fedramp_msg": "N/A", "sales_email": "usgovernment@launchdarkly.com", "security_email": "fedramp@launchdarkly.com", "website": "https://launchdarkly.com/solutions/federal-government-solutions/", "uei": "HZSZKVJU9TH3", "small_business": false, "business_categories": [ "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2420341612", "name": "LCptracker Inc", "cloud_service_provider": "LCptracker Inc", "cloud_service_offering": "LCPtracker Pro", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/LCP%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-10-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-03-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-05-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-10-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-03-17T20:00:00.000Z", "cert_date": "2026-05-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-05-01T20:00:00.000Z", "annual_assessment": "2011-04-09T04:00:00.000Z", "independent_assessor": "Linford & Company", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "LCPtracker Pro is delivered as a SaaS offering using a multi-tenant Public Cloud cloud computing environment. It is available to public commercial enterprises, federal, state, local, and tribal governments, as well as research institutions, federal contractors, and government contractors. LCPtracker Pro is a cloud-based prevailing wage and workforce compliance management solution. The application is ideal for public agencies and prime contractors that are responsible for keeping all contractors on their project, even down to the lower-tier subcontractors, compliant. Additionally, clients can track detailed worker information and leverage dynamic reporting to monitor workforce initiatives.", "fedramp_msg": "", "sales_email": "sales@lcptracker.com", "security_email": "security@lcptracker.com", "website": "https://lcptracker.com/", "uei": "", "small_business": true, "business_categories": [ "Construction" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1830842316", "name": "Leidos Digital Solutions, Inc.", "cloud_service_provider": "Leidos Digital Solutions, Inc.", "cloud_service_offering": "IQ FedCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Leidos%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-09-10T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-04-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-07-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-09-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-04-29T20:00:00.000Z", "cert_date": "2019-07-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-07-10T20:00:00.000Z", "annual_assessment": "2011-04-29T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Brookhaven Site Office", "Other Executive Branch Subagency", "Other Federal Entity", "Small Business Administration", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "IQ FedCloud is delivered as a SaaS offering using a multi-tenant Government-Only Cloud computing environment. It is available to federal, state, local, and tribal governments.\r\n\r\nIntranet Quorum (IQ) and the FedRAMP authorized implementation, IQ FedCloud, is a SaaS application offering Customer Relationship Management (CRM), correspondence management, Casework, business process management (BPM) and workflow. IQ is commonly used to support both constituent and agency needs ranging from simple task management to complex Freedom of Information (FOIA) requests. IQ’s core modules include Contacts, Messages, Outreach, Services, Library, and Events which combine to help agencies and elected officials to keep a complete history of their communications and manage their suspense tracking needs. IQ streamlines document management processes including approval for electronic signature and resolution. Robust reporting capabilities enhance data analytics for executive awareness and review. IQ lets users securely exchange record data with other agencies with the unique IQ2IQ capability. IQ addresses a wide range of executive management needs including grants, investigations, Boards and Commissions, communications, and records management and retention. A no code solution, IQ is fully configurable without custom development.", "fedramp_msg": "N/A", "sales_email": "R_DSI-Fedramp@leidos.com", "security_email": "IQFedramp_IR@Leidos.com", "website": "https://leidosiq.com/federal-government/", "uei": "R8DWHMDFAFF1", "small_business": false, "business_categories": [ "Communication", "Customer Relations Management (CRM)", "Customer Service" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2020767053", "name": "Level Access", "cloud_service_provider": "Level Access", "cloud_service_offering": "Accessibility Management Platform (AMP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/LA%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-04-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-09-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-09-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-04-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-09-24T20:00:00.000Z", "cert_date": "2021-09-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-09-29T20:00:00.000Z", "annual_assessment": "2011-09-24T04:00:00.000Z", "independent_assessor": "SecureIT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Labor", "Department of State", "Department of the Interior", "General Services Administration", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "AMP is an accessibility management platform that provides organizations everything they need to effectively manage Section 508 compliance and address digital accessibility across the organization and development lifecycle. With AMP, organizations have everything they need to efficiently build, test, and maintain accessible software and user experiences. This includes the most advanced accessibility test engine available via a smooth workflow, intelligent reporting, convenient and contextual best practices, as well as an extensive training course library.", "fedramp_msg": "N/A", "sales_email": "fedramp@levelaccess.com", "security_email": "infosec@levelaccess.com", "website": "https://www.levelaccess.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Design & Multimedia", "Development Tools", "Education & Training", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1920363607", "name": "LevelBlue", "cloud_service_provider": "LevelBlue", "cloud_service_offering": "LevelBlue Threat Detection and Response for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/LevelBlue%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-09-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-09-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-05-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 38, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-09-28T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-09-28T20:00:00.000Z", "cert_date": "2021-05-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-05-12T20:00:00.000Z", "annual_assessment": "2011-09-28T04:00:00.000Z", "independent_assessor": "Tevora Business Solutions, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2414718666", "csp": "Digital Science UK Limited", "cso": "Overleaf", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2000951694", "csp": "DLH Corporation", "cso": "DLH Infinibyte Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1724526654", "csp": "Intelliworx", "cso": "Intelliworx Cloud Workflow Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2210666939", "csp": "Melissa", "cso": "Melissa GovCloud Address Suite", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" } ], "agency_authorizations": [ "National Transportation Safety Board" ], "agency_reuse": [ "22-002-04", "22-003", "22-005-04", "22-005-11", "22-006", "22-007", "22-007-04", "22-007-17", "22-011-01", "22-012", "22-013", "22-014", "22-017", "22-018", "22-021-04", "22-021-07", "22-022", "22-024", "22-027-09", "22-028", "22-031", "22-032", "22-034", "22-036", "22-037", "22-039", "22-044", "22-049", "22-051", "22-056", "22-058", "22-067", "22-070", "22-078", "22-084", "22-087", "22-088" ], "service_description": "LevelBlue’s Threat Detection and Response for Government (TDR for Gov) is delivered as a SaaS offering using a multi-tenant public cloud computing environment. It is available to federal, state, local, and tribal governments, as well as research institutions, federal and government contractors. TDR for Gov detects, analyzes and may respond to threats and vulnerabilities. It is built on LevelBlue’s Unified Security Management (USM) platform. The service is available as a self-managed service or with 24x7 monitoring by LevelBlue's Security Operations Center, an enhancement of TDR for Gov, (Managed Threat Detection and Response for Government). TDR for Gov uses purpose-built cloud sensors to monitor a customer’s Amazon Web Services, Microsoft Azure Cloud environments, VMware, and Hyper-V virtual sensors to monitor a customer’s virtual and physical on-premises infrastructure. Security-related data is collected and sent to the LevelBlue AlienVault Cloud for security analysis, threat correlation, and secure, compliance-ready data storage. Centralized security monitoring in USM Anywhere gives the customer threat detection capabilities across their cloud and on-premises landscape, helping to eliminate security blind spots.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "info@LevelBlue.com", "website": "https://levelblue.com/xdr/tdr-for-government", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2510634052", "name": "LexisNexis Legal and Professional", "cloud_service_provider": "LexisNexis Legal and Professional", "cloud_service_offering": "Lexis+® for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/LN%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-02-06T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-12-10T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2026-05-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to FedRAMP In Process" }, { "date": "2026-07-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2025-02-06T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-12-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-05-29T20:00:00.000Z", "cert_date": "2026-07-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-07-06T20:00:00.000Z", "annual_assessment": "2011-05-28T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Lexis+® for Government is a legal research solution built specifically for attorneys and legal professionals at government agencies. The platform delivers a comprehensive research experience, including primary law, secondary sources, Shepard’s® citation validation, and document upload and review capabilities. Attorneys can save, annotate, share and collaborate on research documents and searches with colleagues and stakeholders, while maintaining the highest levels of security and compliance required for sensitive legal matters. Lexis+ for Government allows federal government attorneys to work more productively and effectively, freeing up more time for high-value work.", "fedramp_msg": "N/A", "sales_email": "fedramp@lexisnexis.com", "security_email": "conmon@lexisnexis.com", "website": "https://www.lexisnexis.com/lexisplusgov", "uei": "LKAAJG8KK4U1", "small_business": false, "business_categories": [ "Law Enforcement", "Legal & Policy", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2611036548", "name": "LexisNexis Risk Solutions", "cloud_service_provider": "LexisNexis Risk Solutions", "cloud_service_offering": "LexisNexis Risk Enterprise Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/LexisNexis%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-01-20T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-01-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The LexisNexis Risk Enterprise (LNEP) Platform is utilized to deliver a suite of solutions provided by LexisNexis Risk Solutions to support agencies with identity validation, investigative research, and delivery of XML services. LNEP provides agencies with mission critical products and solutions, utilizing public records and proprietary identity technology to deliver advanced analytics to help agencies improve decisions and reduce risk. Through established secure cloud infrastructure, identity assurance, fraud mitigation, and risk intelligence capabilities, LNEP supports agencies’ evolving needs while maintaining alignment with federal cybersecurity mandates and compliance expectations.", "fedramp_msg": "", "sales_email": "FedRAMPInfo@lexisnexisrisk.com", "security_email": "FedRAMPSecurity@lexisnexis.com", "website": "https://risk.lexisnexis.com/government", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2433446013", "name": "Lifebit Biotech", "cloud_service_provider": "Lifebit Biotech", "cloud_service_offering": "Lifebit Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Lifebit%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-02-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-02-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Lifebit Cloud Service Offering (CSO) is a cloud-hosted software-as-a-service platform that enables authorized users to ingest, store, manage, and analyze biomedical and genomic datasets. The CSO provides web-based and API-based access to workflow orchestration, job execution, and results visualization capabilities. The CSO supports execution of containerized and workflow-based analytical pipelines on cloud infrastructure resources within the authorization boundary.\n\nThe CSO includes components for user authentication and role-based access control, audit logging, secure data transfer, encryption of data at rest and in transit, workflow execution management, and administrative monitoring. The CSO is deployed within a logically isolated cloud environment and integrates with supporting services for logging, monitoring, vulnerability management, and configuration management as defined within the system authorization boundary.", "fedramp_msg": "", "sales_email": "sales@lifebit.ai", "security_email": "security@lifebit.ai", "website": "https://lifebit.ai/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Data Management", "Research", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2524251176", "name": "LMI Solutions", "cloud_service_provider": "LMI Solutions", "cloud_service_offering": "Atlas by LMI", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/LMI%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-07-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Authorized to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-06-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-07-06T20:00:00.000Z", "cert_date": "2026-07-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-07-31T20:00:00.000Z", "annual_assessment": "2011-06-09T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Atlas is a web-based SaaS application designed to streamline the collection and management of logistical and cost data associated with the Office of Research and Development’s (ORD) scientific merit review process. It facilitates comprehensive oversight of meeting panel management, regulatory compliance tracking, travel details, meeting locations, payments, expense reimbursements, and total review cycle costs, ensuring efficient and transparent operations.", "fedramp_msg": "N/A", "sales_email": "brandon.pedraza@lmisolutions.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://lmisolutions.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Data Management", "Finance", "Research", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2428168490", "name": "LogicMonitor", "cloud_service_provider": "LogicMonitor", "cloud_service_offering": "LM for Gov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/LogicMonitor%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-03-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-06-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-07-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-03-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-06-13T20:00:00.000Z", "cert_date": "2025-07-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-07-24T20:00:00.000Z", "annual_assessment": "2011-06-12T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "Hybrid Observability powered by AI:\nLogicMonitor provides customers with a fully software-as-a-service (SaaS)-based solution for performance monitoring of servers, cloud (AWS, GCP, Azure), virtual machines (VMs), storage, network, applications, websites and more. Customers deploy one or several LogicMonitor virtual appliances known as collectors within their environment, and all collected data is transmitted to and stored within the LogicMonitor for Government cloud environment. LogicMonitor has over 3,000 integrations for the aforementioned technologies. The collectors integrate with a wide variety of operating systems and device types to collect performance data for use in dashboarding, forecasting, alerting, and reporting. Customers manage their collectors and view data through a cloud-based web portal or mobile application.", "fedramp_msg": "N/A", "sales_email": "sales-fedramp@logicmonitor.com", "security_email": "security-fedramp@logicmonitor.com", "website": "https://www.logicmonitor.com/", "uei": "V1B7DNM1DUB5", "small_business": false, "business_categories": [ "Contact Center", "Cybersecurity & Risk Management", "Data Management", "Network Management", "Operations Management", "Storage", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2604835605", "name": "Longevity Consulting", "cloud_service_provider": "Longevity Consulting", "cloud_service_offering": "Riskuity", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Riskuity%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-11-19T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2026-02-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-11-19T20:00:00.000Z", "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-02-06T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-02-06T20:00:00.000Z", "annual_assessment": "2011-02-06T04:00:00.000Z", "independent_assessor": "Excentium, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Longevity Consulting LLC, a trusted partner to federal agencies for over two decades, introduces Riskuity, a modern, intuitive platform designed to redefine how agencies approach Governance, Risk, and Compliance. \n\nDrawing on decades of experience and innovation in IT security risk management supporting NIST 800-53, Risk Management Framework (RMF), Authority to Operate (ATO) maintenance, and grants and safety compliance for numerous federal agencies, Longevity developed Riskuity as a transformative tool to help organizations meet their regulatory responsibilities more effectively and efficiently. \n\nHosted in the AWS FedRAMP-certified GovCloud environment, Riskuity is engineered with security and compliance at its core, leveraging best-in-class cloud-native services for performance, availability, and protection of sensitive data.", "fedramp_msg": "", "sales_email": "sales@riskuity.com", "security_email": "security@riskuity.com", "website": "https://www.longevityconsulting.com/riskuity/", "uei": "FZH5JAFWM388", "small_business": true, "business_categories": [ "Customer Service", "Cybersecurity & Risk Management", "Development Tools", "Finance", "Fleet Management", "Grant Management", "Human Resources", "Legal & Policy", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1603297883", "name": "Lookout, Inc.", "cloud_service_provider": "Lookout, Inc.", "cloud_service_offering": "Lookout Security Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Lookout%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-07-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2020-01-31T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2020-04-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 13, "reuse": 14, "ready_status": "Not Active", "ready_date": "2019-07-02T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2020-01-31T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2020-04-29T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-04-29T20:00:00.000Z", "annual_assessment": "2011-04-17T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1902240018", "csp": "MDRC", "cso": "SPROUT", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Bureau of Economic Analysis", "Consumer Product Safety Commission", "Cybersecurity & Infrastructure Security Agency", "Department of Agriculture", "Department of Veterans Affairs", "Executive Office for United States Attorneys", "FHFA Office of the Inspector General", "Federal Trade Commission", "Justice Management Division", "Pension Benefit Guaranty Corporation", "State Office of the Inspector General", "U.S. Election Assistance Commission" ], "agency_reuse": [ "22-005", "22-005-09" ], "service_description": "The Lookout Security Platform enables government agencies to meet the Zero Trust Architecture requirements in the Executive Orders and mitigate risk when enabling critical initiatives like mobile and remote work. The platform is a scalable cloud-delivered solution that provides agencies with Mobile Endpoint Security (MES) across all user's mobile devices and Endpoint Detection and Response (EDR) for agency administrators to investigate security incidents and proactively hunt threats.", "fedramp_msg": "Lookout Security Platform previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "sales@lookout.com", "security_email": "fedramp@lookout.com", "website": "https://www.lookout.com/industries/federal-government", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2533751675", "name": "LSPedia", "cloud_service_provider": "LSPedia", "cloud_service_offering": "OneScan", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/LSPedia%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-03-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-04-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-09-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-03-05T20:00:00.000Z", "cert_date": "2026-04-22T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-04-22T20:00:00.000Z", "annual_assessment": "2011-02-27T04:00:00.000Z", "independent_assessor": "Prescient Security, LLC.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "OneScan receives, validates, and retains the Transaction Information and Transaction Statement in GS1 standard EPCIS data format from Suppliers who ship Prescription Pharmaceutical Drugs.", "fedramp_msg": "", "sales_email": "fedramp@lspedia.com", "security_email": "security@lspedia.com", "website": "https://lspedia.com/", "uei": "JVBBFWVDC2P1", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Data Management", "Health & Wellness", "Legal & Policy", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2218073444", "name": "Lucid Software, Inc.", "cloud_service_provider": "Lucid Software, Inc.", "cloud_service_offering": "Lucid GovSuite", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Lucid%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-08-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-01-20T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-09-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 10, "reuse": 16, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-08-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-01-20T20:00:00.000Z", "cert_date": "2023-09-07T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Drug Enforcement Administration", "fedramp_auth": "2023-09-07T20:00:00.000Z", "annual_assessment": "2011-01-20T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2432940371", "csp": "Docebo", "cso": "Docebo Learning Platform for Gov (DCBO-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1303191948", "csp": "MAXIMUS Inc.", "cso": "MAXIMUS Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1931476240", "csp": "Rescale", "cso": "Rescale Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Argonne National Laboratory", "Centers for Disease Control and Prevention", "Department of Agriculture", "Drug Enforcement Administration", "Environmental Protection Agency", "Federal Aviation Administration", "Federal Deposit Insurance Corporation", "National Science Foundation", "State Office of the Inspector General", "United States Securities and Exchange Commission" ], "agency_reuse": [ "22-005-09", "22-007", "22-017-02", "22-022-01", "22-037", "22-062" ], "service_description": "Lucid Software provides visual collaboration products to support public sector teams from end to end as they ideate, plan, and execute mission-critical projects. Government agencies and contractors use Lucid GovSuite — which includes Lucidchart (intelligent diagramming) and Lucidspark (virtual whiteboard) — to drive efficiency, streamline processes, and accelerate speed to mission delivery. Lucid also offers accelerators for Agile, cloud, and process transformation that, when added to Lucid GovSuite, help organizations streamline workflows, foster alignment, and drive business transformation at scale.", "fedramp_msg": "N/A", "sales_email": "publicsectorsales@lucid.co", "security_email": "security@lucid.co", "website": "https://lucid.co/solutions/government", "uei": "K9YKPJNB4AD5", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Development Tools", "Education & Training", "Human Resources", "Law Enforcement", "Marketing & Sales", "Network Management", "Research", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "Lucid GovSuite" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2229642430", "name": "Lumen", "cloud_service_provider": "Lumen", "cloud_service_offering": "Cloud Contact Center", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Lumen%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-02-21T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-06-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-02-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-06-11T20:00:00.000Z", "cert_date": "2025-04-30T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-30T20:00:00.000Z", "annual_assessment": "2011-02-21T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Election Commission" ], "agency_reuse": [ "" ], "service_description": "Lumen Cloud Contact Center provides enterprise-grade contact center services in a secure cloud-based Contact Center-as-a-Service (CCaaS) solution with a predictable operational expense (OpEx) consumption model. The Lumen Cloud Contact Center solution is designed to meet the unique needs of federal agencies, combining a customizable feature set with deep industry expertise and proven best practices, in a turnkey cloud contact center. The Lumen Cloud Contact Center solution unifies customer and agent interactions across channels, delivering a dynamic, personalized digital experience with real-time engagement, cloud-grade reliability, and ability to scale, with over two decades of demonstrated capability handling large, complex call volumes. Features include: Automatic Call Distribution, Interactive Voice Response, Call Recording, Multi-Channel, Workforce Management, Offline Hold, Callback, Analytics, Customizable Real-time and Historical Reporting, Multi-Site Routing, Administration Portals.", "fedramp_msg": "N/A", "sales_email": "LumenCCCSales@lumen.com", "security_email": "CCCSecurity@lumen.com", "website": "https://www.lumen.com/en-us/communications/contact-center.html", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Contact Center", "Customer Relations Management (CRM)", "Customer Service" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1927682057", "name": "M.C. Dean, Inc.", "cloud_service_provider": "M.C. Dean, Inc.", "cloud_service_offering": "InfraLink", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Infralink%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-11-16T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2023-07-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2023-11-24T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": "2022-11-16T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2023-07-12T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2023-11-24T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-11-24T20:00:00.000Z", "annual_assessment": "2011-11-24T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "National Institute of Standards and Technology", "United States Capitol Police", "United States Marshals Service", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "InfraLink, formerly known as Infrastructure Maintenance Management System (IMMS), integrates the cyber-physical systems lifecycle from design through implementation and sustainment, enabling configuration management and providing a systematic approach to planning and continuous improvement across project activities. Rely on InfraLink to support all aspects of critical infrastructure management.\n\nConfiguration Baselines - Effectively manage system security, planned maintenance, issue management, and systems availability/performance reporting by ensuring the integrity of your system baseline configurations. InfraLink supports customization to each system element.\n\nPreventive Maintenance - Ensure critical systems and equipment availability and avoid unplanned outages. Based on the concepts of reliability-centered maintenance, InfraLink provides a foundation for effective scheduling, tracking, and performance management activities. Model data, capture tools, and electronic forms document and validate information in near-real time.\n\nIssues Management & Analysis - InfraLink’s flexible and customizable ticketing system allows you to define work categories and workflows that align with program scope and priorities, set service level agreement (SLA) milestones, and capture customized status-specific issue attributes. Comprehensive case details help you better assess system and process performance, conduct effective root cause analysis and ensure individual accountability.\n\nInstallation Management - InfraLink allows project teams to effectively track complex system implementation workflows, from simple component testing and installation to the integration of complex subsystems and hundreds of components. InfraLink enables effective planning and data integrity, which promote worker safety, accountability, and coordination across job functions.\nMaterials Inventory - Avoid work delays caused by stock shortages and extensive inventory carrying costs through effective inventory management. InfraLink helps you plan replacements based on a reliable configuration baseline, performance history and operational priorities, while streamlining stringent Government and enterprise property reporting requirements.\n\nReporting - Maintain a comprehensive assessment of your systems and team performance. InfraLink provides a range of standard and customizable reports and dashboards that offer critical insights to support ongoing improvements in systems performance and management.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/06/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "", "security_email": "info@infralink.com", "website": "https://www.infralink.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2624779619", "name": "Magenta", "cloud_service_provider": "Magenta", "cloud_service_offering": "Magenta", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Magenta%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-27T21:35:40.406Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-27T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Magenta is an artificial-intelligence platform developed by Magenta, headquartered in El Segundo, California, that automates document-intensive manufacturing and quality workflows for regulated manufacturing. The platform deploys specialized AI agents to perform tasks such as supplier data package review, certificate of conformance (CoC) generation, accounts payable invoice processing and purchase-order matching, non-conformance report (NCR) dispositioning, work-instruction generation, and FMEA risk-analysis documentation.", "fedramp_msg": "", "sales_email": "info@withmagenta.com", "security_email": "security@withmagenta.com", "website": "https://www.withmagenta.com/", "uei": "", "small_business": true, "business_categories": [ "Artificial Intelligence (AI)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2616545789", "name": "Magnet Forensics", "cloud_service_provider": "Magnet Forensics", "cloud_service_offering": "Magnet One", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Magnet%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-04-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Magnet One delivers secure digital forensics and investigative analysis capabilities within a FedRAMP High authorized cloud environment, enabling U.S. federal agencies to ingest, process, analyze, and manage digital evidence in compliance with federal security requirements. The offering combines Magnet One’s advanced evidence review and collaboration features with a rigorously controlled architecture, documented security controls, and continuous monitoring aligned to FedRAMP standards, supporting mission operations while maintaining the confidentiality, integrity, and availability of sensitive federal data.", "fedramp_msg": "", "sales_email": "sales@magnetforensics.com", "security_email": "security@magnetone.us", "website": "https://www.magnetforensics.com/", "uei": "", "small_business": false, "business_categories": [ "Law Enforcement" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2129953050", "name": "Manhattan Associates, Inc.", "cloud_service_provider": "Manhattan Associates, Inc.", "cloud_service_offering": "Manhattan Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Manhattan%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-11-16T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-04-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-02-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-11-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-04-20T20:00:00.000Z", "cert_date": "2023-02-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Commissary Agency", "fedramp_auth": "2023-02-17T20:00:00.000Z", "annual_assessment": "2011-04-20T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Commissary Agency", "Federal Emergency Management Agency" ], "agency_reuse": [ "" ], "service_description": "The Manhattan Government Cloud provides US government agencies and customers supporting the US government a secure and reliable enterprise supply chain and logistics system. This system supports a comprehensive set of logistics functions: purchasing, ordering, replenishment, fulfillment, supplier integration, inventory management, overall supply chain visibility, warehouse management, asset tracking, transportation procurement, transportation planning, transportation execution, delivery, and acceptance. This highly configurable SaaS solution supports government missions such as disaster relief, humanitarian aid, homeland security, warfighter support, food supply, government IT, and supply chain security. Manhattan Government Cloud currently offers the following Manhattan Associates products: Warehouse Management, Transportation Planning & Execution, Transportation Procurement, Supply Chain Visibility, Supply Chain Event Management, Supplier Enablement, Hub Management, Operational Supply Chain Intelligence, Distributed Order Management, and Manhattan Integration Framework.", "fedramp_msg": "N/A", "sales_email": "fedramp@manh.com", "security_email": "fedramp-security@manh.com", "website": "https://www.manh.com/", "uei": "LPQNNLPVKJS9", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2604952842", "name": "MapLarge Inc.", "cloud_service_provider": "MapLarge Inc.", "cloud_service_offering": "MapLarge", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Maplarge%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-11-24T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2026-02-09T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-11-24T20:00:00.000Z", "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-02-09T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-02-09T20:00:00.000Z", "annual_assessment": "2011-02-09T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "MapLarge provides software for location intelligence analysis that runs on servers either in the cloud or on premise. MapLarge user interfaces accessed by users in web browsers or native applications on any desktop of mobile device. Customers are typically large enterprises that build their own custom solutions on top of MapLarge in a wide variety of use cases ranging from visualizing business trends, to planning flight paths, to global situational awareness for large security teams.\n\nMapLarge supports data import, editing, visualization and alerting based on a wide variety of data sources including both flat files, real time streaming connections and numerous other industry specific like ArcGIS data connectors.\n\nMapLarge processes customer data that may take any form supported by the product but typically has one or more location intelligence attributes like latitude and longitude or street address. Customer data can be visualized in a wide variety of ways including as maps, charts, lists, or exported as Portable Document Formats (PDFs), images or data files.", "fedramp_msg": "", "sales_email": "info@maplarge.com", "security_email": "security@maplarge.com", "website": "https://maplarge.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2226144516", "name": "MARi, LLC", "cloud_service_provider": "MARi, LLC", "cloud_service_offering": "MARi", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Mari%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-01-27T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-12-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-01-27T20:00:00.000Z", "cert_date": "2025-04-03T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-03T20:00:00.000Z", "annual_assessment": "2011-01-28T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "MARi is an enterprise-wide, cloud-based, AI-driven Career Intelligence platform for academic and workplace skills. MARi can consume large sets of heterogeneous data and longitudinally track a person's knowledge, skills, and abilities throughout their entire life. \n\nUsing real-time predictive and prescriptive analytics, MARi can match a person with any job or skill, show them the gaps they need to fill to reach their goals, and make recommendations on how to close those gaps. We call this, ”match-gap-recommend.”\n\nAn intelligent “whole-person” skill repository allows MARi to apply predictive and prescriptive algorithms for both individuals and teams. This enables real-time and over-time proficiency visualizations for both current and future jobs/tasks.\n\nMARi is a versatile platform that supports many learning, training, and career management functions:\n\n•\tLearning Record Store (LRS)\n•\tLearning Management System (LMS)\n•\tLearning Analytics\n•\tAssessment Engine\n•\tCompetency Tracking\n•\tCareer Pathways\n•\tAI/ML-based Knowledge Repository for Multimedia Knowledge Objects (KOs)", "fedramp_msg": "N/A", "sales_email": "nancy.belmont@mari.com", "security_email": "john.carney@mari.com", "website": "https://mari.com/", "uei": "QENZCVXK8845", "small_business": true, "business_categories": [ "Analytics", "Data Management", "Education & Training", "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2235965777", "name": "Mark43, Inc.", "cloud_service_provider": "Mark43, Inc.", "cloud_service_offering": "Mark43 Public Safety Platform (PSP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Mark43%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-12-07T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-08-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-12-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-08-11T20:00:00.000Z", "cert_date": "2024-05-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Secret Service", "fedramp_auth": "2024-05-06T20:00:00.000Z", "annual_assessment": "2011-08-03T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of the Interior", "National Institutes of Health", "United States Secret Service" ], "agency_reuse": [ "" ], "service_description": "Mark43 provides a cloud-native public safety operations platform that supports end-to-end law enforcement and emergency response workflows, from call intake and dispatch through reporting, investigation, and operational analysis. The platform delivers integrated Computer-Aided Dispatch (CAD), Records Management System (RMS), mobile, analytics, and supporting services through a unified, web-based and mobile-accessible environment. \r\nThe Mark43 platform enables agencies to operate efficiently across desktop, mobile data terminals (MDT), and mobile devices, providing real-time access to operational data and workflows. The system is designed to be scalable and maintenance-free, supporting secure information sharing and collaboration across public safety teams. \r\nMark43 RMS is a law enforcement Records Management System supporting incident and field reporting, arrests, records management, property and evidence tracking, and case management. It enables officers to complete reports from any location using intuitive workflows, real-time data access, and built-in support for standardized reporting requirements, including NIBRS. \r\nMark43 CAD is a cloud-native, multi-discipline Computer-Aided Dispatch system supporting law enforcement, fire, and EMS operations. It unifies call intake, dispatch recommendations, and unit coordination, and provides desktop, MDT, and mobile interfaces for dispatchers and responders. The system incorporates predictive analysis, automated response planning, and human-in-the-loop automation to support consistent execution and reduce operational errors. \r\nMark43 OnScene (Mobile) is a mobile application available on Android and iOS devices that enables responders to remain connected to dispatch teams while in the field. It provides situational awareness, officer-based GPS tracking, and mobile reporting capabilities to support rapid response, officer safety, and continued field presence. \r\nMark43 Insights & Data Lake provide analytics and reporting capabilities that enable agencies to analyze operational and historical data. The Data Lake is a secure, cloud-based replicated database that supports advanced analytics and integration with agency business intelligence tools. \r\nMark43 ReportAI is an AI-assisted report drafting capability embedded within Mark43 RMS. It uses structured report data, officer notes, and optional Body-Worn Camera (BWC) transcriptions to generate draft narrative content, supporting faster and more consistent report completion while maintaining officer review and control. \r\nMark43 BriefAI provides AI-assisted summarization of reports and case data, enabling users to quickly generate standardized summaries to support case assignment and investigation workflows. \r\nMark43 eCitations is a mobile-first citation solution that enables officers to capture, issue, print, and submit citations from a single application. It supports license and VIN scanning, DMV and NCIC queries, and offline operation when network connectivity is unavailable. \r\nMark43 Fortified provides security and compliance monitoring capabilities, including real-time detection of security, compliance, and data misuse risks, prioritized alerts, and guided remediation workflows, enabling agencies to maintain visibility into their security posture. \r\nMark43 Universal Search enables users to search across data within the Mark43 platform and supported external databases through a single unified interface, returning consolidated results without leaving the system.", "fedramp_msg": "N/A", "sales_email": "Federal@Mark43.com", "security_email": "security-helpdesk@mark43.com", "website": "https://mark43.com/", "uei": "YLDGC3H3GW43", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Data Management", "Fleet Management", "Law Enforcement", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "Mark43 Analytics & Data Lake", "Mark43 CAD", "Mark43 OnScene (Mobile)", "Mark43 RMS" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2335153827", "name": "MasterControl", "cloud_service_provider": "MasterControl", "cloud_service_offering": "Quality Excellence Gov (Qx Gov)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/MC%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-04-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-04-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-12-05T20:00:00.000Z", "cert_date": "2025-05-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-05-01T20:00:00.000Z", "annual_assessment": "2011-12-04T04:00:00.000Z", "independent_assessor": "Deloitte & Touche LLP", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "National Institute of Allergy and Infectious Diseases" ], "agency_reuse": [ "" ], "service_description": "The MasterControl Qx Gov platform helps government organizations digitize, automate, and connect all aspects of their quality management system or QMS. Qx Gov is a closed-loop QMS that includes the following capabilities:\n• Portal\n• Documents \n• Training\n• Audit\n• Risk \n• FBS Forms-\no CAPA \no Issue Review\no Deviations\no Management of Change \no Events\no Nonconformance.\n\nQx Gov offers all the benefits of a secure and tightly controlled cloud environment. Adding to the inheritable control set from AWS, Qx Gov provides segregated federal customer environments, OS, and file level FIPS 140-2 encryption, authorized only admin access with MFA and SSO authentication, and continuous threat, incident, and vulnerability monitoring.", "fedramp_msg": "", "sales_email": "government@mastercontrol.com", "security_email": "fedramp@mastercontrol.com", "website": "https://www.mastercontrol.com/qxgov", "uei": "PQTMKNMMJFW3", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Education & Training", "Legal & Policy", "Operations Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2225648574", "name": "Mathematica Inc.", "cloud_service_provider": "Mathematica Inc.", "cloud_service_offering": "Mathematica Cloud Support System", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Mathematica%20Logo.jpg", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-01-23T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-01-18T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-04-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-01-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-01-18T20:00:00.000Z", "cert_date": "2024-04-30T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-04-30T20:00:00.000Z", "annual_assessment": "2011-04-30T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "Department of Health and Human Services" ], "agency_reuse": [ "" ], "service_description": "The Mathematica Cloud Support System (MCSS) is a general support system (GSS) that provides Mathematica with a centralized place to scale enterprise features and enforce policy across projects that require IT presence in the cloud. The MCSS is a management and compliance console and does not produce, store, or transmit federal information. The centralized and preconfigured services offered by the MCSS include authorization, network connectivity, common security services, usage information, and governance/compliance functions. These services are ingested by application teams instantiating their information system and related components outside of the MCSS authorization boundary, leveraging the management and compliance support services from the MCSS.", "fedramp_msg": "N/A", "sales_email": "mcss@mathematica-mpr.com", "security_email": "mcss@mathematica-mpr.com", "website": "https://www.mathematica.org/", "uei": "", "small_business": false, "business_categories": [ "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1303191948", "name": "MAXIMUS Inc.", "cloud_service_provider": "MAXIMUS Inc.", "cloud_service_offering": "MAXIMUS Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Maximus%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-08-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2022-02-16T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2014-08-18T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2022-02-16T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-02-16T20:00:00.000Z", "annual_assessment": "2011-02-07T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS", "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1728351539", "csp": "MAXIMUS Inc.", "cso": "Maximus Intelligent Virtual Assistant (MIVA) (formerly MIA)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families", "Consumer Financial Protection Bureau", "Federal Student Aid", "Office of Personnel Management" ], "agency_reuse": [ "22-002-01", "22-022-01", "22-062" ], "service_description": "Maximus Cloud is a FedRAMP Authorized multi-tenant Private and Government Community Hybrid Cloud designed exclusively for use by government customers only. Built to meet government compliance and security requirements, our managed Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), and Software-as-a-Service (SaaS) portfolio of solutions are hosted, managed, secured, and monitored to provide the highest scalability, reliability, and availability of mission-critical systems and services. Our FedRAMP Authorized services include: \r\n\r\n•\tMaximus Amazon Connect Platform (MACP): Enterprise-class omnichannel cloud contact center solution. \r\nThe Engagement Platform leverages Amazon Connect technology to provide an optimized citizen engagement experience that enables citizens to communicate with your agency across all channels – including voice, email, SMS and web chat. The Amazon Connect Platform also provides key additional modular features such as workforce management, recording and quality management, analytics, AI and a robust reporting framework.\r\n•\tMaximus Enhanced Reporting (SKPI): Solution providing insights to customer service\r\nSoftware-as-a-Service (SaaS) Total Customer Experience solution powered by SuccessKPI that uses AI and machine learning to provide key insights on customer service experiences over text and audio. The platform uses speech recognition and natural language understanding (NLU) to analyze conversations between customers and agents in real-time. With omni-channel capabilities, SuccessKPI brings together information from every customer point of contact to provide comprehensive datasets for improving the consumer experience. \r\n•\tMaximus Robotic Procedure Automation (RPA): Solution to automated tasks\r\nPlatform-as-a-Service (Paas) solution powered by Automation Anywhere that uses a web-based management system that uses a control room to run automated tasks that combines traditional Robotic Process Automation (RPA) with cognitive elements like Natural Language Processing (NLP), reading unstructured data, and machine learning capabilities.\r\n•\tMaximus Life X Improve Digital Testing (LXI): Solution to screen and reduce risk of individuals at risk of suicide\r\nPowered by MindX Sciences is an easy-to-use tool that can identify individuals at risk for suicidality and provide personalized risk-reduction and life improvement strategies. Based on the Niculescu Convergent Functional Information for Suicidality Scale (CFI-S), the test does not ask about suicidal ideation, making it suitable for non-clinical settings such as large organizations or educational settings. The test's validity and reliability have been validated through published studies in scientific and medical journals. Additionally, clinicians can use the test for a nominal yearly fee to reduce suicide risk in their patient population, with a CPT code for clinical use available. Overall, the SX Prevent test is an innovative approach to suicide prevention that can support individuals at risk and may prove beneficial in various settings.\r\n•\tMaximus Digital Experience Hub (DXHub): Solution for hosting web applications and microservice based applications.\r\nEnterprise-class platform for hosting web applications and microservice based applications. DXHub is a cloud-native solution powered by kubernetes (EKS) running containerized workloads in either single or multi-tenant configurations. DXHub has DevOps intrinsically built into it, allowing for the rapid and frequent rollout of incremental application code releases. DXHub helps government deliver modern and fault tolerant applications to citizens by reducing their total cost of ownership; increasing the speed to production for application releases via reusable web application templates; the rapid delivery of enterprise application workloads. \r\n•\tOpenText XMedius (Fax): Solution for receiving digital fax\r\nOpenText XMedius is a fax solution. This increases the functionality for agencies looking to include fax communication with agency customers.\r\n•\tNexTalk TTY (TTY): Solution for handling TTY (teletypewriter)\r\nNexTalk is a TTY solution. This increases the functionality for agencies looking to support the hearing impaired with agency customers.\r\n•\tMaximus CodeShuttle: \r\nEnterprise-class CI/CD pipeline automation platform. CodeShuttle is a cloud-native solution hosted on Kubernetes (EKS) that provides an open-source framework-as-a-service to automate build, test, and deploy pipelines across multiple cloud and on-premises environments. Built around an \"Everything as Code\" model, it delivers automated code quality checks, security scanning, multi-platform deployment support, configuration management, and artifact lifecycle management. The platform provides standardized CI/CD patterns with support for AWS and Azure, and assures products the capability to deploy solutions within federal boundaries.\r\n•\tMaximus Intelligent Document Processing (IDP): Solution to automate document image processing\r\nIDP is a serverless, multi-tenant AWS SaaS solution that automates the extraction and processing of data from various document types. Key capabilities include:\r\nAI-Powered Classification – leverages Amazon Bedrock with Claude AI for intelligent document categorization\r\nAdvanced Text Extraction – employs Amazon Textract for OCR of both printed and handwritten text\r\nMulti-Language Support – processes documents in English and Spanish\r\nConfidence-Based Routing – automatically routes low-confidence extractions to human review\r\nSecure Multi-Tenancy – provides isolated processing storage for multiple agencies\r\nRESTful API Integration – enables seamless integration with existing systems\r\nAudit Trail Compliance – maintains comprehensive logging for regulatory requirements\r\nScalable Architecture – serverless design of processing components ensure automatic scaling based on demand\r\n•\tOneReach (ONR): Solution to use AI to automate tasks, build collaborative digital agents, and monitor customer experience.\r\nA solution which includes:\r\nAdvanced Data Analytics: OneReach provides robust data analytics tools that help Maximus gain insights into service performance, customer satisfaction, and operational efficiency. This enables data-driven decision-making and continuous improvement.\r\nAutomation and AI: With OneReach's automation and AI capabilities, Maximus can streamline processes, reduce manual tasks, and improve accuracy. This includes automating routine tasks, enhancing customer interactions with AI-driven chatbots, and optimizing workflows.\r\nCloud Integration: OneReach offers seamless cloud integration, allowing Maximus to leverage cloud-based solutions for scalability, flexibility, and cost-efficiency. This ensures that services can be accessed and managed from anywhere, enhancing accessibility and responsiveness.\r\nEnhanced Security: OneReach provides advanced security features to protect sensitive data and ensure compliance with regulatory standards. This includes encryption, secure access controls, and continuous monitoring to safeguard information.\r\nCustomer Experience Management: OneReach's tools help Maximus improve customer experience by providing personalized and efficient service. This includes tracking customer interactions, analyzing feedback, and implementing improvements to enhance satisfaction.\r\nCollaboration Tools: OneReach offers collaboration tools that facilitate communication and teamwork within Maximus. This includes project management software, communication platforms, and document sharing solutions to enhance productivity and coordination.\r\n•\tKore.ai (Kore): Solution to use AI to automate Contact Center tasks, streamline work procedures, and other processes.\r\nAI for Service\r\nAutomate and elevate customer interactions across voice and digital channels with solutions such as the Kore.ai Voice Gateway, Contact Center AI (CCAI), Agent Assist, Quality Management & Compliance, and Campaigns.\r\nAI for Work\r\nEnhance employee productivity and streamline workflows with AI Assistants, orchestration capabilities, and prebuilt agents for enterprise search, ITSM, HR, and recruitment.\r\nAI for Process\r\nAutomate knowledge-intensive business tasks to improve compliance, reduce reliance on human experts, and ensure consistency at scale.\r\nAgent Platform\r\nA multi-agent orchestration infrastructure enabling enterprises to design, deploy, and manage sophisticated agentic applications. Businesses can customize agent autonomy — from guided to fully autonomous systems — to meet diverse needs.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/07/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "federalservices@maximus.com", "security_email": "federalservices@maximus.com", "website": "https://maximus.com/technology-consulting-services", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Customer Relations Management (CRM)", "Customer Service", "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "Compliance Scanning", "File Integrity Monitoring", "Kore.ai (Kore)", "Malware Detection", "Maximus Amazon Connect Platform", "Maximus CodeShuttle", "Maximus Digital Experience Hub (DXHub)", "Maximus Enhanced Reporting", "Maximus Intelligent Document Processing (IDP)", "Maximus RPA", "Maximus Suicide Prevention Service", "Monitoring", "Multi-Factor Authentication", "NOC Services", "NexTalk TTY", "OneReach (ONR)", "OpenText XMedius", "Patching", "SIEM", "SOC Services", "Ticketing", "Vulnerability Scanning" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1728351539", "name": "MAXIMUS Inc.", "cloud_service_provider": "MAXIMUS Inc.", "cloud_service_offering": "Maximus Intelligent Virtual Assistant (MIVA) (formerly MIA)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Maximus%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-07-14T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-12-01T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to Legacy FedRAMP Ready" }, { "date": "2018-10-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2019-04-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 6, "ready_status": "Not Active", "ready_date": "2017-12-01T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2017-07-14T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-10-31T20:00:00.000Z", "cert_date": "2019-04-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-04-09T20:00:00.000Z", "annual_assessment": "2011-10-25T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "F1303191948", "csp": "MAXIMUS Inc.", "cso": "MAXIMUS Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Federal Student Aid", "Office of Personnel Management", "United States Citizenship and Immigration Services" ], "agency_reuse": [ "22-005-09", "22-022-01", "22-037", "22-062" ], "service_description": "The Maximus Intelligent Virtual Assistant (MIVA) is a turn-key FedRAMP-authorized SaaS solution that replaces traditional touchtone and directed dialog speech IVRs at the front-end of contact centers. MIVA uses a combination of artificial intelligence (AI) and human understanding to interact conversationally with callers.\r\n\r\n \r\n\r\nMIVA applications are built to support government-specific requirements, including status updates for applications and accounts, call routing, and FAQs. Callers can receive self-service information via voice, email, and text messages. MIVA integrates will all major call routing and telephony systems, and major carrier networks.", "fedramp_msg": "N/A", "sales_email": "MIVAInfoSec@maximus.com", "security_email": "MIVAInfoSec@maximus.com", "website": "https://maximus.com/customer-experience/intelligent-virtual-assistant", "uei": "", "small_business": false, "business_categories": [ "Communication", "Customer Service", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2324445481", "name": "MCG Energy Solutions, LLC", "cloud_service_provider": "MCG Energy Solutions, LLC", "cloud_service_offering": "MCG Applications and Hosting", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/MCG%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-07-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-11-12T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-07-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-11-12T20:00:00.000Z", "cert_date": "2025-04-30T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-30T20:00:00.000Z", "annual_assessment": "2011-11-12T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS", "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "MCG Energy Solutions develops and provides wholesale and retail energy software on a SaaS basis that we host as a CSP in the MCG Private Cloud. Both our Private Cloud infrastructure (IaaS) and our product suite (SaaS) exceed a 99.99% SLA uptime for utilities and other businesses that need a true 24x7x365 system with real-time (active/active) redundancy.\n\n \n\nMCG’s entire customer solution, including all product offerings and services, has no gaps between our software and the infrastructure it runs on. Our solutions are hardened through and through to mitigate customer risk exposure and minimize required maintenance.\n\n \n\nThe following products are included in the MCG Application suite which can be used individually or together as a complete energy software solution:\n\n• Integrated Asset Manager (IAM) - A full-featured, easy-to-use wholesale energy marketing and trading solution integrated with all North American physical bilateral markets and ISOs. IAM’s user-friendly scheduling interface streamlines workflow for managing front-office and back-office operations including trade capture, transmission reservation management, fully integrated native e-Tagging, scheduling, bidding, dispatch, settlement, and reporting for all resources and loads.\n\n• Energy Accounting System (EAS) - Tracks and manages time-series data types, visualizes calculations (load, imbalance, contract, etc.), and tracks a meter’s data sources to generate an official profile based on the best available and validated data. EAS supports granular meter input (5-minute, 15-minute, hourly) and tracks multiple data sources for a single meter such as PI, MV90, market, and more. The system’s flexible calculation engine accepts and saves the calculations you require in an Excel-like format.\n\n• TransBill - Extends EAS as a complete wholesale power billing and invoicing solution that bills a wide variety of wholesale contracts for both generation and transmission businesses. TransBill assists in performing all components of Open Access Transmission Tariffs (OATTs), Purchase Power Agreements (PPAs), Grandfathered Agreements (Power and Transmission legacy contracts), ISO Transmission Revenue Shadowing, and more.\n\n• MCG’s Versify Outage Management System (OMS) - An industry leader for handling the outage process from the initial request, through approval processes, to execution and coordination of activities in the field and with ISO and RTO markets. Versify OMS features the advanced Versify workflow engine that greatly reduces time and expense of adjusting the system to meet changes in markets and your business.\n\n• MCG’s Versify Operator Log (OpLog) – A web-based software system that easily logs events, activities, and compliance requirements in a single tool using the same workflow engine as Versify OMS. OpLog simplifies communication between the field and office, and automates manual processes to eliminate errors while improving efficiency and compliance.\n\n• MCG’s Versify Workforce – Advances and streamlines safety management with tools for desktop and mobile devices, including Permit to Work (PTW), Job Hazard Analysis (JHA), Job Safety Analysis (JSA), Lockout Tagout (LOTO), and more. Workforce reduces the administrative burden on staff while enhancing compliance and coordination between the field and office. Designed to provide complete visibility across your organization, Workforce ensures the correct safety and compliance measures are taken for the safety of your employees and work environments.\n\n• MCG’s Paragon Energy Risk Manager (ERM) - A fully integrated trading, credit, and market risk management solution for complex, multi-commodity energy companies. ERM manages the entire risk management process throughout the transaction life cycle including counterparty onboarding and scoring, trade limits, margining agreements, trade capture, scheduling, Mark-to-Market (MtM), accounting, and credit analysis. Combining state of the art technology with dynamic features, ERM provides a consistent approach to market and credit risk to ensure compliance with credit and market exposure policies and limits.\n\n• MCG’s Paragon Credit Risk Manager (CRM) - Combines state of the art technology with a rich feature set for managing credit risk, including counterparty, contract, collateral, exposure management, advanced credit analytics, and credit scoring. CRM is easily configured by users to meet the nuances of each client’s credit risk requirements, and can create custom views and reports that can be saved and shared. Encompasses the entire scope of credit risk management to ensure credit policies are consistently and efficiently followed across your organization.\n\n• MCG’s Paragon Gas Scheduling System (GSS) – This extension of Paragon ERM merges operational and commercial data in an easily navigated format that streamlines tasks from processing nominations to generating expected cash flows. GSS simplifies the gas scheduling process by generating invoices and closing statements using transport rates from the pipeline and actualized data.\n\n• Hosted Data Services (HDS) – Accessing your data should not interrupt business activities. HDS warehouses and archives data from all MCG products into a single platform with full search, filter, report, and display building capability. It includes a programmatic API for performing queries directly against the HDS database, eliminating production impacts from long running queries while integrating to downstream systems without impacting the operational system in use.\n\n• Control Area Scheduling (CAS) – A fully featured interchange and transmission scheduling system integrating MCG e-Tag and OASIS interfaces to automatically create, categorize, and track interchange and transmission schedules for reliability entities.\n\n• MCG’s Innotap Data Suite (IDS) – When you need timely, clean, and accurate data from markets for your decision making, IDS (direct or through API feed) is the solution for your business. IDS organizes and displays data for wholesale energy transactions from a wide array of sources, with modules for a variety of ISOs and RTOs to aid and report on the decision making process.", "fedramp_msg": "", "sales_email": "sales@mcgenergy.com", "security_email": "noc@mcgenergy.com", "website": "https://www.mcgenergy.com/", "uei": "T5FETBQCPBT3", "small_business": true, "business_categories": [ "Accounting", "Analytics", "Communication", "Data Management", "Finance", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1902240018", "name": "MDRC", "cloud_service_provider": "MDRC", "cloud_service_offering": "SPROUT", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Sprout%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-05-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-07-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-10-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-05-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-07-29T20:00:00.000Z", "cert_date": "2020-10-07T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-10-07T20:00:00.000Z", "annual_assessment": "2011-07-29T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "Department of Health and Human Services" ], "agency_reuse": [ "" ], "service_description": "MDRC SPROUT provides compartmented cloud spaces for evidence-based social policy research and operations. SPROUT handles the randomization of samples or clusters, secure data collection of participant information, participant monitoring, data processing, and analytics. SPROUT integrates operational, administrative, and research aspects of policy programs for better planning insights and improved evidence-based policymaking.\nMDRC SPROUT is a cloud-based gov-tech solution that provides secure tools and services to agencies and contractors in alignment with the Evidence Act. \n\nFor additional information about evidence-based policymaking, see https://evaluation.gov .\n\nFor additional information about MDRC capabilities, see https://mdrc.org . \nUEI: ULJSBXBHRM15\nCAGE: 3JSR9\nGSA/MAS: GS-10F-0245N", "fedramp_msg": "N/A", "sales_email": "sprout@mdrc.org", "security_email": "fedramp@mdrc.org", "website": "https://www.mdrc.org/", "uei": "ULJSBXBHRM15", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Education & Training", "Legal & Policy", "Research", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2332852130", "name": "Medallia Inc.", "cloud_service_provider": "Medallia Inc.", "cloud_service_offering": "Mindful by Medallia", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Medallia%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-08-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-09-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-08-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-09-11T20:00:00.000Z", "cert_date": "2025-04-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-09T20:00:00.000Z", "annual_assessment": "2011-09-11T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2504148525", "csp": "Booz Allen Hamilton", "cso": "Footprint", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Internal Revenue Service" ], "agency_reuse": [ "22-034-02" ], "service_description": "Mindful by Medallia allows a person to receive a callback at a later time and connect them with an available agency representative.\n\nAgency experience - Agencies will use Mindful Callback as part of their contact center experience when engaging externally with citizens or internally between organization groups.\n\nFederal Data - A phone number (at a minimum) is needed to complete a callback. Optionally, an agency can send us a contact center ID number with each callback. When we reconnect the citizen with the agency contact center, we can provide the ID back to them which allows the agency to look up data in their systems for the citizen interaction.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "mgc_compliance@medallia.com", "website": "https://www.medallia.com/products/mindful/", "uei": "", "small_business": false, "business_categories": [ "Contact Center" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1711262842", "name": "Medallia, Inc.", "cloud_service_provider": "Medallia, Inc.", "cloud_service_offering": "Medallia GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Medallia%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-12-26T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2021-04-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 11, "reuse": 11, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2020-12-26T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2021-04-09T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-04-09T20:00:00.000Z", "annual_assessment": "2011-12-26T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2332852130", "csp": "Medallia Inc.", "cso": "Mindful by Medallia", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Customs and Border Protection", "Department of Agriculture", "Department of Housing and Urban Development", "Department of Veterans Affairs", "Federal Emergency Management Agency", "Federal Retirement Thrift Investment Board", "General Services Administration", "Internal Revenue Service", "Office of Personnel Management", "Social Security Administration", "United States Patent and Trademark Office" ], "agency_reuse": [ "22-027-01" ], "service_description": "The Medallia Experience Cloud (MEC), leads the market in the understanding and management of experience for agencies, public sector employees, and citizens. Medallia captures experience signals created on daily journeys in-person, traditional surveys, on calls, digital channels, over video and social media, and IoT interactions. Once net new data is captured or by leveraging legacy data previously collected by customers, Medallia applies proprietary AI technology on data that is structured and unstructured (text and comments) to reveal personalized and predictive insights that can drive action towards positive business / organizational results and outcomes. Using the Medallia Experience Cloud, government agencies can reduce employee churn, increase citizen and employee Trust and Equity, achieve in-the-moment service recovery, and drive data-driven business decisions while providing clear and potent returns on investment.\n\nThe Medallia Experience Cloud can support agency mission, focus, and objectives by:\n\n- Engaging Citizens and Employees Intuitively in a secure, meaningful, continuous way to increase feedback response rate and help the agency better understand their sentiment, value, and behavior.\n- Empowering the Agency and Activating every Employee by driving feedback and actionable insights to every agency employee.\n- Taking Action in Real-Time with analysis and alerts that identify focus areas and help resolve issues quickly.\n- Optimizing Government Experience by empowering agencies to align with mandates related to A-11, Trust, and Equity\n- Removing Silos by tracking customer journeys that span across engagement channels including email, mobile, websites, chat, phone, video, and contact centers\n- Maintaining Trust and Security with a platform that is FEDRAMP High certified with the JAB as well as HIPAA compliant allowing us to engage with sensitive PII.\n- Integrating at scale by leveraging connectors for platforms such as Salesforce and ServiceNow and supported by a robust suite of Restful API", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/07/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "", "security_email": "mgc_compliance@medallia.com", "website": "https://www.medallia.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2004146362", "name": "MediaLab, Inc.", "cloud_service_provider": "MediaLab, Inc.", "cloud_service_offering": "MediaLab Federal", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/MediaLab%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-05-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-11-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-03-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-05-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-11-05T20:00:00.000Z", "cert_date": "2021-03-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-03-15T20:00:00.000Z", "annual_assessment": "2011-11-05T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "National Institutes of Health" ], "agency_reuse": [ "" ], "service_description": "MediaLab provides an integrated web-based SaaS platform for healthcare quality management. MediaLab's offering address many different areas of compliance within healthcare facilities, including continuing education and training, document management of policies and procedures, inspection readiness and accreditation management, competency assessment, management of personnel files and certifications, and management of non-conforming events, instrument maintenance, and quality monitoring data. Role-based permissions allow key users to access and update data across all applications to meet any healthcare facility's unique needs.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@medialab.com", "website": "https://federal.medialab.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2210666939", "name": "Melissa", "cloud_service_provider": "Melissa", "cloud_service_offering": "Melissa GovCloud Address Suite", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Melissa%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-03-08T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-07-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-09-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-03-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-07-19T20:00:00.000Z", "cert_date": "2023-09-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Centers for Disease Control and Prevention", "fedramp_auth": "2023-09-14T20:00:00.000Z", "annual_assessment": "2011-07-18T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Centers for Disease Control and Prevention" ], "agency_reuse": [ "" ], "service_description": "Web Service leveraging postal authorities (USPS, Canada Post, Royal Mail, EIRCODE) to Verify, Standardize, and Correct mailing addresses. Additional functions for move update for US residents and businesses are available within the service leveraging USPS® NCOALink.", "fedramp_msg": "N/A", "sales_email": "Sales@melissagovcloud.com", "security_email": "Support@melissagovcloud.com", "website": "https://www.melissa.com/govcloud-address-suite", "uei": "SEE8CF1DJHA4", "small_business": false, "business_categories": [ "Analytics", "Communication", "Customer Relations Management (CRM)", "Customer Service", "Data Management", "Marketing & Sales" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2032665434", "name": "Menlo Security", "cloud_service_provider": "Menlo Security", "cloud_service_offering": "Cloud Security Platform powered by Isolation Core", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Menlo%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-12-16T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-08-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-01-09T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-12-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-08-08T20:00:00.000Z", "cert_date": "2023-01-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-01-09T20:00:00.000Z", "annual_assessment": "2011-11-15T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "Menlo Security is the pioneer of browser security and stops evasive threats such as phishing and ransomware, delivering on the promise of cloud-based security and enabling zero trust application access. The Menlo Secure Enterprise Browser solution prevents attacks while being invisible to end users who can use their preferred web browser, enhancing productivity. Deploy browser security policies in a single click, securing internet access and protecting organizational data down to the last mile.\r\n\r\nMenlo Secure Enterprise Browser Solution\r\nInstantiated for each browser session, the Menlo Secure Cloud Browser secures access to the web, preventing malware, ransomware, and unauthorized access and ensures that data security policies are enforced to prevent malicious or unintentional data theft with multiple Data Loss Prevention (DLP) features. Defending against highly evasive adaptive threats (HEAT), Menlo leverages machine learning and AI-based URL analysis to identify and block the most sophisticated phishing sites. Menlo remote browser isolation (RBI) offers significant performance enhancements in comparison to all other RBI offerings with patented Adaptive Clientless Rendering (ACR). ACR enables web page rendering, including interactive animations such as scrolling, to be performed on the endpoint browser using optimized desktop hardware and browser software, while the full browser feature set—including copy-paste, find in page, and printing—is maintained.\r\n\r\nThe administrative policy defines whether any site is isolated. Isolation may be managed with traditional categories which should be familiar and easy to use by administrators of Secure Web Gateways (SWG). Unlike a SWG, however, Menlo enables isolation by threat types and/or vulnerable web services.\r\n\r\nMitigating the security blindspot posted by mandated transport level encryption (TLS), Menlo Browsing Forensics offers policy-based capture of browsing sessions. Captures are stored in customer data stores, not accessible to Menlo Security. The Browsing Forensics Viewer enables the Security Operations Center (SOC), incident response, and even security awareness training teams to review users’ sessions including clicks, scrolls and text inputs. Policy controls manage whether password entries are retained, whether a user is notified of recording and screen capture rates.\r\n\r\nFiles and archives are delivered with browser protocols. The Menlo Secure Cloud Browser includes comprehensive file and archive inspection. Archives are opened, and each file is subject to hash checks and anti-virus examinations. The safe content of both clean and infected files can be presented as a safe PDF to the user. Policy governs whether any original file or archive may be downloaded from the Secure Cloud Browser. File security checks can be selectively bypassed.\r\n\r\nTraffic steering to the Menlo Cloud supports proxy chaining from, for example, existing SWG or Cloud Access Security Brokers (CASB), as well as PAC file deployment or firewall redirecting. Menlo Browser Security is fully compatible with Secure Access Service Edge (SASE) and Security Service Edge (SSE) deployments.\r\n\r\nCommon use cases for Menlo Browser Security include: comprehensive zero-hour phishing prevention, ransomware prevention, administrative governance of Generative AI, and comprehensive governance of SaaS using workflows similar to CASB, but including SaaS property isolation and comprehensive file upload and download controls applicable on a per-application basis.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@menlosecurity.com", "website": "https://www.menlosecurity.com/", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2527956755", "name": "Meridian Knowledge Solutions, LLC", "cloud_service_provider": "Meridian Knowledge Solutions, LLC", "cloud_service_offering": "Meridian LMS", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Meridian%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-01-27T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP In Process" }, { "date": "2026-03-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-12-05T20:00:00.000Z", "ip_prog_date2": "2025-01-27T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-03-06T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-03-06T20:00:00.000Z", "annual_assessment": "2011-08-25T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Meridian LMS is a SaaS learning management system designed for government and regulated organizations with complex training, compliance, certification, and reporting requirements. Hosted in AWS and delivered in a dedicated environment created specifically for FedRAMP customers, Meridian is ideal for federal, state, local, and tribal agencies, their contractors, and related entities. Fully Section 508 and WCAG compliant, Meridian helps organizations strengthen oversight, streamline administration, and maintain audit-ready training operations. In addition to its FedRAMP SaaS offering, Meridian LMS can also be deployed on-premises or in a customer’s private cloud to meet diverse security and infrastructure requirements.\r\n\r\nLearn more in the Meridian Trust Center: https://meridian-knowledge-solutions.github.io/fedramp-trust-center/", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class C Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "sales@meridianks.com", "security_email": "security@meridianks.com", "website": "https://www.meridianks.com/", "uei": "MM9LQ3WBY5V7", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Education & Training", "Human Resources", "Learning Management", "Talent Development", "Talent Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2206159758", "name": "Merlin International", "cloud_service_provider": "Merlin International", "cloud_service_offering": "Constellation GovCloud (CGC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Merlin%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-04-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2023-04-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2026-02-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2022-04-25T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2023-04-25T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-02-17T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-02-17T20:00:00.000Z", "annual_assessment": "2011-11-24T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "PaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Cybersecurity & Infrastructure Security Agency" ], "agency_reuse": [ "" ], "service_description": "Constellation GovCloud (CGC) is an information system that provides the necessary Platform as a Service (PaaS) architecture layers to support Merlin-operated Software as a Service (SaaS) applications. These Merlin SaaS applications will be hosted and provided to U.S. federal agencies, including local and state governments and tribal organizations. The CGC is part of a managed service that is designed to accelerate FedRAMP authorizations allowing Merlin SaaS companies to achieve a FedRAMP Authority to Operate (ATO) more quickly and cost-effectively.\n\nCynamics, a leading innovator in network cybersecurity, presents a next-generation SOC AI platform powered by its proprietary sample-based NDR and cybersecurity large language model, CynLLM. By integrating intelligent sampling with cutting-edge AI, Cynamics facilitates real-time and scalable threat detection without the heavy infrastructure requirements of traditional solutions. Already endorsed by Tier-1 municipalities, enterprises, and critical infrastructure providers globally, Cynamics offers unparalleled visibility, automation, and operational efficiency for today’s security teams.\n\nInfoSec Global Federal’s AgileSec Analytics provides automated discovery, monitoring, and policy‑driven control of cryptographic assets, including keys, certificates, algorithms, libraries, devices, applications, firmware, and protocols, across cloud and on‑premise environments. The AgileSec Analytics platform ensures agencies are prepared for emerging cryptographic threats, including quantum attacks, by monitoring usage of cryptography and preparing migration to post-quantum cryptography. Key capabilities include Automated Cryptographic Discovery & Inventory, Vulnerability Identification and Compliance Reporting, Post-Quantum Readiness, and Continuous Monitoring and Remediation Workflows. The AgileSec Analytics solution supports regulatory requirements including OMB 23-02 mandates and continuous diagnostics, with built-in reporting features evaluated and recognized by federal standards organizations. It also integrates with numerous ecosystem technologies including EDR, CLM, PKI, HSM, CDM dashboards, ITSM, GRC tools and more.\n\r\nHyperproof delivers a modern, cloud-based compliance operations platform designed to help government agencies and regulated organizations manage risk and compliance with confidence. Hyperproof Gov is a cloud-based governance, risk, and compliance (GRC) platform designed to support regulated organizations in managing security and compliance programs. The system provides centralized capabilities for control management, evidence collection, risk tracking, audit support, and continuous monitoring. Hyperproof Gov enables structured workflows and real-time compliance status reporting to support authorization, assessment, and ongoing monitoring activities. The platform is designed to integrate with external systems for automated evidence collection and to maintain traceability between controls, requirements, and supporting artifacts, supporting consistent and repeatable compliance operations.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@cgc.cloud", "website": "https://cgc.cloud/", "uei": "", "small_business": true, "business_categories": [ "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "Cynamics AI", "Hyperproof Gov", "InfoSec Global Federal — AgileSec Analytics" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1209051525", "name": "Microsoft", "cloud_service_provider": "Microsoft", "cloud_service_offering": "Azure Commercial Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Microsoft%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-09-14T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2019-05-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 89, "reuse": 615, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2018-09-14T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2019-05-03T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "N/A", "fedramp_auth": "2019-05-03T20:00:00.000Z", "annual_assessment": "2011-05-03T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "IaaS", "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2307441316", "csp": "Absolute Security", "cso": "Absolute Secure Endpoint Product Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2106555313", "csp": "AchieveIt Online, LLC", "cso": "AchieveIt", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "F1302201919", "csp": "Acquia Inc.", "cso": "Acquia Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1820435960", "csp": "Adobe", "cso": "Adobe Creative Cloud for Enterprise", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1820435961", "csp": "Adobe", "cso": "Adobe Document Cloud including Adobe Acrobat, Adobe Acrobat Sign, Adobe Acrobat AI Assistant, Adobe Acrobat Analyzer, and Adobe Acrobat Services (APIs)\r\n", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2326654692", "csp": "Aprimo US, LLC", "cso": "Aprimo", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1708752710", "csp": "Armedia, LLC", "cso": "Armedia Content Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2401839361", "csp": "Ask Sage, Inc.", "cso": "Ask Sage", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2403745080", "csp": "ATOM EVSE", "cso": "Atom Power, Inc - ATOM EVSE", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2031222637", "csp": "Aurigo Software Technologies, Inc.", "cso": "Masterworks Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226322745", "csp": "Autodesk", "cso": "Autodesk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2401047002", "csp": "Axonius Federal Systems", "cso": "Axonius Asset Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2128235497", "csp": "Bamboo Health, Inc.", "cso": "PMP Government-Gateway", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1923039219", "csp": "Canon U.S.A., Inc.", "cso": "Canon Office Cloud – Managed Print Services", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2009476860A", "csp": "Casepoint LLC", "cso": "Casepoint Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2334756650", "csp": "Chainalysis", "cso": "Reactor", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1511207635", "csp": "Cisco Systems Inc.", "cso": "Webex for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406760385", "csp": "Clarivate Analytics US LLC", "cso": "Clarivate Intellectual Property AI & Image Search Platform (CIPAI-ISP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000863987A", "csp": "Cloudflare", "cso": "Cloudflare for Government - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2115384377", "csp": "Commvault Systems, Inc.", "cso": "Commvault Cloud for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2325657620", "csp": "Content Guru", "cso": "Storm Cloud Contact Center", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416856649", "csp": "Creative Veteran Productions", "cso": "Federal Immersive Learning Management System (FED-ILMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416263030", "csp": "CrestPoint Solutions, Inc", "cso": "CrestPoint Environmental Management Service (CEMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2402468053", "csp": "Darktrace Federal Inc.", "cso": "Cyber AI Mission Defense and Email Protection", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2427252775", "csp": "Dejero Labs, Inc.", "cso": "Dejero Control and Concentrator", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2100845343", "csp": "DevResults", "cso": "DevResults", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "F1605027893", "csp": "DocuSign", "cso": "DocuSign CLM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1609267945", "csp": "DocuSign", "cso": "Docusign - IAM eSignature", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1823149273", "csp": "Duo Security (a Cisco Company)", "cso": "Duo Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2016131254", "csp": "Dynatrace", "cso": "Dynatrace Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2034966708", "csp": "End To End Computing", "cso": "Singularity", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1930046270", "csp": "EnergyCAP LLC.", "cso": "EnergyCAP", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1707156421", "csp": "Envisage Technologies LLC", "cso": "Acadis Readiness Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1811073663A", "csp": "ESRI", "cso": "ArcGIS Online (AGO)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2207359708", "csp": "Evidence Prime", "cso": "Laser AI", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2427818523", "csp": "Feith Sytems and Software, Inc.", "cso": "RMA iQ™", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2327655698", "csp": "Gallery Systems", "cso": "TMS Gov Cloud Suite ", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1812058188", "csp": "GitHub", "cso": "GitHub Enterprise Cloud", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2234334891", "csp": "Glassbeam, Inc.", "cso": "Glassbeam Clinsights", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2035860874", "csp": "Global Telehealth Services, inc.", "cso": "GTS VirtualHealth Platform (GTS-VP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1815734543", "csp": "Gordian", "cso": "Gordian Federal Cloud powered by RSMeans Data", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2502963317", "csp": "HP Inc.", "cso": "HP Managed Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2417469779", "csp": "IBM", "cso": "IBM Envizi ESG Reporting", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1710033970", "csp": "Infor", "cso": "Infor Government Solutions (IGS) Software as a Service", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1816364586", "csp": "Ivanti", "cso": "Ivanti Neurons for ITSM (Formerly Service Manager)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324452533", "csp": "Joint Commission Resources", "cso": "Tracers with AMP®", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335051964", "csp": "Keyfactor", "cso": "Keyfactor for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2420341612", "csp": "LCptracker Inc", "cso": "LCPtracker Pro", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2225648574", "csp": "Mathematica Inc.", "cso": "Mathematica Cloud Support System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2004146362", "csp": "MediaLab, Inc.", "cso": "MediaLab Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "MSO365MT", "csp": "Microsoft", "cso": "Microsoft 365 Government Community Cloud & Supporting Services", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2126176344", "csp": "MicroStrategy", "cso": "MicroStrategy Cloud for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1910758409", "csp": "Mimecast", "cso": "Incydr Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2119265538", "csp": "NEOGOV", "cso": "NEOGOV Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2133141131", "csp": "Nintex", "cso": "Nintex Automation GE Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134455708", "csp": "Nucleus Security, Inc", "cso": "Nucleus for Government (NucleusGov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2113346550", "csp": "OpenWater Software", "cso": "OpenWater Awards", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2434554673", "csp": "Palantir Technologies Inc.", "cso": "Palantir Federal Cloud Service", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2135637226", "csp": "Pearson VUE", "cso": "Pearson Federal Cloud System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2202555908", "csp": "Pexip Inc.", "cso": "Pexip Government Cloud (PGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1403283529A", "csp": "Project Hosts Inc.", "cso": "GSS One - Azure", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2322855016", "csp": "ProjectTeam, Inc.", "cso": "ProjectTeam for Government (Construction Project and Program Management)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1605027892", "csp": "QuestionMark", "cso": "Questionmark Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1722838693", "csp": "Rave Mobile Safety", "cso": "Rave Safety Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2309954376", "csp": "RecAccess", "cso": "RecAccess", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2210352243", "csp": "SAS Institute, Inc.", "cso": "SAS AI and Analytics for Government on FedRAMP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2418039495", "csp": "ScienceLogic, Inc.", "cso": "ScienceLogic Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603077867", "csp": "SMX (Formerly Smartronix)", "cso": "Elevate Intelligent Automation Platform (IAP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134635186", "csp": "Synack", "cso": "On-Demand Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1901136437", "csp": "Synergetics Incorporated", "cso": "Open Federal Logistics Information System (OpenFLIS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2110342613", "csp": "Tanium", "cso": "Tanium Cloud for US Government (TC-USG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2215045786", "csp": "Tenable", "cso": "Tenable Cloud Security for US Government - Ermetic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814276801", "csp": "Tenable Public Sector (TPS)", "cso": "Tenable Government Solutions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226228379", "csp": "Trend Micro Inc.", "cso": "Trend Cloud One for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2411443563", "csp": "Valley IT Solutions, LLC", "cso": "Kernos", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421252644", "csp": "Varonis", "cso": "Varonis DatAdvantage Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421252636", "csp": "Varonis", "cso": "Varonis Data Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2308034636A", "csp": "Wiz, Inc.", "cso": "Wiz for U.S. Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2207643307", "csp": "Wolters Kluwer", "cso": "TeamMate FedRAMP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families", "Administration for Community Living", "Agency for Healthcare Research and Quality", "Alcohol and Tobacco Tax and Trade Bureau", "American Battle Monuments Commission", "Brookhaven Site Office", "Bureau of Economic Analysis", "Bureau of Indian Affairs", "Bureau of Safety and Environmental Enforcement", "Bureau of Trust Funds Administration", "Commodity Futures Trading Commission", "Consumer Product Safety Commission", "Corporation for National & Community Service", "Court Services and Offender Supervision Agency", "Customs and Border Protection", "Cybersecurity & Infrastructure Security Agency", "DOJ Office of the Inspector General", "Defense Information Systems Agency", "Defense Nuclear Facilities Safety Board", "Department of Agriculture", "Department of Education", "Department of Energy", "Department of Health and Human Services", "Department of Labor", "Department of State", "Department of Transportation", "Department of Veterans Affairs", "Department of the Interior", "Environmental Management Consolidated Business Center", "Environmental Protection Agency", "Farm Credit Administration", "Federal Aviation Administration", "Federal Communications Commission", "Federal Deposit Insurance Corporation", "Federal Emergency Management Agency", "Federal Energy Regulatory Commission", "Federal Retirement Thrift Investment Board", "Fermi National Accelerator Laboratory", "First Responder Network Authority", "Health Resources and Services Administration", "Immigration and Customs Enforcement", "Internal Revenue Service", "International Trade Administration", "Job Corps", "Missile Defense Agency", "National Aeronautics and Space Administration", "National Capital Planning Commission", "National Credit Union Administration", "National Institutes of Health", "National Labor Relations Board", "National Oceanic and Atmospheric Administration", "National Park Service", "National Science Foundation", "National Telecommunications and Information Administration", "National Training Center", "Nuclear Regulatory Commission", "Office of Financial Research", "Office of Justice Programs", "Office of Personnel Management", "Office of Surface Mining and Reclamation Enforcement", "Peace Corps", "Pension Benefit Guaranty Corporation", "Pretrial Services Agency", "Savannah River National Lab", "Small Business Administration", "Social Security Administration", "State Office of the Inspector General", "Tennessee Valley Authority", "U.S. Election Assistance Commission", "U.S. International Development Finance Corporation", "U.S. Office of Special Counsel", "United States Agency for International Development", "United States Census Bureau", "United States Office of Government Ethics", "United States Patent and Trademark Office", "United States Secret Service", "United States Securities and Exchange Commission", "Warfighting Acquisition University" ], "agency_reuse": [ "" ], "service_description": "Microsoft Azure Commercial Cloud is an open and flexible cloud platform that enables customers to quickly build, test, deploy, and manage their applications, services, and product development across a network of Microsoft-managed datacenters within the United States. The Microsoft Azure Commercial Cloud exports savings to the customer by delivering the software, platform, and information technology infrastructure resources where and when it is needed via the Internet. \n\nMicrosoft Azure Commercial Cloud is used for building, deploying, and managing applications and services through a network of Microsoft-managed data centers. It provides Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS) and supports many different programming languages, tools, and frameworks, including both Microsoft-specific and third-party software and systems. The advantages of using Microsoft Azure Commercial Cloud include the ability to build large scalable applications serving large populations of users by scaling up or scaling down in relatively short periods of time.\nFederal agencies interested in collaborative continuous monitoring with Microsoft should reach out to: AzureCollabConMon@microsoft.com", "fedramp_msg": "Azure Commercial Cloud previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "AzureFedRAMP@microsoft.com", "website": "https://azure.microsoft.com/en-us/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Communication", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Finance", "Fleet Management" ], "service_last_90": [ "" ], "all_others": [ "AI Builder MiddleTier", "AI Builder Structured ML", "AI Builder Unstructured ML", "API Management", "Application Change Analysis", "Application Gateway", "Application Insights", "Arca CDS Instance Container Management Service", "Automation", "Azure AI Personalizer", "Azure AI Document Intelligence", "Azure AI Foundry Portal", "Azure AI Services", "Azure API for FHIR", "Azure Active Directory (AAD) Domain Services", "Azure Active Directory (AAD) Sync Fabric", "Azure Active Directory B2C - CPIM", "Azure Advisor", "Azure Analysis Services", "Azure App Configuration", "Azure Arc Enabled SQL Server", "Azure Arc for servers", "Azure Arc-enabled Kubernetes", "Azure Archive Storage", "Azure Bastion Hybrid Networking Services", "Azure Blueprints", "Azure Bot Service", "Azure Container Apps", "Azure Container Instances", "Azure Container Registry", "Azure Cosmos DB", "Azure DDoS Protection", "Azure DNS", "Azure Data Explorer", "Azure Data Movement", "Azure Data Share", "Azure DataBricks", "Azure Database Migration Service", "Azure Dedicated HSM", "Azure Event Grid", "Azure File Sync", "Azure Firewall", "Azure Firewall Manager", "Azure For Education", "Azure Front Door", "Azure Functions", "Azure Guest Configuration", "Azure HPC Cache", "Azure Immersive Reader", "Azure Import/Export", "Azure Information Protection", "Azure Internet Analyzer - MOI Service", "Azure IoT Central", "Azure IoT Hub", "Azure Key Vault", "Azure Kubernetes Service", "Azure Lab Services", "Azure Language Understanding", "Azure Load Testing", "Azure Lockbox", "Azure Machine Learning Service", "Azure Managed Grafana", "Azure Managed Services Azure Light House", "Azure Maps", "Azure Migrate", "Azure Monitor", "Azure Multi-factor Authentication (MFA)", "Azure NetApp Files", "Azure Open Datasets", "Azure OpenAI", "Azure Policy", "Azure Portal", "Azure Power Automate", "Azure Public IP", "Azure Red Hat OpenShift", "Azure Resource Graph", "Azure Resource Manager (ARM)", "Azure Search", "Azure Security Center", "Azure Security for IoT", "Azure Sentinel", "Azure Service Health", "Azure Service Manager (RDFE)", "Azure SignalR Service", "Azure Signup Portal", "Azure Site Recovery", "Azure Sphere", "Azure Spring Cloud", "Azure Stack Edge", "Azure Static Web Apps", "Azure Synapse Link for Dataverse", "Azure Update Manager", "Azure VM Image Builder and supporting infrastructure and platform services", "Azure Virtual Network NAT", "Azure Virtual WAN", "Azure Vmware Solution", "Azure Web PubSub", "Background Runtime (Async)", "Background Runtime (Jobs)", "Backup", "Batch", "Business Application Platform", "CAP Admin Deflection Service", "CAP Admin Sandbox Operations Service", "CAP Core Services", "CAP Package Deployer Service", "CDS API", "CDS SandBox", "CRM Activity Logging", "CRM Admin API", "CRM Cloud Provisioning Service", "CRM Cloud Scale Groups", "CRM Cloud Sync Service", "CRM First Party Integration Service", "CRM Global Discovery Service", "CRM Marketplace Service", "CRM Portal Provisioning (SiteWide)", "CRM Portals", "CRM Reports (SSRS)", "CRM Sitewide Servers", "CRM Trial Signup Service", "CRM Trusted Published System", "Chain Management", "Cloud Services", "Cloud Shell", "Common Data Service", "Computer Vision", "Container Platform", "Content Delivery Network", "Content Moderator", "Cost Management", "Custom Vision", "D365 Integrator App", "Data Factory", "Databox Datacenter Infra Service", "Databox Pod & Disk Service", "Dynamics 365 Commerce", "Dynamics 365 Contact Center", "Dynamics 365 Customer Engagement", "Dynamics 365 Customer Service", "Dynamics 365 Data Sync Framework", "Dynamics 365 Field Service", "Dynamics 365 Finance", "Dynamics 365 Fraud Protection", "Dynamics 365 Guides", "Dynamics 365 Intelligent Order Management", "Dynamics 365 Omni-channel Engagement Hub", "Dynamics 365 Relevance Search", "Dynamics 365 Sales", "Dynamics 365 Sales Insights", "Dynamics 365 Sales Professional", "Dynamics 365 Supply", "Event Hubs", "ExpressRoute", "Face", "Global Secure Access", "HDInsight", "Health Insights", "Healthcare Bot", "Intune", "Kepler User Management Service", "Load Balancer", "Log Analytics", "Logic Apps", "Managed Applications", "Marketplace Portal", "Microsoft 365 Defender", "Microsoft Azure Attestation", "Microsoft Azure Peering Service", "Microsoft Cloud App Security", "Microsoft Copilot Studio", "Microsoft Defender Threat Intelligence", "Microsoft Defender Vulnerability Management", "Microsoft Defender for Endpoint", "Microsoft Entra ID Free", "Microsoft Entra ID Governance", "Microsoft Entra ID PI and Microsoft Entra ID P2", "Microsoft Fabric", "Microsoft Graph", "Microsoft Pin Reset Service", "Microsoft PowerApps", "Microsoft Purview", "Microsoft Secure Score", "Microsoft Stream", "Microsoft Threat Experts", "MySQL", "Neptune License Management Service", "Network Watcher", "Network Watcher Traffic Analytics", "Notification Hubs", "PPAC Admin Analytics", "Postgre SQL", "Power BI", "Power Platform Admin Center", "Power Platform ISV Portal Platform", "PowerApps – UCI", "Private Link", "QnA Maker", "Redis Cache", "Resource Scheduling for Microsoft Dynamics", "SGX PCK Certificate Cache", "SQL Data Warehouse", "SQL Database", "SQL Server Stretch Database", "Service Bus", "Service Connector", "Service Fabric", "Spartan Data Platform Management", "Speech Services", "StorSimple Service", "Storage (Blobs, Disks, Files, Queues, Tables)", "Stream Analytics", "Text Analytics", "Traffic Manager", "Translator Text", "VPN Gateway", "Video Indexer", "Virtual Machines", "Virtual Machines Scale Sets", "Virtual Network", "Web Apps (App Service)", "Windows 10 IoT Core Services", "Windows Autopatch and Microsoft Managed Desktop", "Windows Update for Business reports", "Windows Virtual Desktop" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "MSO365MTA", "name": "Microsoft", "cloud_service_provider": "Microsoft", "cloud_service_offering": "Microsoft 365 Government Community Cloud & Supporting Services", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Microsoft%20Logo.png", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Certified to Agency Authorization In Process" }, { "date": "2026-07-20T21:35:48.487Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-07-01T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-07-20T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Kratos", "service_model": [], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Microsoft 365 (M365) Government Community Cloud (GCC) is a suite of cloud-hosted messaging and collaboration services to meet the unique and evolving requirements of the United States Federal, State, Local, and Tribal governments, as well as contractors holding or processing data on behalf of the US Government. These cloud-based services are designed to provide organizations with streamlined communication, high availability, comprehensive security, and simplified information technology (IT) management. M365 GCC provides the interactivity of on-premises client and server applications with the flexibility and scalability of web-based services. M365 GCC leverages Azure Government as the IaaS/PaaS for the underlying infrastructure and hardware. Therefore, M365 GCC relies on Azure Government-inherited services. For more information on these Azure Government services, refer to the Azure Government ATO package.\nFederal agencies interested in collaborative continuous monitoring with Microsoft should reach out to: M365CollabConMon@microsoft.com", "fedramp_msg": "", "sales_email": "", "security_email": "O365FedRAMP@microsoft.com", "website": "https://www.microsoft.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1824057433", "name": "Microsoft", "cloud_service_provider": "Microsoft", "cloud_service_offering": "Microsoft 365 Government Community Cloud-High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Microsoft%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-01-10T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-12-22T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-12-26T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 11, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-01-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-12-22T20:00:00.000Z", "cert_date": "2024-12-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-12-26T20:00:00.000Z", "annual_assessment": "2011-07-31T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2035056105", "csp": "Bluescape", "cso": "Bluescape with n8n for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1823368486", "csp": "Cisco AppDynamics", "cso": "AppDynamics GovAPM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603307884", "csp": "e-Builder, A Trimble Company", "cso": "Trimble Unity Construct Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335051964", "csp": "Keyfactor", "cso": "Keyfactor for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406651384", "csp": "Precisely Software", "cso": "Data Integrity Suite for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2516365096", "csp": "Procore Technologies, Inc", "cso": "Procore for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Justice", "Department of Veterans Affairs", "Executive Office for United States Attorneys", "Federal Energy Regulatory Commission", "United States Marshals Service" ], "agency_reuse": [ "22-002-08", "22-007", "22-007-04", "22-016-01", "22-025", "22-042" ], "service_description": "Microsoft 365 (M365) Government Community Cloud-High (GCC-H) is a product family of cloud-hosted messaging and collaboration services. These cloud-based services are designed to provide organizations with streamlined communication, high availability, comprehensive security, and simplified information technology (IT) management. M365 GCC-H provides the interactivity of on-premises client and server applications with the flexibility and scalability of web-based services. M365 leverages Azure as the IaaS/PaaS for the underlying infrastructure and hardware. Therefore, M365 relies on Azure-inherited services. For more information on these Azure services, refer to the Azure ATO package.\nFederal agencies interested in collaborative continuous monitoring with Microsoft should reach out to: M365CollabConMon@microsoft.com", "fedramp_msg": "N/A", "sales_email": "", "security_email": "O365FedRAMP@microsoft.com", "website": "https://www.microsoft.com/microsoft-365/government", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Data Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "Containers on Substrate-Managed Intelligent Clusters (COSMIC) (including Microsoft Search in Bing (MSB), Meeting Intelligence (MEET), Universal Print, Universal Print Volume Add-on, Profile Card (aka Loki), Hauk, Thor)", "Customer Insight and Analysis (CIA) (A.K.A. Usage Reports)", "Exchange Online (EXO) (including Exchange Kiosk (2 GB mailbox), Exchange Plan 1 (50 GB mailbox), Exchange Plan 2 (100 GB mailbox), Calendar, Auto-expanding email archive, Exchange Online Protection, Public folder mailboxes, Resource mailboxes, Inactive mailboxes, Microsoft Bookings, Microsoft Search, Personal insights in Teams, Customer Key, Personal Data Encryption, Customer Lockbox, Exchange Archiving)", "Microsoft 365 Copilot", "Microsoft Purview and MDO (including Adoption Score, Compliance Management, Manual retention labels, Basic org-wide or location-wide retention policies, Rules-based automatic retention policies, Machine Learning-based retention, Teams message retention policies, Records Management, Basic Message Encryption, Advanced Message Encryption, DLP for emails & files, DLP for Teams chat, Endpoint DLP, Microsoft Defender for Office 365 Plan 2 , Safe Documents , eDiscovery (Standard) (including Hold and Export) , Litigation Hold , eDiscovery (Premium) , Audit (Standard) , Audit (Premium) , Microsoft Purview Insider Risk Management, Communication Compliance, Information Barriers, Microsoft Defender Suite GCCH, Microsoft Purview Suite GCCH, Microsoft 365 G5 Info Protection and Governance, Microsoft 365 G5 Insider Risk Management, Microsoft Purview Insider Risk Management forensic evidence, Microsoft 365 G5 eDiscovery and Audit, Microsoft Defender Suite FLW for GCCH, Microsoft 365 Purview Suite FLW for GCCH, Microsoft Defender + Purview Suite FLW for GCCH, Microsoft 365 F5 Information Protection and Governance, Microsoft 365 F5 Insider Risk Management, Microsoft 365 F5 eDiscovery and Audit, Microsoft Defender for Office 365 Plan 1, Microsoft Defender for Office 365 Plan 2, Premium Assessments add-on for Compliance Manager, Priva Privacy Risk Management, Priva Subject Rights Requests, Microsoft Purview Data Loss Prevention (for email and files), 10-year Audit Log Retention)", "Microsoft Teams (MS Teams) (including Unlimited chat, Online meetings, Live Events, Webinars, Screen sharing and custom backgrounds, Record meetings, Priority notifications, Teams Phone Standard (via Direct Routing), Audio Conferencing (via Direct Routing), \"In-person events, Hybrid RSVP, Places card, , Work plans, Workplace presence\", Places Explorer, Places Finder, Teams Premium, Audio Conferencing (Direct Routing), Microsoft Teams Shared Space License", "ObjectStore", "Office 365 Suite User Experience (SUE) (including Admin Center to Administer M365, manage core service settings from M365, Windows PowerShell to Manage M365)", "Office Intelligent Services (IS) (including Install apps on up to 5 PCs/Mac + 5 tablets + 5 smartphones, Microsoft Forms, Microsoft Planner, Microsoft To Do, Shared computer activation for Microsoft 365 apps)", "Office Service Infrastructure (OSI)", "Office for Web (including Microsoft 365 for the web, Visio for the web, Microsoft Editor premium features, Multilingual user interface for Microsoft 365 apps)", "OneDrive SharePoint (ODSP) (including SharePoint Kiosk (2 GB OneDrive storage), SharePoint Plan 1 (10GB Storage, 1 TB OneDrive storage), SharePoint Plan 2 (10GB storage, 1+ TB OneDrive storage), Microsoft Lists, SharePoint Advanced Management, Extra Graph Connector Capacity, Office 365 Extra File Storage)", "Profile Data Roaming Service (PDRS)", "Substrate Intelligence Platform (SIP)", "Terminal Service Gateway (TSG)", "Torus", "Windows 365 (W365)" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "MSO365MT", "name": "Microsoft", "cloud_service_provider": "Microsoft", "cloud_service_offering": "Microsoft 365 Government Community Cloud & Supporting Services", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Microsoft%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-05-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2014-11-20T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2015-08-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 98, "reuse": 452, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2014-05-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2014-11-13T20:00:00.000Z", "cert_date": "2014-11-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "HHS Office of the Inspector General", "fedramp_auth": "2014-11-20T20:00:00.000Z", "annual_assessment": "2011-07-31T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2000174962", "csp": "Abbott, Inc.", "cso": "LibreView for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2425960757", "csp": "Abnormal AI ", "cso": "Abnormal AI for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2106555313", "csp": "AchieveIt Online, LLC", "cso": "AchieveIt", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2031936863", "csp": "Armis Federal LLC", "cso": "Armis FedRAMP Edition (AFE)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2031222637", "csp": "Aurigo Software Technologies, Inc.", "cso": "Masterworks Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2427142353", "csp": "AutoRABIT Holding, Inc.", "cso": "AutoRABIT for Public Sector - CodeScan, Guard, & ARMOR", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2410056366", "csp": "Avature Federal Platform", "cso": "Avature Limited", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2025827270", "csp": "AvePoint Inc.", "cso": "AvePoint Online Services for US Government (AOS-UG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2333756970", "csp": "Axiad IDS Inc.", "cso": "Axiad Conductor", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2401047002", "csp": "Axonius Federal Systems", "cso": "Axonius Asset Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2035056105", "csp": "Bluescape", "cso": "Bluescape with n8n for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2518163100", "csp": "Cisco", "cso": "Spaces for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1511207635", "csp": "Cisco Systems Inc.", "cso": "Webex for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1605107897", "csp": "Cisco Systems Inc.", "cso": "Cisco Cloudlock for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2523656707", "csp": "Cisco Systems, Inc.", "cso": "Cisco ThousandEyes for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2306445868", "csp": "Cohesity", "cso": "Cohesity Cloud Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234550858", "csp": "Concur Technologies, Inc.", "cso": "Concur Cloud for Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029183077", "csp": "Cority Software Inc.", "cso": "CorityOne", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1509217359", "csp": "Cornerstone OnDemand", "cso": "Cornerstone Galaxy", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416856649", "csp": "Creative Veteran Productions", "cso": "Federal Immersive Learning Management System (FED-ILMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2402468053", "csp": "Darktrace Federal Inc.", "cso": "Cyber AI Mission Defense and Email Protection", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1834740315", "csp": "Databricks, Inc.", "cso": "Databricks on AWS US East/West", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2419537309", "csp": "DocketScope, Inc.", "cso": "DocketScope®", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2016131254", "csp": "Dynatrace", "cso": "Dynatrace Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2023601671", "csp": "eGain Corporation", "cso": "eGain Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2311952621", "csp": "Ernst & Young LLP", "cso": "EY Grants Accelerator", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1311252651", "csp": "ESRI", "cso": "Esri Managed Cloud Services Advanced Plus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1811073663A", "csp": "ESRI", "cso": "ArcGIS Online (AGO)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234334891", "csp": "Glassbeam, Inc.", "cso": "Glassbeam Clinsights", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2035860874", "csp": "Global Telehealth Services, inc.", "cso": "GTS VirtualHealth Platform (GTS-VP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2417469779", "csp": "IBM", "cso": "IBM Envizi ESG Reporting", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2029331613", "csp": "Informatica LLC", "cso": "Informatica Intelligent Cloud Services (IICS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1821933307", "csp": "Innovest Systems, LLC", "cso": "Trust & Wealth Management Solutions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2027958176", "csp": "Issio Solutions, Inc.", "cso": "Issio Information System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324452533", "csp": "Joint Commission Resources", "cso": "Tracers with AMP®", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2032565438", "csp": "Kahua, Inc.", "cso": "Kahua Government Network", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2118080669", "csp": "Knightscope, Inc.", "cso": "Knightscope Autonomous Security Robot (Knightscope ASR)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2422436886", "csp": "Laerdal Labs D.C.", "cso": "Laerdal -- SimCapture Cloud Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2129953050", "csp": "Manhattan Associates, Inc.", "cso": "Manhattan Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2225648574", "csp": "Mathematica Inc.", "cso": "Mathematica Cloud Support System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1902240018", "csp": "MDRC", "cso": "SPROUT", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2126176344", "csp": "MicroStrategy", "cso": "MicroStrategy Cloud for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1711546389", "csp": "Monster Government Solutions", "cso": "Monster Hiring Management Enterprise (MHME)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1508127183", "csp": "NetComm", "cso": "Beacon", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134455708", "csp": "Nucleus Security, Inc", "cso": "Nucleus for Government (NucleusGov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2100059668", "csp": "OnSolve LLC", "cso": "OnSolve Platform for Critical Event Management", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2524416446", "csp": "Orbus Software", "cso": "OrbusInfinity Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2202555908", "csp": "Pexip Inc.", "cso": "Pexip Government Cloud (PGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2432218524", "csp": "Power Settlements Consulting and Software, LLC (PSCS), a subsidiary of Yes Energy, LLC", "cso": "PowerCore™ (PC-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2224752400", "csp": "Privoro LLC", "cso": "Privoro Fulcrum Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2322855016", "csp": "ProjectTeam, Inc.", "cso": "ProjectTeam for Government (Construction Project and Program Management)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125653037", "csp": "Qlik Technologies Inc.", "cso": "Qlik Cloud Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2418039495", "csp": "ScienceLogic, Inc.", "cso": "ScienceLogic Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2214346691", "csp": "Secunetics, Inc.", "cso": "Gobo Framework (Gobo)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919071020A", "csp": "SentinelOne", "cso": "SentinelOne Singularity Platform High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2000945223", "csp": "Software AG Government Solutions", "cso": "ARIS Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1730842236", "csp": "T-Metrics, Inc.", "cso": "T-Metrics Cloud Contact Center (TCCC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2100740435", "csp": "Tango", "cso": "Tango", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2110342613", "csp": "Tanium", "cso": "Tanium Cloud for US Government (TC-USG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226231529", "csp": "Trend Micro Inc.", "cso": "Trend Vision One for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2110836406", "csp": "Trustwave Government Solutions", "cso": "Trustwave Fusion", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421252644", "csp": "Varonis", "cso": "Varonis DatAdvantage Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421252636", "csp": "Varonis", "cso": "Varonis Data Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1924344515", "csp": "Wellspring Worldwide, Inc.", "cso": "Wellspring Tech Transfer and IP Management Suite (WTIMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2207643307", "csp": "Wolters Kluwer", "cso": "TeamMate FedRAMP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Alcohol and Tobacco Tax and Trade Bureau", "American Battle Monuments Commission", "Argonne National Laboratory", "Brookhaven Site Office", "Bureau of Economic Analysis", "Centers for Disease Control and Prevention", "Commodity Futures Trading Commission", "Consumer Financial Protection Bureau", "Consumer Product Safety Commission", "Corporation for National & Community Service", "Council of the Inspectors General on Integrity and Efficiency", "Court Services and Offender Supervision Agency", "Customs and Border Protection", "DHS Headquarters", "Defense Nuclear Facilities Safety Board", "Department of Agriculture", "Department of Commerce", "Department of Education", "Department of Energy", "Department of Housing and Urban Development", "Department of Justice", "Department of Labor", "Department of State", "Department of Transportation", "Department of the Interior", "Environmental Management Consolidated Business Center", "Environmental Protection Agency", "FHFA Office of the Inspector General", "Farm Credit Administration", "Federal Aviation Administration", "Federal Communications Commission", "Federal Deposit Insurance Corporation", "Federal Energy Regulatory Commission", "Federal Housing Finance Agency", "Federal Maritime Commission", "Federal Reserve System", "Federal Retirement Thrift Investment Board", "Federal Trade Commission", "Fermi National Accelerator Laboratory", "First Responder Network Authority", "Food and Drug Administration", "Golden Field Office", "HHS Office of the Inspector General", "Health Resources and Services Administration", "Immigration and Customs Enforcement", "Indian Health Services", "Internal Revenue Service", "International Trade Administration", "Millennium Challenge Corporation", "National Aeronautics and Space Administration", "National Capital Planning Commission", "National Endowment for the Arts", "National Institute of Standards and Technology", "National Institutes of Health", "National Labor Relations Board", "National Nuclear Security Administration / Kansas City Field Office", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "National Science Foundation", "National Telecommunications and Information Administration", "National Training Center", "Nuclear Regulatory Commission", "Oak Ridge National Laboratory", "Office of Financial Research", "Office of Justice Programs", "Office of the Comptroller of the Currency", "Pension Benefit Guaranty Corporation", "Postal Regulatory Commission", "Pretrial Services Agency", "Savannah River National Lab", "Small Business Administration", "Social Security Administration", "Southwestern Power Administration", "State Office of the Inspector General", "Surface Transportation Board", "Tennessee Valley Authority", "Transportation Security Administration", "Treasury Inspector General for Tax Administration", "U.S. Election Assistance Commission", "U.S. Office of Special Counsel", "United States Census Bureau", "United States Equal Employment Opportunity Commission", "United States International Trade Commission", "United States Mint", "United States Office of Government Ethics", "United States Patent and Trademark Office", "United States Secret Service", "United States Securities and Exchange Commission", "United States Trade and Development Agency", "Universal Service Administrative Company", "Warfighting Acquisition University" ], "agency_reuse": [ "" ], "service_description": "Microsoft 365 (M365) Government Community Cloud (GCC) is a suite of cloud-hosted messaging and collaboration services to meet the unique and evolving requirements of the United States Federal, State, Local, and Tribal governments, as well as contractors holding or processing data on behalf of the US Government. These cloud-based services are designed to provide organizations with streamlined communication, high availability, comprehensive security, and simplified information technology (IT) management. M365 GCC provides the interactivity of on-premises client and server applications with the flexibility and scalability of web-based services. M365 GCC leverages Azure Government as the IaaS/PaaS for the underlying infrastructure and hardware. Therefore, M365 GCC relies on Azure Government-inherited services. For more information on these Azure Government services, refer to the Azure Government ATO package.\nFederal agencies interested in collaborative continuous monitoring with Microsoft should reach out to: M365CollabConMon@microsoft.com", "fedramp_msg": "• Microsoft 365 (M365, formerly Office 365) has updated the FedRAMP Marketplace to reflect the product name M365 Government Community Cloud (GCC) rather than MultiTenant (MT). The intent of this update is to align the name on the marketplace with the M365 sales process and the FedRAMP package. The service boundary, control scope, and included applications as defined in the FedRAMP package have not changed. Nor is there a change to the underlying infrastructure and inventory. To be covered by the GCC FedRAMP authorization, customers must purchase a GCC SKU.\n\n• To determine what M365 products you are using, you can reference your contract documentation or visit the Admin Center for your M365 tenant and check Settings > Org Settings > Data Location.\n\n• If you have further questions, please contact M365GovQnA@microsoft.com and cc: your Microsoft account team.", "sales_email": "", "security_email": "O365FedRAMP@microsoft.com", "website": "https://www.microsoft.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Data Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "Cloud Input Intelligence (CII)", "Containers on Substrate-Managed Intelligent Clusters (COSMIC) (including Universal Print, Universal Print Volume Add-on)", "Customer Insight and Analysis (CIA)", "Exchange Online (EXO) (including Exchange Kiosk (2 GB mailbox) , Exchange Plan 1 1 (50 GB mailbox + 50 GB archive), Exchange Plan 2 (100 GB mailbox + up to 1.5 TB archive), Calendar , Auto-expanding email archive , Built-in security add-on for cloud mailboxes, Public folder mailboxes , Resource mailboxes , Inactive mailboxes , Microsoft Shifts, Microsoft Bookings, Microsoft Search, Viva Insights app in Teams, Personal insights and experiences, Premium personal insights and experiences, Personal Data Encryption, Customer Key, Microsoft 365 Groups , Customer Lockbox, Viva Insights, Exchange Archiving)", "IDEAs Personalization Service – RunTime (IPS-RT)", "Microsoft 365 Copilot", "Microsoft 365 Suite User Experience (SUE) (including Admin Center to Administer M365, Manage core service settings from M365, Windows PowerShell to Manage M365)", "Microsoft Purview and MDO (including Adoption Score, Secure Score, Compliance Management, Manual retention labels, Basic org-wide or location-wide retention policies, Rules-based automatic retention policies, Machine Learning-based retention, Teams message retention policies, Records Management, DLP for emails & files, DLP for Teams chat, Endpoint DLP, Basic Message Encryption, Advanced Message Encryption, Microsoft Defender for Office 365 Plan 2 , Safe Documents , eDiscovery (Standard) (including Hold and Export) , Litigation Hold , eDiscovery (Premium) , Audit (Standard) , Audit (Premium) , Microsoft Purview Insider Risk Management, Communication Compliance, Information Barriers, Microsoft Defender Suite GCC, Microsoft Purview Suite GCC, Microsoft 365 G5 Info Protection and Governance, Microsoft 365 G5 Insider Risk Management, Microsoft Purview Insider Risk Management forensic evidence, Microsoft 365 G5 eDiscovery and Audit, Microsoft Defender Suite FLW for GCC, Microsoft Purview Suite FLW for GCC, Microsoft Defender + Purview Suite FLW for GCC, Microsoft 365 F5 Information Protection and Governance, Microsoft 365 F5 Insider Risk Management, Microsoft 365 F5 eDiscovery and Audit, Microsoft Defender for Office 365 Plan 1, Microsoft Defender for Office 365 Plan 2, Premium Assessments add-on for Compliance Manager, Priva Privacy Risk Management, Priva Subject Rights Requests, Microsoft Purview Data Loss Prevention (for email and files), 10-year Audit Log Retention)", "Microsoft Teams (MSTeams) (including Microsoft Teams, Unlimited chat, Online meetings, Live Events, Webinars, Screen sharing and custom backgrounds, Record meetings, Priority notifications, Audio Conferencing, In-person events, Hybrid RSVP, Places card, Work plans, Workplace presence, Places Explorer, Places Finder, Teams Premium, Audio Conferencing with Select Dial Out, Extended Dial Out Minutes to US and Canada , Teams Phone Standard, Domestic Calling Plan, Domestic Calling 120 Minute Plan, International Calling Plan (includes Domestic Plan), Teams Phone with Calling Plan, Microsoft Teams Shared Space License)", "ObjectStore", "Office Intelligent Services (IS) (including Install apps on up to 5 PCs/Mac + 5 tablets + 5 smartphones, Create and share Microsoft Loop components and pages, Contribute to Loop components, pages and workspaces , Microsoft Forms, Microsoft Planner, Microsoft To Do, Shared computer activation for Microsoft 365 apps)", "Office Service Infrastructure (OSI)", "Office for Web (including Microsoft 365 for the web, Visio for the web, Microsoft Editor premium features, Multilingual user interface for Microsoft 365 apps)", "OneDrive SharePoint (ODSP) (including SharePoint Kiosk (2 GB OneDrive storage) , SharePoint Plan 1 (10 GB storage, 1 TB OneDrive storage), SharePoint Plan 2 (10 GB storage, 1+ TB OneDrive storage), Microsoft Lists, SharePoint Advanced Management, Microsoft 365 Extra File Storage, Viva Connections)", "Profile Data Roaming Service (PDRS)", "Substrate Intelligence Platform (SIP)", "Terminal Service Gateway (TSG)", "Torus", "Windows 365 (W365)" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1603087869", "name": "Microsoft", "cloud_service_provider": "Microsoft", "cloud_service_offering": "Azure Government (includes Dynamics 365)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Microsoft%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-03-19T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2020-04-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 69, "reuse": 496, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2019-03-19T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2020-04-29T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-04-29T20:00:00.000Z", "annual_assessment": "2011-04-17T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "IaaS", "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2425960757", "csp": "Abnormal AI ", "cso": "Abnormal AI for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2214062312", "csp": "Actsoft, Inc", "cso": "Actsoft Workforce Manager for Gov.", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2108360349", "csp": "Adobe", "cso": "Adobe Acrobat Sign for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226146186", "csp": "Agile Fleet", "cso": "FleetCommander", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2322741394", "csp": "AgileRank", "cso": "Agile RTLS Suite (A-RTLS)", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2529113288", "csp": "Archive360 platform", "cso": "Archive360 Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2401839361", "csp": "Ask Sage, Inc.", "cso": "Ask Sage", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1703752011", "csp": "Axon", "cso": "US Axon FedCloud - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2430123303", "csp": "Aztec Software", "cso": "Aztec Learning System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918442180", "csp": "Bizagi Corp.", "cso": "Bizagi Cloud for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1302271924A", "csp": "BlackBerry", "cso": "BlackBerry Cloud - AtHoc Services for Government (High)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1506076709", "csp": "Blackboard", "cso": "Blackboard LMS", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2017462201", "csp": "Booz Allen Hamilton", "cso": "Supply Chain Master Catalog (SCMC) Government Cloud Solution", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2421035110", "csp": "Cellebrite", "cso": "Cellebrite Government Cloud (CGC)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2518163100", "csp": "Cisco", "cso": "Spaces for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1511207635", "csp": "Cisco Systems Inc.", "cso": "Webex for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2012534927", "csp": "Cisco Systems, Inc.", "cso": "Cisco Catalyst SD-WAN for Government (SDWAN-G)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1819254092", "csp": "Citrix", "cso": "Citrix for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029183077", "csp": "Cority Software Inc.", "cso": "CorityOne", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1206111371", "csp": "CoSo Cloud, LLC.", "cso": "Knox Systems", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416856649", "csp": "Creative Veteran Productions", "cso": "Federal Immersive Learning Management System (FED-ILMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000951694", "csp": "DLH Corporation", "cso": "DLH Infinibyte Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814557199", "csp": "DNAnexus, Inc.", "cso": "DNAnexus Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2023601671", "csp": "eGain Corporation", "cso": "eGain Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2330135650", "csp": "Eptura, Inc", "cso": "Archibus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2311952621", "csp": "Ernst & Young LLP", "cso": "EY Grants Accelerator", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2128462521", "csp": "Juvare, LLC", "cso": "Juvare Federal Cloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2032565438", "csp": "Kahua, Inc.", "cso": "Kahua Government Network", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335051964", "csp": "Keyfactor", "cso": "Keyfactor for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2235154356", "csp": "Lastwall Corp", "cso": "IDCommand", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2235965777", "csp": "Mark43, Inc.", "cso": "Mark43 Public Safety Platform (PSP)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1610037949", "csp": "mLINQS", "cso": "mLINQS Hosting Service", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2118055930", "csp": "Motorola Solutions", "cso": "Motorola Solutions Federal Cloud (MSFC)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2028977567", "csp": "NetDocuments Software, Inc.", "cso": "NetDocuments Document Management System (DMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1721059275A", "csp": "OneStream Software", "cso": "OneStream Cloud - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2524416446", "csp": "Orbus Software", "cso": "OrbusInfinity Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2301844932", "csp": "Orca Security", "cso": "Orca Cloud Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2315464863", "csp": "Palantir Technologies", "cso": "Palantir Federal Cloud Service – Supporting Services (PFCS-SS)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2434554673", "csp": "Palantir Technologies Inc.", "cso": "Palantir Federal Cloud Service", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2432218524", "csp": "Power Settlements Consulting and Software, LLC (PSCS), a subsidiary of Yes Energy, LLC", "cso": "PowerCore™ (PC-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406651384", "csp": "Precisely Software", "cso": "Data Integrity Suite for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1403283529A", "csp": "Project Hosts Inc.", "cso": "GSS One - Azure", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2125653037", "csp": "Qlik Technologies Inc.", "cso": "Qlik Cloud Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1606097904A", "csp": "Qualtrics, LLC", "cso": "Qualtrics XM Platform - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1605027892", "csp": "QuestionMark", "cso": "Questionmark Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2004753002", "csp": "Relativity ODA LLC", "cso": "RelativityOne Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1931476240", "csp": "Rescale", "cso": "Rescale Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102652499", "csp": "RSA Security LLC", "cso": "RSA® ID Plus for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234256499", "csp": "Rubrik", "cso": "Rubrik Security Cloud - Government (RSC-G)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919071020A", "csp": "SentinelOne", "cso": "SentinelOne Singularity Platform High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2028958787", "csp": "Signature Performance, Inc.", "cso": "ClaimsXM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603077867", "csp": "SMX (Formerly Smartronix)", "cso": "Elevate Intelligent Automation Platform (IAP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1809360202A", "csp": "Snowflake Inc.", "cso": "The Data Cloud on Azure Government (High)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1901136437", "csp": "Synergetics Incorporated", "cso": "Open Federal Logistics Information System (OpenFLIS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1912051231", "csp": "TechTrend, Inc.", "cso": "Federal GovCloud (FGC) DevSecOps", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1602057825A", "csp": "TRAPWIRE", "cso": "TRAPWIRE Threat Detection and Analysis System ", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2226231529", "csp": "Trend Micro Inc.", "cso": "Trend Vision One for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2110836406", "csp": "Trustwave Government Solutions", "cso": "Trustwave Fusion", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2132958724", "csp": "UiPath", "cso": "Automation Cloud Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2415334644", "csp": "United States Department of Agriculture", "cso": "AgCloud Managed Platform Services (AMPS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1804557312", "csp": "Veritone, Inc.", "cso": "Veritone Intelligent Digital Evidence Management System (iDEMS) for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1924344515", "csp": "Wellspring Worldwide, Inc.", "cso": "Wellspring Tech Transfer and IP Management Suite (WTIMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2401742096", "csp": "WillCo Tech", "cso": "CyberSTAR™", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1720454205", "csp": "Zscaler, Inc.", "cso": "Zscaler Internet Access - Government (Secure Web Gateway - vTIC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2227062482", "csp": "Zscaler, Inc.", "cso": "Zscaler Internet Access - Government (Secure Web Gateway - vTIC) - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2219763604", "csp": "Zscaler, Inc.", "cso": "Zscaler Private Access - Government (Zero Trust Exchange - VPN Replacement)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families", "Administrative Office of the United States Courts", "Alcohol and Tobacco Tax and Trade Bureau", "Antitrust Division", "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Bureau of Indian Affairs", "Bureau of Industry and Security", "Bureau of Labor Statistics", "Bureau of the Fiscal Service", "Centers for Medicare & Medicaid Services", "Cybersecurity & Infrastructure Security Agency", "DOC Office of Inspector General", "Defense Information Systems Agency", "Department of Agriculture", "Department of Education", "Department of Health and Human Services", "Department of Housing and Urban Development", "Department of Justice", "Department of Labor", "Department of State", "Department of Transportation", "Department of Veterans Affairs", "Department of the Treasury", "Environmental Protection Agency", "FHFA Office of the Inspector General", "Federal Deposit Insurance Corporation", "Federal Emergency Management Agency", "Federal Energy Regulatory Commission", "Federal Reserve System", "Federal Student Aid", "Financial Crimes Enforcement Network", "First Responder Network Authority", "Food and Drug Administration", "Health Resources and Services Administration", "Immigration and Customs Enforcement", "Internal Revenue Service", "Justice Management Division", "National Aeronautics and Space Administration", "National Institute of Standards and Technology", "National Nuclear Security Administration", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "National Oceanic and Atmospheric Administration", "National Park Service", "Nuclear Regulatory Commission", "Office of Justice Programs", "Office of Personnel Management", "Pension Benefit Guaranty Corporation", "Small Business Administration", "State Office of the Inspector General", "Strategic Petroleum Reserve", "Tennessee Valley Authority", "U.S. Office of Special Counsel", "United States Agency for International Development", "United States Coast Guard", "United States Equal Employment Opportunity Commission", "United States International Trade Commission", "United States Patent and Trademark Office", "United States Securities and Exchange Commission", "Universal Service Administrative Company" ], "agency_reuse": [ "" ], "service_description": "Microsoft Azure Government is an open and flexible cloud platform that enables customers to quickly build, test, deploy, and manage their applications, services, and product development across a network of Microsoft-managed datacenters within the United States. The Microsoft Azure Government exports savings to the customer by delivering the software, platform, and information technology infrastructure resources where and when it is needed via the Internet. \n\nMicrosoft Azure Government is used for building, deploying, and managing applications and services through a network of Microsoft-managed data centers. It provides Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS) and supports many different programming languages, tools, and frameworks, including both Microsoft-specific and third-party software and systems. The advantages of using Microsoft Azure Government include the ability to build large scalable applications serving large populations of users by scaling up or scaling down in relatively short periods of time.\nFederal agencies interested in collaborative continuous monitoring with Microsoft should reach out to: AzureCollabConMon@microsoft.com", "fedramp_msg": "Azure Government (includes Dynamics 365) previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "AzureFedRAMP@microsoft.com", "website": "https://azure.microsoft.com/en-us/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Communication", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Finance", "Fleet Management" ], "service_last_90": [ "" ], "all_others": [ "API Management", "Application Gateway", "Automation", "Azure AI - QnA Maker", "Azure API for FHIR", "Azure Active Directory (AAD) Free", "Azure Active Directory (AAD) Premium P1 + P2", "Azure Active Directory Domain Services", "Azure Advanced Threat Protection", "Azure Advisor", "Azure Analysis Services", "Azure App Configuration", "Azure Arc-enabled Kubernetes", "Azure Arc-enabled Servers", "Azure Archive Storage", "Azure Backup", "Azure Bastion", "Azure Blueprints", "Azure Bot Service", "Azure CXP Nomination Portal", "Azure Container Instances", "Azure Content Delivery Network", "Azure Cosmos DB", "Azure DDOS Protection", "Azure DNS", "Azure Data Box Edge", "Azure Data Explorer", "Azure Data Share", "Azure Database Migration Service", "Azure Database for MySQL", "Azure Database for PostgreSQL", "Azure Dedicated HSM", "Azure DevTest Labs", "Azure File Sync", "Azure Firewall", "Azure Firewall Manager", "Azure Front Door", "Azure HPC Cache", "Azure Import/Export", "Azure Information Protection", "Azure IoT Hub", "Azure Key Vault", "Azure Kubernetes Configuration Management", "Azure Kubernetes Service", "Azure Lab Services", "Azure LockBox", "Azure Machine Learning", "Azure Managed Applications", "Azure Managed Services – Azure Light House", "Azure Maps", "Azure Migrate", "Azure Monitor", "Azure NetApp Files", "Azure Policy", "Azure Portal", "Azure Private Link", "Azure Public IP", "Azure Red Hat OpenShift", "Azure Resource Graph", "Azure Resource Manager (ARM)", "Azure Resource Mover", "Azure Route Server", "Azure Search", "Azure Security Center", "Azure Security for IoT", "Azure Sentinel", "Azure Service Health", "Azure Service Manager (RDFE)", "Azure Sign Up Portal", "Azure SignalR Service", "Azure Site Recovery", "Azure Stack Bridge", "Azure Video Indexer", "Azure Virtual WAN", "Batch", "Cloud Services", "Cloud Shell", "Container Registry", "Cost Management", "D365 Integrator APP", "Data Factory", "Databox Datacenter Infra Service", "Databox Disk and Pod Service", "Databricks", "Dynamics 365", "Dynamics 365 Athena – CDS to Azure Data Lake", "Dynamics 365 Customer Engagement", "Dynamics 365 Customer Insights", "Dynamics 365 Customer Service", "Dynamics 365 Field Service", "Dynamics 365 Finance", "Dynamics 365 Forms Pro", "Dynamics 365 Project Service Automation", "Dynamics 365 Sales", "Dynamics 365 Service Omni-Channel Engagement Hub", "Dynamics 365 Supply Chain Mangement", "Event Grid", "Event Hubs", "ExpressRoute", "Functions", "Guest Configuration", "HDInsight", "Intune", "Load Balancer", "Log Analytics", "Logic Apps", "Microsoft 365 Defender", "Microsoft Azure Government Management Portal", "Microsoft Cloud App Security", "Microsoft Graph", "Microsoft Peering Service", "Microsoft PowerApps", "Microsoft Stream", "NM Agent", "Network Datapath", "Network Watcher", "Network Watcher-Traffic Analytics", "Notification Hubs", "Planned Maintenance", "Power BI", "Power BI Embedded", "Power Query Online", "Push Agent V2", "Redis Cache", "Regional Network Manager", "SDN PubSub Service", "SQL Data Warehouse", "SQL Database", "SQL Server Stretch Database", "Service Fabric", "Services Bus", "Speech Services", "StorSimple", "Storage (Blobs, Disks, Files, Queues, Tables)", "Stream Analytics", "Traffic Manager", "VPN Gateway", "Virtual Machines", "Virtual Machines Scale Sets (VMSS)", "Virtual NAT", "Virtual Network", "Virtual Network Directory Service", "Web Application Firewall", "Web Apps (App Service) Windows Virtual Desktop", "AI Builder", "Azure AI - Computer Vision", "Azure AI - Container Platform", "Azure AI - Content Moderator", "Azure AI - Custom Vision", "Azure AI - Face", "Azure AI - Form Recognizer", "Azure AI - Language Understanding", "Azure AI - Personalizer", "Azure AI - Text Analytics", "Azure AI - Translator Text", "Azure AI Content Safety", "Azure Arc Enabled SQL Server", "Azure Container Apps", "Azure Load Testing", "Azure Managed Grafana", "Azure Multi-factor Authentication (MFA)", "Azure OpenAI", "Azure Power Automate", "Azure SQL Managed Instance", "Azure Update Manager", "Azure VMWare Solution", "Azure Web PubSub", "Cloud Services Extended Support", "Dynamics 365 Contact Center", "Dynamics 365 Project Operations", "Fluid Relay Service", "Microsoft Azure Attestation", "Microsoft Copilot Studio", "Microsoft Defender Vulnerability Management", "Microsoft Defender for Endpoint", "Microsoft Digital Contact Center Platform", "Microsoft Entra ID Governance", "Microsoft Foundry Portal (formerly Azure AI Portal)", "Microsoft Purview", "Microsoft Secure Score", "SQL Server on Azure Virtual Machines" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2126176344", "name": "MicroStrategy", "cloud_service_provider": "MicroStrategy", "cloud_service_offering": "MicroStrategy Cloud for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/MicroStrategy%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-09-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-07-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-11-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-09-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-07-06T20:00:00.000Z", "cert_date": "2022-11-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-11-17T20:00:00.000Z", "annual_assessment": "2011-07-14T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Health and Human Services", "Department of Labor" ], "agency_reuse": [ "" ], "service_description": "MicroStrategy is the world’s top-rated platform for enterprise analytics. The MicroStrategy Intelligence Platform offers a full range of trusted, modern BI experiences, and is designed to help departments and agencies build data-driven cultures and make faster, smarter decisions. Built for performance at scale, MicroStrategy delivers concrete answers to users where and when they’re needed. Foundationally, the platform offers out-of-the-box drivers and gateways for a variety of data sources, types, and formats, and APIs/SDKs which are hosted within the MicroStrategy Platform Deployed within Customer Tenant. Using the platform’s proprietary enterprise semantic graph, agencies can establish a unified, governed, secure, and reusable data model on which a variety of intelligence solutions can be built to deliver accurate, personalized, and trusted information to individual users based on each agency’s enterprise data dictionary.\r\n\r\n \r\n\r\nThe MicroStrategy Cloud for Government is a fully managed enterprise analytics solution that offers all the market-leading capabilities of the MicroStrategy Intelligence Platform on a unique Amazon Web Services (AWS) GovCloud implementation. MicroStrategy Cloud for Government features a fully optimized reference architecture built specifically for deployment in a customer-licensed AWS environment, offered as a software-as-a-service (SaaS) solution. MicroStrategy administers each unique MicroStrategy Cloud for Government environment on the behalf of each government department or agency, including steady state operations, routine application of software upgrades, robust system monitoring and alerting, and 24/7/365 technical support for priority issues. The components that directly support the MicroStrategy Cloud for Government cloud service offering are described in the subsections below.\r\n\r\n \r\n\r\nMicroStrategy Cloud for Government is a SaaS service built on top of AWS GovCloud (US) IaaS servers. MicroStrategy utilizes AWS GovCloud (US) to provide the resources that host the MicroStrategy Cloud for Government platform and leverages the experience and resources of AWS to scale quickly and securely as necessary to meet current and future demand. MicroStrategy is responsible for designing and configuring the MicroStrategy Cloud for Government architecture within AWS GovCloud (US) to ensure that the availability, security, and resiliency requirements are met.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@microstrategy.com", "website": "https://www.microstrategy.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1910758409", "name": "Mimecast", "cloud_service_provider": "Mimecast", "cloud_service_offering": "Incydr Gov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Code42%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-11-12T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-01-22T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to Legacy FedRAMP Ready" }, { "date": "2020-09-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2020-12-08T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2020-01-22T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-11-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-09-28T20:00:00.000Z", "cert_date": "2020-12-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-12-08T20:00:00.000Z", "annual_assessment": "2011-11-01T04:00:00.000Z", "independent_assessor": "Deloitte & Touche LLP", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "Incydr Gov is a SaaS solution that helps organizations see and stop data loss caused by employees and contractors. It monitors data movement across endpoint and cloud to help security teams effectively detect, investigate, and respond to data exfiltration events with unrivaled ease of use, and without disrupting user productivity.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "certificationqueries@mimecast.com", "website": "https://www.mimecast.com/products/incydr/federal-agencies/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1311222650", "name": "MIS Sciences Corporation", "cloud_service_provider": "MIS Sciences Corporation", "cloud_service_offering": "GovPoint Cloud Services", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/MIS%20Sciences%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-07-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2016-04-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2014-07-30T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2016-04-21T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2016-04-21T20:00:00.000Z", "annual_assessment": "2011-04-21T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "IaaS", "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy", "Federal Communications Commission", "Federal Railroad Administration", "Pretrial Services Agency", "Railroad Retirement Board" ], "agency_reuse": [ "" ], "service_description": "GCS is a FedRAMP Moderate JAB P-ATO authorized IaaS/PaaS platform offering scalable compute, private cloud, and SaaS solutions to federal agencies. Customers may deploy on shared infrastructure, provision a dedicated private cloud, or co-locate their own hardware within the GCS authorization boundary.\r\n\r\nOverview of Authorized Services\r\n\r\nCompute (IaaS)\r\nConfigurable virtual machines balancing CPU, RAM, and high-I/O flash storage; available as pre-hardened images or custom builds.\r\n\r\nPrivate FedRAMP Cloud (IaaS)\r\nDedicated, tenant-isolated compute, networking, and storage fully within the GCS boundary for agencies requiring resource segregation.\r\n\r\nBring Your Own Hardware\r\nCustomer-owned hardware co-located within the GCS boundary, leveraging inherited GCS controls for specialized appliances and equipment.\r\n\r\nVirtual Desktop Services (DaaS)\r\nBrowser-accessible virtual desktops hosted within the GCS boundary, providing agency users with secure, managed access to applications and data from any endpoint without local installation requirements.\r\n\r\nAuthorization as a Service (AaaS)\r\nEnables SaaS providers to inherit GCS controls and deliver FedRAMP-authorized products under the GCS P-ATO.\r\n\r\nCalabrio Workforce Engagement Management (SaaS)\r\nContact center workforce optimization suite covering scheduling, agent performance analytics, and business intelligence.\r\n\r\nSharetru Federal (SaaS)\r\nManaged File Transfer as a Service (MFTaaS) supporting CMMC, ITAR, HIPAA, and PCI-DSS regulated data exchange.\r\nSayari Risk Intelligence (SaaS)\r\nSupply chain and counterparty risk platform aggregating corporate ownership and trade data from 250+ jurisdictions.\r\n\r\nGRID20/20 ATI (SaaS/IoT)\r\nCloud-based distribution grid and environmental monitoring platform covering wildfire detection, auto-alerting, and AI-enhanced analytics. Field sensor devices operate outside the authorization boundary and feed data into the GCS-hosted ATI application, which is fully within scope.\r\n\r\nIGS Bridge (SaaS)\r\nSecure, platform-agnostic integration suite connecting enterprise and legacy systems (Bridge Connect), coordinating clinical decision support (Bridge Care), standardizing data relationships (Bridge Map), and delivering real-time operational analytics (Bridge Monitor).", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/07/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "sales@mis-sciences.com", "security_email": "security@mis-sciences.com", "website": "http://www.mis-sciences.com/", "uei": "XGTZMLVEG7R9", "small_business": true, "business_categories": [ "Data Management", "Development Tools", "Storage", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "IGS Bridge Care", "IGS Bridge Connect", "Calabrio Workforce Engagement Management", "GRID20/20 - Advanced Transformer Infrastructure (ATI) - Sensor Devices", "IGS Bridge Map", "IGS Bridge Monitor", "Private FedRAMP Cloud", "Sayari Counterparty and Supply Chain Risk Intelligence", "Sharetru Federal", "Virtual Desktop Services" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1610037949", "name": "mLINQS", "cloud_service_provider": "mLINQS", "cloud_service_offering": "mLINQS Hosting Service", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/mLINQS%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2016-09-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-08-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-09-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 12, "reuse": 11, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2016-09-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-08-11T20:00:00.000Z", "cert_date": "2017-09-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Internal Revenue Service", "fedramp_auth": "2017-09-08T20:00:00.000Z", "annual_assessment": "2011-08-27T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of the Fiscal Service", "Customs and Border Protection", "Defense Information Systems Agency", "Department of Agriculture", "Department of Justice", "Department of Veterans Affairs", "Environmental Protection Agency", "Immigration and Customs Enforcement", "Internal Revenue Service", "Social Security Administration", "United States Coast Guard", "United States Secret Service" ], "agency_reuse": [ "" ], "service_description": "Since 2004, more than 30 federal agencies have trusted moveLINQ to process thousands of employee moves annually. As the first comprehensive, fully functional system designed expressly for government agencies to manage employee relocation, that trust is well founded. Agencies can be confident that every relocation processed using moveLINQ will be in full compliance. The software automates FTR, JTR, DSSR, and 6FAM CONUS/OCONUS relocation policy, and adheres to E-Gov Travel, GSA/OMB reporting, and Section 508 standards. Now mLINQS offers its leading relocation management on a hosted platform. As with other hosted solutions, this Software as a Service (SaaS) model provides agencies higher availability at a lower cost. Federal managers are able to focus their budgets on business objectives rather than infrastructure and the need to predict and meet future capacity. By leveraging efficiencies attained by hosting multiple federal agencies, mLINQS Hosting Services provides increased scalability and flexibility while increasing support services to customers.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "Jeff.edmonds@casepoint.com", "website": "http://mlinqs.net/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2122150307", "name": "MongoDB", "cloud_service_provider": "MongoDB", "cloud_service_offering": "MongoDB Atlas for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/MongoDB%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-05-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-09-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2022-08-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-01-18T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 26, "ready_status": "Not Active", "ready_date": "2021-05-24T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-09-14T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-08-11T20:00:00.000Z", "cert_date": "2023-01-18T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-01-18T20:00:00.000Z", "annual_assessment": "2011-08-24T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2431264500", "csp": "AppOmni", "cso": "AppOmni SaaS Security for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430123303", "csp": "Aztec Software", "cso": "Aztec Learning System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2523656707", "csp": "Cisco Systems, Inc.", "cso": "Cisco ThousandEyes for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2306445868", "csp": "Cohesity", "cso": "Cohesity Cloud Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2414718666", "csp": "Digital Science UK Limited", "cso": "Overleaf", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "F1603307884", "csp": "e-Builder, A Trimble Company", "cso": "Trimble Unity Construct Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234963115", "csp": "NCR Government, LLC", "cso": "NCR VOYIX GOVERNMENT CLOUD", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406651384", "csp": "Precisely Software", "cso": "Data Integrity Suite for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2322855016", "csp": "ProjectTeam, Inc.", "cso": "ProjectTeam for Government (Construction Project and Program Management)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2313477206", "csp": "Quadient inc.", "cso": "S.M.A.R.T. - Federal Editions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2230451369", "csp": "Snyk", "cso": "Snyk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213647361", "csp": "Talkdesk", "cso": "Talkdesk CX Cloud™ Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2215045786", "csp": "Tenable", "cso": "Tenable Cloud Security for US Government - Ermetic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125561001", "csp": "Unqork, Inc.", "cso": "Unqork for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2525556241XM", "csp": "Vanta", "cso": "Vanta Government Cloud", "status": "FedRAMP Certified", "impact_level": "20x Moderate", "impact_level_number": "6" } ], "agency_authorizations": [ "Department of Agriculture", "Department of Health and Human Services", "Environmental Protection Agency", "Food and Drug Administration", "Immigration and Customs Enforcement", "National Oceanic and Atmospheric Administration" ], "agency_reuse": [ "22-002-08", "22-005", "22-005-06", "22-007", "22-007-04", "22-007-17", "22-007-22", "22-011-01", "22-011-04", "22-016-18", "22-017", "22-021-07", "22-034", "22-036", "22-042", "22-067", "22-092" ], "service_description": "MongoDB Atlas for Government is a fully-managed multi-cloud developer data platform authorized at FedRAMP® Moderate. Building on MongoDB’s document data model and query API, Atlas for Government automates operational and administrative tasks and offers advanced data distribution capabilities.\r\n\r\n\r\nDesigned to be secure by default, it runs in a FedRAMP Moderate Authorized, dedicated environment tailored for U.S. government needs, including Criminal Justice Information Solutions (CJIS) applications. Encryption is supported for data at rest, in transit, and in use, including encryption capabilities such as Queryable Encryption and Client-Side Field-Level Encryption. \r\n\r\n\r\nAtlas for Government is available in AWS GovCloud regions, AWS FedRAMP Moderate regions (US East/West), and GCP Assured Workload US regions.", "fedramp_msg": "N/A", "sales_email": "fedramp@mongodb.com", "security_email": "fedramp@mongodb.com", "website": "https://www.mongodb.com/products/platform/atlas-for-government", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Data Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "GCP Assured Workloads" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1711546389", "name": "Monster Government Solutions", "cloud_service_provider": "Monster Government Solutions", "cloud_service_offering": "Monster Hiring Management Enterprise (MHME)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Monster%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-05-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-04-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 21, "reuse": 20, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-05-28T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-05-28T20:00:00.000Z", "cert_date": "2022-04-07T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-04-07T20:00:00.000Z", "annual_assessment": "2011-05-28T04:00:00.000Z", "independent_assessor": "SecureIT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Commodity Futures Trading Commission", "Consumer Product Safety Commission", "Department of Education", "Department of Labor", "Department of State", "Department of Veterans Affairs", "Federal Bureau of Prisons", "Federal Deposit Insurance Corporation", "Federal Energy Regulatory Commission", "Federal Highway Administration", "Federal Trade Commission", "General Services Administration", "Health Resources and Services Administration", "Library of Congress", "National Institute of Standards and Technology", "Nuclear Regulatory Commission", "Pension Benefit Guaranty Corporation", "Smithsonian Institution" ], "agency_reuse": [ "" ], "service_description": "MHME is a Software as a Service (SaaS) application that automates and streamlines federal human resource recruitment, hiring, and management. MHME is a Moderate impact system, in production since January 1, 2003, and currently supporting over 68 federal customers.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@applygovernment.com", "website": "https://www.monstergovernmentsolutions.com/", "uei": "", "small_business": false, "business_categories": [ "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2619446518", "name": "Moodle US LLC", "cloud_service_provider": "Moodle US LLC", "cloud_service_offering": "Moodle for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Moodle%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-04-23T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Moodle for Government is a FedRAMP® Ready SaaS Learning Management System (LMS) powered by Moodle Workplace, specifically engineered to meet the mission-critical training and compliance requirements of U.S. public sector agencies including federal, state, and local. Built on a foundation of \"security by design,\" Moodle for Government provides a secure, scalable, and highly customizable environment for mandatory compliance training, workforce development, onboarding, and large-scale government training initiatives that evolves with your agency.\nAs our dedicated public sector solution built around Moodle’s enterprise learning platform, Moodle for Government enables agencies to modernize their learning ecosystems while maintaining the highest standards of control and accountability. This solution includes a wide variety of additional plugins to extend enterprise capabilities even further, and it is deployed in AWS GovCloud through our own proprietary hosting tool, which orchestrates our curated set of infrastructure components. Our solution is designed to optimize performance, reliability, and security while also offering a high level of autonomy, with dedicated per-client resources and client control of major-release upgrade scheduling.\nMoodle for Government is committed to accessibility and meeting federal mandates. The platform is 508 and WCAG 2.2 AA compliant and supports over 20 languages, ensuring all personnel can access training regardless of location or ability. In addition to its FedRAMP Ready status, Moodle services in the U.S. are SOC 2 Type 2 compliant.\nWith robust functionality, Moodle for Government empowers teams to:\n-Utilize rule-based automation to track certifications, manage renewals, and generate audit-ready reports.\n-Deliver role-based learning paths tailored to specific job functions or mission requirements.\n-Gain real-time visibility into training progress and skills gaps through customizable reporting dashboards.", "fedramp_msg": "", "sales_email": "jim.mezzanotte@moodle.com", "security_email": "maxine.henry@moodle.com", "website": "https://moodle.com/us/solutions/government/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Content Management System (CMS)", "Data Management", "Design & Multimedia", "Development Tools", "Education & Training", "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2118055930", "name": "Motorola Solutions", "cloud_service_provider": "Motorola Solutions", "cloud_service_offering": "Motorola Solutions Federal Cloud (MSFC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Motorola%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-06-03T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-03-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-02-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-06-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-03-07T20:00:00.000Z", "cert_date": "2025-02-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Immigration and Customs Enforcement", "fedramp_auth": "2025-02-13T20:00:00.000Z", "annual_assessment": "2011-01-31T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Customs and Border Protection", "Immigration and Customs Enforcement" ], "agency_reuse": [ "" ], "service_description": "Motorola Solutions is expanding its “Mission Critical Ecosystem” which consists of a suite of software and technology that supports mission critical communications in evolving ways and that provides fast access to actionable information. The purpose of the Motorola Solutions Federal Cloud (MSFC) is to serve as the platform upon which the applications and solutions that are part of this Mission Critical Ecosystem will securely operate to provide our U.S. Federal Government users with enhanced capabilities. Primary to our Federal Cloud offering as our initial secure cloud application is the APX NEXT smart radio, a next-generation P25 platform purpose-built for first responders to access and act on information while maintaining focus in critical situations. The Motorola Solutions Federal Cloud enables APX NEXT and additional SaaS services to provide new Common Operating Picture (COP) capabilities to federal Law Enforcement Officers (LEOs), first responders and public safety personnel in the field with a new ownership experience to operations and support personnel. The underlying Motorola Solutions Federal Cloud architecture is reinforced by a modern and comprehensive application of security technology. Once deployed, our cloud services production systems are monitored 24x7x365 by Motorola Solutions’ Security Operations Center using state-of-the-art Security Information and Event Management (SIEM) technology.", "fedramp_msg": "N/A", "sales_email": "msifedsales@motorolasolutions.com", "security_email": "managed-security@motorolasolutions.com", "website": "https://discover.motorolasolutions.com/fedramp-marketplace", "uei": "HFK9V1G2B513", "small_business": false, "business_categories": [ "Communication", "Cybersecurity & Risk Management", "Law Enforcement" ], "service_last_90": [ "Assist" ], "all_others": [ "APX 1000i", "APX 5000", "APX 6000", "APX 8000", "APX 8000H", "APX 900", "APX N30", "APX N50", "APX N70", "APX NEXT", "APX NEXT International", "APX NEXT Smart Radio", "APX NEXT XN", "APX1500", "APX2500", "APX4500", "APX5500", "APX6500", "APX8500", "Broadband Over the Air Rekeying (BBOTAR)", "Command Central Digital Evidence Management System", "CommandCentral Admin (CCAdmin)", "CommandCentral Aware (CCAware)", "Harmony Portal", "Internet of Things (IoT) Cloud Services (IoTCS)", "RadioCentral Insights", "RadioCentral with SmartProgramming (RCP)", "SRX 2200", "SVX Device", "SmartConnect", "SmartLocate (Location Services)", "SmartMapping", "SmartMessaging", "SmartVideo", "VX-P949" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2332364851", "name": "Moveworks", "cloud_service_provider": "Moveworks", "cloud_service_offering": "Moveworks GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Moveworks%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-01-29T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-06-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2026-01-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-01-30T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2025-01-29T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-06-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-01-05T20:00:00.000Z", "cert_date": "2026-01-30T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Naval Information Warfare Center", "fedramp_auth": "2026-01-30T20:00:00.000Z", "annual_assessment": "2011-12-17T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Naval Information Warfare Center" ], "agency_reuse": [ "" ], "service_description": "Moveworks is the agentic AI assistant platform that empowers every federal employee to get work done with natural language. Trusted by federal agencies to reduce operational complexity, Moveworks unifies siloed business applications—from HR and IT to Finance, Procurement, and beyond—with an intuitive experience that meets employees where they already work, in over 100 languages. Moveworks combines search and action in one platform, eliminating the need for dozens of fragmented AI tools while offering developers the ability to quickly build and deploy custom AI agents tailored to vital federal processes and initiatives.\n\nThe platform is powered by our Reasoning Engine, a sophisticated AI architecture that autonomously and securely understands, plans, executes, and adapts to complete employee requests within your agency’s unique workflows.\n\nDesigned for the unique requirements of the public sector, Moveworks delivers:\n\n* Mission-Ready Security - Moveworks employs rigorous security protocols meeting or exceeding industry standards. We enforce strict measures across the entire product lifecycle to ensure data is always secure.\n\n* Faster Time to Value - Moveworks can be deployed in as little as 8–12 weeks, enabling agencies to realize measurable ROI within days of go-live. With powerful built-in capabilities, agencies unlock immediate value without lengthy customization or complex configuration.\n\n* AI Agility with Agent Studio - Moveworks provides a developer environment allowing builders to easily bring the power of agentic AI to any agency system or process. Every agent built with Agent Studio inherits federal security guardrails, allowing agencies to turn nearly any idea into a conversational use case, securely and at scale.", "fedramp_msg": "N/A", "sales_email": "federal-sales@moveworks.com", "security_email": "federal-security@moveworks.com", "website": "https://moveworks.com/", "uei": "NY43SUCE6Y57", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Education & Training", "Finance", "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2335850270", "name": "Movius Interactive Corporation", "cloud_service_provider": "Movius Interactive Corporation", "cloud_service_offering": "Movius MultiLine and Movius Decentralized Distributed Secure Communications", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Movius%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-03-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-06-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-08-05T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-03-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-06-24T20:00:00.000Z", "cert_date": "2025-08-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-08-05T20:00:00.000Z", "annual_assessment": "2011-06-24T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "United States Air Force" ], "agency_reuse": [ "" ], "service_description": "Movius’ MultiLine: This solution is a secure, scalable Bring Your Own Approved Device (BYOAD) application that allows users to call and message through a secure business identity across any device, carrier, and connection type (Wi-Fi, Data, GSM, Satellite and Private). Movius MultiLine supports built-in recording and call/message capture, and storage for the entire workforce enabling full surveillance, regulatory reporting, compliance management, and robust application security. The solution is also supported on legacy government cell phone programs. \r\n\r\nMovius Decentralized Distributed Secure Communications: This solution enables decentralized military grade communications globally, including in a denied and degraded network environment. With this solution there are no central server dependencies or risk of communications being blocked or thwarted​. It includes the notion of self-sovereign identity.", "fedramp_msg": "", "sales_email": "amit.modi@movius.ai", "security_email": "fedramp-security@movius.ai", "website": "https://movius.ai/", "uei": "ZC7FMFLN48H3", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Customer Relations Management (CRM)", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Law Enforcement", "Mobile Device Management (MDM)", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1506256801", "name": "MSM Group, Inc.", "cloud_service_provider": "MSM Group, Inc.", "cloud_service_offering": "iSite Contract Management Portal", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/iSite%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-09-03T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-09-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-04-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-09-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-09-29T20:00:00.000Z", "cert_date": "2018-04-27T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-04-27T20:00:00.000Z", "annual_assessment": "2011-09-29T04:00:00.000Z", "independent_assessor": "Sentar, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Aviation Administration", "National Aeronautics and Space Administration" ], "agency_reuse": [ "" ], "service_description": "The iSite® Contract Management Portal is a web-based system that provides easy-to-use functionality for your task performers, task managers, program managers and finance managers for viewing and managing the day-to-day progress of your Federal Government contracts.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "marketing@isitellc.com", "website": "https://www.isitellc.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1818161169", "name": "MuleSoft", "cloud_service_provider": "MuleSoft", "cloud_service_offering": "MuleSoft Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/MuleSoft%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-04-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-05-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-07-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 21, "reuse": 88, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-04-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-05-09T20:00:00.000Z", "cert_date": "2019-07-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-07-31T20:00:00.000Z", "annual_assessment": "2011-11-09T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2607452240", "csp": "IBM", "cso": "GO.gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1825941347A", "csp": "Zoom Video Communications, LLC", "cso": "Zoom for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Bureau of Land Management", "Bureau of the Fiscal Service", "Consumer Financial Protection Bureau", "Department of Agriculture", "Department of Energy", "Department of Health and Human Services", "Department of State", "Department of Veterans Affairs", "Department of the Treasury", "Federal Communications Commission", "Federal Deposit Insurance Corporation", "Food and Drug Administration", "Government National Mortgage Association", "Immigration and Customs Enforcement", "Interior Business Center", "Internal Revenue Service", "National Telecommunications and Information Administration", "Office of Natural Resources Revenue", "Pretrial Services Agency", "Tennessee Valley Authority", "Transportation Security Administration" ], "agency_reuse": [ "22-002-02", "22-002-09", "22-003", "22-005", "22-005-08", "22-005-11", "22-005-20", "22-007", "22-007-04", "22-007-17", "22-011-02", "22-011-05", "22-011-10", "22-012", "22-013", "22-015", "22-016-01", "22-017-02", "22-017-06", "22-019", "22-021-09", "22-022", "22-024", "22-025", "22-027-01", "22-027-02", "22-027-05", "22-027-07", "22-027-09", "22-028", "22-030", "22-031", "22-031-01", "22-033", "22-034", "22-034-02", "22-036", "22-042", "22-045", "22-050", "22-051", "22-061-01", "22-062", "22-063", "22-069", "22-070", "22-074", "22-080", "22-082", "22-088", "22-099" ], "service_description": "MuleSoft's Anypoint Platform is a hybrid platform for designing, developing and managing APIs and integrations.\n\nUniquely built as a single solution, it includes integration Platform as a Service (iPaaS) functionality combined with world class API Management, which provide users with end to end automation, enterprise messaging, advanced user and role based management, services/tools for providing API and integration analytics and management, API design and publishing tools, and the ability to share and collaborate on API specifications, code snippets and templates of best practices.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "Public.Sector.Compliance@salesforce.com", "website": "https://www.mulesoft.com/integration-solutions/soa/government", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Development Tools", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2304546222", "name": "My Business Matches", "cloud_service_provider": "My Business Matches", "cloud_service_offering": "Vendor Event & Business Matchmaking Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/MBM%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-05-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-11-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-05-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-11-01T20:00:00.000Z", "cert_date": "2025-05-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-05-15T20:00:00.000Z", "annual_assessment": "2011-10-10T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "4", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "My Business Matches (MBM) is the definitive source for federal agencies when it comes to their Event & Business Matchmaking needs. Our platform deals with event preparation, conference management and vendor outreach for any onsite, hybrid or virtual occasion, in need of support. You can access our technology effortlessly as it is created to be compliant with federal devices and firewalls. MBM is a FedRAMP Authorized Secure Service! Be assured that our gathering functions let you provide both safe and interactive webinars, business matchmaking, networking roundtables and speakers engagements.", "fedramp_msg": "N/A", "sales_email": "info@mybusinessmatches.com", "security_email": "fedramp@mybusinessmatches.com", "website": "https://mybusinessmatches.com/", "uei": "EFU5YA2WXSG3", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2224739070", "name": "National Resident Matching Program", "cloud_service_provider": "National Resident Matching Program", "cloud_service_offering": "iMatch", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/iMatch%20Logo.png", "status": "FedRAMP Certified (In Remediation)", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-04-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-02-20T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" }, { "date": "2026-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Authorized to FedRAMP Certified (In Remediation). Under remediation for not following \"Addressing FedRAMP Communication\" rule. See Notice 0016" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-04-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-02-20T20:00:00.000Z", "cert_date": "2025-03-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-05T20:00:00.000Z", "annual_assessment": "2011-01-12T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of State" ], "agency_reuse": [ "" ], "service_description": "Building on 70+ years of physician matching, the NRMP partners with U.S. government agencies to offer simple, equitable, and effective solutions for matching applicants to posts, stations, and government offices around the globe to effectively address recruitment and selection needs and drive outcomes for success. Using our software-as-a-service application called iMatch, administrators can invite participants to take part in a “match” where we leverage our proprietary mathematical matching algorithm to prioritize the selection preferences of participants, placing them in the most preferred positions possible on their rank lists. Participants have access to real time Match information and obtain their Match results in the iMatch system. Additional Match Outcome Reports can inform workforce trends and guide growth and development.\n\nNRMP’s iMatch system and matching services simplify selection processes, reduce bias, and encourage stable outcomes based on the principles of market design and the following pillars :\n\n**Accuracy:** NRMP’s proprietary mathematical matching algorithm places participants based on preferences and creates the best possible outcome. Research on the algorithm was the basis for awarding the 2012 Nobel Prize in Economic Sciences.\n**Reliability:** NRMP creates a Match schedule to ensure on-time delivery of services with well published and communicated deadlines throughout the matching process. Our iMatch technology is state-of-the-art, highly secure, and confidential allowing Match participants to create their location selection preferences with piece-of-mind.\n**Integrity:** NRMP Matches foster a spirit of fairness because our services and matching processes are transparent, and all Match participants must adhere to the same rules and deadlines.\nAccepts and electronically verifies Personal Identity Verification (PIV) credentials\nRanking information submitted by a Match participant is visible only to individuals connected with the Match\nProvides a standardized process based on 70 years of matching expertise\nMatch outcome reports and statistics displayed at the conclusion of each matchFIPS 199 System Categorization - Moderate ​\nService Model - SaaS ​\nDeployment Model - Community ​\nCloud Stack / Leveraged Systems​ - AWS GovCloud\nA system customizable to each Match sponsor’s particular process:\n* Specific data fields displayed during participant registration\n* Branding with Agency logo alongside iMatch logo\n* Roles and responsibilities of users can be granted or removed specific to their job duties\n* Multi-tiered levels of access\n* Email reminders and confirmations with content relevant and detailed to each Match and Agency", "fedramp_msg": "N/A", "sales_email": "FedRAMP@imatchfederal.org", "security_email": "Security@imatchfederal.org", "website": "https://www.nrmp.org/imatch/", "uei": "M21HNSMADLE5", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2234963115", "name": "NCR Government, LLC", "cloud_service_provider": "NCR Government, LLC", "cloud_service_offering": "NCR VOYIX GOVERNMENT CLOUD", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/NCR%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-05-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-06-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-03T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-05-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-06-08T20:00:00.000Z", "cert_date": "2025-03-03T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Commissary Agency", "fedramp_auth": "2025-03-03T20:00:00.000Z", "annual_assessment": "2011-06-06T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Commissary Agency" ], "agency_reuse": [ "" ], "service_description": "NCR VOYIX Government Cloud is a GCP native API–first cloud driven environment, which hosts and manages NCR’s Various Commerce Solutions such as, Advanced Marketing Solution (AMS), Freshop applications and BSL Open API services. These Offerings provide Government Agencies with Commerce Point-of-Sale Systems (such as Emerald, Aloha, RPOS, non-NCR POS, etc.) and Applications to facilitate both in-store and above-store grocery, gas, loyalty, and/or food ordering transactions. Additionally, BSL Open APIs, provide common interfaces for customers and 3rd parties to more easily enable their applications and services within the customer’s ecosystem.", "fedramp_msg": "N/A", "sales_email": "sales.ncrgov@ncrvoyix.com", "security_email": "security.ncrgov@ncrvoyix.com", "website": "https://www.ncrvoyix.com/company/public-sector", "uei": "", "small_business": false, "business_categories": [ "Customer Service", "Data Management", "Marketing & Sales", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2119265538", "name": "NEOGOV", "cloud_service_provider": "NEOGOV", "cloud_service_offering": "NEOGOV Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/NEOGOV%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-12-21T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2024-12-16T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2025-06-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-08-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2022-12-21T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-12-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-06-30T20:00:00.000Z", "cert_date": "2025-08-25T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-08-25T20:00:00.000Z", "annual_assessment": "2011-06-27T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "NEOGOV is a Software as a Service (SaaS) provider of cloud-based workforce management solutions, uniquely designed for the public sector, higher education, and public safety.\n\nNEOGOV offers Human Capital Management (HCM), Human Resource Information System (HRIS), and Talent Management Software (TMS) solutions that empower government agencies to seamlessly source, recruit, hire, onboard, develop, and retain a high quality workforce. Additionally, NEOGOV’s public safety workforce management platform provides a secure, all-in-one solution for public safety agencies to meet the compliance needs and complexities of their industry, allowing them to also recruit the best talent in the shortest time, train teams, and manage policies effortlessly.", "fedramp_msg": "N/A", "sales_email": "contact@neogov.com", "security_email": "fedramp@neogov.com", "website": "https://www.neogov.com/", "uei": "V8GKWCWPJAQ3", "small_business": false, "business_categories": [ "Education & Training", "Health & Wellness", "Human Resources", "Law Enforcement", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "Action (Officer Action Reporting)", "Attract (Candidate Relationship Management - CRM)", "Benefits (Benefit Plan Administration)", "CoreHR (Employee Lifecycle Management)", "Engage (Community Outreach)", "GovernmentJobs.com (Government Job Board)", "IA (Internal Affairs Case Management)", "Insight (Applicant Tracking System)", "Learn (Training Management)", "Line (Public Safety Wellness App)", "Onboard (Employee Onboarding)", "Payroll (Pay & Tax Processing)", "Perform (Performance Management)", "Policy (Policy Management)", "Ready (Field and New Role Training)", "Recall (Policy Training)", "Schedule (Personnel Scheduling)", "SchoolJobs.com (Education Job Board)", "Standards (Accreditation Management)", "Time & Attendance (Employee Time Tracking)", "Vetted (Background Investigation)", "Vitals (Early Intervention)", "eForms (Employee Document Management)" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2607654741", "name": "Net-Inspect LLC", "cloud_service_provider": "Net-Inspect LLC", "cloud_service_offering": "Net-Inspect Enterprise Quality Management (EQM)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/NetInspect%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-01-06T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-01-06T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Net-Inspect is the global leader in secure quality management software and supply chain visibility, built inside an aerospace contract manufacturing company in 2001. It is now trusted by 9,500+ companies and 400K+ users across 59 countries, with 6.4M+ FAI Reports completed and 99.9% uptime. Net-Inspect creates a digital thread that connects design requirements to manufacturing and quality data across every tier of the supply chain, with first article inspection, supplier quality, and document control in one secure system of record. Integrated solutions span First Article Inspection, APQP/PPAP, Audit, Corrective Action Requests, Document Management, Auto-Ballooning, Supply Chain Management, SPC, and dynamic quality reporting, paired with practical, responsible AI that helps quality teams securely turn trusted data into faster answers. Net-Inspect has maintained FedRAMP Moderate Equivalency since 2019, assessed annually by Coalfire Systems against all 325 NIST 800-53 Moderate controls, and is FedRAMP Ready at the Moderate level, now positioned for Rev5 Class C Certification. Hosted exclusively in Microsoft Azure for Government, it is ITAR compliant, with FIPS 140-validated encryption and background-checked U.S.-citizen support.", "fedramp_msg": "", "sales_email": "sales@net-inspect.com", "security_email": "itsecurity@net-inspect.com", "website": "https://net-inspect.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Collaboration", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Governance, Risk, and Compliance (GRC)", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1508127183", "name": "NetComm", "cloud_service_provider": "NetComm", "cloud_service_offering": "Beacon", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/NetComm%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-09-06T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2015-09-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2016-01-15T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-09-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2015-09-18T20:00:00.000Z", "cert_date": "2016-01-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Institutes of Health", "fedramp_auth": "2016-01-15T20:00:00.000Z", "annual_assessment": "2011-09-14T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "National Institutes of Health" ], "agency_reuse": [ "" ], "service_description": "NetComm is the government's expert for unifying the user experience at the agency IT edge, delivering custom information management software solutions to a wide range of government clients. A Women-Owned Small Business (WOSB) with 30 years of Federal experience, NetComm offers a variety of cloud-based services through Beacon, NetComm's data analytics toolset that allows users to create customized dashboards tailored to an organization's or agency's particular needs, including:\n\n- Automated HR, finance, property management, digital signatures, e-workflows, online collaboration and dashboard tools, specifically tailored to help clients meet their organizational goals \n- Improved access to and analysis of complex data \n- Standards & best practices for security & privacy management in the cloud \n- Mobile Capabilities \n- Data Visualization and Dashboarding\n\nBeacon leverages the Amazon Web Services GovCloud region FedRAMP moderate cloud Infrastructure as a Service (IaaS).", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@netcomm.net", "website": "https://www.netcomm.net/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2028977567", "name": "NetDocuments Software, Inc.", "cloud_service_provider": "NetDocuments Software, Inc.", "cloud_service_offering": "NetDocuments Document Management System (DMS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/NetDocuments%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-09-15T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-01-21T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2021-02-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to Agency Authorization In Process" }, { "date": "2021-05-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": "2020-09-15T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-02-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-01-21T20:00:00.000Z", "cert_date": "2021-05-07T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Executive Office for United States Attorneys", "fedramp_auth": "2021-05-07T20:00:00.000Z", "annual_assessment": "2011-01-21T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Commodity Futures Trading Commission", "Department of Justice", "Executive Office for United States Attorneys", "FHFA Office of the Inspector General", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Storing, managing, and protecting millions of documents that are created and shared by thousands of people is never easy. All too often, they become a chaotic, obtrusive, and risky burden on your organization. NetDocuments changes the equation, with a content platform that removes the barriers and transforms all your documents into an unstoppable engine for collaboration, productivity, growth, and inspired work - without limitations or restrictions. With NetDocuments, millions of scattered documents become one source of unified insights. Your content management processes and workflows make the leap from intuitive to invisible. The full power of your collective knowledge and past work becomes available wherever your people need it. And every document gets the industry's best protection against any type of threat - from careless employees to nation state attacks. So, when you imagine a future where your content is always safe, organized, compliant, and available to inspire your best work, NetDocuments is ready to take you there.", "fedramp_msg": "N/A", "sales_email": "fedramp@netdocuments.com", "security_email": "help-security@netdocuments.com", "website": "https://www.netdocuments.com/solutions/industries/government?utm_medium=referral&utm_source=fedramp&utm_campaign=directorylisting", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Content Management System (CMS)", "Data Management", "Legal & Policy", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2105946715", "name": "Netskope, Inc.", "cloud_service_provider": "Netskope, Inc.", "cloud_service_offering": "Netskope NewEdge Government.", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Netskope%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-01-20T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-01-20T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-12-19T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-01-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-01-20T20:00:00.000Z", "cert_date": "2023-12-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-12-19T20:00:00.000Z", "annual_assessment": "2011-01-19T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Administration for Community Living", "Department of State", "Department of Veterans Affairs", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Netskope NewEdge Government (NNG) is a FedRAMP High-authorized Security Service Edge (SSE) platform, specifically engineered to secure the modern federal mission. Built upon Netskope NewEdge—the industry's largest private security cloud—NNG provides the high-capacity, low-latency infrastructure required for agencies to adopt a true Zero Trust architecture. By serving as a unified, risk-based Policy Enforcement Point (PEP), the platform streamlines the transition away from legacy VPNs and fragmented security stacks, directly supporting the mandates of Executive Order 14028, OMB M-21-31, OMB M-22-09, and the goals of the 2026 Presidential Cyber Strategy for America.\r\n\r\n\r\nNetskope NewEdge Government enables agencies to safely harness the power of Generative AI (GenAI) without compromising data integrity. The platform provides deep, context-aware visibility and control over \"Shadow AI.\" This enables agencies to meet the Minimum Risk Management Practices of OMB M-24-10 and aligns with NIST AI 600-1 to prevent sensitive government data and Controlled Unclassified Information (CUI) from being misused or used to train public Large Language Models (LLMs). \r\n\r\n\r\nNNG empowers a \"Mission-First\" AI strategy through:\r\n\r\n\r\n- Continuous AI Visibility: Automated discovery of sanctioned and unsanctioned AI applications, agents, and models across the agency\r\n landscape.\r\n\r\n\r\n- Contextual Data Protection: Real-time, granular controls based on user role, data sensitivity, and AI application risk.\r\n\r\n\r\n- Zero Trust for AI: Integration of AI-driven threat protection and UEBA to detect anomalies in AI-human interactions and mitigate prompt\r\n injection or model evasion risks.\r\n\r\n\r\n- Netskope NewEdge Government provides a unified path to enabling advanced operational zero trust capabilities and controls by 2027 across the CISA Zero Trust Maturity Model and the DoW Zero Trust Strategy and Roadmap. Delivered as a sovereign, carrier-neutral SaaS platform, NNG addresses advanced DoW use cases and facilitates seamless compliance with NIST 800-207 through:\r\n\r\n\r\n- Intelligent SSE Capabilities: Convergence of Next-Gen SWG, CASB, and ZTNA into a single-pass architecture that maintains performance while enforcing strict adaptive risk-based security baselines.\r\n\r\n\r\n- Advanced Data Loss Prevention (DLP): High-fidelity AI/ML classifiers for text and image data, ensuring sensitive assets remain protected across web, cloud, and private environments.\r\n\r\n\r\n- Adaptive User Coaching: Real-time, in-line guidance that upskills the federal workforce on secure AI and cloud behavior at the point of interaction extendable to all applications. \r\n\r\n\r\n- Open Security Ecosystem: Bi-directional risk and threat intelligence exchange via Open APIs, integrating GovCloud into the agency’s broader SOC and SIEM workflows\r\n\r\n\r\n- High-Performance Governance: Dedicated Egress IPs, Performance monitoring and HVA (High Value Asset) risk reporting to ensure mission continuity and regulatory compliance", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@netskope.com", "website": "https://www.netskope.com/solutions/public-sector/govcloud", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Communication", "Cybersecurity & Risk Management", "Data Management", "Legal & Policy", "Network Management", "Operations Management", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1607057910", "name": "New Relic", "cloud_service_provider": "New Relic", "cloud_service_offering": "New Relic", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/NewRelic%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-11-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-02-27T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-03-02T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 8, "reuse": 182, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-11-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-02-27T20:00:00.000Z", "cert_date": "2020-03-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Office of Management and Budget", "fedramp_auth": "2020-03-02T20:00:00.000Z", "annual_assessment": "2011-02-27T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "F1302201919", "csp": "Acquia Inc.", "cso": "Acquia Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2108360349", "csp": "Adobe", "cso": "Adobe Acrobat Sign for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1908649566", "csp": "Aruba Networks", "cso": "Aruba Central", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2031222637", "csp": "Aurigo Software Technologies, Inc.", "cso": "Masterworks Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226322745", "csp": "Autodesk", "cso": "Autodesk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1923743650A", "csp": "Automattic, Inc.", "cso": "WordPress VIP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430123303", "csp": "Aztec Software", "cso": "Aztec Learning System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1916254386", "csp": "Boomi", "cso": "Boomi Enterprise Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2220549818", "csp": "CirrusMD", "cso": "CirrusMD Virtual Health Chat for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234550858", "csp": "Concur Technologies, Inc.", "cso": "Concur Cloud for Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029183077", "csp": "Cority Software Inc.", "cso": "CorityOne", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603307884", "csp": "e-Builder, A Trimble Company", "cso": "Trimble Unity Construct Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2131766015", "csp": "Genesys", "cso": "Genesys Cloud CX", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919750997", "csp": "HackerOne", "cso": "HackerOne Continuous Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1831429369", "csp": "HireVue", "cso": "Recruitment Assessments and Video Interviewing", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2017459185", "csp": "HP Inc.", "cso": "Workforce Experience Platform Collaboration", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "F1408115175", "csp": "Huddle US", "cso": "Huddle Enterprise Cloud Content Collaboration and File Sharing Portal for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1718334757", "csp": "ID.me", "cso": "ID.me Identity Gateway", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2429166928", "csp": "Ideagen", "cso": "Ideagen Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1724526654", "csp": "Intelliworx", "cso": "Intelliworx Cloud Workflow Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2224739070", "csp": "National Resident Matching Program", "cso": "iMatch", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430847803", "csp": "NinjaOne", "cso": "NinjaOne for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2135637226", "csp": "Pearson VUE", "cso": "Pearson Federal Cloud System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2516365096", "csp": "Procore Technologies, Inc", "cso": "Procore for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2501644859", "csp": "Vibrent Health", "cso": "Digital Health Research Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2113557839", "csp": "Yello Dba Recsolu Inc", "cso": "Yello Government Recruiting Solution", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Consumer Financial Protection Bureau", "Environmental Protection Agency", "Federal Aviation Administration", "Federal Retirement Thrift Investment Board", "National Endowment for the Arts", "United States Citizenship and Immigration Services" ], "agency_reuse": [ "" ], "service_description": "New Relic is the intelligent observability platform, providing complete visibility across your complex IT environment (both on-prem and in the cloud). Our SaaS solution is a unified data platform that ingests and analyzes a wide array of telemetry data—metrics, events, logs, and traces. This provides a single source of truth for monitoring the performance of applications, infrastructure, and user experiences. Our platform empowers your teams to see, understand, and act on real-time telemetry data from every application, service, and piece of infrastructure.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedrampinfo@newrelic.com", "website": "https://newrelic.com/", "uei": "MUTPZC2JHSP4", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Network Management", "Operations Management", "Storage", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "Data Insights: Alerts", "Data Insights: Change Tracking", "Data Insights: Charts, dashboards, and querying", "Data Insights: Cloud Cost Intelligence", "Data Insights: Distributed Tracing", "Data Insights: Errors Inbox", "Data Insights: NRQL", "Data Insights: Service Level Management", "Full Stack Observability: AI Monitoring", "Full Stack Observability: Application Performance Monitoring (APM)", "Full Stack Observability: Browser Monitoring", "Full Stack Observability: Cloud Monitoring", "Full Stack Observability: Infrastructure Monitoring", "Full Stack Observability: Kubernetes Monitoring", "Full Stack Observability: Log Management", "Full Stack Observability: Mobile Monitoring", "Full Stack Observability: Model Performance Monitoring (MLOps)", "Full Stack Observability: Network Monitoring", "Full Stack Observability: OpenTelemetry", "Full Stack Observability: SAP Solutions", "Full Stack Observability: Serverless Function Monitoring", "Full Stack Observability: Streaming Video & Ads", "Full Stack Observability: Synthetic Monitoring", "Full Stack Observability: Website Performance Monitoring", "Security: Interactive Application Security Testing (IAST)", "Security: Security RX (Remediation Explorer)", "Service Architecture Intelligence: Catalogs", "Service Architecture Intelligence: GitHub Integration", "Service Architecture Intelligence: Maps", "Service Architecture Intelligence: Scorecards", "Service Architecture Intelligence: Teams" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2525662082", "name": "Nexthink", "cloud_service_provider": "Nexthink", "cloud_service_offering": "Infinity for Government (NXT-G)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Nexthink%20Logo.png", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-08-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-06-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Bureau of Safety and Environmental Enforcement", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Nexthink Infinity for Government (NXT-G) is delivered as a Software as a Service offering using a multi-tenant Government-Only cloud computing environment. NXT-G is designed to provide unparalleled visibility across all environments for government agencies.\nNexthink SaaS solution offers a digital employee experience management platform to help IT teams bridge this gap and continuously optimize the digital experience for employees.\n \nNexthink’s SaaS solution combines real-time endpoint analytics and end-user feedback, through unique analytics and visualizations, to provide new insight and enable IT to be more proactive, reduce costs, and enhance end-user productivity. Nexthink helps the end users, and in turn the organizations, to be safer, more productive, and more efficient by reducing IT flaws and errors. Nexthink SaaS solution helps to alleviate employee frustration by eliminating IT-bottlenecks and allowing the helpdesk to identify problems earlier and pro-actively even before they occur.", "fedramp_msg": "N/A", "sales_email": "federal@nexthink.com", "security_email": "dl-federal-security@nexthink.com", "website": "https://nexthink.com/platform/government", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1704655535", "name": "NICE CXone", "cloud_service_provider": "NICE CXone", "cloud_service_offering": "NiCE CXone", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Nice%20Logo5.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2016-11-17T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-08-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-04-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 13, "reuse": 13, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2016-11-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-08-22T20:00:00.000Z", "cert_date": "2018-04-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Army", "fedramp_auth": "2018-04-09T20:00:00.000Z", "annual_assessment": "2011-08-22T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2017257053", "csp": "Infoblox", "cso": "Infoblox Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Commerce", "Department of Health and Human Services", "Department of State", "Federal Reserve System", "Federal Retirement Thrift Investment Board", "Federal Trade Commission", "Health Resources and Services Administration", "Internal Revenue Service", "National Credit Union Administration", "Office of Personnel Management", "United States Army" ], "agency_reuse": [ "22-051" ], "service_description": "NiCE CXone is a FedRAMP Moderate cloud contact center platform that empowers U.S. federal, state, local, and tribal governments, research institutions, and contractors to deliver modern, secure, and citizen-centric service experiences. By unifying omnichannel engagement, AI, analytics, and workforce optimization, it helps agencies improve responsiveness, efficiency, and trust.\n\n \nKey Capabilities:\n\nUnified Citizen Engagement Platform\nStreamline operations with a single platform that combines advanced routing, centralized administration, and compliant recording. Visual scripting tools reduce IT dependency, enabling faster deployment of IVR and routing flows.\n\nAI-Enhanced Service Delivery\nBoost efficiency and satisfaction with intelligent virtual agents for 24/7 self-service, automated call summaries to reduce after-call work, and real-time agent guidance that improves accuracy and compliance. Automatic Speech Recognition (ASR), text-to-speech and voice biometrics ensure secure, human-like interactions.\n\nSeamless Omnichannel Journeys\nDeliver consistent, context-aware support across voice, email, chat, SMS, and social channels—ensuring citizens don’t have to repeat themselves and agents can act on the full picture.\n\nFrictionless Self-Service\nEmpower constituents to resolve routine needs quickly through multilingual, speech-enabled IVR and automated assistants—while ensuring smooth handoffs to live agents when needed, preserving full context.\n\nProactive Digital Guidance\nReduce website abandonment and improve task completion rates by guiding citizens to the right channels at the right time with rule-based prompts and smart entry points.\n\nOptimized Workforce Performance\nImprove service levels and compliance with AI-driven forecasting, scheduling, and quality management. Personalized dashboards help agents and supervisors stay aligned and accountable.\n\nCompliant, Personalized Outreach\nIncrease engagement and reduce missed appointments with proactive, compliant outbound dialing and digital notifications for reminders, updates, and alerts.\n\nActionable Insights & Compliance at Scale\nLeverage real-time dashboards and speech/text analytics to uncover trends and root causes. Enrich data pipelines for BI/ML initiatives and automate compliance workflows to manage risk effectively.\n\nFlexible Ecosystem Integration\nAccelerate time to value with prebuilt integrations for Microsoft Teams, Salesforce (including Service Cloud Voice), and other leading CRMs. Securely connect to agency databases for smarter, more personalized interactions.\n\nNiCE is globally recognized for its industry compliance and security with robust encryption, advanced threat detection, and continuous monitoring to protect its customers’ sensitive data around the clock.\n\nRecognized as a market leader and trusted by organizations throughout 150+ countries worldwide, NiCE solutions are widely adopted across industries connecting people, systems, and workflows to work smarter at scale, elevating performance across the organization, and delivering proven, measurable outcomes.", "fedramp_msg": "N/A", "sales_email": "fedrampsolutions@nice.com", "security_email": "nicecxonefedramp@nice.com", "website": "http://www.nice.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Communication", "Contact Center", "Customer Relations Management (CRM)", "Customer Service" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2430847803", "name": "NinjaOne", "cloud_service_provider": "NinjaOne", "cloud_service_offering": "NinjaOne for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/NinjaOne%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-01-30T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-04-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2025-07-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-09-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": "2025-01-30T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-04-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-07-09T20:00:00.000Z", "cert_date": "2025-09-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-09-10T20:00:00.000Z", "annual_assessment": "2011-07-09T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "National Credit Union Administration", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "NinjaOne for Government automates the hardest parts of IT to easily manage, protect, and support all endpoints. NinjaOne enables centralized management across all endpoints leveraging a unified data model on a turnkey SaaS platform that delivers speed and scalability. NinjaOne’s agent- and profile-based endpoint management solution increases productivity, reduces security risk, and lowers IT costs. \n\n Key Components of the NinjaOne for US Government platform include: \n- Windows, Mac, and Linux endpoint management \n- MDM (Mac & iOS) \n- OS and third party application management \n- Real-time device monitoring \n- Remote Access \n- Software management \n- Script deployment & automation engine \n- IT asset reporting \n- Endpoint and server backup \n- IT Documentation \n- Ticketing \n- EDR integrations", "fedramp_msg": "N/A", "sales_email": "Federal@ninjaone.com", "security_email": "compliance@ninjaone.com", "website": "https://www.ninjaone.com/government/federal/", "uei": "KDVWGRN8C177", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management", "Mobile Device Management (MDM)", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2620841940", "name": "NinjaOne", "cloud_service_provider": "NinjaOne", "cloud_service_offering": "NinjaOne for Government – FedRAMP High", "logo": "", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-05-05T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-05-05T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "NinjaOne for Government delivers a cloud-native unified IT operations platform built for endpoint management, automation, and security at scale. IT teams can automate patching, enforce policies, and manage all endpoints from a single, unified interface. With industry-leading time to value, agencies can be fully implemented in under 30 days and achieve operator proficiency in under 10. NinjaOne requires no infrastructure overhead, allowing agencies to modernize IT operations and shift resources from reactive tasks to mission-critical objectives. \n\n \nKey Components of the NinjaOne for Government platform include: \n\n- Endpoint management \n\n- Windows patching \n\n- Patching catalog \n\n- SSO \n\n- Remote access \n\n- Reporting", "fedramp_msg": "", "sales_email": "Federal@ninjaone.com", "security_email": "compliance@ninjaone.com", "website": "https://www.ninjaone.com/government/federal/", "uei": "KDVWGRN8C177", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Mobile Device Management (MDM)", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2133141131", "name": "Nintex", "cloud_service_provider": "Nintex", "cloud_service_offering": "Nintex Automation GE Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Nintex%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-03-08T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-03-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-03-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-03-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-03-13T20:00:00.000Z", "cert_date": "2024-03-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-03-19T20:00:00.000Z", "annual_assessment": "2011-03-11T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "Strategic Petroleum Reserve", "United States Citizenship and Immigration Services" ], "agency_reuse": [ "" ], "service_description": "Nintex Automation GE Platform (Nintex GE) is delivered as SaaS offering using a multi-tenant Government Only cloud computing environment. It is available to the DoD, federal, state, local and tribal government communities as well as their respective contractors.\r\nThe Nintex Automation GE Platform (Nintex GE) solution is a suite of SaaS products available that allows government entities to automate both simple and sophisticated business processes, such as approving and signing documents, or hiring and onboarding employees.\r\nWith a simple drag-and-drop, no-code interface, users can design workflows, forms, and tasks, and integrate third-party platforms such as Salesforce, Microsoft Office, Zendesk and more, and create a seamless experience that minimizes manual touchpoints and streamlines efficiency.\r\nThrough Workflow Connections, organizations control which third-party services they connect their workflows to, and know their data is secure and compliant throughout the process.\r\nThe Nintex GE system via DocGen further provides agencies leveraging Salesforce the ability to generate precise and accurate documents for sophisticated business functions like recruiting documents, contracts, or work orders, all without leaving their Salesforce environment or the need for code. This allows users to create, manage and generate document packages within Salesforce in both Lightning or Classic, without losing the benefits of an easy-to-use and familiar user experience. Users can output data to a variety of endpoints and know their document data is secure and compliant throughout the process.", "fedramp_msg": "N/A", "sales_email": "sales@nintex.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://www.nintex.com/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Data Management", "Human Resources", "Marketing & Sales", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2213764335", "name": "Noblis", "cloud_service_provider": "Noblis", "cloud_service_offering": "RunCyberAssurance", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/RunCA%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-09-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2022-10-05T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to Agency Authorization In Process" }, { "date": "2023-08-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-10-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-09-28T20:00:00.000Z", "cert_date": "2023-08-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-08-31T20:00:00.000Z", "annual_assessment": "2011-09-28T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "Noblis’ RunCyberAssurance® is a comprehensive, automated solution that advances the efficacy of Continuous Monitoring programs. The Noblis RunCyberAssurance solution enables agencies and their Cloud Service Providers to gain a fast, accurate view into their vulnerabilities, manage Plan of Action and Milestones (POA&Ms) and deviation requests and improve visibility into the security posture of complex information systems. RunCyberAssurance frees cybersecurity professionals from mundane manual tasks, allowing them to focus on high-value threat assessment activities. The solution accepts data feeds “as is” from over 40 industry standard vulnerability scanning tools and generates reports and outputs in FedRAMP and Open Security Controls Assessment Language (OSCAL) formats. \n\nNoblis’ RunCyberAssurance is powered by our EDGE@AWS Platform-as-a-Service (PaaS) and leverages the Community AWS GovGloud Infrastructure-as-a-Service. In addition, it leverages AWS US East/West, Okta ID-as-a-Service and ServiceNow. The Noblis EDGE@AWS PaaS provides a FedRAMP Moderate compliant platform for Noblis applications and systems.", "fedramp_msg": "N/A", "sales_email": "answers@noblis.org", "security_email": "answers@noblis.org", "website": "https://www.noblis.org/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2512056954", "name": "NORC", "cloud_service_provider": "NORC", "cloud_service_offering": "Data Enclave Gov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/NORC%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-01T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-06-03T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "PaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The NORC Data Enclave® Gov is a data management platform that enables our public and private sector clients to share confidential data sets with research communities in pursuit of evidence-based discovery. The Data Enclave Gov is delivered as a PaaS using a multi-tenant hybrid cloud environment. \n\nEmpowering Collaborative Research \n\nThe scalable, high-performance virtual environment provides research teams with access to database, statistical, analytical, visualization, and reporting tools within an analytics platform. Specially designed for research work, the Data Enclave Gov balances security, privacy, and utility to optimize collaboration and support meaningful outcomes.\n\nDriving Value\n\nFor our clients, the Data Enclave Gov offers a sound, efficient, flexible, and reliable data-sharing solution built with clear processes and strict standards for access and operations. Our secure data management platform can be tailored to adhere to regulatory frameworks, including CIPSEA, HIPAA, FERPA, COPPA, SOPPA, and others.\n\nWho We Serve\n\nThe Data Enclave Gov is a research-ready solution for federal and state agencies, academic institutions, nonprofit organizations, foundations, and commercial entities.\n\nNORC at the University of Chicago\n\nThe NORC Data Enclave Gov is developed, distributed, and maintained by NORC at the University of Chicago, an objective, nonpartisan research organization that delivers insights and analysis decision-makers trust.", "fedramp_msg": "N/A", "sales_email": "ADS@norc.org", "security_email": "InformationSecurity@norc.org", "website": "https://www.norc.org/about/departments/advanced-data-solutions-center.html", "uei": "MPYFY5UMSDP4", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Education & Training", "Legal & Policy", "Operations Management", "Research", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2434074613", "name": "NormShield, Inc. DBA Black Kite", "cloud_service_provider": "NormShield, Inc. DBA Black Kite", "cloud_service_offering": "Third-Party Risk Intelligence System (TRIS)'s", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TRIS%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-03-25T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Linford & Company", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Black Kite is delivered as a SaaS offering using a multi-tenant public cloud computing environment. It is available to the public, federal, state, local, and tribal governments, as well as research institutions, federal contractors, government contractors etc. Black Kite offers a separate configuration for federal/public sector customers to maintain the highest possible level of information security. Black Kite provides a defensive platform that spans the entirety of the third-party risk management life cycle for cyber risk professionals looking to quantify and maintain visibility of their risk exposure.\nBlack Kite’s core application, is a multi-user, transaction-based application suite that gives a three-dimensional risk picture of a company and its vendors through:\n• A cyber risk technical assessment.\n• A factor analysis of information risk (FAIR) analysis (the probable financial impact of a breach caused by a vendor).\n• An external estimate of compliance (assessing that vendors have appropriate policies and processes in place).\n• Executives get an easy-to-understand “Cyber Risk Report” with letter grade scores.\n• IT security teams can drill down to the technical details behind each risk category.\n• Risks/vulnerabilities are prioritized by severity so that security engineers can quickly identify critical issues and mitigate them.\n• Industry benchmarks and comparisons are provided to help identify trends and pinpoint areas for improvement.\n• Grading is based on industry standards and best practices (NIST, MITRE CVSS, FAIR, etc.)", "fedramp_msg": "", "sales_email": "marketing@blackkite.com", "security_email": "security@blackkite.com", "website": "https://gov.blackkitetech.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2602138115", "name": "Nozomi Networks Inc.", "cloud_service_provider": "Nozomi Networks Inc.", "cloud_service_offering": "Vantage for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Nozomi%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-10-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-10-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Vantage for Government is an AI-powered OT/IoT cyber-resilience platform specifically designed to meet the security needs of federal agencies and critical infrastructure operators. It delivers unified asset visibility, threat detection and response, and risk management capabilities for OT, IoT and IT environments. \r\n \r\n1. Asset Visibility \r\n1.a. Asset Inventory: The platform combines passive, active and host-based data collection with AI-driven analysis and enrichment. This provides visibility across wired, wireless, and endpoint environments. Integrations with third-party systems and external files consolidate asset data into a single platform. \r\n1.b. Vulnerability and Exposure Management: The platform provides non-intrusive OT/IoT vulnerability detection with prioritized remediation recommendations based on exploitability and operational impact. \r\n \r\n2. Threat Detection and Response \r\n2.a. Threat Detection: The platform continuously monitors network and endpoint activity using built-in detection rules and OT/IoT-specific threat intelligence to detect ransomware, state-sponsored activity and hacktivist campaigns. AI-driven correlation reduces alert fatigue by delivering actionable, prioritized alerts. \r\n2.b. Process Anomaly Detection: The platform extracts commands and process telemetry through deep packet inspection of OT/IoT protocols. It establishes baselines and detects anomalies (including unknown threats) in process telemetry, control commands and device behavior. \r\n2.c. AI-Driven Remediation Recommendations: The AI engine correlates alerts and recommends mitigation actions based on operational context and defined workflows. \r\n2.d. Response Actions: The platform can automate response actions, such as enforcing network rules and isolating hosts, through integrations with SIEM, SOAR, firewalls and other SOC tools, or directly at the endpoint. \r\n2.e. Customizable Playbooks: User-defined playbooks and workflows standardize manual incident response across security and operations teams. They help teams share context and maintain timely communication. \r\n \r\n3. Risk Management & Compliance \r\n3.a. Measurable Risk: The platform provides customizable, multifactor risk scoring at the asset, zone, site and enterprise levels. Risk scores are assessed using asset inventory, network mapping, vulnerability detection, threat intelligence, and operational significance. \r\n3.b. Risk Mitigation: The platform supports risk mitigation through prioritized remediation recommendations based on operational impact and asset criticality. \r\n3.c. Compliance & Risk Monitoring: Dashboards with real-time risk trends, site-level accountability, industry benchmarks and compliance controls help teams communicate risk across the organization.", "fedramp_msg": "", "sales_email": "bill.aubin@nozominetworks.com", "security_email": "fedramp@nozominetworks.com", "website": "https://www.nozominetworks.com/", "uei": "GVLPML92XBQ3", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Network Management", "Operations Management", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2527237823", "name": "Ntelsec", "cloud_service_provider": "Ntelsec", "cloud_service_offering": "SectorNet", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Ntelsec%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-08-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-08-22T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "SectorNet is a secure, centralized platform designed to enable seamless, real‑time collaboration and Controlled Unclassified Information (CUI) exchange across the public and private sectors. It accelerates information sharing between federal, state, and local government bodies and their private-sector partners by providing an encrypted, federated access environment.", "fedramp_msg": "N/A", "sales_email": "info@ntelsec.com", "security_email": "support@ntelsec.com", "website": "https://sectornet.us/", "uei": "RBNFWHY8CMQ3", "small_business": true, "business_categories": [ "Collaboration", "Communication" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2102036897", "name": "Nuance", "cloud_service_provider": "Nuance", "cloud_service_offering": "Nuance Dragon", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Nuance%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-01-27T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-08-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-01-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-05-06T20:00:00.000Z", "cert_date": "2021-08-16T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-08-16T20:00:00.000Z", "annual_assessment": "2011-05-06T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "Indian Health Services" ], "agency_reuse": [ "" ], "service_description": "The Nuance Dragon Cloud portfolio of solutions (NU-DRG) includes Cloud based speech recognition software that provides a consistent and personalized documentation experience across solutions, platforms, and devices regardless of physical location. It allows Government agency users, including clinicians and law enforcement professionals, to use their voice to securely capture required narrative text more naturally and efficiently - anywhere, anytime. Designed for speed, accuracy, and flexibility, the Dragon Cloud solutions supports FedRAMP and HIPAA requirements for patient, PII and PHI security and confidentiality by employing secure encryption methods throughout the workflow. Dragon runs on geographically dispersed; active active data centers hosted on the Project Hosts' Federal Private Cloud which is in turn deployed on Microsoft Azure Government.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "NU-FedRAMP@microsoft.com", "website": "https://www.nuance.com/index.html", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Health & Wellness", "Law Enforcement" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2134455708", "name": "Nucleus Security, Inc", "cloud_service_provider": "Nucleus Security, Inc", "cloud_service_offering": "Nucleus for Government (NucleusGov)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Nucleus%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-05-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-04-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-02-29T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-05-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-04-19T20:00:00.000Z", "cert_date": "2024-02-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Centers for Medicare & Medicaid Services", "fedramp_auth": "2024-02-29T20:00:00.000Z", "annual_assessment": "2011-04-19T04:00:00.000Z", "independent_assessor": "Linford & Company", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Centers for Medicare & Medicaid Services", "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "Nucleus for Government (NucleusGov) is a risk-based vulnerability management platform purpose-built to streamline vulnerability and risk management within government entities and cloud service providers. By consolidating vulnerability data from all scanning tools (Network scanners, CSPM, ASPM, SAST, DAST and more) Nucleus creates a unified repository for vulnerability and asset information across the entire enterprise. Its workflow engine automates dozens of manual, repetitive, and error-prone tasks such as vulnerability risk assessment, prioritization, ticketing, and reporting to speed up vulnerability remediation and minimize the level of effort required. Nucleus's unique features for compliance reporting, access control and vulnerability intelligence address the government's compliance requirements, all while modernizing your organization’s vulnerability management program and reducing the risk of data breaches.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@nucleussec.com", "website": "https://nucleussec.com/government/", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1734750951", "name": "OCLC Incorporated", "cloud_service_provider": "OCLC Incorporated", "cloud_service_offering": "WorldShare Management Services", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/OCLC%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-01-28T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-06-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-07-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 8, "reuse": 7, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-01-28T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-06-18T20:00:00.000Z", "cert_date": "2020-07-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Census Bureau", "fedramp_auth": "2020-07-01T20:00:00.000Z", "annual_assessment": "2011-06-18T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Labor", "Department of State", "Federal Trade Commission", "National Institute of Standards and Technology", "Other Federal Entity", "Savannah River National Lab", "United States Census Bureau", "United States Geological Survey" ], "agency_reuse": [ "" ], "service_description": "OCLC is a nonprofit global library organization. Through OCLC, member libraries cooperatively produce and maintain WorldCat, the world’s most comprehensive global network of data about library collections and services. Libraries gain efficiencies through OCLC’s WorldShare Management Services (WMS), a cloud-based library services platform. With WorldCat as its foundation, WMS allows library staff to draw on the collaborative data and work of libraries worldwide for more efficient workflows, and to better manage and access resources in all formats. WMS offers all the applications needed to manage a library, including acquisitions, circulation, resource sharing, metadata and electronic resource management. WMS also offers analytics, including custom reports and visualizations, and a discovery service for library users. Products included in the WorldShare platform:\n\n* Library management systems: Worldshare Acquisitions, Worldshare Circulation, Worldshare Report Designer, EZproxy\n* Cataloging/metadata services: Worldshare Collection Manager, Worldshare Record Manager, Worldshare Knowledgebase. \n* Resource sharing services: WorldShare ILL and Tipasa. \n* Discovery services: WorldCat Discovery\r\n* Digital collection management services: CONTENTdm v2", "fedramp_msg": "N/A", "sales_email": "fedramp@oclc.org", "security_email": "fedramp@oclc.org", "website": "https://www.oclc.org/", "uei": "", "small_business": false, "business_categories": [ "Content Management System (CMS)", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1512167750", "name": "Okta", "cloud_service_provider": "Okta", "cloud_service_offering": "Okta IDaaS Regulated Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Okta%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-12-17T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-04-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 39, "reuse": 695, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-12-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2017-04-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Executive Office for United States Attorneys", "fedramp_auth": "2017-04-26T20:00:00.000Z", "annual_assessment": "2011-07-20T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2000174962", "csp": "Abbott, Inc.", "cso": "LibreView for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2425960757", "csp": "Abnormal AI ", "cso": "Abnormal AI for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1834336116", "csp": "Accenture Federal Services", "cso": "Accenture Extended Detection and Response (XDR) for government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2108360349", "csp": "Adobe", "cso": "Adobe Acrobat Sign for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2031936863", "csp": "Armis Federal LLC", "cso": "Armis FedRAMP Edition (AFE)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2317139564", "csp": "Articulate Global LLC", "cso": "Articulate 360", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1908649566", "csp": "Aruba Networks", "cso": "Aruba Central", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2527132001", "csp": "Asana Inc.", "cso": "Asana", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2412062433", "csp": "Atlassian", "cso": "Atlassian Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814168113", "csp": "Authentic8, Inc.", "cso": "Silo", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2410056366", "csp": "Avature Federal Platform", "cso": "Avature Limited", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2401047002", "csp": "Axonius Federal Systems", "cso": "Axonius Asset Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430123303", "csp": "Aztec Software", "cso": "Aztec Learning System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918442180", "csp": "Bizagi Corp.", "cso": "Bizagi Cloud for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2424553196", "csp": "BLINK CHARGING", "cso": "BLINK GOV", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2035056105", "csp": "Bluescape", "cso": "Bluescape with n8n for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1510057481", "csp": "BMC Helix, Inc.", "cso": "BMC Helix", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1916254386", "csp": "Boomi", "cso": "Boomi Enterprise Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125059322", "csp": "Center for Translational Data Science (CTDS)", "cso": "Gen3 Data Ecosystems Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2018946952", "csp": "CGI Federal", "cso": "Sunflower Asset Management Cloud (SAMC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2334756650", "csp": "Chainalysis", "cso": "Reactor", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332984245", "csp": "ChargePoint, Inc.", "cso": "CP Fed Cloud", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2220549818", "csp": "CirrusMD", "cso": "CirrusMD Virtual Health Chat for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2518163100", "csp": "Cisco", "cso": "Spaces for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2315535023", "csp": "Cisco Systems Inc.", "cso": "Cisco Meraki US Government Region", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2523656707", "csp": "Cisco Systems, Inc.", "cso": "Cisco ThousandEyes for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2012534927", "csp": "Cisco Systems, Inc.", "cso": "Cisco Catalyst SD-WAN for Government (SDWAN-G)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2014656304", "csp": "Civis Analytics, Inc.", "cso": "Civis Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2309544938", "csp": "Cloudera Government Solutions, Inc", "cso": "Cloudera for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000863987A", "csp": "Cloudflare", "cso": "Cloudflare for Government - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2013059515", "csp": "Cofense", "cso": "Cofense PhishMe", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2306445868", "csp": "Cohesity", "cso": "Cohesity Cloud Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1706403967", "csp": "Collibra", "cso": "Collibra Platform for Government (CPG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234550858", "csp": "Concur Technologies, Inc.", "cso": "Concur Cloud for Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1915750265", "csp": "Continuum GRC, Inc.", "cso": "ITAM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2200507410", "csp": "Copado", "cso": "Copado GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1206111371", "csp": "CoSo Cloud, LLC.", "cso": "Knox Systems", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2122140784", "csp": "Covergent Solutions Inc dba Exiger Government Solutions (EGS)", "cso": "Exiger Federal Cloud (EFC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2519759620", "csp": "Cribl Inc.", "cso": "Cribl.Cloud Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1404304159", "csp": "DataBank Holdings", "cso": "FedRAMP Compliant CloudPlus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324740262", "csp": "Databricks, Inc.", "cso": "Databricks on AWS GovCloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1834740315", "csp": "Databricks, Inc.", "cso": "Databricks on AWS US East/West", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1606087903A", "csp": "Deltek - Replicon", "cso": "Replicon Cloud Platform (Enterprise Time Tracking Platform)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2424945160", "csp": "dMetrics", "cso": "Minsky No-code ML/NLP Knowledge Graphing Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814557199", "csp": "DNAnexus, Inc.", "cso": "DNAnexus Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2432940371", "csp": "Docebo", "cso": "Docebo Learning Platform for Gov (DCBO-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2419537309", "csp": "DocketScope, Inc.", "cso": "DocketScope®", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603307884", "csp": "e-Builder, A Trimble Company", "cso": "Trimble Unity Construct Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2004446306", "csp": "Elastic", "cso": "Elastic Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2309381948", "csp": "Elekta Solutions", "cso": "Elekta ProKnow Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2034966708", "csp": "End To End Computing", "cso": "Singularity", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2510664395", "csp": "ExtraHop Networks", "cso": "ExtraHop RevealX Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1932554201", "csp": "Forcepoint", "cso": "ONE – Security Service Edge (SSE) – CASB/DLP/SWG/ZTNA/RBI", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2131766015", "csp": "Genesys", "cso": "Genesys Cloud CX", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2411959145", "csp": "GitLab", "cso": "GitLab Dedicated for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2035860874", "csp": "Global Telehealth Services, inc.", "cso": "GTS VirtualHealth Platform (GTS-VP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324055183", "csp": "Govini", "cso": "Ark.ai", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1919750997", "csp": "HackerOne", "cso": "HackerOne Continuous Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1831429369", "csp": "HireVue", "cso": "Recruitment Assessments and Video Interviewing", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1408115175", "csp": "Huddle US", "cso": "Huddle Enterprise Cloud Content Collaboration and File Sharing Portal for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1718334757", "csp": "ID.me", "cso": "ID.me Identity Gateway", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2429166928", "csp": "Ideagen", "cso": "Ideagen Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2230244107", "csp": "Illumio, Inc.", "cso": "Illumio Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2017257053", "csp": "Infoblox", "cso": "Infoblox Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029331613", "csp": "Informatica LLC", "cso": "Informatica Intelligent Cloud Services (IICS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1724526654", "csp": "Intelliworx", "cso": "Intelliworx Cloud Workflow Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1816364586", "csp": "Ivanti", "cso": "Ivanti Neurons for ITSM (Formerly Service Manager)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102758152", "csp": "Juniper Networks", "cso": "Juniper Mist", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2118080669", "csp": "Knightscope, Inc.", "cso": "Knightscope Autonomous Security Robot (Knightscope ASR)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406453618", "csp": "LabArchives", "cso": "LabArchives for Government (LG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2120962552", "csp": "LaunchDarkly", "cso": "LaunchDarkly", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2218073444", "csp": "Lucid Software, Inc.", "cso": "Lucid GovSuite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335153827", "csp": "MasterControl", "cso": "Quality Excellence Gov (Qx Gov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1902240018", "csp": "MDRC", "cso": "SPROUT", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332852130", "csp": "Medallia Inc.", "cso": "Mindful by Medallia", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2210666939", "csp": "Melissa", "cso": "Melissa GovCloud Address Suite", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2032665434", "csp": "Menlo Security", "cso": "Cloud Security Platform powered by Isolation Core", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2126176344", "csp": "MicroStrategy", "cso": "MicroStrategy Cloud for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1910758409", "csp": "Mimecast", "cso": "Incydr Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2122150307", "csp": "MongoDB", "cso": "MongoDB Atlas for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2224739070", "csp": "National Resident Matching Program", "cso": "iMatch", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234963115", "csp": "NCR Government, LLC", "cso": "NCR VOYIX GOVERNMENT CLOUD", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2105946715", "csp": "Netskope, Inc.", "cso": "Netskope NewEdge Government.", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1607057910", "csp": "New Relic", "cso": "New Relic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430847803", "csp": "NinjaOne", "cso": "NinjaOne for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2133141131", "csp": "Nintex", "cso": "Nintex Automation GE Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213764335", "csp": "Noblis", "cso": "RunCyberAssurance", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1721059275A", "csp": "OneStream Software", "cso": "OneStream Cloud - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2100059668", "csp": "OnSolve LLC", "cso": "OnSolve Platform for Critical Event Management", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1913470600", "csp": "Palo Alto Networks, Inc.", "cso": "Palo Alto Networks Government Cloud Services", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2235229299", "csp": "Paperless Innovations, Inc.", "cso": "Actus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1306282198A", "csp": "Pegasystems", "cso": "Pega Cloud for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1818240234", "csp": "Perceptyx", "cso": "Perceptyx Insights Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102577114", "csp": "Pitney Bowes", "cso": "SendPro 360", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2127765215", "csp": "Point Blue Conservation Science", "cso": "Point Blue Science Cloud", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2406651384", "csp": "Precisely Software", "cso": "Data Integrity Suite for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2224752400", "csp": "Privoro LLC", "cso": "Privoro Fulcrum Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2516365096", "csp": "Procore Technologies, Inc", "cso": "Procore for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2313477206", "csp": "Quadient inc.", "cso": "S.M.A.R.T. - Federal Editions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2422240916", "csp": "Rapid7", "cso": "InsightGovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1722838693", "csp": "Rave Mobile Safety", "cso": "Rave Safety Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2004753002", "csp": "Relativity ODA LLC", "cso": "RelativityOne Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234256499", "csp": "Rubrik", "cso": "Rubrik Security Cloud - Government (RSC-G)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919071020A", "csp": "SentinelOne", "cso": "SentinelOne Singularity Platform High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1823447014", "csp": "Slack Technologies", "cso": "Slack", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1809360201", "csp": "Snowflake Inc.", "cso": "The Data Cloud on AWS US East/West", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1809360202A", "csp": "Snowflake Inc.", "cso": "The Data Cloud on Azure Government (High)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2230451369", "csp": "Snyk", "cso": "Snyk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2334936522", "csp": "Socure, Inc.", "cso": "Socure for Government (SocureGov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000945223", "csp": "Software AG Government Solutions", "cso": "ARIS Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2002367706", "csp": "Somnoware Healthcare Systems", "cso": "Somnoware", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213722684", "csp": "Spider Strategies", "cso": "Spider Impact for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2314156865", "csp": "Splunk", "cso": "Splunk Cloud Platform for FedRAMP High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1607197917", "csp": "Splunk", "cso": "Splunk Cloud Platform for FedRAMP Moderate", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2035740126", "csp": "Sprinklr, Inc.", "cso": "Sprinklr CXM for Government (CXM)", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2130949241", "csp": "StackArmor", "cso": "Rally", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918740338", "csp": "Sumo Logic", "cso": "Sumo Logic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134635186", "csp": "Synack", "cso": "On-Demand Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1913835324", "csp": "TalaTek, LLC", "cso": "TalaTek intelligent Governance and Risk Integrated Solution (TiGRIS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213647361", "csp": "Talkdesk", "cso": "Talkdesk CX Cloud™ Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2215045786", "csp": "Tenable", "cso": "Tenable Cloud Security for US Government - Ermetic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814276801", "csp": "Tenable Public Sector (TPS)", "cso": "Tenable Government Solutions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1819057982", "csp": "The Coleridge Initiative, Inc.", "cso": "Administrative Data Research Facility (ADRF)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2334748657", "csp": "ThreatConnect", "cso": "ThreatConnect For Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1935245314A", "csp": "Trellix", "cso": "Trellix GovCloud Security Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2505553757", "csp": "Turning Point Global Solutions, L.L.C", "cso": "Network Inventory and Optimization Solution (NiOS®)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2108649352", "csp": "Tyler Federal, LLC", "cso": "Tyler Federal Product Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125561001", "csp": "Unqork, Inc.", "cso": "Unqork for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1817874315", "csp": "Valimail", "cso": "Valimail Enforce Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2525556241XM", "csp": "Vanta", "cso": "Vanta Government Cloud", "status": "FedRAMP Certified", "impact_level": "20x Moderate", "impact_level_number": "6" }, { "id": "F1509237360", "csp": "Veracode", "cso": "Veracode Online Security Platform for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1804557312", "csp": "Veritone, Inc.", "cso": "Veritone Intelligent Digital Evidence Management System (iDEMS) for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416859101", "csp": "Verkada Inc", "cso": "Verkada Command Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1825232355A", "csp": "WellHive Holdings, LLC", "cso": "WellHive", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2032042635", "csp": "WidePoint Integrated Solutions Corp.", "cso": "Intelligent Technology Management System (ITMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2308034636A", "csp": "Wiz, Inc.", "cso": "Wiz for U.S. Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1726564822", "csp": "Workiva", "cso": "Workiva Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2113557839", "csp": "Yello Dba Recsolu Inc", "cso": "Yello Government Recruiting Solution", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1821856903", "csp": "Zendesk", "cso": "Zendesk Customer Support and Help Desk Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" } ], "agency_authorizations": [ "Administration for Community Living", "Agency for Healthcare Research and Quality", "Defense Information Systems Agency", "Department of Agriculture", "Department of Health and Human Services", "Department of Homeland Security", "Department of State", "Department of Veterans Affairs", "Executive Office for United States Attorneys", "Federal Aviation Administration", "Federal Communications Commission", "Federal Reserve System", "Federal Retirement Thrift Investment Board", "Federal Trade Commission", "Food and Drug Administration", "General Services Administration", "Government National Mortgage Association", "Health Resources and Services Administration", "Immigration and Customs Enforcement", "Internal Revenue Service", "National Credit Union Administration", "National Endowment for the Arts", "National Science Foundation", "National Telecommunications and Information Administration", "Office of Financial Research", "Office of Justice Programs", "Office of Personnel Management", "Office of the Comptroller of the Currency", "Strategic Petroleum Reserve", "Substance Abuse and Mental Health Service Administration", "Surface Transportation Board", "U.S. Election Assistance Commission", "U.S. International Development Finance Corporation", "United States Patent and Trademark Office", "Universal Service Administrative Company", "Warfighting Acquisition University" ], "agency_reuse": [ "" ], "service_description": "The Okta IDaaS Regulated Cloud service offering provides centralized identity and access management capabilities to customers who want to manage access across any application or device, whether they are on-premise in the customer's office/data center or in the cloud. The Okta IDaaS Regulated Cloud service provides several important capabilities, including:\n- Okta Identity Engine (OIE)\n- Okta Multi-factor authentication (MFA)\n- Okta Adaptive MFA (AMFA)\n- Okta Single Sign-On (SSO)\n- Okta Verify\n- Okta API Integration\n- Okta FastPass - NIST 800-63B AAL2/AAL3 authenticator", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@okta.com", "website": "https://www.okta.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "Identity Threat Protection (ITP)" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2131856836", "name": "Okta", "cloud_service_provider": "Okta", "cloud_service_offering": "Okta IDaaS Government High Cloud (GHC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Okta%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-02-17T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-09-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-03-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 49, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-02-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-09-19T20:00:00.000Z", "cert_date": "2023-03-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Executive Office for United States Attorneys", "fedramp_auth": "2023-03-23T20:00:00.000Z", "annual_assessment": "2011-09-19T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2520950455", "csp": "Andesite AI, Inc.", "cso": "Andesite Azimuth for Government AAG", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2330939028", "csp": "Aqua Security Software Inc.", "cso": "Aqua Platform for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2510550050", "csp": "Bugcrowd Inc.", "cso": "Bugcrowd for Government (BCGOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2317262742", "csp": "Ceribell", "cso": "Ceribell EEG", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2514624801", "csp": "Checkmarx", "cso": "Checkmarx One for Government (CXG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2521554684", "csp": "H2O.AI for Government", "cso": "H2O.AI", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2333538201", "csp": "Hypori, Inc.", "cso": "Hypori Government Cloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1303191948", "csp": "MAXIMUS Inc.", "cso": "MAXIMUS Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335850270", "csp": "Movius Interactive Corporation", "cso": "Movius MultiLine and Movius Decentralized Distributed Secure Communications", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2105946715", "csp": "Netskope, Inc.", "cso": "Netskope NewEdge Government.", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1919071020A", "csp": "SentinelOne", "cso": "SentinelOne Singularity Platform High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1722532017", "csp": "stackArmor", "cso": "Clarity", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2215045786", "csp": "Tenable", "cso": "Tenable Cloud Security for US Government - Ermetic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421252644", "csp": "Varonis", "cso": "Varonis DatAdvantage Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421252636", "csp": "Varonis", "cso": "Varonis Data Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1731347234", "csp": "Zimperium", "cso": "Zimperium Mobile Endpoint Cyber Security", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Bureau of Economic Analysis", "Department of Veterans Affairs", "Department of the Navy", "Executive Office for United States Attorneys", "First Responder Network Authority", "Health Resources and Services Administration", "National Institute of Standards and Technology", "United States Census Bureau" ], "agency_reuse": [ "" ], "service_description": "Okta for Government High service offering provides centralized identity and access management capabilities to customers who want to manage access across any application or device, whether they are on-premises in the customer’s office/data center or in the cloud. The Okta IDaaS platform is the primary application platform provided to customers. The IDaaS application provides several important features/capabilities, which are listed below.\n\n- Universal Directory: Okta Universal Directory provides a single view across all these groups with AD and LDAP directory integrations and out-of-the-box connections with HR systems, CSV files, and third-party IdPs.\nIntegration with Applications: Okta comes with pre-integrated applications that customers can select to allow their users to access them through the Okta Integration Network, either in their enterprise or in a cloud\n- Okta API Integration: Customers can also integrate their own applications with Okta API\n- Okta Sign-In Widget (SIW): SIW is the out of the box end user experience that our customers can deploy in an Okta hosted environment. SIW provides configurable user registration, sign in and recovery experience.\n- Okta Software Development Kit (SDKs): SDKs allow customers to build their own identity experience using Okta as a back end.\n- Okta Customer Organization Logging: Okta’s prebuilt monitoring, logging, and reporting tools make it easy to analyze security posture, user access events, lifecycle management transitions, security risks and other identity-related data.\n- Okta Admin Dashboard: Okta’s Admin Dashboard provides central administration and provisioning of users and the applications they can access.\n- Adaptive Multi-Factor Authentication (aMFA): Adaptive MFA provides an additional layer of security for access control, which gives Okta customers the ability to create contextual access policies that assess risk factors such as device, network, location, travel, IP, and other context at each step of the authentication process.\nSingle Sign-On (SSO): Okta SSO creates a seamless user experience by providing single sign-on to all the web and mobile applications users need to access.\n- Okta Verify: Okta Verify is Okta’s native desktop and mobile application that can be used for mobile client-based MFA authentication. Okta Verify supports the following authentication mechanisms against a customers’ organization: Time-based One-time Password (TOTP), Okta Push Challenge-Response, and Okta FastPass (signed once challenge)\n- Okta FastPass - NIST 800-63B AAL2/AAL3 authenticator", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@okta.com", "website": "https://www.okta.com/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Cybersecurity & Risk Management", "Human Resources", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "Breached Credentials Detection/Protection", "Identity Threat Protection (ITP)", "Okta Device Access", "Okta Identity Governance (OIG)", "Okta Workflows", "Secure Partner Access" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2515655059", "name": "Omnissa", "cloud_service_provider": "Omnissa", "cloud_service_offering": "Omnissa Government Services", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Omnissa%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-03-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-05-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-03-23T20:00:00.000Z", "cert_date": "2026-05-04T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-05-04T20:00:00.000Z", "annual_assessment": "2011-03-19T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Justice Management Division" ], "agency_reuse": [ "" ], "service_description": "Workspace ONE (WS1) is delivered as a SaaS offering using a multi-tenant Hybrid cloud computing environment. \n\nWS1 provides industry-leading management for desktops, servers, mobile devices, email, applications, content, and browsers, allowing organizations to easily deploy, configure, secure, and manage endpoint devices across multiple operating systems, user populations, geographies, and deployment profiles.", "fedramp_msg": "N/A", "sales_email": "OmnissaFederal@omnissa.com", "security_email": "ogs_fedramp_security@omnissa.com", "website": "https://www.omnissa.com/trust-center/compliance/#Public_Sector", "uei": "JM62X762KDG1", "small_business": false, "business_categories": [ "Analytics", "Content Management System (CMS)", "Customer Service", "Cybersecurity & Risk Management", "Fleet Management", "Mobile Device Management (MDM)", "Operations Management", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "Access & Hub Services", "Digital Employee Experience (DEX)", "Intelligence", "Mobile Analytics", "Unified Endpoint Management (UEM)" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1828848692", "name": "OneSpan Inc.", "cloud_service_provider": "OneSpan Inc.", "cloud_service_offering": "OneSpan Sign, E-Signature and Digital Signature Service", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/OneSpan%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-07-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-10-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-05-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-07-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-10-16T20:00:00.000Z", "cert_date": "2019-05-03T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-05-03T20:00:00.000Z", "annual_assessment": "2011-06-11T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture", "Department of Veterans Affairs", "Federal Reserve System", "Justice Management Division" ], "agency_reuse": [ "" ], "service_description": "OneSpan Sign has been helping government organizations move to paperless signing since 1997, making it the longest standing electronic signature solution in the U.S. Federal Government. As the first e-signature and digital transaction management solution granted ATO under FedRAMP, OneSpan Sign helps digitize and automate manual, paper-based processes in support of the government's digital transformation efforts. OneSpan Sign features include templates, workflow automation, mobile and offline signing, transaction management and comprehensive audit trails. OneSpan Sign also meets the government's stringent authentication requirements with out-of-the-box support for signing with government-issued Common Access Cards (CAC), PIV smart cards and derived credentials. Our proven FedRAMP authorized solution in used by the U.S. Census Bureau, U.S. Small Business Administration (SBA), USDA Natural Resources Conservation Service (NRCS), GSA and many others. The FedRAMP Program Management Office (PMO) itself also uses our platform to sign off on internal authorizations. OneSpan partners with Cloud Services Provider, Project Hosts, to deliver its e-signature solution in a FedRAMP compliant cloud hosted on Microsoft's world-class Azure cloud infrastructure. More information about OneSpan Sign can be found here: https://www.esignlive.com/fedramp/", "fedramp_msg": "N/A", "sales_email": "fedramp@onespan.com", "security_email": "security@onespan.com", "website": "https://www.onespan.com/fedramp", "uei": "", "small_business": false, "business_categories": [ "Accounting", "Collaboration", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Cybersecurity & Risk Management", "Human Resources", "Legal & Policy", "Marketing & Sales", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1721059275A", "name": "OneStream Software", "cloud_service_provider": "OneStream Software", "cloud_service_offering": "OneStream Cloud - High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Onestream%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-07-07T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-01-24T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 17, "reuse": 16, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-07-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-12-05T20:00:00.000Z", "cert_date": "2025-01-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Coast Guard", "fedramp_auth": "2025-01-24T20:00:00.000Z", "annual_assessment": "2011-08-27T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Bureau of the Fiscal Service", "Customs and Border Protection", "Department of Labor", "Department of Veterans Affairs", "Federal Housing Finance Agency", "First Responder Network Authority", "General Services Administration", "Immigration and Customs Enforcement", "Millennium Challenge Corporation", "National Cancer Institute", "Office of the Comptroller of the Currency", "Pension Benefit Guaranty Corporation", "Substance Abuse and Mental Health Service Administration", "United States Coast Guard" ], "agency_reuse": [ "" ], "service_description": "OneStream is a Corporate Performance Management (CPM) platform designed to support financial consolidation, reporting, planning, budgeting, and forecasting. Delivered as a SaaS offering, the OneStream Government Community Cloud is hosted via Microsoft Azure Government and tailored to meet the needs of federal, state, local, and tribal governments as well as research institutions and government contractors. The platform is built on a fault-tolerant, 64-bit architecture, ensuring high availability and scalability through multiple web and application servers.\n\nThe OneStream App for Windows is deployed using Microsoft ClickOnce Infrastructure or manual installation via an installation package provided by OneStream (OneStream Desktop). OneStream integrates with Microsoft Office through an Excel add-in, allowing users to interact with data and workflows directly within spreadsheets. The platform also supports data integration from multiple ERP and financial systems, enabling streamlined financial reporting and analysis.\n \nOneStream also offers customers the option to extend their application to address frequently faced business challenges through pre-packaged CPM solutions via the OneStream Solution Exchange. Customers who leverage Solution Exchange to install applications developed by OneStream or a third party are responsible for determining if the solution meets customer requirements prior to installation.", "fedramp_msg": "N/A", "sales_email": "sales@onestream.com", "security_email": "compliance@onestream.com", "website": "https://www.onestream.com/", "uei": "XG8MWFAKB4J5", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2100059668", "name": "OnSolve LLC", "cloud_service_provider": "OnSolve LLC", "cloud_service_offering": "OnSolve Platform for Critical Event Management", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/OnSolve%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-11-16T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-01-18T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-05-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-11-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-01-18T20:00:00.000Z", "cert_date": "2023-05-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-05-12T20:00:00.000Z", "annual_assessment": "2011-01-18T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture", "FHFA Office of the Inspector General", "Federal Energy Regulatory Commission", "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "The OnSolve Platform for Critical Event Management is a comprehensive software designed to help agencies in effectively managing and responding to critical events. It offers a suite of capabilities that enable timely communication, real-time monitoring and streamlined coordination to enhance overall situational awareness and response efficiency. With OnSolve, you can analyze historical physical threats and trends, leverage real-time AI-powered risk intelligence, communicate with personnel quickly and activate response teams. The Platform strengthens your agency’s ability to identify adverse events, analyze risks and respond throughout the entire resiliency lifecycle.\nYou have the expertise to protect your agency’s mission. With OnSolve you can protect your people and operations with the OnSolve Platform to:\n- Gain actionable intelligence gathered by filtering through massive amounts of event data to identify a crisis and know how it will impact your mission, operations and assets.\n- Enable teams with AI-powered technology to manage critical events and reduce risk faster and more reliably than ever before.\n- Achieve proactive efficiency through automation to allow response teams to focus on outcomes, rather than manually sorting through vast quantities of data.\n- Analyze historical physical threat data around specific locations to make more informed, risk-based decisions.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "", "website": "https://www.onsolve.com/", "uei": "U7M7JXRPKGZ8", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Cybersecurity & Risk Management", "Data Management", "Health & Wellness", "Human Resources", "Law Enforcement", "Operations Management", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2231648178", "name": "Onspring Technologies, LLC", "cloud_service_provider": "Onspring Technologies, LLC", "cloud_service_offering": "Onspring GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/OnSpring%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-01-11T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-05-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-03-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-01-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-05-16T20:00:00.000Z", "cert_date": "2024-03-27T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-03-27T20:00:00.000Z", "annual_assessment": "2011-05-16T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "Onspring GovCloud is a FedRAMP-authorized, cloud-based platform designed to support government governance, risk management, and compliance programs. It helps agencies centralize and structure data, enforce data integrity and access controls, manage workflows and deliver real-time reporting across critical processes.\r\n\r\nAgencies use Onspring GovCloud to support programs such as OMB A-123, POA&M, and other GRC initiatives, as well as related operational processes. The platform enables agencies to configure and extend out-of-the-box solutions while accommodating agency-specific requirements without added complexity.\r\n\r\nOnspring GovCloud also includes AI-powered capabilities that help teams accelerate documentation, improve consistency, surface insights, and reduce manual effort, while maintaining appropriate controls, transparency, and human oversight.", "fedramp_msg": "N/A", "sales_email": "sales@onspring.com", "security_email": "govcloudsecurityreporting@onspring.com", "website": "https://onspring.com/solutions/grc-software-for-the-federal-government/", "uei": "KCE8DGSLPFC8", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Governance, Risk, and Compliance (GRC)", "Human Resources", "Legal & Policy", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "Audit & Assurance", "Compliance", "Incident Management", "OMB A-123 Compliance", "POA&M", "Policy Management", "Risk Management", "Third-Party/Vendor Risk" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2110251776", "name": "Ontario Systems, LLC d/b/a Finvi", "cloud_service_provider": "Ontario Systems, LLC d/b/a Finvi", "cloud_service_offering": "Ontario Cloud Federal (OCF)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Finvi%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-06-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-06-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-01-31T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-06-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-06-30T20:00:00.000Z", "cert_date": "2023-01-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Bureau of the Fiscal Service", "fedramp_auth": "2023-01-31T20:00:00.000Z", "annual_assessment": "2011-06-30T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of the Fiscal Service", "National Credit Union Administration" ], "agency_reuse": [ "" ], "service_description": "The Ontario Cloud Federal (OCF) offers a unique Software-as-a-Service cloud-based solution for healthcare revenue and accounts receivables management including Contact Management and Payment Processing Solution to support debt collection, collections and receivables, payments, reporting and information services, customer service and software system development.", "fedramp_msg": "N/A", "sales_email": "info@finvi.com", "security_email": "fedramp@finvi.com", "website": "https://finvi.com/", "uei": "E9L1E634LNT9", "small_business": false, "business_categories": [ "Analytics", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2526948870", "name": "Ontic Technologies", "cloud_service_provider": "Ontic Technologies", "cloud_service_offering": "Ontic for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Ontic%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-03-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-04-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-03-25T20:00:00.000Z", "cert_date": "2026-04-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Drug Enforcement Administration", "fedramp_auth": "2026-04-24T20:00:00.000Z", "annual_assessment": "2011-03-24T04:00:00.000Z", "independent_assessor": "360 Advanced Compass Rose", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Drug Enforcement Administration" ], "agency_reuse": [ "" ], "service_description": "The Ontic Platform is a cloud-based SaaS Protective Intelligence solution that empowers federal security teams to protect high-value assets and personnel. By integrating public data, security systems, social media, dark web intelligence, geospatial risk mapping, and customizable threat assessments, Ontic delivers a unified view of potential threats. Teams can rapidly identify, assess, and investigate emerging risks with real-time alerts and continuous monitoring, enabling proactive protection and streamlined case management. With Ontic, federal agencies strengthen their security posture and respond to threats with greater speed and precision.\n\nLearn more at ontic.co/government", "fedramp_msg": "N/A", "sales_email": "zkebetz@ontic.co", "security_email": "security@ontic.co", "website": "https://ontic.co/industries/government/", "uei": "QH2YV619LRN5", "small_business": true, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2533155773", "name": "OpenAI", "cloud_service_provider": "OpenAI", "cloud_service_offering": "ChatGPT Enterprise and API Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/OpenAI%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2026-01-09T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-09-02T20:00:00.000Z", "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-01-09T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-01-09T20:00:00.000Z", "annual_assessment": "2011-01-09T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program", "U.S. Election Assistance Commission" ], "agency_reuse": [ "" ], "service_description": "OpenAI's ChatGPT services allow users to interact with OpenAI's models through a conversational interface. Users can request the models to analyze or generate text. OpenAI's API Platform enables developers to integrate the capabilities of our models into their own applications. The API can be utilized for a wide range of tasks involving the understanding or generation of natural language, code, and other content. Business services include robust security controls such as SAML SSO, enhanced administrative controls, and priority support.", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class C Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "fmillon@openai.com", "security_email": "fedramp@openai.com", "website": "https://openai.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Communication", "Data Management", "Design & Multimedia", "Grant Management", "Legal & Policy", "Operations Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1301101857", "name": "OpenText", "cloud_service_provider": "OpenText", "cloud_service_offering": "OpenText™ Core Application Security (Fortify On Demand)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/OpenText%20Logo2.jpg", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-02-07T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2015-02-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 7, "reuse": 10, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2014-02-07T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2015-02-04T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2015-02-04T20:00:00.000Z", "annual_assessment": "2011-10-01T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2401047002", "csp": "Axonius Federal Systems", "cso": "Axonius Asset Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Bureau of Labor Statistics", "Department of Homeland Security", "Federal Aviation Administration", "National Telecommunications and Information Administration", "State Office of the Inspector General", "United States Air Force", "United States Army" ], "agency_reuse": [ "22-002-08", "22-005-06", "22-015", "22-028" ], "service_description": "The OpenText™ Core Application Security (FoD) for US Public Sector performs security assessments of application code and web site/web services testing without any software to install or manage. Static Code Scanning of code such as Java, .NET and other major programming languages for security defects are performed in the FoD System at the code layer followed by an audit review by a OpenText Fortify Static auditor. Dynamic Web Site and Web Services testing use OpenText Fortify's WebInspect software as the scan engine, followed by a review from a OpenText Fortify Dynamic tester.", "fedramp_msg": "Fortify on Demand previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "uspublicsectorsales@opentext.com", "security_email": "fedramp@opentext.com", "website": "https://www.opentext.com/products/fortify-on-demand", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "OpenText™ Core Application Security (FoD)" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2203732438", "name": "OpenText", "cloud_service_provider": "OpenText", "cloud_service_offering": "OpenText Cloud for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/OpenText%20Logo2.jpg", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-10-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-04-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-04-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-10-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-04-25T20:00:00.000Z", "cert_date": "2024-04-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Institute of Allergy and Infectious Diseases", "fedramp_auth": "2024-04-15T20:00:00.000Z", "annual_assessment": "2011-04-25T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Library of Congress", "National Institute of Allergy and Infectious Diseases" ], "agency_reuse": [ "" ], "service_description": "OpenText Cloud for Government is a secure, scalable, cloud environment designed for the unique requirements of FedRAMP compliance. US federal agencies and entities requiring FedRAMP certification can use OpenText Cloud for Government to enable their digital transformation and cloud first initiatives as they move Information Management workloads to the cloud. The following OpenText applications are delivered as a service designed with a FedRAMP moderate level security control framework:\n\n - OpenText™ Content Management (Extended ECM) for Government - Enterprise Content Services that link the digital workplace and applications that power ERP, HCM, BPM and CRM business processes to drive operational excellence and govern unstructured content.\n\n - OpenText™ Process Automation for Government - Low-code development platform for building engaging process automation and dynamic case management applications. Fully integrated with OpenText™ Content Management (Extended ECM) for Government, OpenText™ Process Automation for Government helps re-engineer business processes around customer, employee and partner needs to deliver seamless digital experiences and adapt to changing market expectations while improving efficiency and managing risk.", "fedramp_msg": "N/A", "sales_email": "uspublicsectorsales@opentext.com", "security_email": "fedramp@opentext.com", "website": "https://www.opentext.com/products/content-management-for-government#services-section", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Customer Service", "Development Tools", "Finance", "Human Resources", "Legal & Policy", "Marketing & Sales", "Research" ], "service_last_90": [ "" ], "all_others": [ "OpenText™ Content Management (Extended ECM) for Government", "OpenText™ Process Automation for Government" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2215946050", "name": "OpenText", "cloud_service_provider": "OpenText", "cloud_service_offering": "ITMX Platform featuring Service & Asset Management, Universal Discovery, CMDB and Project & Portfolio Management", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/OpenText%20Logo2.jpg", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-06-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2023-06-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2023-11-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-08-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2023-06-23T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-06-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-11-03T20:00:00.000Z", "cert_date": "2024-08-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-08-21T20:00:00.000Z", "annual_assessment": "2011-11-02T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Peace Corps" ], "agency_reuse": [ "" ], "service_description": "OpenText provides the most complete and integrated Information Management platform, allowing companies to organize, integrate and protect data and content as it flows through business processes inside and outside the organization. The OpenText IT Management Platform (ITMX) offers Service & Asset Management (ITSM, ITAM), Universal Discovery & CMDB, and Project & Portfolio Management (PPM) in AWS GovCloud.\n\n- ITSM – Empower users with a modern self-service experience and boost IT efficiency with codeless configurations, built-in AI, and advanced automation.\n\n- ITAM – Govern your IT assets across their lifecycles. Procurement, financial, vendor, and contract management processes are included in one centralized platform.\n- Discovery and CMDB – Discover, map, and manage your hybrid IT configurations—on cloud or off. Service dependency mapping and proactive impact analysis improve your IT visibility and reduce service disruptions.\n\n- PPM – Drive business value through comprehensive strategic portfolio management and investment optimization, while ensuring projects are on time, in budget and satisfy goals. A strong workflow engine and what-if analysis scenario planning power this strategic portfolio and project management tool.\n\nHosted in the FedRAMP compliant Amazon Web Services (AWS) cloud, these services are fully configurable and scalable, and the service include integrations, and updates to the latest release.", "fedramp_msg": "N/A", "sales_email": "uspublicsectorsales@opentext.com", "security_email": "fedramp@opentext.com", "website": "https://www.opentext.com/products/observability-service-management-cloud", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "OpenText Asset Management [+ OpenText Core Asset Management]", "OpenText Project and Portfolio Management [+ OpenText Core Project and Portfolio Management]", "OpenText Service Management [+ OpenText Core Service Management]", "OpenText Universal Discovery and CMDB [+ OpenText Core Universal Discovery and CMDB]" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2113346550", "name": "OpenWater Software", "cloud_service_provider": "OpenWater Software", "cloud_service_offering": "OpenWater Awards", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/OpenWater%20Logo.png", "status": "FedRAMP Certified (In Remediation)", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-09-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-11-30T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-12-09T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" }, { "date": "2026-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Authorized to FedRAMP Certified (In Remediation). Under remediation for not following \"Addressing FedRAMP Communication\" rule. See Notice 0016" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-09-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-11-30T20:00:00.000Z", "cert_date": "2021-12-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Patent and Trademark Office", "fedramp_auth": "2021-12-09T20:00:00.000Z", "annual_assessment": "2011-11-30T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "National Science Foundation", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "OpenWater is a Software as a Service platform used to collect applications of all types. Typical uses include awards nominations, fellowship applications, scholarships, prizes. Applications can consist of dozens to hundreds of fields, and there is a built in form builder. Applications can have complex logic around required fields, large file uploads, and streaming video based applications.\n\nOnce data is collected in OpenWater, customizable judging / scoring rubrics can be configured. Reviewers will be able to access the portal and only see submissions assigned to them. The platform supports simple review modes all the way up to auto-assignment of 1000s of applications across 100s of reviewers.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "help@getopenwater.com", "website": "https://www.getopenwater.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2626461720", "name": "Optum Serve", "cloud_service_provider": "Optum Serve", "cloud_service_offering": "Optum Serve Federal Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Optum%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-01T22:13:50.904Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-06-30T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Optum Serve Federal Platform (OSFP) Management Plane is a centralized, multi-cloud management and security services layer that provides governance, security, and operational control across Azure Government and AWS GovCloud environments. It delivers shared services—including identity and access governance, logging and monitoring, security analytics, configuration and compliance management, and vulnerability management—to support and standardize operations for all connected systems within the enclave.", "fedramp_msg": "", "sales_email": "optumserve_fedramp_product@optum.com", "security_email": "optumserve_fedramp_security@optum.com", "website": "https://business.optum.com/en/federal-government.html", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1607077914A", "name": "Oracle", "cloud_service_provider": "Oracle", "cloud_service_offering": "Oracle Enterprise Performance Management (EPM)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Oracle%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-03-09T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-06-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-02-28T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 12, "reuse": 11, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-06-30T20:00:00.000Z", "cert_date": "2025-02-28T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-02-28T20:00:00.000Z", "annual_assessment": "2011-06-30T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Commodity Futures Trading Commission", "Defense Information Systems Agency", "Department of Education", "Department of Energy", "Federal Deposit Insurance Corporation", "Fermi National Accelerator Laboratory", "Government National Mortgage Association", "National Oceanic and Atmospheric Administration", "Nuclear Regulatory Commission", "Savannah River National Lab", "U.S. International Development Finance Corporation", "United States Census Bureau" ], "agency_reuse": [ "" ], "service_description": "Oracle Cloud Enterprise Performance Management (Oracle Cloud EPM) is a full suite of industry standard EPM business processes comprised of planning (strategy, financial, workforce, capital, projects), budget formulation and execution, consolidation and close, account reconciliation, profitability & cost management, tax reporting, narrative reporting, and enterprise data management. Customers can subscribe to some or all of the EPM Applications. Oracle Cloud EPM is a true SaaS offering, operated and maintained by Oracle within its secure Government Cloud facilities in the United States. Oracle Government Cloud is a community-cloud limited to federal, state and local agencies as well as select universities and federal contractors with a demonstrated need for FedRAMP authorization.\n\nOther cloud services can be leveraged to complement Oracle Fusion Applications including Oracle Fusion Cloud (Oracle - Fusion Cloud), Oracle Intelligent Advisor (Oracle Service Cloud), Oracle Digital Assistant, Oracle Integration Cloud and other PaaS (platform) services (Oracle Cloud Infrastructure-Government Cloud).", "fedramp_msg": "N/A", "sales_email": "", "security_email": "saas_fedramp_us_grp@oracle.com", "website": "https://www.oracle.com/performance-management/", "uei": "", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Data Management", "Finance" ], "service_last_90": [ "" ], "all_others": [ "Enterprise Data Management Cloud Service", "Enterprise Performance Management for United States Government Cloud Service", "Oracle Enterprise Performance Management Enterprise Cloud Service", "Oracle Enterprise Performance Management Standard Cloud Service" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1712871948", "name": "Oracle", "cloud_service_provider": "Oracle", "cloud_service_offering": "Aconex for Defense", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Oracle%20Aconex%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-01-14T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-10-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-10-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-01-14T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-10-14T20:00:00.000Z", "cert_date": "2020-10-30T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-10-30T20:00:00.000Z", "annual_assessment": "2011-01-04T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "United States Army", "United States Army Corps of Engineers" ], "agency_reuse": [ "" ], "service_description": "Oracle Aconex provides the %231 cloud and mobile collaboration platform for the global construction industry. This highly secure platform provides a single source of truth for all program related documents and communications across agency stakeholders and streamlines business process management with standardization across the project lifecycle. Oracle Aconex for Defense brings a modern set of flexible tools for simplifying how program data is captured, consumed, shared and analyzed.\n\nCapabilities include:\n- Inter-Agency Project Management and Collaboration\n- Centralized Information Management\n- Streamlined Business Process and Construction Management\n- Secure Common Data Environment With more than 70,000 user organizations and over $1 trillion of project value delivered in more than 70 countries, Aconex is the construction industry’s most widely adopted and trusted platform. For more information, please see Oracle Aconex for Defense (https://www.oracle.com/industries/construction-engineering/aconex-fedramp-construction-software/)", "fedramp_msg": "N/A", "sales_email": "giu_pubsec_us_grp@oracle.com", "security_email": "giu_govsec_us_grp@oracle.com", "website": "https://www.oracle.com/industries/construction-engineering/aconex-fedramp-construction-software/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Construction", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "Aconex Mobile is also available on both iOS and Android devices providing Field capabilities for Inspection Management (Punchlists) and Issue Management", "Audit Trails", "BIM Collaboration", "Bidding and Tendering", "Document Control", "Enterprise Level Authentication & Integrations available with Single Sign-On APIs", "Package Management", "Process Management", "Project Communication and Instructions", "Reporting", "Workflow and Document Approvals including online reviews with markup" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1900048743", "name": "Oracle", "cloud_service_provider": "Oracle", "cloud_service_offering": "Oracle Cloud Infrastructure-Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Oracle%20CI%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-10-03T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2020-05-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2020-10-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 17, "reuse": 44, "ready_status": "Not Active", "ready_date": "2019-10-03T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2020-05-21T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2020-10-01T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-10-01T20:00:00.000Z", "annual_assessment": "2011-10-01T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS", "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "F1404043549", "csp": "Accenture Federal Services", "cso": "Accenture Federal Cloud ERP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000863987A", "csp": "Cloudflare", "cso": "Cloudflare for Government - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2231052341", "csp": "Qualys, Inc.", "cso": "Qualys Government Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" } ], "agency_authorizations": [ "Bureau of Engraving and Printing", "Defense Logistics Agency", "Department of Agriculture", "Department of Commerce", "Department of Health and Human Services", "Department of State", "Department of the Treasury", "FHFA Office of the Inspector General", "Immigration and Customs Enforcement", "National Oceanic and Atmospheric Administration", "National Science Foundation", "Office of Natural Resources Revenue", "Savannah River National Lab", "Tennessee Valley Authority", "U.S. International Development Finance Corporation", "Universal Service Administrative Company" ], "agency_reuse": [ "" ], "service_description": "Oracle Cloud Infrastructure is a government-community cloud architected to provide U.S. public sector entities with best-in-class security and industry leading price-performance. Oracle Cloud Infrastructure services are a set of complementary infrastructure and platform cloud services that enable customers to build and run their enterprise workloads through high-performance, secure, and available services that scale elastically. With Oracle Cloud Infrastructure, public sector entities can use Oracle development tools to enhance existing applications while creating and integrating new cloud-native applications.", "fedramp_msg": "Oracle Cloud Infrastructure-Government Cloud previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "fedrampinfo_us@oracle.com", "website": "https://www.oracle.com/cloud/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "API Gateway", "Announcements", "Application Dependency Management", "Application Performance Monitoring (APM)", "Artifact Registry", "Audit", "Autonomous Dedicated", "Autonomous Shared", "Autoscaling", "Bastion", "Big Data Service", "Block Storage", "Budgets", "Certificates", "Cloud Advisor", "Cloud Guard", "Cloud Guard Instance Security", "Cloud Shell", "Cluster Placement Groups", "Compliance Documents Service", "Compute", "Compute Monitoring", "Container Engine for Kubernetes (OKE)", "Content Management", "Customer Feedback Service (CFS)", "Data Catalog", "Data Flow", "Data Integration Service", "Data Labeling", "Data Safe", "Data Science", "Database Autonomous Recovery Service", "Database Cloud Service", "Database Management Service (DBM)", "Database Migration", "DevOps - Deploy", "DevOps – Build Service", "DevOps – Project Service", "DevOps – Source Code Management", "Digital Assistant", "Email Delivery", "Events", "Exadata Cloud Service", "Exadata Database Service on Cloud@Customer", "Exadata Fleet Update Service", "FastConnect", "File Storage", "Full Stack Disaster Recovery", "Functions", "Fusion Application as a Service", "Generative AI Service", "Golden Gate", "Identity Domains", "Identity and Access Management", "Java Management Service", "Ksplice", "License Management Service", "Linux/YUM Repo", "Load Balancing", "Log Analytics", "Management Agent Service", "Marketplace", "Metering", "Monitoring", "MySQL Heatwave", "NG-VPNaaS Next Generation", "Network Firewall", "Network Load Balancer", "Network Path Analyzer", "Network Topology Visualization", "No SQL Database Cloud", "Notifications", "OCI Cache", "OCI Container Instances Service", "OCI Control Center", "OCI Document Understanding Service", "OCI Queue", "OCI Search Service with Opensearch", "OCI Service Mesh", "OS Management Hub", "Object Storage", "Operations Insight", "Operator Access Control", "Oracle Access Governance", "Oracle Analytics Cloud", "Oracle Cloud AI Services (Anomaly Detection)", "Oracle Cloud AI Services (Language)", "Oracle Cloud AI Services (Speech)", "Oracle Cloud AI Services (Time Series Forecasting Service)", "Oracle Cloud AI Services (Vision)", "Oracle Integration Cloud", "Oracle Managed Access (OMA)", "Oracle Process Automation (OPA)", "Private Endpoints", "Programmable Network Platform (DRG-Transit Hub)", "Public Logging", "Registry", "Resource Manager", "Roving Edge Service", "Secrets in Vault", "Secure Desktops", "Serverless Kubernetes", "Service Connector Hub", "Stack Monitoring", "Streaming", "Support Center (Cloud Incident Service)", "Tenancy Lifecycle Service", "Tenant Manager", "Terraform", "Threat Intelligence Platform", "VCN Flow Logs", "VMware Solution", "Vault", "Virtual Cloud Networks", "Visual Builder Cloud Service", "Visual Builder Studio", "Vulnerability Scanning Service", "Web Application Acceleration (WAA)", "Web Application Firewall (WAFv2)" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1206061351", "name": "Oracle", "cloud_service_provider": "Oracle", "cloud_service_offering": "Oracle Service Cloud (OSvC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Oracle%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2013-09-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2014-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2013-09-13T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2014-12-05T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2014-12-05T20:00:00.000Z", "annual_assessment": "2011-12-05T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS", "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1730842236", "csp": "T-Metrics, Inc.", "cso": "T-Metrics Cloud Contact Center (TCCC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Customs and Border Protection", "Federal Aviation Administration", "Internal Revenue Service", "Pension Benefit Guaranty Corporation" ], "agency_reuse": [ "22-011-03", "22-017-06", "22-038" ], "service_description": "The Oracle Service Cloud is Oracle's premier Software as a Service (SaaS) solution providing the industry's best in class customer service platform for enterprise customers. Oracle Service Cloud is deployed onto a robust, secure infrastructure hosting Oracle's patented CX software applications in an environment accredited to FedRAMP-Moderate specifications. The Oracle Service Cloud leverages a fault-tolerant core application framework offering flexible add-on modules providing customers with a customizable, out-of-the-box feature set to support both customer-facing and customer service agent-facing functions. The Oracle Service Cloud is offered as a hosted cloud solution (i.e., operated and maintained by Oracle within its secure hosting environment at co-location facilities in the United States) providing customers with a modern, efficient and secure cloud solution via a proven Software as a Service (SaaS) delivery model.", "fedramp_msg": "Oracle Service Cloud (OSvC) previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "saas_fedramp_us_grp@oracle.com", "website": "https://www.oracle.com/cx/service/b2c/", "uei": "", "small_business": false, "business_categories": [ "Customer Relations Management (CRM)", "Customer Service" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1603257882", "name": "Oracle", "cloud_service_provider": "Oracle", "cloud_service_offering": "Fusion Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Oracle%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-12-14T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-10-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-01-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 9, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-12-14T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-10-08T20:00:00.000Z", "cert_date": "2020-01-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Southwestern Power Administration", "fedramp_auth": "2020-01-13T20:00:00.000Z", "annual_assessment": "2011-10-16T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency", "Department of Energy", "Federal Deposit Insurance Corporation", "Fermi National Accelerator Laboratory", "National Credit Union Administration", "Nuclear Regulatory Commission", "Savannah River National Lab", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Oracle Fusion Cloud is Oracle's Software as a Service (SaaS) suite of enterprise business applications comprised of Enterprise Resource Planning (ERP), Human Capital Management (HCM), Supply Chain Management (SCM), and CX Sales and Service (CRM). Customers can subscribe to some or all of the Fusion Applications which include: federal financials, procurement, project management, and risk management & compliance; human resources (HR), talent management, learning, recruiting, workforce management, time & labor, and payroll; supply chain planning, inventory management, manufacturing, maintenance, order management and product lifecycle management; CX sales, and CX B2B service. Oracle Fusion Cloud is a true SaaS offering, operated and maintained by Oracle within its secure Government Cloud facilities in the United States. Oracle Government Cloud is a community-cloud limited to federal, state and local agencies as well as select universities and federal contractors with a demonstrated need for FedRAMP authorization.\n\nOther cloud services can be leveraged to complement Oracle Fusion Applications including Oracle Cloud EPM (Oracle Enterprise Performance Management (EPM) - Moderate), Oracle Intelligent Advisor (Oracle Service Cloud), Oracle Digital Assistant, Oracle Integration Cloud and other PaaS (platform) services (Oracle Cloud Infrastructure-Government Cloud).", "fedramp_msg": "N/A", "sales_email": "", "security_email": "saas_fedramp_us_grp@oracle.com", "website": "https://www.oracle.com/applications/", "uei": "", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Customer Relations Management (CRM)", "Customer Service", "Cybersecurity & Risk Management", "Finance", "Health & Wellness", "Human Resources", "Marketing & Sales" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1209041518", "name": "Oracle", "cloud_service_provider": "Oracle", "cloud_service_offering": "Federal Managed Cloud Services", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Oracle%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2013-04-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2014-02-26T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 10, "reuse": 9, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2013-04-04T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2014-02-26T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2014-02-26T20:00:00.000Z", "annual_assessment": "2011-02-26T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "IaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of the Fiscal Service", "Department of Health and Human Services", "Department of Housing and Urban Development", "FHFA Office of the Inspector General", "Farm Credit Administration", "Federal Housing Finance Agency", "National Endowment for the Humanities", "National Gallery of Art", "U.S. International Development Finance Corporation" ], "agency_reuse": [ "" ], "service_description": "Oracle Federal Managed Cloud Services provides hosting, applications management, infrastructure support, and operation and maintenance (O&M) services to U.S. federal government agencies. Primary services include hardware and facilities setup/configuration, application management, testing, monitoring, patching, incident management, problem resolution, technical and functional service desk, point upgrades, security, and disaster recovery.\n\nThe FMCS Infrastructure information system resides in a physically and logically isolated Federal Government Zone within the general security perimeter of Oracle's U.S. Data Centers. The environment has been architected following FISMA and NIST guidance to help Federal customers achieve and maintain Authority To Operate (accreditation) for their relevant information systems or data hosted at Oracle.", "fedramp_msg": "Federal Managed Cloud Services previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "fmcs_fedramp_us_grp@oracle.com", "website": "http://www.oracle.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2534673267", "name": "Oracle Corporation", "cloud_service_provider": "Oracle Corporation", "cloud_service_offering": "Oracle Primavera Cloud for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Oracle%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-08T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-12-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Oracle Primavera Cloud is a cloud-based SaaS service that provides comprehensive project, program, and portfolio management solutions. OPC integrates project planning, scheduling, risk management, resource allocation, and cost control. OPC is used for large and small projects across industries like construction, energy, and IT. OPC connects office and field teams, synchronizes project data, and offers powerful dashboards for real-time visibility to help users make informed decisions throughout the project lifecycle.\nCapabilities include:\n- Ideas & Capital Planning\n- Portfolio Management\n- Planning & Scheduling\n- Budgeting & Forecasting\n- Resource Management\n- Progress Capture\n- Workflow Management\n- Cost Control\n- Risks & Issues\n- Deliverables Management\n- Analysis & Reporting\n- Mobile, Email & APIs", "fedramp_msg": "", "sales_email": "", "security_email": "giu_govsec_us_grp@oracle.com", "website": "https://www.oracle.com/construction-engineering/public-agencies/", "uei": "", "small_business": false, "business_categories": [ "Accounting", "Construction", "Finance", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2524416446", "name": "Orbus Software", "cloud_service_provider": "Orbus Software", "cloud_service_offering": "OrbusInfinity Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Orbus%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-01-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-01-20T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-06-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-01-05T20:00:00.000Z", "cert_date": "2026-01-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-01-20T20:00:00.000Z", "annual_assessment": "2011-12-31T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture" ], "agency_reuse": [ "" ], "service_description": "OrbusInfinity Government is a Software as a Service (SaaS) solution hosted in Azure, offering multi-tenant environments for US government agencies. OrbusInfinity integrates with your Commercial or GCC Microsoft 365 environment. Meeting FedRAMP Moderate security standards, OrbusInfinity Government ensures data security and sovereignty. \n\nOrbusInfinity Government provides secure SaaS capabilities that enable federal agencies to optimize technology investments, create AI-driven value, drive effective business transformation, accelerate innovation, and strengthen resilience and compliance.\nWith OrbusInfinity Government, federal agencies can modernize IT systems, improve citizen services, and deliver cost savings. Teams can collaborate seamlessly across enterprise architecture and project delivery domains and leverage capabilities to realize a wide range of use cases within a secure, compliant platform. Transformation insights can be shared on demand from the central repository to stakeholders via personalized dashboards, to guide successful transformation outcomes. \n\nOrbusInfinity Government enables federal agencies to: \nOptimize Delivery of Public Services: Design streamlined citizen-centric digital services, improving accessibility, visibility, and public trust. \n\nAccelerate Technology Modernization Initiatives: Generate the blueprint for cloud migration, legacy system replacement, and adoption of new technologies, reducing risk and ensuring alignment with agency goals. \n\nSupport Budget Accountability and Investment Planning: Provide clear visibility into IT assets and initiatives to track spending, prioritize investments, and deliver measurable cost savings, driving transparent accountability reporting including OBR. \n\nOptimize Mission Areas: Align technology and resources with core mission areas, providing a holistic view of how capabilities, applications, people, and processes work together to deliver services, enabling agencies to continuously improve and optimize critical functions. \n\nOptimize Government Resources and Reduce Costs: Identify redundant systems, streamline IT portfolios, and make smarter investments. \n\nStrengthen Cybersecurity and Compliance: Align systems and processes with federal security standards (such as FISMA, FedRAMP, NIST), reducing vulnerabilities and audit risk. \n\nEnable Real-Time Insights and Data-Driven Decisions: Utilize a single source of truth to act on real-time insights, manage risk, and respond more effectively to emerging priorities. \n\nEnhance Collaboration and Break Down Silos: Foster better communication and coordination across departments, programs, and between agencies, supporting cross-government initiatives. \n\nIncrease Accountability and Transparency: Map processes, data, and systems, to gain clear oversight and demonstrate compliance with laws, regulations, and policy mandates.", "fedramp_msg": "N/A", "sales_email": "sales@orbussoftware.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://www.orbussoftware.com/product/orbusinfinity-federal", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Cybersecurity & Risk Management", "Data Management", "Fleet Management", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2301844932", "name": "Orca Security", "cloud_service_provider": "Orca Security", "cloud_service_offering": "Orca Cloud Security Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Orca%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-10-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2023-08-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2024-01-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-02-10T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2022-10-17T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-08-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-01-13T20:00:00.000Z", "cert_date": "2025-02-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Forest Service", "fedramp_auth": "2025-02-10T20:00:00.000Z", "annual_assessment": "2011-01-12T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "United States Forest Service" ], "agency_reuse": [ "" ], "service_description": "Orca Security provides an agentless Cloud Security Platform that discovers all cloud assets, and identifies, prioritizes, and remediates risks and compliance issues across your cloud environments in AWS GovCloud, AWS US East/West and Azure Government. The platform detects cloud risks, including vulnerabilities, malware, misconfigurations, API risks, lateral movement risks, weak and leaked passwords, and overly permissive identities. Orca deploys in minutes, provides visibility into all your assets, and automatically includes new assets as they are added. The Orca Platform helps federal agencies and contractors achieve regulatory compliance with over 65 out-of-the-box frameworks, CIS Benchmarks, and custom compliance checks. Leveraging a Unified Data Model, Orca performs contextual analysis of all the risks in your cloud estate, uncovering potential attack paths (with references to the MITRE ATT&CK framework), enabling rapid identification of which risks present the highest danger to mission data and security objectives.", "fedramp_msg": "N/A", "sales_email": "fedrampsales@orca.security", "security_email": "fedramp@orca.security", "website": "https://app.orcasecurity-gov.io/", "uei": "DY2ZFKCSRFY6", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2222167230", "name": "OwnBackup", "cloud_service_provider": "OwnBackup", "cloud_service_offering": "Own Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/OwnBackup%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-07-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-11-28T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-06-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-07-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-11-28T20:00:00.000Z", "cert_date": "2023-06-22T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-06-22T20:00:00.000Z", "annual_assessment": "2011-04-01T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "Department of Agriculture", "Department of Labor", "Federal Deposit Insurance Corporation", "Government National Mortgage Association", "Health Resources and Services Administration" ], "agency_reuse": [ "" ], "service_description": "Own from Salesforce solutions help manage and protect mission-critical data in Salesforce. FedRAMP authorized products include:\r\n\r\n\r\n- Backup and Recover - Protect data and metadata with comprehensive, automated backups and rapid, stress-free recovery. \r\n\r\n\r\n- Data Mask and Seed - Propagate data to sandboxes for faster innovation and ideal environments to safely develop, test, and train. \r\n\r\n\r\n- Archive - Preserve data in archives with customizable retention policies and simplified compliance and reporting.\r\n\r\n\r\nBackup and Recover as well as Seed capabilities of Data Mask and Seed are available through the Own from Salesforce application. Archive functions occur through the Salesforce UI.", "fedramp_msg": "N/A", "sales_email": "fedramp@owndata.com", "security_email": "public.sector.compliance@salesforce.com", "website": "http://www.owndata.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2409367364", "name": "Pagefreezer Software Inc.", "cloud_service_provider": "Pagefreezer Software Inc.", "cloud_service_offering": "Pagefreezer Website Archiving", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Pagefreezer%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-01-09T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-06-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-09-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-01-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-06-11T20:00:00.000Z", "cert_date": "2025-09-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-09-02T20:00:00.000Z", "annual_assessment": "2011-06-11T04:00:00.000Z", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Education" ], "agency_reuse": [ "" ], "service_description": "Pagefreezer’s website archiving service uses crawling technology, similar to that of Google, to take snapshots of an agency’s website(s). Archiving is an automated and scalable process and requires no software installation. With dynamic monitoring, new webpages and changes to existing pages are always captured, so the website archive is up to date.", "fedramp_msg": "N/A", "sales_email": "sales@pagefreezer.com", "security_email": "fedramp@pagefreezer.com", "website": "https://www.pagefreezer.com/", "uei": "Q7W3LQDXML58", "small_business": true, "business_categories": [ "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2310974411", "name": "PagerDuty", "cloud_service_provider": "PagerDuty", "cloud_service_offering": "PagerDuty Operations Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/PagerDuty%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-07-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-03-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 72, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-07-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-03-23T20:00:00.000Z", "cert_date": "2025-03-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-10T20:00:00.000Z", "annual_assessment": "2011-03-22T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "4", "leveraged_systems": [ { "id": "FR2527132001", "csp": "Asana Inc.", "cso": "Asana", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421035110", "csp": "Cellebrite", "cso": "Cellebrite Government Cloud (CGC)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1823368486", "csp": "Cisco AppDynamics", "cso": "AppDynamics GovAPM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2510664395", "csp": "ExtraHop Networks", "cso": "ExtraHop RevealX Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2311345531", "csp": "Figma", "cso": "Figma for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2502963317", "csp": "HP Inc.", "cso": "HP Managed Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406453618", "csp": "LabArchives", "cso": "LabArchives for Government (LG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1605027892", "csp": "QuestionMark", "cso": "Questionmark Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2113557839", "csp": "Yello Dba Recsolu Inc", "cso": "Yello Government Recruiting Solution", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1825941347A", "csp": "Zoom Video Communications, LLC", "cso": "Zoom for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Veterans Affairs", "Federal Student Aid" ], "agency_reuse": [ "22-002-02", "22-002-08", "22-003", "22-005", "22-005-01", "22-005-03", "22-005-04", "22-005-08", "22-005-09", "22-005-11", "22-005-20", "22-007", "22-007-02", "22-007-04", "22-007-17", "22-011-02", "22-011-05", "22-011-10", "22-013", "22-015", "22-016-01", "22-016-07", "22-017-02", "22-017-06", "22-019", "22-020", "22-021-01", "22-021-09", "22-022", "22-022-01", "22-025", "22-027", "22-027-01", "22-027-02", "22-027-05", "22-027-07", "22-027-09", "22-028", "22-031", "22-031-01", "22-032", "22-033", "22-034", "22-034-02", "22-036", "22-042", "22-045", "22-050", "22-051", "22-061-01", "22-062", "22-067", "22-069", "22-070", "22-074", "22-082" ], "service_description": "The PagerDuty Operations Cloud is a comprehensive platform that enables automated detection, diagnosis, and response to a wide range of events, including customer support alerts, suspicious or abnormal behavior, system disruptions, and performance-impacting incidents. By leveraging advanced event orchestration and intelligent aggregation features, PagerDuty enhances the signal-to-noise ratio, allowing organizations to prioritize critical alerts while minimizing distractions from less significant events.\n\nWith automated actions, the platform can trigger predefined workflows before human intervention is needed, accelerating resolution times and ensuring seamless incident management. On-call scheduling capabilities ensure continuous 24/7 coverage of critical activities, empowering teams to swiftly triage events, including customer support tickets, system alerts, and operational disruptions, and effectively mobilize the appropriate responders to manage incident resolution and recovery. Real-time status updates and external-facing status pages keep stakeholders informed throughout the resolution process.", "fedramp_msg": "N/A", "sales_email": "fedramp-sales@pagerduty.com", "security_email": "fedramp-security@pagerduty.com", "website": "https://pagerduty.com/", "uei": "KLLLAKNNNMK6", "small_business": false, "business_categories": [ "Customer Service", "Development Tools", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "Advanced Ticketing Integrations*", "Advanced and Scalable Incident Handling", "Alert Deduplication", "Alert Severity", "Alert Suppression", "Alert Triage & Deduplication", "Analytics API and Data Export", "Analytics Dashboard", "Audio and Video Conference Integrations*", "Audit Trail Reporting", "Auto-Pause Incident Notifications", "Auto-Pause Transient Events", "Basic Conditions", "Basic Enrichment", "Business Performance Reviews", "Business Service Subscription", "Business and Technical Services and Dependencies", "Change Correlation", "Change Events", "ChatOps*", "Content-Based Alert Grouping", "Custom Change Event Transformer", "Custom Fields", "Custom Incident Actions", "Domestic SMS/Phone notifications", "Dynamic Field Enrichment and Extraction", "Dynamic Service Graph", "Dynamically Add Additional Responders", "Email and push notifications", "Escalation Policy Report", "Escalation policies", "Event Rule Notes", "Event Triggered Webhooks*", "External Status Pages", "Full-Featured Mobile App for iOS and Android", "Global Event Orchestration*", "Global Integration Key", "Global Search", "If/else statements", "Incident Activity and Service Performance Reports", "Incident Priority", "Incident Roles", "Incident Tasks", "Incident Timeline", "Incident Urgencies", "Incident Workflows*", "Intelligent Alert Grouping", "Internal Status Pages", "International SMS/Phone notifications", "Live Call Routing*", "Max users per escalation level", "Monitoring and Developer Integrations*", "On-call Schedules", "One Touch to Join to Conference Bridge*", "Operational Maturity", "Operational Reviews, On-call Readiness Analytics and Administration", "Out-of-the-box Integrations, Plus Workflow Extensions*", "Outlier Incidents", "PagerDuty Advance", "Past Incidents", "Paused Incident Notifications", "Postmortems", "Private Status Pages", "Probable Origin", "Recurring Conditions", "Related Incidents", "Responder and Team Reports", "Role-based permissions", "Round Robin Scheduling", "Routing Rules", "Rule Nesting", "Schedule Conditions", "Service Directory", "Service Orchestration Rules*", "Service Performance Reviews", "Service Rules", "Single Sign-on", "Stakeholder Users", "Status Update Notification Templates", "Team On-Call Handoff Reviews", "Team-based Organizing and Advanced Permissions", "Threshold Conditions", "Ticketing *", "Time-Based Alert Grouping", "Unlimited Open and Flexible APIs", "User Onboarding Report", "Visibility Console" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2315464863", "name": "Palantir Technologies", "cloud_service_provider": "Palantir Technologies", "cloud_service_offering": "Palantir Federal Cloud Service – Supporting Services (PFCS-SS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Palantir%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-08-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-01-26T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-11-19T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 25, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-08-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-01-26T20:00:00.000Z", "cert_date": "2024-11-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-11-19T20:00:00.000Z", "annual_assessment": "2011-01-26T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2434554673", "csp": "Palantir Technologies Inc.", "cso": "Palantir Federal Cloud Service", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" } ], "agency_authorizations": [ "Brookhaven Site Office", "Department of Education", "Department of Health and Human Services", "Department of the Treasury", "Environmental Management Consolidated Business Center", "State Office of the Inspector General" ], "agency_reuse": [ "22-002-04", "22-005", "22-005-03", "22-005-04", "22-005-22", "22-007", "22-007-13", "22-011-06", "22-014-02", "22-016-01", "22-022", "22-027-01", "22-034", "22-036", "22-040", "22-042", "22-059" ], "service_description": "The PFCS-SS is a dedicated environment for the purpose of delivering best-of-breed commercial software to federal government customers as a secure cloud service at the FedRAMP High baseline. The software deployed to PFCS-SS is commercially available software configured to run on PFCS’ Kubernetes infrastructure and leverage PFCS’ management plane services. This includes:\n\nClaude for Government (C4G) – C4G is Anthropic's AI chat assistant designed for highly regulated environments. Purpose-built to meet FedRAMP High security controls, it delivers Claude's advanced reasoning capabilities with enhanced security, administrative controls, and expanded context windows. Claude for Government seamlessly integrates into existing workflows while maintaining the data protection and compliance standards required for critical business processes in government agencies and other security-conscious organizations.\n\nGrafana Federal Cloud – A fully managed, highly scalable observability platform, powered by Grafana Mimir for Prometheus metrics, Grafana Loki for logs, Grafana Tempo for traces, and Grafana, the de facto standard for data visualization.\n\nCognition – provides a suite of AI coding tools to accelerate developer productivity, including Cognition Plugins for popular IDEs as well as its own AI-native IDE, Devin Desktop. Cognition leverages state-of-the-art AI models and advanced context-awareness capabilities to deliver tools like fast autocomplete, codebase-aware Chat, and agentic coding capabilities. Enterprise developer teams rely on Cognition to increase developer velocity, reduce onboarding times, and reduce tech debt. Cognition was previously known as Windsurf and Codeium.\n\nAuthifi – Authifi is an Authorization Management solution designed to help government and highly regulated organizations secure access to their most sensitive applications and data. Engineered from the ground up for healthcare, medical research and biopharma environments, Authifi includes identity and access management (IAM), ensuring that the right users get the right access, at the right time, for the right reasons - while automatically enforcing compliance with federal and industry cybersecurity standards.\n\nAuthorium – Authorium is the only no-code platform purpose-built for government, enabling agencies to modernize operations and automate workflows without requiring technical expertise. With built-in guardrails, governance, and role-based controls, Authorium empowers program leaders and IT managers alike to design, manage, and own their processes – reducing complexity, minimizing IT dependency, and accelerating adoption of modern digital tools. Serving as the unifying backbone for core government workflows – including procurement, contract lifecycle management, grant management, budget analysis, and legislative processes – Authorium replaces fragmented point solutions with a secure, enterprise-grade platform. Agencies can go further with AuthorAI, Authorium’s AI workflow assistants, to enhance automation and unlock even greater efficiency. The result is faster modernization, sustained long-term value, and a platform that keeps government operations secure, connected, and future-ready.\n\nAutogenAI Federal – AutogenAI is a Generative AI proposal management platform that supports capture through submission by automating research and sourcing, pWin go/no-go, requirement shredding and first-draft generation, reviewer workflows and compliance checks, and templated, auditable outputs for on-time, high-quality submissions.\n\nConductorAI Conduit Platform – Ingests policy documents, prior approvals, and heuristics to orchestrate document review and approvals within the DOD, USG, IC, and other highly regulated entities. By atomizing policy statements into AI enabled agents, rules, workflow steps, and document edits, the platform enables teams to accelerate and automate complex policy approvals. The software is data-agnostic, model-independent, and can be adapted to deploy into various customer environments, including classified settings.\n\nDescope – Descope is a drag & drop platform to help organizations manage all their external identities. Our no / low code solution helps organizations create, modify, and secure authentication and authorization journeys for end users, business customers, partner applications, and APIs / AI agents.\n\nEpsilon3 – Epsilon3 is software for complex engineering, assembly, manufacturing, testing, and operations. Its solutions for advanced process control support planning, tracking, and analyzing a wide range of complex operations and procedures from manufacturing and testing through operations and maintenance.\n\nGovSignals – GovSignals.ai is an AI-driven platform designed to deliver real-time government intelligence and analytics from federal agencies and public records. Leveraging advanced generative and agentic AI, the platform identifies emerging trends, monitors policy shifts, and anticipates agency actions across federal and SLED procurement markets. For government contractors, GovSignals.ai automates the end-to-end proposal creation process, enabling users to generate comprehensive, compliant, and customized proposals within minutes. For government agencies, GovSignals streamlines acquisition operations by providing intelligent intake, evaluation screening, and project management tools powered by AI, empowering procurement teams to improve efficiency, compliance, and accelerate mission success.\n\nHyperscience Hypercell – an AI platform with a proprietary model-based architecture that reads and understands all forms of content with 99% accuracy and 98.5% automation, scaling across the enterprise while ensuring auditability, governance, and security using private enterprise data.\n\nKnightscope Security Operations Center (KSOC) – The Knightscope Security Operations Center (KSOC) is a user interface for law enforcement, security professionals, and remote monitoring teams to interact with autonomous systems utilized in physical security operations. The platform delivers both real time visibility and investigative tools to help teams respond faster, reduce cost, and improve public safety.\n\r\nKODE OS for Government – KODE OS is a FedRAMP High authorized, cloud-native building operations platform deployed within the Palantir FedStart environment that enables federal, state, local, and government contractor organizations to securely centralize, monitor, control, and optimize distributed facility infrastructure through unified data integration, real-time analytics, role-based access control, and automated operational workflows.\r\n\nLegion (by Legion Intelligence) – Legion is a secure, modular agent orchestration platform that unifies mission data and workflows, deployable across classified, air-gapped, and edge environments.\n\nPicogrid Legion – Legion is a cloud-native software built to provide platform agnostic infrastructure for command and control capabilities.\n\nPryzm – Pryzm is an AI-powered market-intelligence and relationship-management platform specifically designed for the national-security ecosystem, offering capabilities like opportunity search, budget intelligence, and contextual CRM. The platform streamlines financial, contract, and project management.\n\nSmartPM – SmartPM is a cloud-native schedule analytics and risk intelligence platform purpose-built for the construction industry. It ingests raw scheduling data (.xer, .mpp, .xml, .ppx, .pp) and applies critical path method (CPM) logic, delay analysis frameworks, and earned value methodologies to surface risks, measure progress, and automate forensic-level oversight. SmartPM supports international standards in scheduling and delay analysis, offering defensible insights for audit, compliance, and performance monitoring of capital projects.\n\nSpecterOps BloodHound Enterprise – See your organization from the attacker’s view, BloodHound Enterprise is an Attack Path Management solution that continuously maps and quantifies identity Attack Paths in Active Directory and Azure.\n\nStreamline (by Valinor) – Streamline is the first third-party product deployable through Palantir Foundry, offering secure, offline-capable mobile data collection integrated with Foundry’s infrastructure and ontology, enabling non-technical users to easily create and manage authenticated or public data intake tools.\n\nTRM Labs – provides blockchain intelligence to combat crypto-facilitated crime and support agency compliance, enabling investigation, monitoring, and detection of fraud by tracing cryptocurrency transactions across 30 blockchains and over 70 million digital assets in a unified graph. \n\nUnstructured Platform – The Unstructured Platform is an enterprise-grade ETL solution that automatically transforms complex, unstructured data into clean, structured data for GenAI applications.\n\nValinor Harbor – HarborOS is a secure, modular software platform designed to enable distributed medical operations and data management in austere or disconnected environments. It integrates infrastructure monitoring, patient tracking, and logistics coordination within a FedRAMP-compliant cloud architecture to support Harbor Box facilities.", "fedramp_msg": "", "sales_email": "PFCS-SS@palantir.com", "security_email": "fedramp-isso@palantir.com", "website": "https://www.palantir.com/offerings/fedstart/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Finance", "Fleet Management", "Law Enforcement", "Operations Management", "Research" ], "service_last_90": [ "KODE OS for Government" ], "all_others": [ "Authifi", "Authorium", "AutogenAI Federal", "AzureHound", "Claude for Government (C4G)", "Cognition Plugins", "ConductorAI Conduit Platform", "Descope", "Devin Desktop", "Epsilon3", "GovSignals", "Grafana Alloy", "Grafana Federal Cloud", "Hyperscience Hypercell", "Knightscope Security Operations Center (KSOC)", "Legion (by Legion Intelligence)", "Picogrid Legion", "Pryzm", "SharpHound", "SmartPM", "SpecterOps BloodHound Enterprise", "Streamline (by Valinor)", "TRM Labs", "Unstructured Platform", "Valinor Harbor" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2434554673", "name": "Palantir Technologies Inc.", "cloud_service_provider": "Palantir Technologies Inc.", "cloud_service_offering": "Palantir Federal Cloud Service", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Palantir%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-08-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-11-29T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-11-19T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 20, "reuse": 25, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-08-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-11-29T20:00:00.000Z", "cert_date": "2024-11-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-11-19T20:00:00.000Z", "annual_assessment": "2011-03-01T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2315464863", "csp": "Palantir Technologies", "cso": "Palantir Federal Cloud Service – Supporting Services (PFCS-SS)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" } ], "agency_authorizations": [ "Advanced Research Projects Agency for Health", "Centers for Disease Control and Prevention", "Defense Information Systems Agency", "Department of Agriculture", "Department of Education", "Department of Energy", "Department of Health and Human Services", "Department of State", "Department of Veterans Affairs", "Federal Aviation Administration", "First Responder Network Authority", "Immigration and Customs Enforcement", "Internal Revenue Service", "National Cancer Institute", "National Nuclear Security Administration", "Small Business Administration", "U.S. International Development Finance Corporation" ], "agency_reuse": [ "" ], "service_description": "The Palantir Federal Cloud Service (PFCS) is a dedicated environment for the purpose of delivering Palantir software to federal government customers as a cloud service. Palantir software, including Foundry, AIP, Gotham, Apollo, and supporting products utilizing the same infrastructure, enables a multitude of collaborative and operational workflows for end government users. Palantir enables organizations to take advantage of best-in-class Artificial Intelligence, Machine Learning, Data Integration, Data Storage, Data Processing, Analytics, Visualization, Operations, Cybersecurity, and Software Deployment capabilities. The PFCS allows customers to acquire Palantir to quickly deliver value against their hardest problems.\r\n\r\n \r\n\r\nPFCS includes deployments on the following IaaS providers\r\n\r\nAWS GovCloud\r\n\r\nAzure Government\r\n\r\nAzure Commercial\r\n\r\nGoogle Cloud Platform (GCP)\r\n\r\nAWS US East/West*\r\n\r\n \r\n\r\nNote* PFCS deployments on AWS US East/West are limited to Moderate workloads as AWS US East/West holds only a FedRAMP Moderate authorization.\r\n\r\nPFCS combines the formerly separated PFCS High (FR2434554673) and PFCS Moderate (FR1912671248) packages", "fedramp_msg": "", "sales_email": "fedramp@palantir.com", "security_email": "fedramp-isso@palantir.com", "website": "https://www.palantir.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Finance", "Fleet Management", "Law Enforcement", "Operations Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "AIP", "Apollo", "Apollo Agent", "Foundry", "Gotham", "Gotham Thick Client", "Palantir Data Connector" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2317253567", "name": "Palo Alto Networks, Inc.", "cloud_service_provider": "Palo Alto Networks, Inc.", "cloud_service_offering": "GCS-HIGH", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Palo%20Alto%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-03-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2024-01-10T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2024-12-09T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 9, "ready_status": "Not Active", "ready_date": "2023-03-20T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2024-01-10T20:00:00.000Z", "ip_prog_date2": "2024-09-12T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2024-12-09T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-12-09T20:00:00.000Z", "annual_assessment": "2011-12-09T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2406651384", "csp": "Precisely Software", "cso": "Data Integrity Suite for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2516365096", "csp": "Procore Technologies, Inc", "cso": "Procore for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2103344623", "csp": "Workday Inc.", "cso": "Workday Government Cloud (WGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Veterans Affairs", "Federal Risk and Authorization Management Program", "Internal Revenue Service" ], "agency_reuse": [ "22-007", "22-007-04", "22-007-28", "22-046", "22-055-01", "22-067" ], "service_description": "Strata Network Security Platform\r\n\r\nSecure users, apps, and data anywhere— on-premises, in the cloud, or hybrid. Get complete Zero Trust network security to see and secure everything from your headquarters to branch offices and data centers, as well as your mobile workforce.\r\n \r\nPrisma Access - a Secure Access Service Edge (SASE) that provides scalable, cloud-delivered networking and security to branch offices and remote users. With Prisma Access, agencies are able to rapidly enable consistent, secure connectivity for remote locations and employees.\r\n\r\nPrisma SD-WAN - a product that provides deep application visibility, with Layer 7 intelligence for network policy creation and traffic engineering. It automates operations and problem avoidance using machine learning and data science methodologies. Prisma SD-WAN enables branch services such as networking and security to be delivered from the cloud, simplifying WAN management.\r\n\r\nCloud Manager for Prisma Access - a cloud delivered solution used by customers to manage Prisma Access from Palo Alto Networks’ Hub. Fawkes allows customers to quickly onboard branches and mobile users through an intuitive and function oriented user experience. Fawkes also provides configuration management of Prisma Access’ security policies.\r\n\r\nStrata Logging Service (SLS, formerly CDL) - collects, normalizes, and integrates data from Palo Alto Networks products with public cloud scale.\r\n\r\nWildFire - an analysis and prevention engine for highly evasive zero-day exploits and malware. The cloud-based service employs a unique multi-technique approach combining dynamic and static analysis and innovative machine learning techniques to detect and prevent even the most evasive threats. It is a subscription service that works with the Palo Alto Networks Next Generation Firewalls (including VM-Series and CN-Series), Prisma Access, Prisma Cloud, Cortex XSIAM, and Cortex XDR.\r\n\r\nAdvanced URL Filtering - Advanced URL Filtering is a comprehensive URL filtering solution that protects your network and users from web-based threats. Combining the capabilities of PAN-DB with a web security engine powered by machine learning, Advanced URL Filtering categorizes and blocks malicious URLs in real-time. With an Advanced URL Filtering license (or legacy URL filtering license), you can restrict access to websites and control user interactions with web content. For example, you can prevent users from accessing websites known to host malware or entering corporate credentials into websites in specific categories.\r\n\r\nSaaS Security (Inline, SSPM) - is an integrated CASB (Cloud Access Security Broker) solution that helps Security teams meet the challenges of protecting the growing availability of sanctioned and unsanctioned SaaS applications and maintaining compliance consistently in the cloud while stopping threats to sensitive information, users and resources. SaaS Security Inline helps discover and manage risks posed by unsanctioned SaaS applications while SaaS Security Posture Management (SSPM) helps detect and remediate misconfigured security settings in sanctioned SaaS applications through continuous monitoring.\r\n\r\nInline DLP - serves as a data security service integrated with various Palo Alto Networks services (called channels) such as SaaS Security, Prisma Access, Prisma Cloud, and the Next Generation Firewall platform to provide data security at these various enforcement points. These channels send files to the DLP service via APIs, where DLP will scan the file, perform analysis to detect sensitive data in violation of customer policies in the file, and return this verdict and other data back to the channel. The channel then uses this information to take remedial action in order to protect sensitive data.\r\n\r\nACE - a generic platform that enables the firewall or Panorama to download App-IDs from the cloud for applications that do not have specific predefined App-IDs from the Palo Alto Networks content releases.\r\n\r\nCIE - Identity-based security controls are a foundational requirement to achieve Zero Trust. Palo Alto Networks Cloud Identity Engine is an entirely new cloud-based architecture for identity-based security that can consistently authenticate and authorize your users, regardless of location and where user identity stores live - on-premises, in the cloud, or hybrid. As a result, security teams can effortlessly allow all users access to applications and data everywhere and quickly move toward a Zero Trust security posture.\r\n\r\nDevice Security - a unified, AI-first solution that provides comprehensive\r\nprotection and monitoring across your entire attack surface. To achieve this, it discovers all connected devices, as well as identifies and mitigates hidden risks that would otherwise remain invisible.\r\n\r\nStrata® Cloud Manager (SCM) for Prisma Access - AI-powered unified solution for managing and operating the entire network security infrastructure. It transforms how organizations oversee their SASE deployments, aggregating telemetry from every enforcement point to deliver actionable insights. By combining AI-driven intelligence, automated operations, and integrated threat intelligence, it helps security teams stay ahead of emerging risks, maintain optimal performance, and reduce operational costs.\r\nStrata Cloud Manager is available in Essentials and Pro (paid) tiers.\r\n\r\n\r\nMSP for Prisma SASE - a set of two services (pa-passthru-api-service and pa-custom-api-service) that provide APIs to support the following functionality: Aggregate application, application usage, threats and URL metrics across tenants in a tenant hierarchy Constrain the list of tenants being aggregated to the list of tenants that are authorized for the user in question\r\n\r\nApp Services (Hub, API Gateway, Visualization & Reporting, Prisma Access Insights)\r\n●\tAPI Gateway supports unified access to the open APIs of PANW SASE applications. Currently, API Gateway is used by Cloud Management Prisma Access, SD-WAN, Cortex Data Lake (CDL), and Prisma Access Insights customers. Working in conjunction with PANW Global IdP (Identity Provider), which provides authentication services, API Gateway provides authorization services for RESTful API and routing those APIs to multiple applications and regions.\r\n●\tPrisma Access Insights is a comprehensive platform for global visibility and monitoring for the Prisma Access service. It continuously monitors the health and performance of your Prisma Access environment with Insights in the Prisma Access app.\r\n●\tVisualization & Reporting is the security visualization and reporting product for network security use cases. It provides dashboards to end users to monitor and understand the security of their networks and how different security subscriptions from Palo Alto Networks are performing.\r\n\r\nCortex\r\n\r\nPalo Alto Networks offers the industry’s most comprehensive product portfolio for security operations, empowering organizations and agencies with best-in-class detection, investigation, automation, and response capabilities.\r\n\r\nCortex XDR - a cloud-based service providing a prevention, detection and response platform that integrates network, endpoint, and cloud data to stop sophisticated attacks. Cortex XDR leverages logs, alerts, and information from Palo Alto Networks and third-party security products. It also enforces security policies on endpoints, preventing malware and data loss. Cortex XDR correlates security alerts and network logs with the endpoint processes that generated the alerts, allowing customers to investigate security alerts, as well as search for and remotely respond to threats.\r\n\r\nCortex Xpanse - an active attack surface management solution that helps your organization discover, understand and respond to unknown risks in all internet-connected systems and services. Xpanse scans the entire internet automatically and continuously, discovering and indexing previously unknown risks, using supervised ML models to continuously map your attack surface and prioritize remediation efforts, while reducing MTTR with the help of built-in automated playbooks.\r\n\r\nCortex XSIAM - a cloud-delivered, integrated SOC platform that unifies key functions, including EDR, XDR, SOAR, ASM, UEBA, TIP, and SIEM, consolidating multiple products into a single, integrated platform. XSIAM delivers an intelligent data foundation by integrating telemetry from any source, providing unified security operations across any hybrid IT architecture.\r\n\r\nCortex XSOAR - a comprehensive security orchestration, automation, and response (SOAR) platform that unifies case management, automation, real-time collaboration, and threat intelligence management to serve security teams across the incident lifecycle.\r\n\r\nCortex Cloud - a unified security platform that enhances application security, cloud posture management and runtime protection. It integrates AppSec, identity, data, cloud infrastructure, and workload security while providing a code-to-cloud-to-runtime-to-SOC approach. With a strong shift-left strategy, it enables proactive remediation using both in-house and third-party tools. The Cloud Detection and Response (CDR) capabilities leverage multiple data sources to deliver real-time threat detection, protection and automated response. (Authorized as of May 2025, please reach out to sales for availability)\r\nPrisma Cloud Enterprise (SaaS):\r\n\r\nPrisma Cloud - a cloud-native security platform that consistently provides comprehensive visibility into misconfiguration and over-permissive roles, with threat detection and compliance assurance across multi-cloud environments.\r\n●\tCSPM\r\n●\tAgentless Workload Security\r\n●\tCIEM\r\n●\tAPI Visibility\r\n●\tSecret Security\r\n●\tSCA\r\n●\tIaC Security\r\n\r\nPrisma Cloud Compute (Delivered via Prisma Cloud) - a cloud-native platform that delivers cloud workload protection. Prisma Cloud Compute provides holistic protection across hosts, containers, and serverless deployments in any cloud, throughout the software lifecycle. Prisma Cloud Compute protects all workloads regardless of their underlying compute technology or the cloud in which they run. In addition, it provides Web Application and API Security (WAAS) for any cloud native architecture.\r\n●\tCloud Workload Protection\r\n●\tWeb Application API Security", "fedramp_msg": "N/A", "sales_email": "FedRAMPSales@paloaltonetworks.com", "security_email": "FedRAMP@paloaltonetworks.com", "website": "http://www.paloaltonetworks.com/", "uei": "KXQCTZ1GS851", "small_business": false, "business_categories": [ "Analytics", "Communication", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Mobile Device Management (MDM)", "Network Management", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1913470600", "name": "Palo Alto Networks, Inc.", "cloud_service_provider": "Palo Alto Networks, Inc.", "cloud_service_offering": "Palo Alto Networks Government Cloud Services", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Palo%20Alto%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-11-07T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-10-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-01-21T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 28, "reuse": 80, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-11-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-10-09T20:00:00.000Z", "cert_date": "2021-01-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-01-21T20:00:00.000Z", "annual_assessment": "2011-10-09T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2125059322", "csp": "Center for Translational Data Science (CTDS)", "cso": "Gen3 Data Ecosystems Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2328145448", "csp": "Chargie, LLC", "cso": "Electric Vehicle Infrastructure Platform for Government", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2411959145", "csp": "GitLab", "cso": "GitLab Dedicated for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1718334757", "csp": "ID.me", "cso": "ID.me Identity Gateway", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029331613", "csp": "Informatica LLC", "cso": "Informatica Intelligent Cloud Services (IICS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406453618", "csp": "LabArchives", "cso": "LabArchives for Government (LG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2129953050", "csp": "Manhattan Associates, Inc.", "cso": "Manhattan Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2225648574", "csp": "Mathematica Inc.", "cso": "Mathematica Cloud Support System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2224739070", "csp": "National Resident Matching Program", "cso": "iMatch", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234256499", "csp": "Rubrik", "cso": "Rubrik Security Cloud - Government (RSC-G)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2002367706", "csp": "Somnoware Healthcare Systems", "cso": "Somnoware", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134635186", "csp": "Synack", "cso": "On-Demand Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2334748657", "csp": "ThreatConnect", "cso": "ThreatConnect For Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421252644", "csp": "Varonis", "cso": "Varonis DatAdvantage Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1509237360", "csp": "Veracode", "cso": "Veracode Online Security Platform for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2103344623", "csp": "Workday Inc.", "cso": "Workday Government Cloud (WGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Bonneville Power Administration", "Commodity Futures Trading Commission", "Defense Information Systems Agency", "Defense Innovation Unit", "Department of Education", "Department of Energy", "Department of Health and Human Services", "Department of Transportation", "Department of Veterans Affairs", "FHFA Office of the Inspector General", "Farm Credit Administration", "Federal Aviation Administration", "Federal Deposit Insurance Corporation", "Federal Energy Regulatory Commission", "Federal Housing Finance Agency", "First Responder Network Authority", "Internal Revenue Service", "National Capital Planning Commission", "National Nuclear Security Administration / Nevada Field Office", "Nuclear Regulatory Commission", "Office of Personnel Management", "Strategic Petroleum Reserve", "U.S. International Development Finance Corporation", "U.S. Office of Special Counsel", "United States Census Bureau", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Strata Network Security Platform\n\nSecure users, apps, and data anywhere— on-premises, in the cloud, or hybrid. Get complete Zero Trust network security to see and secure everything from your headquarters to branch offices and data centers, as well as your mobile workforce.\n \nPrisma Access - a Secure Access Service Edge (SASE) that provides scalable, cloud-delivered networking and security to branch offices and remote users. With Prisma Access, agencies are able to rapidly enable consistent, secure connectivity for remote locations and employees.\n\nPrisma SD-WAN - a product that provides deep application visibility, with Layer 7 intelligence for network policy creation and traffic engineering. It automates operations and problem avoidance using machine learning and data science methodologies. Prisma SD-WAN enables branch services such as networking and security to be delivered from the cloud, simplifying WAN management.\n\nZTNA Connector - The Zero Trust Network Access (ZTNA) Connector lets you connect Prisma Access to your organization's private apps simply and securely. ZTNA Connector provides mobile users and users at branch locations access to your private apps using an automated secure tunnel. Because the ZTNA Connector sets up the tunnels automatically, you don't have to manually set up IPSec tunnels and routing to the data center or headquarters locations, public cloud locations, and partner networks where your private apps are located.\n\nColo Connect - Colo-Connect builds on the Colo-based performance hub concept, offering high-bandwidth (up to 20 Gbps) private connections along with seamless Layer 2/3 connectivity to Prisma Access from existing performance hubs. \n\nTraffic Replication - We partnered with Google Cloud Platform (GCP) to enable Google Cloud Packet Mirroring outside the Prisma Access security processing node so it wouldn’t interfere with the security inspection efficacy and overall performance of Prisma Access.Google Cloud Packet Mirroring clones the traffic and delivers a line-rate performance with zero impact on current operations. As with any GCP service, traffic cloning enables Prisma Access Traffic Replication to elastically manage the scale of traffic volume for any of the largest organizations.\n\n5g SASE - Prisma SASE 5G extends comprehensive zero-trust security to enterprise 5G deployments. Prisma SASE 5G feature integrates zero-trust security with 5G networks, enabling service providers to offer comprehensive SASE services for 5G-connected devices without the complexity of agents or inline hardware.\n\nExplicit Proxy - Prisma Access provides a complete cloud Secure Web Gateway (SWG) capability, including an Explicit Proxy connection method based in the cloud. If your organization’s existing network already uses explicit proxy and deploys PAC files on your client endpoints, you can smoothly migrate from legacy proxy-based SWG solutions to Prisma Access to secure mobile users’ outbound internet traffic. You can also use an Explicit Proxy if you need to use a proxy for compliance purposes.\n\nCloud Manager for Prisma Access - a cloud delivered solution used by customers to manage Prisma Access from Palo Alto Networks’ Hub. Fawkes allows customers to quickly onboard branches and mobile users through an intuitive and function oriented user experience. Fawkes also provides configuration management of Prisma Access’ security policies.\n\nStrata Logging Service (SLS, formerly CDL) - collects, normalizes, and integrates data from Palo Alto Networks products with public cloud scale.\n\nWildFire - an analysis and prevention engine for highly evasive zero-day exploits and malware. The cloud-based service employs a unique multi-technique approach combining dynamic and static analysis and innovative machine learning techniques to detect and prevent even the most evasive threats. It is a subscription service that works with the Palo Alto Networks Next Generation Firewalls (including VM-Series and CN-Series), Prisma Access, Prisma Cloud, Cortex XSIAM, and Cortex XDR.\n\nAdvanced URL Filtering - Advanced URL Filtering is a comprehensive URL filtering solution that protects your network and users from web-based threats. Combining the capabilities of PAN-DB with a web security engine powered by machine learning, Advanced URL Filtering categorizes and blocks malicious URLs in real-time. With an Advanced URL Filtering license (or legacy URL filtering license), you can restrict access to websites and control user interactions with web content. For example, you can prevent users from accessing websites known to host malware or entering corporate credentials into websites in specific categories.\n\nSaaS Security (API, Inline, SSPM) - is an integrated CASB (Cloud Access Security Broker) solution that helps Security teams meet the challenges of protecting the growing availability of sanctioned and unsanctioned SaaS applications and maintaining compliance consistently in the cloud while stopping threats to sensitive information, users and resources. SaaS Security Inline helps discover and manage risks posed by unsanctioned SaaS applications while SaaS Security Posture Management (SSPM) helps detect and remediate misconfigured security settings in sanctioned SaaS applications through continuous monitoring.\n\nInline DLP - serves as a data security service integrated with various Palo Alto Networks services (called channels) such as SaaS Security, Prisma Access, Prisma Cloud, and the Next Generation Firewall platform to provide data security at these various enforcement points. These channels send files to the DLP service via APIs, where DLP will scan the file, perform analysis to detect sensitive data in violation of customer policies in the file, and return this verdict and other data back to the channel. The channel then uses this information to take remedial action in order to protect sensitive data.\n\nEmail DLP - Enterprise DLP prevents exfiltration of emails containing sensitive information with AI/ML powered data detections. For example, Enterprise DLP can prevent exfiltration of sensitive data over an outbound email sent from a salesperson within your organization to their personal email.\n\nACE - a generic platform that enables the firewall or Panorama to download App-IDs from the cloud for applications that do not have specific predefined App-IDs from the Palo Alto Networks content releases.\n\nCIE - Identity-based security controls are a foundational requirement to achieve Zero Trust. Palo Alto Networks Cloud Identity Engine is an entirely new cloud-based architecture for identity-based security that can consistently authenticate and authorize your users, regardless of location and where user identity stores live - on-premises, in the cloud, or hybrid. As a result, security teams can effortlessly allow all users access to applications and data everywhere and quickly move toward a Zero Trust security posture.\n\nIoT Security - Protects your IoT attack surface with the industry’s smartest IoT Security solution delivering ML-powered visibility, prevention, and zero-trust enforcement in a single platform. IoT Edge Cloud now included. \n\nDevice Security - a unified, AI-first solution that provides comprehensive\nprotection and monitoring across your entire attack surface. To achieve this, it discovers all connected devices, as well as identifies and mitigates hidden risks that would otherwise remain invisible.\n\nPrisma SD-WAN - a product that provides deep application visibility, with Layer 7 intelligence for network policy creation and traffic engineering. It automates operations and problem avoidance using machine learning and data science methodologies. Prisma SD-WAN enables branch services such as networking and security to be delivered from the cloud, simplifying WAN management.\n\nStrata® Cloud Manager (SCM) for Prisma Access - AI-powered unified solution for managing and operating the entire network security infrastructure. It transforms how organizations oversee their NGFW & SASE deployments, aggregating telemetry from every enforcement point to deliver actionable insights. By combining AI-driven intelligence, automated operations, and integrated threat intelligence, it helps security teams stay ahead of emerging risks, maintain optimal performance, and reduce operational costs.\nStrata Cloud Manager is available in Essentials and Pro (paid) tiers.\n\nCloud Next-Generation Firewall (CNGFW) - Cloud NGFW is Palo Alto Networks ML-powered Next-Generation Firewall (NGFW) capability delivered as a fully managed cloud-native service by Palo Alto Networks on the Amazon Web Services (AWS) and Azure platforms. This deployment model combines the power of the Palo Alto NGFW with the ease of use. The Cloud NGFW service provides advanced application visibility and access control using Palo Alto Networks’ App-ID and URL filtering technologies. It provides threat prevention and detection through cloud-delivered security services and threat prevention signatures.\n\nMSP for Prisma SASE - a set of two services (pa-passthru-api-service and pa-custom-api-service) that provide APIs to support the following functionality: Aggregate application, application usage, threats and URL metrics across tenants in a tenant hierarchy Constrain the list of tenants being aggregated to the list of tenants that are authorized for the user in question.\n\nAIOps - AIOps harnesses big data from operational appliances and has the unique ability to detect and respond to issues instantaneously. Using the power of ML, AIOps strategizes using the various forms of data it compiles to yield automated insights that work to refine and iterate continually. AIOps seeks to address a quickly evolving IT landscape using the convenience of machine learning, automation and big data.\n\nRemote Browser Isolation (RBI) - Fully isolate zero-day web attacks far away from local devices and browsers. Deliver superior browser isolation without sacrificing web performance with Palo Alto Network’s RBI, which combines the latest isolation technologies with proprietary technologies and creates a no-code execution channel between users and web content.\n\nAdvanced Threat Prevention (ATP) - Advanced Threat Prevention Powered by Precision AI defends your network against both commodity threats—which are pervasive but not sophisticated—and targeted, advanced threats perpetuated by organized cyber adversaries. Advanced Threat Prevention includes comprehensive exploit, malware, and command-and-control protection, and Palo Alto Networks frequently publishes updates that equip the firewall with the very latest threat intelligence.\n\nPrisma Access Browser (PAB) - The Prisma Access Secure Enterprise Browser (Prisma Access Browser) is a browser designed specifically for enterprise use and is fortified with security features to protect users and organizations against cyber threats like phishing, malware, eavesdropping, and data exfiltration. Prisma Access Browser is the only solution that secures both managed and unmanaged devices, through a natively integrated enterprise browser that extends protection to the devices by placing security in the browser.\n\r\n\r\nRBI (Remote Browser Isolation): RBI is an isolation solution that can isolate all malware, including zero-day attacks that result from browsing and web activity, away from your end users and your network. Natively integrated with Prisma Access, RBI allows you to easily apply isolation profiles to existing security policies. With isolation profiles, you can control what browser actions are permitted for your users.\r\n\r\nAll traffic in isolation undergoes analysis and threat prevention provided by Cloud-Delivered Security Services such as Advanced Threat Prevention, Advanced WildFire, Advanced URL Filtering, DNS Security, and SaaS Security.\nApp Services (Hub, API Gateway, Visualization & Reporting, Prisma Access Insights)\n● API Gateway supports unified access to the open APIs of PANW SASE applications. Currently, API Gateway is used by Cloud Management Prisma Access, SD-WAN, Cortex Data Lake (CDL), and Prisma Access Insights customers. Working in conjunction with PANW Global IdP (Identity Provider), which provides authentication services, API Gateway provides authorization services for RESTful API and routing those APIs to multiple applications and regions.\n● Prisma Access Insights is a comprehensive platform for global visibility and monitoring for the Prisma Access service. It continuously monitors the health and performance of your Prisma Access environment with Insights in the Prisma Access app.\n● Visualization & Reporting is the security visualization and reporting product for network security use cases. It provides dashboards to end users to monitor and understand the security of their networks and how different security subscriptions from Palo Alto Networks are performing.\n\nCortex\n\nPalo Alto Networks offers the industry’s most comprehensive product portfolio for security operations, empowering organizations and agencies with best-in-class detection, investigation, automation, and response capabilities.\n\nCortex XDR - a cloud-based service providing a prevention, detection and response platform that integrates network, endpoint, and cloud data to stop sophisticated attacks. Cortex XDR leverages logs, alerts, and information from Palo Alto Networks and third-party security products. It also enforces security policies on endpoints, preventing malware and data loss. Cortex XDR correlates security alerts and network logs with the endpoint processes that generated the alerts, allowing customers to investigate security alerts, as well as search for and remotely respond to threats.\n\nCortex Xpanse - an active attack surface management solution that helps your organization discover, understand and respond to unknown risks in all internet-connected systems and services. Xpanse scans the entire internet automatically and continuously, discovering and indexing previously unknown risks, using supervised ML models to continuously map your attack surface and prioritize remediation efforts, while reducing MTTR with the help of built-in automated playbooks.\n\nCortex XSIAM - a cloud-delivered, integrated SOC platform that unifies key functions, including EDR, XDR, SOAR, ASM, UEBA, TIP, and SIEM, consolidating multiple products into a single, integrated platform. XSIAM delivers an intelligent data foundation by integrating telemetry from any source, providing unified security operations across any hybrid IT architecture.\n\nCortex XSOAR - a comprehensive security orchestration, automation, and response (SOAR) platform that unifies case management, automation, real-time collaboration, and threat intelligence management to serve security teams across the incident lifecycle.\n\nCortex Cloud - a unified security platform that enhances application security, cloud posture management and runtime protection. It integrates AppSec, identity, data, cloud infrastructure, and workload security while providing a code-to-cloud-to-runtime-to-SOC approach. With a strong shift-left strategy, it enables proactive remediation using both in-house and third-party tools. The Cloud Detection and Response (CDR) capabilities leverage multiple data sources to deliver real-time threat detection, protection and automated response. \n\nPrisma Cloud Enterprise (SaaS) - We secure applications from code to cloud, enabling security and DevOps teams to collaborate effectively and accelerate secure cloud-native application development and deployment.\n\n\n\nPrisma Cloud - a cloud-native security platform that consistently provides comprehensive visibility into misconfiguration and over-permissive roles, with threat detection and compliance assurance across multi-cloud environments.\n● CSPM\n● Agentless Workload Security\n● CIEM\n● API Visibility\n● Secret Security\n● SCA\n● IaC Security\n\nPrisma Cloud Compute (Delivered via Prisma Cloud) - a cloud-native platform that delivers cloud workload protection. Prisma Cloud Compute provides holistic protection across hosts, containers, and serverless deployments in any cloud, throughout the software lifecycle. Prisma Cloud Compute protects all workloads regardless of their underlying compute technology or the cloud in which they run. In addition, it provides Web Application and API Security (WAAS) for any cloud native architecture.\n● Cloud Workload Protection\n● Web Application API Security", "fedramp_msg": "N/A", "sales_email": "FedRAMPSales@paloaltonetworks.com", "security_email": "FedRAMP@paloaltonetworks.com", "website": "https://www.paloaltonetworks.com/", "uei": "KXQCTZ1GS851", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2001619708", "name": "Palo Alto Networks, Inc.", "cloud_service_provider": "Palo Alto Networks, Inc.", "cloud_service_offering": "Idira Endpoint Privilege Manager for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Idira%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-03-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-03-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-03-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-03-23T20:00:00.000Z", "cert_date": "2024-03-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-03-14T20:00:00.000Z", "annual_assessment": "2011-03-23T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2001619337", "csp": "Palo Alto Networks, Inc.", "cso": "Idira Identity Security Government Services Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" } ], "agency_authorizations": [ "Bureau of Labor Statistics", "Department of Agriculture", "Department of Transportation", "United States Securities and Exchange Commission" ], "agency_reuse": [ "22-034", "22-061-01", "22-062" ], "service_description": "With Idira™ Endpoint Privilege Manager by Palo Alto Networks, government organizations can confidently defend against attacks by automatically removing local admin rights, enforcing least privilege, enabling policy-based comprehensive conditional application control, maintaining application catalog, and protecting the entire endpoint security stack from tampering – in line with a number of recent CISA alerts, advisories and recommendations, and starting day one.\r\n\r\nThe Idira Endpoint Privilege Manager secure and flexible SaaS management console allows for centralized policy-based and role-based management to ensure automated, robust and differentiated application of policies based on the user’s role. Automatic elevation of known good programs requiring elevation, including those legacy and not-UAC-aware, significantly cuts down on the IT Service Desk requests, while optional automatic access restriction (for example, network connectivity restriction) for unknown applications significantly reduces the area of attack and helps break ransomware kill chain.\r\n\r\nOut-of-the-box anti-ransomware policy allows to add additional layer of security around sensitive data and prevent data corruption even in the event of successful asset compromise and ransomware execution.\r\n\r\nAdditional critical capabilities include blocking credentials, private keys, secrets, passwords, hashes, cookies and other sensitive information from memory, browsers, operating system and credential stores, effectively blocking most attacks based on credential compromise.\r\n\r\nIdira Endpoint Privilege Manager helps with audit and compliance by addressing specific regulation requirements and creating audit trail for identity and privilege events on the endpoints.\r\n\r\nThe following customer side components are authorized as part of the Idira Endpoint Privilege Manager for Government offering: Idira Endpoint Privilege Manager Windows Agent, Idira Endpoint Privilege Manager macOS Agent, Idira Endpoint Privilege Manager Linux Agent.", "fedramp_msg": "N/A", "sales_email": "cybr-federal@paloaltonetworks.com", "security_email": "cybr-federalsecurity@paloaltonetworks.com", "website": "https://www.cyberark.com/products/endpoint-privilege-manager/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2001619337", "name": "Palo Alto Networks, Inc.", "cloud_service_provider": "Palo Alto Networks, Inc.", "cloud_service_offering": "Idira Identity Security Government Services Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Idira%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-03-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-03-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-03-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 7, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-03-23T20:00:00.000Z", "cert_date": "2024-03-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-03-14T20:00:00.000Z", "annual_assessment": "2011-03-23T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2427142353", "csp": "AutoRABIT Holding, Inc.", "cso": "AutoRABIT for Public Sector - CodeScan, Guard, & ARMOR", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2001619708", "csp": "Palo Alto Networks, Inc.", "cso": "Idira Endpoint Privilege Manager for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" } ], "agency_authorizations": [ "Bureau of Labor Statistics", "Department of Agriculture", "Office of Personnel Management" ], "agency_reuse": [ "22-014", "22-020", "22-034", "22-036", "22-061-01" ], "service_description": "The Idira™ Identity Security Government Services Platform by Palo Alto Networks is a comprehensive solution designed to secure identities across the entire IT ecosystem, ensuring government agencies can confidently protect their most critical assets. By integrating privileged access management (PAM), access management (AM), the platform delivers a unified approach to identity security that aligns with federal compliance requirements.\r\n\r\nThe Idira Identity Security Government Services Platform is a FedRAMP High Authorized solution that integrates Privileged Access Management (PAM), Access Management (AM) into a unified identity security platform for federal agencies. The platform enforces least privilege, secures privileged credentials, and manages access across on-premises, cloud, and hybrid federal environments in alignment with NIST SP 800-53 Rev 5, FISMA, and EO 14028 Zero Trust requirements.\r\n\r\nThe platform provides robust capabilities to secure human identities, enforce least privilege, and manage access across complex infrastructures. It includes advanced tools for securing privileged credentials, automating identity lifecycle management, and applying adaptive authentication policies based on risk. Key features include:\r\n\r\n● Privileged Access Management (PAM): Secure, monitor, and manage privileged accounts and sessions to prevent unauthorized access and mitigate insider threats. Includes capabilities such as credential vaulting, session isolation, and real-time session recording with keystroke logging.\r\n\r\n● Access Management (AM): Enable secure access to applications, devices, and infrastructure with single sign-on (SSO), multi-factor authentication (MFA), and lifecycle management. Supports protocols like SAML, OpenID Connect (OIDC), and SCIM for seamless integration with third-party applications.\r\n\r\n● Hybrid and Multi-Cloud Support: Provides secure access and identity management across on-premises, cloud, and hybrid environments, with support for AWS, Azure, Google Cloud, and private cloud infrastructures.\r\n\r\nThe Idira Identity Security Government Services Platform is designed to meet the unique needs of government organizations, providing a scalable, secure, and compliant solution to protect against evolving cyber threats.\r\n\r\nIdira Identity Security Government Services Platform: Unified Access & Identity Management\r\n\r\nIdira Identity Security Government Services Platform is a cloud-based platform that unifies essential services like Single Sign-On (SSO) and Multi-Factor Authentication (MFA) into a single interface. Designed for Government Organizations, it secures access to critical resources (applications, devices, IaaS, PaaS, and VPNs) across on-premises, cloud, and hybrid environments.\r\n\r\nSSO and Application Gateway: The platform features a catalog with thousands of pre-configured application connections. Administrators can easily add custom applications via templates using SAML, OpenID Connect (OIDC), OAuth2, WS-FED, or traditional credentials. For legacy environments, the App Gateway provides secure, VPN-less access to on-prem applications, allowing for granular, per-user, and per-application access control.\r\n\r\nPhishing-Resistant MFA and High-Assurance Authentication: Idira supports a broad range of authentication methods, including FIDO2/Passkeys, Security Keys, Smart Cards, and Magic Links. These protections extend across the entire infrastructure, covering Windows and Mac workstations, servers, virtual desktops, VPNs, RADIUS servers, and 3rd-party IDPs. Adaptive MFA enhances this by evaluating real-time risk signals such as device posture, location, and network context, to apply dynamic, situation-aware authentication policies.\r\n\r\nUnified Directory Services and Hybrid Integration: Idira provides a hybrid architecture that unifies Active Directory, LDAP, and cloud-native users into a single source of truth. By utilizing a secure, outbound-only connector, agencies can bridge on-premises repositories for real-time authentication without the need for VPNs or invasive firewall modifications. This creates a centralized, high-availability identity hub that ensures consistent enterprise-wide policy enforcement while keeping sensitive identity data protected.\r\n\r\nPrivileged Access Manager SaaS for Government\r\n\r\nIdira Privileged Access Manager SaaS by Palo Alto Networks is a FedRAMP High Authorized, cloud-native solution that enables federal agencies to secure, monitor, and manage privileged access across on-premises, cloud and hybrid environments. The Service is hosted on FedRAMP-compliant infrastructure and supports agency compliance with NIST SP 800-53 Rev 5, FISMA, FIPS 140-2/140-3, OMB M-22-09, EO 14028, and CISA Zero Trust guidance.\r\n\r\nWith Idira Privileged Access Manager SaaS, government organizations can secure, monitor, and manage privileged credentials and sessions across complex infrastructures. The solution enables rapid onboarding of privileged accounts, enforces least privilege policies, and provides real-time session monitoring and recording to detect and respond to suspicious activity. This supports Cloud-Native Architecture that further simplifies deployment and reduces infrastructure overhead while ensuring high availability and scalability. It is built on a microservices architecture with containerized components for rapid updates and resilience.\r\n\r\nKey capabilities include:\r\n\r\n● Discovery and Onboarding: Automatically discover and onboard privileged accounts across on-premises, cloud, and hybrid environments. Supports integrations with Active Directory (AD), LDAP, and cloud directories like Azure AD.\r\n\r\n● Session Monitoring and Recording: Monitor and record privileged sessions in real time to detect and respond to anomalous behavior. Includes features like live session termination, command filtering, and session playback for forensic analysis.\r\n\r\n● Audit and Compliance Reporting: Generate detailed audit logs and compliance reports to meet regulatory requirements, including OMB, FIPS, FISMA, and CISA guidelines.\r\n\r\n● Credential Management and Rotation: Securely vault and automatically rotate privileged credentials across on-premises, cloud, and hybrid environments to eliminate static passwords. Includes features like automated rotation based on flexible policies, SSH key management, and the ability to verify credential synchronization to prevent unauthorized access and lateral movement.\r\n\r\nIdira Privileged Access Manager SaaS empowers government organizations to strengthen their security posture, reduce operational complexity, and ensure compliance with federal regulations, all while protecting their ecosystem from advanced cyber threats.", "fedramp_msg": "N/A", "sales_email": "cybr-federal@paloaltonetworks.com", "security_email": "cybr-federalsecurity@paloaltonetworks.com", "website": "https://www.cyberark.com/products/access-management/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2235229299", "name": "Paperless Innovations, Inc.", "cloud_service_provider": "Paperless Innovations, Inc.", "cloud_service_offering": "Actus", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Actus%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-11-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-04-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-02-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-11-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-04-03T20:00:00.000Z", "cert_date": "2024-02-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-02-13T20:00:00.000Z", "annual_assessment": "2011-04-03T04:00:00.000Z", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Immigration and Customs Enforcement" ], "agency_reuse": [ "" ], "service_description": "Paperless Innovations, with our Actus solution, has repositioned GPC utilization and funds management processes as a government-wide shared service under the auspices of Treasury Management available on the FM QSMO Marketplace. Actus is eligible for direct award under pre-competed terms on GSA MAS contract %23 47QTCA24D002X utilizing SIN 518210FM (Financial Management) and 54151ECOM (Ecommerce). Our end-to-end (E2E) process optimizations are inclusive of requisitions, obligations, order and transaction processing, settlements, close-out of commitments, records management, and audit. \n\nAgencies benefit operationally by adopting FedRAMP secured Cloud-based Government Purchase Card (GPC) processes supporting accurate and timely close-outs of commitments in their preferred financial system. Paperless Innovations, Inc. is committed to enabling GPC spend under management to improve the efficiency and accuracy of government purchase card programs as a compliant financial instrument on par with all Treasury disbursements. \nActus eliminates improper payments in the GPC Program utilizing secure, best of breed practices including RPA workflow automations, intelligent digital document authentication with data validation on required forms and attachments, providing financial accuracy and reliability with real-time status of funds, automated reconciliation, and inherent internal controls enforcement.\n\nActus is currently in daily use by thousands of government cardholders and Approving Officials with implementations including end-to-end regulatory and compliance automation for Purchase Card Program Management, cardholders, and associated approvers, requestors, financial managers, and auditors.\n\nAs directed in OMB Memorandum A-123, Appendix B, Risk Management Guidelines for Government Purchase Card Programs, Agencies should seek cloud automation solutions enabling GPC financial management, internal controls, and prevention of improper payments in avoidance of fraud, waste, and abuse. The OMB guidance is based on 3 pillars of operational excellence: Accountability, Compliance, and Transparency.\n\n- Accountability - Actus helps agencies paint a complete and total picture of each expense, eliminating guesswork, human error, and manual data entry tracking. Workflow automations ensure all Agency policies supporting separation of duties, improper payments reduction, and avoidance of split purchases are inherently enforced.\n\n- Compliance - Simplified, structured data is at the heart of compliance automation ensuring adherence to Agency policies and acquisition regulations. The Actus solution streamlines and automates oversight processes while maintaining rich transactional records for instant audit reporting. Actus furthers the regulatory mission of each agency with intelligent digital document processing using AI for records authentication, validation, retention, and disposal of purchase records presented as supporting documentation by cardholders. Adoption of Actus itself satisfies and supplements Federal paperless mandate compliance as well as DATA Act, IPERA, IPERIA, Public Law 115 The Evidence Act, M-19-16 Shared Services, A-11 Preparation, Submission, and Execution of the Budget, and more.\n\n- Transparency - Actus enables real time visibility over the status of funds in Government Purchase Card Programs, enabling Agencies to maximize GPC purchasing efficiency throughout the entire federal fiscal year. Actus presents role-specific dashboards enabling full visualization of all workflow processes, transactional data, and documents on a need-to-know, right-to-know basis. Audit automation occurs with every upload of bank transactions without requiring manual packet creation by cardholders and enables inspection of every detail of each purchase made within a selected time frame in a unified, streamlined format.\nActus elevates GPC financial management to the level of any other public funds obligation, supports accounting with financial system integration, enables informed budgeting with detailed item level transaction data, configures and customizes instant reporting, and unlocks actionable data for analytics, records examination, and transactions investigation. Actus increases Agency confidence to maximize refunds with daily bill pay and enables the use of purchase cards up through $25,000 in coordination with blanket purchases and standing orders.\n\nP-Card Compliance Automation Features:\n- Custom Approval Workflows\n- Financial Data Capture\n- Full Lifecycle Spend Tracking\n- Cloud Storage of Reconciliation Packets\n- Dashboard Visualization of data & documents\n- Automated Reconciliation Statements\n- Structured Item Level (Level 3) Data\n- Merchant Class Code Tracking\n- Suspicious Pattern & Activity Detection\n- Alerts for Each Stage of Transaction\n- Transactional Keyword Search\n- Bank Statement Transaction Matching\n- Auto-Matched Transactions\n- Travel Expense Tracking and Management\n- Daily, Weekly, or Monthly Reconciliation\n- PIV/CAC authentication\n- Simplified documentation in support of G-Invoicing\n- Live Agent Contact Center and Customer Services\n- Actus web app runs on all modern browsers", "fedramp_msg": "N/A", "sales_email": "sales-team@act.us", "security_email": "fedramp@act.us", "website": "https://act.us/", "uei": "MJAKA6Q9ADF8", "small_business": true, "business_categories": [ "Accounting", "Collaboration", "Data Management", "Finance", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2428769635XL", "name": "Paramify", "cloud_service_provider": "Paramify", "cloud_service_offering": "Paramify Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Paramify%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-01-30T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP In Process" }, { "date": "2026-03-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-12-05T20:00:00.000Z", "ip_prog_date2": "2025-01-30T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-03-06T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-03-06T20:00:00.000Z", "annual_assessment": "2011-09-04T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "The Paramify Cloud (Paramify) is a software platform that automates risk management processes – including compliance planning, solution implementation, gap assessments, and continuous reporting – for cloud service providers, government agencies, and members of the Defense Industrial Base (DIB). Trusted by leading CSPs like Adobe, Cisco, Trellix, Palo Alto Networks, and Flock Safety.\n\nLiving Gap Assessment Visualize compliance progress with Paramify’s intuitive real-time dashboard. Track controls, manage gaps, and easily organize people, places, and components, ensuring audit readiness for FedRAMP 20X, GovRAMP, and other frameworks.\n\nInstant Audit-Ready Documentation Automate compliance, generate audit-ready deliverables like System Security Plans (SSPs), POA&Ms, and Customer Responsibility Matrices in days, not months. Continuously validate compliance with real-time automated validation tools for FedRAMP 20X and other frameworks.\n\nFast, Cost-Effective Monitoring Continuously monitor, validate, and report compliance 90% faster at a quarter of the cost. Paramify’s automated tools and Evidence Repository simplify compliance, reducing costs and enhancing efficiency. Integrated with issue management tools like Jira, it streamlines workflows, helping you meet tight deadlines.", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class C Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "federal@paramify.com", "security_email": "fedramp@paramify.com", "website": "https://www.paramify.com/", "uei": "FWWNSFKDWPJ8", "small_business": true, "business_categories": [ "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Governance, Risk, and Compliance (GRC)", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2428769635", "name": "Paramify", "cloud_service_provider": "Paramify", "cloud_service_offering": "Paramify Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Paramify%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-08T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-04-08T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Paramify Cloud (Paramify) is a software platform that automates risk management processes—including compliance planning, solution implementation, gap assessments, and documentation—for cloud service providers, government agencies, and members of the Defense Industrial Base (DIB).\n\nParamify supports adherence to control catalog requirements including NIST 800-53 (FedRAMP, FISMA, GovRAMP, TX-RAMP), NIST 800-171 (CMMC), and standards such as SOC 2, HIPAA, and ISO 27001, with support for additional catalogs and profiles continually expanding.\n\nSSP and ATO Package Management\n\n ∙ Fast and Easy Setup: Upload previous SSPs or use the intake process to identify your system’s elements and security capabilities. Paramify then generates a roadmap to support your risk management and compliance objectives.\n\n ∙ Streamlined Control Implementation & Optimization: Visualize progress and manage security program capabilities through a unified dashboard that tracks system elements and responsibilities.\n\n ∙ ATO Package Generation: Produce accurate SSP documentation in both digital (OSCAL) and human-readable formats, with flexible export options that support various file types, including but not limited to OSCAL, PDF, Word, and Excel.\n\n ∙ Incorporate Changes Efficiently: As your risk management approach evolves, maintaining stack profiles in Paramify reduces manual update errors across documentation. Paramify automatically synchronizes updates to your SSP, CRM, CIS, policies, procedures, and other records to support compliance with evolving data protection requirements.\n\nContinuous Monitoring and Issue Management\n\n ∙ Automated POA&M Documentation: Automatically manage and update POA&M documentation via a centralized task-priority view, eliminating the need to manage from multiple spreadsheets or scan files.\n\n ∙ Vulnerability Management with Duplicate Detection: Automatically close resolved vulnerabilities and employ duplicate detection to ensure accurate issue tracking.\n\n ∙ Automated Risk Adjustment: Apply risk adjustments across multiple issues automatically to support consistent prioritization of remediation efforts.\n\n ∙ Automated Inventory Reconciliation: Configure and maintain inventory reconciliation rules to generate accurate workbooks automatically, without manual review of scan files—including those for ephemeral virtual hosts.\n\nIntegration with Your Organization’s Processes\n\n ∙ Workflow Management: Integrate with issue management tools (e.g., Jira, ServiceNow, GitLab) to facilitate collaboration between DevOps and security teams for timely issue remediation.\n\n ∙ Evidence Management: Unified evidence approach that minimizes or eliminates duplicate collection efforts.\n\n ∙ API Integrations: Paramify’s open API supports custom integrations with system components to facilitate connectivity and interoperability.\n\nAvailable in SaaS and self-hosted implementations.", "fedramp_msg": "N/A", "sales_email": "federal@paramify.com", "security_email": "fedramp@paramify.com", "website": "https://www.paramify.com/", "uei": "FWWNSFKDWPJ8", "small_business": true, "business_categories": [ "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Governance, Risk, and Compliance (GRC)", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2620043771", "name": "Patlytics, Inc.", "cloud_service_provider": "Patlytics, Inc.", "cloud_service_offering": "Patlytics AI Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Patlytics%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-03T22:14:32.990Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-05-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Patlytics is an AI-powered patent intelligence and intellectual property analytics SaaS platform that supports patent drafting, prior art and invalidity analysis, infringement detection, claim mapping, portfolio management, office action response support, litigation monitoring, and customer reporting. \n\nFor the FedRAMP package, Patlytics operates as a Managed ISV tenant that maintains its own authorization boundary while leveraging The Armory GSS, Google Cloud services, Okta, Cloudflare for Government, and other approved supporting services.", "fedramp_msg": "", "sales_email": "paul@patlytics.com", "security_email": "arthur@patlytics.com", "website": "https://patlytics.ai/", "uei": "C2EUGES7YKG4", "small_business": false, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Collaboration", "Data Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2326160742", "name": "PDRI by Pearson", "cloud_service_provider": "PDRI by Pearson", "cloud_service_offering": "Palladium", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/PDRI%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-06-05T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2026-03-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": "2024-06-05T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-03-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Palladium Software as a Service (SaaS) system provides enables organizations to assess potential employees -- as well as current employees -- by administering assessments, online interviews, job previews, and other aspects of a modern job assessment process. \n\nPalladium’s advanced innovative solutions use the latest technologies to pinpoint best-fit individuals for different roles and contexts based on skills, abilities, characteristics, and interests. Using Palladium, organizations can reduce recruiting cost by mitigating costly mistakes during the hiring process.", "fedramp_msg": "", "sales_email": "ryan.oleary@pdri.com", "security_email": "ian.serotkin@pdri.com", "website": "https://pdri.com/platform/", "uei": "KGZ7ELR8QJM6", "small_business": false, "business_categories": [ "Education & Training", "Human Resources", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2135637226", "name": "Pearson VUE", "cloud_service_provider": "Pearson VUE", "cloud_service_offering": "Pearson Federal Cloud System", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/PearsonVUE%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-05-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-01-16T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-05-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-01-16T20:00:00.000Z", "cert_date": "2025-04-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-23T20:00:00.000Z", "annual_assessment": "2011-10-26T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of State" ], "agency_reuse": [ "" ], "service_description": "Pearson VUEs Pearson Federal Cloud System securely delivers assessments to registered testing candidates for over 450 assessment programs. Agencies and other government organizations can use the Pearson Federal Cloud System to administer high stakes assessments\n to potential job candidates. The system is built on Microsoft’s Azure Commercial Cloud infrastructure-as-a-service (IaaS)\n\n\nPearson VUE’s FedRAMP boundary includes candidate registration and scheduling systems; candidate testing on Athena Browser Edition (A-BE) or Athena Desktop (A-DE) test drivers; the OnVUE online proctoring platform; and reporting systems, including IntelliVUE.", "fedramp_msg": "N/A", "sales_email": "deanna.hudella@pearson.com", "security_email": "FedRAMP@pearson.com", "website": "https://home.pearsonvue.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1306282198A", "name": "Pegasystems", "cloud_service_provider": "Pegasystems", "cloud_service_offering": "Pega Cloud for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/PEGA%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-07-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-10-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-07-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-10-17T20:00:00.000Z", "cert_date": "2025-03-18T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-18T20:00:00.000Z", "annual_assessment": "2011-02-28T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture", "Department of Veterans Affairs", "Federal Aviation Administration", "Food and Drug Administration", "Internal Revenue Service", "Office of Justice Programs" ], "agency_reuse": [ "" ], "service_description": "Pega Cloud for Government is a fully managed cloud designed specifically for US Government Agencies. It provides the tools, environments, and operational support necessary to enable applications to scale with consistent performance while meeting strict FedRAMP security standards. Pega Government Platform (PGP) is a no-code application development solution, allowing Government users to collaboratively build applications together with model-based design, ensuring the final solution meets end-user needs. The agile, secure, unified solution gives agencies a tool for transformation without having to “rip and replace” existing systems. Pega Cloud for Government (PCFG) is an authorized FedRAMP High cloud service provider utilizing AWS GovCloud as an IaaS.", "fedramp_msg": "N/A", "sales_email": "pcfginfo@pega.com", "security_email": "PCFGSecurity@pega.com", "website": "https://www.pega.com/industries/government", "uei": "ZLJNJG6DRZJ5", "small_business": false, "business_categories": [ "Customer Relations Management (CRM)", "Customer Service", "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "Customer Decision Hub (CDH)", "GenAI Blueprint", "Pega User Management" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2500967834", "name": "Peniel Solutions, LLC", "cloud_service_provider": "Peniel Solutions, LLC", "cloud_service_offering": "TransAccess GovCloud Records (GCR)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/PSL%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-05-21T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-06-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-08-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-05-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-06-09T20:00:00.000Z", "cert_date": "2025-08-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-08-26T20:00:00.000Z", "annual_assessment": "2011-05-22T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Housing and Urban Development" ], "agency_reuse": [ "" ], "service_description": "FOIA Module Integration with TransAccess GovCloud Records (GCR): The FOIA Module represents a significant expansion of GCR's capabilities, adding specialized tools for federal agencies managing Freedom of Information Act (FOIA) requests and redaction workflows. GCR now includes a FOIA automation module for enterprise use that transforms how federal agencies handle FOIA requests and mandatory redactions. The FOIA Module combines AI-powered entity detection with compliance-driven redaction workflows, enabling agencies to process complex multi-document FOIA requests 60-70% faster while maintaining rigorous audit trails and Section 508 compliance. The module is based on NIST 800-53 and has moderate baseline security controls (3PAO Assessed, March 2026). It supports redaction of documents, videos, and audio, and provides exemption-specific guidance based on landmark case law.\n\r\nTransAccess GovCloud Records (GCR) is a safe, cloud-based software service created and managed by Peniel Solutions LLC to help federal, state, local, and educational agencies manage their electronic records effectively. Hosted within a FedRAMP-authorized cloud infrastructure—which may include environments such as Microsoft Azure Government, Google Cloud Platform, or other compliant providers—GCR is designed to meet stringent federal requirements, including those from NARA and OMB.\n\nAI-Enhanced Records Management\nGCR integrates AI-driven capabilities to streamline records classification, automate metadata tagging, support intelligent redaction, and enable predictive compliance alerts. These features help agencies reduce manual workload, improve accuracy, and stay ahead of regulatory requirements. This service description reflects only the features and components that have been tested and accredited as part of the FedRAMP authorization boundary.\nGCR helps agencies handle records safely and effectively, using innovative AI tools that improve automation, sorting, hiding sensitive information, and checking for compliance.\n\nKey Features and Capabilities within the FedRAMP Authorization Boundary:\na. User Access and Identity Management\nGCR enforces robust role-based access control (RBAC), multi-factor authentication (MFA), session timeout policies, and account lockout mechanisms. Identity management is integrated with cloud-native security services and internal governance policies.\nb. Data Protection\nAll data is encrypted both at rest and in transit using FIPS 140-2 validated cryptographic modules. Key management is handled through secure, cloud-native key management services.\nc. Audit and Logging\nComprehensive audit logging captures user activity, system events, and security-relevant actions. Logs are retained in accordance with OMB M-21-31 and are accessible for compliance reporting and forensic analysis.\nd. System Monitoring and Incident Response\nGCR is continuously monitored using advanced cloud-native security tools. An incident response plan aligned with NIST SP 800-61 ensures rapid detection, containment, and recovery from security events.\ne. Configuration and Change Management\nConfiguration baselines are maintained using integrated cloud management tools and version-controlled repositories. All changes undergo formal review, impact analysis, and rollback procedures.\nf. Contingency Planning\nAutomated backups and geographically distributed recovery sites ensure continuity of operations. Recovery time objectives (RTOs) and recovery point objectives (RPOs) are defined to meet mission-critical needs.\ng. Security Training and Awareness\nAll personnel receive annual security awareness and role-based training. Training records are maintained and reviewed to ensure compliance and readiness.\nh. Boundary Definition\nThe FedRAMP authorization boundary includes all components hosted within the secure cloud environment—such as virtual machines, object storage, managed databases, and associated networking and security services. No external systems or unauthorized users are permitted access.", "fedramp_msg": "N/A", "sales_email": "info@penielsolutions.com", "security_email": "info@penielsolutions.com", "website": "https://www.tagovcloud.com/", "uei": "RL1GEPFF8NW5", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Content Management System (CMS)", "Data Management", "Legal & Policy", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2609449664", "name": "Pepelwerk LLC", "cloud_service_provider": "Pepelwerk LLC", "cloud_service_offering": "Pepelwerk Government", "logo": "", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-04-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "ControlCase", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Pepelwerk is a cloud-based workforce and talent management designed to automate the creation, maintenance, and updating of Talent Profiles. Pepelwerk supports the Cybersecurity Talent Management System (CTMS) by capturing CTMS-specific data not addressed by traditional Title 5 systems, such as career track/level, technical capabilities, qualifications, education/certifications, and assignment details. \nPepelwerk’ s primary objective is to streamline and modernize the management of CTMS Talent Profiles, ensuring accurate, timely, and consistent data capture for employees. The system is intended to: \n• Reduce manual workload for HR specialists. \n• Improve data accuracy and consistency. \n• Enable supervisors to review and validate employee profile updates. \n• Support annual updates during the Mission Impact Review (CTMS performance process). \n• Pilot the solution with Entry and Developmental Career Track employees, with potential for future expansion. \nPepelwerk provides a wide range of workforce and talent management services, including: \nFor Individuals: \n• Career exploration and transition support for those starting work life, seeking a career change, or transitioning from military to civilian employment. \n• Access to internships and apprenticeships. \n• Data-driven career decision tools. \n• Career coaching (find or become a coach), and resources for parents of young adults. \n• Community conversations and engagement for career development. \nFor Organizations: \n• AI and automation tools for agile talent management and workforce planning. \n• Talent development marketplace for employee growth and recruitment. \n• Community-driven data and predictive analytics. \n• Impact dashboard modules for organizational measurement. \n• Customizable talent marketplace creation. \n• AI Career Assistant for employees, members, alumni, students, and citizens. \n• Sponsorship opportunities for AI career assistants or educational initiatives. \n• Workforce building tools to develop future hires and recruit based on skills and attributes. \nCourse matching for student enrollment and real-time training and skills development.", "fedramp_msg": "", "sales_email": "MarketingandSales@pepelwerk.com", "security_email": "infra@pepelwerk.com", "website": "https://www.pepelwerk.com/", "uei": "", "small_business": true, "business_categories": [ "Education & Training" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1716961549", "name": "Peraton Corporation", "cloud_service_provider": "Peraton Corporation", "cloud_service_offering": "Next Generation Cloud Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Peraton%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-02-23T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-04-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-03-02T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2017-02-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-04-03T20:00:00.000Z", "cert_date": "2018-03-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-03-02T20:00:00.000Z", "annual_assessment": "2011-03-28T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "United States Agency for Global Media" ], "agency_reuse": [ "" ], "service_description": "The Next Generation Cloud Platform (NGCP) is a FedRAMP compliant Platform-as-a-Service (PaaS) which deploys multiple Software-as-a-Service (SaaS) solutions to federal, state and commercial customers. The platform currently includes four Application Modules: Employee Performance Management (ePerformance), Environmental Program Information Management System (EPIMS), n.SITE for Connect:Direct transmissions of government data, and e.POWER for Business Process Management. Peraton is deploying multiple SaaS products on the same re-usable framework.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "ngcpaas@peraton.com", "website": "https://www.peraton.com/", "uei": "", "small_business": false, "business_categories": [ "Education & Training", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1818240234", "name": "Perceptyx", "cloud_service_provider": "Perceptyx", "cloud_service_offering": "Perceptyx Insights Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Perceptyx%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-05-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-05-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-07-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-05-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-05-13T20:00:00.000Z", "cert_date": "2022-07-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-07-12T20:00:00.000Z", "annual_assessment": "2011-05-13T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Perceptyx's online employee engagement survey technology is built to support four phases of service to Perceptyx clients, including a configuration module to support planning and survey set-up, data collection module, diagnostic reporting module and action planning module, each module runs on the Perceptyx proprietary web software platform.\n\nUsing the Perceptyx real-time technology for each phase of a project, Perceptyx can create web applications specifically suited to the unique data collection and reporting needs of any organization. From creation to collection to interactive result reporting, the whole process is done in real-time and is hosted on the Perceptyx robust, secure network.\n\nPerceptyx technology supports performance improvement services for each client in the following phases:\n\n1. Design, development, configuration, and testing.\n2. Deploy, data collection, training, and monitoring.\n3. Analysis, diagnosis, and final report configuration.\n4. Report distribution, action planning, and executive presentations.\n\nEach phase of the project provides specific services for the client leveraged by the Perceptyx technology and facilitated by Project Managers.\n\nThe services included as part of the Perceptyx Insights Platform include the following:\n\n1. Ask Service - Point-in-time employee surveys to illuminate the employee experience\n2. Sense Service - Lifecycle surveys and always-on listening to keep pace with your people\n3. Dialogue Service - Crowdsourced insights to engage your people on the topics that matter most\n4. Develop Service - Multi-rater feedback to improve manager effectiveness and build leaders", "fedramp_msg": "N/A", "sales_email": "info@perceptyx.com", "security_email": "security@perceptyx.com", "website": "https://go.perceptyx.com/platform/people-insights-platform", "uei": "MMBNNNHE86C6", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2604643715", "name": "Perplexity AI", "cloud_service_provider": "Perplexity AI", "cloud_service_offering": "Perplexity Enterprise and API Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Perplexity%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-11-17T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2026-02-01T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-11-17T20:00:00.000Z", "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-02-01T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-02-01T20:00:00.000Z", "annual_assessment": "2011-02-01T04:00:00.000Z", "independent_assessor": "Federal Risk and Authorization Management Program", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program", "U.S. Election Assistance Commission" ], "agency_reuse": [ "" ], "service_description": "Perplexity's Enterprise platform provides agency users with access to leading frontier AI models (including OpenAI GPT, Anthropic Claude, Google Gemini, Perplexity Sonar, and more). The platform supports research and analysis across internal agency data and public sources through an intuitive conversational interface. Built on Perplexity's exabyte-scale proprietary knowledge index, responses are grounded in verifiable sources, providing trustworthy, transparent, and reliable information to users.\r\nThrough Perplexity's Search API, developers may also access Perplexity's exabyte-scale knowledge index to provide web-grounded answers in real time. The index tracks over 300bn unique URLs and processes hundreds of millions of pages per day, providing agencies a durable foundation for real time web retrieval.\r\nPerplexity's features include robust security and compliance measures such as SAML SSO, customizable access controls and data retention, comprehensive administrative management, audit logs, and dedicated priority support. Perplexity Enterprise minimizes the risks inherent in single-model solutions, with Perplexity’s model-agnostic architecture providing greater uptime and empowering IT administrators to enable and disable specific models to enforce policy compliance.", "fedramp_msg": "", "sales_email": "usgov@perplexity.ai", "security_email": "fedramp@perplexity.ai", "website": "https://www.perplexity.ai/enterprise", "uei": "P9N9FFAUBLQ4", "small_business": false, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Collaboration", "Communication", "Content Management System (CMS)", "Development Tools", "Education & Training", "Finance", "Legal & Policy", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2504154395", "name": "Persona", "cloud_service_provider": "Persona", "cloud_service_offering": "Persona for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Persona%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-10T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-09-10T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Persona Platform is a cloud-native comprehensive identity verification platform tool hosted on Google Cloud Platform (GCP) that is designed to help federal agencies verify their users' identities. The core capabilities of the Persona Platform are as follows:\n\nIdentity Verification: Persona offers multiple verification methods including government ID verification (supporting over 200 countries and territories), selfie verification with biometric liveness detection, database verification, and NFC verification\n\nFraud Prevention: The platform employs device signals, passive signals (IP address, geolocation, device fingerprinting), and advanced algorithms to detect fraud attempts like deepfakes and spoofing\n\nCompliance Solutions: Persona helps agencies meet global compliance requirements, including KYC (Know Your Customer), KYB (Know Your Business), and AML (Anti-Money Laundering)\n\nCustomizable Workflows: agencies can create tailored verification journeys with drag-and-drop tools and custom rules", "fedramp_msg": "N/A", "sales_email": "sales@withpersona.com", "security_email": "security@withpersona.com", "website": "https://withpersona.com/", "uei": "EPYDWT6LARB7", "small_business": false, "business_categories": [ "Analytics", "Customer Relations Management (CRM)", "Cybersecurity & Risk Management", "Data Management", "Human Resources", "Law Enforcement", "Legal & Policy", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2504154395XL", "name": "Persona Identities, LLC", "cloud_service_provider": "Persona Identities, LLC", "cloud_service_offering": "Persona for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Persona%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-01-09T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2026-03-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2026-04-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2026-01-09T20:00:00.000Z", "ip_prog_date2": "2026-03-10T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-04-10T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-04-10T20:00:00.000Z", "annual_assessment": "2011-09-22T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "The Persona Platform is a cloud-native comprehensive identity verification platform tool hosted on Google Cloud Platform (GCP) that is designed to help federal agencies verify their users' identities. The core capabilities of the Persona Platform are as follows:\n\nIdentity Verification: Persona offers multiple verification methods including government ID verification (supporting over 200 countries and territories), selfie verification with biometric liveness detection, database verification, and NFC verification\n\nFraud Prevention: The platform employs device signals, passive signals (IP address, geolocation, device fingerprinting), and advanced algorithms to detect fraud attempts like deepfakes and spoofing\n\nCompliance Solutions: Persona helps agencies meet global compliance requirements, including KYC (Know Your Customer), KYB (Know Your Business), and AML (Anti-Money Laundering)\n\nCustomizable Workflows: agencies can create tailored verification journeys with drag-and-drop tools and custom rules", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class C Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "sales@withpersona.com", "security_email": "security@withpersona.com", "website": "https://withpersona.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Customer Relations Management (CRM)", "Cybersecurity & Risk Management", "Data Management", "Human Resources", "Law Enforcement", "Legal & Policy", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2202555908", "name": "Pexip Inc.", "cloud_service_provider": "Pexip Inc.", "cloud_service_offering": "Pexip Government Cloud (PGC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Pexip%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-01-25T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-09-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-04-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-01-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-09-26T20:00:00.000Z", "cert_date": "2023-04-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-04-19T20:00:00.000Z", "annual_assessment": "2011-09-26T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Labor", "Executive Office for United States Attorneys", "National Institute of Standards and Technology" ], "agency_reuse": [ "" ], "service_description": "Pexip Government Cloud is a SaaS-based video teleconferencing (VTC) solution for U.S. federal, state, and local government organizations. With Pexip, government customers can augment their existing on-premise VTC infrastructure with a subscription-based service model while retaining ownership of their specific endpoint dial plan and call control routing rules. By migrating to a SaaS or hybrid service model, government organizations maintain operational control of their endpoints and systems without incurring the long-term costs of developing and maintaining additional infrastructure.\nPexip Government Cloud’s secure VTC platform brings the modernized meeting experience to the government user base in the following ways:\n• Microsoft-certified Cloud Video Interoperability (CVI) for Microsoft Teams – Helps agencies securely collaborate on Microsoft Teams in their hybrid workplace. With Pexip Government Cloud, employees can join Microsoft Teams calls from their existing standards-based meeting room video systems as well as enterprise-class standards-based soft clients.\n• Bi-Directional SIP Dialing for Windows-Based Microsoft Teams Rooms (MTRw) – Expanding on Pexip’s CVI capability, this feature enables SIP-based video conferencing endpoints to call directly into Microsoft Teams Rooms (MTR) running on Windows, and vice versa. This allows government agencies to integrate MTRw into their broader VTC ecosystem, ensuring seamless cross-platform collaboration. \n• Google Meet Interoperability – Enables agencies to seamlessly connect standards-based VTC systems directly into Google Meet meetings using native SIP dialing. This allows government users to leverage existing room-based video conferencing hardware to join Google Meet sessions without additional plugins or workarounds, ensuring a secure, seamless, and familiar meeting experience.\n• Standards-Based Virtual Meeting Rooms (VMRs) – Supports customer VTC endpoint devices and clients, featuring Pexip’s native CMVP-validated FIPS 140-3 encryption suite, ensuring secure and compliant video communications.\n• Self-Hosted Platform Integration – Enables hybrid VTC deployments where Pexip Government Cloud extends the customer’s existing self-hosted platform. This integration allows VTC systems to seamlessly connect with enterprise third-party applications, support calendaring integrations for simplified end-user join flows, and align with global policy frameworks such as Zero Trust Architecture (ZTA) and Secure Access Service Edge (SASE).", "fedramp_msg": "N/A", "sales_email": "fedramp@pexgov.com", "security_email": "pgc-security@pexgov.com", "website": "https://www.pexip.com/", "uei": "", "small_business": false, "business_categories": [ "Collaboration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2613731293", "name": "Phenom People, Inc. (Phenom)", "cloud_service_provider": "Phenom People, Inc. (Phenom)", "cloud_service_offering": "Phenom for Government (PHGOV)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Phenom%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-04-23T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Phenom is an applied AI company committed to helping public agencies hire faster, develop better, and retain longer - all through the power of experience and intelligence. Our AI-powered talent experience platform connects every stakeholder in the talent journey - candidates, recruiters, employees, and hiring managers - to improve productivity, retention, and hiring outcomes.\nPhenom for Government is delivered as a SaaS offering using a multi-tenant Government-only cloud computing environment. It is available to federal, state, local, and tribal governments, as well as research institutions, federal contractors, and government contractors. Built on a scalable, secure, and extensible architecture, Phenom’s platform enables public sector organizations to modernize how they attract, engage, and retain talent while ensuring security and privacy compliance. From intelligent career sites that improve the candidate experience to automated screening, scheduling, and onboarding, Phenom accelerates the hiring process while reducing administrative burden on HR teams.\nTrusted by global enterprises, Phenom enables agencies and contractors to address today’s talent challenges including skill shortages, digital transformation, and workforce modernization with a unified platform built for speed, agility, and scale.", "fedramp_msg": "", "sales_email": "publicsector@phenom.com", "security_email": "security@phenom.us", "website": "https://www.phenom.com/government-public-sector", "uei": "CVASYEJ3KE38", "small_business": false, "business_categories": [ "Analytics", "Content Management System (CMS)", "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2102577114", "name": "Pitney Bowes", "cloud_service_provider": "Pitney Bowes", "cloud_service_offering": "SendPro 360", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Pitney%20Bowes%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-09-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-09-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-06-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 11, "reuse": 10, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-09-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-09-02T20:00:00.000Z", "cert_date": "2022-06-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-06-06T20:00:00.000Z", "annual_assessment": "2011-09-02T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Department of Health and Human Services", "Department of Veterans Affairs", "Executive Office for United States Attorneys", "Federal Bureau of Prisons", "Federal Deposit Insurance Corporation", "Food and Drug Administration", "Nuclear Regulatory Commission", "United States Census Bureau", "United States Marshals Service", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Pitney Bowes SendPro 360 Sending, Receiving, and Locker Management Solution\n\nPitney Bowes SendPro 360 is a comprehensive, cloud-based sending, receiving, locker management, and analytics solution that powers your mailroom operations for maximum efficiency and transparency. \n\nMulti-Carrier Shipping and Mailing\n\nSendPro 360 makes mailing and shipping quick and easy by empowering departments with the flexibility to send in the way that’s right for them. Users save time and money by printing stamps directly from the online interface and by accessing SendPro 360 multi-carrier shipping functionality to compare rates and print labels across major carriers. The ability to track spend and activity by account or department, facilitates project or departmental chargebacks for accurate accounting. SendPro360 includes a dedicated certified and electronic return receipt (ERR) and registered mailing process with proof of delivery reporting. Also, qualified users can prepare ship requests for packages sent to the mailroom for processing.\n\nPackage Receiving, Tracking and Delivery\n\nThe SendPro 360 platform automates the process of receiving, tracking, and delivering incoming packages and mail through a simple scan of a barcode. Manually logging items instantly becomes a process of the past. It can configure delivery routes, provide lists of packages, and has the ability to manage assets. Package tracking notifications via email and SMS as well as SLA management simplify and enhance the experience.\n\n-The SendPro 360 platform automates the process of receiving, tracking, and delivering incoming packages and mail through a simple scan of a barcode.\n\nSmart Locker Management\n\nEffectively manage the delivery process of packages, assets, and other important items moving across your organization with SendPro 360 Smart Locker Management capabilities. This software solution is the intelligence behind a physical smart locker and helps ensure safe, secure contactless delivery. It modernizes the pickup process by enabling convenient 24/7 self-service locker access and automates alerts notifying recipients they have an item for pickup while preserving chain-of-custody. Our Smart Locker Management Software allows users to remotely manage or troubleshoot smart lockers across a single site or multiple locations. Plus, it offers extensibility ensuring seamless expansion to additional workflows to meet evolving needs.\n\n-These solutions will require customer-provided hardware and will require assessment, authorization, and continuous monitoring of such capabilities by using agencies. Pitney Bowes has the technical expertise to help determine which hardware best meets agency needs and to assist with agency authorization and approval processes.\n\nAnalytics\n\nFrom smaller mailrooms to multi-location operations, SendPro 360 offers complete visibility into your receiving and sending operations. Dynamic views can be filtered by divisions, locations, cost accounts, and users, across any date range. View and manage postage and shipping spend, and gain insights to your receiving and locker metrics all the way through final delivery to ensure packages and mail are accounted for and delivered on time.\n\nGauge performance, operator efficiency, and resource utilization to ensure service level agreement (SLA) metrics are being met. To locate a package, SendPro 360 provides end-to-end tracking of packages, locker activity, as well as shipping and mailing activity across your government agency.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@pb.com", "website": "https://www.pitneybowes.com/us", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2101000225", "name": "PlanStreet", "cloud_service_provider": "PlanStreet", "cloud_service_offering": "PlanStreet Case Management System", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/PlanStreet%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-02-11T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-03-03T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "PlanStreet is a comprehensive case management platform created to help agencies modernize service delivery, streamline workflows, and ensure accountability in mission-critical programs. With access to real-time data, intelligent automation, and seamless integrations, PlanStreet greatly reduces administrative tasks while improving transparency and performance. \n\nTransforming Federal Case Management:\n✔ Case Management Services – Centralized, secure case handling for improved service coordination.\n✔ Incident Management – Real-time tracking, risk assessment, and resolution for critical incidents.\n✔ Investigation Management – Comprehensive tools for audits, compliance, and case integrity.\n✔ Grants Management – End-to-end grant lifecycle tracking with built-in compliance safeguards.\n✔ Referral Management – Seamless collaboration and secure data sharing across agencies.\n\nPlanStreet is purpose-built for the unique challenges of federal agencies, offering scalability, security, and compliance with federal regulations. Whether managing social services, healthcare programs, or regulatory oversight, PlanStreet empowers agencies, putting them in control to maximize impact, drive efficiency, and deliver better outcomes for the communities they serve.", "fedramp_msg": "N/A", "sales_email": "sales@planstreetinc.com", "security_email": "security@planstreetinc.com", "website": "https://www.planstreet.com/", "uei": "JBELEMTSV4L6", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Contact Center", "Customer Relations Management (CRM)", "Data Management", "Grant Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2127765215", "name": "Point Blue Conservation Science", "cloud_service_provider": "Point Blue Conservation Science", "cloud_service_offering": "Point Blue Science Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/PointBlue%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-11-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-02-28T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-03-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-11-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-02-28T20:00:00.000Z", "cert_date": "2022-03-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "US Fish and Wildlife Service", "fedramp_auth": "2022-03-17T20:00:00.000Z", "annual_assessment": "2011-02-28T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "US Fish and Wildlife Service" ], "agency_reuse": [ "" ], "service_description": "Point Blue Conservation Science (Point Blue) hosts the multi-user Software as a Service (SaaS) named the Point Blue Science Cloud, a collection of tools that manage, share, curate, and analyze scientifically collected biodiversity observations and samples in support of the Avian Knowledge Network. These tools include data-rich, interactive websites that integrate bird and other indicator species data with ecosystem and climate change data to improve conservation outcomes today and in the future. Many tools incorporate original research data from Point Blue scientists and our partners. The Point Blue Science Cloud is used by Federal agencies, State agencies, local government agencies, non-for-profit organizations, and other conservation-minded individuals. Federal agencies use the Point Blue Science Cloud to manage and curate observations, conduct research, and analyze information related to wildlife and ecosystems. Point Blue Conservation Science is a 501(C)(3) non-profit organization with a mission to conserve birds, other wildlife and ecosystems through science, partnerships, and outreach.", "fedramp_msg": "N/A", "sales_email": "info@pointblue.org", "security_email": "fedramp@pointblue.org", "website": "https://www.pointblue.org/", "uei": "IDLMCTPLQMR1F5", "small_business": true, "business_categories": [ "Collaboration", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2432218524", "name": "Power Settlements Consulting and Software, LLC (PSCS), a subsidiary of Yes Energy, LLC", "cloud_service_provider": "Power Settlements Consulting and Software, LLC (PSCS), a subsidiary of Yes Energy, LLC", "cloud_service_offering": "PowerCore™ (PC-GOV)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/PS%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-09-10T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-03-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-09-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-03-28T20:00:00.000Z", "cert_date": "2025-05-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-05-15T20:00:00.000Z", "annual_assessment": "2011-03-27T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "PowerCore™ is delivered as a SaaS offering using a multi-tenant Government Only Community cloud computing environment. It is available to federal, state, local, and tribal governments, as well as research institutions, federal contractors, and government contractors. The system is a browser-based application with no components that need to be installed on the customer site and no mobile app.\n\nThe PowerCore system is modular based, with four primary solutions that can be enabled:\n\n- PowerCore ISO/RTO enables market participants to perform scheduling, automated data downloading, shadow settlements and statement validation, allocations, and reporting. \n\n- PowerCore Visual Analytics provides a visual dashboard for Generators to analyze ISO/RTO and internal data including schedules, real-time dispatch, meter, pricing, position management, and estimated profits and losses in a single graphical interface. \n\n- PowerCore Contract Billing is used to help automate the settlement of complex power purchase agreements, tolling agreements, or other power contracts. \n\n- PowerCore ETRM (Energy Trading and Risk Management) is an integrated solution for automating front-office, mid-office, and back-office business processes related to the deal capture of power and natural gas deals with counterparties.", "fedramp_msg": "N/A", "sales_email": "sales@yesenergy.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://powersettlements.com/solutions/overview/", "uei": "", "small_business": true, "business_categories": [ "Accounting", "Analytics", "Collaboration", "Customer Relations Management (CRM)", "Data Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "PowerCore Contract Billing", "PowerCore ETRM (Energy Trading and Risk Management)", "PowerCore ISO/RTO", "PowerCore Visual Analytics" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1405214357", "name": "PowerTrain Inc.", "cloud_service_provider": "PowerTrain Inc.", "cloud_service_offering": "PowerTrain Government Learning Enclave - SaaS", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/PowerTrain%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-01-01T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2016-10-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-04-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 16, "reuse": 15, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2014-01-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2016-10-25T20:00:00.000Z", "cert_date": "2017-04-27T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2017-04-27T20:00:00.000Z", "annual_assessment": "2011-07-28T04:00:00.000Z", "independent_assessor": "MindPoint Group, A Tyto Athene Company", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Court Services and Offender Supervision Agency", "Department of Energy", "Department of Housing and Urban Development", "Federal Law Enforcement Training Centers", "General Services Administration", "Government Accountability Office", "Joint Special Operations Medical Training Center", "National Defense University", "National Oceanic and Atmospheric Administration", "Nuclear Regulatory Commission", "Office of Personnel Management", "Other Executive Branch Subagency", "Small Business Administration", "State Office of the Inspector General", "U.S. Election Assistance Commission", "Warfighting Acquisition University" ], "agency_reuse": [ "" ], "service_description": "The PowerTrain Government Enclave (PGE) is a secure, FedRAMP-authorized cloud environment that hosts a diverse portfolio of mission and enterprise applications. This includes the Government Learning Enclave (GLE), PowerTrain’s integrated learning ecosystem, as well as a range of Software-as-a-Service (SaaS) offerings and other secure applications.\r\n\r\nKey solutions within the enclave include the Callisto Learning Platform (powered by Moodle™), Career Voyager Talent Management Platform, LMS Xpress, AegisIQ, Drupal™ Secure Baseline for Government, Veracity LRS, and Rustici Content Controller. All applications are deployed within a unified security framework and support multi-factor authentication and single sign-on for secure, seamless access.\r\n\r\n \r\n\r\nThe Callisto Learning Platform powered by Moodle™ is hardened and secured for government use to provide a comprehensive suite of learning delivery and management tools for enterprises large and small. Included in its approved baseline are the current Moodle™ long term release; Electronic Human Resource Integration (EHRI) data collection and reporting; integrated Authorization, Agreement, and Certification of Training Form (SF-182); Individual Development Plans (IDP); comprehensive registration management for live learning events with adjustable workflow, wait list management, and automated notifications; competency management; lesson plans; mandatory training compliance; configurable reports; and support for multiple tenants.\r\n\r\n \r\n\r\nThe Career Voyager Talent Platform includes Career Mapping, Leadership Succession Planning, Candidate Review, and PowerSurvey. Career Mapping enables users to map a progressive career ladder of job opportunities within an organization, as well as view skills, abilities, competencies, recommended training, and developmental activities necessary to progress from one position to another; Leadership Succession Planning resources, assessments, tools, and reference materials to promote self-discovery, accelerate career advancement, and support leadership development; Candidate Review System supports talent acquisition efforts for fellowships, technical internships, and other multi-phase, interactive application processes; and PowerSurvey supports a variety of employee data collection and secure reporting efforts.\r\n\r\n \r\n\r\nLMS-Express is a powerful, lightweight learning management system designed for targeted asynchronous eLearning content delivery.\r\n\r\n \r\n\r\nAegisIQ is a hardened and secure version of MediaWiki™ and includes additional functionality to support the unique reporting requirements of government users. Our\r\n\r\nDrupal™ Secure Baseline for Government is a hardened and secure version of Drupal™ and includes a number of Drupal™ modules cleared for use in the baseline with the ability to extend functionality.\r\n\r\n \r\n\r\nVeracity LRS is a robust solution designed to capture, store, and return data about learning experiences in compliance with the Experience API (xAPI) specifications. It serves as a central repository for learning records, enabling detailed tracking and analysis of learner activities across the components of the PowerTrain Learning Ecosystem. With powerful analytics capabilities, the LRS allows organizations to provide a comprehensive view of learning outcomes and effectiveness, enabling educators to make informed decisions to enhance learning strategies and improve overall educational outcomes.\r\n\r\n\r\nRustici Content Controller ensures uniform access to training materials such as SCORM 1.2, SCORM 2004 (2nd, 3rd, & 4th editions), AICC, xAPI, cmi5, MP3, MP4, and PDF, enhancing the interoperability and efficiency of content delivery without the need for duplicating course files. This capability not only streamlines the management of eLearning content but also supports seamless, secure, and scalable training deployments.\r\n\r\n \r\n\r\nEvent Registration System supports online registration for live and virtual events.\r\n\r\n \r\n\r\nMoodle™ is a registered trademark of Moodle Pty Ltd or its related affiliates. Drupal™ is a registered trademark of Dries Buytaert. MediaWiki™ is a registered trademark of the Wikimedia Foundation.\r\n\r\n \r\n\r\nPowerTrain Government Enclave applications currently In Process include: Learnito (Powered by SparkLearn).", "fedramp_msg": "N/A", "sales_email": "development@powertrain.com", "security_email": "Compliance@powertrain.com", "website": "https://powertrain.com/", "uei": "FFFBN9JMAKK3", "small_business": true, "business_categories": [ "Learning Management", "Talent Development", "Talent Management" ], "service_last_90": [ "" ], "all_others": [ "Callisto Learning Platform powered by Moodle™", "Career Voyager Talent Platform", "Drupal™ Secure Baseline for Government", "LMS-Express", "Rustici Content Controller", "SecureWiki", "Veracity Learning Record Store" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2627740935", "name": "Praxon Labs Inc.", "cloud_service_provider": "Praxon Labs Inc.", "cloud_service_offering": "Praxon Arc", "logo": "", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-05T21:36:47.113Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-08-03T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Praxon Arc is a secure, multi-tenant AI gateway that enables federal agencies and government contractors to access, govern, and operationalize approved generative AI models through a unified platform. Praxon provides OpenAI-compatible APIs and a centralized user interface while routing requests to authorized model providers within government cloud environments. The platform delivers centralized identity and access controls, model governance, usage monitoring, cost and budget controls, audit logging, and configurable security guardrails - allowing organizations to adopt AI without creating separate integrations or governance processes for each model provider. Praxon is designed to support secure, scalable AI deployment across federal mission, compliance, and operational use cases.", "fedramp_msg": "", "sales_email": "", "security_email": "security@praxonlabs.com", "website": "https://praxonlabs.com/", "uei": "", "small_business": true, "business_categories": [ "Artificial Intelligence (AI)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2406651384", "name": "Precisely Software", "cloud_service_provider": "Precisely Software", "cloud_service_offering": "Data Integrity Suite for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Precisely%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-04-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-11-10T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-12-18T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-04-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-11-10T20:00:00.000Z", "cert_date": "2025-12-18T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-12-18T20:00:00.000Z", "annual_assessment": "2011-11-10T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2406651384", "csp": "Precisely Software", "cso": "Data Integrity Suite for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Federal Energy Regulatory Commission" ], "agency_reuse": [ "22-007-04" ], "service_description": "The Precisely Data Integrity Suite for Government is a cloud-native solution that provides capabilities for managing and governing data within federal agencies and other regulated environments. The cloud services of the Data Integrity Suite help organizations deliver accurate, consistent, and contextualized data across operational and analytical systems. \n\nData Integrity Suite for Government enables users to discover and catalog data assets, manage metadata and lineage, and apply configurable governance workflows and stewardship processes to support collaboration between technical and business users. Automated metadata discovery, flexible data models, and machine learning-assisted classification support the organization and management of critical data at scale. The Data Integrity Suite can also verify, geocode, and autocomplete addresses, helping ensure the accuracy and reliability of critical address data.\n\nBy cataloging data from across cloud and on-prem data sources, the Data Integrity Suite for Government supports consistent management and use of trusted data across public sector agencies and adjacent regulated industries.", "fedramp_msg": "N/A", "sales_email": "john.guedel@precisely.com", "security_email": "fedrampsecurity@precisely.com", "website": "https://www.precisely.com/solution/data-integrity-suite-for-government", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2224752400", "name": "Privoro LLC", "cloud_service_provider": "Privoro LLC", "cloud_service_offering": "Privoro Fulcrum Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Privoro%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-07-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-11-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-02-24T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-07-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-11-04T20:00:00.000Z", "cert_date": "2025-02-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-02-24T20:00:00.000Z", "annual_assessment": "2011-10-21T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "National Nuclear Security Administration" ], "agency_reuse": [ "" ], "service_description": "The Privoro Fulcrum Cloud (PFC) supports the use of and enhances the security of mobile devices in the Federal Government. Specifically, the PFC provides management and monitoring services for Privoro SafeCases (SC), which are out of boundary mobile security products that communicate to the PFC via the in boundary Privoro Mobile App (Privoro App) available for both iOS and Android. PFC and SafeCases support use cases such as mobile phone usage in Secure Spaces, mobile Signature Management and mobile Secure Comms.", "fedramp_msg": "N/A", "sales_email": "blake.kotiza@privoro.com", "security_email": "Compliance@Privoro.com", "website": "https://www.privoro.com/", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management", "Mobile Device Management (MDM)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2516365096", "name": "Procore Technologies, Inc", "cloud_service_provider": "Procore Technologies, Inc", "cloud_service_offering": "Procore for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Procore%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-12-22T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-01-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-06-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-12-22T20:00:00.000Z", "cert_date": "2026-01-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-01-23T20:00:00.000Z", "annual_assessment": "2011-12-19T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "Procore for Government is a purpose-built platform for managing construction. It supports public sector entities, program managers, and their contractors to coordinate more effectively, control costs, and manage risk across every phase of a capital asset’s lifecycle. Designed for construction and capital programs, Procore connects internal teams, contractors, and stakeholders through real-time data in one secure, easy-to-use system. The platform provides configurable workflows and secure document management to support core construction functions, including bidding, project management, quality and safety, and cost management. Procore for Government is designed to support the operational needs of public infrastructure, government facilities, and capital asset programs while supporting compliance, accountability, and long-term asset performance.\n\nProcore for Government solution areas can include:\n\nPreconstruction\n\nProject Management\n\nQuality & Safety\n\nFinancials\n\nReporting & Analytics", "fedramp_msg": "N/A", "sales_email": "GovPOC@procore.com", "security_email": "security@procore.com", "website": "https://www.procore.com/", "uei": "", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Collaboration", "Construction", "Data Management", "Finance", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2300457485", "name": "Project Hosts Inc.", "cloud_service_provider": "Project Hosts Inc.", "cloud_service_offering": "GSS One AWS", "logo": "https://projecthosts.com/wp-content/uploads/2024/12/Vector_ProjectHosts_logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-12-21T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-01-10T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2026-03-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-04-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 3, "ready_status": "Not Active", "ready_date": "2022-12-21T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-01-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-03-26T20:00:00.000Z", "cert_date": "2026-04-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Information Systems Agency", "fedramp_auth": "2026-04-06T20:00:00.000Z", "annual_assessment": "2011-03-10T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS", "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2530025267", "csp": "Caveonix, Inc.", "cso": "Caveonix", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2521554684", "csp": "H2O.AI for Government", "cso": "H2O.AI", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2425742814", "csp": "San Luis Aviation, Inc.", "cso": "ESChat", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "National Heart, Lung, and Blood Institute" ], "agency_reuse": [ "22-002", "22-005-10", "22-021-06" ], "service_description": "The GSSOne AWS is a General Support System (GSS) operated by Project Hosts and deployed within AWS GovCloud. The platform is designed as a secure, multi-tenant PaaS/SaaS environment that enables federal, DoD, state, local, and tribal agencies, as well as government contractors, members of the DIB and the public to deploy and operate applications in compliance with federal security requirements.\n\nThe GSSOne AWS Core provides a standardized set of centrally managed services that support secure application deployment and operations, including: access control, authentication, auditing, monitoring, scanning, patching, configuration management, malware prevention, intrusion prevention, incident response, backup, and disaster recovery.\n\nThese capabilities are implemented and managed by Project Hosts and are leveraged by applications deployed on the platform to meet security and compliance requirements.\n\nGSSOne AWS supports two primary application deployment models:\n\n**1. Applications Included Within the GSS One Authorization Boundary**\n\nCertain SaaS applications are incorporated directly into the GSSOne AWS authorization boundary and are assessed and certified as part of the GSSOne AWS system.\n\n**2. Applications Supported on the Platform**\n\nGSSOne AWS also supports customer and Independent Software Vendor (ISV) applications that are deployed on the platform but maintain their own authorization boundary (e.g., agency ATO or ISV-owned system).\n\nIn this model, Project Hosts provides the underlying infrastructure, security services, and operational support, while the application owner maintains responsibility for their system authorization and application-specific controls.\n\nThis flexible deployment model allows agencies to either leverage existing SaaS capabilities or deploy their own applications within a secure, FedRAMP-authorized environment.\n\n**Applications Included Within the GSS One Authorization Boundary**\n\nThese applications are deployed, secured, and operated as part of the GSSOne AWS system and certification.\n\nThe following SaaS applications are currently included within the GSSOne AWS authorization boundary:\n\n- **GSSOne AWS Portal/Admin Page**\n\nProvided by Project Hosts this application provides user and administrative interfaces for account management, access provisioning, and operational support activities\n\n- **JAMIS Prime ERP**\n\nProvided and managed by JAMIS software, JAMIS Prime ERP is a platform that provides browser and mobile access to finance, project accounting, contract management, billing, and operational workflows for U.S. government contractors. The system supports core functions including job cost/project accounting, contract and subcontract management, budgeting and forecasting, general ledger, cash management, accounts receivable/payable, timecards, expense reporting, fixed assets, distribution management, and project manufacturing. JAMIS Prime streamlines contract management and billing by centralizing documents, automating workflows and approvals, tracking contract actions and funding, supporting government-compliant billing across common contract types, and managing revenue recognition, cost ceilings, retention, labor categories, markups, ACRN funding, and contract-specific billing rules. These capabilities help improve visibility, collaboration, invoice accuracy, and timely payment processing across the contract lifecycle.\n\n- **Siemens Federal Cloud (SFC)**\n\nProvided and Managed by Siemens Government Technology,** **The primary software application suite within SFC consists of the Teamcenter Product Lifecycle Management (PLM) software, which is a product and process digital thread management system. Teamcenter PLM provides full product lifecycle data management services for a customer authored end item (to include requirements, product(s) and processes) and enables customer teams to better connect with each other on relevant data needed to make informed decisions throughout a product’s lifecycle. Teamcenter offers integration capabilities with various CAD products, serving as the central hub for managing design data throughout the product lifecycle. Teamcenter ensures that all CAD models, assemblies, and drawings are securely stored, version-controlled, and accessible within the environment. This integration allows engineers to work directly within their preferred CAD authoring tools while benefiting from Teamcenter's data management, workflow automation, and collaboration features.\n\n- **Perseus™ **\n\nProvided and managed by Chainbridge Solutions Inc., Perseus™ is a cloud-native SaaS product purpose-built to transform personnel security (PERSEC) workflows across the federal government. Blending deep PERSEC expertise with the scalability and performance of commercial software, Perseus™ streamlines clearance processes, enables Trusted Workforce readiness, and equips agencies with the clarity, efficiency, and confidence they need to deliver from day one.\n\n- **FutureFeed and Cyber Illumination Application Environment (FutureFeed)**\n\nProvided and managed by Continuous Compliance, There are two main components that make up the FutureFeed environment. FutureFeed is a robust, SaaS-based compliance management platform. Using FutureFeed’s powerful automation and reporting capabilities, organizations create a security-oriented culture that permeates the organization. Organizations use FutureFeed to create and maintain information security programs that comply with legal and regulatory requirements, and to prove compliance at any time.\n\nCyber Illumination is a supply chain communication, risk identification, and risk management tool. Federal agencies, government contractors, and commercial entities can use Cyber Illumination to gain better insight into and control over the risks, including cybersecurity risks, associated with their vendors and business partners. Clients can leverage Cyber Illumination’s built-in questionnaires, or create custom questionnaires, to gain the knowledge they need to better manage their supply chain risks. When a client’s vendor also uses FutureFeed, the vendor and the client enjoy seamless integration and robust, automated information sharing that takes the hassles out of supply chain risk management.\n\n**Applications Supported on the Platform**\n\nGSSOne AWS also supports customer and Independent Software Vendor (ISV) applications that are deployed on the platform but maintain their own authorization boundary (e.g., agency ATO or ISV-owned system). Each of the systems below have been vetted and meets the FedRAMP requirements and are ready to pursue FedRAMP certification or have been certified under their own listing and are viewable under the dependent product list.\n\nExamples of supported applications include:\n\n- 1Factory (1Factory)\n- 202 Group/ BlueVoyant Government Services (Supply Chain Command)\n- Brightly (Brightly Software)\n- Caveonix (Caveonix Platform)\n- CloudApper (Cloudapper.ai)\n- H2O.ai (H2O.ai Cloud for Government)\n- Invicti (Invicti AppSec Platform)\n- Microsoft (Office, Dynamics, Power BI Server, Project Server, SharePoint, SSRS)\n- ProSymmetry\n- San Luis Aviation, Inc. (ESChat)\n- TELCLOUD (TELCLOUD)\n- TCP Software (TimeClock Plus)\n- WordPress (WordPress CMS)\n- WordPress As a Service (WPaaS)\n\nFor each of these applications, Project Hosts provides deployment, security, and operational support services for these applications, enabling customers to leverage the GSSOne AWS platform while maintaining flexibility in how their systems are authorized and managed. Performing these functions on the partner’s behalf allows the software vendors to focus on their core business model in delivering a secure, highly functional application to the agency while Project Hosts handles the security/ compliance requirements.\n\nIn either scenario, GSSOne AWS customers also are provided with access to the following systems running on the GSS One Azure system.\n\n**GSS One Command Center (GSSOCC)**\n\nThe GSS One Command Center is a centralized compliance and operations platform that gives agencies and CSP partners real-time visibility into system security, risk, and authorization status. Designed to meet FedRAMP Rev. 5 BIRs and aligned with the direction of FedRAMP 20x, the GSSOCC supports a shift toward continuous, evidence-driven validation rather than static, point-in-time assessments.\n\nIt serves as a single pane of glass for managing the full lifecycle of authorization and operations, bringing together system documentation, vulnerability data, incident tracking, change control, and monitoring into one integrated experience. By linking controls directly to supporting evidence and operational data, the GSSOCC reduces the overhead of maintaining compliance and enables faster, more transparent ATO decisions for agencies.\n\n**GSS One Support Center: **\n\nProject Hosts has configured a customer-facing support portal for creating and managing support tickets powered by Atlassian Jira. This allows customers to view all of their relevant tickets, create tickets, submit change control requests, upload screenshots, review knowledgebases and communicate with PH staff through a secure channel.\n\n%23%23 FedRAMP Certification and Marketplace Metadata\n\nThe following information is provided within the Overall System Description to ensure that material certification information remains visible while corresponding FedRAMP Marketplace fields and relationships are being synchronized with the Certification Package Overview (CPO).\n\n- **Cloud Service Offering:** GSS One AWS\n- **Cloud Service Provider:** Project Hosts Inc.\n- **FedRAMP Package ID:** FR2300457485\n- **FedRAMP Certification Status:** FedRAMP Certified\n- **Certification Type:** Rev5\n- **Certification Path:** Agency\n- **Certification Class:** Class D\n- **Security Impact Level:** High\n- **Certified Since:** April 6, 2026\n- **Lifecycle Phase:** Ongoing Certification\n- **Authorizing Agency:** U.S. Department of Health and Human Services (HHS) – National Heart, Lung, and Blood Institute (NHLBI)\n- **Agency Authorizations:** 1\n- **Recorded Dependent Product / Reuse Relationships:** 3\n- **Independent Assessor / 3PAO:** Lunarline, Inc.\n- **Assessor ID:** 137004\n\n%23%23%23 Certified Services\n\nThe following services are included as Certified Services within the GSS One AWS certification. Unless otherwise noted, each service operates within the GSS One AWS authorization boundary at the **High** security impact level and under **Certification Class D**.\n\n%23%23%23%23 GSSOne AWS Core\n\n- **Date Available:** April 6, 2026\n- **Security Impact Level:** High\n- **Certification Class:** D\n\nThe GSSOne AWS Core provides a standardized set of centrally managed services that support secure application deployment and operations, including access control, authentication, auditing, monitoring, scanning, patching, configuration management, malware prevention, intrusion prevention, incident response, backup, and disaster recovery.\n\n%23%23%23%23 GSSOne Admin/User Portal\n\n- **Date Available:** April 6, 2026\n- **Security Impact Level:** High\n- **Certification Class:** D\n\nGSSOne Admin/User Portal provides a centralized interface for customer onboarding, account provisioning, access management, billing visibility, and authorized administrative activities. Administrative actions are governed through role-based access controls and documented approval workflows.\n\n%23%23%23%23 GSSOne SMTP Service\n\n- **Date Available:** April 6, 2026\n- **Security Impact Level:** High\n- **Certification Class:** D\n\nProvides centrally managed email relay and routing services for applications operating within the authorization boundary. The service supports controlled delivery, encryption, authentication, logging, and monitoring of system-generated email.\n\n%23%23%23%23 GSSOne Certificate Authority\n\n- **Date Available:** April 6, 2026\n- **Security Impact Level:** High\n- **Certification Class:** D\n\nProvides centralized certificate issuance, validation, renewal, revocation, and lifecycle management for system components. It supports trusted encrypted communications and consistent certificate governance across the environment.\n\n%23%23%23%23 GSSOne CertForge\n\n- **Date Available:** April 6, 2026\n- **Security Impact Level:** High\n- **Certification Class:** D\n\nAutomates the generation, deployment, renewal, and tracking of TLS certificates used by authorized applications and infrastructure. Automation reduces expired-certificate risk while supporting approved cryptographic and certificate-management requirements.\n\n%23%23%23%23 GSSOne Illumination/Inventory\n\n- **Date Available:** April 6, 2026\n- **Security Impact Level:** High\n- **Certification Class:** D\n\nProvides automated discovery and inventory of cloud resources, configurations, and security-relevant attributes within the environment. The service supports continuous compliance validation, evidence generation, configuration-drift identification, and centralized reporting.\n\n%23%23%23%23 JAMIS Prime ERP\n\n- **Date Available:** June 14, 2026\n- **Security Impact Level:** High\n- **Certification Class:** D\n\nProvided and managed by JAMIS Software, JAMIS Prime ERP is a platform that provides browser and mobile access to finance, project accounting, contract management, billing, and operational workflows for U.S. government contractors.\n\nThe system supports core functions including job cost/project accounting, contract and subcontract management, budgeting and forecasting, general ledger, cash management, accounts receivable/payable, timecards, expense reporting, fixed assets, distribution management, and project manufacturing.\n\nJAMIS Prime streamlines contract management and billing by centralizing documents, automating workflows and approvals, tracking contract actions and funding, supporting government-compliant billing across common contract types, and managing revenue recognition, cost ceilings, retention, labor categories, markups, ACRN funding, and contract-specific billing rules. These capabilities help improve visibility, collaboration, invoice accuracy, and timely payment processing across the contract lifecycle.\n\n%23%23%23%23 Siemens Federal Cloud (SFC)\n\n- **Date Available:** June 14, 2026\n- **Security Impact Level:** High\n- **Certification Class:** D\n\nProvided and managed by Siemens Government Technologies, the primary software application suite within SFC consists of the Teamcenter Product Lifecycle Management (PLM) software, which is a product and process digital-thread management system.\n\nTeamcenter PLM provides full product lifecycle data management services for a customer-authored end item, including requirements, products, and processes, and enables customer teams to better connect with each other using the relevant data needed to make informed decisions throughout a product's lifecycle.\n\nTeamcenter offers integration capabilities with various CAD products, serving as the central hub for managing design data throughout the product lifecycle. Teamcenter ensures that CAD models, assemblies, and drawings are securely stored, version-controlled, and accessible within the environment. This integration allows engineers to work directly within their preferred CAD authoring tools while benefiting from Teamcenter's data management, workflow automation, and collaboration features.\n\n%23%23%23%23 Chainbridge Perseus™\n\n- **Date Available:** August 17, 2026\n- **Security Impact Level:** High\n- **Certification Class:** D\n\nProvided and managed by Chainbridge Solutions Inc., Perseus™ is a cloud-native SaaS product purpose-built to transform personnel security (PERSEC) workflows across the federal government.\n\nBlending deep PERSEC expertise with the scalability and performance of commercial software, Perseus™ streamlines clearance processes, enables Trusted Workforce readiness, and equips agencies with the clarity, efficiency, and confidence needed to support personnel security operations from day one.\n\n%23%23%23%23 FutureFeed\n\n- **Date Available:** August 17, 2026\n- **Security Impact Level:** High\n- **Certification Class:** D\n\nProvided and managed by Continuous Compliance, the FutureFeed environment consists of two primary components: FutureFeed and Cyber Illumination.\n\nFutureFeed is a SaaS-based compliance management platform. Using FutureFeed's automation and reporting capabilities, organizations can create and maintain information security programs that comply with applicable legal and regulatory requirements and provide evidence of compliance.\n\nCyber Illumination is a supply-chain communication, risk-identification, and risk-management tool. Federal agencies, government contractors, and commercial entities can use Cyber Illumination to gain greater insight into and control over risks, including cybersecurity risks, associated with vendors and business partners.\n\nClients can leverage Cyber Illumination's built-in questionnaires or create custom questionnaires to obtain information needed to manage supply-chain risks. When a client's vendor also uses FutureFeed, the vendor and client can use integrated and automated information sharing to improve the efficiency of supply-chain risk management.\n\n%23%23 Agency Authorization and Reuse Relationships\n\nGSS One AWS maintains an Agency certification path associated with the **U.S. Department of Health and Human Services (HHS), National Heart, Lung, and Blood Institute (NHLBI)**.\n\nThe FedRAMP Marketplace metadata associated with the certification has historically reflected:\n\n- **Agency Authorizations:** 1\n- **Dependent Product / Reuse Relationships:** 3\n- **Certification Path:** Agency\n- **Certification Class:** Class D (High)\n- **Certified Since:** April 6, 2026\n\nGSS One AWS also serves as an underlying authorized platform for applications and cloud service offerings that leverage GSS One AWS security, infrastructure, and operational capabilities. Depending on the application deployment and authorization model, these relationships may be represented as included Certified Services, dependent products, reuse relationships, or separately authorized customer systems.\n\nThe information in this section is included to preserve visibility into the certification and authorization relationships associated with GSS One AWS where corresponding structured Marketplace fields are not currently displayed.", "fedramp_msg": "Project Host GSS One-AWS High was previously chosen to work with the Joint Authorization Board (JAB) for a FedRAMP Authorization. Project Host GSS One-AWS High has a complete SSP, SAP, and SAR assessed by a FedRAMP-recognized Third Party Assessment Organization (3PAO).\n\nProject Host GSS One-AWS High has partnered with a federal agency moving to \"In Process\" as of 1/10/2025.", "sales_email": "sales@projecthosts.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://projecthosts.com/solutions/fedramp/", "uei": "FQLLNM449KF1", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Content Management System (CMS)", "Customer Service", "Cybersecurity & Risk Management" ], "service_last_90": [ "GSSOne AWS Core", "GSSOne Admin/ User Portal", "GSSOne CertForge", "GSSOne Certificate Authority", "GSSOne Illumination/ Inventory", "GSSOne SMTP Service", "JAMIS Prime ERP (Prime)", "Siemens Federal Cloud (SFC)" ], "all_others": [ "" ], "service_acronym": "GSSOne AWS", "trust_center": { "repositoryType": [ "Trust Center", "Certification Package" ], "url": "https://trust.gssone.us/public/gss-one-aws", "repositoryDescription": "Trust Center repository for FedRAMP certification package information and access instructions.", "authenticationRequired": false }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://trust.gssone.us/public/gss-one-aws", "repositoryDescription": "Repository or access path for secure configuration guidance associated with the cloud service offering.", "authenticationRequired": false }, "certified_services": [ { "serviceName": "GSSOne AWS Core", "serviceDescription": "The GSSOne AWS Core provides a standardized set of centrally managed services that support secure application deployment and operations, including access control, authentication, auditing, monitoring, scanning, patching, configuration management, malware prevention, intrusion prevention, incident response, backup, and disaster recovery. Security Category: High, Certification Class: D", "dateAvailable": "2026-04-06" }, { "serviceName": "GSSOne Admin/ User Portal", "serviceDescription": "GSSOne Admin/ User Portal provides a centralized interface for customer onboarding, account provisioning, access management, billing visibility, and authorized administrative activities. Administrative actions are governed through role-based access controls and documented approval workflows.Security Category: High, Certification Class: D", "dateAvailable": "2026-04-06" }, { "serviceName": "GSSOne SMTP Service", "serviceDescription": "Provides centrally managed email relay and routing services for applications operating within the authorization boundary. The service supports controlled delivery, encryption, authentication, logging, and monitoring of system-generated email. Security Category: High, Certification Class: D", "dateAvailable": "2026-04-06" }, { "serviceName": "GSSOne Certificate Authority", "serviceDescription": "Provides centralized certificate issuance, validation, renewal, revocation, and lifecycle management for system components. It supports trusted encrypted communications and consistent certificate governance across the environment. Security Category: High, Certification Class: D", "dateAvailable": "2026-04-06" }, { "serviceName": "GSSOne CertForge", "serviceDescription": "Automates the generation, deployment, renewal, and tracking of TLS certificates used by authorized applications and infrastructure. Automation reduces expired-certificate risk while supporting approved cryptographic and certificate-management requirements. Security Category: High, Certification Class: D", "dateAvailable": "2026-04-06" }, { "serviceName": "GSSOne Illumination/ Inventory", "serviceDescription": "Provides automated discovery and inventory of cloud resources, configurations, and security-relevant attributes within the environment. The service supports continuous compliance validation, evidence generation, configuration-drift identification, and centralized reporting. Security Category: High, Certification Class: D", "dateAvailable": "2026-04-06" }, { "serviceName": "JAMIS Prime ERP", "serviceDescription": "Provided and managed by JAMIS software, JAMIS Prime ERP is a platform that provides browser and mobile access to finance, project accounting, contract management, billing, and operational workflows for U.S. government contractors. The system supports core functions including job cost/project accounting, contract and subcontract management, budgeting and forecasting, general ledger, cash management, accounts receivable/payable, timecards, expense reporting, fixed assets, distribution management, and project manufacturing. JAMIS Prime streamlines contract management and billing by centralizing documents, automating workflows and approvals, tracking contract actions and funding, supporting government-compliant billing across common contract types, and managing revenue recognition, cost ceilings, retention, labor categories, markups, ACRN funding, and contract-specific billing rules. These capabilities help improve visibility, collaboration, invoice accuracy, and timely payment processing across the contract lifecycle. Security Category: High, Certification Class: D", "dateAvailable": "2026-06-14" }, { "serviceName": "Siemens Federal Cloud (SFC)", "serviceDescription": "Provided and Managed by Siemens Government Technology, The primary software application suite within SFC consists of the Teamcenter Product Lifecycle Management (PLM) software, which is a product and process digital thread management system. Teamcenter PLM provides full product lifecycle data management services for a customer authored end item (to include requirements, product(s) and processes) and enables customer teams to better connect with each other on relevant data needed to make informed decisions throughout a product’s lifecycle. Teamcenter offers integration capabilities with various CAD products, serving as the central hub for managing design data throughout the product lifecycle. Teamcenter ensures that all CAD models, assemblies, and drawings are securely stored, version-controlled, and accessible within the environment. This integration allows engineers to work directly within their preferred CAD authoring tools while benefiting from Teamcenter's data management, workflow automation, and collaboration features. Security Category: High, Certification Class: D", "dateAvailable": "2026-06-14" }, { "serviceName": "Chainbridge Perseus™", "serviceDescription": "Provided and managed by Chainbridge Solutions Inc., Perseus™ is a cloud-native SaaS product purpose-built to transform personnel security (PERSEC) workflows across the federal government. Blending deep PERSEC expertise with the scalability and performance of commercial software, Perseus™ streamlines clearance processes, enables Trusted Workforce readiness, and equips agencies with the clarity, efficiency, and confidence they need to deliver from day one. Security Category: High, Certification Class: D", "dateAvailable": "2026-08-17" }, { "serviceName": "FutureFeed", "serviceDescription": "Provided and managed by Continuous Compliance, there are two main components that make up the FutureFeed environment. FutureFeed is a robust, SaaS-based compliance management platform. Using FutureFeed’s powerful automation and reporting capabilities, organizations create a security-oriented culture that permeates the organization. Organizations use FutureFeed to create and maintain information security programs that comply with legal and regulatory requirements, and to prove compliance at any time.\n\nCyber Illumination is a supply chain communication, risk identification, and risk management tool. Federal agencies, government contractors, and commercial entities can use Cyber Illumination to gain better insight into and control over the risks, including cybersecurity risks, associated with their vendors and business partners. Clients can leverage Cyber Illumination’s built-in questionnaires, or create custom questionnaires, to gain the knowledge they need to better manage their supply chain risks. When a client’s vendor also uses FutureFeed, the vendor and the client enjoy seamless integration and robust, automated information sharing that takes the hassles out of supply chain risk management. Security Category: High, Certification Class: D", "dateAvailable": "2026-08-17" } ], "third_party_information_resources": null }, { "fedramp_id": "F1403283529A", "name": "Project Hosts Inc.", "cloud_service_provider": "Project Hosts Inc.", "cloud_service_offering": "GSS One - Azure", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Project%20Hosts%20Logo1.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-01-29T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-02-26T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-03-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 41, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-01-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-02-26T20:00:00.000Z", "cert_date": "2026-03-16T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-03-16T20:00:00.000Z", "annual_assessment": "2011-02-26T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2025827270", "csp": "AvePoint Inc.", "cso": "AvePoint Online Services for US Government (AOS-UG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430123303", "csp": "Aztec Software", "cso": "Aztec Learning System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416856649", "csp": "Creative Veteran Productions", "cso": "Federal Immersive Learning Management System (FED-ILMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1805752046", "csp": "Distributed Solutions, Inc.", "cso": "AEON", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2427818523", "csp": "Feith Sytems and Software, Inc.", "cso": "RMA iQ™", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2133141131", "csp": "Nintex", "cso": "Nintex Automation GE Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102036897", "csp": "Nuance", "cso": "Nuance Dragon", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1828848692", "csp": "OneSpan Inc.", "cso": "OneSpan Sign, E-Signature and Digital Signature Service", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2524416446", "csp": "Orbus Software", "cso": "OrbusInfinity Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2432218524", "csp": "Power Settlements Consulting and Software, LLC (PSCS), a subsidiary of Yes Energy, LLC", "cso": "PowerCore™ (PC-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1815547467", "csp": "Relocation Management Worldwide (RMW)", "cso": "Virtual Employee Network (VEN)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1924344515", "csp": "Wellspring Worldwide, Inc.", "cso": "Wellspring Tech Transfer and IP Management Suite (WTIMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2401742096", "csp": "WillCo Tech", "cso": "CyberSTAR™", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Defense Counterintelligence and Security Agency", "Defense Information Systems Agency", "Defense Security Cooperation Agency", "Defense Threat Reduction Agency", "Federal Energy Regulatory Commission", "United States Air Force" ], "agency_reuse": [ "" ], "service_description": "The GSSOne Azure is a General Support System (GSS) operated by Project Hosts and deployed within Azure Government. The platform is designed as a secure, multi-tenant PaaS/SaaS environment that enables federal, DoD, state, local, and tribal agencies, as well as government contractors, members of the DIB and the public to deploy and operate applications in compliance with federal security requirements. \r\nThe GSSOne Azure Core provides a standardized set of centrally managed services that support secure application deployment and operations, including access control, authentication, auditing, monitoring, scanning, patching, configuration management, malware prevention, intrusion prevention, incident response, backup, and disaster recovery.\r\nThese capabilities are implemented and managed by Project Hosts and are leveraged by applications deployed on the platform to meet security and compliance requirements.\r\nThe GSSOne Azure supports two primary application deployment models:\r\n1. Applications Included Within the GSS One Authorization Boundary\r\nCertain SaaS applications are incorporated directly into the GSSOne Azure authorization boundary and are assessed and certified as part of the GSSOne Azure system.\r\n2. Applications Supported on the Platform\r\nGSSOne Azure also supports customer and Independent Software Vendor (ISV) applications that are deployed on the platform but maintain their own authorization boundary (e.g., agency ATO or ISV-owned system).\r\nIn this model, Project Hosts provides the underlying infrastructure, security services, and operational support, while the application owner maintains responsibility for their system authorization and application-specific controls. \r\nThis flexible deployment model allows agencies to either leverage existing SaaS capabilities or deploy their own applications within a secure, FedRAMP-authorized environment.\r\nApplications Included Within the GSS One Authorization Boundary\r\nThese applications are deployed, secured, and operated as part of the GSSOne Azure system and certification.\r\n-\tGSSOne Azure Portal/Admin Page\r\nProvided by Project Hosts this application provides user and administrative interfaces for account management, access provisioning, and operational support activities.\r\n-\tGSSOne Command Center (GSSOCC)\r\nThe GSS One Azure Command Center is a one stop shop for agency and CSP customers to view relevant information for their system and aid in implementing and maintaining ConMon requirements including a document repo for SSP and appendixes, POA&Ms and vulnerability scans, allows them to manage training, track incidents, track vulnerabilities and other corrective actions, track red teaming activities, view availability monitoring alerts, change control ticketing, link controls to artifacts and evidence to speed up ATO times and provide continuous monitoring/ Trust Center views for agencies leveraging their systems.\r\n\r\n-\tGSS One Azure Support Center: Project Hosts has configured a customer-facing support portal for creating and managing support tickets powered by Atlassian Jira. This allows customers to view all of their relevant tickets, create tickets, upload screenshots and communicate with PH staff through a secure channel. \r\n-\tQuest Security Management Platform (Quest-SMP):\r\nThe Quest-SMP is a browser-based application with different agents that can be deployed on the agency devices/systems based on their individual use case. \r\nThe Quest-SMP contains two major components:\r\n-\tQuest Identity Recovery for Entra ID: Quest Identity Recovery for Entra ID is a SaaS-based backup and recovery solution for Microsoft Entra ID and Microsoft 365 that extends protection beyond native Microsoft tools. It enables fast, secure restoration of users, groups, attributes, and memberships from a single cloud interface. Administrators can compare backups, view changes, and recover only what’s needed—reducing manual errors and downtime. All recovery actions are logged and auditable to support compliance requirements. Hybrid Active Directory and Entra ID recovery is also supported through built-in integration with on-premises Quest Recovery Manager for Active Directory. Delivered as a secure, high-availability cloud service, Quest Identity Recovery for Entra ID helps federal agencies simplify directory recovery, maintain continuity, and meet governance standards without the need for on-premises infrastructure.\r\n-\tQuest Identity Defense: Quest Identity Defense is a hybrid Active Directory and Microsoft Entra ID security and audit platform that helps federal agencies strengthen identity threat detection, containment, and response while reducing risk of exposure and downtime. It identifies Tier Zero and other privileged objects across Active Directory and Entra ID to pinpoint where the greatest risks reside. The platform continually assesses identity environments for problematic configurations and drift from best-practice baselines, helping maintain compliance and operational integrity. Quest Identity Defense provides enhanced threat detection and observability for directory changes and protects Tier Zero assets from malicious in-memory modification—supporting zero trust and mission continuity across hybrid identity systems.\r\nApplications Supported on the Platform\r\nGSSOne Azure also supports customer and Independent Software Vendor (ISV) applications that are deployed on the platform but maintain their own authorization boundary (e.g., agency ATO or ISV-owned system). Each of the systems below have been vetted and meets the FedRAMP requirements and are ready to pursue FedRAMP certification or have been certified under their own listing and are viewable under the dependent product list.\r\nExamples of supported applications include:\r\n-\tAI Enabled Wordpress\r\n-\tArchive360 (Archive360 Platform)\r\n-\tAudioCodes (AudioCodes Live Platform)\r\n-\tAvePoint (AvePoint Online Services for US Government)\r\n-\tAztec (Aztec Learning System)\r\n-\tBingli (Bingli)\r\n-\tBlue Prism (Blue Prism)\r\n-\tBrightWork (BrightWork SharePoint-based Project Management)\r\n-\tC3 AI (C3 AI Suite)\r\n-\tCTERA Networks (CTERA Edge Filer, CTERA Drive, CTERA Portal)\r\n-\tCloudApper (Cloudapper.ai)\r\n-\tConga (Contract Lifecycle Management, X-Author and Conga Approvals)\r\n-\tCreative Veteran Productions (Fed ILMS)\r\n-\tCyberSTAR Software (CyberSTAR™)\r\n-\tDistributed Solutions Inc. (AEON)\r\n-\tDrupal (Drupal CMS)\r\n-\tEminent IT (Drupal Enclave)\r\n-\tFeith Systems and Software Inc. (RMA iQ™)\r\n-\tFlowVU (FlowVU Collaboration)\r\n-\tIdea Entity (RhyBus Platform)\r\n-\tImage Trend (Elite, Report Writer (RW), Continuum (CT), Licensure, Slate)\r\n-\tInvoke (UiPath Orchestrator and RPA)\r\n-\tIvanti (MDM, Access, Neurons)\r\n-\tLMI (ATLAS by LMI)\r\n-\tLibrestream Technology (Onsight Now)\r\n-\tMicrosoft (Office, Dynamics, Power BI Server, Project Server, SharePoint, SSRS)\r\n-\tNIBS/ OM Group Inc. (ProjNet™)\r\n-\tNintex (K2 Five, Workflow Cloud, DocGen)\r\n-\tNintex (Nintex Automation GE Platform)\r\n-\tNuance (Dragon Suite, DAX CoPilot)\r\n-\tOnePlan.ai (OnePlan)\r\n-\tOneSpan (OneSpan Sign)\r\n-\tOrbus Software (OrbusINFINITY)\r\n-\tPermuta (Defense Ready)\r\n-\tPower Settlements Consulting and Software, LLC (PowerCore™)\r\n-\tProSymmetry\r\n-\tRelocation Management Worldwide (Virtual Employee Network)\r\n-\tSynergist Technology, LLC (AFFIRM Solution for AI Compliance, SAS® VIYA®)\r\n-\tTeamviewer (TeamViewer Digital Employee Experience (TMV DEX) for Government)\r\n-\tUMT360 (SharePoint-based Enterprise Portfolio Management)\r\n-\tUnison Software (Program Management Suite (PMSuite)\r\n-\tWellspring (Accolade Enterprise Innovation Management, Sophia, Evolve)\r\n-\tWordPress (WordPress CMS)\r\n-\tWordPress As a Service (WPaaS)\r\nFor each of these applications, Project Hosts provides deployment, security, and operational support services for these applications, enabling customers to leverage the GSSOne Azure platform while maintaining flexibility in how their systems are authorized and managed. Performing these functions on the partner’s behalf allows the software vendors to focus on their core business model in delivering a secure, highly functional application to the agency while Project Hosts handles the security/ compliance requirements.\r\nFor customers not deployed on the GSS One Azure, Project Hosts offers dedicated continuous monitoring services leveraging the GSS One Azure Command Center and scanners operated by Project Hosts engineers to configure, scan and provide continuous monitoring services to those external customers and their respective agencies to meet FedRAMP requirements.", "fedramp_msg": "", "sales_email": "sales@projecthosts.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://www.projecthosts.com/", "uei": "", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Content Management System (CMS)", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Network Management", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "GSS One Support Center", "GSS One User Portal", "GSSOne Admin Center", "GSSOne Azure Core", "GSSOne CertForge", "GSSOne Certificate Authority", "GSSOne Command Center", "GSSOne Illumination/Inventory", "GSSOne SMTP Service", "Quest Security Management Platform" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2322855016", "name": "ProjectTeam, Inc.", "cloud_service_provider": "ProjectTeam, Inc.", "cloud_service_offering": "ProjectTeam for Government (Construction Project and Program Management)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ProjectTeam%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-06-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-12-11T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-10-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-06-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-12-11T20:00:00.000Z", "cert_date": "2024-10-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Park Service", "fedramp_auth": "2024-10-23T20:00:00.000Z", "annual_assessment": "2011-11-27T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of the Interior" ], "agency_reuse": [ "" ], "service_description": "ProjectTeam for Government (ProjectTeam) is a fully cloud-based construction management platform tailored specifically for public agencies managing capital construction programs and projects. ProjectTeam is a centralized, easy-to-use platform that fosters seamless collaboration among all stakeholders, including owners, contractors, architects, subcontractors, and suppliers.\r\n\r\nThe platform includes all key industry-standard processes, such as design development, budgets, contracts, change orders, payment applications, RFIs, submittals, meeting minutes, turnover documents, and more. ProjectTeam offers powerful built-in, no-code customization tools that allow administrators to easily create custom forms, modify existing templates, and design workflows tailored to their agency's unique processes and project needs. This flexibility ensures that mission-critical requirements are accurately tracked, empowering organizations to streamline operations, ensure compliance, and achieve their objectives with confidence and precision.\r\n\r\n ProjectTeam includes:\r\n\r\n• Visual workflow management\r\n\r\n• No-code custom form builder\r\n\r\n• Construction management tools\r\n\r\n• Real-time collaboration for project stakeholders\r\n\r\n• Document management and tracking", "fedramp_msg": "N/A", "sales_email": "inquiries@projectteam.com", "security_email": "inquiries@projectteam.com", "website": "https://www.projectteam.com/fedramp", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Construction", "Data Management", "Finance", "Grant Management", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1304222071", "name": "Proofpoint, Inc.", "cloud_service_provider": "Proofpoint, Inc.", "cloud_service_offering": "Proofpoint Email Archive", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Proofpoint%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-12-04T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2016-07-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2016-11-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 11, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-12-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2016-07-22T20:00:00.000Z", "cert_date": "2016-11-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Federal Aviation Administration", "fedramp_auth": "2016-11-23T20:00:00.000Z", "annual_assessment": "2011-08-04T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1819168894", "csp": "Proofpoint, Inc.", "cso": "Proofpoint Targeted Attack Protection", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1720461312", "csp": "Proofpoint, Inc.", "cso": "Proofpoint Email and Information Protection Service", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Agriculture", "Federal Aviation Administration", "Justice Management Division" ], "agency_reuse": [ "22-005-08", "22-007", "22-007-03", "22-007-17", "22-007-28", "22-027-05", "22-051" ], "service_description": "The Federal Production Environment provides a complete message archiving solution that can protect an organization from legal liabilities and regulatory risks while improving email storage management and end-user productivity. Its web interface offers fully secure email archiving with robust search and discovery, supervision, and enforcement features. The solution securely stores electronic messages for a specified retention period, while keeping the messages fully searchable and retrievable in real-time or with a batch process. This allows archived messages to be easily viewed, retrieved to a user's email inbox or exported to an Outlook data file.\n\nThe Archiving Customer Premise Equipment (CPE) is software-based, a hardware-based version is also available, and is installed within the Microsoft Office 365 ITAR environment behind the firewall to provide the tight integration and security typically only afforded to internal systems. The CPE integrates with Microsoft Exchange to ensure reliable, native format message archiving. Its integration with Active Directory facilitates unified login and access control management. Since the CPE is the only holder of the encryption keys used with Proofpoint's DoubleBlind™ Encryption technology, any processing that involves encryption or decryption happens on the CPE.\n\nProofpoint's DoubleBlind™ Encryption technology guarantees the security of data, ensuring that no one outside the organization can access archived data. When a message reaches the CPE, it is encrypted before being sent outside the Microsoft Office 365 ITAR firewall over a secure connection to the Proofpoint Federal Production Environment. Messages are only decrypted when an authorized user on the customer network conducts a search from Outlook or from the CPE's web-based user interface. Data can never be viewed without access to both the archiving CPE within the Microsoft Office 365 ITAR environment and the Proofpoint Federal Production Environment.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@proofpoint.com", "website": "http://www.proofpoint.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1819168894", "name": "Proofpoint, Inc.", "cloud_service_provider": "Proofpoint, Inc.", "cloud_service_offering": "Proofpoint Targeted Attack Protection", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Proofpoint%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-04-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-06-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-01-15T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-04-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-06-12T20:00:00.000Z", "cert_date": "2020-01-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-01-15T20:00:00.000Z", "annual_assessment": "2011-06-12T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Alcohol and Tobacco Tax and Trade Bureau", "Department of Energy", "Fermi National Accelerator Laboratory", "National Nuclear Security Administration / Lawrence Livermore National Laboratory" ], "agency_reuse": [ "" ], "service_description": "Proofpoint Targeted Attack Protection (TAP) helps detect, mitigate, and block advanced threat that target people through email. It detects both known and new, never-before-seen attacks that use malicious attachments and URLs to install malware on a device or trick users to share their passwords or other sensitive information.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@proofpoint.com", "website": "https://www.proofpoint.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1720461312", "name": "Proofpoint, Inc.", "cloud_service_provider": "Proofpoint, Inc.", "cloud_service_offering": "Proofpoint Email and Information Protection Service", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Proofpoint%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-10-31T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-06-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-01-15T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 8, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-10-31T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-06-12T20:00:00.000Z", "cert_date": "2020-01-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-01-15T20:00:00.000Z", "annual_assessment": "2011-06-12T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2234256499", "csp": "Rubrik", "cso": "Rubrik Security Cloud - Government (RSC-G)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Argonne National Laboratory", "Consumer Product Safety Commission", "Department of Energy", "Health Resources and Services Administration", "National Nuclear Security Administration / Lawrence Livermore National Laboratory" ], "agency_reuse": [ "" ], "service_description": "The Proofpoint Email and Information Protection Service is a powerful cloud email security service that integrates threat protection, virus protection, spam detection, data loss prevention (DLP), and digital asset protection technologies into an extensible message management platform. The service is designed to fit easily into existing messaging infrastructure, providing efficient performance, accurate message analysis, and a web-based interface for reporting, configuration, and management tasks.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@proofpoint.com", "website": "https://www.proofpoint.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2607643783", "name": "PSI Services LLC", "cloud_service_provider": "PSI Services LLC", "cloud_service_offering": "Gov Secure Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/PSI%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-01-06T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-01-06T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Gov Cloud Secure is PSI’s secure platform for the registration, scheduling, delivery, administration, and reporting of computer-based assessments for federal agencies and other government organizations. The system supports assessment programs used for licensure, certification, workforce selection, and credentialing.\n \nThe Gov Cloud Secure FedRAMP authorization boundary includes candidate registration and scheduling components; secure assessment delivery applications; test session administration components; data storage and processing services; and reporting capabilities accessible to authorized agency users. The system is hosted within a government-authorized cloud infrastructure environment.", "fedramp_msg": "", "sales_email": "brett@psionline.com", "security_email": "ITSecurity@psigov.us", "website": "https://www.psiexams.com/certification/government/", "uei": "NDWDJKDL8RA4", "small_business": false, "business_categories": [ "Education & Training" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1608097919", "name": "PTC", "cloud_service_provider": "PTC", "cloud_service_offering": "PTC Cloud Services", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/PTC%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2016-09-12T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2016-10-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-12-01T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2016-09-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2016-10-26T20:00:00.000Z", "cert_date": "2017-12-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2017-12-01T20:00:00.000Z", "annual_assessment": "2011-01-04T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency", "United States Air Force" ], "agency_reuse": [ "" ], "service_description": "PTC Cloud Services is a FedRAMP Certified Software as a Service (SaaS) offering that provides Product Lifecycle Management (PLM) capabilities through PTC Windchill and PTC Windchill+ FedRAMP deployed within the PTC Cloud Services FedRAMP environment, along with Service Lifecycle Management (SLM) services.\r\nPTC Cloud Services delivers a comprehensive suite of applications that enable users to securely create, manage, and collaborate on product data across the product lifecycle, including product development, manufacturing, operations, service, and support activities. The service supports organizations that manage Controlled Unclassified Information (CUI) and export-controlled data subject to the International Traffic in Arms Regulations (ITAR) and Export Administration Regulations (EAR), making it well-suited for federal agencies, defense contractors, and Aerospace & Defense manufacturers.\r\nPTC Cloud Services enables customer organizations to focus on mission outcomes while PTC deploys, operates, and manages the authorized service. The offering combines PTC software expertise with operational responsibilities that include application administration and platform management, delivered within a secure and reliable cloud infrastructure consistent with the FedRAMP Rev. 5 Moderate baseline.\r\nCustomer responsibility note: Customers remain responsible for determining the applicability of ITAR, EAR, and other export-control requirements to their specific data, programs, and use cases. The service supports, but does not replace, customer export-control compliance obligations.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "cs-dod-security@ptc.com", "website": "http://www.ptc.com/services/cloud", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2330638488", "name": "PTFS/Liblime", "cloud_service_provider": "PTFS/Liblime", "cloud_service_offering": "Bibliovation/Knowvation", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/PTFS%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-05-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2024-05-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Lazarus Alliance, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Bibliovation is a Integrated Library System (ILS) offered as a SaaS solution. The platform is web-based and all modules are accessible via proper permissions and web browsers. Bibliovation can combine individual system components (i.e., traditional ILS service core, MARC21 cataloging editor, EDI-compliant acquisitions, Discovery Layer, digital content management, etc.) to meet specific organizational needs.\n\nKnowvation™ is a enterprise level digital content management, discovery and delivery system solution that can be integrated with Bibliovation ILS. Key features include:\n\n● Supports over 225 types of digital documents (PDF, Word, Excel, etc.), including geographical datasets like maps and imagery, JPEG and TIFF images, videos, and maps.\n\n● Powerful search and discovery, including Boolean (Keyword), concept (Intent-based), pattern (fuzzy-text), metadata, multi-lingual, hierarchical, and geospatial (visual) across all data types.\n\n● Tools for index-in-place or ingesting data into a single repository, able to read/write/tag metadata during or after ingestion.\n\n● Extensive administrative tools with security and protected access and reporting on both usage and data with pre-configured and ad-hoc reporting in the system.", "fedramp_msg": "", "sales_email": "info@liblime.com", "security_email": "dguerieri@ptfs.com", "website": "https://www.ptfs.com/", "uei": "N38NEXPESGF8", "small_business": true, "business_categories": [ "Content Management System (CMS)", "Data Management", "Law Enforcement", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2113157410", "name": "Public Health Foundation", "cloud_service_provider": "Public Health Foundation", "cloud_service_offering": "TRAIN Learning Network", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TRAIN%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-07-08T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-07-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-08-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-07-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-07-08T20:00:00.000Z", "cert_date": "2022-08-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-08-29T20:00:00.000Z", "annual_assessment": "2011-07-08T04:00:00.000Z", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Low", "impact_level_number": "4", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "The Public Health Foundation’s TRAIN Learning Network is a Learning Management System (LMS) powered by KMI Learning’s flexible, scalable LMS. It brings together best-in-class training in public health, population health, and emergency preparedness through its extensive network of government agencies, academic institutions, nonprofits, and professional associations. \n \nAs a secure, multi-tenant SaaS solution, TRAIN provides each agency or organization with a branded portal and the flexibility to restrict access to its training content internally or make it available across the entire TRAIN community. TRAIN administrators are able to create and post courses, link to external training, track and report on learner activity, manage continuing education, award certificates, and communicate directly with registered learners. \n \nThe system also offers a streamlined LMS experience for organizations outside of public health, and all organizations can take advantage of custom feature development and system integrations.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "training@phf.org", "website": "https://www.train.org/main/welcome", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1924942935", "name": "Qgenda, LLC", "cloud_service_provider": "Qgenda, LLC", "cloud_service_offering": "QGenda", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/QGenda%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-07-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-03-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-03-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-07-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-03-19T20:00:00.000Z", "cert_date": "2020-03-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-03-23T20:00:00.000Z", "annual_assessment": "2011-03-08T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "QGenda is the leader in cloud-based call and scheduling automation (https://www.qgenda.com/customers/federal/). Leading physician groups, hospitals, academic medical centers, and enterprise health systems use QGenda to optimize their workforce to allow them to provide the best possible patient care.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@qgenda.com", "website": "https://www.qgenda.com/federal/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2125653037", "name": "Qlik Technologies Inc.", "cloud_service_provider": "Qlik Technologies Inc.", "cloud_service_offering": "Qlik Cloud Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Qlik%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-04-05T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-04-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-09-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-04-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-04-15T20:00:00.000Z", "cert_date": "2022-09-27T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-09-27T20:00:00.000Z", "annual_assessment": "2011-04-15T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency", "Environmental Protection Agency", "National Credit Union Administration", "Office of Natural Resources Revenue" ], "agency_reuse": [ "" ], "service_description": "Qlik Cloud Government is a SaaS platform purpose-built for delivering Qlik technology to U.S. public sector customers within a safe, FedRAMP-compliant cloud environment. Qlik empowers organizations with data and analytics technology that improves decision-making and solves their most challenging problems. Qlik Cloud Government simplifies data and analytics operations across an organization through a single platform that integrates data sources into an analytics environment where users of all levels can build analytics assets and collaborate with others to drive action.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@qlik.com", "website": "https://www.qlik.com/us/solutions/industries/public-sector/us-public-sector", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Data Management", "Finance", "Fleet Management", "Grant Management", "Human Resources", "Law Enforcement", "Legal & Policy", "Marketing & Sales", "Research" ], "service_last_90": [ "" ], "all_others": [ "Alerting", "Augmented Analytics", "Embedded Analytics", "Enterprise Reporting", "Insight Advisor", "On-prem and Cloud connectivity", "Qlik Application Automation", "Qlik Cloud Data Integration", "Qlik Sense Enterprise SaaS", "Visualizations and Dashboards" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2313477206", "name": "Quadient inc.", "cloud_service_provider": "Quadient inc.", "cloud_service_offering": "S.M.A.R.T. - Federal Editions", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Quadient%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-06-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-06-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-06-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-06-24T20:00:00.000Z", "cert_date": "2025-03-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-14T20:00:00.000Z", "annual_assessment": "2011-06-21T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "Federal Energy Regulatory Commission" ], "agency_reuse": [ "" ], "service_description": "The S.M.A.R.T. Federal Edition family of products provides the ultimate Shipping, Mailing, Accounting, Reporting and Tracking experience - all from a single dashboard! This solution combines leading edge technologies to improve customer interactions and business processes. A consistent look and feel across each element provides familiarity to users, making navigation simple and intuitive. Each S.M.A.R.T. version fuels stronger business communications with your internal and external customers by providing detailed shipping and tracking notifications, chargeback accounting with postage meter reconciliation and extensive reporting options to name a few. Several S.M.A.R.T. versions, supporting from the most basic to complex workflows, are available. Choose the one that best aligns with your agency's needs.\"", "fedramp_msg": "N/A", "sales_email": "k.warner@quadient.com", "security_email": "fedramp@quadient.com", "website": "https://mail.quadient.com/", "uei": "W6GHEB8CZQS1", "small_business": false, "business_categories": [ "Accounting", "Analytics" ], "service_last_90": [ "" ], "all_others": [ "Address validation", "Carrier Shipping and rating", "Inbound and outbound package tracking" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1606097904A", "name": "Qualtrics, LLC", "cloud_service_provider": "Qualtrics, LLC", "cloud_service_offering": "Qualtrics XM Platform - High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Qualtrics%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-02-11T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-06-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-07-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 36, "reuse": 35, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-02-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-06-09T20:00:00.000Z", "cert_date": "2025-07-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-07-08T20:00:00.000Z", "annual_assessment": "2011-06-05T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Centers for Disease Control and Prevention", "Commodity Futures Trading Commission", "Consumer Financial Protection Bureau", "Consumer Product Safety Commission", "Cybersecurity & Infrastructure Security Agency", "DOJ Office of the Inspector General", "Department of Agriculture", "Department of Health and Human Services", "Department of Labor", "Department of State", "Department of the Interior", "Environmental Protection Agency", "Federal Deposit Insurance Corporation", "Federal Trade Commission", "Fermi National Accelerator Laboratory", "First Responder Network Authority", "Food and Drug Administration", "General Services Administration", "Interior Business Center", "National Cancer Institute", "National Institute of Standards and Technology", "National Nuclear Security Administration / Kansas City Field Office", "National Oceanic and Atmospheric Administration", "National Science Foundation", "Social Security Administration", "Transportation Security Administration", "US Fish and Wildlife Service", "United States Census Bureau", "United States Geological Survey", "United States International Trade Commission", "United States Patent and Trademark Office", "United States Securities and Exchange Commission" ], "agency_reuse": [ "" ], "service_description": "The Qualtrics XM Platform is a SaaS offering, hosted in a multi-tenant Government cloud environment, designed to support US federal agencies in managing employee experience (EX), customer experience (CX), and conducting strategic research. Subscriptions to the platform and related professional services (research, implementation, and engineering) are available.\n\nThe platform enables agencies to deploy surveys for systematic data acquisition from various stakeholders. It supports listening across channels to collect data from web properties, mobile applications, email communications, social media, and integrated contact center analytics systems. This facilitates comprehensive data collection across multiple interaction points.\n\nCapabilities for understanding and improving the digital experience are included, allowing for analysis of user interactions on digital interfaces. The platform supports the collection of product feedback and website feedback to inform development and user experience enhancements.\n\nThe Qualtrics XM Platform provides tools for measurement of experience data and offers functionalities for both quantitative and qualitative analysis. Integrated artificial intelligence (AI) capabilities enhance data analysis by identifying key themes, predicting trends, and surfacing actionable insights from structured and unstructured data, including open-text feedback from surveys and other channels. These AI features assist in understanding the nuances of listening across channels and improving the efficiency of data collection analysis. The platform supports the implementation of closed loop feedback mechanisms to facilitate action based on collected and analyzed insights.\n\nThe platform is accessible to public sector entities, including federal, state, local, and tribal governments, as well as research institutions, federal contractors, and government contractors.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@qualtrics.com", "website": "https://www.qualtrics.com/", "uei": "DT8KJHZXVJH5", "small_business": false, "business_categories": [ "Analytics", "Communication", "Contact Center", "Customer Relations Management (CRM)", "Customer Service", "Data Management", "Education & Training", "Human Resources", "Marketing & Sales", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1508207205", "name": "Qualys", "cloud_service_provider": "Qualys", "cloud_service_offering": "Qualys Cloud Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Qualys%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-08-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2016-04-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2016-05-05T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to Legacy FedRAMP Ready" }, { "date": "2016-11-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP Certified" } ], "authorizations": 17, "reuse": 363, "ready_status": "Not Active", "ready_date": "2016-05-05T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-08-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2016-04-06T20:00:00.000Z", "cert_date": "2016-11-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Federal Student Aid", "fedramp_auth": "2016-11-02T20:00:00.000Z", "annual_assessment": "2011-06-06T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2106555313", "csp": "AchieveIt Online, LLC", "cso": "AchieveIt", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2431264500", "csp": "AppOmni", "cso": "AppOmni SaaS Security for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2326654692", "csp": "Aprimo US, LLC", "cso": "Aprimo", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1908649566", "csp": "Aruba Networks", "cso": "Aruba Central", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2403745080", "csp": "ATOM EVSE", "cso": "Atom Power, Inc - ATOM EVSE", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2226322745", "csp": "Autodesk", "cso": "Autodesk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1510057481", "csp": "BMC Helix, Inc.", "cso": "BMC Helix", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1916254386", "csp": "Boomi", "cso": "Boomi Enterprise Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1923039219", "csp": "Canon U.S.A., Inc.", "cso": "Canon Office Cloud – Managed Print Services", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125059322", "csp": "Center for Translational Data Science (CTDS)", "cso": "Gen3 Data Ecosystems Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1605107897", "csp": "Cisco Systems Inc.", "cso": "Cisco Cloudlock for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2315535023", "csp": "Cisco Systems Inc.", "cso": "Cisco Meraki US Government Region", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1511207635", "csp": "Cisco Systems Inc.", "cso": "Webex for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2014656304", "csp": "Civis Analytics, Inc.", "cso": "Civis Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000863987A", "csp": "Cloudflare", "cso": "Cloudflare for Government - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2306445868", "csp": "Cohesity", "cso": "Cohesity Cloud Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1706403967", "csp": "Collibra", "cso": "Collibra Platform for Government (CPG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2200507410", "csp": "Copado", "cso": "Copado GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029183077", "csp": "Cority Software Inc.", "cso": "CorityOne", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2416263030", "csp": "CrestPoint Solutions, Inc", "cso": "CrestPoint Environmental Management Service (CEMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324740262", "csp": "Databricks, Inc.", "cso": "Databricks on AWS GovCloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1834740315", "csp": "Databricks, Inc.", "cso": "Databricks on AWS US East/West", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2112152882", "csp": "Datavant", "cso": "Datavant Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2414718666", "csp": "Digital Science UK Limited", "cso": "Overleaf", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1814557199", "csp": "DNAnexus, Inc.", "cso": "DNAnexus Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603307884", "csp": "e-Builder, A Trimble Company", "cso": "Trimble Unity Construct Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2016962740", "csp": "Eightfold AI Inc.", "cso": "Eightfold Talent Intelligence Platform (TIP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2004446306", "csp": "Elastic", "cso": "Elastic Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2034966708", "csp": "End To End Computing", "cso": "Singularity", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1930046270", "csp": "EnergyCAP LLC.", "cso": "EnergyCAP", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "F1412165928", "csp": "Everbridge", "cso": "Critical Event Management Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324454026", "csp": "FM:Systems", "cso": "OpenBlue Workplace", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2035860874", "csp": "Global Telehealth Services, inc.", "cso": "GTS VirtualHealth Platform (GTS-VP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919750997", "csp": "HackerOne", "cso": "HackerOne Continuous Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2135040486", "csp": "HealthVerity", "cso": "Privacy Preserving Records Linkage (PPRL)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1831429369", "csp": "HireVue", "cso": "Recruitment Assessments and Video Interviewing", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1408115175", "csp": "Huddle US", "cso": "Huddle Enterprise Cloud Content Collaboration and File Sharing Portal for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2607452240", "csp": "IBM", "cso": "GO.gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2122038682", "csp": "iBoss", "cso": "iboss Government Cloud Platform (IGCP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2429166928", "csp": "Ideagen", "cso": "Ideagen Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1512017638", "csp": "IdeaScale", "cso": "IdeaScale Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2017257053", "csp": "Infoblox", "cso": "Infoblox Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029331613", "csp": "Informatica LLC", "cso": "Informatica Intelligent Cloud Services (IICS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1816364586", "csp": "Ivanti", "cso": "Ivanti Neurons for ITSM (Formerly Service Manager)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102758152", "csp": "Juniper Networks", "cso": "Juniper Mist", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2201340492", "csp": "KnowBe4, Inc.", "cso": "KnowBe4 Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2218073444", "csp": "Lucid Software, Inc.", "cso": "Lucid GovSuite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2229642430", "csp": "Lumen", "cso": "Cloud Contact Center", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1728351539", "csp": "MAXIMUS Inc.", "cso": "Maximus Intelligent Virtual Assistant (MIVA) (formerly MIA)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324445481", "csp": "MCG Energy Solutions, LLC", "cso": "MCG Applications and Hosting", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1902240018", "csp": "MDRC", "cso": "SPROUT", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2210666939", "csp": "Melissa", "cso": "Melissa GovCloud Address Suite", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2100059668", "csp": "OnSolve LLC", "cso": "OnSolve Platform for Critical Event Management", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2110251776", "csp": "Ontario Systems, LLC d/b/a Finvi", "cso": "Ontario Cloud Federal (OCF)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2310974411", "csp": "PagerDuty", "cso": "PagerDuty Operations Cloud", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2135637226", "csp": "Pearson VUE", "cso": "Pearson Federal Cloud System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1818240234", "csp": "Perceptyx", "cso": "Perceptyx Insights Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2322855016", "csp": "ProjectTeam, Inc.", "cso": "ProjectTeam for Government (Construction Project and Program Management)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1924942935", "csp": "Qgenda, LLC", "cso": "QGenda", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2313477206", "csp": "Quadient inc.", "cso": "S.M.A.R.T. - Federal Editions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2209555576", "csp": "RingMD USA Inc.", "cso": "RingMD Telemedicine", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2204842850", "csp": "Rosalind, Inc.", "cso": "ROSALIND", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1821062403", "csp": "Saviynt, Inc.", "cso": "Saviynt Enterprise Identity Cloud (EIC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2130949241", "csp": "StackArmor", "cso": "Rally", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918740338", "csp": "Sumo Logic", "cso": "Sumo Logic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2132958724", "csp": "UiPath", "cso": "Automation Cloud Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125561001", "csp": "Unqork, Inc.", "cso": "Unqork for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1509237360", "csp": "Veracode", "cso": "Veracode Online Security Platform for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1804557312", "csp": "Veritone, Inc.", "cso": "Veritone Intelligent Digital Evidence Management System (iDEMS) for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1825232355A", "csp": "WellHive Holdings, LLC", "cso": "WellHive", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2103344623", "csp": "Workday Inc.", "cso": "Workday Government Cloud (WGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2113557839", "csp": "Yello Dba Recsolu Inc", "cso": "Yello Government Recruiting Solution", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1731347234", "csp": "Zimperium", "cso": "Zimperium Mobile Endpoint Cyber Security", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Centers for Medicare & Medicaid Services", "Cybersecurity & Infrastructure Security Agency", "Department of State", "FHFA Office of the Inspector General", "Federal Housing Finance Agency", "Federal Retirement Thrift Investment Board", "Federal Student Aid", "Federal Trade Commission", "Internal Revenue Service", "National Endowment for the Arts", "National Mediation Board", "Office of the Comptroller of the Currency", "Pension Benefit Guaranty Corporation", "Presidio Trust", "Strategic Petroleum Reserve", "U.S. Election Assistance Commission" ], "agency_reuse": [ "22-000", "22-002", "22-002-01", "22-002-02", "22-002-04", "22-002-05", "22-002-07", "22-002-08", "22-002-09", "22-002-11", "22-003", "22-005", "22-005-01", "22-005-03", "22-005-04", "22-005-05", "22-005-06", "22-005-08", "22-005-09", "22-005-10", "22-005-12", "22-005-13", "22-005-20", "22-007", "22-007-03", "22-007-04", "22-007-07", "22-007-09", "22-007-11", "22-007-17", "22-007-19", "22-007-22", "22-007-25", "22-007-27", "22-007-28", "22-008-01", "22-008-02", "22-008-03", "22-011", "22-011-01", "22-011-02", "22-011-03", "22-011-05", "22-011-06", "22-011-10", "22-012", "22-013", "22-014-02", "22-015", "22-016-01", "22-016-04", "22-016-06", "22-016-21", "22-016-24", "22-016-43", "22-017", "22-017-02", "22-017-03", "22-017-06", "22-017-11", "22-019", "22-020", "22-021", "22-021-01", "22-021-02", "22-021-03", "22-021-04", "22-021-06", "22-021-13", "22-022", "22-022-01", "22-023", "22-024", "22-025", "22-027", "22-027-02", "22-027-03", "22-027-06", "22-027-07", "22-028", "22-030", "22-031", "22-031-01", "22-032", "22-033", "22-034", "22-034-02", "22-035", "22-036", "22-036-01", "22-037", "22-039", "22-040", "22-042", "22-042-02", "22-043", "22-044", "22-045", "22-046", "22-047", "22-050", "22-051", "22-055-01", "22-058", "22-059", "22-060", "22-061", "22-062", "22-063", "22-065", "22-067", "22-068", "22-069", "22-070", "22-074", "22-075", "22-080", "22-084", "22-088", "22-094", "22-099" ], "service_description": "The Qualys Cloud Platform (QCP) is a multi-tenant shared cloud service environment. Its unique computing power is capable of continuously analyzing and correlating information, to assist IT management with identifying and homing-in on threats and eliminating vulnerabilities. With its Qualys sensors, a core service of the Qualys Cloud Platform, make it easy to extend your security throughout your global enterprise. These sensors, which can be in the form of appliances or lightweight agents, are remotely deployable, centrally managed and self-updating. They collect data automatically and seamlessly sending it to the Qualys Cloud Platform. Subscribers simply use the Qualys software without the burden of licensing, maintenance and costs for owning the software itself.", "fedramp_msg": "N/A", "sales_email": "fedramp@qualys.com", "security_email": "fedramp@qualys.com", "website": "https://www.qualys.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "CSAM – CyberSecurity Asset Management", "Certificate View", "EASM – External Attack Surface Management", "EDR – Endpoint Detection & Response", "ETM – Enterprise TruRisk Management", "FIM – File Integrity Monitoring", "GAV – Global Asset View", "PC – Policy Compliance", "PCI – PCI Compliance", "PM – Patch Management", "Qflow – Qualys Flow Application", "TP – Threat Protection", "TotalAI", "TotalAppSec (WAS & API Security)", "TotalCloud", "VMDR – Vulnerability Management, Detection & Response" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2231052341", "name": "Qualys, Inc.", "cloud_service_provider": "Qualys, Inc.", "cloud_service_offering": "Qualys Government Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Qualys%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-01-19T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-03-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2025-07-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-08-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 3, "ready_status": "Not Active", "ready_date": "2023-01-19T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-03-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-07-31T20:00:00.000Z", "cert_date": "2025-08-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Drug Enforcement Administration", "fedramp_auth": "2025-08-14T20:00:00.000Z", "annual_assessment": "2011-07-30T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2427142353", "csp": "AutoRABIT Holding, Inc.", "cso": "AutoRABIT for Public Sector - CodeScan, Guard, & ARMOR", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2311952621", "csp": "Ernst & Young LLP", "cso": "EY Grants Accelerator", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Consumer Product Safety Commission", "Drug Enforcement Administration" ], "agency_reuse": [ "22-024", "22-036" ], "service_description": "Qualys Government Platform (QGP) consists of a suite of Information Technology (IT) security and compliance solutions delivered via a SaaS deployment model that leverages a highly scalable multi-tenant cloud infrastructure. The below services are part of the QGP platform - Vulnerability Management, Detection, and Response (VMDR) service enables customers to discover, assess, prioritize, and patch critical vulnerabilities and misconfigurations in near real-time and across your global hybrid-IT landscape all-in-one subscription. Policy Compliance (PC) service provides the ability to run compliance scans and create compliance reports on hosts (IP addresses) that have been added to the Policy Compliance account. File Integrity Monitoring (FIM) service enables monitoring critical files, directories, and registry paths for changes in near real-time, and helps adhere to compliance mandates such as FedRAMP. Container Security (CS) service provides discovery, tracking, and continuously protecting container environments. Addresses vulnerability management for images and containers in their DevOps pipeline and deployments across cloud and on-premises environments. Certificate View (CertView) service provides a comprehensive view of all the SSL/TLS certificates across the enterprise and cloud-hosted assets. CyberSecurity Asset Management (CSAM) service continuously gathers information on all assets, listing systems and hardware details, running services, open ports, installed software and user accounts. Asset discovery and inventory collection is done through a combination of Qualys Sensors, which together can collect comprehensive data from across on-premises or cloud infrastructure as well as remote endpoints. Web Application Scanning (WAS) service enables organisation's to assess, track and remediate web application vulnerabilities to keep their web applications secure. Patch Management (PM) service is used to patch and apply post-patch configuration changes to operating systems, mobile devices, and 3rd-party applications from a large variety of vendors, all from a central dashboard.", "fedramp_msg": "N/A", "sales_email": "federal@qualys.com", "security_email": "fedramp@qualys.com", "website": "https://www.qualys.com/subscriptions/government/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "Qualys Enterprise TruRisk Management (ETM)" ], "all_others": [ "CSAM – CyberSecurity Asset Management", "Certificate View", "EDR – Endpoint Detection & Response", "FIM – File Integrity Monitoring", "GAV – Global Asset View", "PC – Policy Compliance", "PM – Patch Management", "Qflow – Qualys Flow Application", "TP – Threat Protection", "TotalAppSec (WAS & API Security)", "TotalCloud", "VMDR – Vulnerability Management, Detection & Response" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1605027892", "name": "QuestionMark", "cloud_service_provider": "QuestionMark", "cloud_service_offering": "Questionmark Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Questionmark%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-06-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-08-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-10-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 7, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2016-07-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-08-27T20:00:00.000Z", "cert_date": "2019-10-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Customs and Border Protection", "fedramp_auth": "2019-10-23T20:00:00.000Z", "annual_assessment": "2011-08-11T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Department of State", "Federal Deposit Insurance Corporation", "Federal Reserve System", "Food and Drug Administration", "United States Air Force", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "The Questionmark Government service is an online assessment platform providing the ability to author, deliver and report on tests, quizzes, surveys, and exams. Questionmark Government can be used for training, certification, advancement, channel expertise, competency measurement, compliance, and workforce learning.\r\n\r\n \r\n\r\nUnited States Federal, State and Local government agencies and their contractors can safely and securely use our powerful tool for creating, delivering, and reporting on assessments. Questionmark Government is hosted in US-based, FedRAMP-authorized data centers used by US government agencies and their service contractors.\r\n\r\n \r\n\r\nOur service is targeted for data up to DoD Impact Level 4. Questionmark Government operates the Software-as-a-Service (SaaS). It includes provisioning and scaling; and maintenance of operating systems and software to ensure sufficient bandwidth and performance, upgrades, and secure backups.\r\n\r\n \r\n\r\nQuestionmark is widely used by Government, Awarding Bodies, Utilities, Manufacturing and Public Sectors. For more information about Questionmark Government, please see: https://www.questionmark.com/use-cases/government/\r\n\r\n \r\n\r\n**Features**\r\n\r\n* A government-specific online platform that is FedRAMP authorized and designed to support your special requirements\r\n\r\n* Comprehensive item banking with easy search functionality\r\n\r\n* Delivery of assessments via browser, secure browser, mobile devices and paper\r\n\r\n* Incorporates a robust reporting and analytics suite\r\n\r\n* Provides a collaborative authoring environment complete with version tracking and roll-back features\r\n\r\n* Author once then deliver to multiple devices simultaneously\r\n\r\n* Includes accessibility features such as text sizing and contrast controls\r\n\r\n* Available in 36 different languages\r\n\r\n* A secure and robust SaaS provided by a company that is ISO 27001:2022 certified\r\n\r\n* A scalable, flexible solution that can be rapidly deployed\r\n\r\n* Robust availability: 99.9%+ uptime\r\n\r\n \r\n\r\n**Benefits**\r\n\r\n* Easily create and deliver certification assessments and advancement exams\r\n\r\n* Easily create and deliver post-course tests for distance learning\r\n\r\n* Easily create, deliver, and report on surveys and course evaluations\r\n\r\n* Provides tracking changes to questions for legal defensibility\r\n\r\n* Blended delivery allows mobile/onsite workers to take assessments\r\n\r\n* Provides observational assessments to allow measuring performance on practical tasks\r\n\r\n* Create valid and reliable assessments to make trustworthy decisions\r\n\r\n* Author and deliver assessments that document training and understanding for compliance purposes\r\n\r\n* Improve test validity by running job task analysis surveys\r\n\r\n* Assess skills of technical staff, engineers, and equipment maintainers", "fedramp_msg": "N/A", "sales_email": "sales@questionmark.com", "security_email": "team-security@learnosity.com", "website": "https://www.questionmark.com/", "uei": "VTMLT1LXDTV7", "small_business": true, "business_categories": [ "Analytics", "Content Management System (CMS)", "Education & Training" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2530646153", "name": "QuestionPro, Inc.", "cloud_service_provider": "QuestionPro, Inc.", "cloud_service_offering": "QuestionPro Research GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/QuestionPro%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-10-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-10-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Lunarline, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "QuestionPro is a Software-as-a-Service (SaaS) platform that provides online survey and research capabilities for market research, employee engagement, and customer experience applications. The service enables users to design, distribute, collect, and analyze surveys through a secure, cloud-based environment. The platform operates within the AWS GovCloud (US) environment and supports federal security and compliance requirements. The authorization boundary encompasses the application, supporting infrastructure, and associated data handling, storage, and transmission components within this environment.", "fedramp_msg": "", "sales_email": "gov-sales@questionpro.com", "security_email": "arti.pullins@questionpro.com", "website": "https://www.questionpro.com/govcloud", "uei": "RP9LYBJV7958", "small_business": true, "business_categories": [ "Analytics", "Data Management", "Marketing & Sales", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2214150164", "name": "Quzara, LLC.", "cloud_service_provider": "Quzara, LLC.", "cloud_service_offering": "Quzara Cybertorch (SOC-as-a-Service)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Quzara%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-04-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-06-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2025-10-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-11-20T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2023-04-04T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-06-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-10-27T20:00:00.000Z", "cert_date": "2025-11-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-11-20T20:00:00.000Z", "annual_assessment": "2011-10-27T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of the Treasury" ], "agency_reuse": [ "" ], "service_description": "Cybertorch™ is a FedRAMP High Authorized, cloud-native security platform specializing in Sovereign Security Operations and Incident Response for the federal mission. Built and operated by U.S.-based cleared personnel, Cybertorch combines telemetry from Microsoft security, vulnerability management, and infrastructure logs with AI-assisted analytics to unify threat detection, response, and continuous compliance support for mission-critical workloads across cloud, hybrid, and on-premises environments.\r\n\r\nCore Service Components\r\n\r\nManaged Security Services\r\n\r\n1. Managed Extended Detection & Response (MXDR)\r\nProvides 24x7x365 monitoring, investigation, and response across cloud, hybrid, and on-premises workloads. MXDR is operated by cleared U.S. analysts and uses correlation, behavioral analytics, and AI-assisted triage to link Endpoint Detection and Response (EDR), identity, email, and cloud telemetry and rapidly identify and contain advanced threats.\r\n2. Managed Microsoft Security Services\r\nEnd-to-end deployment, configuration, and 24x7 management of Microsoft security capabilities, including EDR and XDR, across Commercial, GCC, and GCC High tenants. Services include tuning, alert triage, incident handling support, and alignment with agency-specific security and compliance requirements, with AI-informed detections and policies incorporated where appropriate.\r\n3. Managed Vulnerability Management\r\nExpert-driven vulnerability management services leveraging FedRAMP-authorized Tenable solutions. Cybertorch delivers Tenable-based high managed services, including scan strategy design, continuous assessments, AI-assisted risk scoring and prioritization, remediation guidance, and integration of vulnerability data into SOC workflows and executive reporting.\r\n4. Curated Threat Intelligence\r\nActionable, curated threat intelligence sourced from government, commercial, and internal hunting activities. SOC analysts incorporate this intelligence into detections, investigations, and proactive threat hunting, using AI-supported enrichment and pattern analysis to track evolving campaigns, techniques, and sector-relevant threats.\r\nContinuous Assurance Module\r\n1. The Continuous Assurance Module helps agencies maintain an ongoing picture of how security controls are performing in practice. It correlates alerts, vulnerability data, and configuration baselines with NIST-based control frameworks used for FISMA, FedRAMP, and CMMC. The AI-enabled module provides workflows to assist with updating RMF documentation, assembling supporting evidence, and tracking changes in residual risk over time. Its AI-assisted analysis approach, informed by our NISTcompliance.ai platform, is used to highlight trends, gaps, and control drift, adding automation and consistency while preserving existing governance, review, and approval processes.", "fedramp_msg": "N/A", "sales_email": "sales@quzara.com", "security_email": "cybertorch@quzara.com", "website": "https://quzara.com/solutions/cybertorch/mxdr", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1733061545", "name": "R&K Solutions, Inc", "cloud_service_provider": "R&K Solutions, Inc", "cloud_service_offering": "GoRPM", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/RK%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-05-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2018-10-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2019-05-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-08-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 1, "ready_status": "Not Active", "ready_date": "2018-05-29T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-10-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-05-20T20:00:00.000Z", "cert_date": "2019-08-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Information Systems Agency", "fedramp_auth": "2019-08-06T20:00:00.000Z", "annual_assessment": "2011-07-25T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1733061545", "csp": "R&K Solutions, Inc", "cso": "GoRPM", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Defense Information Systems Agency" ], "agency_reuse": [ "22-016-01" ], "service_description": "GoRPM empowers organizations to collect, aggregate, analyze, manage and understand their real property, personal property, and facilities investments. GoRPM provides data driven decision making in many areas including asset inventory, strategic movement of assets (Basing), space utilization, condition assessment, sustainability, cost analysis, and budget planning and forecasting. The GoRPM is highly configurable and can be quickly implemented and scaled to meet the needs of government agencies.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@rksolutions.com", "website": "https://rksolutions.com/gorpm", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1510137547", "name": "Rackspace Government Solutions", "cloud_service_provider": "Rackspace Government Solutions", "cloud_service_offering": "Rackspace Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Rackspace%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-02-04T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2015-10-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 23, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2014-02-04T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2015-10-09T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2015-10-09T20:00:00.000Z", "annual_assessment": "2011-10-09T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "F1404043549", "csp": "Accenture Federal Services", "cso": "Accenture Federal Cloud ERP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1830842316", "csp": "Leidos Digital Solutions, Inc.", "cso": "IQ FedCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1907847653", "csp": "TeleTech (TTEC) Services Corporation", "cso": "Humanify Enterprise - Government (Humanify Enterprise - G)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Defense Information Systems Agency", "Department of State", "Federal Energy Regulatory Commission", "Internal Revenue Service", "National Science Foundation", "Office of Personnel Management" ], "agency_reuse": [ "22-002-09", "22-003", "22-005-11", "22-005-19", "22-007-04", "22-007-25", "22-011-03", "22-011-05", "22-016-01", "22-016-08", "22-019", "22-020", "22-023", "22-025", "22-040", "22-055", "22-055-01", "22-062" ], "service_description": "Rackspace Government Cloud (RGC) is purpose-built to help organizations achieve Assessment & Authorization faster and with cost savings of up to 70%. Whether you are a government agency, systems integrator, or independent software vendor, RGC is the foundation you need to rapidly deliver mission value via the cloud.\n\nRackspace Government Cloud (RGC) wraps VMware and AWS in a secure-by-design management platform to meet the compliance requirements for FedRAMP and DoD Cloud Computing SRG. Customer solutions will be deployed and managed in secured enclaves within US Rackspace datacenters and/or AWS East/West and GovCloud. Customers are provided with dedicated application stacks to maintain data security at the necessary levels. All this is backed by a 24x7x365 U.S. only support model that allows Rackspace to provide the highest levels of assurance and security to our government customers.\n\nBenefits Include:\n- 24/7/365 operations and system support providing a fully-managed cloud solution up to and including guest operating systems and networks\n- Secure-by-design cloud environment with proactive support, continuous monitoring, and governance\n- Fully redundant solutions, with backup, restore, and disaster recovery built-in\n- Comprehensive system security services as standard, including enterprise-grade log aggregation, endpoint protection, file integrity monitoring, and host-based Intrusion Prevention Systems (IPS) and Intrusion Detection Systems (IDS)\n- Unique combination of automation, accredited tooling, and human expertise, enabling cyber and operational support", "fedramp_msg": "Rackspace Government Cloud previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "FedRAMP@rackspace.com", "website": "https://www.rackspace.com/cloud/rackspace-government-cloud", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2516072131", "name": "Ramp", "cloud_service_provider": "Ramp", "cloud_service_offering": "Ramp for Government (RampGov)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Ramp%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-08T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Ramp provides a unified platform for charge cards, expense management, and bill payments, designed to maximize visibility, enforce policy controls, and drive operational efficiency at scale. Our customers rely on Ramp to manage their financial operations, drive efficiency, and stop wasteful spending.", "fedramp_msg": "N/A", "sales_email": "govteam@ramp.com", "security_email": "fedramp@ramp.com", "website": "https://ramp.com/government", "uei": "MMC6R2DML8L4", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Finance" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2422240916", "name": "Rapid7", "cloud_service_provider": "Rapid7", "cloud_service_offering": "InsightGovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Rapid7%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-12-18T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-06-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-07-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-12-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-06-12T20:00:00.000Z", "cert_date": "2025-07-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Office of Financial Research", "fedramp_auth": "2025-07-11T20:00:00.000Z", "annual_assessment": "2011-05-21T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Office of Financial Research" ], "agency_reuse": [ "" ], "service_description": "The Rapid7 InsightGovCloud is a suite of cloud-based SaaS applications that provides agencies with the tools and clarity they need to assess their attack surface, detect suspicious behavior, and respond and remediate quickly with intelligent automation. Features are enabled/disabled in near real time within a central web user interface (UI) with additional application programming interface (API) features. This suite of applications includes the following Rapid7 SaaS products: InsightPlatform, InsightVM, InsightCloudSec, and InsightConnect.", "fedramp_msg": "N/A", "sales_email": "sales@rapid7.com", "security_email": "security@rapid7.com", "website": "https://www.rapid7.com/", "uei": "MTXQGJKU6256", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1722838693", "name": "Rave Mobile Safety", "cloud_service_provider": "Rave Mobile Safety", "cloud_service_offering": "Rave Safety Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Rave%20Mobile%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-12-03T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-09-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-12-11T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-12-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-09-25T20:00:00.000Z", "cert_date": "2020-12-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-12-11T20:00:00.000Z", "annual_assessment": "2011-09-25T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy", "National Aeronautics and Space Administration", "National Cancer Institute", "Strategic Petroleum Reserve" ], "agency_reuse": [ "" ], "service_description": "Rave Mobile Safety is a leading SaaS-based provider of critical communication, collaboration, incident management, and safety solutions. The Rave Safety Platform connects millions to those trusted to protect them, by providing innovative and integrated solutions to increase coordination, inform response, and act faster with two-way communications across different devices and locations during both planned (exercise) and unplanned (crisis/disaster) events. Rave provides a comprehensive set of data and tools to help navigate the response lifecycle and ensure the right people have the right information at the right time to reduce the impact of an emergency and shorten the timeframe of events. Rave's easy to use, quick to deploy and secure integrated platform is designed to improve communications, rapidly and reliably deliver alerts and notifications, connect stakeholders, confirm personnel location and accountability, and enhance response through established workflows and processes for event-specific situations. Rave's technology seamlessly integrates with 9-1-1 systems, WebEOC, IPAWS, panic buttons, phone and speaker systems, and CAP compliant devices. Rave's customized personal safety mobile apps allow organization personnel to stay connected and maximize the safety of employees and facilities. With nearly two decades of experience Rave's unified safety solution helps organizations with crisis preparedness, response, recovery, and resilience.", "fedramp_msg": "N/A", "sales_email": "security@ravemobilesafety.com", "security_email": "managed-security@motorolasolutions.com", "website": "https://www.ravemobilesafety.com/", "uei": "DPLBA7E1GJQ4", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Health & Wellness", "Law Enforcement", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2309954376", "name": "RecAccess", "cloud_service_provider": "RecAccess", "cloud_service_offering": "RecAccess", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/RecAccess%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-05-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-03-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-05-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-03-20T20:00:00.000Z", "cert_date": "2025-03-27T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "US Fish and Wildlife Service", "fedramp_auth": "2025-03-27T20:00:00.000Z", "annual_assessment": "2011-03-20T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "US Fish and Wildlife Service" ], "agency_reuse": [ "" ], "service_description": "RecAccess is a web-based Software-as-a-Service solution that is used to manage outdoor programs, public & private area access, law enforcement, events, and recreational activities such as hunting, fishing, camping, hiking, biking, boating, four wheeling, trail riding, skiing and public entrance or entry. RecAccess features include online lotteries, permits, passes, tickets, quota hunts, activity and area check-in / checkout, checkout questions, harvest reporting, surveys, safety briefs, quizzes, announcements, acknowledgements, waivers, ID checks and user vetting. RecAccess allows government customers to have portals for their location/needs and provides recreationists/end-users a familiar interface optimized for both mobile and desktop experience. Once trained in RecAccess services, approved government administrators have real-time access to an administration suite to manage their program's recreational processes and data. RecAccess integrates payment processing through Pay.gov and login processing through Login.gov for qualified government customers. Each government program is unique with requirements or processes and the RecAccess Team is continuously expanding our software to meet the needs of our customer's recreational programs.", "fedramp_msg": "N/A", "sales_email": "sales@recaccess.com", "security_email": "security@recaccess.com", "website": "https://www.recaccess.com/", "uei": "RMWBWZN19FL9", "small_business": true, "business_categories": [ "Communication", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Customer Service", "Data Management", "Education & Training", "Health & Wellness", "Law Enforcement", "Marketing & Sales", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1309252456", "name": "Rectitude 369", "cloud_service_provider": "Rectitude 369", "cloud_service_offering": "Rectitude 369 Government Cloud (Formerly GDT)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Rectitude%20Logo.png", "status": "FedRAMP Certified (In Remediation)", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-06-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2015-02-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" }, { "date": "2026-07-22T18:21:01.232Z", "category": "Status Change", "description": "Status changed from Authorized to FedRAMP Certified (In Remediation). Under remediation for not following \"Addressing FedRAMP Communication\" rule. See Notice 0016" } ], "authorizations": 1, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2014-06-18T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2015-02-04T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2015-02-04T20:00:00.000Z", "annual_assessment": "2011-02-04T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "IaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2135730387", "csp": "IBM", "cso": "IBM Federal HR Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Corporation for National & Community Service" ], "agency_reuse": [ "22-004", "22-019", "22-036", "22-062", "22-084" ], "service_description": "The Rectitude 369 Government Cloud is a FedRAMP Compliant Infrastructure as a Service (IaaS) offering that government agencies can leverage to deploy and manage compute, network, and storage resources in a self-service model. The Government Cloud holds a FISMA Moderate Joint Authorization Board Provisional ATO (P-ATO) and is authorized to support DoD Impact Level 2 (IL2) workloads. This Government Community Cloud deployment model ensures only government or supporting organizations supporting government agency workloads are hosted on the system. The Rectitude 369 Government Cloud supports both single system and hybrid deployments to connect workloads in multiple locations aligning to current government agency adoption patterns.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/06/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "", "security_email": "fedramp@rectitude369.com", "website": "https://rectitude369.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2102031769", "name": "Red Hat", "cloud_service_provider": "Red Hat", "cloud_service_offering": "Red Hat OpenShift Service on AWS (ROSA)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Red%20Hat%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-04-12T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-12-01T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to Legacy FedRAMP Ready" }, { "date": "2022-12-12T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2023-08-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": "2022-12-01T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-04-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-12-12T20:00:00.000Z", "cert_date": "2023-08-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Oceanic and Atmospheric Administration", "fedramp_auth": "2023-08-09T20:00:00.000Z", "annual_assessment": "2011-06-20T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture", "Federal Student Aid", "National Oceanic and Atmospheric Administration", "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "Red Hat® OpenShift® Service on AWS (ROSA) is a turnkey application platform jointly managed, operated and supported by Red Hat and AWS. It runs natively on Amazon Web Services (AWS), and allows organizations to increase operational efficiency, refocus on innovation, and quickly build, deploy, and scale applications. Red Hat OpenShift Service on AWS includes fully integrated development and operational productivity features including Kubernetes, an Integrated Development Environment (IDE), build pipelines, monitoring, logging and networking. With 24/7 monitoring and management to ensure seamless operations, organizations can focus on accelerating application delivery, not managing infrastructure. This offering is a FedRAMP High baseline, Platform-as-a-Service (PaaS) cloud service for developing and running containerized applications offered on the FedRAMP authorized AWS GovCloud (US).", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@redhat.com", "website": "https://www.redhat.com/en/technologies/cloud-computing/openshift/aws", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "Red Hat Lightspeed", "Red Hat OpenShift Service on AWS (ROSA) Classic", "Red Hat OpenShift Service on AWS with Hosted Control Planes" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2621751490", "name": "Red Rock Group Holdings", "cloud_service_provider": "Red Rock Group Holdings", "cloud_service_offering": "GetEKKO", "logo": "", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-05-22T22:14:31.064Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-05-21T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "360 Advanced Compass Rose", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "GetEkko is delivered as a Software-as-a-Service (SaaS) offering using a multi-tenant public cloud computing provider that allows GetEkko to create dedicated customer environments for data isolation and segmentation. It is available to customers that require identity-proofing in conjunction with secure transmission of messages without the ability to read the payload in transit to users within groups, based upon schedules, or availability within the central platform.", "fedramp_msg": "", "sales_email": "info@getekko.io", "security_email": "security@redrockholdings.us", "website": "https://getekko.io/", "uei": "", "small_business": true, "business_categories": [ "Communication", "Data Management", "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2611539908", "name": "RegDOX Solutions", "cloud_service_provider": "RegDOX Solutions", "cloud_service_offering": "RegDOX Cloud Security Solutions", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Regdox%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-02-17T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-02-17T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "RegDOX Cloud is delivered as a SaaS offering using a multi-tenant, \nAWS GovCloud hosted computing environment. It is available to \nfederal contractors, government contractors and subcontractors, and \nU.S.-based companies for compliance with ITAR and federal \nprocurement cyber-security regulations. \nRegDOX Cloud provides a secure collaboration platform designed \nspecifically for regulatory compliance and document management \nwithin the authorization boundary of this Cloud Service Offering. \n(CSO). The service is tailored to meet the needs of regulated \nindustries by facilitating secure document exchange and storage.\nServices included within the authorization boundary of RegDOX\nCloud:\n• Secure Document Management: RegDOX offers robust \ndocument storage and management capabilities, ensuring \ncompliance with regulatory requirements such as FedRAMP \nModerate.\n• Collaboration Tools: Users can securely collaborate on \ndocuments within a controlled environment, with features for \nversion control and audit trails.\n• Access Control: Granular access controls and permissions \nmanagement ensure only authorized personnel can view and \nmodify sensitive documents.\n• Encryption: Data is encrypted both in transit and at rest, \nproviding a secure environment for sensitive information.\n• Compliance Assurance: The platform supports compliance \nwith regulatory standards and frameworks, including \nFedRAMP requirements.\nIntended User Base: The RegDOX Cloud is designed for hybrid \nenvironments and Government-only community cloud environments. \nIt serves government agencies, contractors, and organizations \nrequiring robust document management and collaboration. security \nmeasures", "fedramp_msg": "", "sales_email": "Sales@regdox.com", "security_email": "securityincident@gov.regdox.net", "website": "https://www.regdox.com/regdox-cloud-products/", "uei": "EEURWD6KXLE1", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Cybersecurity & Risk Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2414158717", "name": "RegScale", "cloud_service_provider": "RegScale", "cloud_service_offering": "RegScale CCM", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/RegScale%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-05-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-05-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-06-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-05-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-05-27T20:00:00.000Z", "cert_date": "2025-06-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-06-24T20:00:00.000Z", "annual_assessment": "2011-05-22T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "F1303191948", "csp": "MAXIMUS Inc.", "cso": "MAXIMUS Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Homeland Security", "Environmental Management Consolidated Business Center", "United States Patent and Trademark Office" ], "agency_reuse": [ "22-005-09", "22-022-01", "22-037", "22-062" ], "service_description": "The RegScale Continuous Controls Monitoring (CCM) Platform is delivered as a Software-as-a-Service (SaaS) offering, hosted in a multi-tenant public cloud computing environment. Built on Microsoft Azure, RegScale provides next-generation Governance, Risk, and Compliance (GRC) capabilities that allow organizations to automate and accelerate the management of cybersecurity programs such as FISMA, FedRAMP, CMMC, PCI, HIPAA, and others.\n\nRegScale helps organizations address their most difficult compliance challenges by enabling customers—via robust API integrations—to manage controls, upload evidence documentation, perform system assessments, and maintain certifications and authorizations. This is all centralized within a single platform, offering a “single pane of glass” experience. Automation ensures that data and compliance posture are updated in near real-time.\n\nRegScale ensures that security and privacy-related controls are properly identified, implemented, and maintained throughout the System Development Lifecycle (SDLC) for systems, applications, services, processes, and related initiatives. The platform enables customers to establish and maintain an information assurance capability, including Control Validation Testing, to verify that appropriate controls are operational and risks are managed prior to production deployment.\n\nWhile RegScale may be designated a major application for many large organizations, it is not typically classified as mission-critical. RegScale is a modern, cloud-native application, designed to scale using Docker containers, which are micro-segmented and orchestrated using Microsoft Azure services. The system is designed to be hosted in any environment, with security-focused runtime configuration through environmental variable injection.", "fedramp_msg": "N/A", "sales_email": "sales@regscale.com", "security_email": "security@regscale.com", "website": "https://www.regscale.com/", "uei": "LYMKBNFHJXH7", "small_business": true, "business_categories": [ "Collaboration", "Cybersecurity & Risk Management", "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "AI powered Control Implementation and Audit", "Advance Workflow Management", "Automated Evidence collection", "Compliance as Code", "Continuous Controls Monitoring", "Data Management", "Integration Mangement", "Next Generation Governance, Risk Management, and compliance", "Policy as Code" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2004753002", "name": "Relativity ODA LLC", "cloud_service_provider": "Relativity ODA LLC", "cloud_service_offering": "RelativityOne Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Relativity%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-12-23T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-09-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-11-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 19, "reuse": 18, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-12-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-09-10T20:00:00.000Z", "cert_date": "2020-11-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-11-05T20:00:00.000Z", "annual_assessment": "2011-09-10T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Civil Division", "Civil Rights Division", "Consumer Product Safety Commission", "Customs and Border Protection", "Cybersecurity & Infrastructure Security Agency", "Department of Agriculture", "Department of Justice", "Environmental Protection Agency", "Federal Deposit Insurance Corporation", "Federal Energy Regulatory Commission", "Federal Reserve System", "Food and Drug Administration", "Pension Benefit Guaranty Corporation", "Small Business Administration", "U.S. International Development Finance Corporation", "United States Equal Employment Opportunity Commission", "United States Patent and Trademark Office", "VA Office of the Inspector General" ], "agency_reuse": [ "" ], "service_description": "When it comes to e-discovery, you need the truth to act quickly, whether it's understanding your organization's risk around an internal issue, preparing evidence for litigation or investigations, working through M&A activity, or even performing proactive compliance monitoring. But with the tremendous amount of data out there, finding the truth isn't easy. We've developed powerful technology to help. RelativityOne Government brings the entire e-discovery process together in one secure and extensible platform, connected to your organization’s most sensitive data - and supported by the community of experts you need to untangle it all. Start and finish e-discovery in one solution with best-in-class security, scale, and performance and extend the functionality of the platform to meet your unique needs by leaning on apps built by our ecosystem of Relativity developer partners or building them yourself. With the latest in advanced searching and analytics, machine learning, and visualizations all built in, RelativityOne Government is your complete platform for organizing data, discovering the truth, and acting on it.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "security@relativity.com", "website": "https://www.relativity.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2428740308", "name": "ReliaQuest", "cloud_service_provider": "ReliaQuest", "cloud_service_offering": "GreyMatter for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/RQ%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-10-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-06-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-07-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP In Process to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-10-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-06-17T20:00:00.000Z", "cert_date": "2026-07-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-07-08T20:00:00.000Z", "annual_assessment": "2011-07-08T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Drug Enforcement Administration" ], "agency_reuse": [ "" ], "service_description": "ReliaQuest GreyMatter for Government is a cloud-native,\nagentic AI-powered Security Operations Platform (SOP)\ndesigned to detect, contain, investigate, and respond to\ncybersecurity threats. By leveraging the Universal\nTranslator, detection-at-source, and agentic AI,\nGreyMatter for Government unifies telemetry across cloud,\non-premises, and hybrid environments, delivering\ncentralized security and automated resilience.​", "fedramp_msg": "", "sales_email": "fedramp@reliaquest.com", "security_email": "fedramp@reliaquest.com", "website": "https://reliaquest.com/", "uei": "KGF7KBFCL6E7", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1815547467", "name": "Relocation Management Worldwide (RMW)", "cloud_service_provider": "Relocation Management Worldwide (RMW)", "cloud_service_offering": "Virtual Employee Network (VEN)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/RMW%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-12-03T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-12-16T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-01-31T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-12-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-12-16T20:00:00.000Z", "cert_date": "2020-01-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-01-31T20:00:00.000Z", "annual_assessment": "2011-12-16T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of the Interior" ], "agency_reuse": [ "" ], "service_description": "Formed in 2002 for the government to be compliant with the FEAFA (Federal Enterprise Architecture Framework Act), the RMW - Virtual Employee Network (VEN) system utilizes the most advanced relocation technology in the relocation industry. VEN is a modular, flexible, stable, and highly secure system that supports all critical relocation functions and end-to-end PCS (Permanent Change of Station) software from obligation, de-obligation to financial system interfaces. RMW continues to develop technology tools based on anticipated client needs and customer input in addition to changes in legislation (i.e. 2017 tax cuts and jobs act). RMW IT professionals have built intuitive solutions into a fully comprehensive web-based platform. Users have 24/7 access to the system, which is scalable to meet an Agency's information needs. The user friendly PCS Travel Voucher submissions are initiated by the employee via VEN through an automated work flow controlled by the Agency. E-signature documents are digitally signed that complies with the strictest legal regulations and highest level of assurance of a signer's identity. VEN provides greater flexibility, capability, and protection of sensitive employee data than other systems.\n\n- Fully automates expenses, policy, and suppliers so teams can focus on what is most important, \"the Agency's mission\".\n- Fully automates all Federal regulations and laws pertaining to employee relocation.\n- New appointees, retirees, and transferees can access, enter, and submit PCS expenses, all while the Agency reviews or rejects, approves, certifies, and runs real-time reports.\n- Real-time information directly from suppliers with work-flows that ensure data integrity for much faster processing of data, documents, vouchers, and invoices, all with complete transparency.\n- Integration of Agency's specific documents completed by transferees with PIV card (Personal Identity Verification smart card) authentication of a digital signature.\n- All aspects of the system are digital and accomplished online by Agency staff and relocating employees. VEN assists Agencies on complying with the Paper Reduction Act and Green Initiatives.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "securitycompliance@projecthosts.com", "website": "https://relomw.com/", "uei": "", "small_business": true, "business_categories": [ "Customer Service", "Data Management", "Finance", "Human Resources", "Operations Management", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1915765924", "name": "Repario", "cloud_service_provider": "Repario", "cloud_service_offering": "Repario Government Solutions (RGS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Repario%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-11-10T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-04-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2021-07-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2020-11-10T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2021-04-20T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2021-07-27T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-07-27T20:00:00.000Z", "annual_assessment": "2011-07-23T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Deposit Insurance Corporation" ], "agency_reuse": [ "" ], "service_description": "The Repario Government Solutions (RGS) system is of the type “software as a service (SaaS)”. The system is located in the Amazon Web Services, FedRAMP High authorized Gov cloud. The environment consists of windows virtual servers, serving as web, database application, continuous monitoring and encrypted storage servers with Linux virtual servers providing secure gateway, RADIUS and vulnerability scanning. The RGS system also leverages multiple FedRamp Authorized AWS services.\r\n\r\nThe system offers government agencies the ability to securely upload eDiscovery data via two FedRAMP authorized services: AWS Snowball, for large data uploads and AWS Transfer Family for small to medium data uploads. . Once uploaded, the system provides an encrypted web-based interface and secured by multi-factor authentication, which gives the agency representative access to eDiscovery tools provided by Relativity to securely manage and process their data.\r\n\r\nRGS is delivered as a Software as a Service offering using a multi-tenant Government-only cloud computing environment. It is available to federal, state, local, and tribal governments.", "fedramp_msg": "N/A", "sales_email": "salessupport@repariodata.com", "security_email": "ReparioPrivacyandSecurity@repariodata.com", "website": "https://repariodata.com/", "uei": "KC7YXS1GY7F4", "small_business": true, "business_categories": [ "Analytics", "Content Management System (CMS)", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Legal & Policy", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1931476240", "name": "Rescale", "cloud_service_provider": "Rescale", "cloud_service_offering": "Rescale Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Rescale%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-11-02T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-11-02T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-01-31T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-11-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-11-02T20:00:00.000Z", "cert_date": "2022-01-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-01-31T20:00:00.000Z", "annual_assessment": "2011-11-02T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy", "United States Geological Survey" ], "agency_reuse": [ "" ], "service_description": "Rescale advances innovation through a mission-ready digital engineering platform for new capability development and R&D that integrates cloud high performance computing resources, intelligent data management tools, and applied AI to accelerate modeling and simulation.\r\n\r\nRescale provides a secure and compliant platform for modernizing legacy systems and optimizing resources. The service offers intelligent automation and scalable compute infrastructure, enabling users to meet demands for speed and usability. \r\n\r\nKey platform capabilities for the public sector:\r\n\r\n●\tMulti-cloud high performance computing (HPC), data, and AI services: On-demand access to the latest computing architectures—CPUs, GPUs, storage, and networking—with automated optimization for cost, speed, and performance.\r\n\r\n●\tPre-integrated ecosystem of 1,250+ engineering, simulation, and AI applications: Supporting commercial, open-source, government-developed, and bring-your-own software—delivered securely with end-to-end data integration.\r\n\r\n●\tApplied AI and generative capabilities: Integrated into modeling, simulation, and R&D workflows to accelerate productivity and uncover deeper insights.\r\n\r\n●\tEnd-to-end digital thread support: Flexible platform that connects compute, software, data, and automation—from initial design through production-grade deployment.\r\n\r\n●\tIntelligent workload orchestration: Proprietary intelligence matches workloads to ideal hardware/software combinations, enabling maximum performance with minimum overhead.\r\n\r\n●\tMission-focused user and IT experience: Single-pane-of-glass interface for engineers, scientists, and IT teams to manage resources, configurations, software licensing, and policy enforcement. The intuitive user experience is designed to support user needs, regardless of proficiency with HPC. \r\n\r\nThe Rescale Platform supports a variety of use cases including:\r\n●\tHigh Performance Computing Cloud Bursting & Migration\r\n●\tModeling & Simulation Performance Optimization\r\n●\tGPU Acceleration\r\n●\tFinancial Management & Cost Optimization\r\n●\tSecurity & Compliance Management\r\n●\tApplication & License Management\r\n●\tCloud & Hardware Resource Orchestration\r\n●\tSimulation Data & Workflow Management\r\n●\tComputer-Aided Engineering (CAE)\r\n●\tComputational Fluid Dynamics (CFD)\r\n●\tAI/ML for Engineering & Scientific R&D\r\n\r\nThe Rescale Platform is compliant with the following standards:\r\n\r\n●\tFedRAMP Moderate Authorized\r\n●\tU.S. International Traffic in Arms Regulations (ITAR)\r\n●\tDefense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012\r\n●\tCloud Security Alliance (CSA)\r\n●\tAmerican Institute of CPAs: Service Organization Control (AICPA SOC2 Type 2)", "fedramp_msg": "N/A", "sales_email": "public.sector@rescale.com", "security_email": "fedramp@rescale.com", "website": "https://rescale.com/", "uei": "HPSAC9M3RS44", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Data Management", "Development Tools", "Operations Management", "Research", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2100757165", "name": "Research Dataware LLC", "cloud_service_provider": "Research Dataware LLC", "cloud_service_offering": "IRBNet on GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/IRBNet%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-10-06T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-10-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-03-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-10-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-10-07T20:00:00.000Z", "cert_date": "2023-03-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-03-31T20:00:00.000Z", "annual_assessment": "2011-10-07T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "IRBNet's powerful suite of web-based, Software as a Service (SaaS) research compliance solutions provide electronic submission, collaboration and workflow tools that currently serve thousands of research institutions, compliance boards and sponsors, and hundreds of thousands of users, across IRBNet's National Research Network (commercial) and IRBNet on GovCloud (government).\nIRBNet research compliance solutions support institutions of any size, and currently serve hospitals and hospital networks, universities and academic research institutions, and federal and state agencies. IRBNet’s secure suite of tools is accessible anywhere, anytime, supporting real-time collaboration between investigators and institutions anywhere in the world, helping to streamline compliance workflow, reduce review and approval cycle times, reduce errors and non-compliance, increase staff efficiency, and improve audit trails and record keeping. IRBNet's tools are fully integrated and configurable, and support all institutional compliance offices, investigators and board members, including:\n- Institutional Review Boards (IRB)\n- Institutional Biosafety Committees (IBC)\n- Institutional Animal Care and Use Committees (IACUC)\n- Research & Development Committees\n- Radiation Safety Committees\n- Scientific Review Committees\n- Conflict of Interest (COI) and other specialty committees\n\nIRBNet provides the following core features to support local Agency mission needs and critical business functions, supporting compliance boards and researchers throughout the entire lifecycle of the research review and compliance process:\n- Project assembly, documentation and team collaboration\n- Electronic submissions\n- Routing, tracking and alerting tools for committee member review\n- Tracking of committee member comments and pre-reviews prior to meetings\n- Cross-institutional collaboration and communication tools\n- Custom Form Wizards to improve guidance and document quality (application forms, etc.)\n- Tracking of researcher and committee training and credentials\n- Multi-Site studies\n- Instant notification of study approval and other key events\n- Automated continuing review alerts\n- Quality control and pre-review tools\n- Agenda and Minutes Builders\n- Personalized Approval Letter and Correspondence Wizards\n- Document version control and history\n- Multi-board workflow management\n- Audit and oversight functions\n\nIRBNet also provides the following optional integration features to meet Agency mission needs:\n- IRBNet provides an optional connection to the WCG IRB for commercial IRB review services. This service allows Agencies to seamlessly send research studies for commercial IRB approval, and receive back approval documentation such as Approval Letters, while maintaining oversight of the complete research portfolio (both internal and external).\n- IRBNet provides an optional connection to external training sources, such as Agency training systems or the national CITI program, to pull training information for researchers and committee members so that this information is readily available during compliance and review processes.\n- IRBNet provides an optional Single Sign-On federated authentication capability for Agency authentication frameworks such as PIV/CAC, to provide seamless access to Agency users.\n\nIRBNet on GovCloud is the Government Community Cloud offering of the IRBNet SaaS. IRBNet on GovCloud is hosted in multiple availability zones within the Amazon Web Services (AWS) FedRAMP-authorized GovCloud Infrastructure as a Service / Platform as a Service (IaaS/PaaS). All AWS GovCloud data centers are within the Continental United States (CONUS).\n\nIRBNet on GovCloud is managed by Research Dataware LLC., an operating unit of WCG Clinical, Inc. (WCG). WCG is the world’s leading provider of solutions that measurably improve the quality and efficiency of clinical research.", "fedramp_msg": "N/A", "sales_email": "GovCloud@irbnet.org", "security_email": "fedramp@irbnet.org", "website": "https://gov.irbnet.org/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2209555576", "name": "RingMD USA Inc.", "cloud_service_provider": "RingMD USA Inc.", "cloud_service_offering": "RingMD Telemedicine", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/RingMD%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-10-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-12-02T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-06-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-10-28T20:00:00.000Z", "cert_date": "2025-12-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Indian Health Services", "fedramp_auth": "2025-12-02T20:00:00.000Z", "annual_assessment": "2011-10-27T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Indian Health Services" ], "agency_reuse": [ "" ], "service_description": "RingMD Telemedicine delivers a secure, cloud-based telehealth platform designed for federal use cases. The system enables video consultations between providers and patients, as well as provider-to-provider communications, with integrated screen sharing, secure in-app messaging, and file exchange capabilities. The platform supports integration with electronic prescribing (eRx) systems, electronic health records (EHR), electronic medical records (EMR), and laboratory information systems (LIS). It can be configured to align with agency-specific clinical workflows and branding requirements.\r\n\r\nRingMD includes built-in analytics and reporting capabilities to support operational oversight, utilization tracking, and performance evaluation. Optional AI-enhanced modules are available, including screening tools and clinical decision support features, developed in accordance with federal privacy and security standards.", "fedramp_msg": "A federal agency has granted an Authorization to Operate (ATO) for this Cloud Service Offering (CSO). FedRAMP has placed the package in our review queue. FedRAMP has posted information about our review capabilities at [https://www.fedramp.gov/shutdown/].", "sales_email": "fedramp@ring.md", "security_email": "security@ring.md", "website": "https://www.ring.md/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Communication", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Data Management", "Education & Training", "Health & Wellness", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2612446381", "name": "Ripcord", "cloud_service_provider": "Ripcord", "cloud_service_offering": "Canopy", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Canopy%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-03-06T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-03-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Canopy is a Software-as-a-Service (SaaS) document intelligence platform provided by Ripcord in a single-tenant Government-only cloud environment. The service enables federal agencies to digitize, process, classify, and extract data from structured and unstructured documents at scale.\n\nCanopy integrates robotics-enabled document ingestion, machine learning and large language model-based data extraction, and workflow orchestration to automate document processing pipelines. The platform supports document classification, OCR/ICR processing, metadata extraction, validation workflows, and delivery of structured outputs to downstream agency systems.\n\nThe system operates within a FedRAMP High authorization boundary hosted in Google Cloud Platform and leverages stackArmor’s Armory General Support System for security services including monitoring, configuration management, and continuous monitoring. Authentication is provided through Okta Government High Cloud with multi-factor authentication.\n\nCanopy provides secure ingestion, processing, validation, and export of document data while maintaining auditability, chain-of-custody tracking, and integration with agency systems using standard data formats such as XML, JSON, and PDF.", "fedramp_msg": "", "sales_email": "sales@vastec.com", "security_email": "security@vastec.com", "website": "https://www.ripcord.com/platform", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2310239588", "name": "Riverbed Technology", "cloud_service_provider": "Riverbed Technology", "cloud_service_offering": "Riverbed Platform for Government (RP4G)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Riverbed%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-02-27T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-04-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-05-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-02-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-04-13T20:00:00.000Z", "cert_date": "2026-05-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-05-19T20:00:00.000Z", "annual_assessment": "2011-03-31T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency" ], "agency_reuse": [ "" ], "service_description": "Riverbed Platform for Government (RP4G) is delivered as a Software as a Service (SaaS) offering within a secure, multi-tenant, government-only cloud environment and is designed to provide visibility into network performance, application behavior, and end-user experience across on-premises, cloud, and hybrid infrastructures.\n\nThe platform integrates network performance monitoring, application observability, and digital experience monitoring capabilities into a unified architecture. The platform specializes in collecting and analyzing telemetry from network devices, applications, endpoints, servers, and cloud resources to support centralized dashboards, reporting, and intelligent analytics. It enables IT operations teams to identify performance degradation, investigate service disruptions, and conduct root-cause analysis, supporting reduced mean time to detection and resolution.\n\nThe SaaS environment incorporates role-based access controls, data segregation, encryption in transit and at rest, and audit logging to align with government security and compliance requirements, while supporting scalable data ingestion, analysis, and operational oversight for distributed environments.", "fedramp_msg": "", "sales_email": "sales.admin@riverbed.com", "security_email": "InfoSec@riverbed.com", "website": "https://www.riverbed.com/solutions/platform-for-government/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Mobile Device Management (MDM)", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2204842850", "name": "Rosalind, Inc.", "cloud_service_provider": "Rosalind, Inc.", "cloud_service_offering": "ROSALIND", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Rosalind%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-03-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-09-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-07-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-03-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-09-12T20:00:00.000Z", "cert_date": "2023-07-07T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-07-07T20:00:00.000Z", "annual_assessment": "2011-09-12T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "ROSALIND is a multi-tenant SaaS solution for bioinformatics analyses, COVID diagnostic monitoring, knowledge management, and scientific collaboration. As a cloud-based software platform, ROSALIND provides a web interface for scientists and researchers to securely analyze and interpret datasets. Rosalind provides two web-based solutions, ROSALIND DxM and ROSALIND Research. Both operate in a visual manner and do not require command-line programming, cloud infrastructure setup, or bioinformatics pipeline development.\n\n- ROSALIND DxM provides real-time SARS-CoV-2 variant surveillance and diagnostic monitoring incorporating international viral sequence data. DxM also includes a comprehensive BioBank of SARS-CoV-2 specimens with sample tracking and workflow management for test panel creation, panel blinding, and results submission across participating labs and organizations.\n- ROSALIND Research provides visual analysis, interpretation, and cloud-based data sharing of genomic datasets produced with Next Generation Sequencing (NGS), NanoString instruments, and other multi-omic methods. ROSALIND Research features analysis pipelines for gene expression and gene regulation studies, including Single-Cell RNA-seq, bulk RNA-seq, miRNA-seq, ATAC-seq, ChIP-seq, and Proteomics.\n\nRosalind uses knowledge graphs to securely store institutional data as searchable libraries while enabling permissions-based data sharing between authorized users and across institutions.", "fedramp_msg": "This cloud service offering lacks continuous monitoring oversight from FedRAMP or any federal agency. Agencies considering using this service should review the Cloud Service Provider's security documentation in their secure repository, directly coordinate with the CSP, and conduct their own evaluation before making an Authority to Operate (ATO) decision. Once an agency issues an ATO, agencies should submit their ATO letters to FedRAMP at ato-letter@fedramp.gov.", "sales_email": "", "security_email": "fedramp@rosalind.bio", "website": "https://www.rosalind.bio/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2211452029", "name": "RQI Partners LLC", "cloud_service_provider": "RQI Partners LLC", "cloud_service_offering": "RQI1Stop", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/RQI%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-07-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-03-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-07-25T20:00:00.000Z", "cert_date": "2026-03-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-03-09T20:00:00.000Z", "annual_assessment": "2011-03-28T04:00:00.000Z", "independent_assessor": "ControlCase", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "4", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "RQI Partners, a partnership created by the American Heart Association® (AHA®) and Laerdal Medical, exists to deliver modernized CPR training based on the latest AHA guidelines.\nRQI1stop is delivered as a SaaS offering using a multi-tenant Public Cloud computing environment. It is available to the public, federal, state, local, and tribal governments, as well as research institutions, federal contractors, government contractors etc.,", "fedramp_msg": "A federal agency has granted an Authorization to Operate (ATO) for this Cloud Service Offering (CSO). FedRAMP has placed the package in our review queue. FedRAMP has posted information about our review capabilities at [https://www.fedramp.gov/shutdown/].", "sales_email": "scott.hunter@rqipartners.com", "security_email": "nataraj.kr@laerdal.com", "website": "https://rqipartners.com/", "uei": "J8YVVD8BAW74", "small_business": false, "business_categories": [ "Education & Training", "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "AGENCYAMAZONEW", "F1506096710", "FR1812058188", "FR1814276801", "FR1918740338", "FR2023864279" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2102652499", "name": "RSA Security LLC", "cloud_service_provider": "RSA Security LLC", "cloud_service_offering": "RSA® ID Plus for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/RSA%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-02-02T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2021-12-02T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2022-04-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 7, "ready_status": "Not Active", "ready_date": "2021-02-02T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2021-12-02T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2022-04-26T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-04-26T20:00:00.000Z", "annual_assessment": "2011-02-26T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2402468053", "csp": "Darktrace Federal Inc.", "cso": "Cyber AI Mission Defense and Email Protection", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1303191948", "csp": "MAXIMUS Inc.", "cso": "MAXIMUS Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134455708", "csp": "Nucleus Security, Inc", "cso": "Nucleus for Government (NucleusGov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "National Heart, Lung, and Blood Institute" ], "agency_reuse": [ "22-005-06", "22-005-09", "22-007", "22-022-01", "22-037", "22-044", "22-062" ], "service_description": "RSA® ID Plus for Government, enables the U.S. Federal Government and the public sector organizations to digitally transform, embrace the benefits of modern technologies, and operate nimbly with highly secure and convenient cloud-based identity assurance. Building on the enterprise-grade security that is the hallmark of all RSA® ID Plus for Government solutions, RSA® ID Plus for Government meets the high standards required by the FedRAMP authorization process and is a key component of Zero Trust initiatives. When coupled with RSA's on-prem offering, Federal Agencies can quickly and cost-effectively move to the cloud at their own pace, leveraging existing infrastructure and authentication methods.", "fedramp_msg": "N/A", "sales_email": "federal@rsa.com", "security_email": "sro-fr@rsa.com", "website": "https://www.rsa.com/solutions/public-sector/", "uei": "GJJ4XJXE9VX8", "small_business": false, "business_categories": [ "Collaboration", "Customer Relations Management (CRM)", "Cybersecurity & Risk Management", "Human Resources", "Mobile Device Management (MDM)", "Network Management", "Operations Management", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2234256499", "name": "Rubrik", "cloud_service_provider": "Rubrik", "cloud_service_offering": "Rubrik Security Cloud - Government (RSC-G)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Rubrik%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-05-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-01-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-12-10T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-05-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-01-17T20:00:00.000Z", "cert_date": "2024-12-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Nuclear Security Administration", "fedramp_auth": "2024-12-10T20:00:00.000Z", "annual_assessment": "2011-01-17T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Deposit Insurance Corporation", "Federal Student Aid", "National Nuclear Security Administration", "National Nuclear Security Administration / Lawrence Livermore National Laboratory" ], "agency_reuse": [ "" ], "service_description": "Rubrik Security Cloud Government (RSC-G) is a cyber resilience and data security platform designed for federal, state, and local governments, and educational institutions to secure data across enterprise, cloud, and SaaS applications. The service is hosted in a dedicated, U.S. based sovereign cloud instance and is built on Zero Trust Data Security principles. The platform utilizes a purpose built file system that is inherently immutable, safeguarding data integrity and availability through air gapped and access controlled backups.\n\nThe platform integrates data protection with advanced cybersecurity capabilities, allowing agencies to proactively reduce risk by identifying sensitive data exposure and detecting anomalous activity via machine learning engines. RSC-G provides centralized management for data residing in on premises data centers, cloud environments, and SaaS applications through automated discovery and policy driven protection.\n\nIn the event of a cyberattack, RSC-G enables rapid mission continuity by providing automated threat containment and surgical recovery of affected applications and data. These capabilities are designed to eliminate the risk of malware reinfection during the restoration process. The service includes specialized tools to protect large scale unstructured data sets and the restoration of identity provider objects, ensuring the integrity of the identity control plane and overall operational continuity.\n\n\nAvailable services as part of Rubrik Security Cloud - Government\nData Protection & Backup Services\n● Virtualization: VMware vSphere, VMware Cloud Director (VCD), Microsoft Hyper-V, Nutanix AHV, Proxmox\n● Containers: K8s / KubeVirt, OpenShift / OpenShift Virtualization\n● Databases: Microsoft SQL Server, Oracle Database, SAP HANA, PostgreSQL, MySQL, MongoDB, IBM DB2\n● Operating Systems: Linux (RHEL, CentOS, Ubuntu), Microsoft Windows Server\n● Unstructured Data: NAS (NFS/SMB), Managed File Shares\nData Security & Recovery Operations\n● Threat Monitoring: Anomaly Detection and Ransomware Investigation\n● Sensitive Data Discovery: Data Classification and Exposure Analysis\n● Orchestrated Recovery: Blueprint based recovery for complex application stacks\nCloud and SaaS Resilience Services\n● Cloud Native Workloads: Amazon EC2, Amazon EBS, Amazon RDS, Amazon S3, Azure VM, Azure SQL, Azure Blob, GCP VM & Volumes\n● SaaS Platforms: Data protection for Salesforce and Microsoft 365 (Exchange, OneDrive, SharePoint, Teams)\nEnhanced Resilience and Archival Services\n● Rubrik Cloud Vault: Provides a managed, isolated cloud repository for offsite data storage and logical air gapping.\n● Identity Recovery: Provides backup and point in time restoration for Microsoft Active Directory and Microsoft EntraID objects to maintain the integrity of identity and access management systems.", "fedramp_msg": "N/A", "sales_email": "rscgsales@rubrik.com", "security_email": "rscgsoc@rubrik.com", "website": "https://www.rubrik.com/", "uei": "HHKMMMELQG55", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2001938710A", "name": "SailPoint Technologies, Inc.", "cloud_service_provider": "SailPoint Technologies, Inc.", "cloud_service_offering": "SailPoint Identity Security Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SailPoint%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-05-19T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-05-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-06-05T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 7, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-05-19T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-05-09T20:00:00.000Z", "cert_date": "2024-06-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Office of Justice Programs", "fedramp_auth": "2024-06-05T20:00:00.000Z", "annual_assessment": "2011-07-20T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2518163100", "csp": "Cisco", "cso": "Spaces for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1404304159", "csp": "DataBank Holdings", "cso": "FedRAMP Compliant CloudPlus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Transportation", "General Services Administration", "Government National Mortgage Association", "Office of Justice Programs", "Tennessee Valley Authority" ], "agency_reuse": [ "22-002-04", "22-019", "22-035" ], "service_description": "SailPoint Identity Security Cloud is a SaaS-based, multi-tenant suite that provides complete visibility and control over access to applications, systems, and sensitive data. SailPoint Identity Security Cloud consists of SailPoints IdentityNow, Cloud Infrastructure Entitlement Management, and AI-driven identity offerings.", "fedramp_msg": "N/A", "sales_email": "jim.russell@sailpoint.com", "security_email": "fedramp@sailpoint.com", "website": "https://www.sailpoint.com/identity-security-cloud/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "Cloud Infrastructure Entitlement Management", "Data Access Security", "Machine Identity Security", "Non-Employee Risk Management", "Password Management" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2003061248", "name": "Salesforce", "cloud_service_provider": "Salesforce", "cloud_service_offering": "Salesforce Government Cloud Plus", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Salesforce%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-11-08T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2020-02-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2020-05-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 66, "reuse": 320, "ready_status": "Not Active", "ready_date": "2019-11-08T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2020-02-13T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2020-05-27T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-05-27T20:00:00.000Z", "annual_assessment": "2011-05-18T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2307441316", "csp": "Absolute Security", "cso": "Absolute Secure Endpoint Product Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2106555313", "csp": "AchieveIt Online, LLC", "cso": "AchieveIt", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2031936863", "csp": "Armis Federal LLC", "cso": "Armis FedRAMP Edition (AFE)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2427142353", "csp": "AutoRABIT Holding, Inc.", "cso": "AutoRABIT for Public Sector - CodeScan, Guard, & ARMOR", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2025827270", "csp": "AvePoint Inc.", "cso": "AvePoint Online Services for US Government (AOS-UG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2333756970", "csp": "Axiad IDS Inc.", "cso": "Axiad Conductor", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2401047002", "csp": "Axonius Federal Systems", "cso": "Axonius Asset Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421035110", "csp": "Cellebrite", "cso": "Cellebrite Government Cloud (CGC)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2315535023", "csp": "Cisco Systems Inc.", "cso": "Cisco Meraki US Government Region", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2309544938", "csp": "Cloudera Government Solutions, Inc", "cso": "Cloudera for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2306445868", "csp": "Cohesity", "cso": "Cohesity Cloud Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2200507410", "csp": "Copado", "cso": "Copado GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2122140784", "csp": "Covergent Solutions Inc dba Exiger Government Solutions (EGS)", "cso": "Exiger Federal Cloud (EFC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1807853629A", "csp": "CrowdStrike, Inc.", "cso": "CrowdStrike Falcon Platform for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2324740262", "csp": "Databricks, Inc.", "cso": "Databricks on AWS GovCloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2432940371", "csp": "Docebo", "cso": "Docebo Learning Platform for Gov (DCBO-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1609267945", "csp": "DocuSign", "cso": "Docusign - IAM eSignature", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603307884", "csp": "e-Builder, A Trimble Company", "cso": "Trimble Unity Construct Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2016962740", "csp": "Eightfold AI Inc.", "cso": "Eightfold Talent Intelligence Platform (TIP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1707156421", "csp": "Envisage Technologies LLC", "cso": "Acadis Readiness Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2510664395", "csp": "ExtraHop Networks", "cso": "ExtraHop RevealX Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2131766015", "csp": "Genesys", "cso": "Genesys Cloud CX", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2524349489", "csp": "IBM", "cso": "IBM Data Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2417469779", "csp": "IBM", "cso": "IBM Envizi ESG Reporting", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2230244107", "csp": "Illumio, Inc.", "cso": "Illumio Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029331613", "csp": "Informatica LLC", "cso": "Informatica Intelligent Cloud Services (IICS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2027958176", "csp": "Issio Solutions, Inc.", "cso": "Issio Information System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102758152", "csp": "Juniper Networks", "cso": "Juniper Mist", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2428168490", "csp": "LogicMonitor", "cso": "LM for Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1303191948", "csp": "MAXIMUS Inc.", "cso": "MAXIMUS Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2122150307", "csp": "MongoDB", "cso": "MongoDB Atlas for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2105946715", "csp": "Netskope, Inc.", "cso": "Netskope NewEdge Government.", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2131856836", "csp": "Okta", "cso": "Okta IDaaS Government High Cloud (GHC)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2301844932", "csp": "Orca Security", "cso": "Orca Cloud Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2422240916", "csp": "Rapid7", "cso": "InsightGovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2418039495", "csp": "ScienceLogic, Inc.", "cso": "ScienceLogic Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919071020A", "csp": "SentinelOne", "cso": "SentinelOne Singularity Platform High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2132958724", "csp": "UiPath", "cso": "Automation Cloud Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2219763604", "csp": "Zscaler, Inc.", "cso": "Zscaler Private Access - Government (Zero Trust Exchange - VPN Replacement)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1720454205", "csp": "Zscaler, Inc.", "cso": "Zscaler Internet Access - Government (Secure Web Gateway - vTIC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families", "Brookhaven Site Office", "Bureau of Engraving and Printing", "Bureau of Indian Affairs", "Bureau of Land Management", "Bureau of Trust Funds Administration", "Bureau of the Fiscal Service", "Centers for Disease Control and Prevention", "Centers for Medicare & Medicaid Services", "Civil Division", "Consumer Financial Protection Bureau", "Department of Agriculture", "Department of Energy", "Department of Health and Human Services", "Department of Labor", "Department of State", "Department of Transportation", "Department of Veterans Affairs", "Department of the Interior", "Department of the Navy", "Department of the Treasury", "Environmental Protection Agency", "Federal Aviation Administration", "Federal Deposit Insurance Corporation", "Federal Emergency Management Agency", "Federal Highway Administration", "Federal Retirement Thrift Investment Board", "Food and Drug Administration", "General Services Administration", "Golden Field Office", "Government National Mortgage Association", "Health Resources and Services Administration", "Immigration and Customs Enforcement", "Interior Business Center", "Internal Revenue Service", "International Trade Administration", "National Aeronautics and Space Administration", "National Credit Union Administration", "National Heart, Lung, and Blood Institute", "National Institute of Standards and Technology", "National Mediation Board", "National Nuclear Security Administration / Energy Efficiency and Renewable Energy", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "National Oceanic and Atmospheric Administration", "National Park Service", "National Science Foundation", "National Telecommunications and Information Administration", "Office of Natural Resources Revenue", "Office of Personnel Management", "Other Executive Branch Subagency", "Other Federal Entity", "Social Security Administration", "United States Agency for International Development", "United States Census Bureau", "United States International Trade Commission", "United States Patent and Trademark Office", "United States Securities and Exchange Commission" ], "agency_reuse": [ "" ], "service_description": "Salesforce is the %231 CRM, enabling public sector organizations to modernize service.\n\nSalesforce helps public sector organizations to transform digital service delivery, achieve faster time to value, and improve mission success with automation tools, purpose-built solutions, and smart insights that help move the mission forward - all within a compliant cloud environment. Government Cloud Plus is a dedicated instance of Salesforce’s industry leading Platform as a Service (PaaS) and Software as a Service (SaaS) applications, enabling organizations to scale and secure apps on an authorized government cloud so they can accelerate mission success. Government Cloud Plus has been designed to provide high levels of performance, reliability, and security.\n\nLearn more at Salesforce.com/Government\n\nA list of current in-scope Salesforce products included in the authorization boundary is available at:\nhttps://help.salesforce.com/s/articleView?id=000384503&type=1", "fedramp_msg": "Salesforce Government Cloud Plus previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "public.sector.compliance@salesforce.com", "website": "https://www.salesforce.com/solutions/industries/government/overview/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Customer Service", "Finance", "Health & Wellness", "Human Resources", "Marketing & Sales" ], "service_last_90": [ "IT Service Management (ITSM) Configuration Management Database (CMDB) & Discovery Platform" ], "all_others": [ "Agentforce", "Applications - including Lightning Force 100, Lightning Platform Plus, and Lightning Platform Starter", "Automotive Cloud", "Backup & Recover Next", "CRM Analytics (formerly Tableau CRM and Einstein Analytics) - including Analytics Platform, Einstein Discovery – Analyst, Einstein Discovery – User, Sales Analytics App, and Service Analytics App", "Chatter / Chatter Answers", "Communications Cloud", "Content Management System (CMS)", "Customer Relationship Management (CRM) - including Lightning Platform (including Force.com), Sales Cloud, and Service Cloud", "Data Cloud", "Data Detect", "Energy & Utilities Cloud", "Experience Cloud (formerly Community Cloud) - including Experience Cloud, Customer Community, Customer Community Plus, and Partner Community", "Feedback Management", "Flow Orchestration", "Grants Management", "Home Health", "Ideas", "Industry Cloud - including Health Cloud, Financial Services Cloud, Manufacturing Cloud, and Education Cloud (Admissions Connect, Student Success Hub, Education Data Architecture)", "Knowledge", "Lightning Console", "Live Agent", "Loyalty Management", "Marketing Cloud Growth & Advanced", "Mobile App Plus", "Net Zero Cloud (formerly Sustainability Cloud)", "Platform Events & Change Data Capture", "Portals / Service Cloud / Customer / Partner", "Privacy Center", "Public Sector Solutions (Public Sector Foundation) - including Public Sector Solutions; OmniStudio; Emergency Program Management; Business Rules Engine; CRM Analytics for Public Sector Solutions; Customer Community for Public Sector; Employee Experience for Public Sector; WDC (Formerly Work.com); Access to Productivity managed packages like Employee Workspace, Employee Concierge, HR Service Center, Employee Health Verification, and Employee Concierge Bot; Public Sector Application Forms; Composable Case Management; and Benefit Management", "Salesforce APIs and related features (Salesforce Connect / Files Connect)", "Salesforce Field Service (Dispatcher, Technician, Contractor, Mobile App)", "Salesforce Mobile (iOS/Android)", "Salesforce Personalization", "Salesforce Private Connect", "Salesforce Shield (Platform Encryption, Field Audit Trail, and Event Monitoring)", "Salesforce Surveys", "Scale Center and Test", "Security Center", "Service Cloud Messaging", "Service Cloud Voice", "Tableau Next", "Virtual Care", "Workplace Command Center + Employee Wellness Check" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2425742814", "name": "San Luis Aviation, Inc.", "cloud_service_provider": "San Luis Aviation, Inc.", "cloud_service_offering": "ESChat", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ESChat%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-08-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-06-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-08-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-08-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-06-16T20:00:00.000Z", "cert_date": "2025-08-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Drug Enforcement Administration", "fedramp_auth": "2025-08-01T20:00:00.000Z", "annual_assessment": "2011-06-13T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Drug Enforcement Administration" ], "agency_reuse": [ "" ], "service_description": "ESChat for Government is a hardened version of the ESChat broadband communication, collaboration, and interoperability platform. ESChat is a Secure Broadband Push-to-Talk (PTT) communication system that facilitates secure inter-agency PTT communication, multimedia messaging, and a Common Operating Picture (COP) within and between agencies for mutual-aid or tactical purposes. ESChat for Government also supports external interfaces including Land Mobile Radio (LMR), dispatch consoles, and logging recorders\r\n\r\nThere are three main components that make up this offering:\r\n\r\n- The ESChat portal is a browser-based application which allows customers to manage all aspects of their network including managing accounts, devices, groups, integrations,live and historical location display, etc.\r\n- The ESChat clients are mobile applications (Android, iOS, Linux), Land Mobile Radio (LMR) gateways, and PC Client applications that communicate using the ESChat protocol. The ESChat clients are the functional endpoints that the users of the system interact with to perform Push-to-Talk voice and multimedia messaging communications with one another.\r\n- The ESChat back-end services provide ESChat users with inter-carrier, inter-agency, inter-system, and inter-vendor interoperability all managed and controlled within the authorization boundary, ensuring ESChat is the only solution needed to provide reliable, secure, and interoperable communications.", "fedramp_msg": "N/A", "sales_email": "sales@eschat.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://eschat.com/", "uei": "PNR2MPVHKL13", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Law Enforcement" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2425742814A", "name": "San Luis Aviation, Inc.", "cloud_service_provider": "San Luis Aviation, Inc.", "cloud_service_offering": "ESChat - High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ESChat%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-04-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "ESChat for Government is a hardened version of the ESChat broadband communication, collaboration, and interoperability platform. ESChat is a Secure Broadband Push-to-Talk (PTT) communication system that facilitates secure inter-agency PTT communication, multimedia messaging, and a Common Operating Picture (COP) within and between agencies for mutual-aid or tactical purposes. ESChat for Government also supports external interfaces including Land Mobile Radio (LMR), dispatch consoles, and logging recorders\n\nThere are three main components that make up this offering:\n\n- The ESChat portal is a browser-based application which allows customers to manage all aspects of their network including managing accounts, devices, groups, integrations,live and historical location display, etc.\n- The ESChat clients are mobile applications (Android, iOS, Linux), Land Mobile Radio (LMR) gateways, and PC Client applications that communicate using the ESChat protocol. The ESChat clients are the functional endpoints that the users of the system interact with to perform Push-to-Talk voice and multimedia messaging communications with one another.\n- The ESChat back-end services provide ESChat users with inter-carrier, inter-agency, inter-system, and inter-vendor interoperability all managed and controlled within the authorization boundary, ensuring ESChat is the only solution needed to provide reliable, secure, and interoperable communications.", "fedramp_msg": "", "sales_email": "sales@eschat.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://eschat.com/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Law Enforcement" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2531940362", "name": "Sand Solutions Limited Co.", "cloud_service_provider": "Sand Solutions Limited Co.", "cloud_service_offering": "Sand Solutions Government Cloud (SGC2)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Sand%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-09-16T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "IaaS", "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "SGC2 delivers Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS) through dedicated Virtual Private Clouds (VPCs) provisioned for each agency customer. These VPCs allow agencies to host multiple application workloads side-by-side on Virtual Machines (VMs) while ensuring strict segmentation of both performance and data.\n\nEach VPC is designed with a comprehensive suite of managed services—including system, networking, security, application, database, business continuity planning, and continuous monitoring. By embedding managed services, SGC2 reduces IT overhead, enhances application performance, and enables agencies and contractors to run regulated workloads without the complexity of managing the platform and application patching, or technical deployment tasks. We can also provision bare-metal servers in our colocation racks for licensing and more intense workloads.\n\nSGC2 operates exclusively from U.S. colocation data centers that hold their own FedRAMP Authorization. In addition, SGC2 has been independently assessed by a 3PAO and designated FedRAMP Moderate Equivalent with a completed Security Assessment Report (SAR) and an active Continuous Monitoring (ConMon) program. This full assessment provides the assurance of a validated FedRAMP Moderate Equivalent platform, enabling customers to inherit controls and streamline their own DIBCAC compliance while allowing agencies to accelerate sponsorship and shorten the path to ATOs for hosted workloads.", "fedramp_msg": "", "sales_email": "fedramp@sgc2.com", "security_email": "fedramp@sgc2.com", "website": "https://www.sandsolutionslimited.com/trust/fedramp/", "uei": "EEMLJA8GSL75", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Network Management", "Operations Management", "Storage", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR260215856", "name": "SandboxAQ", "cloud_service_provider": "SandboxAQ", "cloud_service_offering": "AQtive Guard", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Sandbox%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-11-13T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-11-13T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "AQtive Guard is a cryptography management and inventory tool that is delivered as SaaS offering using a multi-tenant Government-Only cloud computing environment. It is available to federal, state, local, and tribal governments, as well as federal contractors and government contractors with a documented need to utilize FedRAMP authorized solutions to host US federal data.", "fedramp_msg": "", "sales_email": "sales@sandboxaq.com", "security_email": "security@sandboxaq.com", "website": "https://aqtiveguard.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Development Tools", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1719841002", "name": "SAP National Security Services Inc. (SAP NS2)", "cloud_service_provider": "SAP National Security Services Inc. (SAP NS2)", "cloud_service_offering": "SAP NS2 Cloud Intelligent Enterprise", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SAPNS2%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-04-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2017-11-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 25, "reuse": 24, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2017-04-13T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2017-11-13T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2017-11-13T20:00:00.000Z", "annual_assessment": "2011-04-01T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "Centers for Medicare & Medicaid Services", "Commodity Futures Trading Commission", "Corporation for National & Community Service", "Department of Agriculture", "Department of Health and Human Services", "Department of Justice", "Department of Labor", "Department of Veterans Affairs", "Federal Aviation Administration", "Federal Bureau of Prisons", "Federal Communications Commission", "Federal Emergency Management Agency", "Internal Revenue Service", "Los Alamos National Laboratory", "National Aeronautics and Space Administration", "National Nuclear Security Administration / Kansas City Field Office", "National Nuclear Security Administration / Nevada Field Office", "National Science Foundation", "Office of the Comptroller of the Currency", "Pretrial Services Agency", "Strategic Petroleum Reserve", "Tennessee Valley Authority", "United States International Trade Commission" ], "agency_reuse": [ "" ], "service_description": "Disclaimer: FedRAMP does not review or endorse vendor-submitted content. Vendors are responsible for accuracy of product descriptions, provided services, and contact information.\r\n\r\nThe DISA Provisional Authorization (PA) for the Unclassified, DoD Cloud Intelligent Enterprise by SAP National Security Services (NS2), Federal Government Community dated 17 March 2026 includes the SAP NS2 Commercially Regulated Environment (CRE) and the SAP NS2 Cloud Intelligent Enterprise (CIE) at Impact Level 2 (IL2)\r\nThe SAP NS2 Cloud Intelligent Enterprise (CIE) is a secure, U.S.-based cloud environment enables federal civilian agencies to deploy and operate mission-critical SAP solutions within a compliant, automated cloud framework.\r\nThe SAP NS2 CIE environment has the following suite of SAP cloud solutions available: SAP S/4HANA Private Cloud Edition (PCE), SAP Analytics Cloud (SAC), SAP Business Technology Platform (BTP), SAP SuccessFactors, SAP Employee Central Payroll, PCE Sidecar and HANA Cloud. \r\nThe SAP NS2 Commercial Regulated Environment (CRE) is a secure, U.S.-based cloud environment designed to support Department of War (DoW) contractors including Aerospace & Defense customers. SAP NS2 CRE enables customers to run mission-critical SAP workloads with compliance, resilience, and performance at the core. \r\nThe SAP NS2 CRE environment hosts the following suite of SAP cloud solutions: SAP S/4HANA Cloud Private Edition, SAP HANA Cloud, SAP Analytics Cloud, SAP Business Technology Platform, SAP SuccessFactors, SAP Employee Central Payroll, SAP Integrated Business Planning (IBP), PCE Sidecar and SAP Fieldglass.\r\n---\r\nAll SAP NS2 cloud environments are operated exclusively by U.S. citizens with operations and data restricted to U.S. soil. Environments support both Software-as-a-Service (SaaS) and Platform-as-a-Service (PaaS) solutions with built-in intelligence, seamless integration, and consistent user experience across applications.\r\nEnvironments are designed to meet stringent U.S. security and compliance requirements. Solutions enable agencies and regulated organizations to modernize operations, strengthen resilience, and drive mission success. \r\nSolutions available across SAP NS2 environments:\r\nSAP S/4HANA Private Cloud Edition: A modern, intelligent SAP Cloud ERP solution delivered as a managed cloud service. SAP S/4HANA Cloud Private Edition enables organizations to streamline operations, gain real-time insights, and accelerate digital transformation while maintaining control, security, and customization of critical systems.\r\nSAP Business Technology Platform (SAP BTP): An integrated platform for application development, data management, analytics, and integration. SAP BTP enables organizations to extend and connect SAP and non-SAP applications while accelerating innovation in a secure, compliant environment.\r\nSAP HANA Cloud: A fully managed, in-memory cloud database that supports advanced analytics and application development. SAP HANA Cloud enables real-time data processing, integration, and scalability across hybrid environments.\r\nSAP Analytics Cloud: A unified analytics solution that brings together business intelligence, planning, and predictive analytics in a single platform. It empowers organizations to make faster, data-driven decisions with real-time visibility and AI-driven insights.\r\nSAP SuccessFactors Human Capital Management (HCM): A comprehensive, cloud-based human capital management suite designed to optimize workforce performance and engagement. SAP SuccessFactors supports the full employee lifecycle, from recruiting and onboarding to performance, learning, and workforce analytics, ensuring organizations align talent with mission objectives.\r\nIncludes: Employee Central, Employee Central Payroll, Learning, Performance & Goals, Succession & Development, Compensation, Recruiting, Onboarding, Workforce Planning, and Workforce Analytics.\r\nSAP SuccessFactors Employee Central Payroll delivers a robust, integrated payroll engine with enhanced resilience, compliance with U.S. federal requirements, and secure operations by U.S. citizens.\r\nSAP Integrated Business Planning: A cloud-based supply chain planning solution that enables real-time, data-driven decision-making. SAP IBP integrates sales and operations planning, demand forecasting, supply planning, and inventory optimization to improve forecast accuracy, reduce costs, and enhance service levels.\r\nSAP Fieldglass: A cloud-based vendor management system (VMS) that helps organizations procure, manage, and optimize external workforce and services. SAP Fieldglass increases visibility, compliance, and cost control across contingent labor and services procurement.", "fedramp_msg": "SAP NS2 Cloud Intelligent Enterprise previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "info@sapns2.com", "website": "https://www.sapns2.com/cloud/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1602257856", "name": "SAP National Security Services Inc. (SAP NS2)", "cloud_service_provider": "SAP National Security Services Inc. (SAP NS2)", "cloud_service_offering": "DoD Cloud Intelligent Enterprise – DD-CIE", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SAPNS2%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-10-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-05-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-06-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-10-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-05-08T20:00:00.000Z", "cert_date": "2017-06-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Information Systems Agency", "fedramp_auth": "2017-06-13T20:00:00.000Z", "annual_assessment": "2011-03-18T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency" ], "agency_reuse": [ "" ], "service_description": "Disclaimer: FedRAMP does not review or endorse vendor-submitted content. Vendors are responsible for accuracy of product descriptions, provided services, and contact information.\r\nThe SAP NS2 DoD Cloud Intelligent Enterprise (DDCIE) IL4 is a secure cloud environment purpose-built to meet U.S. Department of War requirements. SAP NS2 DDCIE IL4 supports defense agencies and mission partners with compliant, scalable SAP solutions. All solutions are authorized by DISA at a FedRAMP+ IL4 moderate baseline. \r\nThe SAP NS2 DDCIE IL4 environment hosts the following suite of SAP cloud solutions: SAP S/4HANA Cloud Private Edition, PCE Sidecar, SAP SuccessFactors Human Capital Management, and SAP Integrated Business Planning.\r\n----\r\nSAP NS2 DDCIE is operated exclusively by U.S. citizens with operations and data restricted to U.S. soil. Environments are designed to meet stringent federal security and compliance requirements. Solutions enable agencies and regulated organizations to modernize operations, strengthen resilience, and drive mission success.\r\nSolutions available:\r\nSAP S/4HANA Private Cloud Edition: A modern, intelligent SAP Cloud ERP solution delivered as a managed cloud service. SAP S/4HANA Private Cloud Edition enables organizations to streamline operations, gain real-time insights, and accelerate digital transformation while maintaining control, security, and customization of critical systems.\r\nSAP SuccessFactors Human Capital Management (HCM): A comprehensive, cloud-based human capital management suite designed to optimize workforce performance and engagement. SAP SuccessFactors supports the full employee lifecycle, from recruiting and onboarding to performance, learning, and workforce analytics, ensuring organizations align talent with mission objectives.\r\nIncludes: Employee Central, Employee Central Payroll, Learning, Performance & Goals, Succession & Development, Compensation, Recruiting, Onboarding, Workforce Planning, and Workforce Analytics.\r\nSAP SuccessFactors Employee Central Payroll delivers a robust, integrated payroll engine with enhanced resilience, compliance with U.S. federal requirements, and secure operations by U.S. persons.\r\nSAP Integrated Business Planning: A cloud-based supply chain planning solution that enables real-time, data-driven decision-making. SAP IBP integrates sales and operations planning, demand forecasting, supply planning, and inventory optimization to improve forecast accuracy, reduce costs, and enhance service levels.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "SAPNS2_FedRAMPSecurityInbox@sapns2.com", "website": "https://www.sapns2.com/ns2-secure-cloud/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2210352243", "name": "SAS Institute, Inc.", "cloud_service_provider": "SAS Institute, Inc.", "cloud_service_offering": "SAS AI and Analytics for Government on FedRAMP", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SAS%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-04-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-11-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-01-14T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-04-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-11-03T20:00:00.000Z", "cert_date": "2025-01-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-01-14T20:00:00.000Z", "annual_assessment": "2011-05-08T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Office of Justice Programs" ], "agency_reuse": [ "" ], "service_description": "SAS® Viya® provides the foundation for SAS AI and Analytics for Government on FedRAMP, making it possible to integrate teams and technology and deliver significant productivity gains to agencies leveraging data and AI. \r\nWhat’s included in SAS AI and Analytics for Government on FedRAMP:\r\n\r\n•\tSAS Visual Text Analytics \t \r\n•\tStart with training documents to build models iteratively by analyzing and categorizing. \r\n•\tIdentify and categorize key textual data with interpretive algorithms that incorporate context. \r\n•\tLeverage the best combinations of linguistics, machine learning and natural language processing. \r\n•\tSAS Visual Statistics\t \r\n•\tEnable multiple users to explore data and develop models interactively. \r\n•\tCreate, refine, and test models using in-memory capabilities. \r\n•\tDiscover, predict and act with interactive data exploration and discovery \r\n•\tSAS Viya \r\n•\tCleanse, prepare and manage data for analysis, exploration and feature engineering with modern statistical, data mining and machine learning techniques all in a single, scalable, in-memory processing environment. \r\n•\tUse the comprehensive visual interface to solve complex analytical problems that handles all tasks in the analytics life cycle. \r\n•\tRegister, modify, track, score, publish and report on AI and analytical models. \r\n•\tStore models within folders or projects. \r\n•\tDevelop and validate candidate models and assess candidate models for champion model selection. Then publish and monitor champion models. \r\n•\tSAS Visual Analytics \t \r\n•\tLeverage self-service analytics to make faster decisions with data. \r\n•\tDiscover more relevant relationships in your data. \r\n•\tDevelop dashboards and reports for use and sharing.", "fedramp_msg": "N/A", "sales_email": "SASfedramp@sas.com", "security_email": "SASfedramp@sas.com", "website": "https://www.sas.com/en_us/home.html", "uei": "CLXLJLMVK8J5", "small_business": false, "business_categories": [ "Analytics", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2623840126", "name": "Saviynt", "cloud_service_provider": "Saviynt", "cloud_service_offering": "Saviynt High Security Identity Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SVT%20Logo2.png", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-10T22:13:02.893Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-08-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-06-10T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-08-04T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Saviynt delivers cloud-based Identity Governance, privileged access management and a Cloud Security solution. Saviynt enables organizations to automate the access lifecycle of employees, contractors, and customers. Saviynt provides seamless visibility and compliance across applications, data and infrastructure for Hybrid IT. Saviynt also helps protect organization’s cloud infrastructure and SaaS solutions from internal and external risks with Privileged Access Management (PAM).\nSaviynt provides a single pane of glass view to manage users’ access across data, infrastructure and applications that reside on Cloud and Enterprise. Saviynt combines intelligent IGA (Identity Governance and Administration) and PAM processes with usage and risk analytics.", "fedramp_msg": "", "sales_email": "fedsales@saviynt.com", "security_email": "fedramp@saviynt.com", "website": "https://saviynt.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1821062403", "name": "Saviynt, Inc.", "cloud_service_provider": "Saviynt, Inc.", "cloud_service_offering": "Saviynt Enterprise Identity Cloud (EIC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SVT%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-04-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-12-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-03-01T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-04-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-12-07T20:00:00.000Z", "cert_date": "2019-03-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Centers for Medicare & Medicaid Services", "fedramp_auth": "2019-03-01T20:00:00.000Z", "annual_assessment": "2011-01-28T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Centers for Medicare & Medicaid Services", "Department of Energy", "Department of Veterans Affairs", "Federal Reserve System", "Federal Retirement Thrift Investment Board" ], "agency_reuse": [ "" ], "service_description": "Saviynt delivers an intelligent and converged platform for Identity Governance and Administration (IGA), Privileged Access Management (PAM) and Cloud Security that enables its customers to effectively manage risk, address continuous compliance needs and securely adopt cloud technologies with confidence. The solution combines advanced analytics with fine-grained privilege management to secure critical data, infrastructure and application assets for Cloud and Enterprise in a unified platform. \n\nSaviynt's completely managed and flexible platform ensures a worry-free adoption of IGA services such as user lifecycle management, access request and certification, Segregation of Duties (SOD) management, infrastructure access governance for IaaS providers (AWS, GCP & Azure), data access governance as well as PAM services. Saviynt's PAM solution is an identity-led service designed for elastic cloud and hybrid IT. It secures privileged access for any application or infrastructure workloads and extends governance to bring-your-own vaults. It is designed to ensure zero standing privileges, provide Just In Time (JIT) access, accelerate rollout at any scale with auto-registration of workloads, and lower the total cost of ownership by eliminating traditional jump boxes.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@saviynt.com", "website": "https://saviynt.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2023666173", "name": "Scale AI, Inc", "cloud_service_provider": "Scale AI, Inc", "cloud_service_offering": "Scale AI Data Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Scale%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-09-08T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-05-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-09-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-09-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-05-10T20:00:00.000Z", "cert_date": "2024-09-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Information Systems Agency", "fedramp_auth": "2024-09-09T20:00:00.000Z", "annual_assessment": "2011-01-26T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency" ], "agency_reuse": [ "" ], "service_description": "The ScaleGov mission is to accelerate the development and deployment of artificial intelligence (AI) solutions within the government space. Scale's comprehensive AI Data Platform goes beyond data labeling, now offering a fully-managed, API-driven solution for the test, evaluation, and development of AI-enabled enterprise applications. This includes Scale's Generative AI Platform (SGP), which empowers organizations to rapidly iterate and scale their AI models across various use cases with robust tooling for enterprise-level testing, evaluation, and operationalization.\r\n\r\nIn addition, Scale's platform now integrates Donovan, a powerful enterprise chat solution built on SGP. Donovan provides real-time, AI-driven insights and collaboration capabilities, augmenting human workflows with intelligent assistance and context-aware responses to enhance decision-making and productivity.\r\n\r\nScale continues to offer best-in-class tools and processes for creating high volumes of training data. The managed labeler network uses automated quality assurance, training, matching, and incentive systems to accurately label more than one hundred million annotations monthly. Scale's advanced quality pipeline incorporates active tooling and pre-labeling techniques, driving worker efficiency and accelerating customer workflows. Through Scale's customer management platform, clients can receive data in real-time, monitor task progress, audit results, and provide feedback across a broader range of AI-driven initiatives.", "fedramp_msg": "N/A", "sales_email": "fedramp@scale.com", "security_email": "security@scale.com", "website": "https://scale.com/federal", "uei": "HU2LMKSDQD9", "small_business": true, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Law Enforcement", "Research" ], "service_last_90": [ "" ], "all_others": [ "Data Engine", "Donovan", "Scale Generative AI Platform" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2418039495", "name": "ScienceLogic, Inc.", "cloud_service_provider": "ScienceLogic, Inc.", "cloud_service_offering": "ScienceLogic Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ScienceLogic%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-10-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-05-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-10-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-05-01T20:00:00.000Z", "cert_date": "2025-05-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-05-23T20:00:00.000Z", "annual_assessment": "2011-04-30T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "ScienceLogic Government Cloud includes the ScienceLogic SL1 platform for automated discovery, performance and event management along with business services management and visualization. ScienceLogic PowerFlow works in tandem with the SL1 platform to deliver automations in real-time integration with third-party applications.\n \nKey capabilities include:\n \n - Automated Discovery and Relationship Mapping – Discovery of devices across the hybrid IT ecosystem, as well as continuous data collection, providing up-to-date information to the analytics engine\n\n - Comprehensive Monitoring & Analytics - Real-time visibility and analysis across hybrid IT environments\n\n - Service-Centric Observability - Business service views delivering health and performance insights\n\n - Automated Operations – Advanced workflow automation for incident response and workflow management\n\nIntegration Service – Intelligent, bidirectional integration capabilities with third-party applications such as ServiceNow and other essential platforms", "fedramp_msg": "N/A", "sales_email": "sales@sciencelogic.com", "security_email": "security@sciencelogic.com", "website": "https://sciencelogic.com/", "uei": "MBG5C1KT2KR7", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2410866384", "name": "Second Front Systems", "cloud_service_provider": "Second Front Systems", "cloud_service_offering": "2F Game Warden", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/2F%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-04-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-07-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-08-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-04-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-07-02T20:00:00.000Z", "cert_date": "2025-08-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-08-12T20:00:00.000Z", "annual_assessment": "2011-10-28T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "PaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency", "Defense Innovation Unit", "United States Air Force" ], "agency_reuse": [ "" ], "service_description": "2F Game Warden is a fully managed and compliant multi-tenant DevSecOps platform that accelerates the delivery of commercial cloud software to federal government customers, State, Local, and Education (SLED) agencies, and highly regulated industries.\r\n\r\nEngineered to support dual compliance pathways, Game Warden can be leveraged as a pre-authorized FedRAMP PaaS for external systems or utilized for fully in-boundary application hosting, granting customers an inherited FedRAMP certification. Built to provide Fort Knox level infrastructure security, customer workloads deploy natively on our managed infrastructure across AWS, Azure, and Google Cloud Platform (GCP) utilizing Kubernetes containers, serverless functions, or virtual machines.\r\n\r\nThe platform fully automates continuous monitoring, threat mitigation, vulnerability scanning, patch management, and control inheritance required to conform to strict FedRAMP High, DoD IL5, and GovRAMP standards. Second Front Systems handles 100% of the underlying infrastructure maintenance, enabling commercial SaaS technology to rapidly scale across public sector and regulated missions without the overhead of building traditional compliance frameworks from scratch.\r\n- Cohere: Artificial Intelligence (AI) & Large Language Models - Secure, localized text generation and language processing runtime.\r\n- DailyPay: Finance & Human Resources - Hardened financial technology and earned wage access processing.\r\n- JetStream: Security-First AI Governance - Gives enterprises the infrastructure to adopt AI at speed without surrendering control.\r\n- Onebrief: Collaboration, Communication & Mission Operations – The Command Operating System unifies live operational data, decision intelligence, and collaborative authoring into a resilient runtime environment across NIPR, SIPR, JWICS, and coalition networks to streamline command synchronization and continuous operation under contested conditions.", "fedramp_msg": "", "sales_email": "growth@secondfront.com", "security_email": "security@secondfront.com", "website": "http://www.secondfront.com/products/game-warden/", "uei": "EXHQM7EHY6Z4", "small_business": true, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Governance, Risk, and Compliance (GRC)", "Network Management", "Storage", "System Administration" ], "service_last_90": [ "DailyPay", "JetStream", "Onebrief" ], "all_others": [ "Cohere" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2214346691", "name": "Secunetics, Inc.", "cloud_service_provider": "Secunetics, Inc.", "cloud_service_offering": "Gobo Framework (Gobo)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Secunetics%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-03-18T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-03-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-08-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-03-18T20:00:00.000Z", "cert_date": "2022-08-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-08-01T20:00:00.000Z", "annual_assessment": "2011-03-09T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Transportation", "Department of the Interior" ], "agency_reuse": [ "" ], "service_description": "Gobo provides an intuitive, AI-enabled cognitive automation platform designed to analyze complex datasets, apply intelligent operational logic, and streamline workflows across enterprise IT infrastructure, services, and business processes. The Gobo platform is built to bring actionable intelligence to light, prioritizing simplicity of use, speed of results, and quality of outcomes. Through secure, web-based applications called I2Apps, Gobo automates routine engineering and operations tasks while maintaining strict human-in-the-loop control, auditability, and governance. As a vendor-agnostic platform, Gobo integrates seamlessly with existing systems and data environments, empowering federal agencies to modernize their operations while avoiding costly vendor lock-in.\r\n\r\nTo support diverse agency missions, Gobo delivers core capabilities across three key operational areas:\r\nAI-Enabled Cognitive Automation: Gobo applies semantic intelligence to help agencies empower personnel to automate complex, data-intensive tasks at scale. As a prime example of this capability, Gobo modernizes public comment analysis and regulatory review management. Alongside this, Gobo features intelligent agents to orchestrate complex administrative and technical processes with speed, precision, and reliable predictability.\r\nInfrastructure Digital Twin (IDT) and Performance Management: Leveraging Gobo's IDT capabilities, the platform provides deep, continuous visibility to enable secure, unified, and adaptive IT ecosystems. Gobo streamlines complex migrations with Service Transition Management, facilitating structured transition planning and tracking for critical federal mandates such as the IPv6 transition. This is supported by automated Configuration Management, and Capacity Planning, alongside real-time performance tracking to optimize network operations and ensure system availability.\r\nEnterprise Infrastructure Solutions (EIS) Support: To automate administrative oversight, Gobo streamlines GSA EIS service management, allowing agencies to monitor how well telecommunications service providers meet promised service levels. The platform provides precision Contract Line Item Number (CLIN) and Invoice Management to track line items, automate invoice reconciliation, and facilitate dispute resolution. This capability operates alongside continuous SLA and Service Inventory Management to track the full lifecycle of agency IT assets and recover service provider credits.", "fedramp_msg": "N/A", "sales_email": "fedramp@secunetics.com", "security_email": "fedramp@secunetics.com", "website": "https://www.secunetics.com/gobo", "uei": "X2ELLBKRDJF9", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2529360449", "name": "Secureframe", "cloud_service_provider": "Secureframe", "cloud_service_offering": "Secureframe Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Secureframe%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-08-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2025-08-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2026-01-27T20:00:00.000Z", "ip_prog_date2": "2026-03-27T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-06-23T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-06-23T20:00:00.000Z", "annual_assessment": "2011-06-24T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Secureframe Federal is purpose-built to help organizations prepare for CMMC and FedRAMP assessments and meet other federal compliance requirements at speed and scale. Streamline documentation, track remediation, and maintain continuous compliance in one powerful platform.", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class C Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "sales@secureframe.com", "security_email": "security@secureframe.com", "website": "https://secureframe.com/", "uei": "F14FEF7KWQ77", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2502182285", "name": "Security Control LLC (an ISI Company)", "cloud_service_provider": "Security Control LLC (an ISI Company)", "cloud_service_offering": "Security Control Cloud Software Platform (SCCP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SC%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-01-23T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-01-23T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Lazarus Alliance, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Security Control cloud software platform is delivered as Software as a Service (SaaS) offering using a multi-tenant SaaS cloud computing environment deployed in AWS GovCloud Community. The Security Control cloud software platform provides functionality for private and public sector clients supporting the defense industrial client base and federal agency clients to manage their facility clearances, personnel records, associated clearance information, and provide tracking for other activities (e.g. foreign travel debrief) for cleared professionals.", "fedramp_msg": "N/A", "sales_email": "tgillaspie@dodsecurity.com", "security_email": "tkirchner@dodsecurity.com", "website": "https://mysecuritycontrol.com/", "uei": "W969AAMDYJD1", "small_business": true, "business_categories": [ "Contact Center", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Legal & Policy", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2221161553", "name": "SecurityScorecard, LLC", "cloud_service_provider": "SecurityScorecard, LLC", "cloud_service_offering": "SecurityScorecard Security Ratings", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SecurityScorecard%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-02-17T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-02-17T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "SecurityScorecard Security Ratings monitors the security posture of millions of companies by calculating a risk score derived from publicly available data. Companies are assigned A-F ratings across risk factors including domain name system (DNS) health, internet protocol (IP) reputation, web application security, network security, leaked information, hacker chatter, endpoint security, and patching cadence. This data is provided to customers via the Security Ratings web application.\nCustomers use the Security Ratings web application to review security ratings and detailed security reports. Users access Security Ratings through a standard web browser and leverage identity federation for authentication. Within the application, users search for companies of interest and review security reports developed by SecurityScorecard. These ratings and reports allow customers to evaluate the cybersecurity risk for companies of interest using data-driven, objective, and continuously evolving metrics that provide visibility into information security control weaknesses as well as potential vulnerabilities throughout the supply chain ecosystem. Users can also create \"portfolios\" to group together companies of interest and easily compare vendors to help make procurement decisions, evaluate acquisition targets, conduct industry benchmarking, and more.\nAdditional capabilities and data points (collected from publicly available data sources) in the Security Ratings web application include:\n•\tIP attribution to company domain(s)\n•\tSecurity vulnerability monitoring by company and security factors\n•\tSecurity risk benchmarking and scoring by company and industry\n•\tAlerts for changes in risk scores\n•\tExecutive and detailed company scorecard reports\n•\tWorkflow for collaboration and remediation with monitored suppliers", "fedramp_msg": "", "sales_email": "info@securityscorecard.io", "security_email": "security@securityscorecard.io", "website": "https://www.securityscorecard.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2518943913", "name": "SentiLink Corp", "cloud_service_provider": "SentiLink Corp", "cloud_service_offering": "SentiLink", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SentiLink%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-04-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2026-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": "2026-05-06T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-06-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "SentiLink is delivered as a SaaS offering using a multi-tenant public cloud computing environment. It is available to financial institutions and fintech companies, federal, state, local, and tribal governments, as well as research institutions, federal contractors, and government contractors.\n\nSentiLink Corp. is a software-as-a-service financial technology company headquartered in San Francisco, California. It provides fraud detection and prevention services to financial institutions in the\nUnited States.\nSynthetic Fraud Scores\nSentiLink’s Synthetic Fraud Scores solution helps entities stop hard-to-detect synthetic identities in real-time.\n\nThe Synthetic Fraud Scores product scores applications from 0 (low risk) to 999 (high risk). Three scores are provided on every identity: a composite score, a first-party synthetic score, and a third-party synthetic score. These scores are defined as follows:\nFirst-party synthetic score: the likelihood that the identity is first-party synthetic fraud\nThird-party synthetic score: the likelihood that the identity is third-party synthetic fraud\nAbuse score: the likelihood that the identity is associated with synthetic fraud or other related fraud risks\nID Theft Scores\nSentiLink’s ID Theft Scores solution determines the likelihood that someone is using stolen credentials to open an account. The solution provides a score between 0 and 999. The higher the score, the higher the likelihood of ID theft. ID Theft Scores are provided via an application programming interface (API) or a user dashboard, and a single API call can be used for both ID Theft Scores and Synthetic Fraud Scores.\nFirst-Party Fraud Flags\nThe First-Party Fraud Flags solution allows customers to determine whether an applicant possesses characteristics indicative of identity-related fraud. The model incorporates geographic and fraud alert data related to applicants and other consumers.\nManifest\nManifest allows customers to identify duplicate data sets in their data portfolios. Customers provide SentiLink with consumer personally identifiable information (PII), and SentiLink assigns each set of PII a unique ID. Customers send SentiLink consumer PII, such as consumer names, dates of birth, Social Security numbers (SSNs), addresses, phone numbers, and email. SentiLink compares the PII to the established unique IDs to identify matches.\nInsights\nThe Insights solution is a Know Your Customer (KYC) product designed to satisfy Customer Identification Program (CIP) obligations. Insights allow customers to uncover additional intelligence regarding PII and the risks associated with that PII, which facilitates investigation and remediation.\nDashboard\nThe Dashboard facilitates customer analysis of applicant information and SentiLink-licensed associated information to determine whether an applicant’s identity is legitimate. It allows customers to access SentiLink’s proprietary user interface to conduct further analysis and request further information regarding specific applications for fraud detection.\neCBSV\nAs part of the electronic Consent Based Social Security Number Verification (eCBSV) subscription, SentiLink submits eCBSV requests on behalf of permitted entities. eCBSV subscription services are provided via API or through a user interface.\nID Complete\nID Complete is designed to resolve missing or incomplete identity fields, such as dates of birth or SSNs, and suggest alternative information where applicable. Data suggestions are derived from customer data and SentiLink supplied data through SentiLink’s proprietary matching logic. The organization accepts data files from Experian.\nKYC Watchlist Checks\nThe KYC Watchlist Checks service allows customers to compare applicants to various government sanctions lists including, but not limited to, the Office of Foreign Assets Control (OFAC), Politically Exposed Persons (PEPs), United Nations Security Council, and the US Department of State watchlists. SentiLink Corp.’s (SentiLink’s) technology helps its customers combat fraud, a crime in which fake identities are created and used to defraud financial institutions and government agencies. SentiLink equips users with the tools needed to visualize and prevent fraud in any domain, whether money laundering, contractor fraud, synthetic identities, first-party fraud, or classic third-party stolen identities. The organization offers the solutions below that help banks, lenders, credit unions, financial technology entities, insurance companies, and telecommunication companies prevent fraud.", "fedramp_msg": "N/A", "sales_email": "sales@sentilink.com", "security_email": "security@sentilink.com", "website": "https://www.sentilink.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Finance" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1919071020A", "name": "SentinelOne", "cloud_service_provider": "SentinelOne", "cloud_service_offering": "SentinelOne Singularity Platform High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/S1%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-04-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-10-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-09-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 8, "reuse": 21, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-04-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-10-11T20:00:00.000Z", "cert_date": "2024-09-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-09-10T20:00:00.000Z", "annual_assessment": "2011-09-30T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2403745080", "csp": "ATOM EVSE", "cso": "Atom Power, Inc - ATOM EVSE", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2226322745", "csp": "Autodesk", "cso": "Autodesk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2220549818", "csp": "CirrusMD", "cso": "CirrusMD Virtual Health Chat for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2014656304", "csp": "Civis Analytics, Inc.", "cso": "Civis Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1303191948", "csp": "MAXIMUS Inc.", "cso": "MAXIMUS Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430847803", "csp": "NinjaOne", "cso": "NinjaOne for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2322855016", "csp": "ProjectTeam, Inc.", "cso": "ProjectTeam for Government (Construction Project and Program Management)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2002367706", "csp": "Somnoware Healthcare Systems", "cso": "Somnoware", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213647361", "csp": "Talkdesk", "cso": "Talkdesk CX Cloud™ Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2025456731", "csp": "Vaultara, LLC", "cso": "Vaultara Flare Services", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Centers for Medicare & Medicaid Services", "Department of Commerce", "Federal Student Aid", "National Aeronautics and Space Administration", "National Institute of Standards and Technology", "National Telecommunications and Information Administration", "Office of Personnel Management", "United States Patent and Trademark Office" ], "agency_reuse": [ "22-005-06", "22-005-09", "22-011-05", "22-017", "22-019", "22-022-01", "22-036", "22-037", "22-058", "22-062", "22-084" ], "service_description": "The SentinelOne Singularity platform is a unified, cloud-delivered security platform that provides customers with automation, endpoint detection and response and security information and event management (SIEM) capabilities integrated with a unified data lake to ingest and centralize structured and unstructured data. SentinelOne leverages advanced machine learning algorithms and behavioral AI to analyze and automatically contextualize endpoint data collected across Windows, macOS, Linux, and Cloud Workloads. Data is contextualized and correlated into our patented Storylines technology, which accelerates triage and reduces mean time to detect/respond. Data is organized into a cohesive threat narrative which allows analysts to easily identify threat-related events as well as pivot and hunt to scope threat tactics, techniques, and impact. This gives our customers the ability to quickly stop ransomware and cyber attacks at machine speed with 1-click automated remediation and rollback of malicious activities and changes. Additionally, SentinelOne offers world-class managed detection and response (MDR), digital forensics and incident response (DFIR), and threat hunting services. Our MDR service not only augments security teams by triaging active or suspicious alerts and mitigating and blocking threats as needed, but also keeps them informed and protected from global advanced persistent threat (APT) campaigns, novel attacker techniques, and emerging trends in cybercrime with included threat hunting services. Customers can also call on SentinelOne’s integrated DFIR team for deeper forensic analysis of an event and assistance with incident response.\r\n\r\nSingularity Cloud Native Security (CNS) is an agentless CNAPP capability for protecting cloud environments and assets. Combined with our agent-based Cloud Workload Security capabilities, agencies have a comprehensive build-time to run-time security solution for their cloud infrastructure. CNS leverages a unique offensive security engine to prioritize vulnerabilities and misconfigurations that are truly exploitable to save time for SOC analysts in triage and investigation efforts CNS includes full capabilities covering CSPM, CIEM, KSPM, IAC Scanning, Secrets Scanning, CDR, and CWP use cases and security requirements.\r\n\r\nSingularity Hyperautomation is a powerful no-code automation solution for streamlining security operations, accelerating threat response, and boosting operational efficiency for security operations teams. Hyperautomation offers analysts the ability to build multi-step automation playbooks taking advantage of unified workflows, pre-built integrations, out-of-the-box templates, and flexible customizations for simplifying delivery of SOAR capabilities from within the unified Singularity platform.\r\n\r\nPurple AI is an agentic-AI powered capability to enable security analysts to detect earlier, respond faster, and stay ahead of modern attacks and threat actors. Integrating innovative LLM, Generative AI, and Natural Language processing technologies, Purple AI is a force multiplier for analysts by reducing manual triage and investigation and, with informed reasoning and decision making, unlocking the ability to take action with human oversight and governance. Purple AI simplifies the complex, amplifies every analyst, and delivers autonomous responses to accelerate security operations. \r\n\r\nThe following SentinelOne Singularity Platform services are FedRAMP High Authorized:\r\n\r\n-Cloud Funnel\r\n-Cloud Workload Protection (CWP)\r\n-Digital Forensics & Incident Response (DFIR) services\r\n-Endpoint Detection and Response (EDR)\r\n-Endpoint Protection Platform (EPP)\r\n-Extended Detection and Response (XDR)\r\n-Purple AI Foundations for Public Sector\r\n-RemoteOps and RemoteOps Forensics\r\n-SentineOne Agent (Windows, macOS, Linux, and cloud-native Kubernetes)\r\n-SentinelOne Management Console\r\n-Singularity Cloud Native Security (CNS)\r\n-Singularity Data Lake\r\n-Singularity Hyperautomation \r\n-Singularity Marketplace\r\n-Singularity Network Discovery\r\n-Singularity Operations Center (OpsCenter)\r\n-Singularity Threat Intelligence\r\n-Singularity Vulnerability Management\r\n-Vigilance Managed Detection and Response (MDR) services\r\n-WatchTower and WatchTower Pro Threat Hunting services", "fedramp_msg": "N/A", "sales_email": "S1-Fed-Sales@sentinelone.com", "security_email": "fedramp@sentinelone.com", "website": "https://www.sentinelone.com/", "uei": "YMGMFUPM1XR9", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "Wayfinder Incent Readiness & Response", "Wayfinder MDR Elite", "Wayfinder MDR Essentials", "Wayfinder Threat Hunting" ], "all_others": [ "Cloud Funnel", "Cloud Workload Protection (CWP)", "Digital Forensics & Incident Response (DFIR) services", "Endpoint Detection and Response (EDR)", "Endpoint Protection Platform (EPP)", "Extended Detection and Response (XDR)", "Purple AI Foundations for Public Sector", "RemoteOps and RemoteOps Forensics", "Sentinel Agent (Windows, macOS, Linux, and cloud-native Kubernetes)", "SentinelOne Management Console", "Singularity Cloud Native Security (CNS)", "Singularity Data Lake", "Singularity Hyperautomation", "Singularity Marketplace", "Singularity Network Discovery", "Singularity Operations Center (OpsCenter)", "Singularity Threat Intelligence", "Singularity Vulnerability Management", "Vigilance Managed Detection and Response (MDR) services", "WatchTower and WatchTower Pro Threat Hunting services" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1305072116", "name": "ServiceNow", "cloud_service_provider": "ServiceNow", "cloud_service_offering": "Government Community Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ServiceNow%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-01-30T05:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2019-08-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 99, "reuse": 271, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": "2019-01-30T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2019-08-12T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-08-12T20:00:00.000Z", "annual_assessment": "2011-08-12T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2527132001", "csp": "Asana Inc.", "cso": "Asana", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226322745", "csp": "Autodesk", "cso": "Autodesk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2401047002", "csp": "Axonius Federal Systems", "cso": "Axonius Asset Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2504148525", "csp": "Booz Allen Hamilton", "cso": "Footprint", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2518163100", "csp": "Cisco", "cso": "Spaces for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1511207635", "csp": "Cisco Systems Inc.", "cso": "Webex for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2523656707", "csp": "Cisco Systems, Inc.", "cso": "Cisco ThousandEyes for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406760385", "csp": "Clarivate Analytics US LLC", "cso": "Clarivate Intellectual Property AI & Image Search Platform (CIPAI-ISP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2131766015", "csp": "Genesys", "cso": "Genesys Cloud CX", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2607452240", "csp": "IBM", "cso": "GO.gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1710033970", "csp": "Infor", "cso": "Infor Government Solutions (IGS) Software as a Service", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2128462521", "csp": "Juvare, LLC", "cso": "Juvare Federal Cloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2528033654", "csp": "Knox Systems", "cso": "Knox Systems FedRAMP High Managed Platform", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2218073444", "csp": "Lucid Software, Inc.", "cso": "Lucid GovSuite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2229642430", "csp": "Lumen", "cso": "Cloud Contact Center", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335153827", "csp": "MasterControl", "cso": "Quality Excellence Gov (Qx Gov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1303191948", "csp": "MAXIMUS Inc.", "cso": "MAXIMUS Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2100059668", "csp": "OnSolve LLC", "cso": "OnSolve Platform for Critical Event Management", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1818240234", "csp": "Perceptyx", "cso": "Perceptyx Insights Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2313477206", "csp": "Quadient inc.", "cso": "S.M.A.R.T. - Federal Editions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1510137547", "csp": "Rackspace Government Solutions", "cso": "Rackspace Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2001938710A", "csp": "SailPoint Technologies, Inc.", "cso": "SailPoint Identity Security Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603077867", "csp": "SMX (Formerly Smartronix)", "cso": "Elevate Intelligent Automation Platform (IAP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2110836406", "csp": "Trustwave Government Solutions", "cso": "Trustwave Fusion", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2505553757", "csp": "Turning Point Global Solutions, L.L.C", "cso": "Network Inventory and Optimization Solution (NiOS®)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2025456731", "csp": "Vaultara, LLC", "cso": "Vaultara Flare Services", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1825941347A", "csp": "Zoom Video Communications, LLC", "cso": "Zoom for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families", "Alcohol and Tobacco Tax and Trade Bureau", "Argonne National Laboratory", "Brookhaven Site Office", "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Bureau of Economic Analysis", "Bureau of Safety and Environmental Enforcement", "Bureau of the Fiscal Service", "Centers for Disease Control and Prevention", "Commodity Futures Trading Commission", "Consumer Financial Protection Bureau", "Customs and Border Protection", "Cybersecurity & Infrastructure Security Agency", "DOJ Office of the Inspector General", "Defense Health Agency", "Defense Information Systems Agency", "Defense Nuclear Facilities Safety Board", "Department of Agriculture", "Department of Commerce", "Department of Education", "Department of Energy", "Department of Health and Human Services", "Department of Justice", "Department of Labor", "Department of State", "Department of the Interior", "Department of the Navy", "Department of the Treasury", "Environmental Protection Agency", "Federal Aviation Administration", "Federal Communications Commission", "Federal Deposit Insurance Corporation", "Federal Emergency Management Agency", "Federal Energy Regulatory Commission", "Federal Housing Finance Agency", "Federal Maritime Commission", "Federal Reserve System", "Federal Retirement Thrift Investment Board", "Federal Trade Commission", "Fermi National Accelerator Laboratory", "First Responder Network Authority", "Food and Drug Administration", "General Services Administration", "Government National Mortgage Association", "HHS Office of the Inspector General", "HUD Office of Inspector General", "Health Resources and Services Administration", "Immigration and Customs Enforcement", "Indian Health Services", "Interior Business Center", "Internal Revenue Service", "National Aeronautics and Space Administration", "National Cancer Institute", "National Credit Union Administration", "National Institute of Standards and Technology", "National Institutes of Health", "National Labor Relations Board", "National Nuclear Security Administration / Kansas City Field Office", "National Nuclear Security Administration / Lawrence Livermore National Laboratory", "National Nuclear Security Administration / Nevada Field Office", "National Oceanic and Atmospheric Administration", "National Science Foundation", "Nuclear Regulatory Commission", "Oak Ridge National Laboratory", "Office of Financial Research", "Office of Justice Programs", "Office of Personnel Management", "Office of the Comptroller of the Currency", "Pension Benefit Guaranty Corporation", "Small Business Administration", "Social Security Administration", "Southwestern Power Administration", "State Office of the Inspector General", "Surface Transportation Board", "Tennessee Valley Authority", "U.S. International Development Finance Corporation", "US Fish and Wildlife Service", "US Trustee Program", "United States Air Force", "United States Citizenship and Immigration Services", "United States International Trade Commission", "United States Marshals Service", "United States Mint", "United States Patent and Trademark Office", "United States Securities and Exchange Commission", "Universal Service Administrative Company", "Warfighting Acquisition University", "Y12 Field Office" ], "agency_reuse": [ "" ], "service_description": "Government Community Cloud (GCC) is a ServiceNow cloud service offering that delivers the Now Platform in an environment that complies with stringent cloud security and privacy compliance requirements defined by the United States Federal Government. Government Community Cloud (GCC) is a multitenant environment restricted to the United States public sector and regulated private sector organizations with a government affiliation. This cloud service offering and the ServiceNow personnel who support it are physically located in the United States. Government Community Cloud (GCC) is hosted in geographically diverse mirrored data centers on infrastructure dedicated to Government Community Cloud (GCC).", "fedramp_msg": "Government Community Cloud previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "usfederalcompliance@servicenow.com", "website": "https://www.servicenow.com/", "uei": "", "small_business": false, "business_categories": [ "Collaboration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2033152148", "name": "Seven Bridges Genomics, Inc", "cloud_service_provider": "Seven Bridges Genomics, Inc", "cloud_service_offering": "Seven Bridges Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SB%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-08-12T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-02-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-06-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-08-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-02-04T20:00:00.000Z", "cert_date": "2022-06-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Heart, Lung, and Blood Institute", "fedramp_auth": "2022-06-06T20:00:00.000Z", "annual_assessment": "2011-02-04T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "PaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "National Cancer Institute", "National Heart, Lung, and Blood Institute" ], "agency_reuse": [ "" ], "service_description": "The Seven Bridges Platform is a cloud-based environment for conducting bioinformatic analyses. It is a central hub for teams to store, analyze, and jointly interpret their bioinformatic data. The Platform co-locates analysis pipelines alongside the largest genomic datasets to optimize processing. It allocates storage and compute resources on demand, to meet the needs of ever-growing analyses.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "compliance@velsera.com", "website": "https://www.sevenbridges.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2231561929", "name": "Siemens Government Technologies", "cloud_service_provider": "Siemens Government Technologies", "cloud_service_offering": "Mendix Cloud for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Siemens%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-03-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-09-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-01-08T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to Legacy FedRAMP Ready" }, { "date": "2025-01-08T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2025-01-08T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-03-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-09-15T20:00:00.000Z", "cert_date": "2025-01-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Centers for Disease Control and Prevention", "fedramp_auth": "2025-01-08T20:00:00.000Z", "annual_assessment": "2011-09-15T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Mendix Cloud for Government offers a no-code and low-code development platform-as-a-service (PaaS) that allows accelerated development of software-as-a-service (SaaS)-based, enterprise-grade applications. This accelerated development allows for rapid application delivery across an entire application development lifecycle, from ideation to deployment and operations. \n\nThe Mendix platform consists of a front-end development tool, Mendix Studio Pro, and back-end infrastructure to support the deployment of developed applications. Mendix enables customers to implement both Agile and DevOps best practices and involves business stakeholders closely in the development of applications to ensure suitability of the solution.", "fedramp_msg": "N/A", "sales_email": "fedramp@siemensgovt.com", "security_email": "cms-mxc4gov@siemensgovt.com", "website": "https://www.siemensgovt.com/solutions/mendix-cloud", "uei": "R2VGJTEMCNL5", "small_business": false, "business_categories": [ "Collaboration", "Data Management", "Development Tools", "Education & Training", "Finance", "Fleet Management", "Health & Wellness", "Human Resources", "Law Enforcement", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2028958787", "name": "Signature Performance, Inc.", "cloud_service_provider": "Signature Performance, Inc.", "cloud_service_offering": "ClaimsXM", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SignaturePerformance%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-09-21T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-12-08T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-09-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-09-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-12-08T20:00:00.000Z", "cert_date": "2024-09-25T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-09-25T20:00:00.000Z", "annual_assessment": "2011-11-20T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "ClaimsXM is a robust platform inclusive of claims processing software, program code, and business rules and logic to support the operation and management of Customer claims processing activities by authorized users with all data hosted in the Microsoft Azure Government Cloud with FedRAMP certification. This data-driven approach to streamlining administrative tasks is an innovative, rules-based solution that reduces excessive administrative healthcare costs, provider frustrations, and the manual challenges of claims administration. Signature Performance offers a managed service through our automated and integrated technology solution so that fraud, waste, and abuse within the healthcare system can be detected and reduced, saving the healthcare industry time and money. The platform improves the coordination and quality of care through claims administration and customer service to ensure healthcare members and their beneficiaries have access to high-quality healthcare.", "fedramp_msg": "", "sales_email": "zfain@signatureperformance.com", "security_email": "iso@signatureperformance.com", "website": "https://www.signatureperformance.com/", "uei": "WKUNWXBN45R1", "small_business": false, "business_categories": [ "Contact Center", "Customer Relations Management (CRM)", "Data Management", "Finance", "Health & Wellness", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1818459251", "name": "Sirsi Corporation (SirsiDynix)", "cloud_service_provider": "Sirsi Corporation (SirsiDynix)", "cloud_service_offering": "EOS.Web", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SirsiDynix%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-11-14T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-01-30T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-03-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-11-14T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-01-30T20:00:00.000Z", "cert_date": "2020-03-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-03-13T20:00:00.000Z", "annual_assessment": "2011-01-30T04:00:00.000Z", "independent_assessor": "Tevora Business Solutions, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Low", "impact_level_number": "4", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Reclamation", "Commodity Futures Trading Commission", "National Park Service", "U.S. International Development Finance Corporation", "United States Air Force" ], "agency_reuse": [ "" ], "service_description": "SirsiDynix provides libraries with the automation, accessibility, and flexibility to thrive in the modern age through its Integrated Library System (ILS) offerings. Our customers benefit from our products' security, ease of use, robust capabilities, and integration with numerous additional services, with FedRAMP Authorization making these products usable in ways that meet the compliance needs of government customers.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@sirsidynix.com", "website": "https://www.sirsidynix.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2629041584", "name": "Siteimprove Inc", "cloud_service_provider": "Siteimprove Inc", "cloud_service_offering": "Siteimprove Federal Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Siteimprove%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-30T21:39:04.253Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-29T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Securisea, Inc.", "service_model": [], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Siteimprove Federal Platform is delivered as a Software as a Service (SaaS) offering hosted within Amazon Web Services (AWS) and made available to United States federal government agencies. The platform provides automated scanning, analysis, and reporting on federal agency website content, covering Section 508 accessibility compliance, content quality and broken-link detection. A crawler ingests content from agency websites for analysis, and findings, compliance scores, and remediation tracking are presented to agency users through a web portal. The offering processes, stores, and transmits federal customer data, including controlled unclassified information (CUI) and associated federal metadata. The production environment is deployed across a dedicated multi-account AWS organization and is built on Amazon Elastic Kubernetes Service (EKS) for container orchestration, with self-managed Oracle databases running on Amazon EC2 dedicated hosts as the primary data store and Amazon S3 for object storage. Cryptographic protection of federal data at rest and in transit uses FIPS 140-validated modules, with key management provided through AWS Key Management Service (KMS). Service model: Software as a Service (SaaS). Deployment model: Public Cloud (AWS us-east-2 commercial region, dedicated federal AWS Organization). Customer scope: U.S. federal agencies, with a single-tenant-per-agency architecture (per-tenant AWS account and VPC).", "fedramp_msg": "", "sales_email": "federalplatform@siteimprove.com", "security_email": "security@siteimprove.com", "website": "https://www.siteimprove.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Content Management System (CMS)", "Data Management", "Governance, Risk, and Compliance (GRC)", "Marketing & Sales" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1207261443", "name": "Skillsoft", "cloud_service_provider": "Skillsoft", "cloud_service_offering": "Private Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Skillsoft%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-03-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2015-12-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-05-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 20, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-03-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2015-12-17T20:00:00.000Z", "cert_date": "2017-05-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2017-05-15T20:00:00.000Z", "annual_assessment": "2011-02-28T04:00:00.000Z", "independent_assessor": "Booz Allen Hamilton", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2118043605", "csp": "Skillsoft", "cso": "Percipio", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of the Interior", "Environmental Protection Agency", "FHFA Office of the Inspector General", "Office of the Comptroller of the Currency" ], "agency_reuse": [ "22-013", "22-019", "22-022", "22-023", "22-031-01", "22-032", "22-033", "22-034", "22-036", "22-045", "22-065", "22-068" ], "service_description": "Skillsoft is a U.S. based educational technology company that produces learning management system software and content. It is one of the world's largest corporate training providers, with 10,000 customers, 60 million users, and 2,400 employees as of 2014. Skillsoft is an education provider to many U.S. DoD and U.S. Federal organizations.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@skillsoft.com", "website": "https://www.skillsoft.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2118043605", "name": "Skillsoft", "cloud_service_provider": "Skillsoft", "cloud_service_offering": "Percipio", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Skillsoft%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-08-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-10-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-03-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 13, "reuse": 12, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-08-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-10-04T20:00:00.000Z", "cert_date": "2022-03-04T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-03-04T20:00:00.000Z", "annual_assessment": "2011-10-04T04:00:00.000Z", "independent_assessor": "Booz Allen Hamilton", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Commodity Futures Trading Commission", "Council of the Inspectors General on Integrity and Efficiency", "Department of Agriculture", "Department of Education", "Department of Veterans Affairs", "FHFA Office of the Inspector General", "Federal Deposit Insurance Corporation", "General Services Administration", "National Endowment for the Arts", "National Labor Relations Board", "Nuclear Regulatory Commission", "United States International Trade Commission" ], "agency_reuse": [ "" ], "service_description": "Skillsoft's Percipio is a SaaS learning experience platform that authenticates users, tracks learner's progress, and connects users to content and other optional services. Percipio offers 1000s of video-based courses along with ebooks, audiobooks, practice labs, boot camps, and assessments to help your workforce build skills. Percipio is accessible from both a web browser as well as Apple and Andriod mobile apps. The learning platform and mobile apps were assessed as in-boundary for FedRAMP. The external content providers are not assessed.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@skillsoft.com", "website": "https://www.skillsoft.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1506096710", "name": "Skyhigh Security", "cloud_service_provider": "Skyhigh Security", "cloud_service_offering": "Skyhigh Security Service Edge (SSE) Government Cloud Services (Cloud Access Security Broker (CASB) & Secure Web Gateway (SWG) for Cloud)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Skyhigh%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-09-06T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2019-12-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2020-04-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 7, "reuse": 10, "ready_status": "Not Active", "ready_date": "2019-09-06T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2019-12-13T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2020-04-29T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-04-29T20:00:00.000Z", "annual_assessment": "2011-03-31T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2427142353", "csp": "AutoRABIT Holding, Inc.", "cso": "AutoRABIT for Public Sector - CodeScan, Guard, & ARMOR", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1730842236", "csp": "T-Metrics, Inc.", "cso": "T-Metrics Cloud Contact Center (TCCC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Commerce", "Federal Deposit Insurance Corporation", "Idaho Operations Office", "National Institute of Standards and Technology", "National Nuclear Security Administration / Nevada Field Office", "National Oceanic and Atmospheric Administration", "Y12 Field Office" ], "agency_reuse": [ "22-011-03", "22-017-06", "22-036", "22-038" ], "service_description": "Skyhigh Security Service Edge (SSE) GovCloud, is a FedRAMP-authorized, Zero Trust, cloud-native security platform purpose-built for U.S. federal agencies. It enables fast, secure, direct-to-internet access across websites, email, SaaS applications, IaaS environments, and even shadow IT, all governed through a single, unified enforcement point. The result is a simpler, more resilient architecture that protects highly sensitive data while staying ahead of increasingly sophisticated, cloud-driven threats.\r\n\r\nRather than stitching together disconnected tools, Skyhigh SSE GovCloud consolidates essential security capabilities into one cohesive platform, providing real-time visibility, threat prevention, and data protection across every vector, all managed through a centralized console. Its integrated capabilities include:\r\n\r\n● Skyhigh Secure Web Gateway (SWG) for Cloud\r\n● Skyhigh Cloud Access Security Broker (CASB)\r\n● Skyhigh Data Security Posture Management (DSPM)\r\n● Skyhigh Advanced Data Loss Prevention (Adv DLP)\r\n● Skyhigh Data Loss Prevention (DLP)\r\n● Skyhigh Remote Browser Isolation (RBI)\r\nBuilt to meet the most rigorous federal security standards, Skyhigh SSE GovCloud invites agencies to rethink how they defend, detect, and respond. It accelerates Zero Trust adoption while supporting compliance with Executive Order 14028 and other critical cybersecurity mandates, enabling agencies not just to keep up with the threat landscape, but to get ahead of it.\r\n\r\nSkyhigh Data Security Posture Management (DSPM) - Authorized March, 2026\r\n\r\nThe greatest risk to federal data is not always lack of control, but the false sense of control created by fragmented environments.\r\n\r\nFederal agencies and contractors today are engaged in protecting ever-expanding volumes of mission-critical data, while operating under rigorous mandates like NIST and CMMC. Yet beyond compliance the real challenge is clarity. Fragmented security tools, hidden pockets of shadow data and AI usage, and rapidly evolving cloud vulnerabilities create an environment where visibility is partial and control is reactive.\r\n\r\nSkyhigh DSPM confronts this reality by unifying what has long been disconnected. Embedded within a broader Secure Service Edge (SSE) framework, it brings together data classification and real-time policy enforcement across SaaS, IaaS, web, email, and private applications. The result is comprehensive visibility backed by meaningful insight, reducing false positives while strengthening control over sensitive data.\r\n\r\nCrucially, this approach extends to emerging risks, including generative AI, ensuring sensitive information is not unintentionally exposed or ingested into AI models. It shifts the paradigm from chasing risk to anticipating it, giving agencies the ability to see, understand, and act with confidence in an increasingly complex digital landscape.\r\n\r\nThis translates into:\r\n\r\n● Continuous compliance monitoring aligned with federal mandates (NIST, CMMC).\r\n● Centralized visibility into data usage, movement and residence across cloud environments.\r\n● Advanced protection of sensitive data (CUI/PII) using OCR and data matching.\r\n● Granular access controls based on user, device, and location.\r\n● Real-time threat detection, response, and remediation for stronger security posture.\r\nWith unified intelligence, decisions shift from reactive defense to proactive action, protecting data, ensuring compliance, and mitigating data risks.\r\n\r\nSkyhigh Remote Browser Isolation (RBI)\r\n\r\nThe safest web session is the one where untrusted content never reaches the endpoint. \r\n\r\nSkyhigh Remote Browser Isolation (RBI) achieves this reality by fundamentally changing how agencies interact with the web. Rather than allowing web content to execute directly on user devices, RBI renders browsing sessions in a secure, isolated cloud environment and delivers only a safe visual stream to the endpoint. \r\n\r\nEmbedded within the broader Skyhigh Security Service Edge (SSE) framework, RBI extends security beyond simple URL filtering and malware detection. It enables agencies to safely access unknown, risky, or uncategorized websites without compromising sensitive systems or data. Combined with integrated DLP, CASB, and SWG capabilities, RBI provides granular control over user interactions, preventing unauthorized downloads, uploads, copy-and-paste actions, and data exfiltration attempts.\r\n\r\nCrucially, this isolation-first model protects against both known and unknown threats, including zero-day malware, malicious scripts, ransomware, and sophisticated phishing attacks.\r\n\r\nThis translates into:\r\n\r\n● Complete isolation of web content from agency devices and networks.\r\n● Secure access to unknown, risky, or uncategorized websites.\r\n● Integrated DLP controls for downloads, uploads, copy/paste, and data sharing.\r\n● Reduced attack surface without impacting user productivity or browsing experience.\r\n● Consistent Zero Trust enforcement across users, devices, and web destinations.\r\n● With RBI, agencies move beyond reactive web security toward proactive threat prevention, ensuring users can safely access the internet while protecting mission-critical systems, sensitive data, and operational continuity.\r\n\r\nSkyhigh Secure Web Gateway (SWG) for Cloud\r\n\r\nWhat if every click, every web request, every cloud interaction, was inspected, understood, and secured in real-time?\r\n\r\nSkyhigh SWG for Cloud redefines how federal agencies protect users in an increasingly borderless digital environment. Acting as a powerful, cloud-native enforcement layer, it sits inline between users and the internet, continuously analyzing traffic to block malicious destinations, stop zero-day threats before they take hold, and prevent sensitive data from ever leaving the organization.\r\n\r\nWith 99.999% uptime and seamless integration of Remote Browser Isolation (RBI), Gateway Anti-Malware (GAM), CASB (Cloud Access Security Broker), Data Loss Prevention (DLP), and Data Security Posture Management (DSPM), Skyhigh SWG delivers uninterrupted, high-assurance connectivity without compromising security. Flexible deployment options ensure agencies can rapidly transition to the cloud while maintaining compliance with existing proxy infrastructures and legacy protocols.\r\n\r\nKey capabilities include:\r\n\r\n● Intelligent web filtering that enables secure, policy-driven access to the web and cloud, from any device, anywhere\r\n● Risk-free browsing with RBI, rendering web sessions via visual stream to eliminate malware exposure and reduce false positives\r\n● Integrated DLP within RBI sessions, providing full visibility and control over how sensitive data is accessed and shared\r\n● Advanced threat protection, leveraging machine learning, zero-day detection, GAM, and Global Threat Intelligence (GTI)\r\n● SSL decryption for deep inspection of encrypted traffic, and more. \r\n● Skyhigh SWG for Cloud doesn’t just secure web access, it challenges the assumption that speed, usability, and security must be trade-offs. Instead, it delivers all three, empowering agencies to move faster while staying firmly in control.\r\n\r\nSkyhigh Advanced DLP\r\n\r\nSecurity gaps aren’t obvious, but they’re where federal data is truly at risk.\r\n\r\nThe real data challenge today is not just securing sensitive data, it is doing so with precision and confidence across increasingly complex hybrid environments. Traditional DLP solutions often leave blind spots, generate excessive false positives, and struggle to enforce consistent policies, creating gaps in protection that can put mission-critical data at risk.\r\n\r\nSkyhigh Advanced DLP, transforms how federal organizations protect sensitive data across cloud, web, email, and applications. By combining Exact Data Matching (EDM) and Indexed Document Matching (IDM), it fingerprints structured and unstructured data with high accuracy, while AI-driven classifiers automate policy creation and reduce noise. OCR-enabled scanning ensures even large files and images are accurately analyzed, leaving no critical data overlooked.\r\n\r\nThis unified approach extends across sanctioned and shadow environments, providing consistent enforcement and centralized incident management. Advanced DLP helps agencies enforce risk-based access, prevent sensitive data from flowing into unsanctioned SaaS and AI tools, and reduce the attack surface, all in real-time.\r\n\r\nThis leads to:\r\n\r\n● Proactive Threat Prevention detects and stops sensitive data misuse before it becomes a breach.\r\n● Automated Policy Management streamlines policy creation and enforcement, reducing administrative overhead and human error.\r\n● Consistent Enforcement Across Shadow IT monitors unsanctioned applications and services to eliminate blind spots.\r\n● Enhanced Incident Response centralized visibility and automated remediation accelerate threat response and reduce risk exposure.\r\n● Unified Data Protection enforces consistent DLP policies across cloud, SaaS, web, and email from a single platform.\r\n● Skyhigh Advanced DLP enables federal teams to move beyond reactive protection, ensuring sensitive data is accurately identified, consistently safeguarded, and never unintentionally exposed, even in the face of evolving AI and cloud risks.\r\n\r\nSkyhigh Cloud Access Security Broker (CASB)\r\n\r\nSkyhigh CASB offers a powerful lens into how you can truly operate in the cloud. \r\n\r\nIt provides a comprehensive view into how cloud environments are actually being used and managed. In complex, multi-cloud ecosystems, it moves beyond basic visibility to correlate user activity, behavior, and data movement, surfacing patterns that are critical to security, compliance, and operational resilience. Its readiness ratings equip system and data owners with objective, evidence-based insights, enabling them to assess cloud risk with greater confidence and accountability.\r\n\r\nWhen potential threats or anomalies emerge, Skyhigh CASB provides the contextual intelligence needed for rapid, informed decision-making. This is essential in environments where timely response is critical to protecting sensitive data and maintaining operational integrity. Control is not static; through inline deployment options such as forward proxy, reverse proxy, and cloud app isolation, agencies can enforce real-time access policies across both authorized applications and the wide range of unsanctioned tools that often enter the environment.\r\n\r\nFor sanctioned cloud services, API-based integrations extend visibility deeper into user activity, data flows, and system interactions. This supports advanced capabilities such as user and entity behavior analytics (UEBA), tenant-level controls, collaboration governance, and both continuous and on-demand scanning. Together, these capabilities help federal organizations strengthen data protection, enforce policy, and maintain oversight across increasingly dynamic environments.\r\n\r\nIts feature set reflects a broader shift in security thinking:\r\n\r\n● Scaling trust through deep visibility, delivering measurable insights grounded in comprehensive, end-to-end visibility.\r\n● Extensive cloud service registry, 40,000+ cloud services enables broad visibility into tools and dependencies across the environment.\r\n● Granular and adaptive data protection, driven by sophisticated classification and a mature DLP engine.\r\n● Quantifiable risk across applications and users through machine learning and behavioral analytics.\r\n● AI augments human judgment, from generating complex classification patterns to detecting subtle anomalies.\r\nIn cloud-first federal environments, success depends on real-time visibility, understanding, and response, moving beyond blocking to intelligent, adaptive security and compliance.\r\n\r\nAvailable Products from Skyhigh Security: \r\n● Skyhigh Security Service Edge (SSE)\r\n● Skyhigh Secure Web Gateway for Cloud (SWG Cloud) \r\n● Skyhigh Cloud Access Security Broker for Gov Cloud (CASB Gov Cloud)\r\n● Skyhigh Data Security Posture Management (DSPM) \r\n● Skyhigh Advanced Data Loss Prevention (Adv DLP)\r\n● Skyhigh Data Loss Prevention (DLP)\r\n● Skyhigh Remote Browser Isolation (RBI)\r\n\r\nRequest a Demo: https://www.skyhighsecurity.com/forms/demo-request-form.html\r\nVisit Skyhigh Security for Public Sector for further details", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/07/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "sales@skyhighsecurity.com", "security_email": "fedramp@skyhighsecurity.com", "website": "https://skyhighsecurity.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Communication", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Legal & Policy", "Network Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2230252267", "name": "Slack Technologies", "cloud_service_provider": "Slack Technologies", "cloud_service_offering": "GovSlack", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Slack%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-11-28T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2023-05-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2024-01-25T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 41, "ready_status": "Not Active", "ready_date": "2022-11-28T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2023-05-30T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2024-01-25T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-01-25T20:00:00.000Z", "annual_assessment": "2011-01-25T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2520950455", "csp": "Andesite AI, Inc.", "cso": "Andesite Azimuth for Government AAG", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1606097904A", "csp": "Qualtrics, LLC", "cso": "Qualtrics XM Platform - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1722532017", "csp": "stackArmor", "cso": "Clarity", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "" ], "agency_reuse": [ "22-002-02", "22-002-05", "22-002-08", "22-003", "22-005", "22-005-01", "22-005-03", "22-005-04", "22-007-09", "22-007-17", "22-007-28", "22-011-01", "22-011-02", "22-011-03", "22-011-05", "22-011-06", "22-015", "22-016-06", "22-017", "22-017-02", "22-017-03", "22-017-12", "22-019", "22-020", "22-021-09", "22-025", "22-028", "22-032", "22-034", "22-037", "22-042", "22-045", "22-051", "22-061", "22-062", "22-065" ], "service_description": "GovSlack is an instance of Slack created specifically for the purposes of handling high workloads for Government customers and highly regulated commercial sectors. Slack has transformed business communication. It's the leading channels-based messaging platform, used by millions to align their teams, unify their systems, and drive their business forward. Only Slack offers a secure, enterprise-grade environment that can scale with the largest companies in the world. It is a new layer of the business technology stack where people can work together more effectively, connect all their other software tools and services, and find information they need to do their best work. Slack is where work happens.", "fedramp_msg": "GovSlack previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "fedramp@slack-corp.com", "website": "https://slack.com/solutions/govslack", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1823447014", "name": "Slack Technologies", "cloud_service_provider": "Slack Technologies", "cloud_service_offering": "Slack", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Slack%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-08-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-03-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-05-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 13, "reuse": 456, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-08-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-03-26T20:00:00.000Z", "cert_date": "2020-05-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-05-20T20:00:00.000Z", "annual_assessment": "2011-03-06T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2000174962", "csp": "Abbott, Inc.", "cso": "LibreView for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2106555313", "csp": "AchieveIt Online, LLC", "cso": "AchieveIt", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "F1302201919", "csp": "Acquia Inc.", "cso": "Acquia Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2108360349", "csp": "Adobe", "cso": "Adobe Acrobat Sign for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2431264500", "csp": "AppOmni", "cso": "AppOmni SaaS Security for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2317139564", "csp": "Articulate Global LLC", "cso": "Articulate 360", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1908649566", "csp": "Aruba Networks", "cso": "Aruba Central", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2527132001", "csp": "Asana Inc.", "cso": "Asana", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1923743650A", "csp": "Automattic, Inc.", "cso": "WordPress VIP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430123303", "csp": "Aztec Software", "cso": "Aztec Learning System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1916254386", "csp": "Boomi", "cso": "Boomi Enterprise Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2504148525", "csp": "Booz Allen Hamilton", "cso": "Footprint", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2315535023", "csp": "Cisco Systems Inc.", "cso": "Cisco Meraki US Government Region", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2014656304", "csp": "Civis Analytics, Inc.", "cso": "Civis Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000863987A", "csp": "Cloudflare", "cso": "Cloudflare for Government - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2013059515", "csp": "Cofense", "cso": "Cofense PhishMe", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2306445868", "csp": "Cohesity", "cso": "Cohesity Cloud Services for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234550858", "csp": "Concur Technologies, Inc.", "cso": "Concur Cloud for Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1509217359", "csp": "Cornerstone OnDemand", "cso": "Cornerstone Galaxy", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2519759620", "csp": "Cribl Inc.", "cso": "Cribl.Cloud Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2402468053", "csp": "Darktrace Federal Inc.", "cso": "Cyber AI Mission Defense and Email Protection", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1834740315", "csp": "Databricks, Inc.", "cso": "Databricks on AWS US East/West", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324740262", "csp": "Databricks, Inc.", "cso": "Databricks on AWS GovCloud", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2023864279A", "csp": "Datadog, Inc.", "cso": "Datadog for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2112152882", "csp": "Datavant", "cso": "Datavant Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814557199", "csp": "DNAnexus, Inc.", "cso": "DNAnexus Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2432940371", "csp": "Docebo", "cso": "Docebo Learning Platform for Gov (DCBO-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2410060106", "csp": "DTEX Systems, Inc.", "cso": "DTEX InTERCEPT for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1823149273", "csp": "Duo Security (a Cisco Company)", "cso": "Duo Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2016962740", "csp": "Eightfold AI Inc.", "cso": "Eightfold Talent Intelligence Platform (TIP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2004446306", "csp": "Elastic", "cso": "Elastic Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2311345531", "csp": "Figma", "cso": "Figma for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2411959145", "csp": "GitLab", "cso": "GitLab Dedicated for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919750997", "csp": "HackerOne", "cso": "HackerOne Continuous Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2135040486", "csp": "HealthVerity", "cso": "Privacy Preserving Records Linkage (PPRL)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1831429369", "csp": "HireVue", "cso": "Recruitment Assessments and Video Interviewing", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2027958176", "csp": "Issio Solutions, Inc.", "cso": "Issio Information System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2201340492", "csp": "KnowBe4, Inc.", "cso": "KnowBe4 Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2120962552", "csp": "LaunchDarkly", "cso": "LaunchDarkly", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335153827", "csp": "MasterControl", "cso": "Quality Excellence Gov (Qx Gov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2122150307", "csp": "MongoDB", "cso": "MongoDB Atlas for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1607057910", "csp": "New Relic", "cso": "New Relic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2430847803", "csp": "NinjaOne", "cso": "NinjaOne for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134455708", "csp": "Nucleus Security, Inc", "cso": "Nucleus for Government (NucleusGov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2100059668", "csp": "OnSolve LLC", "cso": "OnSolve Platform for Critical Event Management", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2301844932", "csp": "Orca Security", "cso": "Orca Cloud Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2310974411", "csp": "PagerDuty", "cso": "PagerDuty Operations Cloud", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2315464863", "csp": "Palantir Technologies", "cso": "Palantir Federal Cloud Service – Supporting Services (PFCS-SS)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2434554673", "csp": "Palantir Technologies Inc.", "cso": "Palantir Federal Cloud Service", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2127765215", "csp": "Point Blue Conservation Science", "cso": "Point Blue Science Cloud", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2406651384", "csp": "Precisely Software", "cso": "Data Integrity Suite for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2516365096", "csp": "Procore Technologies, Inc", "cso": "Procore for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1722838693", "csp": "Rave Mobile Safety", "cso": "Rave Safety Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2004753002", "csp": "Relativity ODA LLC", "cso": "RelativityOne Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1931476240", "csp": "Rescale", "cso": "Rescale Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2209555576", "csp": "RingMD USA Inc.", "cso": "RingMD Telemedicine", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2204842850", "csp": "Rosalind, Inc.", "cso": "ROSALIND", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2425742814", "csp": "San Luis Aviation, Inc.", "cso": "ESChat", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2418039495", "csp": "ScienceLogic, Inc.", "cso": "ScienceLogic Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2230451369", "csp": "Snyk", "cso": "Snyk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1607197917", "csp": "Splunk", "cso": "Splunk Cloud Platform for FedRAMP Moderate", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918740338", "csp": "Sumo Logic", "cso": "Sumo Logic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2110342613", "csp": "Tanium", "cso": "Tanium Cloud for US Government (TC-USG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814276801", "csp": "Tenable Public Sector (TPS)", "cso": "Tenable Government Solutions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2132958724", "csp": "UiPath", "cso": "Automation Cloud Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125561001", "csp": "Unqork, Inc.", "cso": "Unqork for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1817874315", "csp": "Valimail", "cso": "Valimail Enforce Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2416859101", "csp": "Verkada Inc", "cso": "Verkada Command Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1605037894", "csp": "Virtru", "cso": "Virtru Data Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2308034636A", "csp": "Wiz, Inc.", "cso": "Wiz for U.S. Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2103344623", "csp": "Workday Inc.", "cso": "Workday Government Cloud (WGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2113557839", "csp": "Yello Dba Recsolu Inc", "cso": "Yello Government Recruiting Solution", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families", "Argonne National Laboratory", "Centers for Medicare & Medicaid Services", "Cybersecurity & Infrastructure Security Agency", "Department of Agriculture", "Department of State", "Department of Veterans Affairs", "Federal Trade Commission", "General Services Administration", "National Aeronautics and Space Administration", "National Institute of Standards and Technology", "National Science Foundation", "United States Census Bureau" ], "agency_reuse": [ "22-000", "22-002", "22-002-01", "22-002-02", "22-002-04", "22-002-06", "22-002-08", "22-002-11", "22-003", "22-005", "22-005-01", "22-005-02", "22-005-03", "22-005-04", "22-005-06", "22-005-08", "22-005-09", "22-005-11", "22-005-12", "22-005-13", "22-005-14", "22-005-15", "22-005-20", "22-005-21", "22-005-22", "22-007", "22-007-03", "22-007-04", "22-007-07", "22-007-11", "22-007-13", "22-007-17", "22-007-18", "22-007-19", "22-007-22", "22-007-25", "22-007-27", "22-007-28", "22-008-01", "22-008-02", "22-008-03", "22-011", "22-011-01", "22-011-02", "22-011-03", "22-011-05", "22-011-06", "22-011-09", "22-011-10", "22-012", "22-013", "22-014", "22-014-02", "22-015", "22-016-01", "22-016-03", "22-016-04", "22-016-06", "22-016-08", "22-016-11", "22-016-19", "22-016-21", "22-016-24", "22-016-43", "22-017", "22-017-02", "22-017-03", "22-018", "22-019", "22-020", "22-021", "22-021-01", "22-021-02", "22-021-04", "22-021-06", "22-021-07", "22-021-08", "22-021-10", "22-021-13", "22-021-14", "22-022", "22-022-01", "22-023", "22-024", "22-025", "22-026", "22-027", "22-027-01", "22-027-02", "22-027-03", "22-027-05", "22-027-06", "22-027-07", "22-027-09", "22-028", "22-030", "22-031", "22-031-01", "22-032", "22-033", "22-034", "22-034-02", "22-036", "22-036-01", "22-037", "22-038", "22-039", "22-040", "22-041", "22-042", "22-042-02", "22-044", "22-045", "22-046", "22-051", "22-053", "22-055-01", "22-058", "22-059", "22-060", "22-061", "22-061-01", "22-062", "22-063", "22-065", "22-067", "22-068", "22-069", "22-070", "22-071", "22-074", "22-075", "22-082", "22-084", "22-088", "22-090", "22-091", "22-094" ], "service_description": "Slack has transformed business communication. It's the leading channels-based messaging platform, used by millions to align their teams, unify their systems, and drive their businesses forward. Only Slack offers a secure, enterprise-grade environment that can scale with the largest companies in the world. It is a new layer of the business technology stack where people can work together more effectively, connect all their other software tools and services, and find the information they need to do their best work. Slack is where work happens. Slack can support customers who are seeking both an Li-SaaS (FedRAMP low impact level) and FedRAMP Moderate impact level authorization or ATO. The Enterprise Grid plan is for customers who require compliance with FedRAMP Moderate. Enterprise Select is no longer offered as of 8/1/2025. Slack's Pro and Business+ plans are for customers who require compliance with FedRAMP Li-SaaS or Low.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@slack-corp.com", "website": "https://slack.com/", "uei": "", "small_business": false, "business_categories": [ "Collaboration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1730866868", "name": "Smartsheet", "cloud_service_provider": "Smartsheet", "cloud_service_offering": "Smartsheet Gov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Smartsheet%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-03-08T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2019-04-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2019-08-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 29, "reuse": 34, "ready_status": "Not Active", "ready_date": "2019-03-08T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2019-04-09T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2019-08-12T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-08-12T20:00:00.000Z", "annual_assessment": "2011-08-12T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "F1603307884", "csp": "e-Builder, A Trimble Company", "cso": "Trimble Unity Construct Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1710033970", "csp": "Infor", "cso": "Infor Government Solutions (IGS) Software as a Service", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2422436886", "csp": "Laerdal Labs D.C.", "cso": "Laerdal -- SimCapture Cloud Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2110251776", "csp": "Ontario Systems, LLC d/b/a Finvi", "cso": "Ontario Cloud Federal (OCF)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2516365096", "csp": "Procore Technologies, Inc", "cso": "Procore for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Administration for Children & Families", "Argonne National Laboratory", "Bureau of Engraving and Printing", "Bureau of Indian Affairs", "Bureau of Reclamation", "Bureau of Safety and Environmental Enforcement", "Council of the Inspectors General on Integrity and Efficiency", "Defense Information Systems Agency", "Department of Health and Human Services", "Department of State", "Department of Veterans Affairs", "Federal Aviation Administration", "Federal Housing Finance Agency", "Fermi National Accelerator Laboratory", "First Responder Network Authority", "Food and Drug Administration", "General Services Administration", "Internal Revenue Service", "National Aeronautics and Space Administration", "National Nuclear Security Administration", "National Nuclear Security Administration / Energy Efficiency and Renewable Energy", "National Science Foundation", "National Telecommunications and Information Administration", "Nuclear Regulatory Commission", "Tennessee Valley Authority", "US Fish and Wildlife Service", "United States Geological Survey", "United States Mint" ], "agency_reuse": [ "22-007", "22-016-44", "22-027-03", "22-036", "22-084" ], "service_description": "Organizations need a way to get work done, not just talk about it. Smartsheet Gov is a secure and reliable platform that helps Federal agencies bring innovation, collaboration, and transparency to government initiatives. It helps eliminate productivity killers by automating repetitive tasks with simple rules that you can easily create without help from IT. With Smartsheet Gov, your agency can operate with an increased sense of agility, manage work in real time, and make better decisions with timely and accurate information. Find out why the GSA, Library of Congress, National Institutes of Health, National Parks Service, and US Department of Veterans Affairs trust Smartsheet for their strategic initiatives.", "fedramp_msg": "Smartsheet Gov previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "gov@smartsheet.com", "website": "https://www.smartsheet.com/solutions/federal-government", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2624679940", "name": "SMX", "cloud_service_provider": "SMX", "cloud_service_offering": "Elevate Intelligent Automation Platform (IAP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SMX%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-06-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [], "deployment_model": "Hybrid Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "SMX Elevate Intelligent Automation Platform (IAP) is a FedRAMP-certified PaaS that accelerates secure cloud adoption for commercial and government organizations—even in the most regulated environments. Elevate IAP integrates provisioning, monitoring, security, and lifecycle management to streamline operations, minimize complexity, and mitigate risks.\n\nWhat sets Elevate IAP apart:\n\nBuilt-in compliance at scale: Native controls and automations to support CMMC, HIPAA, HITECH, CJIS, PCI, SOC 1/2, FedRAMP, and DoD ILx baselines. Integrated authorization and governance: Platform-level authorization plus policy-driven guardrails simplify multi-tenant and cross-domain operations. ISV ecosystem on day one: Rapidly deploy leading solutions through the platform and partnerships — Beyond Identity, C3 AI, Cognition, ColorTokens, eShare, Versa — augmented by embedded capabilities like Dynatrace, Tenable Nessus SC and Trend Micro. Additional accredited IAP platforms deliver Appian and Juvare.\n\nMission-ready accelerators: Pre-built SMX solutions run natively on IAP to jumpstart outcomes:\nElevate AI: Secure Generative AI for sensitive missions\nElevate ATO Fast Track: Accelerated FedRAMP, CMMC, and DoD authorizations\nElevate FM: Financial Management\nElevate ISR: Intelligence, Surveillance, and Reconnaissance\nElevate NetEdge: Global resilient networking\nElevate Sensing: Space Domain Awareness\n\nBeyond Identity offers an authentication and access solution that maximizes phishing resistance, eliminates verifier impersonation risks, and leverages advanced cryptography to support enterprise environments seamlessly.\n\nC3 AI enables organizations to design, develop, deploy, and operate big data, predictive analytics, AI/ML, and Internet of Things (IoT) software applications. By combining state-of-the-art foundational large language models (LLMs), deep learning retrieval models, and the C3 AI Platform, C3 Generative AI serves as a deep domain knowledge source to support information retrieval across disparate datasets and improve decision-making.\n\nCognition provides the Cognition Platform (known as Devin) and an accompanying suite of AI tools to accelerate the software development lifecycle. Devin is a model-agnostic platform that leverages state-of-the-art models and advanced AI capabilities to deliver deep codebase understanding, system interpretation, code generation, testing, review, and deployment. Granular sandboxing and enterprise controls prevent unauthorized propagation of AI-generated changes and allow users to balance performance and cost. Engineering and security teams rely on Cognition to autonomously defend their codebases, modernize legacy languages (COBOL, Fortran, etc.), multiply developer capacity, and accelerate migrations and application modernization efforts.\n\nColorTokens Xshield is a Zero Trust micro segmentation solution engineered to halt lateral movement of malware, ransomware, and other threats across cloud workloads, on premises servers, endpoints, Kubernetes containers, OT/IoT devices, and legacy systems.\n\neShare enables organizations to share files and collaborate using link-based access—with dynamic access controls, watermarking, and persistent policy enforcement that travel with the data even after sharing. eShare ensures regulatory compliance and governance while boosting productivity, reducing IT overhead, and maintaining full data sovereignty.\n\nVersa Unified SASE for Government provides integrated networking and security capabilities, including:\nVersa Secure SD-WAN\nVersa Secure Private Access / Zero-Trust Network Access (ZTNA) / Security Services Edge (SSE)\nVersa Secure Internet Access / Next-Gen Firewall as a Service (NG-FWaaS), Next-Gen Secure Web Gateway (NG-SWG)\nVersa Secure Fabric / Secure Private & Internet Access (combines ZTNA and NG-SWG)\nInline Cloud Access Security Broker (CASB)\nNetwork Data Loss Prevention (DLP)\nDigital Experience Monitoring (DEM)\nCentralized management and orchestration across cloud-delivered and on-premises Versa Operating System (VOS) gateways\nSupport for shared or dedicated deployment models", "fedramp_msg": "", "sales_email": "ATO@smxtech.com", "security_email": "FedRAMP@smxtech.com", "website": "https://www.smxtech.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Collaboration", "Contact Center", "Cybersecurity & Risk Management", "Data Management", "Governance, Risk, and Compliance (GRC)", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1603077867", "name": "SMX (Formerly Smartronix)", "cloud_service_provider": "SMX (Formerly Smartronix)", "cloud_service_offering": "Elevate Intelligent Automation Platform (IAP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SMX%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-05-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2019-05-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2020-02-25T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-05-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": "2018-05-24T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-05-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-02-25T20:00:00.000Z", "cert_date": "2020-05-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-05-11T20:00:00.000Z", "annual_assessment": "2011-02-25T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Commodity Futures Trading Commission", "Department of Agriculture", "HHS Office of the Inspector General" ], "agency_reuse": [ "" ], "service_description": "SMX Elevate Intelligent Automation Platform (IAP) is a FedRAMP-certified PaaS that accelerates secure cloud adoption for commercial and government organizations—even in the most regulated environments. Elevate IAP integrates provisioning, monitoring, security, and lifecycle management to streamline operations, minimize complexity, and mitigate risks.\n\nWhat sets Elevate IAP apart:\n\nBuilt-in compliance at scale: Native controls and automations to support CMMC, HIPAA, HITECH, CJIS, PCI, SOC 1/2, FedRAMP, and DoD ILx baselines. Integrated authorization and governance: Platform-level authorization plus policy-driven guardrails simplify multi-tenant and cross-domain operations. ISV ecosystem on day one: Rapidly deploy leading solutions through the platform and partnerships — Beyond Identity, C3 AI, ColorTokens, eShare, Versa — augmented by embedded capabilities like Dynatrace, Tenable Nessus SC and Trend Micro. Additional accredited IAP platforms deliver Appian and Juvare.\n\nMission-ready accelerators: Pre-built SMX solutions run natively on IAP to jumpstart outcomes:\n\nElevate AI: Secure Generative AI for sensitive missions\n\nElevate ATO Fast Track: Accelerated FedRAMP, CMMC, and DoD authorizations\n\nElevate FM: Financial Management\n\nElevate ISR: Intelligence, Surveillance, and Reconnaissance\n\nElevate NetEdge: Global resilient networking\n\nElevate Sensing: Space Domain Awareness\n\nBeyond Identity offers an authentication and access solution that maximizes phishing resistance, eliminates verifier impersonation risks, and leverages advanced cryptography to support enterprise environments seamlessly.\n\nC3 AI enables organizations to design, develop, deploy, and operate big data, predictive analytics, AI/ML, and Internet of Things (IoT) software applications. By combining state-of-the-art foundational large language models (LLMs), deep learning retrieval models, and the C3 AI Platform, C3 Generative AI serves as a deep domain knowledge source to support information retrieval across disparate datasets and improve decision-making.\n\nColorTokens Xshield is a Zero Trust micro segmentation solution engineered to halt lateral movement of malware, ransomware, and other threats across cloud workloads, on premises servers, endpoints, Kubernetes containers, OT/IoT devices, and legacy systems.\n\neShare enables organizations to share files and collaborate using link-based access—with dynamic access controls, watermarking, and persistent policy enforcement that travel with the data even after sharing. eShare ensures regulatory compliance and governance while boosting productivity, reducing IT overhead, and maintaining full data sovereignty.\n\nVersa Unified SASE for Government provides integrated networking and security capabilities, including:\r\n\r\nVersa Secure SD-WAN\r\nVersa Secure Private Access / Zero-Trust Network Access (ZTNA) / Security Services Edge (SSE)\r\nVersa Secure Internet Access / Next-Gen Firewall as a Service (NG-FWaaS), Next-Gen Secure Web Gateway (NG-SWG)\r\nVersa Secure Fabric / Secure Private & Internet Access (combines ZTNA and NG-SWG)\r\nInline Cloud Access Security Broker (CASB)\r\nNetwork Data Loss Prevention (DLP)\r\nDigital Experience Monitoring (DEM)\r\nCentralized management and orchestration across cloud-delivered and on-premises Versa Operating System (VOS) gateways\r\nSupport for shared or dedicated deployment models", "fedramp_msg": "N/A", "sales_email": "ATO@smxtech.com", "security_email": "FedRAMP@smxtech.com", "website": "https://www.smxtech.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "AppStream", "Beyond Identity", "C3 AI", "CAMS AI Bot", "ColorTokens", "Deep Security", "Dynatrace", "Opterra", "Patch Management", "Periscope", "Privileged Access Manager", "SIEM", "UTM Firewall", "Versa Unified SASE for Government", "Vulnerability Scanning", "eShare" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2308159208", "name": "Snowflake Inc.", "cloud_service_provider": "Snowflake Inc.", "cloud_service_offering": "The Data Cloud on AWS GovCloud (High)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Snowflake%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-02-01T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-06-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-12-08T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-02-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-06-16T20:00:00.000Z", "cert_date": "2023-12-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-12-08T20:00:00.000Z", "annual_assessment": "2011-06-13T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2520950455", "csp": "Andesite AI, Inc.", "cso": "Andesite Azimuth for Government AAG", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "National Science Foundation" ], "agency_reuse": [ "22-007-03", "22-007-17", "22-007-25", "22-062", "22-067" ], "service_description": "Snowflake is the only data warehouse built for the cloud, enabling the data-driven enterprise with instant elasticity, secure data sharing and per-second pricing, across multiple clouds. Snowflake combines the power of data warehousing, the flexibility of big data platforms and the elasticity of the cloud at a fraction of the cost of traditional solutions. Find out more at https://www.snowflake.com/.\r\n\r\nSnowflake also provides connectors available for customers to use for connecting to Snowflake. Additional Snowflake Connector information can be found at the following location: https://docs.snowflake.com/en/developer-guide/drivers.", "fedramp_msg": "N/A", "sales_email": "FedRAMP@snowflake.com", "security_email": "FedRAMP@snowflake.com", "website": "https://www.snowflake.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1809360201", "name": "Snowflake Inc.", "cloud_service_provider": "Snowflake Inc.", "cloud_service_offering": "The Data Cloud on AWS US East/West", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Snowflake%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-10-07T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2019-12-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2020-05-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-07-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 55, "ready_status": "Not Active", "ready_date": "2019-10-07T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-12-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-05-18T20:00:00.000Z", "cert_date": "2020-07-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Centers for Medicare & Medicaid Services", "fedramp_auth": "2020-07-02T20:00:00.000Z", "annual_assessment": "2011-07-17T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2220549818", "csp": "CirrusMD", "cso": "CirrusMD Virtual Health Chat for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2112152882", "csp": "Datavant", "cso": "Datavant Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2432940371", "csp": "Docebo", "cso": "Docebo Learning Platform for Gov (DCBO-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2311345531", "csp": "Figma", "cso": "Figma for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919750997", "csp": "HackerOne", "cso": "HackerOne Continuous Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2607452240", "csp": "IBM", "cso": "GO.gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102758152", "csp": "Juniper Networks", "cso": "Juniper Mist", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2120962552", "csp": "LaunchDarkly", "cso": "LaunchDarkly", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332852130", "csp": "Medallia Inc.", "cso": "Mindful by Medallia", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1607057910", "csp": "New Relic", "cso": "New Relic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2310974411", "csp": "PagerDuty", "cso": "PagerDuty Operations Cloud", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR1818240234", "csp": "Perceptyx", "cso": "Perceptyx Insights Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2033152148", "csp": "Seven Bridges Genomics, Inc", "cso": "Seven Bridges Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2230451369", "csp": "Snyk", "cso": "Snyk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2334936522", "csp": "Socure, Inc.", "cso": "Socure for Government (SocureGov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2215045786", "csp": "Tenable", "cso": "Tenable Cloud Security for US Government - Ermetic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2501644859", "csp": "Vibrent Health", "cso": "Digital Health Research Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Centers for Medicare & Medicaid Services", "Department of Labor" ], "agency_reuse": [ "" ], "service_description": "Snowflake is the only data warehouse built for the cloud, enabling the data-driven enterprise with instant elasticity, secure data sharing and per-second pricing, across multiple clouds. Snowflake combines the power of data warehousing, the flexibility of big data platforms and the elasticity of the cloud at a fraction of the cost of traditional solutions. Find out more at https://www.snowflake.com/.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "FedRAMP@snowflake.com", "website": "https://www.snowflake.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Research", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1809360202A", "name": "Snowflake Inc.", "cloud_service_provider": "Snowflake Inc.", "cloud_service_offering": "The Data Cloud on Azure Government (High)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Snowflake%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-05-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-05-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-06-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-05-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-05-13T20:00:00.000Z", "cert_date": "2025-06-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Centers for Medicare & Medicaid Services", "fedramp_auth": "2025-06-17T20:00:00.000Z", "annual_assessment": "2011-04-23T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Centers for Medicare & Medicaid Services" ], "agency_reuse": [ "" ], "service_description": "Snowflake is the only data warehouse built for the cloud, enabling the data-driven enterprise with instant elasticity, secure data sharing and per-second pricing, across multiple clouds. Snowflake combines the power of data warehousing, the flexibility of big data platforms and the elasticity of the cloud at a fraction of the cost of traditional solutions. Find out more at https://www.snowflake.com/.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "FedRAMP@snowflake.com", "website": "https://www.snowflake.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Research", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2230451369", "name": "Snyk", "cloud_service_provider": "Snyk", "cloud_service_offering": "Snyk for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Snyk%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-01-31T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-08-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-01-31T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-08-08T20:00:00.000Z", "cert_date": "2025-04-07T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-07T20:00:00.000Z", "annual_assessment": "2011-08-08T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1916254386", "csp": "Boomi", "cso": "Boomi Enterprise Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Centers for Medicare & Medicaid Services", "Strategic Petroleum Reserve" ], "agency_reuse": [ "22-007-11", "22-007-25", "22-058" ], "service_description": "Snyk for Government (https://app.snykgov.io/) is a cloud driven, developer security platform that scans code early in the software development lifecycle, providing developers with vulnerability information about their projects directly in the IDE and PR Checks, as well as providing actionable fix advice. Powered by an industry-leading security intelligence database, Snyk for Government analyzes code, open-source dependencies, containers, and IaC (Infrastructure as Code) to find, prioritize, and automatically fix vulnerabilities in projects. Snyk users can interact with the service via the Snyk for Government Web UI, the Snyk CLI, in the IDE, or with an API.\nSnyk for Government is hosted within AWS US East as the Cloud Service Provider (CSP) which assures product lines are maintained in a secure and trusted environment. Snyk for Government boundary includes the Production environment consisting of virtual compute, storage, databases, and internal management web applications.\nThe Snyk for Government environment is designed and operated based on security compliance and operations best practice by automating the build and operational processes as much as possible using Infrastructure as Code (IaC), CIS benchmarks, vulnerability scanning, continuous monitoring of critical security controls and a managed system development process to obtain initial and continuous FedRAMP Moderate Approval to Operate (ATO).", "fedramp_msg": "N/A", "sales_email": "fedramp@snyk.io", "security_email": "fedramp@snyk.io", "website": "https://snyk.io/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2334936522", "name": "Socure, Inc.", "cloud_service_provider": "Socure, Inc.", "cloud_service_offering": "Socure for Government (SocureGov)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Socure%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-11-14T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-07-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-11-14T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-07-31T20:00:00.000Z", "cert_date": "2025-03-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-19T20:00:00.000Z", "annual_assessment": "2011-03-14T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Small Business Administration" ], "agency_reuse": [ "" ], "service_description": "Socure for Government (SocureGov) is delivered as a SaaS offering using a multi-tenant Public Cloud computing environment. SocureGov is available to, and provides digital identity proofing and fraud prevention capabilities for, customers who want to enable a simple, seamless, and secure verification process for consumers. The platform applies artificial intelligence and machine learning techniques with trusted online/offline data intelligence from physical government-issued documents as well as email, phone, address, IP, device, velocity, date of birth, SSN, and the broader internet to verify identities in real time. It is the only solution that analyzes and correlates every facet of an individual’s digital identity to accurately verify individual identities while simultaneously detecting fraud. The platform is fully compliant with FedRAMP Moderate security controls and has been certified by the Kantara Initiative to meet NIST SP 800-63 Identity Assurance Level 2. SocureGov provides several important capabilities listed below:\n\n- Socure Verify uses a triangulated data approach and leverages artificial intelligence and machine learning to verify an identity across 400+ trusted sources, and then correlates thousands of identity data points—online and offline—to resolve to a single best-matched entity. \n\n- Sigma Identity Fraud provides high-assurance trust and detects digital identity fraud across the customer lifecycle. \n\n- Sigma Synthetic applies the Federal Reserve’s definition of synthetic identity fraud which focuses on “manipulated” and “fabricated” types to support customers in determining the optimal follow-on treatment — without adding unnecessary friction.\n\n- Email Risk Score leverages machine learning models and feedback loops to analyze over 56 email fraud predictors, assessing risk throughout the customer lifecycle.\n\n- Phone Risk Score leverages adaptive machine learning and continuous feedback data to verify phone number risk and ownership, while ensuring a seamless user experience for legitimate customers.\n\n- Address Risk Score establishes address-level risk and its correlation to a holistic identity profile, empowering businesses to deflect identity fraud attacks without adding friction to legitimate customers. \n\n- Global Watchlist Screening and Monitoring screens, monitors, and dispositions users in real time against sanctions, enforcement lists, politically exposed persons databases, adverse media information, and custom lists\n\n- Digital Intelligence continuously monitors and assesses user interactions, helps detect anomalies, and enhances identity proofing, to provide a secure and trustworthy environment for both organizations and their users. \n\n- Predictive Document Verification (DocV) verifies ID, biometrics, PII, barcode, and device and behavior intelligence in a single platform to accurately detect and prevent deepfakes, fake IDs, and stolen and fabricated identities from entering the digital economy, in under 2 seconds. \n\n- Image Alert List is a live monitoring service that checks documents to identify individuals who previously attempted a transaction under different identities.\n\n- Decision Module provides a seamless method to orchestrate the breadth of Socure’s products, enabling a customer to set risk thresholds and help automate decisions to accept, reject, review, resubmit, or refer individuals in an identity verification flow", "fedramp_msg": "N/A", "sales_email": "sales@socure.com", "security_email": "fedramp-sensitive@socure.com", "website": "https://www.socure.com/", "uei": "HMULLC9YKLC4", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2000945223", "name": "Software AG Government Solutions", "cloud_service_provider": "Software AG Government Solutions", "cloud_service_offering": "ARIS Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Aris%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-11-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-05-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-07-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-11-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-05-20T20:00:00.000Z", "cert_date": "2020-07-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-07-09T20:00:00.000Z", "annual_assessment": "2011-12-09T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Engraving and Printing", "Department of Education", "Department of Energy", "Government National Mortgage Association" ], "agency_reuse": [ "" ], "service_description": "ARIS Government Cloud is a platform hosted on AWS GovCloud Kubernetes Infrastructure, offering both dedicated and multi-tenant environments for U.S. government users. Tailored to meet the strictest security standards, ARIS Government Cloud is managed and operated by only U.S. Persons, the solution ensures the highest levels of data security, confidentiality, and availability, empowering government operations to optimize and govern their business processes effectively.\n\n \n\nARIS provides a comprehensive platform to model, analyze, and optimize business processes across government operations. The solution supports all stages of business process management, from process discovery to design, analysis, and continuous improvement. With integrated reporting and data analytics capabilities, ARIS helps users identify inefficiencies, mitigate risks, and improve service delivery while ensuring full compliance with federal guidelines.\n\n \n\nKey Capabilities:\n\nBusiness Process Modeling (BPM): ARIS enables users to map, simulate, and refine processes, ensuring both operational efficiency and regulatory adherence at every step.\nGovernance, Risk, and Compliance (GRC): ARIS delivers a comprehensive framework for maintaining federal compliance, offering robust governance tools, audit trails, and risk management functionalities to safeguard data integrity.\nProcess Mining: The platform’s real-time analytics drive data-informed decision-making, helping users enhance accountability and continuously optimize operations.\n \n\nALFABET is the premier solution for Enterprise Architecture (EA), IT Planning, and Strategic Portfolio Management (SPM). Recognized as a leader in the Gartner EA Magic Quadrant for over 17 consecutive years, Alfabet stands out as the only top-tier solution featured in both the EA and SPM Magic Quadrants. It continues to maintain its FedRAMP authorization under the ARIS registration.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "jonathan.strzalka@aris.com", "website": "https://aris.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2135915901", "name": "Solventum", "cloud_service_provider": "Solventum", "cloud_service_offering": "Solventum RevCycle Health Services Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Solventum%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-12-08T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-02-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-05-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-12-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-02-04T20:00:00.000Z", "cert_date": "2022-05-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-05-12T20:00:00.000Z", "annual_assessment": "2011-02-04T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "RevCycle Health Services Platform (RHSP) is a platform which hosts and supports the operations of key Solventum software systems. These systems include (but are not limited to) Natural Language Processing (NLP) for automatic suggestion of CPT and ICD codes to assist with Computer Assisted Coding (CAC); GPCS (Grouper Plus Content Services) providing reliable, classification, grouping, edits and reimbursement content; Clinical Documentation Integrity (CDI); Enterprise Analytics reporting; worksheet services; clinician created document input; medical coding edits; medical evaluation and management; medical coding assistance system. RHSP utilizes robust AI-inclusive methodologies to create a comprehensive multi-service platform to derive medical codes, assist with medical terminology, and ease the provider workflow.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "solventumfedramp@3mhealth.jsmalerts.atlassian.net", "website": "https://www.solventum.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2002367706", "name": "Somnoware Healthcare Systems", "cloud_service_provider": "Somnoware Healthcare Systems", "cloud_service_offering": "Somnoware", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Somnoware%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-12-17T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-12-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-12-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-12-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-12-17T20:00:00.000Z", "cert_date": "2021-12-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-12-06T20:00:00.000Z", "annual_assessment": "2011-12-17T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Somnoware delivers accelerated diagnosis and outcome management for patients with OSA and COPD through its cloud-based platform. Physicians can generate diagnostic reports for any sleep or pulmonary test instantly by leveraging Somnoware's clinical intelligence and integrations with all major diagnostic devices, EMR applications, and therapy manufacturers. Providers have real-time insights to patient CPAP therapy progress, risk profiles, and engagement metrics via Somnoware’s Care Management Console.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "somno-fedadmin@resmed.com", "website": "https://www.somnoware.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2531434700XL", "name": "Spectro Cloud", "cloud_service_provider": "Spectro Cloud", "cloud_service_offering": "Palette VerteX", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Spectro%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-08-15T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-09-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2025-09-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-08-15T20:00:00.000Z", "ip_prog_date2": "2025-09-10T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2025-09-17T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-09-17T20:00:00.000Z", "annual_assessment": "2011-09-04T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Spectro Cloud Palette VerteX automates the provisioning of Kubernetes clusters across on-premise, Edge, and cloud systems allowing for easy development and deployment. Spectro Cloud has simplified the path to provisioning a functional Kubernetes cluster across multiple backend systems including but not limited to AWS, Google Cloud Platform (GCP), and Azure. \n\nThe system incorporates the provisioning of pre-hardened Amazon Machine Image (AMI) and container images as well as the ability to simplify deployments to pre-defined blueprints. Spectro Cloud delivers a simplified pipeline to customer management and deployment of Kubernetes at scale with the ability to support thousands of clusters. \n\nPalette VerteX allows users to construct flexible stacks from operating system (OS), Kubernetes, container network interfaces (CNI), and container storage interfaces (CSI) to additional add-on application services; therefore, the entire stack of Kubernetes is deployed, updated, and managed as one unit, without split responsibility from virtual machines, base OS, Kubernetes infrastructure, and add-ons.", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class B Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "contact@spectrocloud.com", "security_email": "privacy@spectrocloud.com", "website": "https://www.spectrocloud.com/", "uei": "EYBQRENSLSN5", "small_business": true, "business_categories": [ "Data Management", "Development Tools", "Network Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2531434700", "name": "Spectro Cloud", "cloud_service_provider": "Spectro Cloud", "cloud_service_offering": "Palette VerteX", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Spectro%20Logo.png", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-08-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-09-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Spectro Cloud Palette VerteX automates the provisioning of Kubernetes clusters across on-premise, Edge, and cloud systems allowing for easy development and deployment. Spectro Cloud has simplified the path to provisioning a functional Kubernetes cluster across multiple backend systems including but not limited to AWS, Google Cloud Platform (GCP), and Azure. \n\nThe system incorporates the provisioning of pre-hardened Amazon Machine Image (AMI) and container images as well as the ability to simplify deployments to pre-defined blueprints. Spectro Cloud delivers a simplified pipeline to customer management and deployment of Kubernetes at scale with the ability to support thousands of clusters. \n\nPalette VerteX allows users to construct flexible stacks from operating system (OS), Kubernetes, container network interfaces (CNI), and container storage interfaces (CSI) to additional add-on application services; therefore, the entire stack of Kubernetes is deployed, updated, and managed as one unit, without split responsibility from virtual machines, base OS, Kubernetes infrastructure, and add-ons.", "fedramp_msg": "N/A", "sales_email": "contact@spectrocloud.com", "security_email": "privacy@spectrocloud.com", "website": "https://www.spectrocloud.com/", "uei": "EYBQRENSLSN5", "small_business": true, "business_categories": [ "Data Management", "Development Tools", "Network Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2213722684", "name": "Spider Strategies", "cloud_service_provider": "Spider Strategies", "cloud_service_offering": "Spider Impact for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Spider%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-04-12T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-06-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-12-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-04-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-06-07T20:00:00.000Z", "cert_date": "2022-12-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Information Systems Agency", "fedramp_auth": "2022-12-13T20:00:00.000Z", "annual_assessment": "2011-11-28T04:00:00.000Z", "independent_assessor": "MindPoint Group, A Tyto Athene Company", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency" ], "agency_reuse": [ "" ], "service_description": "Spider Impact for Government enables cloud-based performance management for defining, measuring, and reporting agency performance against targets and strategic plans. The system is the Federal Government dedicated environment of Spider Strategies’ Spider Impact software. Spider Impact for Government collects, stores, and displays agency key performance indicators (KPIs), generates executive Briefings, Dashboards, and Reports, and enables data analysis and exploration through its business intelligence reporting engine. Spider Impact for Government Scorecards allow agencies to define KPIs and metrics and align them to the overall agency strategy through objectives, initiatives, and corrective action plans. This permits users to track and evaluate their agency’s performance strategically by comparing KPI performance against targets and goals resulting in Red/Amber/Green assessments. Spider Impact for Government Dashboards and Reports allow agencies to create custom, ad-hoc, or cascading dashboards to track and report performance across teams, projects, strategies, or organizations with dynamically updating data collected and reported via Spider Impact for Government scorecards and datasets. The result is reports and dashboards that provide a common operating picture across an agency, based on timely data and insights from agency leaders. Spider Impact for Government Datasets provides users a business intelligence engine to explore and analyze large amounts of data, allowing users to discover insights, trends, correlations, or anomalies within and across agency datasets. Datasets permits agencies to apply conditional and Boolean logic to sort, filter, or report subsets of data. Spider Impact for Government automates data input to save countless hours of data collection, entry, and quality review resulting in greater efficiency in data gathering, greater speed to reporting, and increased return on investment by allowing organizations to devote user time to data analysis and not data collection. Spider Impact for Government, from Spider Strategies, is an approved Software-as-a-Service (SaaS) Performance Management suite for all Federal Government customers, including the Department of Defense at Impact Level 4 (DoD IL4).", "fedramp_msg": "N/A", "sales_email": "government@spiderstrategies.com", "security_email": "security@spiderstrategies.com", "website": "https://www.spiderstrategies.com/", "uei": "QNF8NE7JQ2R9", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2314156865", "name": "Splunk", "cloud_service_provider": "Splunk", "cloud_service_offering": "Splunk Cloud Platform for FedRAMP High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Splunk%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-02-22T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-10-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-09-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 8, "reuse": 9, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-02-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-10-13T20:00:00.000Z", "cert_date": "2024-09-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-09-13T20:00:00.000Z", "annual_assessment": "2011-10-13T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2520950455", "csp": "Andesite AI, Inc.", "cso": "Andesite Azimuth for Government AAG", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2526948870", "csp": "Ontic Technologies", "cso": "Ontic for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Bureau of Industry and Security", "Bureau of Labor Statistics", "Cybersecurity & Infrastructure Security Agency", "Defense Information Systems Agency", "Department of Commerce", "Department of State", "First Responder Network Authority", "HHS Office of the Inspector General" ], "agency_reuse": [ "22-021-06", "22-062" ], "service_description": "Splunk Cloud provides operational intelligence capabilities to organizations around the world. It provides an easy and fast way to analyze the massive streams of machine-generated data coming from IT systems and applications, wherever they are deployed-on-premises, in virtualized environments or in the cloud.\r\n\r\nSplunk Cloud delivers the Splunk Enterprise software in a cloud environment where the setup and management of the support infrastructure is performed by Splunk Cloud Operations. Splunk Enterprise is a software platform to search, analyze, and visualize the machine-generated data gathered from the websites, applications, sensors, devices, and so on, that comprise your IT infrastructure or business.\r\n\r\nAfter you define the data source, Splunk Cloud indexes the data stream and parses it into a series of individual events that you can view and search. Organizations may use the search processing language or the interactive pivot feature to create reports and visualizations.", "fedramp_msg": "N/A", "sales_email": "splunkcloudfedsales@external.cisco.com", "security_email": "splunk-fedramp@cisco.com", "website": "https://www.splunk.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Fleet Management", "Network Management", "Operations Management", "Research", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "Private Connectivity", "Splunk Cloud Platform", "Splunk Enterprise Security", "Splunk IT Service Intelligence" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1607197917", "name": "Splunk", "cloud_service_provider": "Splunk", "cloud_service_offering": "Splunk Cloud Platform for FedRAMP Moderate", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Splunk%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-03-09T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-08-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-10-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 22, "reuse": 156, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-03-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-08-29T20:00:00.000Z", "cert_date": "2019-10-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "International Trade Administration", "fedramp_auth": "2019-10-11T20:00:00.000Z", "annual_assessment": "2011-08-17T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2108360349", "csp": "Adobe", "cso": "Adobe Acrobat Sign for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226322745", "csp": "Autodesk", "cso": "Autodesk for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918442180", "csp": "Bizagi Corp.", "cso": "Bizagi Cloud for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2504148525", "csp": "Booz Allen Hamilton", "cso": "Footprint", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2220549818", "csp": "CirrusMD", "cso": "CirrusMD Virtual Health Chat for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2315535023", "csp": "Cisco Systems Inc.", "cso": "Cisco Meraki US Government Region", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2029183077", "csp": "Cority Software Inc.", "cso": "CorityOne", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1509217359", "csp": "Cornerstone OnDemand", "cso": "Cornerstone Galaxy", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814557199", "csp": "DNAnexus, Inc.", "cso": "DNAnexus Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1603307884", "csp": "e-Builder, A Trimble Company", "cso": "Trimble Unity Construct Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2510664395", "csp": "ExtraHop Networks", "cso": "ExtraHop RevealX Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406453618", "csp": "LabArchives", "cso": "LabArchives for Government (LG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2428168490", "csp": "LogicMonitor", "cso": "LM for Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2224739070", "csp": "National Resident Matching Program", "cso": "iMatch", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2028977567", "csp": "NetDocuments Software, Inc.", "cso": "NetDocuments Document Management System (DMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2135637226", "csp": "Pearson VUE", "cso": "Pearson Federal Cloud System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1818240234", "csp": "Perceptyx", "cso": "Perceptyx Insights Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2422240916", "csp": "Rapid7", "cso": "InsightGovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2004753002", "csp": "Relativity ODA LLC", "cso": "RelativityOne Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134635186", "csp": "Synack", "cso": "On-Demand Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2100740435", "csp": "Tango", "cso": "Tango", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2110342613", "csp": "Tanium", "cso": "Tanium Cloud for US Government (TC-USG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814276801", "csp": "Tenable Public Sector (TPS)", "cso": "Tenable Government Solutions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1509237360", "csp": "Veracode", "cso": "Veracode Online Security Platform for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2501644859", "csp": "Vibrent Health", "cso": "Digital Health Research Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Brookhaven Site Office", "Centers for Disease Control and Prevention", "Defense Counterintelligence and Security Agency", "Department of Education", "Department of Labor", "Department of State", "Department of the Interior", "Federal Deposit Insurance Corporation", "Federal Housing Finance Agency", "Food and Drug Administration", "Internal Revenue Service", "Justice Management Division", "National Institutes of Health", "National Science Foundation", "Office of Financial Research", "State Office of the Inspector General", "Strategic Petroleum Reserve", "Tennessee Valley Authority", "Treasury Inspector General for Tax Administration", "United States Patent and Trademark Office", "Universal Service Administrative Company" ], "agency_reuse": [ "22-002-02", "22-002-06", "22-002-08", "22-003", "22-005", "22-005-01", "22-005-03", "22-005-08", "22-005-11", "22-005-12", "22-005-21", "22-007", "22-007-02", "22-007-04", "22-007-17", "22-007-18", "22-007-22", "22-007-25", "22-011", "22-011-03", "22-011-05", "22-011-06", "22-011-10", "22-014-02", "22-015", "22-016-01", "22-016-06", "22-016-08", "22-017", "22-018", "22-019", "22-020", "22-021", "22-021-02", "22-021-03", "22-021-06", "22-021-10", "22-021-13", "22-021-14", "22-022", "22-023", "22-025", "22-027", "22-027-01", "22-027-07", "22-027-09", "22-031", "22-031-01", "22-032", "22-034", "22-034-02", "22-036", "22-036-01", "22-037", "22-038", "22-039", "22-040", "22-041", "22-042", "22-042-02", "22-044", "22-045", "22-051", "22-058", "22-059", "22-061", "22-061-01", "22-062", "22-065", "22-067", "22-070", "22-071", "22-074", "22-075", "22-082", "22-084" ], "service_description": "Splunk Cloud provides operational intelligence capabilities to organizations around the world. It provides an easy and fast way to analyze the massive streams of machine-generated data coming from IT systems and applications, wherever they are deployed-on-premises, in virtualized environments or in the cloud.\n\r\nSplunk Cloud delivers the Splunk Enterprise software in a cloud environment where the setup and management of the support infrastructure is performed by Splunk Cloud Operations. Splunk Enterprise is a software platform to search, analyze, and visualize the machine-generated data gathered from the websites, applications, sensors, devices, and so on, that comprise your IT infrastructure or business.\n\r\nAfter you define the data source, Splunk Cloud indexes the data stream and parses it into a series of individual events that you can view and search. Organizations may use the search processing language or the interactive pivot feature to create reports and visualizations.", "fedramp_msg": "N/A", "sales_email": "splunkcloudmoderatesales@external.cisco.com", "security_email": "", "website": "https://www.splunk.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "Admin Config Service", "Automated Private App Validation", "Cloud Monitoring Console", "Dashboard Studio", "Dynamic Data Active Archive (DDAA)", "Dynamic Data Active Searchable (DDAS)", "Dynamic Data Self-Storage (DDSS)", "Federated Search", "Ingest Actions", "KV Store", "Private Connectivity", "Splunk Cloud Platform", "Splunk Enterprise Security", "Splunk IT Service Intelligence", "Splunk SOAR" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2035740126", "name": "Sprinklr, Inc.", "cloud_service_provider": "Sprinklr, Inc.", "cloud_service_offering": "Sprinklr CXM for Government (CXM)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Sprinklr%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-05-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-09-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-09-27T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-05-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-09-16T20:00:00.000Z", "cert_date": "2022-09-27T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Census Bureau", "fedramp_auth": "2022-09-27T20:00:00.000Z", "annual_assessment": "2011-09-16T04:00:00.000Z", "independent_assessor": "Tevora Business Solutions, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Consumer Financial Protection Bureau", "Department of Agriculture", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Sprinklr CXM for Government helps organizations create, manage, and optimize customer experiences across various digital channels including social media, messaging, email, and websites. Sprinklr's AI-backed core platform consists of five products: Modern Marketing, Modern Advertising, Modern Research, Modern Care, and Modern Engagement.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@sprinklr.com", "website": "https://www.sprinklr.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2135043135", "name": "SRR International,Inc.", "cloud_service_provider": "SRR International,Inc.", "cloud_service_offering": "CloudLCMS", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SRR%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-05-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-07-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-08-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-05-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-07-15T20:00:00.000Z", "cert_date": "2023-08-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-08-09T20:00:00.000Z", "annual_assessment": "2011-07-15T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "The CloudLCMS is a rapid authoring learning content management platform. The CloudLCMS produces fully 508 compliant eLearning courses that are able to be exported in SCORM 1.2, 2004, xAPI and HTML. The courses are fully responsive and utilize a deep scrolling design that will function on all modern PC and mobile platforms. The system is a collaborative environment that allows developers to work together with a team or individually. The CloudLCMS allows for custom themes and menus along with plugins to extend functionality within training courses.", "fedramp_msg": "N/A", "sales_email": "rekha.jadala@srrintl.com", "security_email": "rekha.jadala@srrintl.com", "website": "https://cloudlcms.com/", "uei": "VNSNDLBVLK35", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2130949241", "name": "StackArmor", "cloud_service_provider": "StackArmor", "cloud_service_offering": "Rally", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Rally%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-02-07T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-04-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-09-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-02-07T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-04-20T20:00:00.000Z", "cert_date": "2022-09-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Patent and Trademark Office", "fedramp_auth": "2022-09-26T20:00:00.000Z", "annual_assessment": "2011-04-20T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Rally, hosted by stackArmor, helps US government agencies plan, manage, track their work with a focus on continuous improvement. It offers complete traceability from initial investment decisions to delivery. Developed by Broadcom, Rally provides unparalleled speed and scale to the largest enterprises, connecting deliverables with strategic roadmaps and financial plans. Rally helps align your teams to your Agency's strategic goals, providing executive visibility and the ability to deliver on a predictable cadence.\r\n\n\nRally provides the following capabilities:\n- Business Steering\n- Portfolio Planning and Execution\n- Cross-Team Planning and Execution\n- Team Planning and Execution\n- Continuous Improvement\n\nRally is hosted by stackArmor and distributed and supported by Carahsoft.", "fedramp_msg": "N/A", "sales_email": "fedramp-rally@stackarmor.com", "security_email": "fedramp-armory@stackarmor.com", "website": "https://www.stackarmor.com/solutions/rally", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2535459082", "name": "stackArmor", "cloud_service_provider": "stackArmor", "cloud_service_offering": "The Armory20x", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Armory%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-11-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2025-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-09-26T20:00:00.000Z", "ip_prog_date2": "2025-11-13T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2025-12-05T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-12-05T20:00:00.000Z", "annual_assessment": "2011-12-12T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Armory20x is a purpose-built solution hosted on Google Cloud Platform (GCP) that provides cloud service providers (CSPs) and independent software vendors (ISVs) a deployment landing zone within an Armory20x tenant to deploy workloads that store, process, and/or transmit federal data categorized at the FedRAMP 20x Low baseline.\n\nThe tenant leverages the security and General Support System (GSS) services of The Armory | FedRAMP Marketplace to provide a known-secure deployment location, leveraging a majority of GCP FedRAMP authorized native cloud and in-boundary security services, for CSPs seeking authorization under 20x.\n\nAs part of the FedRAMP 20x Pilot, CSPs must report their Key Security Indicator (KSI) status as defined by the FedRAMP 20x Key Security Indicators | FedRAMP.gov. Armory20x leverages stackArmor's automated assessment solution to provide status for all required KSIs for a CSP deployed within a 20x tenant.\nTenants are heavily customizable, allowing Armory20x customers to deploy workloads that are suited to their particular application and service needs.\nstackArmor personnel assist CSPs/ISVs with deploying services in a manner that meets FedRAMP 20x KSI requirements and helps ensure an authorizable status under the 20x program.", "fedramp_msg": "", "sales_email": "", "security_email": "jdettweiler@stackarmor.com", "website": "https://stackarmor.com/", "uei": "", "small_business": true, "business_categories": [ "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2513256853", "name": "StackArmor", "cloud_service_provider": "StackArmor", "cloud_service_offering": "The Armory", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Armory%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-03-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-12-08T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": "2025-03-28T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-12-08T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-07-22T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Armory is a purpose-built General Support System (GSS) cloud service offering (CSO) that delivers security and compliance services aligned to the FedRAMP High risk categorization baseline. The Armory accelerates the ability for Independent Software Vendors (ISVs) and Enterprises to meet complex regulatory requirements on the Google Cloud Platform (GCP). The Armory delivers and continuously monitors FedRAMP compliant, risk-mitigated cloud solutions to government agencies and their partners through either a hosted or managed delivery model by: \n• providing full compliance architecture, engineering, documentation and audit support,\n• reducing the burden to both agencies and SaaS providers, and - expanding the catalog of mission-critical cloud solutions available to agencies. \nThe Armory is built on the FedRAMP authorized Assured Workloads Google Cloud Platform and includes configuration managed Google resources such as VPCs (Virtual Private Clouds), networking components, security controls, identity and access management (IAM) policies, and logging and monitoring mechanisms. The system also provides access to in-boundary tools for automation, configuration management, and account management. Each of these mechanisms has been configured to meet specific regulatory requirements such as International Traffic in Arms Regulations (ITAR), FedRAMP High, and Department of Defense (DoD) Impact Levels 4/5 (IL 4/5). \nThe Armory provides ISVs, Enterprises and Agencies with access to pre-production staging environments and Google “Landing Zones”. These are securely architected environments that enable quick and compliant deployments, and a scalable foundation for their regulated cloud workloads. This secure standardized approach to creating and managing deployments allows government agencies and customers to easily deploy and manage their workloads while maintaining security, governance, and compliance. \nISV Partners:\nQanapi - As our inaugural ISV Partner, Qanapi’s FIPS-validated API service delivers state-of-the-art encryption and protection at the data level. Designed to safeguard sensitive, industry-regulated, and mission-critical data, Qanapi’s API seamlessly integrates into any software, device, or network. Built on a zero-trust architecture, it ensures robust security across organizations of all sizes, in both the public and commercial sectors. With Qanapi, organizations can achieve the highest level of data protection and compliance, regardless of their environment. Discover more at qanapi.com\nMxDR for Government – Accenture Federal Services' MxDR for Government is a managed security service designed specifically for federal agencies. Powered by Google SecOps, it offers 24/7 continuous threat detection, automated response, and threat-centric case management to help agencies rapidly neutralize cyber threats while maintaining strict regulatory compliance. Discover more at: https://www.accenture.com/us-en/industries/accenture-federal-services/cybersecurity/mxdr-government", "fedramp_msg": "N/A", "sales_email": "thearmory@stackarmor.com", "security_email": "gcp-organization-admins@stackarmor.com", "website": "https://stackarmor.com/armory/", "uei": "Z553Q1FPWYK5", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Network Management", "Operations Management", "Storage", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1722532017", "name": "stackArmor", "cloud_service_provider": "stackArmor", "cloud_service_offering": "Clarity", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Clarity%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-08-07T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2018-05-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2019-04-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-07-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": "2017-08-07T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-05-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-04-16T20:00:00.000Z", "cert_date": "2019-07-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Cancer Institute", "fedramp_auth": "2019-07-09T20:00:00.000Z", "annual_assessment": "2011-04-16T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Commodity Futures Trading Commission", "Customs and Border Protection", "National Cancer Institute", "Warfighting Acquisition University" ], "agency_reuse": [ "" ], "service_description": "Clarity, hosted by stackArmor, offers U.S. government agencies a secure and scalable Strategic Portfolio Management (SPM) solution to make critical decisions with confidence. Part of Broadcom's ValueOps platform and hosted by stackArmor, Clarity allows agencies to customize organizational hierarchies, investment objects, roadmaps and much more in order to run projects and programs their way.\r\n\r\nThe solution provides modern project and portfolio management tools to prioritize requirements, maximize resources, and optimize work with ease.\r\n- One platform. Collect, prioritize, assess, and deliver projects, portfolios, and products, and empower people enterprise-wide, with a single system of record.\r\n- Flexible solution. Manage your entire innovation lifecycle the way you work, including project and portfolio management, demands and resources, and financials and time tracking.\r\n- Persona-based user experience. Modules are specifically designed for project managers, resources managers, and project coordinators to support anything from ad hoc work to complex programs.\r\n- Team collaboration. New tools let team members collaborate within the context of their current work, such as resource or financial management. At the portfolio level, the quality of planning and execution increases significantly when employees can crowdsource ideas and decisions.\r\nClarity is hosted in The Armory by stackArmor which is a dedicated environment for the purpose of delivering software to government customers as a FedRAMP service within Google’s Public Sector Cloud. Clarity is distributed and supported by Carahsoft.", "fedramp_msg": "N/A", "sales_email": "fedramp-clarity@stackarmor.com", "security_email": "fedramp-armory@stackarmor.com", "website": "https://www.stackarmor.com/solutions/clarity", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2500938675", "name": "Steel Patriot Partners", "cloud_service_provider": "Steel Patriot Partners", "cloud_service_offering": "Federal ZenGRC", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/SteelPatriot%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-16T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-12-16T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Federal ZenGRC is delivered as a software-as-a-service (SaaS) offering using multi-tenant Amazon Web Services (AWS) cloud computing, leveraging isolated accounts per environment. It is available to public companies, federal, state, local, and tribal governments, research institutions, federal contractors, and government contractors that demonstrate requirements for governance, risk, and compliance services.\n\nFederal ZenGRC is a tool for creating, implementing, and managing a Governance, Risk, and Compliance (GRC) program. It facilitates effective and efficient GRC functions, such as document management, program control management, security and compliance framework alignment, approval, internal audit, external assessment, risk assessment, vendor risk assessment, and continuous monitoring. It leverages an object-based approach allowing full mapping across object types ensuring a holistic view of the program structure and cohesiveness. It securely stores evidence for all object types and enables reuse across multiple frameworks and audits. Management and evidence-collection tasks can be automated, and workflows assigned to guide proper execution by organizational personnel.", "fedramp_msg": "N/A", "sales_email": "fedramp@steelpatriotpartners.com", "security_email": "security-alerts@steelpatriotpartners.com", "website": "https://www.federalzengrc.com/", "uei": "GV91FN3G6WC6", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2628345439", "name": "Stell Engineering", "cloud_service_provider": "Stell Engineering", "cloud_service_offering": "Stell Requirements Management System", "logo": "", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-24T21:35:50.751Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-23T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "ControlCase", "service_model": [], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Stell Requirements Management Software (SRMS) is delivered as a fully managed FedRAMP Moderate Equivalent software-as-a-service (“SaaS”) offering to help federal contractors meet the requirements for protecting Controlled Unclassified Information (CUI). The SRMS is a  multi-tenant Public cloud available and purpose built for commercial aerospace and defense industrial base (government and DoW contractors) partners who handle data subject to government regulations and requirements for the protection of CUI.", "fedramp_msg": "", "sales_email": "hello@stell-engineering.com", "security_email": "security@stell-engineering.com", "website": "https://stell-engineering.com/", "uei": "J6T4RJG18UL4", "small_business": true, "business_categories": [ "Artificial Intelligence (AI)", "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1918740338", "name": "Sumo Logic", "cloud_service_provider": "Sumo Logic", "cloud_service_offering": "Sumo Logic", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Sumo%20Logic%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-04-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-05-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to Legacy FedRAMP Ready" }, { "date": "2020-11-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2021-01-29T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 125, "ready_status": "Not Active", "ready_date": "2019-05-31T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-04-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-11-13T20:00:00.000Z", "cert_date": "2021-01-29T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2021-01-29T20:00:00.000Z", "annual_assessment": "2011-11-13T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2031936863", "csp": "Armis Federal LLC", "cso": "Armis FedRAMP Edition (AFE)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2031222637", "csp": "Aurigo Software Technologies, Inc.", "cso": "Masterworks Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1916254386", "csp": "Boomi", "cso": "Boomi Enterprise Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000939520", "csp": "Broad Institute, Inc.", "cso": "Terra", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2014656304", "csp": "Civis Analytics, Inc.", "cso": "Civis Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2200507410", "csp": "Copado", "cso": "Copado GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1308202329", "csp": "Coupa Software Inc", "cso": "Coupa Spend Management for Federal", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1606087903A", "csp": "Deltek - Replicon", "cso": "Replicon Cloud Platform (Enterprise Time Tracking Platform)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1412165928", "csp": "Everbridge", "cso": "Critical Event Management Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2131766015", "csp": "Genesys", "cso": "Genesys Cloud CX", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919750997", "csp": "HackerOne", "cso": "HackerOne Continuous Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "F1408115175", "csp": "Huddle US", "cso": "Huddle Enterprise Cloud Content Collaboration and File Sharing Portal for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2607452240", "csp": "IBM", "cso": "GO.gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2429166928", "csp": "Ideagen", "cso": "Ideagen Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2102758152", "csp": "Juniper Networks", "cso": "Juniper Mist", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226144516", "csp": "MARi, LLC", "cso": "MARi", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1508127183", "csp": "NetComm", "cso": "Beacon", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2310974411", "csp": "PagerDuty", "cso": "PagerDuty Operations Cloud", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2235229299", "csp": "Paperless Innovations, Inc.", "cso": "Actus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2334936522", "csp": "Socure, Inc.", "cso": "Socure for Government (SocureGov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2125561001", "csp": "Unqork, Inc.", "cso": "Unqork for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1509237360", "csp": "Veracode", "cso": "Veracode Online Security Platform for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2433985791", "csp": "Vyond", "cso": "Vyond for Government", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2219763604", "csp": "Zscaler, Inc.", "cso": "Zscaler Private Access - Government (Zero Trust Exchange - VPN Replacement)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Housing and Urban Development", "Office of Navajo and Hopi Indian Relocation", "United States Geological Survey" ], "agency_reuse": [ "" ], "service_description": "Sumo Logic is a cloud-native SaaS log analytics platform helping customers enable application reliability, secure and protect against modern threats, gain insights into cloud infrastructures, and obtain comprehensive visibility across their threat landscape. Sumo Logic provides the following solutions within our FedRAMP Moderate product offering:\n\nCloud Security Incident and Event Management (SIEM) - Full-featured SIEM automates alert triage, correlation, and threat detection at scale to speed investigation and response times while reducing analyst alert fatigue. Community analytics delivers machine learning (ML) predicted true positive Global Confidence scores, along with global threat benchmarking.\n\nCloud Security Monitoring & Analytics - Sumo Logic supports the entire spectrum of security use cases - from centrally logging compliance data to monitoring and securing public and hybrid clouds, to delivering market-leading DevSecOps capabilities.\n\nApplication Modernization and Observability - Reduce downtime by finding, investigating, and resolving customer-impacting issues faster with real-time alerting and dashboards for all data - logs, metrics, and traces.\n\nInfrastructure Monitoring - On-call teams can reduce mean-time-to-resolution (MTTR) by simplifying the work required to validate issues, identify suspects, and quickly remediate. Reduce downtime and solve customer-impacting issues faster with an integrated observability platform for all application data.\n\nCompliance Monitoring - Security and configuration analytics provide the data monitoring, dashboards, analyses, and reporting capabilities necessary to achieve rapid, cost-effective continuous compliance readiness for many industry leading cybersecurity frameworks and programs - NIST 800-53, FISMA, FedRAMP, PCI, SOC2, ISO, HIPAA and more.\n\nMulti-cloud support - Unify and monitor logs, metrics, and traces from multi-cloud or hybrid cloud environments. Sumo Logic enables real-time visibility into AWS, Azure, and GCP cloud applications and infrastructure. Moreover, 150 apps and native integrations give out-of-the-box visibility into the technologies that power your applications.\n\nService Maps - The Sumo Logic service visualizes all service dependencies to give you insights into end-to-end execution of your mission critical transactions with open standard compatible distributed tracing data. Application and service dashboards break down latency, load, and errors to identify services contributing to application slowdowns\n\nAdvanced Alert Analytics - Advanced analytics are applied across a unified repository of telemetry data to surface noteworthy insights that guide on-call teams to the root cause.", "fedramp_msg": "N/A", "sales_email": "sales@sumologic.com", "security_email": "compliance@sumologic.com", "website": "https://www.sumologic.com/public-sector/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Fleet Management", "Mobile Device Management (MDM)", "Network Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2134635186", "name": "Synack", "cloud_service_provider": "Synack", "cloud_service_offering": "On-Demand Security Testing Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Synack%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-02-04T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-01-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-12-19T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-02-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-01-04T20:00:00.000Z", "cert_date": "2023-12-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-12-19T20:00:00.000Z", "annual_assessment": "2011-01-04T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Education", "Department of Health and Human Services", "Department of State", "Office of Personnel Management" ], "agency_reuse": [ "" ], "service_description": "The Synack Platform is a multi-tenant SaaS that delivers continuous security testing, vulnerability management and a managed Vulnerability Disclosure Program (VDP) supported by a network of vetted security researchers. Synack's security testing products include on-demand penetration testing of web, host, cloud, APIs, LLM (AI) and mobile assets – covering both internal and external assets for most federal use cases. \n\nSynack Platform users are able to identify the total amount of vulnerabilities found, get analysis on which are most severe, review stats from testing performed and receive patch efficacy data - providing observability data that can then be correlated with SOC workflows. Synack enables efficient remediation, helping security leaders identify the root cause of vulnerabilities so they can prioritize and eliminate them. Synack combines human and automated test findings with compliance checklists to enhance security posture and provide audit-ready reports that can help meet compliance, including FISMA/NIST 800-53 and BOD 20-01. Synack365, a popular offering on the Synack platform, provides around-the-clock security testing 365 days a year.", "fedramp_msg": "N/A", "sales_email": "fedramp@synack.com", "security_email": "fedramp@synack.com", "website": "https://www.synack.com/platform/fedramp/", "uei": "EDRWE6PRKL85", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "Launchpoint+", "Platform Services", "Smartscan" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2533435144", "name": "Syneren Technologies Corporation", "cloud_service_provider": "Syneren Technologies Corporation", "cloud_service_offering": "Configurable Case Management Application Platform (CMAP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/CMAP%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-05T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-09-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2025-09-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-09-05T20:00:00.000Z", "ip_prog_date2": "2025-09-18T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2025-09-30T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-09-30T20:00:00.000Z", "annual_assessment": "2011-09-18T04:00:00.000Z", "independent_assessor": "Kompleye", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Syneren has developed the Configurable Case Management Application Platform (CMAP) which is a powerful, no-code/low-code platform with AI/ML, that streamlines systems from request submission to approval with real-time insights, custom reports, and smart navigation tools for effortless control. \n\nIt is a completely configurable Microservices architecture-based solution with a robust, secure and scalable software framework.\n\nCMAP provides to the agencies an AI/ML, RPA chatbot integrated business process automation and low-code, no-code platform to deploy modernized applications at the speed of the mission. CMAP offers Platform-as-a-Service (PaaS) and Software-as-a-Service (SaaS) functionality which empowers client organizations to seamlessly design, automate, track, analyze and report on their mission critical operations, while meeting with stringent FedRAMP security standards. CMAP significantly increases efficiency, productivity and fosters collaboration and transparency while reducing manual tasks. CMAP can be used to efficiently build, enhance and maintain applications in various use cases including law enforcement, finance, logistics, contracts, acquisitions, case management, human resources, IT Service Management, etc.", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class B Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "info@syneren.com", "security_email": "synfedramp@syneren.com", "website": "https://syneren.com/", "uei": "KQUHZMCJGUC5", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Contact Center", "Content Management System (CMS)", "Customer Relations Management (CRM)", "Data Management", "Development Tools", "Human Resources", "Law Enforcement" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1901136437", "name": "Synergetics Incorporated", "cloud_service_provider": "Synergetics Incorporated", "cloud_service_offering": "Open Federal Logistics Information System (OpenFLIS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Synergetics%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-12-16T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2022-03-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2022-10-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2020-12-16T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2022-03-23T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2022-10-13T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-10-13T20:00:00.000Z", "annual_assessment": "2011-10-12T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency" ], "agency_reuse": [ "" ], "service_description": "OpenFLIS is an easily customizable, FedRAMP Ready, cloud-based data collation, retrieval, and dissemination platform that enables users to search and display information across multiple databases, sources, and formats. When coupled with the Synergetics Craft Product Architecture (SCPA) application tool, OpenFLIS provides the ability to reach across technological generations and sources to provide access and visibility to any data in any format. The system consists of the SCPA collation and dissemination tool as well as provisioning, cataloging, search and discovery, Information Management / Knowledge Management (IM/KM), and administrator’s modules that comprise the platform.", "fedramp_msg": "Open Federal Logistics Information System (OpenFLIS) previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "", "security_email": "fedramp@synergetics.com", "website": "https://synergetics.com/openflis/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1730842236", "name": "T-Metrics, Inc.", "cloud_service_provider": "T-Metrics, Inc.", "cloud_service_offering": "T-Metrics Cloud Contact Center (TCCC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TMetrics%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-03-02T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-10-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-03-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-10-11T20:00:00.000Z", "cert_date": "2023-03-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-03-31T20:00:00.000Z", "annual_assessment": "2011-10-12T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Safety and Environmental Enforcement", "National Oceanic and Atmospheric Administration", "United States Equal Employment Opportunity Commission" ], "agency_reuse": [ "" ], "service_description": "T-Metrics' Cloud Omnichannel Contact Center (CCaaS) solution provides Federal agencies with a secure, customizable, highly flexible, low-risk, and scalable option to improve the experiences of interactions with their constituents.\n\nFederal agencies looking to modernize their legacy premises-based contact centers now have a choice to migrate at their pace without compromising security. Building on two decades of innovation and security, T-Metrics’ CCaaS solution is the only single omnichannel contact center in the market that meets both the robust FedRAMP security standards for cloud deployments and the security and interoperability demands of the Joint Interoperability Test Command (JITC) certification for premises-based deployments.\n\nThrough its flexible architecture, the TM-Cloud Omnichannel Contact Center enables agencies to customize cloud deployment models – public cloud (multi-tenant) and/or private cloud (dedicated instance) - to address different constituent requirements.\n\nStrategically designed, TM-Cloud Omnichannel Contact Center capitalizes on cloud architecture to integrate an agency's existing staff with existing customer telephony platforms (e.g., Avaya, Cisco, MS Teams, Zoom, etc.), which minimizes migration and project risk. Agencies can choose cloud, on-premises virtual machine, and/or on-premises physical servers to integrate existing voice services to the TM-Cloud Omnichannel Contact Center. This flexibility allows for zero-maintenance for full cloud deployments. Agencies choosing on-premises integration will provision hardware according to their own requirements and procedures. \n\nThe TM-Cloud Omnichannel Contact Center can be scaled to accommodate current and future contact center resource demands and requirements. The ability to obtain agent subscriptions in small or large quantities enables organizations to quickly scale to levels necessary to handle even the most dynamic volume, especially for emergencies or seasonal demand. The contact center distributed architecture ensures a high-available and high-performance system is deployed in the T-Metrics FedRAMP cloud. Resiliency, scalability, and advanced feature access were traditionally available to only the largest contact centers with significant capital investment. Through the TM-Cloud Omnichannel Contact Center, these advantages are now available to every customer through flexible monthly subscriptions. \n\nThe cloud-based service offerings provided by the T-Metrics TM-Cloud Omnichannel Contact Center include the following:\n- Skills-based and Attribute-based Routing\n- Interactive Voice Response\n- Microsoft TeamsTM Integration\n- Digital Channel Communication\n- Customer & Agent Callbacks\n- Voice and Screen Recordings\n- Analytics and Sentiment Analysis\n- Quality Management\n- Section 508 compliance (for agents and callers)\n- Advanced Agent and Supervisory Dashboards\n- Standard and Custom Reporting\n- Self Service Administration Portals\n- Natural language speech recognition\n- Voicebots and chatbots\n\nTo learn more about how the T-Metrics CCaaS solution can satisfy your contact center requirements, please visit https://www.tmetrics.com/industries/fedramp.", "fedramp_msg": "N/A", "sales_email": "fedramp@tmetrics.com", "security_email": "fedrampsecurity@tmetrics.com", "website": "https://www.tmetrics.com/industries/fedramp", "uei": "PLA5ANKFM4K3", "small_business": true, "business_categories": [ "Analytics", "Communication", "Contact Center", "Customer Service" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2428653856", "name": "Tactical Edge", "cloud_service_provider": "Tactical Edge", "cloud_service_offering": "Total Visibility Anywhere", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TacticalEdge%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-07-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-07-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-07-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-07-17T20:00:00.000Z", "cert_date": "2025-04-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-09T20:00:00.000Z", "annual_assessment": "2011-07-16T04:00:00.000Z", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy" ], "agency_reuse": [ "" ], "service_description": "Total Visibility Anywhere (TVA) is a cloud-based Software as a Service (SaaS) that is hosted within the East/West Regions of Amazon Web Services (AWS). TVA provides an integrated view across all functions within the supply chain by improving performance and data quality, providing a unified workflow and real-time global asset tracking and productive insights with comprehensive, multi-function visibility. TVA provides in-depth Asset, Fleet, Shipment, Order, Warehouse, Request, and Device and Sensor management capabilities.", "fedramp_msg": "N/A", "sales_email": "contact@tvasolution.com", "security_email": "security@tvasolution.com", "website": "https://tvasolution.com/", "uei": "", "small_business": true, "business_categories": [ "Accounting", "Analytics", "Communication", "Data Management", "Fleet Management", "Mobile Device Management (MDM)", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1913835324", "name": "TalaTek, LLC", "cloud_service_provider": "TalaTek, LLC", "cloud_service_offering": "TalaTek intelligent Governance and Risk Integrated Solution (TiGRIS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TalaTek%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-03-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-09-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-11-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2019-03-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-09-30T20:00:00.000Z", "cert_date": "2019-11-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-11-01T20:00:00.000Z", "annual_assessment": "2011-09-29T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Council of the Inspectors General on Integrity and Efficiency", "Pension Benefit Guaranty Corporation", "Strategic Petroleum Reserve" ], "agency_reuse": [ "" ], "service_description": "The TalaTek intelligent Governance and Risk Integrated Solution (TiGRIS) Software-as-a-Service (Saas) manages a customer’s Governance, Risk and Compliance (GRC) needs for an information system or network throughout its entire lifecycle. From inception, through assessment and continuous monitoring, to decommissioning, the TiGRIS application has been developed, in house, by TalaTek's team of security professionals, to provide a user-friendly, powerful tool for GRC management.", "fedramp_msg": "N/A", "sales_email": "3PAO@TalaTek.com", "security_email": "3PAO@TalaTek.com", "website": "https://talatek.com/", "uei": "WN1UKHV49AC4", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Governance, Risk, and Compliance (GRC)", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2213647361", "name": "Talkdesk", "cloud_service_provider": "Talkdesk", "cloud_service_offering": "Talkdesk CX Cloud™ Government Edition", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Talkdesk%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-09-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-02-03T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-06-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-09-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-02-03T20:00:00.000Z", "cert_date": "2025-06-03T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-06-03T20:00:00.000Z", "annual_assessment": "2011-02-03T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Centers for Medicare & Medicaid Services" ], "agency_reuse": [ "" ], "service_description": "Talkdesk CX Cloud™ Government Edition is a cloud native, browser-based, SaaS contact center platform that enables government institutions to deliver modern customer service, increase efficiencies, reduce costs, and innovate with technology to better meet their mission. Included in Talkdesk CX Cloud™ Government Edition is voice engagement including orchestration and routing; agent workspace as a single pane of glass for conversational context; quality management to evaluate agent interactions; workforce management to forecast, plan and develop staff schedules; standard and custom reporting with bespoke and granular access to data and dashboards; and BYOC (bring your own carrier) capabilities.", "fedramp_msg": "N/A", "sales_email": "publicsectorsales@talkdesk.com", "security_email": "fedramp@talkdesk.com", "website": "https://www.talkdesk.com/call-center-solutions/government-education/government/", "uei": "R8T5GQYJV2F8", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Contact Center", "Customer Relations Management (CRM)", "Customer Service" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2100740435", "name": "Tango", "cloud_service_provider": "Tango", "cloud_service_offering": "Tango", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Tango%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-12-08T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-09-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-09-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 11, "reuse": 10, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-12-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-09-16T20:00:00.000Z", "cert_date": "2021-09-21T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Federal Aviation Administration", "fedramp_auth": "2021-09-21T20:00:00.000Z", "annual_assessment": "2011-09-16T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Commodity Futures Trading Commission", "Department of Labor", "Department of State", "Department of Veterans Affairs", "Department of the Interior", "Drug Enforcement Administration", "FHFA Office of the Inspector General", "Federal Aviation Administration", "Federal Energy Regulatory Commission", "Health Resources and Services Administration", "Office of Justice Programs" ], "agency_reuse": [ "" ], "service_description": "Tango Reserve is a SaaS workplace solution for managing your use of workspaces. Tango provides this the capability to manage conference rooms, assigned seats, hoteling areas, neighborhoods, and provides operational Analytics for workplace optimization efforts.\n\n Functionality includes:\n\nScalable instance\nSolution delivers a workspace hoteling, conference room, and assetreservation system.\nSecure authentication\nEnd user interface(s) to find available places to work and reserve workstations, conference rooms, and resources like equipment, services, health & wellness, parking, and transportation.\nAllows employees to set profile preferences, check-in, cancel and modify their reservations at their convenience.\nAdd digital signage like Room Kiosks, Lobby Kiosks, Desk Signs, and ID Screens\nWayfinding options to locate colleagues to enhance engagement, teamwork, and productivity.\nUtilize integrations with existing platforms to rapidly adopt and deploy.\nSelf-service administrative tools and capabilities\nAbility to set limitless configuration of users and space relationships\nAnalytics: Tango Reserve allows operational data to be revealed to understand how your office and people are working. By measuring your office space and managing your workplace operations this supports the agency mission to make data-driven decisions about your workplace and real estate as well as save tax-payers money.\n \n\nIn addition to the solutions listed above, Tango customers can also license the extended services through the Tango Core applications:\n\nTango Space Management software helps organizations plan, forecast and operate from a single solution. Space is space planning software to streamline space allocation, plan moves, analyze floor plans, and test potential scenarios. Key features include, CAD integration, stacking and blocking, planning and forecasting, scenario planning, move management, IoT integrations, and allocation reporting.\n\nTango Transactions is built on a foundation of proven analytic capabilities, innovative data sets, native mapping and mobile-first experiences that are required to win in today’s dynamic corporate real estate environment. Key features include scenario development, pipeline management, budgeting, property analysis, mapping, and budgeting.\n\nTango Platform provides both a single source of truth for all location and asset information.\n \n\nTango’s Program & Project Management software solution organizes project portfolio and aligns activities across budgets & timelines. Provides a program view of all activities, including new builds, retrofits, remodels, closures, and special projects. Tango Projects is a single, integrated solution to align program budgets, timelines, and development activities across portfolio of projects, to quickly identify exceptions and take corrective action.\n\nTango’s Lease Administration and Lease Accounting software brings together lease financials, accounting, and administration to manage all lease activities including options, expirations, renewals, key clauses, co-tenancy, recurring costs, rent rolls, expense reconciliation, and is built to comply with FASB ACS 842, IFRS 16 and GASB 87.\n\nTango Predictive Analytics solutions provide the necessary intelligence to develop smarter location strategies and make better capital investment decisions by combining advanced AI/ML modeling with data in a scalable geospatial analytics platform.\n\nTango Edge, an extension of the company’s Integrated Workplace Management System solution, provides a fully integrated collaboration workspace and communications hub that enables your partners to access and interact with Tango solutions.\n\nAgencies leverage these solutions to manage:\n\nHybrid Work – Manage and measure work from any location including WFH (work from home), the office, other Agencies, or coworking locations.\n \nReduce the Footprint – Measure the actual utilization of space for short duration Workplace Surveys as well as continuous, consistent, and systematic measurement of People, Presence, and Workplace use across the entire portfolio year after year. Agencies can cut their office space by up to 50%, as facilitated for GSA’s 1800F HQ in Washington, DC. Tango Reserve Analytics data analysis provides management the support tool necessary to augment space planning and office space invest/divest decisions.\n \nZero Emission Buildings – Through actual utilization measurement, real estate reduction, and shared desk strategies, Agencies can reduce their office space, and thus reduce their Carbon Footprint by up to 50%", "fedramp_msg": "N/A", "sales_email": "Sales@TangoAnalytics.com", "security_email": "FedRAMP@TangoAnalytics.com", "website": "https://login.agilquest.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2110342613", "name": "Tanium", "cloud_service_provider": "Tanium", "cloud_service_offering": "Tanium Cloud for US Government (TC-USG)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Tanium%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-05-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2022-09-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2023-02-01T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-11-08T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": "2022-05-16T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-09-19T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-02-01T20:00:00.000Z", "cert_date": "2023-11-08T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-11-08T20:00:00.000Z", "annual_assessment": "2011-02-01T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Environmental Management Consolidated Business Center", "Federal Communications Commission", "Health Resources and Services Administration", "Substance Abuse and Mental Health Service Administration" ], "agency_reuse": [ "" ], "service_description": "Tanium Cloud for US Government (TC-USG) delivers an agent-based endpoint management and security platform, managed and delivered as a cloud-hosted SaaS. The Tanium Core Platform and its services are automatically configured and maintained. For more information, please visit https://www.tanium.com.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@tanium.com", "website": "https://www.tanium.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "Tanium Account", "Tanium Ask", "Tanium Asset", "Tanium Automate", "Tanium Benchmark", "Tanium Certificate Manager", "Tanium Client Management", "Tanium Cloud Workloads", "Tanium Comply", "Tanium Connect", "Tanium Connector for Microsoft Intune", "Tanium Criticality", "Tanium Deploy", "Tanium Direct Connect", "Tanium Directory Query", "Tanium Discover", "Tanium End-User Notifications", "Tanium Endpoint Configuration", "Tanium Endpoint Management for Mobile", "Tanium Enforce", "Tanium Engage", "Tanium Gateway", "Tanium Guardian", "Tanium Guide", "Tanium Impact", "Tanium Integrations Gallery", "Tanium Integrity Monitor", "Tanium Interact", "Tanium Investigate", "Tanium Jump Gate", "Tanium Map", "Tanium Patch", "Tanium Performance", "Tanium Provision", "Tanium Reporting", "Tanium Reputation", "Tanium Reveal", "Tanium Risk", "Tanium SBOM", "Tanium Software Bill of Materials (SBOM)", "Tanium Threat Response", "Tanium Trends", "Tanium Zero Trust" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2624215150", "name": "TeamViewer", "cloud_service_provider": "TeamViewer", "cloud_service_offering": "TeamViewer DEX Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TMV%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-08T22:17:38.827Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-06-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "TeamViewer helps IT teams deliver frictionless IT for employees and seamless IT operations for IT teams, transforming IT from a cost center into a strategic enabler. As a leader in the Digital Employee Experience (DEX) market, we provide a powerful end-user computing automation platform that enables organizations to lower service desk costs, maintain compliance, prevent user frustration, and improve the experience employees have with their devices and IT services. \n\nThe platform is built on a client-server architecture hosted on Microsoft Azure Government. The Client service creates a secure, persistent connection with the DEX Platform service, enabling immediate outbound communication and real-time, device-generated, event-driven data delivery. A secondary communication channel, also initiated by the Client service, is used for large file transfers or non-urgent events such as inventory changes. \n \nKey Capabilities \nExperience Analytics \nVisualize and measure the end-user experience with continuous, real-time metrics across: \n• Stability – Frequency of OS and application crashes, hangs, and service failures, often unreported but highly disruptive. Events are captured in real-time and can be linked directly to ITSM tickets. \n• Responsiveness – Performance during normal operation, from OS startup speed to synthetic tests of system resources such as process creation, file operations, and registry access. \n• Performance – Weighted load and throughput scores for CPU, memory, and disk resources. \n\nEmployee Sentiment \nCapture real-time employee feedback on device performance, stability, and responsiveness through contextual surveys. Trigger follow-up actions when satisfaction scores are low. Send targeted notifications to employees about outages, maintenance windows, or important events. \n\nEndpoint Troubleshooting \nRemotely investigate and remediate device issues in real time—whether for a single device, a group, or the entire environment—reducing mean time to resolution (MTTR). \n\nInstruction Scheduling \nExtend Endpoint Troubleshooting by scheduling recurring instructions for ongoing maintenance or monitoring. \n\nEndpoint Automation \nLeverage real-time OS events to maintain baseline configurations, ensure critical services are always running, and prevent configuration drift. \n\nContent Distribution \nOptimize Microsoft Configuration Manager (ConfigMgr) software delivery and updates through peer-to-peer file sharing, reducing the need for on-premises Distribution Point servers and improving delivery speed. \n\nInventory Insights \nTrack hardware and software changes in real time. All events are normalized against a software catalog, giving IT a consolidated view of the environment and the ability to reduce software sprawl. \n\nApplication Experience Management (AXM) \nProactively monitor application performance at the endpoint. Real-time events provide visibility into application-level issues and version performance differences, enabling application owners to act quickly. \n\nPatch Insights \nStreamline patching cycles by identifying problematic devices or failed updates. Initiate patch deployment directly via ConfigMgr, WSUS, or Microsoft Update by triggering the Windows Update Agent. \n\nAPI Access \nExtend the DEX Platform with custom workflows and integrations into third-party systems such as ServiceNow to fit seamlessly into existing IT ecosystems.", "fedramp_msg": "", "sales_email": "sales@teamviewer.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://www.teamviewer.com/en-us/products/dex/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2533440977", "name": "TechnoMile", "cloud_service_provider": "TechnoMile", "cloud_service_offering": "TechnoMile GovCloud Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TechnoMile%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-11-13T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-11-13T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Sentar, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "TechnoMile GovCloud Platform is delivered as a Software as a Service (SaaS) offering using a multi-tenant public cloud computing environment. It is available to federal contractors and government contractors.", "fedramp_msg": "", "sales_email": "fedrampsales@technomile.com", "security_email": "securitycoordination@technomile.com", "website": "https://technomile.com/", "uei": "FXBLDM1BZJD3", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Customer Relations Management (CRM)", "Data Management", "Finance", "Legal & Policy", "Marketing & Sales", "Operations Management", "Research", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1912051231", "name": "TechTrend, Inc.", "cloud_service_provider": "TechTrend, Inc.", "cloud_service_offering": "Federal GovCloud (FGC) DevSecOps", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TechTrend%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-10-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2020-12-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2021-02-23T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-07-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2019-10-01T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-12-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-02-23T20:00:00.000Z", "cert_date": "2021-07-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Forest Service", "fedramp_auth": "2021-07-06T20:00:00.000Z", "annual_assessment": "2011-02-24T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture" ], "agency_reuse": [ "" ], "service_description": "Federal GovCloud DevSecOps (FGC DSO) combines an array of tools, integrates them together under the FedRAMP umbrella and provides a complete software-as-a-service solution to include hosting, patching and help desk support. FGC DSO enables U.S. federal government agencies to easily adopt practices to enhance software supply chain with a solution to automate development, security, and operations (DevSecOps) practices through every phase of the software development life cycle. FGC DSO SaaS enables rapid adoption of a continuous integration and continuous deployment (CI/CD) pipeline to deliver high quality citizen and public applications through its integrated security validation tools as a managed service. It resides on a FedRAMP authorized government cloud infrastructure and is provisioned as a dedicated suite of tools leveraging a suite of tools and technologies that provide the foundation to implement DevSecOps. Landing zones for applications are cloud vendor agnostic and the FGC DSO platform supports application deployments and secure management of infrastructure on Azure, Amazon Web Services, Google Cloud, low-code platforms (e.g., Power Platform), and on-premises or hybrid environments. \n\nFGC DSO has an integrated software factory capability which provides a managed hosting environment for PaaS services as part of the FGC DSO security authorization boundary that allow agencies to obtain application landing zone cloud hosting while meeting zero trust requirements. With FGC DSO, Federal agencies can focus on developing repeatable, modern, and secure applications to support their missions by utilizing a turnkey platform that help to meet federal security mandates. Leveraging FGC DSO will speed up agile application development, security compliance, integration testing, deployment and secure operational monitoring.", "fedramp_msg": "N/A", "sales_email": "info@techtrend.us", "security_email": "fedramp@techtrend.us", "website": "https://techtrend.us/", "uei": "U3QWA5LCAJ97", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2624255314", "name": "Tecsys, Inc.", "cloud_service_provider": "Tecsys, Inc.", "cloud_service_offering": "Elite Enterprise Solutions", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Tecsys%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-08T22:17:39.672Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-05-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Elite Enterprise Solutions (Elite) SaaS offering is a supply \nchain management platform designed for distribution organizations \nacross various industries, including healthcare, service parts, \nheavy equipment, industrial goods, and third-party logistics (3PL). \nIt offers an integrated suite of enterprise solutions to optimize \nsupply chain operations, improve efficiency, and enhance \ncustomer service. The Elite offering includes the following core \nmodules: \n• Warehouse Management\n• Transportation Management\n• Delivery Management\n• Distribution ERP\n• Billing Management\nFor healthcare organizations, the Elite system includes these \nadditional modules:\n• Point of Use\n• Pharmacy Inventory Management\n• Healthcare Supply Chain Management\nBuilt on the Itopia® platform, which adapts to organizational growth \nand complexity, Elite is highly customizable and ideal for \norganizations seeking a comprehensive, scalable supply chain \nsolution that provides end-to-end supply chain visibility and \ncompliance.\nElite is available to federal, state, local, and tribal governments, as \nwell as research institutions, federal contractors, government \ncontractors etc.", "fedramp_msg": "", "sales_email": "Bill.King@tecsys.com", "security_email": "security@tecsys.com", "website": "https://www.tecsys.com/", "uei": "LGK7KNBWEGP3", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Collaboration", "Finance", "Fleet Management", "Mobile Device Management (MDM)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1907847653", "name": "TeleTech (TTEC) Services Corporation", "cloud_service_provider": "TeleTech (TTEC) Services Corporation", "cloud_service_offering": "Humanify Enterprise - Government (Humanify Enterprise - G)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TTEC%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-02-13T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2019-05-07T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2019-12-26T05:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 11, "reuse": 10, "ready_status": "Not Active", "ready_date": "2019-02-13T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2019-05-07T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2019-12-26T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-12-26T20:00:00.000Z", "annual_assessment": "2011-12-26T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency", "Department of the Navy", "Federal Trade Commission", "General Services Administration", "NIH/National Institute of Child Health and Human Development", "National Institutes of Health", "National Oceanic and Atmospheric Administration", "Nuclear Regulatory Commission", "Office of Personnel Management", "United States Coast Guard", "United States Securities and Exchange Commission" ], "agency_reuse": [ "" ], "service_description": "TTEC Digital’s Humanify Enterprise for Government (Humanify G) is a secure customer experience VOIP solution, powered by Cisco’s UCCE and UC Enterprise Software. Designed for agencies with up to 80,000 unified communications endpoints and 24,000 knowledge workers or agents, it allows you to scale as needed to meet citizen demand.\r\n \r\nBy applying technologies like journey orchestration, analytics, and AI/automation you can deliver efficient and intuitive constituent services while reducing overall contact center costs.\r\n \r\nKey Features\r\n \r\nExperience Cloud integrates with Humanify Enterprise Workforce Optimization SaaS (WFOaaS Quality Assurance / Call Recording / Desktop Screen Recording, Speech Analytics, and Post Call IVR surveys, powered by Verint) to enable departments and agencies to capture citizen and stakeholder feedback after interactions with contact center agents, and then utilize that input to drive coaching and feedback. TTEC Humanify Enterprise - Government platform users can now obtain the unique value of these solutions working together to drive improvements in citizen and stakeholder service.\r\n \r\nWFOaaS Quality Assurance / Call Recording / Desktop Screen Recording. The Humanify Enterprise Workforce Optimization Software as a Service for Government Community Cloud provides Quality Monitoring (QM), Contact Recording, Text to Speech Analytics. The service records 100% of voice calls and 15% of contact center agent desktop screen recordings for compliance, transaction verification, and legal protection. Data is stored in a FedRAMP encrypted format and available for playback and analysis and for agent performance scoring.\r\n\r\nWorkforce Management (WFM) provides forecasting, multi-skill scheduling, and real-time adherence for contact center agents. Includes features for workflows, intra-day dynamic scheduling, audit trail reporting, and mentoring requests.\r\nThe speech-enabled Interactive Voice Response (IVR) enhanced by Natural Language Processing and Natural Language Understanding (NLU/NLP) enables seamless self-service capability through the use of Voice Bot and Chat Bot capability.\r\n \r\nExperience Cloud, powered by Verint Experience Management Experience Cloud, is a SaaS application platform that utilizes the TTEC Humanify Enterprise - G to make delivering exceptional experiences easy. The Experience Cloud gathers omni-channel experience information from citizens, employees, and digital site visitors and helps to prioritize and provide key insights on ways to improve those experiences. \r\n \r\nProcess and analyze direct feedback from multi-channel surveys, unstructured text data from open-ends and other comment streams, and behavior data from web interactions\r\nAutomate and speed decision-making with our proprietary Predictive Engine paired with Verint Professional Services guidance \r\nOperationalize across all functions with real-time triggers and alerts; custom dashboards for executives, service center managers, and contact center managers and agents; and case management tools for follow-ups when appropriate with a citizen or other key stakeholders\r\n \r\nExperience Cloud consists of multiple solutions that work either singly or together to capture, analyze, and act on citizen and stakeholder feedback. These solutions include:\r\n \r\nPredictive Experience allows organizations to measure citizen experiences across channels, prioritize resources effectively, accurately benchmark performance, and bring certainty to their experience programs with proven predictive data science and AI-powered technologies. \r\nDigital Experience captures real-time citizen-initiated feedback via web and mobile channels throughout the digital citizen journey, empowering organizations to make smarter, faster decisions to improve experiences.\r\nEnterprise Experience enables organizations to engage citizens and employees to understand, analyze, and orchestrate improved experiences, satisfaction, and trust across multiple channels.\r\nText Analytics provides the ability to analyze text information from any text stream, including surveys, comment posts, and others, and to extract key insights found in those text comments around the topics, keywords, and the related sentiment expressed in those comments \r\nUnified Experience enables Federal departments and agencies to capture feedback across virtually any channel, combine those feedback channels (and a wide variety of external data sources to enrich the data, correlate the information from disparate sources to create customized data models, and then use those data models to drive collaboration and closed-loop action on the data.\r\n \r\nHumanify Portal provides easy access to your contact center and unified communications administrative and management tools from a single interface. It increases the flexibility of the platform. It allows end-user administrators to perform Move, Add, Change, and Delete (MACD) activities for phones, personnel, locations, skill groups, agent teams, and many other system elements. It also allows administrators to change routing rules, IVR prompts, call queues, and contact flows. You can also increase the agility of managing your contact center operations with Humanify Portal Mobile, a 100% web-based application for on-the-move access. (508 Compliant)\r\n \r\nIntegration with Contact Center Solutions (Cisco, Genesys, and Amazon Connect)\r\n \r\nAvailability and Support\r\n \r\nHigh availability/disaster recovery deployed across two data centers for full failover in the event of an outage\r\n24x7x365 support with one of the largest pools of Cisco-certified engineers anywhere\r\nTTEC Digital delivers automated training programs and knowledge systems that enable CX delivery across every channel", "fedramp_msg": "Humanify Enterprise - Government (Humanify Enterprise - G) previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "FEDRAMPSALES@TTECDIGITAL.COM", "security_email": "PublicSectorCompliance@ttec.com", "website": "https://ttecdigital.com/solutions/humanify-g", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Contact Center", "Customer Relations Management (CRM)", "Customer Service" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2403936773", "name": "Telos Corporation", "cloud_service_provider": "Telos Corporation", "cloud_service_offering": "Xacta SaaS", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Telos%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-01-25T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2024-11-20T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2025-06-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-07-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": "2024-01-25T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-11-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-06-09T20:00:00.000Z", "cert_date": "2025-07-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-07-14T20:00:00.000Z", "annual_assessment": "2011-06-05T04:00:00.000Z", "independent_assessor": "SecureIT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of the Interior", "National Endowment for the Arts" ], "agency_reuse": [ "" ], "service_description": "Xacta® is a cyber GRC automation platform that supports assessment and authorization, remediation, and continuous monitoring. Xacta.ai builds on the platform with advanced AI capabilities that accelerate decision-making, reduce manual effort, and increase operational efficiency. Designed for IT risk and security compliance teams, Xacta operationalizes key security indicators (KSIs) across risk and compliance frameworks.\r\n\r\n \r\n\r\nThe FedRAMP Class D (High) Certificated SaaS platform of Xacta includes Xacta 360™ with the Propagation Utility (PU) and, optionally, Xacta.io™ and Xacta.ai™. Together, Xacta 360, Xacta.io, and Xacta.ai form a complementary suite of solutions that supports compliance and authorization for a variety of frameworks including, but not limited to, FISMA, NIST RMF, CNSSI 1253, NIST 800-53, NIST CSF, FedRAMP, COBIT 5, PCI-DSS, and ISO. The platform draws on a knowledgebase of over 5,000 security requirements and associated test procedures, cross-referenced across more than 100 security policies and standards, and produces artifacts in both human-readable office documents and machine-readable digital formats such as the Open Security Controls Assessment Language (OSCAL).\r\n\r\nIn addition to FedRAMP Class D (High) Certification, the SaaS version of Xacta is authorized at GovRAMP High, CMMC Level 2, CUI, and ISO 27001.\r\n\r\n \r\n\r\nXacta 360 streamlines security, risk, and compliance programs using a project-based workflow. It features out-of-the-box cyber risk management templates, customizable in a no-code/low-code UI, and automated workflows with prerequisites, role-based approvals, and intelligent capabilities. Users can conduct asset inventory and risk assessments, generate required compliance documentation and audit artifacts in real time, and automate compliance for over 100 regulations and policies.\r\n\r\n \r\n\r\nAdditionally, the Xacta 360 Propagation Utility allows administrators to easily update multiple active projects with changes from an assessment project workflow template.\r\n\r\nXacta.io correlates results from multiple security products across your organization into a single view, and maps them to the relevant controls for security and risk management. IT risk and security compliance teams can then use these results to create reports for analysis and to understand trending security issues in their environment.\r\n\r\n \r\n\r\nIncluded with Xacta.io is Xacta MetriX™, which offers additional powerful, modular reporting capabilities that allow compliance teams to easily build and edit custom widgets and dashboards.\r\n\r\n \r\n\r\nXacta.ai™ is the artificial intelligence capability at the core of the Xacta platform, empowering IT risk and security compliance teams to work more efficiently and make informed decisions. Xacta.ai can be customized by integrating your organization’s data to enable faster, more informed decisions and accelerate your GRC initiatives. Use Xacta.ai to draft control implementation statements and automatically check them for accuracy, generate targeted test procedures aligned to your environment, run queries on project artifacts, and more.\r\n\r\n \r\n\r\nDeployment options include Public SaaS up to FedRAMP Class D (High) and user provided infrastructure. In AWS environments, Xacta 360 can inherit common security controls from the underlying platform to reduce duplication of effort and accelerate authorization.", "fedramp_msg": "", "sales_email": "sales@telos.com", "security_email": "FRSI@telos.com", "website": "https://www.telos.com/offerings/xacta/", "uei": "JLW7WAKPEKD4", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2215045786", "name": "Tenable", "cloud_service_provider": "Tenable", "cloud_service_offering": "Tenable Cloud Security for US Government - Ermetic", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Tenable%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-12-14T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2024-07-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2025-01-27T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": "2023-12-14T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-07-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-01-27T20:00:00.000Z", "cert_date": "2025-03-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-26T20:00:00.000Z", "annual_assessment": "2011-01-24T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "International Trade Administration" ], "agency_reuse": [ "" ], "service_description": "Tenable Cloud Security is the actionable solution to cloud risk, rapidly exposing and closing priority security gaps caused by cloud misconfigurations, risky entitlements for users and services, vulnerabilities and overly-permissive access to confidential data. Tenable Cloud Security is a Cloud Native Application Protection Platform (CNAPP) solution that isolates and minimizes these risks at scale across infrastructure, workloads, identities and data in the cloud.", "fedramp_msg": "", "sales_email": "publicsector@tenable.com", "security_email": "compliance@tenable.com", "website": "https://www.tenable.com/products/tenable-cloud-security", "uei": "NDBFBWCL82D3", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1814276801", "name": "Tenable Public Sector (TPS)", "cloud_service_provider": "Tenable Public Sector (TPS)", "cloud_service_offering": "Tenable Government Solutions", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Tenable%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-07-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-03-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2021-09-22T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 20, "reuse": 148, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-07-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-03-24T20:00:00.000Z", "cert_date": "2021-09-22T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "International Trade Administration", "fedramp_auth": "2021-09-22T20:00:00.000Z", "annual_assessment": "2011-08-17T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2000174962", "csp": "Abbott, Inc.", "cso": "LibreView for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1708752710", "csp": "Armedia, LLC", "cso": "Armedia Content Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2412062433", "csp": "Atlassian", "cso": "Atlassian Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2128235497", "csp": "Bamboo Health, Inc.", "cso": "PMP Government-Gateway", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918442180", "csp": "Bizagi Corp.", "cso": "Bizagi Cloud for US Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2424553196", "csp": "BLINK CHARGING", "cso": "BLINK GOV", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2017462201", "csp": "Booz Allen Hamilton", "cso": "Supply Chain Master Catalog (SCMC) Government Cloud Solution", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2328145448", "csp": "Chargie, LLC", "cso": "Electric Vehicle Infrastructure Platform for Government", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2309544938", "csp": "Cloudera Government Solutions, Inc", "cso": "Cloudera for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234550858", "csp": "Concur Technologies, Inc.", "cso": "Concur Cloud for Public Sector", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2402468053", "csp": "Darktrace Federal Inc.", "cso": "Cyber AI Mission Defense and Email Protection", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "F1404304159", "csp": "DataBank Holdings", "cso": "FedRAMP Compliant CloudPlus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2100845343", "csp": "DevResults", "cso": "DevResults", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2327655698", "csp": "Gallery Systems", "cso": "TMS Gov Cloud Suite ", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1834348080", "csp": "GDC Integration, Inc.", "cso": "General Support System (GSS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1812058188", "csp": "GitHub", "cso": "GitHub Enterprise Cloud", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2234334891", "csp": "Glassbeam, Inc.", "cso": "Glassbeam Clinsights", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1512017638", "csp": "IdeaScale", "cso": "IdeaScale Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2027958176", "csp": "Issio Solutions, Inc.", "cso": "Issio Information System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2324452533", "csp": "Joint Commission Resources", "cso": "Tracers with AMP®", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335051964", "csp": "Keyfactor", "cso": "Keyfactor for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2118080669", "csp": "Knightscope, Inc.", "cso": "Knightscope Autonomous Security Robot (Knightscope ASR)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2406453618", "csp": "LabArchives", "cso": "LabArchives for Government (LG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2422436886", "csp": "Laerdal Labs D.C.", "cso": "Laerdal -- SimCapture Cloud Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2120962552", "csp": "LaunchDarkly", "cso": "LaunchDarkly", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2129953050", "csp": "Manhattan Associates, Inc.", "cso": "Manhattan Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2335153827", "csp": "MasterControl", "cso": "Quality Excellence Gov (Qx Gov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2225648574", "csp": "Mathematica Inc.", "cso": "Mathematica Cloud Support System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1303191948", "csp": "MAXIMUS Inc.", "cso": "MAXIMUS Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2032665434", "csp": "Menlo Security", "cso": "Cloud Security Platform powered by Isolation Core", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2332364851", "csp": "Moveworks", "cso": "Moveworks GovCloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2119265538", "csp": "NEOGOV", "cso": "NEOGOV Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134455708", "csp": "Nucleus Security, Inc", "cso": "Nucleus for Government (NucleusGov)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2526948870", "csp": "Ontic Technologies", "cso": "Ontic for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2235229299", "csp": "Paperless Innovations, Inc.", "cso": "Actus", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2202555908", "csp": "Pexip Inc.", "cso": "Pexip Government Cloud (PGC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2113157410", "csp": "Public Health Foundation", "cso": "TRAIN Learning Network", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2309954376", "csp": "RecAccess", "cso": "RecAccess", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2234256499", "csp": "Rubrik", "cso": "Rubrik Security Cloud - Government (RSC-G)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2418039495", "csp": "ScienceLogic, Inc.", "cso": "ScienceLogic Government Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1730842236", "csp": "T-Metrics, Inc.", "cso": "T-Metrics Cloud Contact Center (TCCC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213647361", "csp": "Talkdesk", "cso": "Talkdesk CX Cloud™ Government Edition", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2118555665", "csp": "Totara Learning Inc.", "cso": "Totara Talent Development Government Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421252644", "csp": "Varonis", "cso": "Varonis DatAdvantage Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2421252636", "csp": "Varonis", "cso": "Varonis Data Security Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2433985791", "csp": "Vyond", "cso": "Vyond for Government", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" } ], "agency_authorizations": [ "Bureau of Labor Statistics", "Cybersecurity & Infrastructure Security Agency", "Department of Energy", "Federal Emergency Management Agency", "Federal Reserve System", "Federal Retirement Thrift Investment Board", "First Responder Network Authority", "HHS Office of the Inspector General", "Internal Revenue Service", "National Institutes of Health", "National Science Foundation", "National Telecommunications and Information Administration", "Office of Personnel Management", "Pension Benefit Guaranty Corporation", "Strategic Petroleum Reserve", "Substance Abuse and Mental Health Service Administration", "Treasury Inspector General for Tax Administration", "United States International Trade Commission", "United States Patent and Trademark Office" ], "agency_reuse": [ "22-000", "22-002", "22-002-04", "22-002-05", "22-002-06", "22-005", "22-005-01", "22-005-03", "22-005-06", "22-005-09", "22-005-11", "22-005-14", "22-005-21", "22-007", "22-007-03", "22-007-04", "22-007-13", "22-007-17", "22-007-19", "22-007-22", "22-007-25", "22-007-28", "22-011-02", "22-011-03", "22-011-05", "22-011-09", "22-011-10", "22-014-02", "22-015", "22-016-18", "22-016-19", "22-017", "22-017-03", "22-017-06", "22-018", "22-019", "22-020", "22-021", "22-021-03", "22-021-04", "22-021-06", "22-022", "22-022-01", "22-023", "22-025", "22-027", "22-027-01", "22-027-03", "22-027-07", "22-030", "22-031", "22-032", "22-033", "22-034", "22-035", "22-036", "22-037", "22-038", "22-039", "22-040", "22-042", "22-044", "22-051", "22-055-01", "22-061", "22-061-01", "22-062", "22-063", "22-065", "22-068", "22-069", "22-074", "22-079", "22-080", "22-090", "22-092" ], "service_description": "Tenable One for Government is a SaaS platform that protects customers from advanced attacks by providing visibility into and assessment of the entire attack surface spanning IT, cloud, identities, hybrid apps, OT, IoT and unseen assets. The platform includes vulnerability management and enumeration, compliance management, cyber risk analysis and inventory capabilities. Included in this platform are Tenable Vulnerability Management FedRAMP, Tenable Web App Scanning FedRAMP, Tenable Identity Exposure (on-prem), Tenable Cloud Security FedRAMP (in process), Tenable OT Security (on-prem), Asset Inventory FedRAMP and Lumin Exposure View FedRAMP. These Tenable solutions can be licensed as part of Tenable One for Government, or individually to meet customers' unique requirements.", "fedramp_msg": "N/A", "sales_email": "publicsector@tenable.com", "security_email": "compliance@tenable.com", "website": "https://www.tenable.com/solutions/government/us-fed", "uei": "TEF5FKYHVKV9", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1819057982", "name": "The Coleridge Initiative, Inc.", "cloud_service_provider": "The Coleridge Initiative, Inc.", "cloud_service_offering": "Administrative Data Research Facility (ADRF)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Coleridge%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-02-27T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-02-27T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-09-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-02-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-02-27T20:00:00.000Z", "cert_date": "2018-09-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-09-12T20:00:00.000Z", "annual_assessment": "2011-03-30T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture", "National Science Foundation" ], "agency_reuse": [ "" ], "service_description": "The ADRF system is designed to promote access to and use of government administrative records across agency lines. It provides access to collaborative tools and rich documentation so that knowledge and analysis can be shared and reused. It hosts confidential data for a range of agencies at the federal, state and local levels, and serves multiple domains - including criminal justice, welfare, labor, education, health, housing and transportation.", "fedramp_msg": "N/A", "sales_email": "info@coleridgeinitiative.org", "security_email": "security@coleridge.us", "website": "https://coleridgeinitiative.org/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Data Management", "Education & Training", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2502148523", "name": "Thomson Reuters", "cloud_service_provider": "Thomson Reuters", "cloud_service_offering": "Thomson Reuters Legal Research (TR LR)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Thomson%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-07-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Thomson Reuters Legal Research (TR LR) is a legal research solution, for legal professionals in the United States Federal, State, Local and Tribal Agency’s. TR LR offers customers enhanced security, availability, compliance, and support to help deliver a mission-critical edge in a secure cloud environment. \n The TR LR suite is designed to facilitate efficient legal research by providing users with powerful search tools, document management features, and secure access controls. The TR LR suite consists of:\nWestlaw US:\n• Westlaw is an online legal research platform that provides legal professionals in the federal government access to a searchable collection of primary and secondary legal resources, such as statutes, case law, regulations, and legal commentary. The platform includes editorial features, such as the West Key Number System and KeyCite, to help users find, validate, and understand legal information.\n \nPractical Law US:\n• Overview: Practical Law US is an online legal resource platform integrated with Westlaw, providing practical guidance and resources developed by expert lawyers to assist legal professionals in their work.\n• Features: Offers expert-written summaries and explanations of legal topics, standard documents, clauses, and precedent documents with integrated drafting notes. These resources are designed to be adaptable, saving time and reducing errors in legal documentation.", "fedramp_msg": "N/A", "sales_email": "govfedramp@tr.com", "security_email": "FedRAMPsecurity@tr.com", "website": "https://legal.thomsonreuters.com/en/westlaw", "uei": "", "small_business": false, "business_categories": [ "Law Enforcement", "Legal & Policy", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2333543855", "name": "Thomson Reuters", "cloud_service_provider": "Thomson Reuters", "cloud_service_offering": "Thomson Reuters Risk & Fraud (TR R&F)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Thomson%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-08-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-08-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Thomson Reuters Risk and Fraud (TR R&F) is a suite of solutions and are designed to identify risk and streamline investigations for Government agencies in the United States Federal, State, Local, and Tribal Agencies.\nTR R&F offers customers enhanced security, availability, compliance, and support to help deliver a mission-critical edge in a secure cloud environment. \n The TR R&F suite currently consists of: Thomson Reuters CLEAR\n• Thomson Reuters CLEAR is software designed to streamline data analysis and reporting by providing a single interface to access and connect critical data sources, including public and proprietary records. The platform's customizable dashboards and detailed reporting capabilities allow users to stay informed and make data-driven decisions.", "fedramp_msg": "N/A", "sales_email": "govfedramp@tr.com", "security_email": "FedRAMPsecurity@tr.com", "website": "https://legal.thomsonreuters.com/en/products/clear", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Law Enforcement", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2334748657", "name": "ThreatConnect", "cloud_service_provider": "ThreatConnect", "cloud_service_offering": "ThreatConnect For Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ThreatConnect%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-12-11T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-03-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-12-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-03-21T20:00:00.000Z", "cert_date": "2025-05-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Federal Emergency Management Agency", "fedramp_auth": "2025-05-01T20:00:00.000Z", "annual_assessment": "2011-03-18T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Emergency Management Agency" ], "agency_reuse": [ "" ], "service_description": "ThreatConnect for Government is an AWS GovCloud-hosted SaaS platform designed to strengthen the cybersecurity posture of public sector organizations. Tailored for federal, state, and local government agencies, ThreatConnect for Government platform integrates threat intelligence, automation, and analytics into a single system, allowing security teams to collect, analyze, and act on threat intelligence data in real-time.", "fedramp_msg": "N/A", "sales_email": "fedramp@threatconnect.com", "security_email": "fedramp@threatconnect.com", "website": "https://threatconnect.com/", "uei": "KAL6DBDDMCM4", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Development Tools", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2432824061", "name": "TimeLooper Xplore", "cloud_service_provider": "TimeLooper Xplore", "cloud_service_offering": "TimeLooper Inc.", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Timelooper%20Logo.png", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-10-28T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-05-04T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-10-28T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-05-04T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Lazarus Alliance, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "4", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "TimeLooper Xplore is a multi-tenant, Software-as-a-Service (SaaS) content management platform that enables institutions to manage, store, and publish digital content to mobile applications. The system is hosted in the Amazon Web Services (AWS) GovCloud (US) environment and leverages AWS infrastructure and platform services for scalability, resiliency, and security.\nThe platform is available to federal, state, local, and tribal governments, as well as research institutions, federal contractors, and other government-affiliated organizations. TimeLooper Xplore provides administrative interfaces, data storage, monitoring, and content delivery functionality, while the companion mobile application operates outside the authorization boundary.", "fedramp_msg": "", "sales_email": "info@timelooper.com", "security_email": "security@timelooper.com", "website": "https://veteransaffairs.timelooper.com/", "uei": "GJUBZQDHMMN8", "small_business": true, "business_categories": [ "Content Management System (CMS)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2118555665", "name": "Totara Learning Inc.", "cloud_service_provider": "Totara Learning Inc.", "cloud_service_offering": "Totara Talent Development Government Cloud Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Totara%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-12-16T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-12-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-08-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-12-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-12-06T20:00:00.000Z", "cert_date": "2023-08-28T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-08-28T20:00:00.000Z", "annual_assessment": "2011-12-06T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture", "Department of Health and Human Services", "Export-Import Bank of the United States", "Office of Personnel Management" ], "agency_reuse": [ "" ], "service_description": "TotaraGov is a FedRAMP® Certified SaaS Learning Management System purpose-built for federal agencies to meet the complex demands of government-wide training, compliance, and workforce development. Designed with the needs of the public sector in mind, TotaraGov streamlines the delivery of mandatory training, supports workforce upskilling, competency management, and enhances engagement through personalized learning pathways.\r\n\r\nAs the official FedRAMP Certified Edition of Totara’s LMS, TotaraGov is tailored to support the public sector’s mission-readiness goals and works seamlessly with internal government systems.. Standard integrations include:\n• Workflow based SF-182 Request module\n• Enterprise Human Resources Integration (EHRI) reporting\n• Microsoft Teams\n• Content Marketplace connections to leading federal content providers\n \nTotaraGov offers a fully managed, secure, and scalable platform that is 508 compliant and aligned with federal accessibility standards. Each major release includes a comprehensive Accessibility Compliance Report (ACR) based on the Voluntary Product Accessibility Template (VPAT), supporting agencies in meeting their inclusivity mandates.\n \nWith robust functionality designed for enterprise-level training delivery, TotaraGov empowers L&D teams to:\n• Manage role-based learning paths and personalized audience experiences\n• Automate compliance tracking and certification management\n• Deliver and track SCORM/AICC content, instructor-led and virtual sessions, assessments, and more\n• Leverage a powerful analytics and reporting engine for real-time visibility into training progress and gaps", "fedramp_msg": "N/A", "sales_email": "michael.maurath@totara.com", "security_email": "security@totaraclouddirect.com", "website": "http://www.totaragov.com/", "uei": "Z3MNGHZMP439", "small_business": true, "business_categories": [ "Collaboration", "Education & Training", "Human Resources", "Learning Management", "System Administration", "Talent Development", "Talent Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2619646960", "name": "TrackVia, Inc", "cloud_service_provider": "TrackVia, Inc", "cloud_service_offering": "TrackVia Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TrackVia%20Logo.png", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2026-08-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-04-23T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Operational Visibility and Execution for Mission-Critical Programs\r\nTrackVia is an AI-ready operational platform that helps government agencies, contractors, and mission-driven organizations improve workforce readiness, strengthen compliance, and gain real-time visibility into critical operations. By connecting people, processes, and data in a centralized operational environment, TrackVia enables government organizations to modernize operational workflows that are often limited by legacy platforms and manual processes.\r\n\r\nBuilt for Government Security Requirements\r\nTrackVia Government is deployed on Second Front's Game Warden platform with a FedRAMP Ready designation. The platform supports secure handling of sensitive operational data, including Controlled Unclassified Information (CUI), while helping organizations meet evolving security, compliance, and governance requirements.\r\n\r\nKey Capabilities & Outcomes\r\nProgram Delivery and Operational Execution – Improve visibility into program status, accelerate execution, and support mission-critical operations.\r\n\r\nWorkforce Readiness and Personnel Tracking – Monitor qualifications, certifications, onboarding progress, and staffing readiness across programs.\r\n\r\nCompliance Management and Audit Readiness – Strengthen governance, maintain traceability, and simplify audit preparation.\r\n\r\nOperational Reporting and Performance Visibility – Reduce manual reporting effort and support faster, more informed decision-making.\r\n\r\nInspections, Assessments, and Field Operations – Standardize field activities and improve accountability across distributed teams.\r\n\r\nAsset, Facilities, and Maintenance Management – Track operational assets, work activities, and maintenance requirements from a centralized platform.\r\n\r\nCross-Functional Workflow Coordination – Connect teams, processes, and data to reduce silos and improve operational consistency.\r\n\r\nMobile Data Collection with Offline Capabilities – Capture and access operational data in remote and low-connectivity environments.\r\n\r\nSupporting the Public Sector\r\nTrackVia supports federal civilian agencies, defense and intelligence organizations, state and local governments, tribal nations, and government contractors. Whether supporting mission readiness, compliance initiatives, workforce readiness, or program delivery, TrackVia provides a secure and scalable operational platform that helps organizations execute with greater visibility, control, and confidence.", "fedramp_msg": "", "sales_email": "sales@trackvia.com", "security_email": "privacy@trackvia.com", "website": "https://trackvia.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Collaboration", "Construction", "Data Management", "Development Tools", "Fleet Management", "Governance, Risk, and Compliance (GRC)", "Grant Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1602057825A", "name": "TRAPWIRE", "cloud_service_provider": "TRAPWIRE", "cloud_service_offering": "TRAPWIRE Threat Detection and Analysis System", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Trapwire%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-01-04T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-09-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-09-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-01-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-09-20T20:00:00.000Z", "cert_date": "2024-09-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-09-24T20:00:00.000Z", "annual_assessment": "2011-07-21T04:00:00.000Z", "independent_assessor": "SecureIT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of State" ], "agency_reuse": [ "" ], "service_description": "TRAPWIRE is a software platform for detecting and alerting on threats against your assets and personnel in real-time. It provides a comprehensive suite of tools all synchronized and accessible in one centralized, highly secure and encrypted platform, including:\n\n \n\n- Incident reporting\n\n- Pattern analysis\n\n- Threat detection\n\n- Originator-controlled information sharing\n\n- Mass warning and notification\n\n- Cross-organizational collaboration\n\n \n\nThe TrapWire Threat Detection and Analysis System is a web-based software-as-a-service offering that provides secure web access to a suite of incident reporting, analytical, and information sharing tools. It bridges disparate agencies into a network of security-focused organizations, where each Agency owns its data and determines what other organizations its users may collaborate with.\n\nIn addition to secure web access, the following services are available:\n\n \n\nThe TrapWire Mobile App: Enables real-time incident reporting and feedback from the TrapWire Network while in a mobile environment such as VIP or perimeter protection.\n\n \n\nThe TrapWire Community Member (CM) App: Allows organizations to broaden their protection footprint to include the eyes and ears of their communities of interest, empowering them to report suspicious activity in a structured manner through publicly accessible apps branded to each organization’s needs.\n\n \n\nThe TrapWire API: Provides for integration between a TrapWire System deployment and legacy or other enterprise systems, enabling a system-of-systems approach to data integration. \n\n \n\nThe TRAPWIRE Threat Detection and Analysis System brings security organizations into a protection network that detects and alerts on mutual threats spanning time and geography, allowing users to break down stovepipes and interdict threats before they materialize into successful criminal or terrorist acts. The network encapsulates thousands of protected facilities and personnel spanning Federal, State, and Local Law Enforcement; Anti-Terrorism/Force Protection personnel; private/commercial security organizations; and community protection programs. Bringing all sectors together with modern technology and expert analytical support services, while maintaining \"\"originator control\"\" principles for each owner's data, empowers a tangible force multiplier effect.", "fedramp_msg": "", "sales_email": "", "security_email": "info@trapwire.com", "website": "https://trapwire.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1935245314A", "name": "Trellix", "cloud_service_provider": "Trellix", "cloud_service_offering": "Trellix GovCloud Security Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Trellix%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-03-06T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-08-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-11-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-03-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-08-14T20:00:00.000Z", "cert_date": "2024-11-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-11-05T20:00:00.000Z", "annual_assessment": "2011-03-06T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Advisory Council on Historic Preservation", "Defense Information Systems Agency", "United States Agency for International Development" ], "agency_reuse": [ "" ], "service_description": "Trellix GovCloud Security Platform (formerly known as Trellix XDR GovCloud) is a SaaS offering that is deployed on AWS GovCloud IaaS. The SaaS offering is made up of a suite of solutions developed by Trellix. Trellix GovCloud Security Platform enables customers to centrally manage security for their organization while leveraging real-time monitoring and protection of the environment. Machine learning, artificial intelligence, and behavioral analysis are used to detect and respond to suspicious activity based on comparing observed activity to real-world adversarial attack techniques.\n\n- Trellix ePolicy Orchestrator (ePO) is a SaaS-based centralized management console for using Trellix's Endpoint solution with enhanced native security controls without the complexity of on-premises infrastructure. The client-side component of Trellix ePO provides secure communication between Trellix ePO and managed products. In addition to downloading and enforcing policies, Trellix Agent performs client-side tasks such as deploying and updating endpoint products. In order to manage an endpoint with Trellix ePO, Trellix Agent must be installed on each system in your network. As an optional deployment method, Trellix also offers the ePO On-prem platform that can be installed on the customer’s premises, as well as in air-gapped environments.\n- Trellix Endpoint Detection and Response (EDR) provides continuous data collection and advanced analytics that helps you detect suspicious behavior on your endpoints. Using alert ranking and data visualization, you can quickly understand the threat and take immediate action. \nTrellix ML Protect (formerly known as Trellix Real Protect) is a machine learning cloud which enhances our Endpoints pre-execution machine learning with post-execution to detect dynamic behavior based on machine learning algorithms derived from over a billion sensors and over 30 years of experience.\n- Trellix Global Threat Intelligence (GTI) is based on activity from millions of sensors world-wide and an extensive research team, Trellix publishes timely, relevant threat activity via GTI. This always-on, cloud-based threat intelligence service enables accurate protection against known and fast-emerging threats by providing threat determination and contextual reputation metrics. GTI integrates directly with our security products, instantly protecting against emerging threats to reduce operational efforts and time between detection and containment.\n- Trellix Threat Intelligence Exchange (TIE) acts as a reputation broker that combines threat intelligence from imported global sources, such as Trellix Global Threat Intelligence (GTI) and third-party threat information (such as VirusTotal) with intelligence from local sources, including endpoints, gateways, and advanced analysis solutions. Using Trellix Data Exchange Layer (DXL), it instantly shares this collective intelligence across the security ecosystem, allowing security solutions to operate as one to enhance protection throughout the organization.\n- Trellix Insights is an industry-first proactive security solution that changes the cyber security paradigm with the capability to stop threats before the attack. It provides actionable and preemptive threat intelligence by leveraging Trellix's cutting-edge threat research, augmented with sophisticated AI applied to real-time threat telemetry streamed from over 1 billion sensors. This global insight is applied to assess an organization's environment and its security posture to predict and prioritize actions for the Security Operations Team.\n- Trellix Helix Connect integrates data from security tools (Trellix native controls and 490+ third parties) to tell you the complete story of an attack. Data is ingested from multiple sources, then correlated by pre-built analytics and rules to create multi-vector, multi-vendor detections.Trellix GovCloud Security Platform (formerly known as Trellix XDR GovCloud) is a SaaS offering that is deployed on AWS GovCloud IaaS. The SaaS offering is made up of a suite of solutions developed by Trellix. Trellix GovCloud Security Platform enables customers to centrally manage security for their organization while leveraging real-time monitoring and protection of the environment. Machine learning, artificial intelligence, and behavioral analysis are used to detect and respond to suspicious activity based on comparing observed activity to real-world adversarial attack techniques.", "fedramp_msg": "N/A", "sales_email": "fedramp-sales@trellix.com", "security_email": "fedramp-support@trellix.com", "website": "https://www.trellix.com/products/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "Trellix Endpoint Detection and Response (EDR)", "Trellix Global Threat Intelligence (GTI)", "Trellix Helix Connect", "Trellix Insights", "Trellix ML Protect (formerly known as Trellix Real Protect)", "Trellix Threat Intelligence Exchange (TIE)", "Trellix ePolicy Orchestrator (ePO)" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1512017637", "name": "Trellix", "cloud_service_provider": "Trellix", "cloud_service_offering": "Trellix Email Security GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Trellix%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-12-02T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2017-04-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-07-05T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-12-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-04-26T20:00:00.000Z", "cert_date": "2017-07-05T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2017-07-05T20:00:00.000Z", "annual_assessment": "2011-12-17T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Reserve System", "National Science Foundation", "United States Agency for International Development", "United States Census Bureau", "United States Securities and Exchange Commission" ], "agency_reuse": [ "" ], "service_description": "The Trellix ESC GovCloud is a SaaS offering that provides advanced protections against modern sophisticated email attacks. ESC GovCloud consolidates advanced threat prevention with traditional Email Anti-Spam and Anti-Virus security to optimize spending, reduce false positives, and enable operational efficiencies through consolidation. ESC GovCloud can be deployed in line to analyze emails and quarantine threats for active protection, or as a passive monitor for 'bcc' type review of each email.\n\nWith no hardware or software to install, the ESC GovCloud is a particularly good fit for organizations seeking to move their infrastructure into the cloud. This eliminates the complexity of procuring, installing, and managing a physical infrastructure. ESC GovCloud provides organizations several unique capabilities, such as:\n\n- Identifying previous targets of spear-phishing, impersonation, virus and spam emails\n- Locating copies of the malicious email in target inboxes\n- Finding out if the message is being forwarded to new targets\n- Detection of advanced malicious URL threats\n- The ESC Portal shows region- and industry-based malware trends, has customizable security policies, RBAC, and audit logging.\n\nOrganizations face an ever-increasing number of threats from email-based spam, viruses, and advanced threats. ESC GovCloud uses the signature-less Trellix Multi-vector Virtual Execution™ (MVX) engine to analyze every attachment and URL within emails to detect threats and stop advanced attacks in real-time. Today's advanced attacks use email as a primary delivery mechanism for malicious content. While some attacks use an attachment with embedded malicious code, it is common for cybercriminals to use a malicious link thereby blending attack tactics in the hopes of bypassing today's traditional defense silos. ESC GovCloud uses the cloud-based MVX engine to detonate email attachments against a cross-matrix of operating systems and applications, including multiple Web browsers and plug-ins like Adobe Reader and Flash. To block spear-phishing emails, ESC GovCloud analyzes every attachment using the MVX engine to accurately identify today's advanced attacks.\n\nESC GovCloud includes anti-virus and anti-spam engines and may also be paired with an organization's existing anti-virus and anti-spam email gateways.", "fedramp_msg": "N/A", "sales_email": "fedramp-sales@trellix.com", "security_email": "fedramp-support@trellix.com", "website": "https://www.trellix.com/", "uei": "", "small_business": false, "business_categories": [ "Communication", "Cybersecurity & Risk Management", "Data Management", "Network Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2028534270", "name": "Trello", "cloud_service_provider": "Trello", "cloud_service_offering": "Trello Enterprise Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Trello%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-07-10T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-09-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-09-23T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-07-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-09-15T20:00:00.000Z", "cert_date": "2020-09-23T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-09-23T20:00:00.000Z", "annual_assessment": "2011-09-15T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "General Services Administration" ], "agency_reuse": [ "" ], "service_description": "Trello, an Atlassian product, is a visual collaboration tool that creates a shared perspective on any project. With an easy-to-grasp layout of boards, lists, and cards, Trello gives teams a shared workspace for projects of all kinds. Teamwork gets even more productive with automation and integrations with 150+ top work tools. Organize and manage work across your organization in a flexible and rewarding way - Trello is available via web or dedicated apps across desktop and mobile platforms.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@atlassian.com", "website": "https://trello.com/home", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2514023311", "name": "Trenchant Analytics", "cloud_service_provider": "Trenchant Analytics", "cloud_service_offering": "AI for Federal Acquisitions (ACQBOT)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ACQBOT%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-04-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Air Force", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "ACQBOT is delivered as a SaaS offering using a multi-tenant Government Only Community cloud computing environment. It is available to DoD, federal, state, local, and tribal governments, as well as research institutions, federal contractors, and other government contractors. The system is a browser-based application with no components that need to be installed on the customer site and no mobile app. ACQBOT uses the latest Large Language Model (LLM) generative capabilities paired with intuitive workflows and Robotic Process Automation (RPA) to connect a government AI-Powered acquisition system with an industry AI-Powered proposal platform. The coupled capabilities enhance the extensive user requirement development, market research, Sources Sought, RFI, determination of set-aside, solicitation, award, and contracting processes and shorten them to days or hours.", "fedramp_msg": "N/A", "sales_email": "apps@tacgov.com", "security_email": "securitycompliance@tacgov.com", "website": "https://acqbot.com/", "uei": "", "small_business": true, "business_categories": [ "Accounting", "Analytics", "Collaboration", "Communication", "Customer Relations Management (CRM)", "Customer Service", "Data Management", "Finance", "Grant Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2226231529", "name": "Trend Micro Inc.", "cloud_service_provider": "Trend Micro Inc.", "cloud_service_offering": "Trend Vision One for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TrendMicro%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-01-17T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-01-12T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-11-22T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-01-17T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-01-12T20:00:00.000Z", "cert_date": "2024-11-22T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Federal Highway Administration", "fedramp_auth": "2024-11-22T20:00:00.000Z", "annual_assessment": "2011-01-11T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Highway Administration" ], "agency_reuse": [ "" ], "service_description": "Trend Vision One for Government is a modern security operations platform that enables organizations to detect, investigate, prioritize, and respond to threats faster. \n \nWith built-in security analytics and threat intelligence, Trend Vision One correlates data across multiple security layers from native sensors and third-party data sources to help security teams quickly see the full story of an attack and respond faster and more confidently. \n \nTrend Vision One - Endpoint Sensor serves the EDR use case, while delivering a solution path to a broader XDR (extended detection and response) strategy covering additional attack vectors, including servers and cloud workloads.\n \nBuilt for the SOC analyst, CISO, and threat hunter, this platform leverages AI and predictive machine learning to arm defenders with earlier threat detection and automated response options that make a difference. The visibility and efficiency provided by Trend Vision One makes great security teams even better, enabling them to do more with less. \n \nTrend Micro is trusted by 9 out of the top 10 Fortune 500 companies, blocks over 94 billion threats per year, analyzes over 100 TB of threat information per day and processes over 2.5 trillion events per day. We are cyber security experts.", "fedramp_msg": "N/A", "sales_email": "darrin_curtis@trendmicro.com", "security_email": "alloftrendvog@trendmicro.com", "website": "https://www.trendmicro.com/en_us/business/capabilities/solutions-for/federal-government/security-operations.html", "uei": "G8TAKW3NE283", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2226228379", "name": "Trend Micro Inc.", "cloud_service_provider": "Trend Micro Inc.", "cloud_service_offering": "Trend Cloud One for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TrendMicro%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-12-13T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-12-14T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-11-22T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-12-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-12-14T20:00:00.000Z", "cert_date": "2024-11-22T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-11-22T20:00:00.000Z", "annual_assessment": "2011-12-11T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2406453618", "csp": "LabArchives", "cso": "LabArchives for Government (LG)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226228379", "csp": "Trend Micro Inc.", "cso": "Trend Cloud One for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2226231529", "csp": "Trend Micro Inc.", "cso": "Trend Vision One for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Federal Highway Administration" ], "agency_reuse": [ "22-005-03", "22-014-05" ], "service_description": "Trend Micro offers the leading cybersecurity solution to protect endpoints, servers, and cloud workloads. Deploy security across your endpoints and physical, virtual, and multi-cloud environments to gain unified visibility, management, detection and prevention with Trend Cloud One for Government. \n\nNative integrated endpoint and server detection and response (EDR/XDR) sensors allow for quicker detection of complex attacks that bypass prevention. This provides an unmatched understanding of the activity data in your environment and a balanced approach to security, as teams can quickly see the story of an attack and respond faster and more confidently. \n\nThe platform's real-time prevention and detection capabilities (application control, anti-malware, behavioral analysis, machine learning, EDR, intrusion prevention (IPS), firewall, integrity monitoring, and log inspection) are managed via a single lightweight FIPS enabled agent. This agent is deployed on FIPS supported Operating systems for Windows and Linux on the endpoint, server, or VM being protected. Combined with a rich set of application programming interfaces (APIs), Trend Micro Cloud One for Government allows you to automate security and reduce impact on your teams.\n\nTrend Micro Is trusted by 9 out of the top 10 Fortune 500 companies, blocks over 94 billion threats per year, analyzes over 100 TB of threat information per day and processes over 2.5 trillion events per day. We are cyber security experts.", "fedramp_msg": "N/A", "sales_email": "david_poppel@trendmicro.com", "security_email": "Alloftrendcogteam@trendmicro.com", "website": "https://www.trendmicro.com/en_us/business/capabilities/solutions-for/federal-government/cloud-security.html", "uei": "G8TAKW3NE283", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2502834044", "name": "Trisotech", "cloud_service_provider": "Trisotech", "cloud_service_offering": "Digital Enterprise Suite FedRAMP Edition", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Trisotech%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-07-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-24T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-07-21T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Prescient Security, LLC.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "4", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Digital Enterprise Suite is a highly visual and interactive software suite that enables technical staff to encapsulate programmatic logic and lets non-technical business people assemble the business logic to innovate, transform and improve. The Digital Enterprise Suite combines intuitive business modeling with flexible, performant and scalable business automation. It accelerates digital transformation, innovation and improvement via visualization from business discovery through to automation. \nThe Digital Enterprise Suite is Composed of the Digital Modeling Suite and the Digital Automation Suite.", "fedramp_msg": "N/A", "sales_email": "sales@trisotech.com", "security_email": "security@trisotech.com", "website": "https://www.trisotech.com/digital-enterprise-suite/", "uei": "", "small_business": false, "business_categories": [ "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2110836406", "name": "Trustwave Government Solutions", "cloud_service_provider": "Trustwave Government Solutions", "cloud_service_offering": "Trustwave Fusion", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Trustwave%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2023-08-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-11-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-02-13T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2023-08-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-11-17T20:00:00.000Z", "cert_date": "2025-02-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "United States Census Bureau", "fedramp_auth": "2025-02-13T20:00:00.000Z", "annual_assessment": "2011-05-23T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2311952621", "csp": "Ernst & Young LLP", "cso": "EY Grants Accelerator", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Federal Energy Regulatory Commission", "Strategic Petroleum Reserve" ], "agency_reuse": [ "22-024" ], "service_description": "Trustwave Government Fusion is the platform used for Trustwave's Managed Detection and Response (MDR) and Co-Managed SIEM/SOC (3SIEM) services designed for Federal agencies and other customers who require US Only based personnel in a government community cloud environment. Our MDR and 3SIEM solutions provide monitoring, threat detection and remediation capabilities for our customers providing 24x7 real time monitoring, triage, threat hunting and intel, and SOAR functionality that integrates with existing customer security technologies. Our platform provides scalability and easy onboarding for customers looking for augmentation or managed SOC services at a much lower cost than traditional on-premise SOC solutions.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "tgs_fedramp@trustwavegovt.com", "website": "https://www.trustwave.com/capabilities/by-industry/government/", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2505553757", "name": "Turning Point Global Solutions, L.L.C", "cloud_service_provider": "Turning Point Global Solutions, L.L.C", "cloud_service_offering": "Network Inventory and Optimization Solution (NiOS®)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TP%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-12-03T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-12-01T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-12-17T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-12-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-12-01T20:00:00.000Z", "cert_date": "2025-12-17T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-12-17T20:00:00.000Z", "annual_assessment": "2011-11-20T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "General Services Administration", "National Oceanic and Atmospheric Administration" ], "agency_reuse": [ "" ], "service_description": "TurningPoint’s Network Inventory and Optimization Solution (NiOS®) is a comprehensive Telecommunication Expense Management (TEM) and Managed Mobility (MM) system that facilitates enterprise-wide management and automation of telecom ordering, inventory management, bill validation, financial management, and reporting. NiOS® provides US federal, state, and local governments with a single-pane window for telecom lifecycle management. The following are the high-level functional characteristics of NiOS®:\n\n•\tA built-in, customizable workflow enables customers to manage service orders, including move/add/change/disconnect (MACD), port, suspend, and restore requests.\n•\tIt offers customers a unified view of inventory data, covering all telecom services, such as wireline, mobility, and future technologies.\n•\tAssists customers in reconciling and verifying telecom bills against agency contracts, orders, quotes, and inventory; initiates and tracks disputes through resolution.\n•\tProvides visibility into budgets, obligated, spent, and available values with projections; and associated system alerts to proactively manage budget and internal customer chargebacks\n•\tAllows customers to generate various reports, providing access to accurate, comprehensive insights on spending, enhancing governance, and ensuring cost control.\n\nNiOS® is a software-as-a-service (SaaS) application hosted on Amazon Web Services (AWS) GOVCLOUD (US) using a secure, high-availability, multi-availability zones, multi-tenant architecture. The authorization boundary comprises a secure web-based portal, processing modules for data integration, analytics, Application Processing Interfaces (APIs), and supporting databases.", "fedramp_msg": "N/A", "sales_email": "fedramp@tpgsi.com", "security_email": "infosec@tpgsi.com", "website": "https://www.tpgsi.com/", "uei": "V4P1WQNT1FZ5", "small_business": true, "business_categories": [ "Mobile Device Management (MDM)", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2108649352", "name": "Tyler Federal, LLC", "cloud_service_provider": "Tyler Federal, LLC", "cloud_service_offering": "Tyler Federal Product Suite", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TF%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2013-12-04T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2014-05-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to Legacy FedRAMP Ready" }, { "date": "2014-06-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2014-06-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 41, "reuse": 40, "ready_status": "Not Active", "ready_date": "2014-05-20T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2013-12-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2014-06-06T20:00:00.000Z", "cert_date": "2014-06-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2014-06-06T20:00:00.000Z", "annual_assessment": "2011-07-28T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "Bureau of Indian Affairs", "Centers for Medicare & Medicaid Services", "Commodity Futures Trading Commission", "Consumer Financial Protection Bureau", "Customs and Border Protection", "Defense Nuclear Facilities Safety Board", "Department of Agriculture", "Department of Commerce", "Department of Education", "Department of Health and Human Services", "Department of State", "Department of the Interior", "Department of the Treasury", "Export-Import Bank of the United States", "Federal Deposit Insurance Corporation", "Federal Energy Regulatory Commission", "Federal Housing Finance Agency", "General Services Administration", "Immigration and Customs Enforcement", "Interior Business Center", "Justice Management Division", "National Credit Union Administration", "National Science Foundation", "Nuclear Regulatory Commission", "Office of Environmental Justice and External Civil Rights", "Office of Personnel Management", "Peace Corps", "Pension Benefit Guaranty Corporation", "Small Business Administration", "Social Security Administration", "Tennessee Valley Authority", "Treasury Inspector General for Tax Administration", "US Fish and Wildlife Service", "United States Agency for Global Media", "United States Agency for International Development", "United States Patent and Trademark Office", "United States Securities and Exchange Commission" ], "agency_reuse": [ "" ], "service_description": "The Tyler Federal Product Suite (formerly MicroPact Product Suite), which includes icomplaints® and entellitrak®, is delivered via a Software as a Service (SaaS) and a Platform as a Service (PaaS) model to U.S. federal, state, and local government customers. Icomplaints is the leading standard for federal EEO case management and is used by most major federal agencies. Entellitrak, which takes a Data-First™ approach to dynamic case management and Business Process Management (BPM), is available with fully integrated Document Management, Natural Language Analytics, and Mobile Modules. Whether based on-premises or in the cloud, entellitrak can be implemented immediately and configured continuously, enabling customers to get to work quickly while keeping costs low. Tyler Federal is unique as a developer of commercial off-the-shelf (COTS) case management and BPM software in that 97 percent of all federal agencies with more than 500 employees currently use one or more solution from the Tyler Federal Product Suite.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "FD-infosec@tylertech.com", "website": "https://www.tylertech.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2220654178", "name": "Tyler Federal, LLC", "cloud_service_provider": "Tyler Federal, LLC", "cloud_service_offering": "Tyler Federal Cloud Platform (TFCP)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/TF%20Logo.png", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-26T22:13:42.066Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-07-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-06-26T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-07-08T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Tyler Federal Cloud Platform is delivered as an PaaS/SaaS offering using a multi-tenant Government-Only cloud computing environment. It is available to federal, state, local, and tribal governments.\n\nTyler Federal Cloud Platform consists of the Tyler App Platform, referred to as “the Platform” (Powered by Entellitrak) software. The Platform is an enterprise level COTS (Commercial Off-The-Shelf) that provides unified BPM software by using an open architecture approach that focuses on the core technologies that streamline work for rapid application development on business processes. The Platform provides all the functionality required to collect, track, manage, process, and report on information regarding a business process. Business processes such as but not limited to “Turnkey” products, EEO complaints (EEO), Labor Relations (LR/ER), Reasonable Accommodations (RA), Veteran Benefits (VB/VBA), Background investigations (BI), Inspector General (IG), Anti-harassment (AH), Justice and Law Enforcement, and general case/record management. The Platform utilizes AWS GovCloud as its FedRAMP Authorized IaaS provider.", "fedramp_msg": "", "sales_email": "info@tylertech.com", "security_email": "FD-infosec@tylertech.com", "website": "https://www.tylertech.com/products/application-platform", "uei": "M23WHK6U2RJ3", "small_business": false, "business_categories": [ "Content Management System (CMS)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "SOCRATA", "name": "Tyler Technologies Data & Insights", "cloud_service_provider": "Tyler Technologies Data & Insights", "cloud_service_offering": "Tyler Data Platform, powered by Socrata", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Tyler%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-03-02T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2016-12-29T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2017-05-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 11, "reuse": 51, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-03-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2016-12-29T20:00:00.000Z", "cert_date": "2017-05-15T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2017-05-15T20:00:00.000Z", "annual_assessment": "2024-03-17T20:00:00.000Z", "independent_assessor": "SecureIT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2108649352", "csp": "Tyler Federal, LLC", "cso": "Tyler Federal Product Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Department of Agriculture", "Department of Commerce", "Department of Health and Human Services", "Department of Transportation", "Department of Veterans Affairs", "Federal Communications Commission", "Federal Deposit Insurance Corporation", "Office of Justice Programs", "United States Agency for International Development" ], "agency_reuse": [ "22-002-02", "22-002-04", "22-005", "22-005-06", "22-005-09", "22-007-04", "22-011", "22-011-05", "22-015-01", "22-017", "22-017-01", "22-017-03", "22-017-12", "22-019", "22-020", "22-021-01", "22-022", "22-023", "22-025", "22-027", "22-027-09", "22-028", "22-031", "22-032", "22-034", "22-037", "22-039", "22-040", "22-042", "22-044", "22-045", "22-046", "22-054", "22-058", "22-062", "22-075", "22-080", "22-084" ], "service_description": "The Tyler Data Platform, powered by Socrata®, which includes Enterprise Data Platform and Open Data Platform, is the market leader in making government data discoverable, usable, and actionable for government workers and the people they serve. Tyler Data & Insights provides the data platform and cloud applications exclusively for city, county, state, and federal government organizations. Government programs generate massive amounts of data, but most of it is locked away in hard-to-access data silos. The Tyler Data Platform provides enterprise-wide data management for government analytics by bringing together disparate systems and leveraging the cloud to enable secure access to authoritative data. Tyler Data & Insights solutions are designed and developed to meet strict government compliance standards. The technology is optimized on the Amazon Web Services (AWS) Cloud.", "fedramp_msg": "N/A", "sales_email": "info@tylertech.com", "security_email": "DI-security@tylertech.com", "website": "https://www.tylertech.com/solutions/transformative-technology/data-insights", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Communication", "Content Management System (CMS)", "Data Management", "Law Enforcement", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2208555094", "name": "UberEther", "cloud_service_provider": "UberEther", "cloud_service_offering": "IAM Advantage", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/UberEther%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-10-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-03-09T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-10-26T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-10-27T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-03-09T20:00:00.000Z", "cert_date": "2023-10-26T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Defense Information Systems Agency", "fedramp_auth": "2023-10-26T20:00:00.000Z", "annual_assessment": "2011-03-09T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2432940371", "csp": "Docebo", "cso": "Docebo Learning Platform for Gov (DCBO-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Defense Information Systems Agency" ], "agency_reuse": [ "22-007" ], "service_description": "UberEther Advantage\n\nThe UberEther Advantage platform offers a highly secure and easy-to-deploy boundary platform with FedRAMP High and DoD IL5 authorizations based on NIST 800-53 Revision 5 security control requirements. The platform includes two main solutions within the authorization boundary:\n• ATO Advantage: An empty boundary platform designed to accelerate FedRAMP and DoD authorization for agency solutions and third-party software products.\n• IAM Advantage: A comprehensive identity and access management (IAM) solution equipped with pre-installed, configured, and optimized IAM tools.\n\nATO Advantage\nATO Advantage provides a Platform as a Service approach to satisfy over 355 of the required 425+ technical controls out-of-the-box, which are then inherited by third-party applications when deployed on the platform. This includes the preparation of required documentation and artifacts such as the System Security Plan (SSP) and automated POA&M reports. The platform can help agencies and software vendors deliver their solutions securely at the speed of need.\n\nIAM Advantage\nIAM Advantage delivers an end-to-end identity management solution integrating leading identity and access management products. This includes support for seamless single sign-on (SSO), multiple NIST 800-63 multi-factor authentication options, privileged user management, and separation of duties enforcement. The platform ensures compliance with Continuous Diagnostics and Mitigation (CDM) and EO 14028 requirements.\n\nServices:\n• AppGate Software Defined Perimeter\n• CyberArk Central Policy Manager\n• CyberArk Digital Vault\n• CyberArk OnDemand Privileged Manager\n• CyberArk Password Vault Web Access\n• CyberArk Privileged Access Management\n• CyberArk Privileged Session Manager\n• CyberArk Privileged Threat Analytics\n• Ping Identity PingAM (formerly ForgeRock Access Management)\n• Ping Identity PingDS (formerly ForgeRock Directory Services)\n• Ping Identity PingGateway (formerly ForgeRock Identity Gateway)\n• Ping Identity Ping IDM (formerly ForgeRock Identity Management)\n• Nok Nok - Phishing Resistant S3 Authentication Suite\n• OpenSearch & Dashboards (SIEM & User Behavior Analytics)\n• Ping Identity Ping Government Identity Cloud\n• Ping Identity PingAccess\n• Ping Identity PingAuthorize\n• Ping Identity PingCentral\n• Ping Identity PingDirectory\n• Ping Identity PingFederate\n• Ping Identity Ping MFA for Government\n• Radiant Logic RadiantOne Data Management\n• Sailpoint IdentityIQ (IIQ)\n• Tenable Enclave Security\n• Tenable Cloud Security\n• Delinea Secret Server", "fedramp_msg": "N/A", "sales_email": "fedramp@uberether.com", "security_email": "fedramp-security@uberether.com", "website": "https://uberether.com/iam-advantage/", "uei": "TBQ8EKVY9CG4", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Cybersecurity & Risk Management", "Development Tools", "Network Management", "Virtual Private Network (VPN)" ], "service_last_90": [ "Delinea Secret Server" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2132958724", "name": "UiPath", "cloud_service_provider": "UiPath", "cloud_service_offering": "Automation Cloud Public Sector", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/UiPath%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-04-05T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-04-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-03-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 13, "reuse": 12, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-04-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-04-19T20:00:00.000Z", "cert_date": "2024-03-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-03-20T20:00:00.000Z", "annual_assessment": "2011-04-19T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Engraving and Printing", "Cybersecurity & Infrastructure Security Agency", "Department of Agriculture", "Department of Health and Human Services", "Department of State", "Department of Veterans Affairs", "Department of the Interior", "Federal Student Aid", "Health Resources and Services Administration", "Immigration and Customs Enforcement", "National Oceanic and Atmospheric Administration", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "UiPath Automation Cloud Public Sector is a FedRAMP-authorized SaaS delivery of the UiPath Business Automation Platform, designed for US public sector organizations. The UiPath Business Automation Platform offers comprehensive, integrated AI-powered automation capabilities, including: UI + API Automation, Process Orchestration, Document Understanding/IDP, Process and Task Mining, Low-code Application Development, Testing, Digital Assistants, and more. It implements governance and management tools across these capabilities, and delivers an open architecture with connectors to optimize and automate processes across any technology. By using self-hosted Robot and Studio components, organizations also have the option to work with data in-place, without moving it to Automation Cloud.", "fedramp_msg": "N/A", "sales_email": "fedramp@uipath.com", "security_email": "fedramp@uipath.com", "website": "https://www.uipath.com/", "uei": "DF48TL3JJDF3", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2421943168", "name": "UKG Inc.", "cloud_service_provider": "UKG Inc.", "cloud_service_offering": "UKG Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/UKG%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-12-05T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "UKG provides a Workforce Operating Platform which helps organizations in every industry turn data into decisions that elevate productivity, culture, and the customer experience. UKG includes SMB, mid-market, and enterprise applications for human capital management, payroll, and workforce management. UKG Pro Workforce Management is a cloud-based offering for U.S. federal, state, and local government centers, as well as U.S. government contractors, and Federally Funded Research Development Centers (FFRDCs). UKG Pro Workforce Management is a complete WFM enterprise offerings, including the following cloud solutions: Timekeeping (hourly and salaried), Absence Management (Accruals, Leave, and Absence), Scheduling, Advanced Scheduling, and Forecasting, Long-term Workforce Planning, Activity Management, Data Collection & UDM, Labor Compliance, Global Payroll, Payroll Integration, Employee Self-Service, Workforce Analytics & Reporting, and Employee Engagement & Mobile tools. Also available are UKG Services, providing education, tools, training, and expertise to maximize their use of UKG Pro Workforce Management.", "fedramp_msg": "", "sales_email": "fedrampsales@ukg.com", "security_email": "fedrampsecurity@ukg.com", "website": "https://ukg.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Human Resources" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2531047207", "name": "Unanet", "cloud_service_provider": "Unanet", "cloud_service_offering": "Unanet FedRAMP Moderate Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Unanet%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-17T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-09-17T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "ControlCase", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Unanet GovCon ERP is a SaaS solution delivered in a multi-tenant, Government-Only cloud environment that supports government contractors with project management, accounting, timekeeping, labor and expense management, procurement, and business intelligence capabilities.\nContractors can securely manage contract information and maintain compliance with DFARS, DCAA, DCMA, and CMMC requirements.\nIt is available to the public, federal, state, local, and tribal governments, as well as research institutions, federal contractors, government contractors.", "fedramp_msg": "", "sales_email": "fedrampsales@unanet.com", "security_email": "security@unanet.com", "website": "https://unanet.com/", "uei": "", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Customer Relations Management (CRM)", "Finance" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1506046707", "name": "Unison", "cloud_service_provider": "Unison", "cloud_service_offering": "Contracting SaaS", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Unison%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2014-09-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2016-02-24T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2016-10-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 10, "reuse": 9, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2014-09-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2016-02-24T20:00:00.000Z", "cert_date": "2016-10-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Heart, Lung, and Blood Institute", "fedramp_auth": "2016-10-19T20:00:00.000Z", "annual_assessment": "2011-01-31T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Commerce", "Department of Education", "Department of Labor", "Department of the Treasury", "Environmental Protection Agency", "General Services Administration", "Interior Business Center", "Nuclear Regulatory Commission", "Pension Benefit Guaranty Corporation", "U.S. International Development Finance Corporation" ], "agency_reuse": [ "" ], "service_description": "Unison is the leading provider of SaaS contract management capabilities for government contractors and government agencies. Unison enables acquisition and contracts professionals to boost compliance and productivity throughout their contracting lifecycles.\r\n\r\nUnison Contracting SaaS enables Federal agencies to:\r\n- Fully comply with FAR/DFARS and agency supplements\r\n- Receive successful audits\r\n- Quickly and effectively respond to protests\r\n- Waste less time on duplicative data entry, analysis, and reporting\r\n- Eliminate process bottlenecks and compress PALT\r\n- Efficiently acquire commercial goods and services\r\n- Interact with the vendor community\r\n\r\nUnison Contracting SaaS enables government contractors to:\r\n-Accurately and promptly address the heavy flow of urgent data calls from federal customers, auditors, and executives\r\n-Mitigate insidious contracting risks with enhanced visibility and a better understanding of FAR/DFARS and agency-specific regulations\r\n-Implement an efficient, standardized workflow to enable scalability of contracts under management without proportional increases to the size and cost of the contracts department", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@unisonglobal.com", "website": "https://www.unisonglobal.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "Unison CLM (Contracting Lifecycle Management)", "Unison Marketplace" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1510017461", "name": "Unison", "cloud_service_provider": "Unison", "cloud_service_offering": "FedConnect", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Unison%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2015-10-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2016-05-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2016-10-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2015-10-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2016-05-18T20:00:00.000Z", "cert_date": "2016-10-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2016-10-19T20:00:00.000Z", "annual_assessment": "2011-05-24T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Commerce", "Department of Transportation", "Department of the Treasury", "Immigration and Customs Enforcement", "Interior Business Center" ], "agency_reuse": [ "" ], "service_description": "FedConnect provides US Government Acquisition leaders and Contract Officers a secure, full-lifecycle, auditable approach to interacting with vendors and complying with Paperless Contracting mandates. FedConnect is a Federal acquisition and grants portal where vendors and grant applicants can find opportunities for federal contracts, grants, and other types of assistance funding. It was developed to bridge the gap between government agencies and their vendor and grant applicant/recipient communities in order to streamline the process of doing business with government. \n\nThrough the FedConnect portal, Federal Government representatives are able to issue opportunity requests and make awards via the internet. Company representatives are able to review opportunities, submit bids or proposals, and receive awards. FedConnect provides an open channel of communication with the government that is both secure and auditable.\n\nThere are three types of government opportunities facilitated through FedConnect: traditional eRFX issuance, Reverse Auction events, and Financial Assistance opportunities, e.g. grants. For eRFX and Financial Assistance opportunities, FedConnect is offered by subscription fee to Federal Government agencies that are federally regulated. For Reverse Auction only, there is no subscription fee to Federal Government agencies. The bidding and winning vendor company is responsible for payment upon award.\n\nOn the government side, FedConnect is accessed through a system-to-system interface to the Unison Contracting and Grants software applications, where Government procurement and grant representatives become indirect users of FedConnect.\n\nOn the Vendor/Applicant side, FedConnect is accessed via the internet with a browser. Anyone can access the FedConnect web site and review public opportunities. However, to receive directed opportunities that are not publicly issued, respond electronically, and receive ongoing communications, a vendor/applicant must be registered.\n\nTo learn more about FedConnect and its capabilities, please visit the public portion of the FedConnect site.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@unisonglobal.com", "website": "https://www.unisonglobal.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2619944785", "name": "Unison", "cloud_service_provider": "Unison", "cloud_service_offering": "Bidscale", "logo": "", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency In Process to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2026-07-09T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-07-28T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Fortreum, LLC", "service_model": [], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Bidscale helps federal acquisition professionals move faster across three \nhigh-burden workflows: Requirements Development, Acquisition Package, and \nOffer Evaluation. AI modules guide inputs, support contract data, generate stronger \ndrafts, and organize evaluation records so teams can produce clear, consistent, \nand defensible outputs.\n\nAI-Supported Acquisition Workflows\n1. Requirements Development: Guide program teams through requirements inputs, predict key contract data, and generate stronger first drafts. \n2. Acquisition Package: Support strategy decisions, assemble required materials, and create acquisition documents with configurable workflows. \n3. Offer Evaluation: Review proposals digitally, develop findings, and generate evaluation reports with a clear audit trail.", "fedramp_msg": "", "sales_email": "", "security_email": "fedramp@unisonglobal.com", "website": "https://www.unisonglobal.com/", "uei": "", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Collaboration", "Communication", "Content Management System (CMS)", "Data Management", "Finance", "Grant Management", "Legal & Policy", "Operations Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2009746321", "name": "United Solutions", "cloud_service_provider": "United Solutions", "cloud_service_offering": "US AI", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/USAI%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-03-19T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-03-12T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-04-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-03-19T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-03-12T20:00:00.000Z", "cert_date": "2022-04-18T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-04-18T20:00:00.000Z", "annual_assessment": "2011-03-12T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Cybersecurity & Infrastructure Security Agency", "Department of Health and Human Services", "Department of State", "Immigration and Customs Enforcement", "State Office of the Inspector General" ], "agency_reuse": [ "" ], "service_description": "The US AI platform is a managed service comprised of a suite of microapps and microservices built on an AI-powered data lake, zero-trust framework, and hyperscale microservices infrastructure. Using microservices, US AI decomposes complex business components into smaller, autonomous services that are infinitely more scalable. US AI operates under a multi-tenancy model, where customers have the option to leverage the shared tenant to save money or have their own tenant to house their unique data; all while also leveraging the hyperscale community database containing hundreds of millions of valuable, common, and curated records for acquisition, grants, finance, health, and supply chain. A cloud native infrastructure, US AI scales elastically and dynamically, and relies on infrastructure automation and devsecops to optimize the operations and management of the infrastructure. The US AI suite consists of microapps, mobile apps, and microservices that power global business operations through a suite of services:\n\n1. Extreme Innovation Software Factory - Customers may subscribe to (or acquire) the microapps in the US AI app store. Alternatively, customers may host their applications, leverage the native CI/CD pipelines, software libraries, data pipelines, and security controls to launch their applications with speed, quality, and high impact security. Customers may acquire a tenant to run their applications and isolate them from other applications within US AI. Using templates, customers run their applications on their own Kubernetes clusters across multiple high impact clouds such as Amazon Web Services, Google Cloud, and Microsoft Azure. Customers may acquire access to a curated community data lake consisting of over 50 public data sets for acquisition, finance, supply chain, healthcare, insurance, etc.\n2. Archangel - Archangel demystifies, automates, and streamlines the cybersecurity lifecycle, from Governance, Risk, and Compliance (GRC) to Continuous Diagnostics and Mitigation (CDM). Cloud Service Providers (CSPs) and security professionals apply AI to eliminate redundancy, digitize workflows, and automate security accreditation by predicting compliance with security controls. Additionally, CSPs and security professionals apply Blockchain, AI, and RPA to continuously monitor device logs and predict vulnerabilities and breaches. Lastly, security, supply chain, and risk management professionals apply AI to predict global security and supply chain risks.\n3. Certior – Certior is a highly accessible solution for providing unparalleled traceability, provenance, and auditability to any level of granularity an organization wishes to track to. Certior accomplishes this by letting organizations model and set up tracking for their various products and supply lines through easy-to-use point and click configuration. Without needing developers, you have a great amount of control over what gets tracked when, by whom, and to what level of detail.\n4. Evolution - Evolution applies a low-/no-code process configuration designer to empower customers to facilitate, manage, and monitor the movement of individuals entering and leaving any secured locations; requesting services; and receiving services including, but not limited to passport, visas, asylum, healthcare, transportation, etc.\n5. Forsight - Forsight is a novel general purpose AI platform that uses unsupervised and supervised machine learning to collect, sanitize, curate, and index both structured and unstructured acquisition, emergency response, finance, grants, health, and supply chain data within a high performing, parallel processing data lake. Forsight facilitates the extraction of crucial business insights and predictions for price optimization, compliance, risk, fraud, etc. Lastly, Forsight connects humans to the AI workflow to train the machine to make better predictions.\n6. Gini - Gini applies Blockchain, AI, and RPA to intelligently automate the grants life cycle, institutionalize a standardized pre-award risk framework, and reconcile financial ledgers throughout the grant ecosystem. Grants professionals and recipients use the digital dossier to share data and reduce recipient burden and administrative costs. Gini runs on hyperscale community database that consolidates, curates, and indexes over 100TB of data from 30+ public and private data sources. Gini uses AI to scan millions of records of data including single audits to extract key findings, including but not limited to financial health; procurement, suspension, and debarment; improper cash management; excessive executive pay, eligibility; etc.\n7. Illuminate - Illuminate is a collection of emerging technologies that power a state-of-the-art supply chain ecosystem. Contracting professionals leverage intelligent automation to accelerate acquisition, make smarter buys, and ensure compliance. Additionally, contracting professionals leverage AI to automate contract formation, administration, and closeout. Lastly, supply chain leaders use Blockchain and AI to track the provenance of goods and services and “illuminate” areas of inefficiencies.\n8. Siqi - Siqi is a collection of emerging technologies that power a state-of-the-art healthcare ecosystem. Siqi uses mobile and micro apps to collect vital personal health information and save transactional information onto a blockchain. Personal digital identity and health records are protected via encryption and self-sovereign identity. Siqi uses AI to predict the presence of disease such as COVID, skin cancer, etc. and provides an immutable digital provenance for contact tracing and disease analysis.\n9. Velicus – Velicus applies Blockchain and AI to combat global pandemics by transforming the global emergency response through a coordinated ecosystem. Velicus facilitates the global emergency response process to pandemics like COVID-19, Ebola, SARS, MERS, etc. Participants in the emergency response value chain can track the geolocation, health, and safety of responders, connecting to their deployment force anywhere in the world. AI is used to match responders to an event based on requirements such as skill, education, mental health, etc.", "fedramp_msg": "N/A", "sales_email": "business@usai.io", "security_email": "support@usai.io", "website": "https://www.usai.io/", "uei": "UZMWPD3ENF18", "small_business": true, "business_categories": [ "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2415334644", "name": "United States Department of Agriculture", "cloud_service_provider": "United States Department of Agriculture", "cloud_service_offering": "AgCloud Managed Platform Services (AMPS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/USDA%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-04-23T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-09-19T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-04-23T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-09-19T20:00:00.000Z", "cert_date": "2025-03-18T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-18T20:00:00.000Z", "annual_assessment": "2011-09-11T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture" ], "agency_reuse": [ "" ], "service_description": "The AMPS system boundary is a General Support System (GSS) that is made up of operating systems (OS) and services designed to run on third-party cloud hosting platforms. The purpose of this system is to allow USDA customers to leverage the robust capabilities of a FedRAMP cloud service provider (CSP) hosting environment for application delivery while DISC maintains the full management of the OS and services required to meet DISC controls at the High baseline level. The FedRAMP’ed CSPs are outside of the security boundary and AMPS inherits controls from the CSP. \n\nThe AMPS system is a major part of DISC’s cloud service offering for applications external to DISC. The system enables applications running in the cloud environment to take advantage of CSP virtualization of their computing environments. CSP virtualization alongside the Highly Available (HA) network that AMPS runs on, provides applications leveraging this environment with many advantages over a typical physical computing environment including, but not limited to, faster processing, greater up-time, and redundancy. \n\nThe AMPS system is not publicly accessible. This system is only available to organizations who contract with DISC. No entity outside of the USDA (external users) has access to this system.", "fedramp_msg": "N/A", "sales_email": "DISC.Marketing@usda.gov", "security_email": "USDA-OCIO-FedRAMP_Support@USDA.GOV", "website": "https://www.usda.gov/disc/service-catalog#cloud-solutions", "uei": "", "small_business": false, "business_categories": [ "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "AGENCYNITCIAAS", "name": "United States Department of Agriculture", "cloud_service_provider": "United States Department of Agriculture", "cloud_service_offering": "vGov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/USDA%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2012-12-12T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2013-09-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2013-09-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 11, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2012-12-12T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2013-09-16T20:00:00.000Z", "cert_date": "2013-09-16T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2013-09-16T20:00:00.000Z", "annual_assessment": "2011-07-01T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "IaaS", "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1834348080", "csp": "GDC Integration, Inc.", "cso": "General Support System (GSS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2118555665", "csp": "Totara Learning Inc.", "cso": "Totara Talent Development Government Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2415334644", "csp": "United States Department of Agriculture", "cso": "AgCloud Managed Platform Services (AMPS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Defense Information Systems Agency", "Department of Agriculture", "General Services Administration", "United States Office of Government Ethics" ], "agency_reuse": [ "22-005", "22-014-02", "22-034", "22-040", "22-062", "22-080" ], "service_description": "The USDA's Digital Infrastructure Services Center (DISC) is a federally-owned Cloud Service Provider for systems that are owned by Federal, State, and Local governments. The USDA DISC offers both IaaS and PaaS services to its customers on Midrange and Mainframe infrastructure, with a variety of operating system platforms and database options to choose from in a fully virtualized hosting environment. Network services are provided for both IaaS and PaaS environments, and offer robust, secure and highly redundant connectivity to the USDA WAN and the Internet. Additional information about these services is available here (http://www.ocio.usda.gov/about-ocio/data-center-operations-dco).\n\nThe USDA DISC Service Catalog is available here (http://www.ocio.usda.gov/document/nitc-service-catalog)\n\nThe USDA DISC Infrastructure as a Service (IaaS) offering provides a virtual machine infrastructure which allows customers the option to maintain control of their operating and general support systems at the system level. Network, Facility and Operational Support Services are included with all IaaS offerings. Security monitoring and defense in depth for all IaaS servers is provided via periodic vulnerability scanning with best-in-class software. IaaS customers receive the benefit of fully managed standardized hardware, advanced server virtualization, strict standards, security and economies of scale from DISC.\n\nThe USDA DISC's Platform as a Service (PaaS) offerings build upon IaaS offerings and enable customers to select from secure, standardized Operating System images that are configured to meet actual processing requirements. The PaaS service offering provides fully managed Operating Systems that are maintained by USDA DISC. These hardened and virtualized operating systems leverage advanced server virtualization technologies, compliant security and build standards, and economies of scale. The PaaS offering enables rapid delivery of cost-effective, fully-managed operating platforms offering expanded controls to securely host customer's mission critical applications. This USDA DISC PaaS offering is currently available for multiple operating systems, including: RedHat Linux, Microsoft Windows, Oracle Solaris, IBM AIX, and zOS. The DISC PaaS Service offering also fully supports many database offerings, including: mySQL, MSSQL, Oracle and DB2.\n\nSecurity services offered by USDA DISC, as part of all standard service offerings, are implemented and monitored through Department of Homeland Security (DHS) Continuous Diagnostics and Mitigation (CDM) solutions.\nIn addition to the FedRAMP Moderate security control baseline, the USDA DISC has implemented FISMA High security controls for all service offerings and FedRAMP+ DoD Impact Level 4 (IL4) controls within the Midrange PaaS service offering.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "USDA-OCIO-FedRAMP_Support@USDA.GOV", "website": "http://www.ocio.usda.gov/about-ocio/data-center-operations/nitc-cloud-services", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "AGENCYWC2", "name": "United States Department of the Treasury", "cloud_service_provider": "United States Department of the Treasury", "cloud_service_offering": "Treasury Cloud Moderate", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DoT%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2013-11-11T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2014-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2014-05-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2013-11-11T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2014-05-06T20:00:00.000Z", "cert_date": "2014-05-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2014-05-06T20:00:00.000Z", "annual_assessment": "2011-10-31T04:00:00.000Z", "independent_assessor": "Excentium, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of the Treasury" ], "agency_reuse": [ "" ], "service_description": "The Treasury Cloud Moderate (TCloud-M) System is owned and operated by the Department of the Treasury, serving as a multi-tenant IaaS/PaaS hosting environment designed to process Moderate Impact level information. TCloud-M is offered as a shared service, available in two cloud hosting models: Boundary Protected and Managed. The IaaS/PaaS provider used for this solution is Amazon Web Services (AWS) US East/West. The TCloud-M platform enables Treasury customers to concentrate on the operational and business aspects of their web presence, such as usability, information architecture, and content authoring, without the need to repeatedly configure and reinvent the technical infrastructure. This platform supports a variety of highly available services hosted on AWS and delivered to end-users through the Akamai Content Delivery Network (CDN).\r\nTCloud-M provides the following boundary protected and managed services to meet business or mission requirements:\r\nBoundary Protected Hosting Environment\r\n•\tCloud account provisioning and invoicing, with transparency on service utilization with FinOps dashboards.\r\n•\tIntrusion Prevention Services (IPS); VPN; Direct connection with Treasury T-NET network.\r\n•\tMonitoring of network ingress and egress traffic.\r\n•\tPreconfigured networking resources.\r\n•\tSingle Sign-On with connection to TCloud Active Directory.\r\n•\tIAM policies, groups, roles, preconfigured to enforce identify guardrails. \r\n•\tAudit trails and change monitoring that produce alerts and notifications to predetermined set of stakeholders.\r\n•\tManagement, configuration, and provisioning of Atlassian software suite available for customers- JIRA, Confluence, Stash (BitBucket), and Bamboo.\r\n•\tAccess to native cloud services and resources provided by the CSP.\r\nManaged Hosting Environment\r\n•\tCloud account provisioning and invoicing, with transparency on service utilization with FinOps dashboards.\r\n•\tRemote Desktop Services.\r\n•\tOperating System (OS) level patching performed as part of monthly patch deployments.\r\n•\tVulnerability scanning: OS, Databases, and Web application.\r\n•\tIdentification, prioritization, and mitigation of OS and Database level vulnerabilities.\r\n•\tConfiguration management for OS and Databases .\r\n•\t Intrusion Prevention Services (IPS); VPN; Web Application Firewall (WAF); Direct connection with Treasury T-NET network.\r\n•\tAnti-Virus and Host Based Firewall. \r\n•\tEndpoint Detection and Response.\r\n•\tAudit log ingestion and monitoring (OS Level, Database, and CSP).\r\n•\tDirectory services, accounts and permission management provided through Microsoft Active Directory.\r\n•\tIAM policies, groups, roles, preconfigured to enforce identify guardrails. \r\n•\tIAM audit trails and change monitoring that produce alerts and notifications to predetermined set of stakeholders.\r\n•\tSingle Sign-On with connection to TCloud Active Directory.\r\n•\tMonitoring of network ingress and egress traffic. \r\n•\tPreconfigured networking resources, with audit trails and change monitoring that produce alerts and notifications to predetermined set of stakeholders.\r\n•\tUnified cloud security platform that includes vulnerability management, compliance and posture management, workload protection, and container security. \r\n•\tDisaster recovery and Contingency Planning - Backup and restore.\r\n•\tDisaster recovery and Contingency Planning - Different availability zones for resiliency.\r\n•\tSecurity incident and response monitoring and coordination with appropriate stakeholders.\r\n•\tManagement, configuration, and provisioning of Atlassian software suite available for customers- JIRA, Confluence, Stash (BitBucket), and Bamboo.\r\n•\tAccess to native cloud services and resources provided by each CSP.", "fedramp_msg": "N/A", "sales_email": "Kamil.Kuza@treasury.gov", "security_email": "TCloudServiceDesk@treasury.gov", "website": "", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1801046750", "name": "United States Department of the Treasury", "cloud_service_provider": "United States Department of the Treasury", "cloud_service_offering": "Treasury Cloud (TCloud)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/DoT%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-09-27T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2018-09-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to Agency Authorization In Process" }, { "date": "2020-03-02T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-09-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2017-09-27T20:00:00.000Z", "cert_date": "2020-03-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-03-02T20:00:00.000Z", "annual_assessment": "2011-10-31T04:00:00.000Z", "independent_assessor": "Excentium, Inc.", "service_model": [ "IaaS", "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of the Treasury", "Internal Revenue Service", "Treasury Inspector General for Tax Administration" ], "agency_reuse": [ "" ], "service_description": "The Treasury Cloud High (TCloud-H) system is owned and operated by the Department of the Treasury, serving as a multi-cloud IaaS/PaaS hosting environment designed to process High Impact level information. It includes the following multitenant, government-exclusive cloud platforms: \r\n•\tAmazon Web Services (AWS) GovCloud East/West, \r\n•\tOracle Cloud Infrastructure (OCI) GovCloud East/West, \r\n•\tMicrosoft Azure GovCloud East/West, and \r\n•\tGoogle Cloud Platform (GCP) GovCloud East4/Central1 \r\nTCloud-H FedRAMP’ed environment is offered as a shared service to Treasury Bureau’s, available in two cloud hosting models: Boundary Protected and Managed. Contractual support from each cloud vendor is in place to design, build, maintain, and manage every individual platform based on the hosting model. TCloud-H allows Treasury customers to incorporate innovative tools and forward-thinking IT solutions throughout the design, build, and maintenance phases of a cloud-based project. \r\nTCloud provides the following Boundary Protected and Managed services to meet business or mission requirements:\r\nBoundary Protected Hosting Environment\r\n•\tCloud account provisioning and invoicing, with transparency on service utilization with FinOps dashboards.\r\n•\tIntrusion Prevention Services (IPS); VPN; Direct connection with Treasury T-NET network.\r\n•\tMonitoring of network ingress and egress traffic.\r\n•\tPreconfigured networking resources.\r\n•\tSingle Sign-On with connection to TCloud Active Directory.\r\n•\tIAM policies, groups, roles, preconfigured to enforce identify guardrails. \r\n•\tAudit trails and change monitoring that produce alerts and notifications to predetermined set of stakeholders.\r\n•\tManagement, configuration, and provisioning of Atlassian software suite available for customers- JIRA, Confluence, Stash (BitBucket), and Bamboo.\r\n•\tSelf-managed access to private or intra-VPC native cloud services and resources provided by each CSP.\r\nManaged Hosting Environment\r\n•\tCloud account provisioning and invoicing, with transparency on service utilization with FinOps dashboards.\r\n•\tRemote Desktop Services.\r\n•\tOperating System (OS) level patching performed as part of monthly patch deployments.\r\n•\tVulnerability scanning: OS and Databases.\r\n•\tIdentification, prioritization, and mitigation of OS and Database level vulnerabilities.\r\n•\tConfiguration management for OS and Databases. \r\n•\tIntrusion Prevention Services (IPS); VPN; Web Application Firewall (WAF); Direct connection with Treasury T-NET network.\r\n•\tAnti-Virus and Host Based Firewall. \r\n•\tEndpoint Detection and Response. \r\n•\tAudit log ingestion and monitoring (OS Level, Database, and CSP).\r\n•\tDirectory services, accounts and permission management provided through Microsoft Active Directory.\r\n•\tIAM policies, groups, roles, preconfigured to enforce identify guardrails. \r\n•\tIAM audit trails and change monitoring that produce alerts and notifications to predetermined set of stakeholders.\r\n•\tSingle Sign-On with connection to TCloud Active Directory.\r\n•\tMonitoring of network ingress and egress traffic. \r\n•\tPreconfigured networking resources, with audit trails and change monitoring that produce alerts and notifications to predetermined set of stakeholders.\r\n•\tUnified cloud security platform that includes vulnerability management, compliance and posture management, workload protection, and container security.\r\n•\tDisaster recovery and Contingency Planning - Backup and restore.\r\n•\tDisaster recovery and Contingency Planning - Different availability zones for resiliency.\r\n•\tSecurity incident and response monitoring and coordination with appropriate stakeholders.\r\n•\tManagement, configuration, and provisioning of Atlassian software suite available for customers- JIRA, Confluence, Stash (BitBucket), and Bamboo.\r\n•\tAccess to native cloud services and resources provided by each CSP.", "fedramp_msg": "N/A", "sales_email": "Kamil.Kuza@treasury.gov", "security_email": "TCloudServiceDesk@treasury.gov", "website": "", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2125561001", "name": "Unqork, Inc.", "cloud_service_provider": "Unqork, Inc.", "cloud_service_offering": "Unqork for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Unqork%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-09-22T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2022-12-26T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to Agency Authorization In Process" }, { "date": "2023-04-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-12-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-09-22T20:00:00.000Z", "cert_date": "2023-04-20T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-04-20T20:00:00.000Z", "annual_assessment": "2011-09-22T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Health and Human Services", "Department of State" ], "agency_reuse": [ "" ], "service_description": "Unqork is a no-code, cloud-based development platform that empowers organizations to rapidly build robust enterprise-grade software without writing a single line of code. Advanced no-code platforms such as Unqork come \"out-of-the-box\" with all the toolsets and elements necessary to build and manage applications.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@unqork.com", "website": "https://www.unqork.com/government/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2419559532", "name": "USDA DISC", "cloud_service_provider": "USDA DISC", "cloud_service_offering": "Connect.gov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/USDA%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-06-03T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-01-08T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-04-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-06-03T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-01-08T20:00:00.000Z", "cert_date": "2025-04-24T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-04-24T20:00:00.000Z", "annual_assessment": "2011-12-03T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Agriculture", "Department of the Treasury" ], "agency_reuse": [ "" ], "service_description": "Connect.Gov is delivered as a Software as a Service (SaaS) offering using a multi-tenant “Government-Only Cloud” cloud computing environment. It is available to federal government departments and agencies employees and contractors.", "fedramp_msg": "", "sales_email": "Outreach@Connect.gov", "security_email": "USDA-OCIO-FedRAMP_Support@USDA.GOV", "website": "https://www.connect.gov/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Content Management System (CMS)", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Development Tools", "Finance" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2514747735", "name": "Valid Evaluation, Inc.", "cloud_service_provider": "Valid Evaluation, Inc.", "cloud_service_offering": "Valid Eval", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ValidEval%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-03-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-03-20T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Valid Eval application facilitates complex group decision-making for organizations that make and must defend tough, high-stakes decisions. Evaluations are organized around a rubric broken down into weighted average, quantitatively scored dimensions. Furthermore, evaluations are broken down via qualitative “Sub-Dimensions” that structure the evaluator’s thinking and facilitate a multi-dimensional quantitative assessment. Evaluations are structured through a process starting with “Commander’s Intent,” ensuring the decision outcome is grounded in the goals it must achieve.\n\nThe Valid Eval application provides evaluations while establishing trust across multiple stakeholder groups through transparent and robust reporting tools. It also provides decision process efficiency by handling time-consuming tasks such as collecting evaluator scoring\ndata and automating administrative tasks such as reaching out to evaluators to complete their assignments.\n\nAdditionally, the application reduces the audit and/or protest-related risks faced by acquisition programs. This is done by ensuring that the objectives are thoroughly defined at the beginning and maintained throughout the process. Then, comprehensive audit reports are generated that provide evidence of having followed defined objectives.", "fedramp_msg": "N/A", "sales_email": "info@valideval.com", "security_email": "support@valideval.com", "website": "https://usg.valideval.com/", "uei": "MAFEHSDA7TM3", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Grant Management", "Human Resources", "Legal & Policy", "Operations Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2624455459", "name": "Valid8 Financial", "cloud_service_provider": "Valid8 Financial", "cloud_service_offering": "Valid8 Financial GovCloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Valid8%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-30T22:14:46.044Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-06-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Valid8 Financial GovCloud is a Software-as-a-Service asset tracing and forensic accounting platform hosted in AWS GovCloud (US) within a dedicated FedRAMP authorization boundary. It supports law enforcement, financial investigations, money laundering, elder financial exploitation, healthcare fraud, embezzlement, securities fraud, drug trafficking, human trafficking, gaming, asset tracing, e-discovery, and litigation-support workflows across dozens of states. Agency-controlled evidentiary datasets are ingested into the boundary, stored in encrypted relational and object storage, and processed through the application and analytics layer to organize, trace, and produce financial information for investigative and litigation use.\nThe authorization boundary consists of the ingestion and intake services, the application and analytics layer, the primary relational datastore, object storage, the Keycloak identity and access management service providing authentication, multi-factor authentication, and role-based access, and the audit, logging, and continuous-monitoring services. The platform runs on a CIS-hardened baseline with FIPS-validated cryptography enforcing encryption in transit and at rest. Access is restricted to authorized agency and supporting Valid8 personnel under role-based access control. The offering is being assessed against the FedRAMP Moderate baseline.", "fedramp_msg": "", "sales_email": "b.polinsky@valid8financial.com", "security_email": "support@valid8financial.com", "website": "https://valid8financial.com/", "uei": "J9Q2C6NFLYV5", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Artificial Intelligence (AI)", "Law Enforcement", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1817874315", "name": "Valimail", "cloud_service_provider": "Valimail", "cloud_service_offering": "Valimail Enforce Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Valimail%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-04-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-07-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-08-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-04-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-07-18T20:00:00.000Z", "cert_date": "2018-08-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-08-02T20:00:00.000Z", "annual_assessment": "2011-07-18T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Commerce", "Environmental Protection Agency", "Federal Aviation Administration" ], "agency_reuse": [ "" ], "service_description": "Valimail Inc.'s (Valimail’s) Enforce Platform is built to support the global standard Domain-based Message Authentication, Reporting & Conformance (DMARC). The platform gives Valimail’s customers control and visibility over who can send email on behalf of their domain. Specifically, the platform provides insight into all services (entities), both internal and external, sending email as their domain. As a result of this visibility, our customers can authorize/deauthorize services, thus, preventing exact domain impersonation and phishing attacks.", "fedramp_msg": "N/A", "sales_email": "sales@valimail.com", "security_email": "fedramp@valimail.com", "website": "https://www.valimail.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2411443563", "name": "Valley IT Solutions, LLC", "cloud_service_provider": "Valley IT Solutions, LLC", "cloud_service_offering": "Kernos", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Kernos%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-07-08T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-07-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-07-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-07-08T20:00:00.000Z", "cert_date": "2025-03-07T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Special Operations Command, Pacific", "fedramp_auth": "2025-03-07T20:00:00.000Z", "annual_assessment": "2011-01-30T04:00:00.000Z", "independent_assessor": "DataLock Consulting Group", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Special Operations Command, Pacific" ], "agency_reuse": [ "" ], "service_description": "Kernos is a multi-tenant, cloud-native “SaaS” (software-as-a-service) cloud service offering (CSO). It leverages Amazon Web Services (AWS), IaaS (infrastructure-as-a-service), and PaaS (platform-as-a-service) for its underlying infrastructure and hardware.\n\nKernos integrates near-real-time video exploitation, common operating picture (COP), advanced multimedia and full motion video (FMV) (unclassified videos), ultimate web-based communication, collaboration, and information sharing tools, advanced file management, targeting databases, fast & reliable LLM-based translation micro-service, state-of-the-art facial recognition, and object detection with built-in artificial intelligence (AI)/machine learning (ML)-based alerts,  and notifications capabilities into a cost-effective solution.\n\nThis combination of real-time data and advanced modern technology gives government and commercial customers a bird’s-eye view of operations, enabling decision-makers to plan and manage operations strategically.", "fedramp_msg": "N/A", "sales_email": "sales@valleyit.com", "security_email": "itsecurity@valleyit.com", "website": "https://valleyit.com/", "uei": "G2VFAKKJJZ53", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Design & Multimedia", "Fleet Management", "Media", "Storage" ], "service_last_90": [ "" ], "all_others": [ "K-CHAT", "DarkNET", "Demise", "Kloud", "SkyNET 2.0", "Solaris", "THEIA", "Translate" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2525556241XM", "name": "Vanta", "cloud_service_provider": "Vanta", "cloud_service_offering": "Vanta Government Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Vanta%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2026-01-16T20:00:00.000Z", "ip_prog_date2": "2026-03-10T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-04-24T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-04-24T20:00:00.000Z", "annual_assessment": "2011-04-25T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Vanta Government Cloud is an end-to-end security and compliance platform powered by AI and automation. From continuous governance, risk, and compliance (GRC) and vendor risk management to questionnaire automation and Trust Center visibility, Vanta helps organizations streamline compliance across 35+ frameworks - including SOC 2, ISO 27001, FedRAMP, NIST 800-53. NIST CSF, CMMC, and more. With over 16,000 customers, Vanta is the continuous monitoring solution that helps organizations achieve and maintain a strong security posture.", "fedramp_msg": "", "sales_email": "federal@vanta.com", "security_email": "fedramp@vanta.com", "website": "https://www.vanta.com/", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2525556241", "name": "Vanta", "cloud_service_provider": "Vanta", "cloud_service_offering": "Vanta Trust Management Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Vanta%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-06-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-07-21T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2025-07-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-06-16T20:00:00.000Z", "ip_prog_date2": "2025-07-21T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2025-07-25T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-07-25T20:00:00.000Z", "annual_assessment": "2011-08-25T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "The Vanta Trust Management Platform provides customers with an end-to-end security and compliance automation suite that focuses on the following activities: continuous and automated governance, risk, and compliance (GRC), vendor risk management, questionnaire automation, and up-to-date security program description displayed on the customers’ Trust Center website. In addition, Vanta works closely with customers and selected audit partners to help streamline compliance against 30+ security compliance frameworks such as System and Organization Controls (SOC) 2, International Organization for Standardization (ISO) 27001, ISO 42001, National Institute of Standards and Technology Artificial Intelligence Risk Management Framework (NIST AI RMF), CIS CSC, NIST CSF, FedRAMP, and more. With over 10,000 customers and countless automations, Vanta serves as a continuous monitoring solution to ensure organizations reach and maintain a state of security.", "fedramp_msg": "This Cloud Service Offering achieved a FedRAMP 20x Class B Pilot Certification. To maintain its Marketplace listing and have its “pilot” status removed, the offering must follow the Consolidated Rules for 2026 and implement all required rules by March 7, 2027.\r\n\r\nNote: Service offerings may have their “pilot” status removed before March 7, 2027 if they demonstrate adoption of, and adherence to, all required rules before the deadline.", "sales_email": "federal@vanta.com", "security_email": "fedramp@vanta.com", "website": "https://www.vanta.com/", "uei": "", "small_business": false, "business_categories": [ "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2421252644", "name": "Varonis", "cloud_service_provider": "Varonis", "cloud_service_offering": "Varonis DatAdvantage Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Varonis%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-06-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-05-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-06-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-06-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-05-20T20:00:00.000Z", "cert_date": "2025-06-16T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Bureau of Labor Statistics", "fedramp_auth": "2025-06-16T20:00:00.000Z", "annual_assessment": "2011-05-14T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Brookhaven Site Office", "Bureau of Labor Statistics", "National Endowment for the Arts" ], "agency_reuse": [ "" ], "service_description": "Varonis DatAdvantage Cloud is a cloud-hosted data security platform for protecting and governing enterprise data. Varonis DatAdvantage Cloud protects data wherever it lives by reducing unnecessary access, fixing misconfigurations, inventorying and labeling critical data sets, and stopping insider threats.\n\nWith Varonis DatAdvantage Cloud agencies can meet EO 14028 requirements to establish zero trust by inventorying and protecting their most sensitive data. OMB 22-09 data pillar and identity requirements can be fulfilled automatically with DatAdvantage Cloud's powerful automation suite. DatAdvantage Cloud tracks all user activity around cloud platforms and aggregates these logs in a single source. Varonis’ advanced user and entity behavior analytics helps to identify compromises by understanding anomalous behavior at the file/object level, easily fulfilling OMB 21-31 up to EL-3. Automated dashboards track various Federal regulations (i.e. NIST 800-53) for easy compliance reporting.\n\nVaronis DatAdvantage cloud integrates with a wide array of data repositories, SaaS applications, and cloud infrastructure to give customers a holistic view of their data. Varonis can be used to address these important use cases and more:\nDetecting insider threats and cyberattacks: Varonis DatAdvantage Cloud detects threats to data, including insider threats and external cyberattacks with a live-updating library of pre-built threat models based on attack techniques and vulnerabilities used by real-world adversaries.\n\nLimiting the blast radius of an attack: Varonis DatAdvantage Cloud analyzes where there is unnecessary access to data and can eliminate excessive access at scale, drastically reducing the damage from insider threats and cyberattacks. \nPreventing data exposure: Varonis DatAdvantage Cloud’s DSPM capabilities help teams automatically classify sensitive data, find where information is exposed externally or internally, and helps teams continually prioritize remediation efforts to improve security posture. \n\nFixing misconfigurations: Varonis DatAdvantage Cloud provides SSPM capabilities to analyze and fix misconfigured Software as a Service (SaaS) applications, discover shadow instances, and spot vulnerabilities that could put data at risk. \nAchieving compliance: Varonis’ vast library of classification policies can discover sensitive data related to GDPR, CCPA, HIPAA, PCI, FTI, CUI, CJIS, Secret, Top Secret and more. The permissions analysis and continual monitoring Varonis provides gives auditors a real-time pulse on compliance and helps customers achieve compliance with NIST 800-53, NIST 800-171, RMF, CMMC, IRS Pub 1075 and more.", "fedramp_msg": "N/A", "sales_email": "gpomeroy@varonis.com", "security_email": "soc@varonis.com", "website": "https://www.varonis.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Legal & Policy", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2421252636", "name": "Varonis", "cloud_service_provider": "Varonis", "cloud_service_offering": "Varonis Data Security Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Varonis%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-06-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-01-08T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-05-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 7, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-06-25T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-01-08T20:00:00.000Z", "cert_date": "2025-05-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Bureau of Labor Statistics", "fedramp_auth": "2025-05-14T20:00:00.000Z", "annual_assessment": "2011-12-19T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2421252644", "csp": "Varonis", "cso": "Varonis DatAdvantage Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Brookhaven Site Office", "Bureau of Labor Statistics", "Department of Justice", "National Endowment for the Arts", "National Telecommunications and Information Administration" ], "agency_reuse": [ "22-007-25", "22-061-01", "22-068" ], "service_description": "The Varonis Data Security Platform is a cloud-hosted data security platform for protecting and governing enterprise data. Varonis DSP protects the most used data stores by enforcing least privilege, fixing misconfigurations, inventorying and labeling critical data sets, and stopping insider threats.\n\nWith the Varonis DSP agencies can meet EO 14028 requirements to establish zero trust by inventorying and protecting their most sensitive data. OMB 22-09 data pillar and identity requirements can be fulfilled automatically with Varonis’ powerful automation suite. The Varonis DSP tracks all user activity around cloud platforms and aggregates these logs in a single source. Varonis’ advanced user and entity behavior analytics helps to identify compromises by understanding anomalous behavior at the file level, easily fulfilling OMB 21-31 up to EL-3. Automated dashboards track various Federal regulations (i.e. NIST 800-53) for easy compliance reporting.\n\nVaronis integrates with agencies most used data stores like M365, NAS devices, Unix/Linux, and other cloud collaboration tools to give customers a holistic view of their data. Varonis can be used to address these important use cases and more: \nDetecting insider threats and cyberattacks: Varonis provides behavior-based threat detection that uses machine learning to alert on abnormal user or device behavior. Additionally, Varonis provides a live-updating library of pre-built threat models based on attack techniques and vulnerabilities used by real-world adversaries.\nPinpointing data exposure: Varonis automatically classifies sensitive data, highlights where information is exposed externally or internally, and automatically removes unnecessary access to enforce least privilege.\n\nLimiting the blast radius of an attack: Varonis safely automates permissions changes to eliminate unnecessary access and drastically reduces the damage from insider threats and cyberattacks.\n\nTracking Email Abuses : Varonis scans inside of emails/attachments and captures all user email activity while alerting on abuses, tracking spillage, and mapping the exact flow of sensitive data through email platforms. \n\nAchieving compliance: Varonis’ vast library of classification rules can discover sensitive data related to GDPR, CCPA, HIPAA, PCI, CUI, FTI, CJIS, Secret, Top Secret and more. The permissions analysis and continual monitoring Varonis provides gives auditors a real-time pulse on compliance and helps customers achieve compliance with NIST 800-53, NIST 800-171, RMF, CMMC, IRS Pub 1075 and more.", "fedramp_msg": "N/A", "sales_email": "gpomeroy@varonis.com", "security_email": "soc@varonis.com", "website": "https://www.varonis.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Legal & Policy", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2430741228", "name": "Vasion", "cloud_service_provider": "Vasion", "cloud_service_offering": "Vasion Automate Fed (VAF)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Vasion%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-08-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-01-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-08-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-01-06T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-01-06T20:00:00.000Z", "annual_assessment": "2011-10-30T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Defense Information Systems Agency" ], "agency_reuse": [ "" ], "service_description": "Vasion unifies print and output process automation into a single, secure cloud solution—purpose-built to meet the complex demands of federal agencies and public sector organizations. With a proven track record in secure digital transformation, Vasion empowers you to modernize legacy systems, eliminate manual bottlenecks, and achieve seamless information flow across users, departments, and platforms.\n\nOur platform includes:\n\nVasion Print (formerly PrinterLogic): A secure, cloud-native print management solution that eliminates print servers, automates print driver deployment, and reduces print-related helpdesk tickets—delivering scalable, zero-trust printing from any device, anywhere.\n\nVasion Output: A robust print and document orchestration engine that connects systems and increases reliability to ensure critical documents and data are delivered precisely where, when, and how they’re needed.\n\nVasion offers a uniquely integrated approach to secure content and print automation. With Vasion you can reduce infrastructure costs, eliminate print servers, enhance security posture, and deliver better services—faster.\n\nVasion is your partner in serverless infrastructure, print automation, secure connectivity, and process excellence.", "fedramp_msg": "N/A", "sales_email": "sales@vasion.com", "security_email": "security@vasion.com", "website": "https://vasion.com/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Fleet Management", "Mobile Device Management (MDM)", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2025456731", "name": "Vaultara, LLC", "cloud_service_provider": "Vaultara, LLC", "cloud_service_offering": "Vaultara Flare Services", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Vaultara%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-11-09T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-06-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2023-03-31T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-11-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-06-03T20:00:00.000Z", "cert_date": "2023-03-31T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-03-31T20:00:00.000Z", "annual_assessment": "2011-06-03T04:00:00.000Z", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "Vaultara offers an enterprise-wide software-only solution that provides secure, bi-directional electronic transfer to any digital file using Vaultara's Hybrid/SaaS technology. Maximizing security, efficiency, and cost savings, Vaultara offers this solution for quick, secure, contact-less data sharing, drastically reducing the need for physical media. Vaultara is committed to the secure digital delivery of data in the public sector. By achieving FedRAMP authorization, the U.S. federal government will be able to deploy Vaultara software across various departments and agencies.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@vaultara.com", "website": "https://www.vaultara.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1605107898", "name": "VBrick Systems, Inc.", "cloud_service_provider": "VBrick Systems, Inc.", "cloud_service_offering": "VBrick Rev", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/VBrick%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-02-13T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-11-21T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-02-01T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 8, "reuse": 7, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-02-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-11-21T20:00:00.000Z", "cert_date": "2019-02-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "US Fish and Wildlife Service", "fedramp_auth": "2019-02-01T20:00:00.000Z", "annual_assessment": "2011-03-15T04:00:00.000Z", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Argonne National Laboratory", "Federal Housing Finance Agency", "First Responder Network Authority", "National Science Foundation", "Nuclear Regulatory Commission", "Office of Natural Resources Revenue", "US Fish and Wildlife Service", "United States Patent and Trademark Office" ], "agency_reuse": [ "" ], "service_description": "Rev enables organizations to securely and efficiently deliver high quality live and on-demand video to huge audiences internally, using the organization's wide area network, and externally via the cloud. Features of Rev include, the central management of video assets, user access and permissions, network delivery devices, and video publishing and distribution - in the most bandwidth-efficient way possible.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@vbrick.com", "website": "https://vbrick.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1509237360", "name": "Veracode", "cloud_service_provider": "Veracode", "cloud_service_offering": "Veracode Online Security Platform for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Veracode%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-07-15T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-03-06T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-07-18T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 44, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-07-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-03-06T20:00:00.000Z", "cert_date": "2022-07-18T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-07-18T20:00:00.000Z", "annual_assessment": "2011-03-06T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR1831429369", "csp": "HireVue", "cso": "Recruitment Assessments and Video Interviewing", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1724526654", "csp": "Intelliworx", "cso": "Intelliworx Cloud Workflow Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2428168490", "csp": "LogicMonitor", "cso": "LM for Gov", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2225648574", "csp": "Mathematica Inc.", "cso": "Mathematica Cloud Support System", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2322855016", "csp": "ProjectTeam, Inc.", "cso": "ProjectTeam for Government (Construction Project and Program Management)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Federal Energy Regulatory Commission", "HHS Office of the Inspector General", "Nuclear Regulatory Commission", "United States Securities and Exchange Commission" ], "agency_reuse": [ "22-002-02", "22-002-04", "22-003", "22-005", "22-005-09", "22-006", "22-007", "22-007-04", "22-011-05", "22-012", "22-013", "22-014", "22-017", "22-018", "22-021-07", "22-022", "22-024", "22-027", "22-027-09", "22-028", "22-031", "22-032", "22-034", "22-036", "22-037", "22-039", "22-044", "22-049", "22-051", "22-056", "22-058", "22-062", "22-070", "22-078", "22-084", "22-087", "22-088" ], "service_description": "Veracode's unified platform helps Government developers and application security teams assess and improve the security of applications from inception through production. With a combination of automation, process, and speed, Veracode integrates application security into the software lifecycle, effectively eliminating vulnerabilities during the development/deployment chain. This solution is widely used by enterprises to secure web, mobile, legacy, and third-party enterprise applications, with a simpler and more scalable way to help reduce software security risk across software infrastructure. Through its FedRAMP offering, Veracode offers the ability to test all the code for your applications, including code you write yourself (with Static Application Security Testing or SAST), open-source libraries (with Software Composition Analysis or SCA), and web-based applications (with Dynamic Application Security Testing or DAST). We also provide eLearning for training in secure software development practices, helping developers learn to fix security issues and avoid introducing new ones. Veracode's cloud-based model helps scale software security for both small teams and large agencies, without requiring the cost, up front setup, and maintenance of on premise offerings. Additionally, Veracode provides all the security expertise, program planning, education, and remediation guidance that security and development teams need to build a robust application security program.", "fedramp_msg": "N/A", "sales_email": "fedramp@veracode.com", "security_email": "fedramp-security@veracode.com", "website": "https://www.veracode.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2616639378", "name": "Veridix, LLC", "cloud_service_provider": "Veridix, LLC", "cloud_service_offering": "Advantage eClinical", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Veridix%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-05-13T22:12:57.506Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-05-13T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Linford & Company", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Veridix’ Advantage eClinical® is an integrated collection of web-enabled application subsystems and utilities specifically designed, configured, and deployed to ensure secure data entry and to satisfy the reporting needs of the clinical trials and research studies.", "fedramp_msg": "", "sales_email": "sales@veridix.com", "security_email": "security@veridix.com", "website": "https://www.veridix.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Data Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2616952670", "name": "Verily Health", "cloud_service_provider": "Verily Health", "cloud_service_offering": "Verily Pre", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Verily%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-05-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-05-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "PaaS", "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Verily Pre is an AI-native data platform purpose-built for precision health. Pre enables federal agencies, academic institutions, and commercial organizations to harmonize, govern, discover, explore, and analyze complex multimodal biomedical data – and to build and deploy AI models and agents directly into care and research workflows.\n\nThe platform includes three integrated capabilities:\n- Refinery, a FHIR-native data curation engine that ingests and enriches siloed clinical and biomedical data into research- and AI-ready assets\n- Exchange, a secure marketplace for discovering and sharing AI-ready datasets, models, and agents\n- Workbench, a collaborative research environment with advanced cohort building, visualization, interactive analysis, batch workflow, and governance tooling.\n\nThe platform is built on infrastructure from multiple FedRAMP-authorized cloud providers and supports HIPAA compliance, role-based access controls, audit logging, and data use agreement enforcement.", "fedramp_msg": "", "sales_email": "dpvoros@verily.com", "security_email": "verily-fedramp@verily.com", "website": "https://www.verily.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Data Management", "Development Tools", "Health & Wellness", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2425035681", "name": "Verint", "cloud_service_provider": "Verint", "cloud_service_offering": "Verint Self-Service for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Verint%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-11-26T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2024-11-26T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Verint Self Service for Government (VSSG) is a portfolio of cloud solutions that enables contact centers to elevate CX and deliver AI outcomes on both voice and digital channels. VSSG integrates with all major carriers and telephony systems. VSSG includes the following applications, each of which may be purchased separately:\r\n\r\n-Verint Intelligent Virtual Assistant (IVA) provides constituents with consistent, personalized, and secure AI-driven conversations that improve self-service containment and enhance customer experience. Working across voice and digital channels – yet managed in a single, easy-to-use, collaborative design interface – Verint IVA is a vital component of an effective contact center and customer service strategy. Verint IVA is offered in multiple languages and contains pre-built industry specific NLU models to increase self-service containment. \r\n\r\n-Verint IVR provides a dynamic, efficient self-service experience on both speech and touchtone modalities, and has achieved automation rates exceeding 90% for government service providers for over two decades. \r\n\r\n-Verint Call Risk Scoring detects fraudulent behavior in the IVR long before a fraud attack takes place, or a fraudster can attempt to socially engineer an agent. It also improves the experience for legitimate callers by lowering average handle time.", "fedramp_msg": "N/A", "sales_email": "publicsectorteam@verint.com", "security_email": "Security-Fed@verint.com", "website": "https://www.verint.com/customer-self-service/", "uei": "LUBSP8AQS2E7", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Contact Center", "Customer Relations Management (CRM)", "Customer Service", "Cybersecurity & Risk Management", "Development Tools" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1804557312", "name": "Veritone, Inc.", "cloud_service_provider": "Veritone, Inc.", "cloud_service_offering": "Veritone Intelligent Digital Evidence Management System (iDEMS) for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Veritone%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-06-06T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-12-20T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-03-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-06-06T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-12-20T20:00:00.000Z", "cert_date": "2019-03-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-03-14T20:00:00.000Z", "annual_assessment": "2011-05-04T04:00:00.000Z", "independent_assessor": "Prescient Security, LLC.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Justice", "Pension Benefit Guaranty Corporation" ], "agency_reuse": [ "" ], "service_description": "Veritone Illuminate\r\n\r\nVeritone Illuminate is part of the Veritone iDEMS suite. Veritone Illuminate minimizes discovery spend and time for legal teams by transcribing, searching and analyzing audio, video and text-based evidence early in a case to quickly identify, cull-down, and focus on relevant data only. Veritone Illuminate enables law enforcement investigative teams to cost-effectively search, analyze, and explore large amounts of audio, video and text-based evidence.\r\n\r\nAccelerate early case assessment efforts by automatically making structured and unstructured (audio, video) evidence data searchable by keywords, faces, objects, and more. Cull down evidence data to focus your eDiscovery on relevant content only.\r\nReveal front-end insights that might not have been uncovered in subsequent search efforts with cutting-edge conceptual and structured text analytics supporting text-based files, audio and video.\r\nQuickly transcribe audio and video recordings. All transcripts can be downloaded and opened with any word processing application such as Microsoft Word.\r\nMinimize storage costs by culling and analyzing large volumes of evidentiary media at scale. Reduce translation costs by leveraging automated machine-based capabilities supporting 70+ languages and dialects.\r\nFacilitate downstream review via one-click export into your eDiscovery platform of choice.\r\n\r\nVeritone Redact\r\n\r\nVeritone Redact is part of the Veritone iDEMS suite, and empowers judicial and law enforcement agencies to swiftly redact sensitive, personally identifiable or compromising information from audio and video evidence, and share that evidence within existing workflows. With its AI-powered, all-in-one approach, Redact transforms the way agencies comply with public information disclosure requirements by streamlining digital evidence redaction workflows, and in turn, increasing productivity of public safety personnel.\r\nVeritone Redact is an equipment-agnostic solution enabling users to simply upload audio and video evidence from a local computer or cloud repository. Packaged as a complete solution, Veritone Redact empowers agency teams to manage their digital evidence redaction workflow in one place with the ability to tag the status of evidence redactions, as well as export fully redacted video and audio files including audit logs detailing edits made to evidence by individual users to support chain of custody requirements.\r\nThe solution can be integrated with frequently-used hardware providers and is deployable in either commercial cloud or secure government cloud environments that are configured to meet customers Criminal Justice Information Services (CJIS) security requirements.\r\n\r\nVeritone Track\r\n\r\nVeritone Track is part of the Veritone iDEMS suite. Veritone Track is a digital forensics tool for law enforcement and public safety agencies. It analyzes videos from separate sources to track persons of interest without using personally identifiable information (PII). It uses re-identification AI technology to detect people and vehicles and track where they appear across other video footage to accelerate video evidence analysis. \r\n\r\nInundated with mountains of video evidence, agencies can drastically reduce the number of hours spent reviewing footage to build a timeline of events and a comprehensive narrative around an event or individual. The impact for DOD customers will be large-scale efficiency improvements in investigation processes, evidence review, and significant cost savings.\r\n\r\n\r\nVeritone aiWARE Operating System\r\n\r\naiWARE™ for Government is an operating system for artificial intelligence (AI) that turns both private and public media into actionable intelligence. This transformation from data to understanding is achieved through the organized interrogation of content via a robust set of artificial intelligence engines and powerful applications acting in concert.\r\n\r\nA continuously-evolving environment of advanced applications, core services, developer tools, and cognitive computing - aiWARE offers potent content ingestion, indexing, search, correlation, analytics, sharing, and collaboration capabilities.\r\n\r\naiWARE affords unprecedented scalability and computational analysis in a SaaS delivery model. It makes advanced artificial intelligence truly accessible, understandable and beneficial to users of all technical skill levels for simplified organization and analysis of the escalating volumes of audio and video media as well as structured content. The aiWARE ecosystem of best-of-breed cognitive engines in a single platform eliminates the need for agencies and mission owners to select one vendor from the landscape of thousands of engines, which effectively future-proofs technology choices, and ensures timely and common access to the latest AI advances.\r\n\r\n\r\nVeritone Automate Studio\r\n\r\nVeritone Automate Studio is a low-code / no-code automation solution within Veritone’s aiWARE Enterprise AI platform, Automate Studio helps you to easily deploy AI workflows quickly and efficiently, cutting down your development efforts from months to days to even hours. From creating a workflow to extracting data trapped in a disparate data source to applying different AI models to a particular dataset, Automate Studio helps your development team meet those long manual coding processes in a quick and an efficient manner.\r\nThe impact for DOD customers is gaining the ability to easily create and deploy AI-based workflows to ingest, index, extract, and export content, transforming that content into actionable intelligence and making that intelligence available to bespoke & legacy applications.\r\n\r\nVeritone Integrations \r\n\r\nVeritone’s iDEMS currently ingests and supports data from the following platforms and tools: \r\n\r\n- Freedom Of Information Act (“FOIA”) providers such as Granicus and Opexus;\r\n- Body & dash camera companies: Axon’s Evidence.com, Motorola Solutions, Getac, Reveal, LensLock, 10-8 Video, PatrolEyes, Safe Fleet, WOLFCOM, VeriPic, i-PRO and Trusted Technology Solutions\r\n- Device extraction tools: Cellebrite and Graykey (Axiom)\r\n- Home security systems: Ring, Arlo and SimpliSafe\r\n- Drone manufacturers: DJI, Skydio and BRINC\r\n- Video management systems: Milestone and Qognify\r\n- Investigations and forensics providers: Nuix Neo Investigations and Exterro Digital Forensics Suite\r\n- Gunfire detection systems: SoundThinking, Inc.\r\n- Gun crime intelligence: EvidenceIQ’s BallisticIQ\r\n- License plate readers: Flock Safety\r\n- Secure data link protocol providers: Link 16\r\n- e-discovery platforms: Exterro e-Discovery Suite; Relativity and Nuix Discover\r\n- Hyperscaler’s cloud storage platforms: iAWS S3; Azure Storage, Google Storage and IBM", "fedramp_msg": "N/A", "sales_email": "fedramp-sales@veritone.com", "security_email": "fedramp-security@veritone.com", "website": "https://www.veritone.com/industries/government/", "uei": "", "small_business": true, "business_categories": [ "Analytics", "Content Management System (CMS)", "Data Management", "Education & Training", "Law Enforcement", "Legal & Policy", "Marketing & Sales", "Media", "Operations Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2416859101", "name": "Verkada Inc", "cloud_service_provider": "Verkada Inc", "cloud_service_offering": "Verkada Command Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Verkada%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-07-02T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-07-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2026-04-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2026-05-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": "2024-07-02T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-07-24T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2026-04-09T20:00:00.000Z", "cert_date": "2026-05-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-05-12T20:00:00.000Z", "annual_assessment": "2011-04-08T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy", "Department of Veterans Affairs", "Department of the Interior" ], "agency_reuse": [ "" ], "service_description": "The Verkada Command Platform is Verkada’s government-grade offering designed to help government organizations and their partners take a proactive, simple, and scalable approach to physical security, alongside numerous security enhancements that are critical for certain government users.\n\nThe system consists of the following key features: \n* Command in AWS GovCloud \n* Verkada Command, Pass, and Guest Mobile Applications\n* Cellular Gateway\n* FIPS-validated Devices including Video Security, Physical Access Control, Air Quality Sensors, Guest Management, and Command Connector", "fedramp_msg": "N/A", "sales_email": "government@verkada.com", "security_email": "government@verkada.com", "website": "https://verkada.com/government", "uei": "UFN8CLHC7NP3", "small_business": false, "business_categories": [ "Analytics", "Construction", "Customer Service", "Cybersecurity & Risk Management", "Education & Training", "Fleet Management", "Governance, Risk, and Compliance (GRC)", "Health & Wellness", "Law Enforcement", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2534547429", "name": "Versa Networks, Inc.", "cloud_service_provider": "Versa Networks, Inc.", "cloud_service_offering": "Versa Unified SASE for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Versa%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-24T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2025-09-24T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Versa Unified SASE for Government includes the following capabilities:\r\n- Versa Secure SD-WAN\r\n- Versa Secure Private Access / Zero-Trust Network Access (ZTNA) / Security Services Edge (SSE)\r\n- Versa Secure Internet Access / Next-Gen Firewall as a Service (NG-FWaaS), Next-Gen Secure Web Gateway (NG-SWG)\r\n- Versa Secure Fabric / Secure Private & Internet Access (combines ZTNA and NG-SWG)\r\n- Inline Cloud Access Security Broker (CASB)\r\n- Network Data Loss Prevention (DLP)\r\n- Digital Experience Monitoring (DEM)\r\n- Hybrid management & orchestration of both cloud-delivered and on-premise Versa Operating System (VOS) gateways\r\n- Shared or dedicated private instances\r\n\r\nVersa Unified SASE for Government is hosted within the AWS GovCloud environment. To support high availability, geographic redundancy, and secure isolation, the architecture leverages multiple availability zones (AZs) and virtual private clouds (VPCs). These configurations ensure separation between customer environments and the Versa Networks, Inc. (Versa)'s management infrastructure.\r\n\r\nThe Versa management infrastructure is hosted on Amazon Elastic Compute Cloud (Amazon EC2) instances with all associated components, including customer VPCs and instances, which are regularly backed up in AWS. This ensures continuity of operations and recoverability in the event of a disruption.\r\n\r\nServices within the system boundary are organized into three logical tiers: Access Tier 1 (SMX Elevate Intelligent Automation Platform (IAP), Tier 2 (Versa), and Tier 3 (Customer). Each tier is logically isolated using the Amazon VPC service to maintain strong separation of duties, security boundaries, and operational control.", "fedramp_msg": "", "sales_email": "fedramp-sales@versa-networks.com", "security_email": "fedramp-support@versa-networks.com", "website": "https://www.versa-networks.com/", "uei": "CFMAAA6AULN3", "small_business": false, "business_categories": [ "Analytics", "Communication", "Content Management System (CMS)", "Cybersecurity & Risk Management", "Data Management", "Mobile Device Management (MDM)", "Network Management", "System Administration", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2501644859", "name": "Vibrent Health", "cloud_service_provider": "Vibrent Health", "cloud_service_offering": "Digital Health Research Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Vibrent%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-12-18T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-04-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-06-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-12-18T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-04-01T20:00:00.000Z", "cert_date": "2025-06-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Institute on Deafness and Other Communication Disorders", "fedramp_auth": "2025-06-10T20:00:00.000Z", "annual_assessment": "2011-04-01T04:00:00.000Z", "independent_assessor": "Kompleye", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "National Institutes of Health" ], "agency_reuse": [ "" ], "service_description": "Vibrent Health provides a SaaS Platform that is used by federal and commercial B2B customers to educate, recruit, and engage consumers in a longitudinal, long-term effort to transform the understanding of factors contributing to individual health and disease. The educational component is provided through the Content Management System website for interested prospects to join the program. Prospects are routed to the Participant Portal when the program is publicly marketed. The content management system (CMS) was chosen to enable content creators and managers throughout the program to easily create and update content for sites designated for each customer. Use cases for DHRP include prevention, control, study, and management of lifestyle and diseases.\nDHRP can also be used to develop applications and websites for volunteers to enroll in the program, provide data, and receive updates related to the well-being program. The platform also supports ongoing testing and upgrades to improve the user experience, implements innovative participant tools, and ensures the security of all participant-facing systems.", "fedramp_msg": "N/A", "sales_email": "sales@vibrenthealth.com", "security_email": "security@vibrenthealth.com", "website": "https://researchcloud.vibrenthealth.com/", "uei": "WUWGNMBAHKG2", "small_business": true, "business_categories": [ "Content Management System (CMS)", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "F1605037894", "name": "Virtru", "cloud_service_provider": "Virtru", "cloud_service_offering": "Virtru Data Security Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Virtru%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-12-14T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2023-05-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-12-14T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2023-05-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-05-10T20:00:00.000Z", "annual_assessment": "2011-05-05T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Centers for Disease Control and Prevention" ], "agency_reuse": [ "" ], "service_description": "The Virtru Data Protection Platform is a FedRAMP-Authorized (MODERATE) SaaS application that provides multiple secure communications services, such as email and file transfer, that are E2E-encrypted and can be policy-controlled by the sender, along with tools that site administrators can use for management tasks and platform analytics.", "fedramp_msg": "", "sales_email": "fedramp@virtru.com", "security_email": "fedramp@virtru.com", "website": "https://virtru.com/fedramp", "uei": "", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Cybersecurity & Risk Management", "Law Enforcement", "Legal & Policy", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2620739750", "name": "VisibleThread", "cloud_service_provider": "VisibleThread", "cloud_service_offering": "VisibleThread", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Visiblethread%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-08T22:13:58.248Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-07-07T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "VisibleThread is a Software-as-a-Service (SaaS) application that provides automated document and language analysis for United States government contracting teams across the opportunity, capture, proposal, and contract phases of the acquisition lifecycle.\n\nThe service combines deterministic text analysis and pattern matching with generative AI functions to search, extract, draft, score, and compare document content. Analytical outputs reference the source text from which they are derived, providing traceability from each result back to the originating document.\n\nFunctional capabilities include opportunity search and bid or no-bid scoring, competitive and technical alignment analysis, compliance matrix generation and document comparison, acronym and readability analysis, terminology and tone consistency checks, AI-assisted drafting that references prior submitted content and past performance material, and contract risk and redline analysis.\n\nWork within the service is organized into Workspaces. A Workspace is a logical container that partitions a team's content and configuration, allowing an organization to separate work by line of business, program, customer, or security boundary. Each Workspace maintains its own independent set of:\n\n- Collections of curated reference content\n- Prompt Library\n- Search Dictionaries and Watchword Lists\n- Contracts and reference contract sets\n- Sales, capture, and proposal lifecycle stages\n\nAccess to each Workspace is controlled independently, so that content and configuration in one Workspace are not exposed to users of another. The service integrates with Microsoft SharePoint, allowing documents to be synchronized from customer-managed SharePoint locations into a Workspace's Collections for analysis.", "fedramp_msg": "", "sales_email": "info@visiblethread.com", "security_email": "security@visiblethread.com", "website": "https://www.visiblethread.com/", "uei": "MJWYNX1KNQW8", "small_business": false, "business_categories": [ "Analytics", "Artificial Intelligence (AI)", "Collaboration", "Content Management System (CMS)", "Data Management", "Governance, Risk, and Compliance (GRC)", "Legal & Policy", "Marketing & Sales" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2626250438", "name": "Visionlink, Inc.", "cloud_service_provider": "Visionlink, Inc.", "cloud_service_offering": "Visionlink COS2", "logo": "", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-05T21:36:45.461Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-08-03T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Visionlink CommunityOS® (COS2), the Community Operating System by Visionlink, is a platform that facilitates collaboration. It allows 2-1-1 centers to share important information with homeless shelters, state governments to coordinate with local nonprofits, and emergency disaster relief agencies to connect those in need with nonprofit resources.", "fedramp_msg": "", "sales_email": "zimmerman@visionlink.org", "security_email": "security@visionlink.org", "website": "https://www.visionlink.org/", "uei": "", "small_business": true, "business_categories": [ "Collaboration", "Communication" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2312052740", "name": "VLogic Systems, Inc.", "cloud_service_provider": "VLogic Systems, Inc.", "cloud_service_offering": "VLogicFM", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/VLogic%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-05-20T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-05-20T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2024-06-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-05-20T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-05-20T20:00:00.000Z", "cert_date": "2024-06-10T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2024-06-10T20:00:00.000Z", "annual_assessment": "2011-05-20T04:00:00.000Z", "independent_assessor": "Emagine IT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "The VLogicFM® system is designed to provide users with real-time information about facilities that are managed within the system. \r\n\r\nSystem Function or Purpose\r\nThe VLogicFM system provides users with an overview of facilities usage as well as output data from sensors installed within the various facilities (e.g., motion, temperature, and humidity sensors). The VLogicFM system achieves this goal through the use of multiple modules that end-users can access via the VLogicFM Graphic User Interface (GUI). VLogicFM is composed of the following modules.\r\n\r\nAdministration Module\r\nThe Administration module provides a set of tools and utilities that allow administrators to manage user accounts and credentials, set up locations properties such as Sites, Buildings and Floors, and manage overall Access Control. Reports of background data and a Logbook of the activities in all modules by all users are also included in the Administration module. This module is accessible only by Administrators.\r\n\r\nAs-Builts Module\r\nThe VLogicFM As Built module provides a secure cloud-based repository of master as-builts CAD drawings, organized by site, building, floor and discipline. It facilitates sharing of drawings with professionals like engineers, construction managers, project managers etc. Stakeholders with access privileges can collaborate my notating ideas and comments right on the drawings for later discussion and decision-making. The As-Builts module also provides for drawings version control management, to keep track of all drawing iterations, and maintain an archive of all past versions.\r\n\r\nAssets Module\r\nThe VLogicFM Assets module provides a repository to store an inventory of facility assets. In addition, this module maps these assets to their location on facility floor plan drawings. This allows the user to not only list specific assets but also mark asset locations right on the CAD floor plan drawings—rapid identification of an asset AND its floor plan location simultaneously. The Assets module lets you add asset attributes, documentation, and attach asset pictures. Finally, you can also conduct asset audits using the companion VL Audit Android/iOS app for scanning asset and room bar/QR codes.\r\n\r\nCapital Asset Inventory (CAI) Module\r\nEach VA Medical Center is obligated to periodically submit a Capital Asset Inventory (CAI) report to its VISN office and ultimately to VA Central Office. Part of this VA report includes over 90 specific facility-related CAI space drivers that must be assigned to every space in the facility. The VLogicFM CAI module was custom-made specifically for the VA and includes all of these mandatory CAI space drivers. Users can assign these CAI space drivers to every space in the facility. This allows users to leverage VLogicFM to rapidly generate facility-related CAI reports for use in their periodic CAI submissions. What used to take weeks of manual effort can now be done in minutes.\r\n\r\nEmployee Module\r\nThe Employee Module manages assignments of employee lists to specific spaces on the CAD floor plan drawings by role/title or name. This module allows a facility to show how different organizations are stacked in the facility and also provides tools for moving employee room assignments across the facility.\r\n\r\nFire and Life Safety Module\r\nThe Fire and Life Safety Module facilitate organized documentation of the Fire Protection system linking riser diagrams, floor plan drawings and any other available documents. Connectivity information and other details required for maintenance of the system can be attached to the components and fixtures, which can be viewed in the context of the floor plan drawing. Datasheets, photographs, notes, etc. can be attached to any component of the system. Locating components like Fire Alarm Control Panel, Smoke Detector, Pressure Gauge, etc. can be done through simple search and report options.\r\n\r\nPlan Room Module\r\nThe Plan Room is a virtual library for storing digital facility drawings and related files. The module supports up to 70+ file formats. Customer administrators can set access permissions at the user level. Users can search the documents/drawings using keyword and advanced search options and download the documents for which they have access permissions.\r\n\r\nReal Property Module\r\nThe Real Property Module is intended for Tenants, Landlords and Brokers. It enables Facility Managers to keep track of their leased spaces and manage their leases effectively. This module lets users manage lease details such as Lease Type, Lease Property Type, Lease Category, Execution Date, Commencement Date, Expiry Date, Landlord/Tenant name, Lease Area and any other information that needs to be associated with the lease.\r\n\r\nScheduling Module\r\nThe Scheduling module is a robust room and desk booking/reservation system that enables everything from conference room reservations to hot desking bookings for hybrid work environments. Users can search for rooms they want to schedule by capacity, location, and even what amenities are provided in the room (AV equipment, white board, etc.). A check-in system is also deployed to mitigate against users overbooking spaces.\r\n\r\nSpace Module\r\nThe Space module is at the core of VLogicFM’s space management capabilities. The module pairs a powerful cloud-based MS SQL database with accurate CAD drawings, also stored on the same cloud repository. The combination of these two resources gives users the power to not only locate lists of rooms and room attributes, but also run distribution reports that colorize different rooms by Service Line / Department or other attributes. The Space module also provides the user with a range of reporting options to gauge trends, usable and chargeable areas and cost per square foot.\r\n\r\nTracking Module\r\nThe Tracking module uses IoT-based sensors installed in the facility to render objective occupancy data in real time. This module is currently used by VA users to assess occupancy trends for use cases such as space planning and load balancing / utilization of patient exam rooms between different service lines, clinics and sub-clinics.\r\n\r\nUtilities Module\r\nThe Utilities Module facilitates organized documentation of the Utilities Systems linking riser diagrams, floor plan drawings and any other available documents. Connectivity information and other details required for maintenance of the utility system can be linked to the components and fixtures. This allows users to display how parts of these systems are connected to one another in the context of the floor plan drawing. Data sheets, photographs, notes, etc. can be attached to any component of the system to facilitate easy maintenance. Locating components like Flow Control Valve, Smoke Detector, Pressure Gauge, etc. can be done through simple search. Users see lists of components next to these same components blinking on the CAD floor plan drawings.\r\n\r\nWork Order Module\r\nThe Work Order module can manage scheduled preventive maintenance activities as well as ad-hoc work request-based service activities. Work orders are generated based on previously defined PM schedules, or other service requests from users. Work orders contain information about a maintenance activity, such as where and how it is to be done, who is supposed to do it, and the supplies needed to complete the task. They keep track of the maintenance activities performed, time taken and cost information that is used to generate reports for planning and analysis.", "fedramp_msg": "", "sales_email": "info@vlogicsystems.com", "security_email": "fedramp@vlogicsystems.com", "website": "https://www.vlogicsystems.com/", "uei": "G3NBF8HLLAK9", "small_business": true, "business_categories": [ "Analytics", "Collaboration", "Content Management System (CMS)", "Data Management", "Human Resources", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2619254906", "name": "Vulcan Technologies", "cloud_service_provider": "Vulcan Technologies", "cloud_service_offering": "VulcanGov", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Vulcan%20Logo.png", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-06-10T22:13:00.787Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-06-09T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Ignyte Platform Inc.", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "VulcanGov is delivered as a SaaS offering using a multi-tenant government-only community cloud computing environment hosted on AWS GovCloud (US). It is available to federal, state, and local governments, as well as to government contractors, research institutions, and commercially. Vulcan Technologies provides a unified legal research and regulatory intelligence platform. The platform is built on a containerized microservices architecture running on AWS ECS Fargate with Aurora PostgreSQL Serverless v2 databases, S3 object storage, and ElastiCache Redis caching. All federal data is processed, stored, and transmitted exclusively within the AWS GovCloud us-gov-east-1 region, with failover capability to us-gov-west-1. The platform employs FIPS 140-2-validated cryptographic modules for all data at rest (AWS KMS AES-256) and for data in transit (TLS 1.2/1.3). Identity and access management is provided through Okta federated SSO with MFA enforcement. Security monitoring is performed using Datadog as the centralized SIEM, Wiz for vulnerability management, and native AWS security services, including GuardDuty, Security Hub, AWS Inspector v2, CloudTrail, and AWS Config.", "fedramp_msg": "", "sales_email": "sales@vulcan.ai", "security_email": "security@vulcan.ai", "website": "https://vulcan.ai/FedRAMP", "uei": "K6R1PJDRE6P8", "small_business": true, "business_categories": [ "Artificial Intelligence (AI)", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2433985791XL", "name": "Vyond", "cloud_service_provider": "Vyond", "cloud_service_offering": "Vyond for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Vyond%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-25T04:00:00.000Z", "category": "Status Change", "description": "Status set to FedRAMP In Process" }, { "date": "2025-11-27T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Program Review to FedRAMP In Process" }, { "date": "2025-12-05T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Final Program Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": "2025-09-25T20:00:00.000Z", "ip_prog_date2": "2025-11-27T20:00:00.000Z", "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2025-12-05T20:00:00.000Z", "cert_path": "Program", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-12-05T20:00:00.000Z", "annual_assessment": "2011-12-12T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Federal Risk and Authorization Management Program" ], "agency_reuse": [ "" ], "service_description": "Vyond is the only all-in-one video creation platform built for business and government organizations. With a focus on privacy and security, simplicity of use, and powerful video creation, Vyond for Government grants federal and public sector agencies access to our flagship platform, enabling transformation of critical information into engaging videos for employees, partners, and constituents - effectively and at scale.", "fedramp_msg": "", "sales_email": "support@vyond-fedramp.com", "security_email": "security@vyond-fedramp.com", "website": "https://app.vyond-fedramp.com/", "uei": "MFJXHHLEKAR1", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Design & Multimedia", "Education & Training", "Human Resources", "Marketing & Sales", "Media" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2433985791", "name": "Vyond", "cloud_service_provider": "Vyond", "cloud_service_offering": "Vyond for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Vyond%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-11-22T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-06-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-06-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-11-22T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-06-10T20:00:00.000Z", "cert_date": "2025-06-30T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-06-30T20:00:00.000Z", "annual_assessment": "2011-05-27T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs", "Department of the Treasury" ], "agency_reuse": [ "" ], "service_description": "Vyond is the only all-in-one video creation platform built for business and government organizations. With a focus on privacy and security, simplicity of use, and powerful video creation, Vyond for Government grants federal and public sector agencies access to our flagship platform, enabling transformation of critical information into engaging videos for employees, partners, and constituents - effectively and at scale.", "fedramp_msg": "N/A", "sales_email": "support@vyond-fedramp.com", "security_email": "security@vyond-fedramp.com", "website": "https://app.vyond-fedramp.com/", "uei": "MFJXHHLEKAR1", "small_business": true, "business_categories": [ "Collaboration", "Communication", "Design & Multimedia", "Education & Training", "Human Resources", "Marketing & Sales", "Media" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1935661915", "name": "WalkMe, Inc", "cloud_service_provider": "WalkMe, Inc", "cloud_service_offering": "WalkMe DAP", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/WalkMe%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-09-11T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2025-10-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": "2024-09-11T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2025-10-02T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "WalkMe maximizes and accelerates the impact of your digital transformation strategy by driving user adoption of your digital assets. Leverage WalkMe’s Digital Adoption Platform to constantly identify gaps and problem areas, and drive users to success, codelessly, and without changes to your underlying platforms.The WalkMe Digital Adoption Platform (DAP) system adapts software and websites to meet the needs of employees, customers & citizens. The WalkMe DAP system creates a consistent user experience, streamlining productivity and engagement while reducing costs. The WalkMe FedRAMP offering is specific to federal customers and is built on a dedicated government environment.", "fedramp_msg": "N/A", "sales_email": "daniel.ch@walkme.com", "security_email": "security@walkme.com", "website": "https://www.walkme.com/", "uei": "G129UVCADTP3", "small_business": false, "business_categories": [ "Customer Relations Management (CRM)", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Education & Training", "Finance", "Fleet Management", "Grant Management", "Human Resources", "Travel Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2621733550", "name": "Wallarm, Inc.", "cloud_service_provider": "Wallarm, Inc.", "cloud_service_offering": "Wallarm Federal Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Wallarm%20Logo.png", "status": "Unknown", "phase": "Unknown", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-05-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Legacy FedRAMP Ready" }, { "date": "2026-05-13T22:12:54.450Z", "category": "Status Change", "description": "Status set to Unknown" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-05-13T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The Wallarm Federal Cloud (WFC) is a Software as a Service (SaaS) application programming interface (API) security platform that provides real-time traffic inspection and Web Application Firewall (WAF) capabilities for federal agencies. It is deployed in a single-tenant, Government-Only Cloud architecture on Google Cloud Platform (GCP).\n\nFunctionality and Use Case:\nThe system is designed to analyze incoming network traffic, mitigate malicious requests, and upload security metrics. The Wallarm Federal Cloud component processes this filtering node data, compiles custom security rules, builds API structure models, and provides the Wallarm Console user interface (UI) for configuration and security event investigation.1\n\nType of Federal Data:\nThe system is categorized at the Moderate security impact level. The federal data and information stored, processed, or transmitted includes:\n- Full HTTP/HTTPS request and response bodies and headers for WAF analysis, which may contain customer API data.\n- Security events, WAF rules, user profile and session data, and audit logs.\nThe system does not process, store, or transmit information requiring special protective measures beyond the standard FedRAMP Moderate baseline, such as Sensitive Compartmented Information (SCI).", "fedramp_msg": "", "sales_email": "fedramp-support@wallarm.com", "security_email": "fedramp-support@wallarm.com", "website": "https://wallarm.com/", "uei": "", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1825232355A", "name": "WellHive Holdings, LLC", "cloud_service_provider": "WellHive Holdings, LLC", "cloud_service_offering": "WellHive", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/WellHive%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-05-08T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2026-02-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-05-08T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2026-02-04T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2026-02-04T20:00:00.000Z", "annual_assessment": "2011-10-22T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Department of Veterans Affairs" ], "agency_reuse": [ "" ], "service_description": "WellHive is a SaaS solution built to help enterprise healthcare systems navigate their patients’ care across federal and commercial boundaries. \n\nWellHive’s Care Navigation capability connects and unifies care management activities across various systems and organizations through integrations with Electronic Health Records (EHRs), practice management systems, and provider networks. \n\nWellHive’s Analytics capability enables customers to bring their own data and configure analytical dashboards and reporting with that data.\n\nWellHive is hosted on AWS GovCloud and utilizes AWS services to provide both the availability and scalability required to meet our customer’s needs.", "fedramp_msg": "N/A", "sales_email": "simplify@wellhive.com", "security_email": "fedramp@wellhive.com", "website": "https://www.wellhive.com/", "uei": "Q6CUNK9QHSC8", "small_business": false, "business_categories": [ "Analytics", "Data Management", "Health & Wellness" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1924344515", "name": "Wellspring Worldwide, Inc.", "cloud_service_provider": "Wellspring Worldwide, Inc.", "cloud_service_offering": "Wellspring Tech Transfer and IP Management Suite (WTIMS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Wellspring%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-03-04T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-03-04T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-02-14T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 6, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-03-04T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-03-04T20:00:00.000Z", "cert_date": "2022-02-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-02-14T20:00:00.000Z", "annual_assessment": "2011-03-04T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "DOE Office of the General Counsel", "Department of Energy", "Department of Veterans Affairs", "National Nuclear Security Administration", "National Oceanic and Atmospheric Administration", "Savannah River National Lab" ], "agency_reuse": [ "" ], "service_description": "The Wellspring Tech Transfer and IP Management Suite is delivered as a SaaS offering using a multi-tenant Government Community cloud computing environment. It is available to federal, state, local, and tribal governments, as well as research institutions, federal contractors, government contractors.\n\nWellspring Sophia is a browser based application used to manage all of the initiatives and activities required in the technology transfer field. Sophia provides over 30 modules, plug-ins, and integrations that include IP management, contract management, reporting, disclosure and project submissions, and more. With more than 15 years in the tech transfer industry and more than 250 institutions using our solutions, Wellspring provides the most complete technology transfer management software available with unparalleled functionality, flexibility, and support staff to professionals in the technology transfer field worldwide.\n\nEvolve is Wellspring's next-generation software platform that streamlines technology transfer and IP management from invention disclosure through licensing and commercialization, with intuitive workflows, and seamless data integrations. The Evolve application runs inside Salesforce Gov Cloud and relies on Sophia hosted services for capabilities that extend beyond native Salesforce functionality along with functionality to migrate Sophia users to evolve to leverage more modernized components.\n\nAll four components are hosted within the FedRAMP environment and communicate with Salesforce Gov Cloud over HTTPS and provided the following functionality:\n\n- Evolve DocGen: Generates PDFs from Salesforce record data and document templates\n- Evolve DocSign: Manages electronic signature workflows with a signer-facing hosted UI\n- Evolve iEdison API: Pushes invention disclosure, patent, and utilization data from Salesforce to the NIST iEdison API\n- Evolve Migration Worker: Prefect-based worker that authenticates directly to Salesforce Gov Cloud and performs bulk data loads, file operations, and schema changes during the Sophia-to-Evolve migration.", "fedramp_msg": "N/A", "sales_email": "rich.barndt@wellspring.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://www.wellspring.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2032042635", "name": "WidePoint Integrated Solutions Corp.", "cloud_service_provider": "WidePoint Integrated Solutions Corp.", "cloud_service_offering": "Intelligent Technology Management System (ITMS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/WidePoint%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-11-15T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2022-11-15T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2023-09-08T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-02-19T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": "2021-11-15T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-11-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2023-09-08T20:00:00.000Z", "cert_date": "2025-02-19T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-02-19T20:00:00.000Z", "annual_assessment": "2011-09-05T04:00:00.000Z", "independent_assessor": "Kratos", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Department of Homeland Security" ], "agency_reuse": [ "" ], "service_description": "ITMS (Intelligent Technology Management System) is Moderate security level Software as a Service (SaaS) providing cloud-based technology lifecycle management functions. ITMS offers a user-friendly, customizable Web portal interface that allows for online configuration, ordering, tracking, auditing, updating of databases, and the ability to view and generate reports. ITMS enables WidePoint to optimize and manage a client’s technology assets, services, contracts, and invoices with transparency and accountability to deliver maximum savings.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@widepoint.com", "website": "https://www.widepoint.com/", "uei": "MKJGBYTR5MM4", "small_business": true, "business_categories": [ "Analytics", "Customer Service", "Data Management", "Fleet Management", "Mobile Device Management (MDM)", "Network Management", "Operations Management", "System Administration" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2401742096", "name": "WillCo Tech", "cloud_service_provider": "WillCo Tech", "cloud_service_offering": "CyberSTAR™", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Cyberstar%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-02-21T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2024-07-30T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-03-12T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 1, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2024-02-21T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2024-07-30T20:00:00.000Z", "cert_date": "2025-03-12T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-03-12T20:00:00.000Z", "annual_assessment": "2011-07-12T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Defense Counterintelligence and Security Agency" ], "agency_reuse": [ "" ], "service_description": "The CyberSTAR™ application includes an online assessment tool to map personnel qualifications to DoD (or agency) designated workforce elements, work roles and proficiency levels plus associated knowledge, skills, abilities and tasks (KSATs), delivering out of the box compliance mapping to DoDD 8570, 8140.03 and NICE/NIST as well as custom frameworks. CyberSTAR™ is purpose built to alleviate the burden and risks of manual processes or home-grown systems, automating repetitive compliance tracking and associated data management. For agencies implementing the platform, expected outcomes include a significant reduction of labor hours, more accurate and timely reporting and analysis, and an increased ability to retain, upskill and recruit qualified talent for the growing national cybersecurity labor force.", "fedramp_msg": "N/A", "sales_email": "sales@willcotech.com", "security_email": "securitycompliance@projecthosts.com", "website": "https://cyberstar.com/", "uei": "", "small_business": true, "business_categories": [ "Collaboration", "Cybersecurity & Risk Management", "Data Management", "Education & Training", "Human Resources", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "CyberSTAR™ SaaS" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2106045767", "name": "WingSwept", "cloud_service_provider": "WingSwept", "cloud_service_offering": "Case Management & Tracking System (CMTS)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/WingSwept%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-04-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-09-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-03-01T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 7, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-04-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-09-24T20:00:00.000Z", "cert_date": "2022-03-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-03-01T20:00:00.000Z", "annual_assessment": "2011-09-24T04:00:00.000Z", "independent_assessor": "Lunarline, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Bureau of Alcohol, Tobacco, Firearms and Explosives", "Council of the Inspectors General on Integrity and Efficiency", "Department of Agriculture", "Department of Education", "Department of Energy", "Environmental Protection Agency", "United States Securities and Exchange Commission" ], "agency_reuse": [ "" ], "service_description": "WingSwept has provided case management solutions to investigators at government agencies for more than a decade. WingSwept converted its Case Management & Tracking System (CMTS) into a Commercial Off-The-Shelf (COTS) service offering in 2010. Built with both security and flexibility in mind, CMTS provides for the secure storage, retrieval, and reporting of case management data for investigative offices at all levels of government. The CMTS design is neither static nor monolithic. Intentionally flexible, CMTS provides government agencies with the ability to establish unique naming conventions, tailor agency-specific workflows, and to support a wide range of other user-preferred configurations. An idle-case tracking function also includes both time and activity-based notifications in order to establish and maintain a seamless agency workflow. \n\nAs an added layer of security, each CMTS customer operates in a secure environment with data separated by customer. Hosted on Amazon Web Services (AWS), CMTS is a web-based, browser-accessible application that requires no device-specific software for implementation. Highly customizable dashboards, combined with specialized labels and entry fields provide investigators with the ability to compile and display comprehensive case metrics in a simplified, user-friendly format. CMTS can display ad-hoc and pre-defined reports in minutes, drastically reducing processing times and increasing staff efficiency. This flexible design allows agencies to tailor workflows in order to match existing processes and to provide for continuity in ongoing investigations. As a result, CMTS may be readily adapted to serve investigative offices of any size. Many of the CMTS customers leverage our optional Online Intake Service (OIS) which allows customers to host or leverage OIS hosted internet facing forms which can collect case intakes to be later securely picked up by the agency CMTS server for potential ingestion as a case.", "fedramp_msg": "N/A", "sales_email": "cmtssales@wingswept.com", "security_email": "fedramp@wingswept.com", "website": "https://securecasemanagement.com/", "uei": "M3RYEADSETP7", "small_business": true, "business_categories": [ "Analytics", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2308034636A", "name": "Wiz, Inc.", "cloud_service_provider": "Wiz, Inc.", "cloud_service_offering": "Wiz for U.S. Government", "logo": "https://fedramp.gov/assets/img/logos/CSP_logos/Wiz%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-09-10T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2025-09-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2025-09-25T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 7, "reuse": 6, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-09-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2025-09-11T20:00:00.000Z", "cert_date": "2025-09-25T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2025-09-25T20:00:00.000Z", "annual_assessment": "2011-09-25T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "Cybersecurity & Infrastructure Security Agency", "Department of Agriculture", "Department of State", "Department of the Navy", "Internal Revenue Service", "Office of Personnel Management", "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "Wiz for U.S. Government\r\n\r\nWiz for U.S. Government (“Wiz for Gov”) is a cloud-native environment and product line that delivers a unified view of risk across a customer’s full cloud environment, from code to production. Wiz for Gov helps public sector agencies meet FedRAMP and FISMA compliance needs by focusing on the issues that matter most. The Wiz for Gov unified product line has three different components to secure your stack:\r\n\r\n\r\nWiz Cloud for Gov\r\n\r\nWiz Cloud focuses on assessing and prioritizing risk by analyzing vulnerabilities, misconfigurations, malware, identities, network paths, data, and AI risks. At its core is the Wiz Security Graph, which maps relationships between cloud resources to find \"toxic combinations\" that represent real risk. This approach automates risk assessments in alignment with OMB A-130's definition of risk as a function of the magnitude of harm and the likelihood of occurrence. It prioritizes these risks and routes them to relevant teams, providing a clear view of the attack path, blast radius, and recommended remediation steps.\r\n\r\n\r\nWiz Code for Gov\r\n\r\nWiz Code extends visibility into the development lifecycle to help enforce secure-by-design practices. By connecting directly to code repositories, Wiz provides full traceability from production issues back to the corresponding source code and owner. Wiz also integrates with CI/CD pipelines to enforce policies during image scanning and Infrastructure as Code (IaC) reviews, helping to identify risks earlier and accelerate time to production readiness. This shared view helps security and development teams collaborate, ensuring accountability and reducing mean time to remediation (MTTR).\r\n\r\n\r\nWiz Defend for Gov\r\n\r\nWiz Defend modernizes cloud threat detection and response by reducing alert fatigue and surfacing the root cause of issues faster. It leverages a cloud native runtime sensor, logs, and threat intelligence to identify malicious activity and enrich detected events with cloud context, providing SOC analysts with the information needed to assess threat impact and blast radius. This enhances active cyber defense across the full environment—including identity, workload runtime, network, data, and control plane components—and helps teams align response actions with the MITRE ATT&CK framework.", "fedramp_msg": "N/A", "sales_email": "fedsales@wiz.io", "security_email": "fedops@wiz.io", "website": "https://www.wiz.io/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Cybersecurity & Risk Management", "Data Management", "Research" ], "service_last_90": [ "" ], "all_others": [ "Defend Ingestion for Government", "Wiz Advanced for Government", "Wiz Code for Government", "Wiz Defend for Government", "Wiz Essential for Government", "Wiz Sensor for Government" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2207643307", "name": "Wolters Kluwer", "cloud_service_provider": "Wolters Kluwer", "cloud_service_offering": "TeamMate FedRAMP", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/WK%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-02-15T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-02-28T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-05-13T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 10, "reuse": 9, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-02-15T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-02-28T20:00:00.000Z", "cert_date": "2022-05-13T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "National Institutes of Health", "fedramp_auth": "2022-05-13T20:00:00.000Z", "annual_assessment": "2011-02-28T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "Argonne National Laboratory", "Department of Education", "Federal Energy Regulatory Commission", "National Institutes of Health", "Railroad Retirement Board", "Savannah River National Lab", "Strategic Petroleum Reserve", "USDA Office of the Inspector General", "United States International Trade Commission" ], "agency_reuse": [ "" ], "service_description": "TeamMate Audit and TeamMate Controls are two integrated solutions that support government agencies in managing audits and internal controls within a secure cloud environment. TeamMate Audit enables end-to-end audit planning, execution, issue tracking, and reporting, while TeamMate Controls supports the documentation, testing, and monitoring of internal controls and remediation activities. Together, they provide a centralized approach to audit and control management, helping agencies improve oversight, consistency, and risk management.", "fedramp_msg": "N/A", "sales_email": "TeamMate-FedRAMP@wolterskluwer.com", "security_email": "Security@teamcloudgov.com", "website": "https://www.wolterskluwer.com/en/solutions/teammate/teammate-us-public-sector", "uei": "", "small_business": false, "business_categories": [ "Accounting", "Analytics", "Finance", "Legal & Policy" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2103344623", "name": "Workday Inc.", "cloud_service_provider": "Workday Inc.", "cloud_service_offering": "Workday Government Cloud (WGC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Workday%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-08-16T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2022-03-16T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to Agency Authorization In Process" }, { "date": "2022-04-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-07-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 4, "ready_status": "Not Active", "ready_date": "2021-08-16T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-03-16T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-04-01T20:00:00.000Z", "cert_date": "2022-07-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-07-11T20:00:00.000Z", "annual_assessment": "2011-04-04T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Department of Energy", "Federal Reserve System", "Fermi National Accelerator Laboratory", "Other Executive Branch Subagency", "Peace Corps" ], "agency_reuse": [ "" ], "service_description": "Workday is a provider of enterprise applications for financial management, human capital management, planning, and analytics. Workday Government Cloud is a multi-tenant cloud-based offering for U.S. federal, state, and local government customers, as well as U.S. government contractors, and Federally Funded Research and Development Centers (FFRDCs). It comprises the following enterprise management cloud applications: Adaptive Planning, Workday Core Financial Management, Projects, Project Billing, Expenses, Procurement, Inventory, Grants Management, Human Capital Management, Cloud Connect for Benefits, Payroll, Global Payroll Connect, Workday Media Cloud , Journeys, Time Tracking, Recruiting, Prism Analytics, Student, Workday Extend, Absence Management, Advanced Compensation Management, Benefits, Succession Planning, Revenue Management, Talent Optimization, Learning, Help, Machine Learning, Accounting Center, People Analytics and Labor Optimization. Also available is Workday Success Plans, a subscription-based success package that provides education, tools, and expertise to help agencies maximize their use of Workday.", "fedramp_msg": "N/A", "sales_email": "FederalSales@workday.com", "security_email": "FedRAMP@workday.com", "website": "https://www.workday.com/", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Finance", "Human Resources" ], "service_last_90": [ "Adaptive Planning" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1726564822", "name": "Workiva", "cloud_service_provider": "Workiva", "cloud_service_offering": "Workiva Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Workiva%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-07-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-03-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-10-09T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 11, "reuse": 10, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-07-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-03-07T20:00:00.000Z", "cert_date": "2019-10-09T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-10-09T20:00:00.000Z", "annual_assessment": "2011-08-25T04:00:00.000Z", "independent_assessor": "Fortreum, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Administration for Children & Families", "Administrative Office of the United States Courts", "Consumer Product Safety Commission", "Department of Agriculture", "Department of Housing and Urban Development", "Department of Justice", "Farm Credit Administration", "Federal Energy Regulatory Commission", "General Services Administration", "National Science Foundation", "Tennessee Valley Authority" ], "agency_reuse": [ "" ], "service_description": "Workiva provides connected reporting and compliance through its intuitive cloud platform that modernizes how people work within thousands of commercial organizations and hundreds of federal, state, and local government agencies.\n\nWorkiva’s platform is built upon a data management engine, offering controlled collaboration, data integration, granular permissions and a full audit trail. Workiva helps mitigate risk, improves productivity and gives users confidence in their data-driven decisions.\nComplex reports made easy— our customers create and connect data and narrative to consolidate and publish financial, performance, and regulatory reports. We provide confidence in the numbers and enable pride in the delivery.\n\nCompliance made simple— streamline documentation, testing, and reporting in a connected environment. Manage risk assessments, evidence requests, issues, and findings with real-time reports and dashboards.\n\nConnect your documents and data at enterprise scale in a collaborative work management platform. Import documents, sync with Excel®, or connect Workiva to a variety of agency information systems. Workiva is built for the way government agencies work.\nTrust your data from beginning to end. Workiva can be used across interdependent agency teams and departments to create a single source of truth for mission-critical processes.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@workiva.com", "website": "https://www.workiva.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2612836790", "name": "Wraithwatch Corporation", "cloud_service_provider": "Wraithwatch Corporation", "cloud_service_offering": "Wraithwatch Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/WW%20Logo2.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-09T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-04-09T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "Wraithwatch is a Software-as-a-Service cybersecurity platform built on an intelligent security data fabric. The platform ingests data from across the customer's security and IT stack — endpoint detection and response, SIEM, identity providers, vulnerability scanners, cloud infrastructure, and more — through agentless, read-only API integrations. No agents are deployed on customer endpoints. Ingested data is normalized through deterministic entity resolution into a continuously updated entity graph that models every device, user, permission, vulnerability, configuration, and relationship in the environment. This unified data fabric eliminates tool-by-tool data silos and provides a persistent, queryable model of the customer's environment that powers all downstream platform capabilities.\n\nContinuous Governance, Risk, and Compliance: Wraithwatch replaces periodic, point-in-time compliance assessments with continuous GRC that recomputes every few minutes and immediately upon auto-detection of environmental changes. The platform mathematically computes every viable attack path based on current topology, configurations, permissions, and verified reachability. When the environment changes — a new CVE, a granted permission, a configuration drift — the platform recomputes risks including second-, third-, and fourth-order cascading effects. Compliance posture, risk exposure, and control effectiveness are maintained as living measurements against the entity graph rather than static snapshots. Agencies can execute neutralization plans directly from Wraithwatch or deploy compensating detections where paths cannot be eliminated.\n\nThreat Hunting: Autonomous reasoning workers explore SIEM indexes and security telemetry, identify anomalies and threat precursors, and surface findings with supporting evidence. Analysts issue natural language queries and the platform translates, hunts, pivots across data sources, and performs cross-index correlation at query runtime without requiring pre-mapped data schemas. Results convert into forward-looking detection rules.\n\nThreat Advisory Correlation: Wraithwatch continuously correlates incoming threat intelligence — including newly published CVEs, active exploitation advisories, novel attack techniques, supply chain compromise reporting, and other non-CVE threat disclosures — against the current state of the entity graph. When a new threat is published, the platform automatically evaluates the customer's environment and produces an \"am I affected\" assessment identifying specific impacted assets, exposure conditions, and recommended mitigations. This analysis incorporates the full environmental context — network reachability, compensating controls, privilege relationships, and configuration state — to determine actual exploitability, not just the presence of a vulnerable component.\n\nControl Plan Generation: Agency personnel describe a desired security outcome, and Wraithwatch evaluates every relevant setting across every integrated tool to generate a control plan. Plans are executable in full, one step at a time, or through phased rollouts with test groups. All actions are auditable with rollback support.\n\nAll adversarial analysis runs against the digital twin. No live exploits touch production infrastructure. The platform operates in read-only mode by default; write-mode actions require explicit customer authorization and human confirmation. Wraithwatch supports cloud-hosted deployment on FedRAMP-authorized infrastructure and fully on-premise deployment for air-gapped and CUI environments.", "fedramp_msg": "", "sales_email": "info@wraithwatch.com", "security_email": "nik@wraithwatch.com", "website": "https://wraithwatch.com/", "uei": "W4QUHXU4S836", "small_business": true, "business_categories": [ "Cybersecurity & Risk Management", "Data Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2618542150", "name": "xAI", "cloud_service_provider": "xAI", "cloud_service_offering": "Grok for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/XAI%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-04-10T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2026-04-10T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "xAI’s Grok Enterprise for Government delivers frontier AI capabilities purpose-built for U.S. federal agencies, now available in a secure, compliant environment. Powered by the most advanced Grok family of models, it combines unmatched reasoning, real-time knowledge integration (including secure enterprise search), multi-agent collaboration, multimodal understanding (text, code, images, and video), massive context windows, and powerful API/agentic workflows.", "fedramp_msg": "", "sales_email": "sales@x.ai", "security_email": "security@x.ai", "website": "https://x.ai/grok/government", "uei": "", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Customer Service", "Cybersecurity & Risk Management", "Data Management", "Design & Multimedia", "Development Tools", "Legal & Policy", "Research" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1730334049", "name": "Xerox Corporation", "cloud_service_provider": "Xerox Corporation", "cloud_service_offering": "Xerox Managed Print Services for US Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Xerox%20Logo2.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-08-14T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2018-04-17T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2018-09-10T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 2, "ready_status": "Not Active", "ready_date": "2017-08-14T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2018-04-17T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2018-09-10T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-09-10T20:00:00.000Z", "annual_assessment": "2011-09-30T04:00:00.000Z", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Federal Communications Commission", "Pretrial Services Agency", "United States Citizenship and Immigration Services" ], "agency_reuse": [ "" ], "service_description": "Xerox Managed Print and Capture Services (MPCS) for US Government is a cloud-based solution developed specifically to help US Federal, State, and Local government agencies manage the print and document capture life cycles within an organization while maximizing productivity, security and reducing waste and risk.\n\nThe Xerox Managed Print Services (MPS) capability is a management solution for both Xerox and Non-Xerox print/imaging devices such as printers, multi-function devices, and copiers. Managed print services focus on the management of print output devices themselves, related supplies, and service requirements. The solution ensures proactive device management resulting in maximum uptime, utilization/optimization, and robust print and security policy management.\n\nXerox Capture Services provide advanced multichannel capture, digitization, and data transformation to help government agencies achieve digital transformation goals. Digitization and imaging services can be provided on-site, near-site or off-site. Digitization can be combined with data transformation, process automation, and electronic document management solutions to ensure optimal speed and productivity. \r\n\r\nXerox Connect for Microsoft OneDrive FedRAMP Authorized and Microsoft 365 FedRAMP Authorized apps are developed specifically to help US Federal, State, and Local government agencies securely connect their Xerox ConnectKey Enabled multi-function devices to the Microsoft Government Community Cloud Environment (GCC). These apps will allow users to choose scan or print workflows, navigate directly to their file or folder, and convert to popular Microsoft Office formats directly from the User Interface of the device.", "fedramp_msg": "This Cloud Service Offering was previously authorized by the Joint Authorization Board (JAB). FedRAMP initially provided continuous monitoring oversight; however, as of 03/06/2025, continuous monitoring will be provided by active agency customers of this system. If you have any questions regarding this statement, please reach out to us at info@fedramp.gov.", "sales_email": "", "security_email": "FedRAMPSecurityInbox@xerox.com", "website": "https://www.xerox.com/en-us/services/government-solutions/insights/fedramp-approved-cloud-mps", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1714261912", "name": "XTec, Incorporated", "cloud_service_provider": "XTec, Incorporated", "cloud_service_offering": "AuthentX Cloud", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/AuthentX%20Cloud%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-04-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-09-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-08-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 2, "reuse": 1, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-04-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-09-24T20:00:00.000Z", "cert_date": "2019-08-02T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2019-08-02T20:00:00.000Z", "annual_assessment": "2011-10-24T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [], "agency_authorizations": [ "National Science Foundation", "United States Agency for Global Media" ], "agency_reuse": [ "" ], "service_description": "The AuthentX Cloud provides end-to-end identity, credential and access management to US Federal agencies, quasi-federal agencies, and private organizations that require interoperable identity authentication services with Federal systems and infrastructure. The primary use of AuthentX in the Federal government is to satisfy Homeland Security Presidential Directive %2312 (HSPD-12), Federal Identity, Credential and Access Management (FICAM) and related policies, mandates and standards from the Office of Management and Budget (OMB), Department of Homeland Security (DHS), and National Institute of Standards and Technology (NIST) Special Publications (SP). Therefore, the AuthentX Cloud solution offered is aligned with federal mandates and high assurance requirements regarding cybersecurity, multi-factor authentication, Federal interoperability, and secure solutions for consolidation of data centers. The AuthentX Cloud consists of COTS hardware, software, and network components assembled and connected in multiple data centers. Hardware includes the XTec AuthentX XaNode appliances, the XTec AuthentX Secure Appliance (ASA), enrollment and issuance peripherals, the XTec XNode and XTec card readers, and Thales SafeNet Hardware Security Modules (HSM's). The software of the AuthentX system is built entirely from source to produce the AuthentX Linux Operating System (OS), customized embedded Microsoft OS, the AuthentX Enrollment Manager application, as well as other software packages.\n\nXTec's AuthentX Cloud also provides Hardware Security Module (HSM) as a Service using Thales Trusted Cyber Technologies' (TCT) flagship Luna T-Series HSM. This cloud-based HSM, known as Luna as a Service, allows customers to generate, store, protect and manage cryptographic keys used to secure sensitive data and critical applications. The Luna T-Series HSM at the core of Luna as a Service is FIPS 140-2, Level 3 certified, and is approved for use in National Security Systems PKI. XTec's AuthentX Cloud Luna as a Service is offered using three (3) models:\n\n- Luna as a Service Dedicated HSM provides customers full cryptographic control of the entire HSM.\n- Luna as a Service Managed HSM provides customers HSM cryptographic capabilities in a scalable, cost-effective model. Administrative tasks such as provisioning, configuring, monitoring, and patching are all performed by U.S.-based Luna as a Service engineers.\n- Luna as a Service Credential System provides customers a cloud service model of Thales TCT's Luna Credential System (LCS). LCS offers multi-factor authentication by maintaining user credentials in a centralized hardware device that is securely accessible through the cloud service by endpoints in a distributed network. LCS is a multi-purpose, secure credential system ideally suited for an environment in which the endpoints, or users cannot use a traditional authentication token.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@xtec.com", "website": "http://www.xtec.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2113557839", "name": "Yello Dba Recsolu Inc", "cloud_service_provider": "Yello Dba Recsolu Inc", "cloud_service_offering": "Yello Government Recruiting Solution", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Yello%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-04-13T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2021-11-03T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-04-11T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 3, "reuse": 5, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2021-04-13T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2021-11-03T20:00:00.000Z", "cert_date": "2022-04-11T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-04-11T20:00:00.000Z", "annual_assessment": "2011-11-03T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2113557839", "csp": "Yello Dba Recsolu Inc", "cso": "Yello Government Recruiting Solution", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Centers for Disease Control and Prevention", "National Labor Relations Board", "United States Securities and Exchange Commission" ], "agency_reuse": [ "22-005-04", "22-013", "22-020" ], "service_description": "Yello is a talent acquisition software designed to simplify and modernize the recruiting and hiring process. Yello’s technology allows federal government customers 1) Efficiently conduct and manage in-person and virtual recruitment events, 2) Customize, organize, and automate robust and diverse talent acquisition pipelines, and 3) Capture key metrics and visualize data analytics on applicants in real-time so agencies can speed up the hiring process and determine return on investment", "fedramp_msg": "N/A", "sales_email": "fedramp@yello.co", "security_email": "fedramp@yello.co", "website": "https://yello.co/government-recruiting/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1821856903", "name": "Zendesk", "cloud_service_provider": "Zendesk", "cloud_service_offering": "Zendesk Customer Support and Help Desk Platform", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Zendesk%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2020-01-30T05:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2020-04-24T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2020-05-14T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 5, "reuse": 185, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2020-01-30T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2020-04-24T20:00:00.000Z", "cert_date": "2020-05-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-05-14T20:00:00.000Z", "annual_assessment": "2011-06-10T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "LI-SaaS", "impact_level_number": "3", "leveraged_systems": [ { "id": "FR2106555313", "csp": "AchieveIt Online, LLC", "cso": "AchieveIt", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2403745080", "csp": "ATOM EVSE", "cso": "Atom Power, Inc - ATOM EVSE", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2031222637", "csp": "Aurigo Software Technologies, Inc.", "cso": "Masterworks Cloud Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1814168113", "csp": "Authentic8, Inc.", "cso": "Silo", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1923743650A", "csp": "Automattic, Inc.", "cso": "WordPress VIP", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2424553196", "csp": "BLINK CHARGING", "cso": "BLINK GOV", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR2009476860A", "csp": "Casepoint LLC", "cso": "Casepoint Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2530025267", "csp": "Caveonix, Inc.", "cso": "Caveonix", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2220549818", "csp": "CirrusMD", "cso": "CirrusMD Virtual Health Chat for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2014656304", "csp": "Civis Analytics, Inc.", "cso": "Civis Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2000863987A", "csp": "Cloudflare", "cso": "Cloudflare for Government - High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2013059515", "csp": "Cofense", "cso": "Cofense PhishMe", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2023864279A", "csp": "Datadog, Inc.", "cso": "Datadog for Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR1932554201", "csp": "Forcepoint", "cso": "ONE – Security Service Edge (SSE) – CASB/DLP/SWG/ZTNA/RBI", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1834348080", "csp": "GDC Integration, Inc.", "cso": "General Support System (GSS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919750997", "csp": "HackerOne", "cso": "HackerOne Continuous Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1831429369", "csp": "HireVue", "cso": "Recruitment Assessments and Video Interviewing", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2122038682", "csp": "iBoss", "cso": "iboss Government Cloud Platform (IGCP)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1718334757", "csp": "ID.me", "cso": "ID.me Identity Gateway", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2201340492", "csp": "KnowBe4, Inc.", "cso": "KnowBe4 Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2218073444", "csp": "Lucid Software, Inc.", "cso": "Lucid GovSuite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2524416446", "csp": "Orbus Software", "cso": "OrbusInfinity Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2432218524", "csp": "Power Settlements Consulting and Software, LLC (PSCS), a subsidiary of Yes Energy, LLC", "cso": "PowerCore™ (PC-GOV)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2313477206", "csp": "Quadient inc.", "cso": "S.M.A.R.T. - Federal Editions", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1605027892", "csp": "QuestionMark", "cso": "Questionmark Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1722838693", "csp": "Rave Mobile Safety", "cso": "Rave Safety Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2425742814", "csp": "San Luis Aviation, Inc.", "cso": "ESChat", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2002367706", "csp": "Somnoware Healthcare Systems", "cso": "Somnoware", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2213722684", "csp": "Spider Strategies", "cso": "Spider Impact for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918740338", "csp": "Sumo Logic", "cso": "Sumo Logic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2134635186", "csp": "Synack", "cso": "On-Demand Security Testing Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2433985791", "csp": "Vyond", "cso": "Vyond for Government", "status": "FedRAMP Certified", "impact_level": "LI-SaaS", "impact_level_number": "3" }, { "id": "FR1924344515", "csp": "Wellspring Worldwide, Inc.", "cso": "Wellspring Tech Transfer and IP Management Suite (WTIMS)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2308034636A", "csp": "Wiz, Inc.", "cso": "Wiz for U.S. Government", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" } ], "agency_authorizations": [ "Department of the Interior", "Federal Communications Commission", "Federal Reserve System", "General Services Administration", "United States Geological Survey" ], "agency_reuse": [ "22-002", "22-002-02", "22-002-04", "22-002-06", "22-002-08", "22-002-11", "22-003", "22-005", "22-005-01", "22-005-03", "22-005-04", "22-005-08", "22-005-09", "22-005-10", "22-007", "22-007-03", "22-007-04", "22-007-07", "22-007-13", "22-007-17", "22-007-19", "22-007-20", "22-007-22", "22-007-25", "22-007-27", "22-007-28", "22-011", "22-011-01", "22-011-02", "22-011-03", "22-011-05", "22-011-06", "22-011-10", "22-012", "22-013", "22-014", "22-014-02", "22-014-05", "22-015", "22-016-01", "22-016-07", "22-016-08", "22-016-47", "22-017-02", "22-019", "22-020", "22-021-01", "22-021-06", "22-021-08", "22-022", "22-022-01", "22-023", "22-025", "22-026", "22-027", "22-027-01", "22-027-03", "22-027-05", "22-027-06", "22-027-07", "22-028", "22-030", "22-031", "22-031-01", "22-032", "22-034", "22-034-03", "22-036", "22-037", "22-040", "22-042", "22-042-02", "22-044", "22-045", "22-051", "22-055-01", "22-058", "22-061", "22-061-01", "22-062", "22-067", "22-068", "22-069", "22-070", "22-074", "22-075", "22-091", "22-094" ], "service_description": "Zendesk is a cloud-based customer service platform, designed for companies that want to build customer relationships that are more meaningful, personal, and productive. Zendesk strives to bring businesses and customers closer together by enabling companies to provide great support and mature with self-service and proactive engagement. It is designed to be easy to use, customize, and scale.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@zendesk.com", "website": "https://www.zendesk.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2618651192", "name": "ZeroEyes Inc", "cloud_service_provider": "ZeroEyes Inc", "cloud_service_offering": "ZEF", "logo": "", "status": "Legacy FedRAMP Ready", "phase": "Legacy FedRAMP Ready", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-05-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": "2026-05-01T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "The ZeroEyes Federal (ZEF) threat detection solution is specifically engineered for federal agencies requiring strict adherence to security and data residency mandates. Utilizing advanced computer vision, the system provides continuous, real-time monitoring to identify visible firearms, including rifles and pistols, proactively alerting personnel before a shot is fired. Hosted within a FedRAMP Moderate Authorized environment", "fedramp_msg": "", "sales_email": "dustinkisling@zeroeyes.com", "security_email": "paul@zeroeyes.com", "website": "https://zeroeyes.com/", "uei": "GFSKJLKMCP47", "small_business": true, "business_categories": [ "Analytics" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2331349003", "name": "Zeva Incorporated", "cloud_service_provider": "Zeva Incorporated", "cloud_service_offering": "ZevaCrypt", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Zeva%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2024-03-26T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": "2024-03-26T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Vaultes", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "ZevaCrypt is an end-to-end email encryption solution utilizing government PIV/CAC cards and the Public Key Infrastructure in a way that makes end-to-end encryption intuitive. ZevaCrypt works with Outlook as a plug-in that allows for the discovery of the recipient’s public key through a SaaS-enabled eDirectory and uses policies and validations to manage the ability to send and received emails from authorized Agencies. ZevaCrypt was designed to support inter-department encryption communication using the existing infrastructure.", "fedramp_msg": "", "sales_email": "Zeva-sales@Zeva.us", "security_email": "zcryptsupport@zeva.us", "website": "https://zevacrypt.zevainc.com/", "uei": "", "small_business": true, "business_categories": [ "Collaboration", "Communication" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1731347234", "name": "Zimperium", "cloud_service_provider": "Zimperium", "cloud_service_offering": "Zimperium Mobile Endpoint Cyber Security", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Zimperium%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2018-05-01T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2019-01-28T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2019-07-01T04:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 4, "reuse": 3, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2018-05-01T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2019-01-28T20:00:00.000Z", "cert_date": "2019-07-01T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "Immigration and Customs Enforcement", "fedramp_auth": "2019-07-01T20:00:00.000Z", "annual_assessment": "2011-11-23T04:00:00.000Z", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [], "agency_authorizations": [ "Consumer Financial Protection Bureau", "First Responder Network Authority", "Office of Financial Research", "United States Secret Service" ], "agency_reuse": [ "" ], "service_description": "Zimperium Mobile Endpoint Cyber Security is a Cloud based application deployed on the AWS GovCloud infrastructure which, when combined with the Zimperium mobile application (zIPS), provides a comprehensive Mobile Threat Defense (MTD) solution. Zimperium's Amazon GovCloud based application provides security teams with visibility on the threats and vulnerabilities across all mobile devices in the organization to assess organization risk, identify security gaps and remediate. The zIPS on-device app incorporates machine learning techniques to detect anomalies to the mobile device's operating system's statistics, memory, CPU and other system parameters and accurately identify not only the specific type of malicious attack, but also the forensics associated with the who, what, where, when, and how of an attack occurrence.", "fedramp_msg": "N/A", "sales_email": "", "security_email": "fedramp@zimperium.com", "website": "https://www.zimperium.com/", "uei": "", "small_business": true, "business_categories": [], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2502224058", "name": "zLink, Inc.", "cloud_service_provider": "zLink, Inc.", "cloud_service_offering": "zLinkFM", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/zLink%20Logo.png", "status": "Agency Authorization In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2025-08-21T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2025-08-21T20:00:00.000Z", "ip_pmo_status": "Unknown", "ip_pmo_date": "2026-07-21T20:00:00.000Z", "cert_date": null, "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "MegaplanIT Holdings, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Low", "impact_level_number": "4", "leveraged_systems": [], "agency_authorizations": [ "" ], "agency_reuse": [ "" ], "service_description": "zLinkFM is a cloud-based Software as a Service (SaaS) platform that provides comprehensive, scalable, and configurable solutions for facility management, asset management, space management, and maintenance operations. The system is delivered in a multi-tenant Public Cloud environment, leveraging secure, resilient infrastructure to serve a wide range of government and contractor clients.\nzLinkFM is designed to support the operational and regulatory needs of federal, state, and local government agencies, research institutions, federal contractors, and government-affiliated organizations.\nzLinkFM is a secure, enterprise-grade IWMS/CAFM/CMMS solution that helps organizations efficiently manage facilities, assets, and operations at scale.", "fedramp_msg": "N/A", "sales_email": "sales@zlinkcorp.com", "security_email": "fedramp@zlinkcorp.com", "website": "https://www.zlinkcorp.com/", "uei": "Q3GLB2QZAT64", "small_business": false, "business_categories": [ "Analytics", "Collaboration", "Communication", "Data Management", "Finance", "Fleet Management", "Health & Wellness", "Operations Management", "Storage" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1825941347A", "name": "Zoom Video Communications, LLC", "cloud_service_provider": "Zoom Video Communications, LLC", "cloud_service_offering": "Zoom for Government", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/Zoom%20Logo.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-01-26T05:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2023-07-28T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP Certified" } ], "authorizations": 44, "reuse": 54, "ready_status": "Not Active", "ready_date": "2022-01-26T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2023-07-28T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2023-07-28T20:00:00.000Z", "annual_assessment": "2025-02-13T20:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2106555313", "csp": "AchieveIt Online, LLC", "cso": "AchieveIt", "status": "FedRAMP Certified", "impact_level": "Low", "impact_level_number": "4" }, { "id": "FR2401047002", "csp": "Axonius Federal Systems", "cso": "Axonius Asset Cloud", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1206111371", "csp": "CoSo Cloud, LLC.", "cso": "Knox Systems", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Alcohol and Tobacco Tax and Trade Bureau", "Argonne National Laboratory", "Bureau of Labor Statistics", "Bureau of Safety and Environmental Enforcement", "Commodity Futures Trading Commission", "Consumer Product Safety Commission", "Council of the Inspectors General on Integrity and Efficiency", "Customs and Border Protection", "DOJ Office of the Inspector General", "Defense Information Systems Agency", "Department of Agriculture", "Department of Education", "Department of Energy", "Department of Health and Human Services", "Department of State", "Department of Veterans Affairs", "Environmental Protection Agency", "FHFA Office of the Inspector General", "Federal Energy Regulatory Commission", "Federal Housing Finance Agency", "Federal Retirement Thrift Investment Board", "Federal Trade Commission", "General Services Administration", "Health Resources and Services Administration", "Indian Health Services", "Internal Revenue Service", "Library of Congress", "National Capital Planning Commission", "National Institute of Standards and Technology", "National Institutes of Health", "National Labor Relations Board", "National Mediation Board", "National Science Foundation", "National Telecommunications and Information Administration", "Office of Financial Research", "Office of Personnel Management", "Office of the Comptroller of the Currency", "Social Security Administration", "Treasury Inspector General for Tax Administration", "U.S. Election Assistance Commission", "United States Forest Service", "United States Geological Survey", "United States Patent and Trademark Office" ], "agency_reuse": [ "22-002-03", "22-002-08", "22-005-01", "22-005-06", "22-005-09", "22-011-05", "22-015", "22-016-01", "22-027-01", "22-028", "22-036" ], "service_description": "The Zoom for Government Platform is a Zoom product offering for the US Federal, and US Department of Defense communities. The Zoom for Government Platform is an all-in-one collaboration platform that makes connecting easier, more immersive, and more dynamic for people and businesses. \n Zoom for Government FedRAMP JAB authorized products include:\n- Zoom Cloud Video Conferencing - a cloud-based collaboration service which includes video, audio, content sharing webinars and collaboration.\n-Zoom Events - is a versatile platform that allows customers to create a variety of engaging virtual experiences for attendees. Events allow for users to manage their own branded event hub, track ticketing and registration, control user access from one dashboard, and allow networking during Zoom Events.\n- Zoom Rooms - software-based group video conferencing for conference and huddle rooms that run off-the-shelf hardware including a dedicated MAC or PC, camera, and speaker with an iPad controller.\n- Zoom Whiteboard - provides customers with a set of easy-to-use tools to collaborate together to capture ideas, processes, and concepts. With features focused on fostering innovation, Zoom Whiteboard makes it simple for hybrid teams to interact in new ways for seamless collaboration.\n- Workspace Reservation - is a solution that enables customers to reserve flexible workspaces ahead of time or when they arrive at the office. Feature is enabled by the customer admin via the Zoom administrative portal and available workspaces are managed in the Room Management service.\n- Zoom Mesh - is a native client-based Mesh (eCDN) solution for Zoom Webinars and Events, that allows organizations to better manage how their users receive Webinar and Event media streams. It is all built within the existing Zoom for Government Client, subscribing to Zoom Mesh activates the ability of the Zoom for Government client to allow Mesh through customer designated client for meetings and Webinars. No transport or encryption is changed in the Mesh client communication with the Zoom for Government security boundary.\n- Continuous Meeting Chat allows meeting participants to communicate before, during, and after a meeting by creating a dedicated group chat in Zoom Team Chat for all meeting participants. When enabled, in-meeting chats will show up in that group chat as they are sent in the meeting, allowing meeting conversations to continue after a meeting ends. Schedule a recurring meeting and have a group chat that follows the group for the entire project, in and out of meetings.\n- AI Companion for ZfG, Zoom for Government’s generative AI assistant, empowers individuals by helping them be more productive, connect and collaborate with teammates, and improve their skills. AI Companion for ZfG is a set of generative AI features that can be enabled within the Zoom for Government platform.\n- Zoom Team Chat - send chat messages in public or private channels organized by projects, teams, or topics with the ability to share files, emojis, screenshots, and more.\n- Zoom Phone - a cloud-based phone system with traditional PBX features, integrated PSTN connectivity, enhanced emergency services, and support for calling from mobile apps, desktop apps, and legacy desk phone devices.\n- Zoom Contact Center (ZCC) - is an omnichannel contact center that's optimized for video and integrated into the same Zoom experience. Zoom Contact Center brings unified communications together with contact center capabilities. ZCC builds off the FedRAMP Authorized service Zoom Phone. ZCC is administered in the Zoom for Government administrative portal.\n- Zoom API - provides the ability for developers to easily add Video, Voice and Screen Sharing to your application. Our API is a server-side implementation designed around REST. The Zoom API helps manage the pre-meeting experience such as creating, editing, and deleting resources like users, meetings, and webinars.\n- The Zoom Meeting SDK - lets you display the familiar Zoom meeting and webinar experience in your app or website. The Meeting SDK interface resembles the Zoom client, except that it lives inside your own app or website.\n- Zoom Client - a local client that allows users to start/join a meeting, employ in-meeting controls for participants, hosts, and co-hosts, webinar controls, manage participants, share screen controls, chat, establish channels, add contacts, and modify settings.\n- The Zoom for Chrome PWA - allows customers to use FedRAMP authorized services Chat and Phone- , currently available on the desktop client or mobile app, within the Chrome web browser. \n- QSS - enables enterprise organizations to identify, troubleshoot, and resolve network and service disruptions in near real time for every user, host, and participant across Zoom Meetings, Webinars, & Phone (all FedRAMP authorized services) within their enterprise subscription. The change introduces a new Webhook API to the boundary to transfer this information over TLS 1.2 to customer owned tooling.", "fedramp_msg": "Zoom for Government previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "fedramp@zoom.us", "security_email": "zfgcompliance@zoom.us", "website": "https://www.zoomgov.com/", "uei": "N111LGYXDUM7", "small_business": false, "business_categories": [ "Collaboration", "Communication", "Contact Center" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2227062482", "name": "Zscaler, Inc.", "cloud_service_provider": "Zscaler, Inc.", "cloud_service_offering": "Zscaler Internet Access - Government (Secure Web Gateway - vTIC) - High", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ZScaler%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2021-11-04T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2022-03-15T04:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2022-07-02T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 14, "reuse": 14, "ready_status": "Not Active", "ready_date": "2021-11-04T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2022-03-15T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2022-07-02T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-07-02T20:00:00.000Z", "annual_assessment": "2011-06-23T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2402468053", "csp": "Darktrace Federal Inc.", "cso": "Cyber AI Mission Defense and Email Protection", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" } ], "agency_authorizations": [ "Centers for Disease Control and Prevention", "Cybersecurity & Infrastructure Security Agency", "Department of State", "Drug Enforcement Administration", "Federal Aviation Administration", "Federal Emergency Management Agency", "Food and Drug Administration", "HHS Office of the Inspector General", "HUD Office of Inspector General", "Immigration and Customs Enforcement", "Internal Revenue Service", "Southwestern Power Administration", "Tennessee Valley Authority" ], "agency_reuse": [ "22-044" ], "service_description": "Zscaler Internet Access Gov, part of the Zscaler Zero Trust Exchange, defines safe, fast internet and SaaS access with the industry's most comprehensive cloud native security service edge (SSE) platform. Zscaler's Zero Trust Exchange helps agencies achieve the target goals of the Executive Order 14028 and resulting OMB mandates, CISA guidance and directives.\n\nZIA Gov security products are currently utilized by over 100 federal agencies and federal systems integrators today in Zscaler's US-based FedRAMP Moderate and FedRAMP JAB High approved boundaries in support of the Cybersecurity and Infrastructure Security Agency (CISA) Trusted Internet Connection (TIC) 3.0 use case model for FedRAMP approved Policy Enforcement Point (PEP) capabilities. \n\nDelivered as a scalable SaaS platform from the world's largest security cloud, ZIA eliminates legacy network security solutions to stop advanced attacks and prevent data loss with a comprehensive zero trust TIC 3.0 compliant approach, fully supporting the CISA approved Branch Office, Remote Users, and Cloud use cases with:\n\nBest-in-class, consistent security for today's hybrid workforce: When you move security to the cloud, all users, apps, devices, and locations get always-on threat protection based on identity and context. Your security policy goes everywhere your users go.\nSecure cloud-based telework solution: Migrate to a cloud-first, cloud-secure Trusted Internet Connections (TIC) 3.0 zero-trust architecture that can accelerate cloud migration, enhance user productivity, and improve support for cloud applications.\n\nLightning-fast access with zero infrastructure: Direct-to-cloud architecture ensures a fast, seamless user experience. This eliminates backhauling, improves performance and user experience, and simplifies network administration - with no physical infrastructure, ever.\n\nAI-powered protection from the world's largest security cloud: Inline inspection of all internet and SaaS traffic, including SSL decryption, with a suite of AI-powered cloud security services to stop ransomware, phishing, zero-day malware, and advanced attacks based on threat intelligence from 300 trillion daily signals.\n\nSimplified management: Using a cloud native security solution infused with AI, streamlined workflows, and business focused policy creation frees up valuable time for your team to focus on strategic goals.\n\nZscaler Internet Access includes a comprehensive suite of AI-powered security and data protection services to help you stop cyberattacks and data loss. As a fully cloud-delivered SaaS solution, you can add new capabilities without any additional hardware or lengthy deployment cycles. The modules available as part of Zscaler Internet Access are:\n- Cloud Secure Web Gateway (SWG)\n- Cloud Access Security Broker (CASB)\n- Cloud Data Loss Prevention (DLP)\n- Cloud Firewall & IPS\n- Cloud Sandbox\n- Digital Experience Monitoring (ZDX) \n\nZscaler will also provide our Zero Trust Exchange services at the FedRAMP Moderate level not only for federal agencies and service integrators, but state, local, education, and critical infrastructure as a fully authorized StateRAMP solution. \n\nAll Zscaler's FedRAMP platforms are fully managed and supported by US Citizens and meet the ITAR, CJIS, and DFARS requirements and attestations. \n\nZscaler, a Leader in the Gartner Magic Quadrant for Security Service Edge.", "fedramp_msg": "Zscaler Internet Access - Government (Secure Web Gateway - vTIC) - High previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "fedramp@zscaler.com", "security_email": "fedramp@zscaler.com", "website": "https://www.zscaler.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Legal & Policy", "Network Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2219763604", "name": "Zscaler, Inc.", "cloud_service_provider": "Zscaler, Inc.", "cloud_service_offering": "Zscaler Private Access - Government (Zero Trust Exchange - VPN Replacement)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ZScaler%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2022-04-29T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2022-06-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2022-11-07T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 17, "reuse": 30, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2022-04-29T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2022-06-06T20:00:00.000Z", "cert_date": "2022-11-07T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2022-11-07T20:00:00.000Z", "annual_assessment": "2011-06-06T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2425960757", "csp": "Abnormal AI ", "cso": "Abnormal AI for Government", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1916254386", "csp": "Boomi", "cso": "Boomi Enterprise Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1607057910", "csp": "New Relic", "cso": "New Relic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Agency for Healthcare Research and Quality", "Bureau of Engraving and Printing", "Customs and Border Protection", "Department of Labor", "Department of the Treasury", "Environmental Protection Agency", "Federal Communications Commission", "First Responder Network Authority", "Health Resources and Services Administration", "Internal Revenue Service", "Justice Management Division", "National Endowment for the Arts", "Pension Benefit Guaranty Corporation", "Southwestern Power Administration", "State Office of the Inspector General", "Strategic Petroleum Reserve", "U.S. International Development Finance Corporation" ], "agency_reuse": [ "22-002-01", "22-007-11", "22-007-25", "22-014-02", "22-015", "22-037", "22-044", "22-058", "22-068", "22-070" ], "service_description": "Zscaler Private AccessGov, part of the Zscaler Zero Trust Exchange, enables fast, secure connections and allows your employees to work from anywhere using the internet as the corporate network. Based on the zero-trust principle of least-privileged access, it provides comprehensive security using context-based identity and policy enforcement. Zero Trust Exchange helps agencies achieve the target goals of the Executive Order 14028 and resulting OMB mandates, CISA guidance and directives.\n\nZPA Gov security products are currently utilized by over 100 federal agencies and federal systems integrators today in Zscaler's US-based FedRAMP Moderate and FedRAMP JAB High approved boundaries in support of the Cybersecurity and Infrastructure Security Agency (CISA) Trusted Internet Connection (TIC) 3.0 use case model for FedRAMP approved Policy Enforcement Point (PEP) capabilities. \n\nTIC 3.0 Use Case Examples (Branch Office, Remote Users, and Cloud)\n\nZero-trust VPN alternative: Legacy VPNs fail to deliver the security, visibility, and user experience today's distributed workforce requires. ZPA delivers fast, direct access to private apps by eliminating VPN traffic backhauling which creates latency, resulting in lost productivity. \n\nSecure Hybrid Workforce: Users require the ability to move fluidly between their homes, remote locations, branch offices, and headquarters. ZPA enables seamless and secure access to private apps from wherever they need to work, on any device. Local users benefit from an identical experience through an on-prem broker that replicate the policies and controls of the cloud. \n\nThird-party Agentless Access: Third-party agencies, contractors, and vendors require secure, direct access to business applications and OT systems from unmanaged devices. ZPA provides secure, direct connectivity from authorized users to named applications without putting third parties on the network. With integrated agentless access, users can access applications from any browser, on any device, without the need to install a client or log into a VPN.\n\nVDI alternative: Traditional VDIs are often slow, unresponsive, and introduce significant costs with racks of servers needed in the data center to support remote access needs. ZPA provides secure, direct connectivity to apps over RDP and SSH, enabling a faster, more secure experience for users. With built-in agentless access through the browser employees and third-party users get seamless secure connectivity from any device without complicated desktop provisioning processes.\n\nSecure workload-to-workload connectivity: Agencies require fast, secure workload-to-workload connectivity across hybrid and multi-cloud environments. ZPA for Workloads reduces operational complexity and cost by eliminating the need for virtual DMZs and VPN meshes with least-privileged access-based connectivity across clouds. In addition, because workloads are hidden behind ZPA, they are invisible to the internet and impossible to attack.\n\nZscaler will also provide our Zero Trust Exchange services at the FedRAMP Moderate level not only for federal agencies and service integrators, but state, local, education, and critical infrastructure as a fully authorized StateRAMP solution. \n\n\nZscaler, a Leader in the Gartner Magic Quadrant for Security Service Edge.", "fedramp_msg": "N/A", "sales_email": "fedramp@zscaler.com", "security_email": "fedramp@zscaler.com", "website": "https://www.zscaler.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Legal & Policy", "Network Management", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1719759604", "name": "Zscaler, Inc.", "cloud_service_provider": "Zscaler, Inc.", "cloud_service_offering": "Zscaler Private Access - Government (Zero Trust Networking - VPN Replacement)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ZScaler%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2019-08-30T04:00:00.000Z", "category": "Status Change", "description": "Status set to Legacy FedRAMP Ready" }, { "date": "2020-02-26T05:00:00.000Z", "category": "Status Change", "description": "Status changed from FedRAMP Ready to FedRAMP In Process" }, { "date": "2020-04-29T04:00:00.000Z", "category": "Status Change", "description": "Status changed from JAB Review to FedRAMP Certified" } ], "authorizations": 23, "reuse": 108, "ready_status": "Not Active", "ready_date": "2019-08-30T20:00:00.000Z", "ip_jab_status": "Not Active", "ip_jab_date": "2020-02-26T20:00:00.000Z", "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": null, "ip_pmo_status": "Not Active", "ip_pmo_date": null, "cert_date": "2020-04-29T20:00:00.000Z", "cert_path": "JAB", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2020-04-29T20:00:00.000Z", "annual_assessment": "2011-04-21T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "High", "impact_level_number": "6", "leveraged_systems": [ { "id": "FR2402468053", "csp": "Darktrace Federal Inc.", "cso": "Cyber AI Mission Defense and Email Protection", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2023601671", "csp": "eGain Corporation", "cso": "eGain Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "F1412165928", "csp": "Everbridge", "cso": "Critical Event Management Suite", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2235965777", "csp": "Mark43, Inc.", "cso": "Mark43 Public Safety Platform (PSP)", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2322855016", "csp": "ProjectTeam, Inc.", "cso": "ProjectTeam for Government (Construction Project and Program Management)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1919071020A", "csp": "SentinelOne", "cso": "SentinelOne Singularity Platform High", "status": "FedRAMP Certified", "impact_level": "High", "impact_level_number": "6" }, { "id": "FR2033152148", "csp": "Seven Bridges Genomics, Inc", "cso": "Seven Bridges Platform", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1918740338", "csp": "Sumo Logic", "cso": "Sumo Logic", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2219763604", "csp": "Zscaler, Inc.", "cso": "Zscaler Private Access - Government (Zero Trust Exchange - VPN Replacement)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1720454205", "csp": "Zscaler, Inc.", "cso": "Zscaler Internet Access - Government (Secure Web Gateway - vTIC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "Agency for Healthcare Research and Quality", "American Battle Monuments Commission", "Bureau of Labor Statistics", "Consumer Product Safety Commission", "Cybersecurity & Infrastructure Security Agency", "Department of Energy", "Department of State", "Drug Enforcement Administration", "Federal Aviation Administration", "Federal Communications Commission", "Federal Emergency Management Agency", "Federal Trade Commission", "Food and Drug Administration", "HHS Office of the Inspector General", "HUD Office of Inspector General", "Health Resources and Services Administration", "Immigration and Customs Enforcement", "Internal Revenue Service", "Los Alamos National Laboratory", "National Mediation Board", "Office of Financial Research", "State Office of the Inspector General", "Tennessee Valley Authority" ], "agency_reuse": [ "22-002-02", "22-002-07", "22-003", "22-005-02", "22-005-03", "22-005-06", "22-005-08", "22-005-10", "22-005-11", "22-007", "22-007-05", "22-007-11", "22-007-17", "22-007-22", "22-007-24", "22-007-25", "22-007-27", "22-007-28", "22-011", "22-011-02", "22-011-05", "22-011-06", "22-011-10", "22-012", "22-013", "22-015", "22-016-06", "22-017", "22-017-02", "22-017-06", "22-018", "22-019", "22-020", "22-021-01", "22-022-01", "22-023", "22-024", "22-027", "22-027-01", "22-027-02", "22-027-06", "22-027-07", "22-028", "22-030", "22-031", "22-032", "22-034", "22-036", "22-039", "22-042-02", "22-044", "22-045", "22-051", "22-059", "22-061", "22-061-01", "22-062", "22-067", "22-068", "22-070", "22-074", "22-075", "22-081", "22-094" ], "service_description": "Zscaler Private Access Gov, part of the Zscaler Zero Trust Exchange, enables fast, secure connections and allows your employees to work from anywhere using the internet as the corporate network. Based on the zero-trust principle of least-privileged access, it provides comprehensive security using context-based identity and policy enforcement. Zero Trust Exchange helps agencies achieve the target goals of the Executive Order 14028 and resulting OMB mandates, CISA guidance and directives.\n\nZPA Gov security products are currently utilized by over 100 federal agencies and federal systems integrators today in Zscaler's US-based FedRAMP Moderate and FedRAMP JAB High approved boundaries in support of the Cybersecurity and Infrastructure Security Agency (CISA) Trusted Internet Connection (TIC) 3.0 use case model for FedRAMP approved Policy Enforcement Point (PEP) capabilities. \n\nTIC 3.0 Use Case Examples (Branch Office, Remote Users, and Cloud)\n\nZero-trust VPN alternative: Legacy VPNs fail to deliver the security, visibility, and user experience today's distributed workforce requires. ZPA delivers fast, direct access to private apps by eliminating VPN traffic backhauling which creates latency, resulting in lost productivity. \n\nSecure Hybrid Workforce: Users require the ability to move fluidly between their homes, remote locations, branch offices, and headquarters. ZPA enables seamless and secure access to private apps from wherever they need to work, on any device. Local users benefit from an identical experience through an on-prem broker that replicate the policies and controls of the cloud. \n\nThird-party Agentless Access: Third-party agencies, contractors, and vendors require secure, direct access to business applications and OT systems from unmanaged devices. ZPA provides secure, direct connectivity from authorized users to named applications without putting third parties on the network. With integrated agentless access, users can access applications from any browser, on any device, without the need to install a client or log into a VPN.\n\nVDI alternative: Traditional VDIs are often slow, unresponsive, and introduce significant costs with racks of servers needed in the data center to support remote access needs. ZPA provides secure, direct connectivity to apps over RDP and SSH, enabling a faster, more secure experience for users. With built-in agentless access through the browser employees and third-party users get seamless secure connectivity from any device without complicated desktop provisioning processes.\n\nSecure workload-to-workload connectivity: Agencies require fast, secure workload-to-workload connectivity across hybrid and multi-cloud environments. ZPA for Workloads reduces operational complexity and cost by eliminating the need for virtual DMZs and VPN meshes with least-privileged access-based connectivity across clouds. In addition, because workloads are hidden behind ZPA, they are invisible to the internet and impossible to attack.\n\nZscaler will also provide our Zero Trust Exchange services at the FedRAMP Moderate level not only for federal agencies and service integrators, but state, local, education, and critical infrastructure as a fully authorized StateRAMP solution. \n\nAll Zscaler's FedRAMP platforms are fully managed and supported by US Citizens and meet the ITAR, CJIS, and DFARS requirements and attestations. \n\nZscaler, a Leader in the Gartner Magic Quadrant for Security Service Edge.", "fedramp_msg": "Zscaler Private Access - Government (Zero Trust Networking - VPN Replacement) previously became FedRAMP-Authorized by the Joint Authorization Board (JAB).", "sales_email": "fedramp@zscaler.com", "security_email": "fedramp@zscaler.com", "website": "http://www.zscaler.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Legal & Policy", "Network Management", "Virtual Private Network (VPN)" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR1720454205", "name": "Zscaler, Inc.", "cloud_service_provider": "Zscaler, Inc.", "cloud_service_offering": "Zscaler Internet Access - Government (Secure Web Gateway - vTIC)", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/ZScaler%20Logo3.png", "status": "FedRAMP Certified", "phase": "Ongoing Certification", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2017-04-14T04:00:00.000Z", "category": "Status Change", "description": "Status set to Agency Authorization In Process" }, { "date": "2018-11-19T05:00:00.000Z", "category": "Status Change", "description": "Status changed from Agency Review to FedRAMP In Process" }, { "date": "2018-12-14T05:00:00.000Z", "category": "Status Change", "description": "Status changed from PMO Review to FedRAMP Certified" } ], "authorizations": 21, "reuse": 63, "ready_status": "Not Active", "ready_date": null, "ip_jab_status": "Not Active", "ip_jab_date": null, "ip_prog_status": "Not Active", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Not Active", "ip_agency_date": "2017-04-14T20:00:00.000Z", "ip_pmo_status": "Not Active", "ip_pmo_date": "2018-11-19T20:00:00.000Z", "cert_date": "2018-12-14T20:00:00.000Z", "cert_path": "Agency", "fedramp_ready": "Not Active", "partnering_agency": "", "fedramp_auth": "2018-12-14T20:00:00.000Z", "annual_assessment": "2011-11-19T04:00:00.000Z", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Moderate", "impact_level_number": "5", "leveraged_systems": [ { "id": "FR2420341612", "csp": "LCptracker Inc", "cso": "LCPtracker Pro", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2100059668", "csp": "OnSolve LLC", "cso": "OnSolve Platform for Critical Event Management", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR1720454205", "csp": "Zscaler, Inc.", "cso": "Zscaler Internet Access - Government (Secure Web Gateway - vTIC)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" }, { "id": "FR2219763604", "csp": "Zscaler, Inc.", "cso": "Zscaler Private Access - Government (Zero Trust Exchange - VPN Replacement)", "status": "FedRAMP Certified", "impact_level": "Moderate", "impact_level_number": "5" } ], "agency_authorizations": [ "American Battle Monuments Commission", "Bureau of Engraving and Printing", "Bureau of Labor Statistics", "Consumer Product Safety Commission", "Customs and Border Protection", "Department of Energy", "Department of Labor", "Department of the Treasury", "Federal Communications Commission", "Federal Trade Commission", "First Responder Network Authority", "Justice Management Division", "Los Alamos National Laboratory", "National Endowment for the Arts", "National Mediation Board", "Office of Financial Research", "Pension Benefit Guaranty Corporation", "State Office of the Inspector General", "Strategic Petroleum Reserve", "U.S. International Development Finance Corporation", "Western Area Power Administration" ], "agency_reuse": [ "22-002-02", "22-003", "22-005-02", "22-005-08", "22-007", "22-007-04", "22-007-05", "22-007-11", "22-007-22", "22-007-24", "22-011-06", "22-015", "22-018", "22-021-01", "22-027", "22-027-01", "22-027-06", "22-027-07", "22-031-01", "22-034", "22-039", "22-042-02", "22-044", "22-051", "22-059", "22-061", "22-061-01", "22-068", "22-074", "22-081" ], "service_description": "Zscaler Internet Access Gov, part of the Zscaler Zero Trust Exchange, defines safe, fast internet and SaaS access with the industry's most comprehensive cloud native security service edge (SSE) platform. Zscaler's Zero Trust Exchange helps agencies achieve the target goals of the Executive Order 14028 and resulting OMB mandates, CISA guidance and directives.\n\nZIA Gov security products are currently utilized by over 100 federal agencies and federal systems integrators today in Zscaler's US-based FedRAMP Moderate and FedRAMP JAB High approved boundaries in support of the Cybersecurity and Infrastructure Security Agency (CISA) Trusted Internet Connection (TIC) 3.0 use case model for FedRAMP approved Policy Enforcement Point (PEP) capabilities. \n\nDelivered as a scalable SaaS platform from the world's largest security cloud, ZIA eliminates legacy network security solutions to stop advanced attacks and prevent data loss with a comprehensive zero trust TIC 3.0 compliant approach, fully supporting the CISA approved Branch Office, Remote Users, and Cloud use cases with:\n\nBest-in-class, consistent security for today's hybrid workforce: When you move security to the cloud, all users, apps, devices, and locations get always-on threat protection based on identity and context. Your security policy goes everywhere your users go.\nSecure cloud-based telework solution: Migrate to a cloud-first, cloud-secure Trusted Internet Connections (TIC) 3.0 zero-trust architecture that can accelerate cloud migration, enhance user productivity, and improve support for cloud applications.\n\nLightning-fast access with zero infrastructure: Direct-to-cloud architecture ensures a fast, seamless user experience. This eliminates backhauling, improves performance and user experience, and simplifies network administration - with no physical infrastructure, ever.\n\nAI-powered protection from the world's largest security cloud: Inline inspection of all internet and SaaS traffic, including SSL decryption, with a suite of AI-powered cloud security services to stop ransomware, phishing, zero-day malware, and advanced attacks based on threat intelligence from 300 trillion daily signals.\n\nSimplified management: Using a cloud native security solution infused with AI, streamlined workflows, and business focused policy creation frees up valuable time for your team to focus on strategic goals.\n\nZscaler Internet Access includes a comprehensive suite of AI-powered security and data protection services to help you stop cyberattacks and data loss. As a fully cloud-delivered SaaS solution, you can add new capabilities without any additional hardware or lengthy deployment cycles. The modules available as part of Zscaler Internet Access are:\n- Cloud Secure Web Gateway (SWG)\n- Cloud Access Security Broker (CASB)\n- Cloud Data Loss Prevention (DLP)\n- Cloud Firewall & IPS\n- Cloud Sandbox\n- Digital Experience Monitoring (ZDX) \n\nZscaler will also provide our Zero Trust Exchange services at the FedRAMP Moderate level not only for federal agencies and service integrators, but state, local, education, and critical infrastructure as a fully authorized StateRAMP solution. \n\nZscaler, a Leader in the Gartner Magic Quadrant for Security Service Edge.", "fedramp_msg": "N/A", "sales_email": "fedramp@zscaler.com", "security_email": "fedramp@zscaler.com", "website": "https://www.zscaler.com/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Data Management", "Legal & Policy", "Network Management", "Operations Management" ], "service_last_90": [ "" ], "all_others": [ "" ], "service_acronym": "", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2628650874", "name": "Pincus Technologies Inc", "cloud_service_provider": "Pincus Technologies Inc", "cloud_service_offering": "Tarly Cowork", "logo": "https://gov.tarly.co/tarly-logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-17T19:33:03.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-LIGN Compliance and Security, Inc. dba A-LIGN", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "AI-powered procurement workspace intended for direct use by federal agency acquisition teams within agency-authorized federal information systems. Tarly Cowork helps contracting professionals run market research, draft acquisition documents (IGCEs, solicitations, evaluation materials), and manage procurement files with grounded citations to authoritative federal data sources (SAM.gov, USAspending, the FAR and agency supplements). Each agency authorizes its use through the agency's Authorization to Operate (ATO) process.", "fedramp_msg": "", "sales_email": "cary@tarly.co", "security_email": "security@tarly.co", "website": "https://gov.tarly.co/", "uei": "RKCYVMCNUK45", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Collaboration", "Data Management" ], "service_last_90": [], "all_others": [], "service_acronym": "TARLY", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://gov.tarly.co/trust/", "repositoryDescription": "Tarly Trust Center — FedRAMP certification status, security posture, certification roadmap, and quarterly progress updates. Machine-readable data at https://gov.tarly.co/trust/fedramp.json. No authentication required.", "authenticationRequired": false }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://gov.tarly.co/trust/secure-configuration-guide.html", "repositoryDescription": "Public customer guidance for securely provisioning, configuring, operating, reviewing, and decommissioning Tarly Cowork administrative and privileged access. Machine-readable guidance: https://gov.tarly.co/trust/secure-configuration-guide.json.", "authenticationRequired": false }, "certified_services": [ { "serviceName": "Conversations", "serviceDescription": "The Tarly Cowork AI procurement assistant. Users work in threaded conversations in which the assistant performs citation-grounded acquisition research, FAR and agency-supplement analysis, and document drafting. Retrieval covers uploaded evidence, connected sources, authoritative federal data (SAM.gov, USAspending, the FAR and agency supplements), and read-only fetches of public web pages identified by the user or the assistant. Individual conversations may be shared outside their procurement file through explicit, revocable share links (available 2026-03-19). Included in the planned FedRAMP Minimum Assessment Scope.", "dateAvailable": "2026-03-13" }, { "serviceName": "Procurement Files", "serviceDescription": "The system of record for an acquisition. Each procurement file holds its overview and contract data, conversations, artifacts, sources and evidence, reviews, membership and access, and an append-only audit log. Membership and privileges are role-based and enforced per file. Included in the planned FedRAMP Minimum Assessment Scope.", "dateAvailable": "2026-03-13" }, { "serviceName": "Workflows", "serviceDescription": "Guided, multi-step acquisition workflows that produce procurement artifacts — market research, independent government cost estimates, solicitations, and evaluation materials — with versioning, validation against the applicable regulation, and export to Word and PDF. Included in the planned FedRAMP Minimum Assessment Scope.", "dateAvailable": "2026-03-13" }, { "serviceName": "Resources", "serviceDescription": "The customer-managed reference library, together with the indexed corpus of the FAR, agency supplements, and document templates the assistant retrieves and cites from. Customer-uploaded resource documents are stored inside the authorization boundary. Included in the planned FedRAMP Minimum Assessment Scope.", "dateAvailable": "2026-03-13" }, { "serviceName": "Workspace", "serviceDescription": "The isolated execution environment in which the assistant reads and writes working files and runs analysis over evidence the customer has supplied. Each workspace is scoped to a single procurement file or conversation, runs in a dedicated sandbox container with no direct database access, and mounts only its own storage share. Included in the planned FedRAMP Minimum Assessment Scope.", "dateAvailable": "2026-05-12" }, { "serviceName": "Approval Paths", "serviceDescription": "Administrator-defined review and approval routing for procurement files and the artifacts produced within them, with per-step assignment, approval state, and audit history. Included in the planned FedRAMP Minimum Assessment Scope.", "dateAvailable": "2026-07-29" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "F1603047324", "useCase": "Microsoft Azure Commercial (FedRAMP High, Authorized) is the sole hosting platform for the Tarly Cowork authorization boundary and its Tarly-operated shared public-data services. Current production services include Container Apps, PostgreSQL Flexible Server, Storage, Key Vault, Container Registry, Front Door Premium with managed WAF, Azure DNS, Entra ID, Log Analytics and Azure Monitor, Microsoft Defender for Cloud, Azure AI services, and Azure Communication Services Email. Cowork does not use Service Bus as a direct application-runtime connection; the separate Tarly-operated shared-data ingestion plane contains an Azure Service Bus namespace that can affect the freshness and integrity of public records Cowork later reads." } ], "nonCertified": [ { "name": "SAM.gov Data Services API", "provider": "U.S. General Services Administration", "website": "https://open.gsa.gov/api/", "useCase": "Read-only retrieval of entity registration data, contract opportunities, and opportunity attachments so the assistant can cite authoritative source records. Requests carry search parameters and public identifiers only; no federal customer content is transmitted." }, { "name": "USAspending.gov API", "provider": "U.S. Department of the Treasury", "website": "https://api.usaspending.gov/", "useCase": "Read-only retrieval of federal award and spending records used for market research and pricing comparisons. Requests carry query parameters and public identifiers only; no federal customer content is transmitted." }, { "name": "GSA acquisition APIs (Federal Acquisition Service, FPDS)", "provider": "U.S. General Services Administration", "website": "https://open.gsa.gov/api/", "useCase": "Read-only retrieval of schedule, catalog, and federal procurement data system records supporting market research. Requests carry query parameters and public identifiers only; no federal customer content is transmitted." }, { "name": "eCFR and Acquisition.gov regulation sources", "provider": "U.S. Government Publishing Office and U.S. General Services Administration", "website": "https://www.ecfr.gov/", "useCase": "Read-only ingestion of the FAR and agency supplements into the in-boundary regulation corpus that the assistant retrieves and cites from. Ingestion is one-way and carries no federal customer content." }, { "name": "Bureau of Labor Statistics public data API", "provider": "U.S. Department of Labor, Bureau of Labor Statistics", "website": "https://www.bls.gov/developers/", "useCase": "Read-only ingestion of public occupational employment and wage data used for independent government cost estimates and price analysis. No federal customer content is sent to BLS." }, { "name": "Regulations.gov public API", "provider": "U.S. General Services Administration, eRulemaking Program", "website": "https://open.gsa.gov/api/regulationsgov/", "useCase": "Read-only ingestion and retrieval of public rulemaking dockets, documents, and public comments used for regulatory and acquisition research. No federal customer content is sent to Regulations.gov." }, { "name": "Brave Search API", "provider": "Brave Software, Inc.", "website": "https://brave.com/search/api/", "useCase": "Discovery-only web search. The assistant sends a short search query string derived from the user's request and receives result titles, URLs, and snippets; results are never cited directly, and any source relied upon is subsequently fetched and captured as evidence inside the boundary. Procurement file contents, uploaded evidence, and generated artifacts are not transmitted to this provider." }, { "name": "Public web content retrieval", "provider": "Various public website operators", "useCase": "Read-only, outbound HTTPS retrieval of specific public web pages identified by the user or by search results, so that cited material can be captured and stored as evidence inside the boundary. Retrieval is one-way; the request URL is the only information disclosed to the destination site." }, { "name": "Tarly Microsoft 365 / SharePoint Online integration", "provider": "Microsoft Corporation (tenant operated by Tarly)", "website": "https://www.microsoft.com/microsoft-365", "useCase": "The connector is a test placeholder for a future customer-operated SharePoint tenant. It is configured to a Tarly-operated SharePoint Online site so the import path can be exercised, and it lets authenticated Cowork users search that configured site and import selected documents into a procurement file as evidence. No agency or customer tenant is connected, so no federal customer data flows through it today. The data flow is inbound from SharePoint to Cowork; this record does not claim the current tenant is agency-operated or covered by an agency authorization." } ] } }, { "fedramp_id": "FR2628647233", "name": "Dispel LLC", "cloud_service_provider": "Dispel LLC", "cloud_service_offering": "Dispel Zero Trust Engine (DZTE) For Government", "logo": "https://api.dispeltrust.com/api/trust-center/public/system/dzte-fedramp-high-001/logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-17T19:33:07.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "MegaPlanIT", "service_model": [ "SaaS" ], "deployment_model": "Government-Only Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "DZTE is a Government-only cloud computing SaaS that provides secure remote access to critical systems, enabling customers to implement compensating controls for operational technology and legacy technology environments.", "fedramp_msg": "", "sales_email": "sales@dispel-federal.com", "security_email": "security@dispel-federal.com", "website": "https://www.dispel.com/", "uei": "CWVGPF8X5X76", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Virtual Private Network (VPN)", "Network Management" ], "service_last_90": [], "all_others": [], "service_acronym": "DZTE", "trust_center": null, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://api.dispeltrust.com/api/trust-center/public/system/dzte-fedramp-high-001/secure-configuration-guide", "repositoryDescription": "Dispel's Secure Configuration Guide", "authenticationRequired": true, "accessRequestInstructions": "To request access to the DZTE Secure Configuration Guide, contact security@dispel-federal.com. Access is provided to FedRAMP reviewers and authorized U.S. Government customers." }, "certified_services": [ { "serviceName": "Dispel Zero Trust Engine (DZTE) For Government", "serviceDescription": "Zero-trust / Moving-target-defense secure remote access for ICS/OT systems", "dateAvailable": "2026-07-07" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "F1603047866", "useCase": "FedRAMP-authorized IaaS providing the compute, storage, and networking that hosts the DZTE service within the U.S. Government-only AWS GovCloud region." }, { "fedRampCertifiedThirdPartyInformationResource": "FR1805751477", "useCase": "FedRAMP-authorized SIEM/SOAR platform providing security information and event management (SIEM) and security orchestration, automation, and response (SOAR) for continuous security monitoring of the DZTE service." }, { "fedRampCertifiedThirdPartyInformationResource": "F1206081364", "useCase": "Corporate identity, email, and collaboration services supporting Dispel personnel who operate and administer the DZTE service." }, { "fedRampCertifiedThirdPartyInformationResource": "FR1919071020A", "useCase": "FedRAMP-authorized Endpoint Detection and Response (EDR) providing continuous threat monitoring and response for the DZTE service infrastructure and administrative endpoints." } ], "nonCertified": [] } }, { "fedramp_id": "FR2628647238", "name": "Eleven Labs Inc.", "cloud_service_provider": "Eleven Labs Inc.", "cloud_service_offering": "ElevenLabs Platform", "logo": "https://eleven-public-cdn.elevenlabs.io/payloadcms/elevenlabs-official-logo.svg", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-17T19:33:12.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "No assessor engaged, Class A self-attestation, independent assessment planned for the B/C/D track, and the ID is a schema-format placeholder", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "The ElevenLabs Platform is a cloud-based AI voice and audio service that enables organizations to generate, transform, and deploy AI-produced speech and audio at scale. The FedRAMP Class A certification scope of the offering comprises three services — Text to Speech, Speech to Text, and Agents — delivered via the ElevenLabs API and the ElevenAgents platform, and applies only when the services are operated in Zero Retention Mode (ZRM), in which customer inputs and outputs are not retained and only system and audit data is persisted. All services share a common identity and access management layer, workspace-based multi-tenancy, and a unified data plane, with capabilities accessible to enterprise workspace administrators and developers integrating via API.", "fedramp_msg": "", "sales_email": "fedramp-sales@elevenlabs.io", "security_email": "fedramp-security@elevenlabs.io", "website": "https://elevenlabs.io/", "uei": "SGN5YJ1W8418", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)" ], "service_last_90": [], "all_others": [], "service_acronym": "ElevenLabs", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://compliance.elevenlabs.io", "repositoryDescription": "The ElevenLabs Compliance Repository is a collection of documents that are used to demonstrate that the ElevenLabs Platform is compliant with a number of different requirements, including the requirements of the FedRAMP program.", "authenticationRequired": false }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://elevenlabs.io/docs/eleven-api/guides/how-to/best-practices/security", "repositoryDescription": "Public secure configuration guidance for the ElevenLabs Platform, covering encryption in transit and at rest, cryptographic module validation, identity and access management (SSO and SCIM), API credential security, data protection (including Zero Retention Mode and data residency), monitoring and audit logging, webhook security, and recommended configuration for regulated workloads.", "authenticationRequired": false }, "certified_services": [ { "serviceName": "Text to Speech", "serviceDescription": "AI speech synthesis via the ElevenLabs API, converting text to natural-sounding audio across 32–70+ languages depending on model, with Python and TypeScript SDKs. Included in the FedRAMP Class A certification scope only when operated in Zero Retention Mode (ZRM): customer inputs and outputs are processed but not retained.", "dateAvailable": "2026-08-03" }, { "serviceName": "Speech to Text", "serviceDescription": "AI transcription via the ElevenLabs API, with word-level timestamps, speaker diarization, and entity detection across 90+ languages. Included in the FedRAMP Class A certification scope only when operated in Zero Retention Mode (ZRM): customer inputs and outputs are processed but not retained.", "dateAvailable": "2026-08-03" }, { "serviceName": "Agents", "serviceDescription": "ElevenAgents: a platform for designing, deploying, and operating real-time conversational voice agents, accessible through the elevenlabs.io dashboard and programmatically via the ElevenLabs API, conducting low-latency bidirectional voice conversations over WebRTC or telephony channels. Included in the FedRAMP Class A certification scope only when operated in Zero Retention Mode (ZRM); optional customer-enabled external integrations (third-party LLM providers, telephony) are outside the certified configuration and disabled by default for federal use.", "dateAvailable": "2026-08-03" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "FR1805751477", "useCase": "Underlying FedRAMP-certified (High) cloud infrastructure and platform services (GCP) hosting the entire ElevenLabs trust boundary; inherit IaaS/PaaS controls via the GCP CRM." }, { "fedRampCertifiedThirdPartyInformationResource": "AGENCYAMAZONEW", "useCase": "FedRAMP-certified (Moderate) cloud infrastructure and platform services (AWS US East/West regions) supporting portions of the ElevenLabs trust boundary; inherit IaaS/PaaS controls via the AWS Customer Responsibility Matrix. Note: applies to the commercial AWS US East/West authorization (AGENCYAMAZONEW); AWS GovCloud (US) is a separate High package (F1603047866) not currently used." } ], "nonCertified": [ { "name": "MongoDB Atlas (commercial)", "provider": "MongoDB, Inc.", "website": "https://www.mongodb.com", "useCase": "Managed NoSQL document database supporting application and workspace data for the offering, deployed in US regions. The commercial MongoDB Atlas environment is not FedRAMP certified; MongoDB Atlas for Government (FR2122150307) is a separate, physically distinct authorized environment not used by this offering." } ] } }, { "fedramp_id": "FR2628647241", "name": "Partos Inc.", "cloud_service_provider": "Partos Inc.", "cloud_service_offering": "Partos for Government", "logo": "https://cdn.partos.ai/fedramp/logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-17T18:14:32.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Prescient Security LLC", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Partos is an AI-native operating system for the U.S. aerospace and defense supply chain, unifying prime contractors, suppliers, and sub-tier vendors in a single Government Community Cloud environment on AWS GovCloud (US). Partos accelerates supplier onboarding and vetting with continuous KYB, KYC, AML, and OFAC screening and compliance monitoring across ITAR, EAR export controls, and DFARS. It delivers end-to-end, multi-tier supply chain risk visibility and active risk management, and orchestrates domestic and international supplier payments—ACH, RTP, and wires—with compliance tracing preserved throughout. The platform leverages export control regulatory frameworks (including ITAR, EAR, and CUI) to automatically enforce data access boundaries. Access is dynamically controlled based on variables like nationality and geographic location, ensuring continuous compliance at every layer. A unified data ontology and pipeline layer powers Partos AI, a multi-agent, multimodal system in which specialized agents collaborate to answer questions and act across the entire supply chain. Partos AI works both reactively and proactively—agents operate as an extension of your team, monitoring, surfacing risks, and advancing work 24/7 rather than only responding on request. Partos AI is model-agnostic (open-source and proprietary), extensible via a no-code workflow builder and REST, WebSocket, SSE, and MCP interfaces, and embeddable in any enterprise application. It supports multi- and single-tenancy, multiple IdPs and SSO, SCIM provisioning, and granular role-, group-, and permission-based access. Customers retain full ownership and exportability of their data and the AI's memory.", "fedramp_msg": "", "sales_email": "federal@partos.ai", "security_email": "security@partos.ai", "website": "https://partos.ai/", "uei": "DCXZNU8JTTM9", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Governance, Risk, and Compliance (GRC)", "Cybersecurity & Risk Management", "Operations Management", "Data Management", "Analytics", "Development Tools", "Legal & Policy", "Finance", "Accounting" ], "service_last_90": [], "all_others": [], "service_acronym": "Partos", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.partos.ai", "repositoryDescription": "Central access point for Partos for Government FedRAMP Certification Data, including current certification progress, security posture, continuous monitoring evidence, and machine- and human-readable certification artifacts. Provides federal agencies and authorized parties with self-service access and instructions for requesting FedRAMP Certification Data.", "authenticationRequired": false }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://partos.ai/fedramp/secure-configuration-guide-SCG-CSO-PUB", "repositoryDescription": "Guidance for securely accessing, configuring, and operating Partos for Government, including administrative account setup and hardening. Contains the Secure Configuration Guide.", "authenticationRequired": false }, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2628647242", "name": "Bland AI", "cloud_service_provider": "Bland AI", "cloud_service_offering": "Bland", "logo": "https://www.bland.ai/images/bland-logo.svg", "status": "FedRAMP In Process", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-17T19:33:18.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" }, { "date": "2026-08-06T04:00:00.000Z", "category": "Status Change", "description": "Status changed from Initial Implementation to FedRAMP In Process" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "PaaS" ], "deployment_model": "Government-Only Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Bland is an enterprise voice AI platform for building, deploying, and operating AI phone agents at scale. Bland runs its own speech and language models, so customer calls are not sent to third-party frontier model providers.", "fedramp_msg": "", "sales_email": "sales@bland.ai", "security_email": "fedramp@bland.ai", "website": "https://www.bland.ai/", "uei": "Not Applicable", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Contact Center" ], "service_last_90": [], "all_others": [], "service_acronym": "Bland", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.bland-gov.com/", "repositoryDescription": "Bland FedRAMP Trust Center. FedRAMP package and security documentation for federal agencies and recognized assessors.", "authenticationRequired": true, "accessRequestInstructions": "Use the \"Request access\" button on the Trust Center; access can be reclaimed with \"Reclaim access\". Questions: fedramp@bland.ai." }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://trust.bland-gov.com/resources?s=8udmre29tx8im63a7l6bhw&name=bland-ai-secure-configuration-guide.pdf", "repositoryDescription": "Bland AI secure configuration guide: hardening and configuration guidance for operating Bland securely (SCG-CSO-RSC).", "authenticationRequired": false }, "certified_services": [ { "serviceName": "Voice agents", "serviceDescription": "AI phone agents that answer inbound calls and place outbound calls, hold natural spoken conversations, and act on what the caller needs. Each agent follows a configurable conversation pathway, a decision tree that interprets the caller’s intent and then routes the call or takes an action such as scheduling, sending follow-ups, taking payments, answering questions from an approved knowledge base, or escalating to a person. Speech-to-text, reasoning, and text-to-speech all run on Bland’s own models inside Bland’s boundary.", "dateAvailable": "2026-07-13" }, { "serviceName": "SMS", "serviceDescription": "Programmatic two-way text messaging driven by the same pathway logic as voice agents. Agents send and respond to messages for notifications, reminders, status updates, and structured question-and-answer flows, triggering the same actions as a voice agent, such as scheduling, follow-ups, and record updates, over text rather than a call.", "dateAvailable": "2026-07-13" }, { "serviceName": "Chat", "serviceDescription": "Web and in-app chat agents that run on the same conversation pathways and actions as voice and SMS, embedded in an agency’s web properties for self-service. Chat shares the rule sets, knowledge, and integrations of the other channels, so a constituent gets the same answers and outcomes no matter how they reach out.", "dateAvailable": "2026-07-13" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "F1603047866", "useCase": "Cloud infrastructure hosting the Bland service." } ], "nonCertified": [ { "name": "Cloudflare", "provider": "Cloudflare", "website": "https://www.cloudflare.com", "useCase": "Network edge and application security in front of the Bland service." }, { "name": "Okta", "provider": "Okta", "website": "https://www.okta.com", "useCase": "Identity provider for Bland-managed administrative authentication." }, { "name": "Twilio", "provider": "Twilio", "website": "https://www.twilio.com", "useCase": "Telephony carrier connectivity (PSTN) for voice calls." } ] } }, { "fedramp_id": "FR2628647239", "name": "Advent Business Company Inc.", "cloud_service_provider": "Advent Business Company Inc.", "cloud_service_offering": "Enablement®", "logo": "https://enablement.cc/assets/enablement/logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-17T19:33:14.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Not yet assigned; independent assessment (IV&V) in procurement", "service_model": [ "SaaS", "PaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Enablement® is the self-contained, no-code compliance platform you fully own. It is deterministic (no AI, no hallucinations, no token costs), portable to any cloud or data center, CMMC-ready with native continuous monitoring, and zero-trust with no third-party data egress. It is error-proof by design, through automated access control, automated marking, and share-time leak prevention. Built by CMMI-appraised, ISO-certified Advent.\n\nEnablement®: Own your compliance. Send nothing out. Need no experts, no AI.\nMost compliance platforms make you hire specialists, wire in third-party services, and increasingly hand your data to AI you cannot audit. Enablement flips that. It is a self-contained, deterministic, zero-trust platform where your teams build and run everything visually, and nothing ever leaves your boundary.\n\n1. No-code process building. No developers, no AI, no token bills. Business users design complete workflows (BPMN) visually and get web and mobile interfaces generated automatically, with no coding, no integration team, and no consultants. Because the engine is deterministic rather than generative, it is free from AI hallucination and carries zero per-token cost. Every process behaves the same way every time, is fully auditable, and never invents an answer. What you design is exactly what runs.\n2. Deploy anywhere. True portability. One platform, any environment. Run Enablement in any commercial cloud, government cloud, or your own data center, or as a fully self-contained appliance. There is no cloud lock-in and no vendor-specific dependency. Move it, mirror it, or air-gap it.\n3. Rapid CMMC Level 2 compliance with built-in continuous monitoring. CMMC Level 2 readiness comes out of the box, backed by native, always-on continuous monitoring, with no separate scanning products to buy, license, or integrate. Assess, monitor, and produce authorization evidence from day one, on a single system.\n4. A genuine zero-trust boundary. Your data never touches a third party. Enablement keeps everything inside your perimeter. Your source code lives in its own repository. No data is sent to any outside service for user authentication, code-quality analysis, container scanning, file scanning, or continuous monitoring. Nothing is shipped off to a SaaS, a scanning vendor, or an AI provider. What happens in your boundary stays in your boundary.\n5. RBAC and ABAC, with automated document marking that removes human error. Fine-grained role-based and attribute-based access control (RBAC and ABAC) governs exactly who can see and do what. Documents are marked automatically to federal standards (DoW and NARA), with no manual labeling, no inconsistent tags, and no mislabeled files. The platform does the marking so people cannot get it wrong.\n6. Stop data leaks before they happen, and the liability that follows. Human error is the number one cause of data spillage. Enablement checks every share and warns before a document reaches unauthorized personnel, catching the mistake at the moment of sharing rather than after a breach. That turns a potential disclosure, and the corporate liability that comes with it, into a blocked action.\n7. Every authentication method, and your password never reaches the server. Support the full range of sign-in: passkeys, single sign-on (SSO), authenticator apps, email, and more. Critically, the password is never transmitted to the server. It is proven with a challenge-response so the secret never leaves the user's device, and the server stores only a verifier and salt, never the password or any recoverable form of it. At enrolment the server generates the initial password, delivers it out of band by email, and requires the account holder to replace it at first sign-in. Strong, flexible, phishing-resistant authentication without ever transmitting the credential.", "fedramp_msg": "", "sales_email": "sales@adventbusiness.com", "security_email": "fedramp-security@adventbusiness.com", "website": "https://enablement.company/", "uei": "C7LGVA7B5JT1", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Development Tools", "Data Management", "Artificial Intelligence (AI)", "System Administration", "Mobile Device Management (MDM)", "Governance, Risk, and Compliance (GRC)", "Content Management System (CMS)", "Operations Management", "Finance" ], "service_last_90": [], "all_others": [], "service_acronym": "ENB", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://enablement.cc/ml/20x/trust", "repositoryDescription": "Enablement FedRAMP Trust Center: public offering summary and SCG; token-gated programmatic access to certification artifacts with per-access logging (CDS-TRC-USH/PAC/AAI).", "authenticationRequired": false, "accessRequestInstructions": "Public page. Tokens for access-controlled artifacts: fedramp-security@adventbusiness.com" }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://enablement.cc/ml/20x/scg", "repositoryDescription": "Enablement® Secure Configuration Guide — recommended secure configuration, use instructions, and secure defaults for customer administrators.", "authenticationRequired": false }, "certified_services": [ { "serviceName": "Enablement No-Code Process Designer", "serviceDescription": "The PaaS platform-build layer: business users author complete BPMN processes and applications visually and get web and mobile interfaces generated automatically, with no coding. Customer-authored content is treated as untrusted and runs under server-authoritative tenant binding. Public description capability 1; Secure Configuration Guide §14.", "dateAvailable": "2026-07-17" }, { "serviceName": "Enablement Process Execution Engine", "serviceDescription": "Deterministic server-side execution of published processes — forms, tasks, approvals, and integrations. No generative model is in the execution path, so a process behaves identically on every run and never invents an answer. Public description capability 1.", "dateAvailable": "2026-07-17" }, { "serviceName": "Enablement Mobile Access", "serviceDescription": "Mobile client for the same processes and forms as the web application, with device binding on authenticated sessions. Referenced in the public description as the automatically generated mobile interface.", "dateAvailable": "2026-07-17" }, { "serviceName": "Enablement Identity, Authentication and Access Control", "serviceDescription": "Role-based and attribute-based access control (RBAC/ABAC), user lifecycle, time-boxed privileged grants, and the full authentication range: passkeys, SAML SSO, authenticator apps, and email OTP. The password is proven by challenge-response and is never transmitted to the server. Public description capabilities 5 and 7; Secure Configuration Guide §2–§7.", "dateAvailable": "2026-07-17" }, { "serviceName": "Enablement Secured Files and Secured Email", "serviceDescription": "Encrypted file storage and sharing, secured email, watermarked read-only viewing, and malware scanning of every upload — all inside the boundary, with no file content sent to an external scanning service. Secure Configuration Guide §10.2–§10.5.", "dateAvailable": "2026-07-17" }, { "serviceName": "Enablement Automated Marking and Share-Time Leak Prevention", "serviceDescription": "Automatic CUI and distribution-statement marking to federal standards (DoW and NARA), plus a share-time authorization check that warns or blocks before a document reaches unauthorized personnel. Public description capabilities 5 and 6; Secure Configuration Guide §10.1.", "dateAvailable": "2026-07-17" }, { "serviceName": "Enablement Audit and Activity Monitoring", "serviceDescription": "Tamper-evident audit capture of user and administrative activity with scoped audit-log access for customer administrators, plus execution-pattern anomaly detection and an operator kill switch for a runaway process or account. Secure Configuration Guide §9.", "dateAvailable": "2026-07-17" }, { "serviceName": "Enablement Process Scheduler", "serviceDescription": "Scheduled and recurring execution of published processes, operated inside the boundary with no external scheduler or orchestration service.", "dateAvailable": "2026-07-17" }, { "serviceName": "Enablement Continuous Monitoring", "serviceDescription": "Native, always-on continuous monitoring operated entirely within the authorization boundary, covering network vulnerability, container/IaC, cloud-posture, and host configuration/CVE assessment, producing OSCAL + FedRAMP CR26 machine-readable compliance evidence. No data is sent to any external scanning or monitoring service.", "dateAvailable": "2026-04-17" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "F1603047866", "useCase": "Hosts the entire offering. EC2, S3, KMS, IAM, Config, Inspector, Security Hub, GuardDuty, CloudTrail, CloudWatch and networking in us-gov-east-1." }, { "fedRampCertifiedThirdPartyInformationResource": "AGENCYAMAZONEW", "useCase": "Outbound notification and one-time-passcode delivery. GovCloud cannot call the commercial SES API from inside the boundary, so delivery egresses to the AWS US East/West authorized environment." } ], "nonCertified": [ { "name": "Amazon Route 53 (commercial account)", "provider": "Amazon Web Services", "useCase": "Authoritative DNS for enablement.cc. Route 53 is not available in GovCloud, so the zone is hosted in the commercial account. DNS carries no customer data." }, { "name": "Vendor definition and threat-intelligence feeds", "provider": "Greenbone Community Feed, ClamAV signature mirrors, Trivy vulnerability database, CISA Known Exploited Vulnerabilities catalog", "useCase": "Scanner, anti-virus and vulnerability-prioritization content updates. Required for detection efficacy; without them the continuous-monitoring capability degrades silently." } ] } }, { "fedramp_id": "FR2628943629", "name": "International Vending Management, Inc.", "cloud_service_provider": "International Vending Management, Inc.", "cloud_service_offering": "SmartHub", "logo": "https://trustcenter.gov.ivminc.com/img/ivm-logo.webp", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-20T17:44:09.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Kompleye", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "IVM SmartHub is an intelligent, centralized access and asset management solution designed to streamline how organizations control, track, and manage access to IVM Smart Solutions. Built for modern workplaces, government agencies, IT teams, and distributed operations, SmartHub provides secure self-service access to connected IVM solutions while maintaining full accountability through automated tracking and chain-of-custody workflows.\n \nWith SmartHub, organizations can reduce manual administrative tasks, improve operational visibility, and provide 24/7 controlled access to IVM Smart Solutions without requiring constant onsite support. The system helps teams manage users, permissions, access activity, inventory visibility, and asset workflows in real time, improving audit readiness and ensuring the right users have access to the right solutions when they need them.\n \nWhether supporting IT service delivery, field operations, onboarding, break/fix replacement, or controlled equipment distribution, IVM SmartHub delivers a smarter, more secure, and more efficient way to manage access across the IVM Smart Solutions ecosystem.", "fedramp_msg": "", "sales_email": "bruceg@ivminc.com", "security_email": "wbender117@ivminc.com", "website": "https://www.ivminc.com/", "uei": "X7PFXJTGKKC4", "small_business": false, "business_categories": [ "Operations Management" ], "service_last_90": [], "all_others": [], "service_acronym": "SH", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trustcenter.gov.ivminc.com/", "repositoryDescription": "IVM FedRAMP Trust Center — Certification Data landing page and access instructions.", "authenticationRequired": false }, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2628943630", "name": "Xfinion Inc.", "cloud_service_provider": "Xfinion Inc.", "cloud_service_offering": "Continuously Aware Realtime Tracking Network (CARTN)", "logo": "https://www.cartn.com/assets/cartn-logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-20T17:44:10.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-Lign", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "CARTN is a cloud-based real-time asset tracking and visibility platform designed to help organizations track, manage, and monitor physical assets across facilities. By combining RFID, NFC & Barcode technology, location tracking, and unified dashboards, CARTN gives teams complete visibility into asset movement, inventory, and operations. The service includes a web portal and mobile application for viewing and managing asset data, a backend service that receives data from multi-modal readers readers in the field, and a secure central data store. All components are hosted in a cloud environment with network-level controls that limit connectivity to authorized services only. Access to the portal and underlying infrastructure is protected by multi-factor authentication.", "fedramp_msg": "", "sales_email": "contact@xfinion.com", "security_email": "security@xfinion.com", "website": "https://www.cartn.com/", "uei": "PL1GB2CMMCK5", "small_business": false, "business_categories": [ "Operations Management" ], "service_last_90": [], "all_others": [], "service_acronym": "CARTN", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.paramify.com/xfinion", "repositoryDescription": "CARTN Trust Center — system security documentation, configuration guidance, and authorization artifacts.", "authenticationRequired": true, "accessRequestInstructions": "https://trust.paramify.com/xfinion/continuously-aware-realtime-tracking-network-cartn/deliverables" }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://www.cartn.com/admin-guide.html", "repositoryDescription": "CARTN administrator guide covering secure configuration of the platform.", "authenticationRequired": false }, "certified_services": [ { "serviceName": "CARTN", "serviceDescription": "CARTN is a cloud-based real-time asset tracking and visibility platform designed to help organizations track, manage, and monitor physical assets across facilities. By combining RFID, NFC & Barcode technology, location tracking, and unified dashboards, CARTN gives teams complete visibility into asset movement, inventory, and operations.", "dateAvailable": "2026-03-14" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "F1209051525", "useCase": "The CARTN FedRAMP SaaS offering is hosted on Microsoft Azure Commercial, which serves as the Infrastructure-as-a-Service (IaaS) platform for the service. Azure provides the underlying compute, storage, and networking resources on which CARTN's web portal, backend data ingestion services, and central data store are deployed, with network-level controls that limit connectivity to authorized services only. CARTN uses Microsoft Entra for identity and access management of the Azure infrastructure and CARTN management plane. Microsoft Entra authenticates and authorizes administrative and privileged access, enforcing multi-factor authentication, conditional access policies, and role-based access controls so that only authorized personnel can access CARTN's cloud environment and supporting resources." }, { "fedRampCertifiedThirdPartyInformationResource": "AGENCYAMAZONEW", "useCase": "The CARTN FedRAMP SaaS offering uses Amazon Web Services (AWS) for supporting infrastructure services. AWS Route 53 provides authoritative DNS resolution for CARTN's public-facing endpoints, routing user and reader traffic to the appropriate CARTN services. AWS CodeBuild, within its FedRAMP-authorized offering, serves as the DevOps build and continuous integration platform used to compile, test, and package CARTN application code as part of the secure software development and deployment pipeline." }, { "fedRampCertifiedThirdPartyInformationResource": "F1512167750", "useCase": "The CARTN FedRAMP SaaS offering uses Okta Identity-as-a-Service (IDaaS) Regulated Cloud to provide user authentication and authorization for the CARTN web portal and mobile application. Okta manages end-user identities, enforces multi-factor authentication, and applies access policies that govern which users may access CARTN and the data and functions available to them, providing centralized and auditable identity management for the service." } ], "nonCertified": [ { "name": "Azure DevOps", "provider": "Microsoft", "website": "https://azure.microsoft.com/en-us/products/devops", "useCase": "Azure DevOps is currently used as DevOps platform with planned retirement in favor of AWS Codebuild on 2026-07-24" } ] } }, { "fedramp_id": "FR2628943632", "name": "Pryme Infil, Inc.", "cloud_service_provider": "Pryme Infil, Inc.", "cloud_service_offering": "Pryme Infil", "logo": "https://cdn.prod.website-files.com/698cfd876cf33430c0e79e6b/69e90cda3b41e585b3212654_pryme%20infil%20logo%20small-01.svg", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-20T17:44:12.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Insight Assurance", "service_model": [ "SaaS" ], "deployment_model": "Government-Only Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Cloud-based command-and-control platform for public safety operations, providing operational planning, real-time team coordination, encrypted messaging, GPS mapping, risk assessments, and after-action documentation for law enforcement and public safety agencies.", "fedramp_msg": "", "sales_email": "sales@prymeinfil.com", "security_email": "security@prymeinfil.com", "website": "https://www.prymeinfil.com/", "uei": "Z363L7GPL7P9", "small_business": false, "business_categories": [ "Law Enforcement", "Operations Management" ], "service_last_90": [], "all_others": [], "service_acronym": "PRYME", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://app.vanta.com/prymeinfil/trust/7tlcmt81p2x555bymou4kr", "repositoryDescription": "Pryme Infil Trust Center — security and compliance documentation for agencies evaluating the offering.", "authenticationRequired": true, "accessRequestInstructions": "Visit the Trust Center and select the document you wish to review. You will be presented with a request form; submit it to request access. Pryme Infil reviews each request and grants access to the requested documents once approved." }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://app.vanta.com/prymeinfil/trust/7tlcmt81p2x555bymou4kr/resources?s=329nbsfnmtgsp5fldc4awl&name=secure-configuration-guide", "repositoryDescription": "Secure Configuration Guide for agency administrators — how to securely access, configure, operate, and decommission privileged accounts, and the security implication of each administrative setting.", "authenticationRequired": true, "accessRequestInstructions": "Access the guide through the Pryme Infil Trust Center: select the document and submit the request form. Pryme Infil reviews each request and grants access once approved." }, "certified_services": [ { "serviceName": "Operational Planning & Coordination", "serviceDescription": "Tactical operation and event planning (SMEAC, course of action, breach and energetic-breach plans, contingencies, deconfliction, control points, briefings, negotiations), structured risk assessment, real-time operational messaging and channels, live and historical GPS mapping of personnel and assets, and in-app, email, and push notifications.", "dateAvailable": "2023-03-10" }, { "serviceName": "After-Action & Incident Reporting", "serviceDescription": "After-action reports, use-of-force and injury reporting, property damage, medical aid, and evidentiary finds.", "dateAvailable": "2023-03-10" }, { "serviceName": "Training & Readiness", "serviceDescription": "Training events, training matrices, qualification tracking and compliance results, and K9 program management (certifications, health records, deployments, training logs).", "dateAvailable": "2023-03-10" }, { "serviceName": "Personnel & Resource Management", "serviceDescription": "Teams, rosters, personnel and applicant profiles, emergency contacts, personas and permissions, and inventory and assignment of equipment and assets (drones, chemical agents, body-worn cameras, firearms, less-lethal weapons, radios, vehicles, GPS devices).", "dateAvailable": "2023-03-10" }, { "serviceName": "Records, Forms & Document Management", "serviceDescription": "Upload, storage, and organization of operational documents, images, and media in per-tenant encrypted storage; custom form templates, captured form data, and agency-configurable data dictionary fields.", "dateAvailable": "2026-04-06" }, { "serviceName": "Dashboards & Analytics", "serviceDescription": "Configurable dashboards and widgets with an analytics layer over tenant operational data.", "dateAvailable": "2025-07-08" } ], "third_party_information_resources": null }, { "fedramp_id": "FR2628943633", "name": "Boundera", "cloud_service_provider": "Boundera", "cloud_service_offering": "Boundera SaaS", "logo": "https://boundera.io/logo-icon-navy.svg", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-20T17:44:13.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Boundera automates FedRAMP 20x compliance from continuous evidence collection to certification package. The platform connects to a provider's cloud accounts and code repositories, collects evidence on an automatic schedule, and persistently validates every Key Security Indicator against the FedRAMP 2026 Consolidated Rules. Every result carries evidence lineage, and every run records score history, so providers can show a trend over time instead of a point-in-time snapshot.\n\nVulnerability Detection and Response (VDR) is built in. Scanner findings and failed KSI assertions become tracked vulnerability records with due dates, dispositions, and remediation clocks aligned to FedRAMP timelines. For technical findings, Boundera's AI agent drafts code and infrastructure fixes as pull requests that engineers review before anything merges.\n\nProviders publish current posture through a branded Trust Center and grant assessors controlled access to KSIs, rules, evidence, vulnerabilities, SDR and other packages. Exports validate against the official FedRAMP 2026 JSON schemas.\n\nBoundera is available as a SaaS service or as a self-deployed installation that runs entirely within a customer's cloud environment. Boundera uses the same production platform internally to pursue its own FedRAMP 20x Class C certification.", "fedramp_msg": "", "sales_email": "sales@boundera.io", "security_email": "security@boundera.io", "website": "https://boundera.io/", "uei": "Z7P7R1CJQB56", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [], "all_others": [], "service_acronym": "B", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://boundera.io/tc/fedramp-trust-center", "repositoryDescription": "FedRAMP Trust Center landing page with access instructions.", "authenticationRequired": false }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://boundera.io/trust/secure-configuration-guide", "repositoryDescription": "Secure Configuration Guide.", "authenticationRequired": false }, "certified_services": [ { "serviceName": "Evidence Workspace", "serviceDescription": "", "dateAvailable": "2026-08-19" }, { "serviceName": "Authorization OS", "serviceDescription": "", "dateAvailable": "2026-08-19" } ], "third_party_information_resources": null }, { "fedramp_id": "FR2629068830", "name": "SunStone Secure, LLC", "cloud_service_provider": "SunStone Secure, LLC", "cloud_service_offering": "SunStone Artemis Platform", "logo": "https://sunstonesecure.com/assets/sunstone-logo-dark-DlKpnxzK.svg", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-22T00:31:10.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "ACME 3PAO Inc.", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "SunStone Artemis Platform is SunStone's Federal Platform running on AWS GovCloud and Commercial AWS. The Apollo Digital Twin Engine can ingest and process OSCAL 1.1.3 models, prototype and extension models, markdown, and other document content to support agency AO and ISSO analysis workflows for CSO inventory, data flows, POA&Ms, incidents, threat models, testing exercises, change artifacts, impact assessments, deviation requests, and NIST 800-53 documentation.", "fedramp_msg": "", "sales_email": "info@sunstonesecure.com", "security_email": "security@sunstonesecure.com", "website": "https://sunstonesecure.com/platform", "uei": "KLL2SDMGF7W9", "small_business": false, "business_categories": [ "Governance, Risk, and Compliance (GRC)", "Cybersecurity & Risk Management" ], "service_last_90": [], "all_others": [], "service_acronym": "Artemis", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://github.com/SunStone-Secure-LLC/artemis-fedramp20x", "repositoryDescription": "Public Trust Center for the SunStone Artemis FedRAMP 20x package. A private GitHub repository exists for agency Trust Center materials.", "authenticationRequired": false, "accessRequestInstructions": "Public materials are available in this repository. For private agency Trust Center access, file a GitHub issue at https://github.com/SunStone-Secure-LLC/artemis-fedramp20x/issues/new?template=access_request.yml or email security@sunstonesecure.com with the requester's name and email address. Issue requests are automatically rejected unless the requester email ends in sunstonesecure.com, .gov, or .mil." }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://github.com/SunStone-Secure-LLC/artemis-fedramp20x/blob/main/SECURE_CONFIGURATION_GUIDE.md", "repositoryDescription": "Placeholder for the Artemis Secure Configuration Guide. The final guide will be published later via a repository release artifact.", "authenticationRequired": false }, "certified_services": [ { "serviceName": "Artemis API Service", "serviceDescription": "Artemis API Service. FIPS-199 security category: Confidentiality Moderate, Integrity Moderate, Availability Moderate. Supporting capabilities include OSCAL model ingestion and processing; markdown and document content ingestion; CSO inventory and data-flow analysis; POA&M analysis and remediation guidance; CSO/CSP incident impact analysis; CSO threat model generation; CSO-specific penetration test and red team exercise generation; Significant Change Request, Security Impact Assessment, Business Impact Assessment, and Deviation Request analysis; NIST 800-53 policy/procedure/plan content support; AWS-native delivery services; FedRAMP ATO'd DAST scanner; and GitHub Enterprise GitOps automation.", "dateAvailable": "2026-08-01" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "AGENCYAMAZONEW", "useCase": "AWS US East/West provides the Commercial AWS environment and AWS-native services used to deliver the CSO." }, { "fedRampCertifiedThirdPartyInformationResource": "F1603047866", "useCase": "AWS GovCloud provides the government cloud environment and AWS-native services used to deliver the CSO." }, { "fedRampCertifiedThirdPartyInformationResource": "F1206081364", "useCase": "Google Workspace provides FedRAMP-authorized workspace services for CSP staff support and business communications related to the CSO." }, { "fedRampCertifiedThirdPartyInformationResource": "FR1812058188", "useCase": "GitHub Enterprise Cloud provides source control and GitOps automation used for CSO change management and deployment workflows." } ], "nonCertified": [] } }, { "fedramp_id": "FR2629068832", "name": "Open Access Technology International, Inc.", "cloud_service_provider": "Open Access Technology International, Inc.", "cloud_service_offering": "OATI Marketplace", "logo": "https://www.oati.com/assets/logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-22T00:31:12.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman and Company, LLC", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "OATI services focus on data / transaction management, warehousing, and retrieval in real-time. These services are delivered via OATI managed Data Centers that are equipped with multiple redundant systems and networks and provide a secure production application environment, with multiple redundant systems and networks.\nOATI provides services to over 700 energy industry organizations in North America. Over 90% of the wholesale power entities in North America use OATI services in their operations. OATI, as a provider of SaaS, reduces the burden and expense for energy industry participants who must deploy mission-critical software that complies with industry regulations and Sarbanes-Oxley requirements (SOX).", "fedramp_msg": "", "sales_email": "Sales@oati.net", "security_email": "FedRAMP@oati.net", "website": "https://www.oati.com/", "uei": "HAL1AXFK8ZB3", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Customer Service", "Data Management", "Research" ], "service_last_90": [], "all_others": [], "service_acronym": "OATI", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://www.oati.com/fedramp/", "repositoryDescription": "COMING SOON! FedRAMP trust center with authorization documents and evidence.", "authenticationRequired": true, "accessRequestInstructions": "Request access by emailing FedRAMP@oati.net." }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://www.oati.com/fedramp/secure-configuration-guide.pdf", "repositoryDescription": "Not Applicable for Rev5 Class A", "authenticationRequired": false }, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2629068833", "name": "Immuta", "cloud_service_provider": "Immuta", "cloud_service_offering": "Immuta Federal", "logo": "https://immuta-public-info-648834167897.s3.us-gov-west-1.amazonaws.com/immuta_logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-22T00:31:14.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Fortreum", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Immuta's SaaS platform, the Immuta Data Security Platform, provides a number of capabilities that enable customers to govern and provision data access, automating how data is delivered to both human and non-human consumers while maintaining continuous compliance. These capabilities are managed through Immuta’s web-based interface and Application Programming Interface (API). Authentication to Immuta’s service is controlled via a variety of Single Sign-on (SSO) and directory systems maintained by the customer or a third party. Management of each customer’s Immuta environment is split into a number of roles so that customers desiring a separation of duties for governance purposes can limit users to specific roles to achieve that goal. User attributes can be defined within the platform’s identity manager or synced from an external identity management system. This functionality is central to implementing attribute-based access and control (ABAC) of data, which is a key capability of the platform. Users allowed to act under the application admin role may register metadata from their cloud data warehouse systems, such as Snowflake, Databricks, Starburst, Redshift, Synapse, and BigQuery, etc., with Immuta. Selected tables from these warehouses then appear as entries in Immuta’s metadata catalog interface, where users can add documentation, discuss the data, and tag tables and columns. Tables, called Data Sources in Immuta, can further be grouped into Immuta Projects, which are a logical collection of Data Sources, users, documentation, and clearly defined purposes. Immuta Projects ensure that customers can use data in accordance with laws and regulations that require traceability to the legitimate reasons that sensitive data is used in the various distinct contexts that permeate each organization. Registered metadata is also analyzed by the platform’s Sensitive Data Discovery functionality, which can determine if data in a column is in one of a number of categories, such as personally identifiable information (PII) or “PII First Name,” that are commonly used to drive data access policies. Analysis of this data occurs completely in the customer’s data platform; no data ever leaves back to Immuta. This information is used to tag data within Immuta. Additionally, for customers who have successfully cataloged data in other systems, this kind of information can be synced to Immuta from a variety of common external catalogs. As users, data, and their attributes are registered with Immuta, users are allowed to act under the Data Owner and Governance roles, and can use Immuta’s natural language policy builder to apply access control policies to the data at the data set and row levels, and minimize access to data through Privacy Enhancing Technologies (PETs). Each Data Owner can manage such policies for the data they own. Users in the Governance role can manage policies at a global level. This global policy capability allows governors to review policies for compliance and set up policies that automatically impact new data and new users as they are added to the system. Based on these policies, Immuta connects to the customer cloud data warehouse and administers those policies into the data platform in question, keeping Immuta out of the data path but still enforcing policy. Users query data in the systems they are already using, but Immuta enforces their access based on the defined policies. Immuta also extends this policy-driven model to AI agents acting on behalf of users. When an agent requests data, Immuta evaluates the request in real time and provisions a temporary, scoped role in the underlying data platform – reflecting only the permissions relevant to that specific task. This access is automatically removed once the task is complete, so no standing privilege persists. Because the agent acts on behalf of a human user rather than as that user, Immuta maintains a dual-identity audit trail showing both the human who delegated the request and the agent that acted. Finally, Immuta provides robust auditing of actions taken within the platform to allow customers to document their data controls and have evidence for compliance purposes. For certain cloud warehouses, such as Databricks or Starburst, this examination extends to queries users perform in the source data systems. For others, Immuta logs and warehouse logs can easily produce an organization’s complete compliance picture when combined in their existing log aggregation and analysis system. This audit trail extends to agent activity, distinguishing human actions, agent actions, and agent-on-behalf-of-user actions.", "fedramp_msg": "", "sales_email": "sales@immuta.com", "security_email": "security-fedramp@immuta.com", "website": "https://www.immuta.com/", "uei": "47-1877648", "small_business": false, "business_categories": [ "Data Management", "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [], "all_others": [], "service_acronym": "IMMUTA", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://vault.immutacloud.us", "repositoryDescription": "Immuta's FedRAMP Trust Center containing security documentation and certification artifacts.", "authenticationRequired": false }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://documentation.immuta.com/latest", "repositoryDescription": "Provider-authored guidance for agency customers on securely configuring Immuta, including recommended settings, integration patterns, and hardening considerations relevant to agency ATO decisions.", "authenticationRequired": false }, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2630354482", "name": "Dispel LLC", "cloud_service_provider": "Dispel LLC", "cloud_service_offering": "Dispel Zero Trust Engine", "logo": "https://api.dispeltrust.com/api/trust-center/public/system/ebaac73a-1660-4e94-a0f5-3fc9e4f05f47/logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-04T20:12:02.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "MegaPlanIT", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Dispel Zero Trust Engine (DZTE) is a cloud-hosted zero trust remote access and privileged access management platform that provides secure, isolated, identity-federated connectivity to operational technology and enterprise environments. It delivers moving-target-defense networking, brokered remote sessions, and least-privilege access for federal and critical-infrastructure customers.", "fedramp_msg": "", "sales_email": "ben@dispel.com", "security_email": "dean.macris@dispel.com", "website": "https://www.dispel.com/", "uei": "CWVGPF8X5X76", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Virtual Private Network (VPN)" ], "service_last_90": [], "all_others": [], "service_acronym": "DZTE", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://dzte-gov.dispeltrust.com/api/trust-center/public/system/ebaac73a-1660-4e94-a0f5-3fc9e4f05f47/landing", "repositoryDescription": "FedRAMP 20x Trust Center", "authenticationRequired": false }, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2630354485", "name": "ComplianceAid INC.", "cloud_service_provider": "ComplianceAid INC.", "cloud_service_offering": "ComplianceAide Government Cloud", "logo": "https://github.com/TheComplianceAide.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-04T20:12:05.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Government-Only Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "ComplianceAide is an evidence-cited, human-approved SaaS compliance copilot for cybersecurity and regulatory readiness. The service connects to customer-approved evidence in governed repositories such as SharePoint; evaluates evidence clarity, recency, traceability, and sufficiency; maps evidence to applicable controls and framework requirements; identifies unsupported, partial, stale, missing, or conflicting evidence; and produces source-linked, review-ready assessments, reports, policies, control narratives, System Security Plan (SSP) support, Security Assessment Report (SAR) support, Plan of Action and Milestones (POA&M) entries, validation matrices, and executive readiness briefs. A named human reviewer approves, revises, rejects, or requests additional evidence before work product is accepted. ComplianceAide supports FedRAMP and NIST SP 800-53 readiness and package-preparation workflows; it does not replace an independent assessor or Authorizing Official, make authorization decisions, or currently represent a FedRAMP-authorized cloud service offering.", "fedramp_msg": "", "sales_email": "JoeC@thecomplianceaide.com", "security_email": "randyb@thecomplianceaide.com", "website": "https://www.thecomplianceaide.com/", "uei": "NWX6B48RJVM4", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Cybersecurity & Risk Management", "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [], "all_others": [], "service_acronym": "CA Gov", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://www.thecomplianceaide.com/trust.html", "repositoryDescription": "Public ComplianceAide Trust & Safety Portal covering platform scope, customer-data boundaries, Microsoft Azure hosting, security controls, framework readiness, incident response, continuity, and responsible disclosure.", "authenticationRequired": false }, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2630354487", "name": "Globality Inc", "cloud_service_provider": "Globality Inc", "cloud_service_offering": "Globality Platform", "logo": "https://www.globality.com/wp-content/uploads/2026/07/Globality-Logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-04T20:12:07.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "No FedRAMP-recognized assessor engaged for this Class A package (self-attestation route); a FedRAMP-recognized independent assessment is planned for the Class C track. The underlying alternative-framework assessment supporting this Class A application is the SOC 2 Type II examination performed by A-LIGN ASSURANCE for the period October 1, 2024 to September 30, 2025.", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Globality's core application, the Globality Platform, is a software as a service ('SaaS') application that is accessible to end users through their web browser. The application can intelligently guide users in creating project briefs ('RFPs / Request for Proposals') or proposals, by leveraging AI and ML to suggest answers, automatically scope projects, analyze user input, and match clients with suitable providers and support the approval process. The Globality Platform enables processing of the following tasks related to the procurement process:\n - Capturing data from clients and providers to automatically build out comprehensive project briefs and proposals\n - Intelligently analyzing user input to identify key components and match clients with providers\n - Providing secure communication channels between clients and matched providers, as well as with Globality support personnel\n - Providing learning systems to help users become self-sufficient on the platform\n - Enabling clients to rate providers using common criteria\n - Authenticating and authorizing users to ensure access is strictly controlled\n - Supporting configurable workflows to streamline procurement processes and make it specific to each client use case\n - Providing approval flows to users, include ways to require nondisclosure agreements ('NDAs') prior to submissions\n - Providing data reporting to end users through a variety of formats\n - Integrating with external systems, including SAP and Oracle\n Projects are tracked throughout the procurement cycle, from initial brief creation to the final awarding of a provider proposal. Access is managed through the web browser, and all user data is encrypted at rest, in transit, and fully protected throughout its data lifecycle.", "fedramp_msg": "", "sales_email": "publicsector@globality.com", "security_email": "infosec@globality.com", "website": "https://www.globality.com/", "uei": "FLDZQLWX4L33", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Finance" ], "service_last_90": [], "all_others": [], "service_acronym": "GLO", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://www.globality.com/security-trust/", "repositoryDescription": "Globality's Trust Center publishes the current certification status, continuous reporting artifacts, SOC 2 Type 2 and ISO/IEC 27001:2022 certificates, sub-processor listing, the shared responsibility model, security policies and procedures", "authenticationRequired": false, "accessRequestInstructions": "Public summary content is available without authentication. 1. Controlled artifacts (assessment reports, secured configuration guidance, penetration test reports and policy documents) can be requested by emailing infosec@globality.com.\n2. Provide requester name, agency or organization, government email address, and the specific artifacts required.\n3. Federal agency personnel and FedRAMP reviewers are granted access without a non-disclosure agreement. All other requesters must execute Globality's standard mutual NDA.\n4. Artifacts are provided within 2 business days" }, "secure_configuration_guidance": null, "certified_services": [ { "serviceName": "Globality Platform", "serviceDescription": "SaaS application that guides users through AI-assisted creation of project briefs and proposals, matches clients with qualified providers, and manages the procurement process from brief creation through award.", "dateAvailable": "2024-10-01" } ], "third_party_information_resources": null }, { "fedramp_id": "FR2630354491", "name": "Freshworks", "cloud_service_provider": "Freshworks", "cloud_service_offering": "Freshworks for Government", "logo": "https://dam.freshworks.com/asset/4a736cb7-c1d8-4fba-8e1a-e4aa65d5ba5e/Freshworks-Logo.webp", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-04T20:12:11.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-Lign", "service_model": [ "SaaS" ], "deployment_model": "Government-Only Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Freshservice, by Freshworks for Government, is the AI-powered, unified service operations platform that is fast to deploy, intuitive to use, and enables every employee to be more productive. Freshservice offers powerful governance and scale, without the operational drag of legacy platforms. This is a critical requirement for federal agencies navigating ever-changing and demanding missions.\nSome highlights of the Freshservice solution include but are not limited to:\nFreshservice ITSM – A comprehensive IT Service Management solution built on ITIL best practices, unifying incident, problem, change, and request management on a single platform\nFreshservice ITOM – IT Operations Management with dependency mapping and signal correlation across systems, enabling proactive incident coordination before employees feel the impact\nFreshservice ITAM – Continuous, agentless hybrid IT discovery, inventory, and dependency mapping delivers instant visibility into hardware, software, and services across data centers, hybrid, and multi-cloud environments, with insights to optimize infrastructure and applications\nFreshservice ESM – Extends service delivery beyond IT to HR, Finance, and other business teams on a common data and workflow model\nFreddy AI – Domain-specialized AI for IT service operations, powering a continually increasing portfolio of AI service workflows built on a decade of experience, workflow, and service domain context across tens of thousands of customers. By unifying agentic and assistive AI, Freddy AI enables zero-touch resolutions, proactive operations, and service intelligence to anticipate and solve problems at the source\nMajor Incident Management, extended with FireHydrant – An end-to-end incident management platform bringing on-call and alerting, chat-native response, and retrospectives into a single workflow, powered by AI and automation to help teams respond more effectively and resolve incidents faster\nFreshservice empowers organizations to:\nDeliver service, operations, and asset management from a single AI-powered platform\nResolve employee requests instantly, routing issues to the right team and context\nCoordinate onboarding and access across IT, HR, and Finance for a smoother employee experience\nGet ahead of major incidents by connecting signals and mapping dependencies across systems\nMaintain accurate asset records through continuous, automated discovery\nDeploy rapidly through no-code setup, intuitive configuration, and built-in best practices, without extensive consulting or custom development\nReduce costs and increase efficiencies with transparent pricing and built-in security, compliance, and governance controls", "fedramp_msg": "", "sales_email": "eric.boserup@freshworks.com", "security_email": "jason.loomis@freshworks.com", "website": "https://freshworks.com/", "uei": "G7ZZLNUUUXV2", "small_business": false, "business_categories": [ "Operations Management", "Artificial Intelligence (AI)", "System Administration" ], "service_last_90": [], "all_others": [], "service_acronym": "FWGOV", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.freshworks.com/product/freshservice/fedramp-certification-package-overview", "repositoryDescription": "This portal provides access to information and documentation related to Freshworks’ security, privacy, and compliance practices. Here you can review certifications, third-party attestations, compliance reports, and other materials commonly requested during vendor security and risk assessments.\n\nFreshworks is committed to protecting customer data and maintaining transparency around our security and compliance posture. The resources available in this Trust Center are intended to support your due diligence process and help you better understand the controls and practices that underpin our services.\n\nDocumentation in this portal is reviewed periodically and updated as appropriate. If you require additional information or have questions regarding Freshworks’ security or compliance programs, please contact our security team for assistance.", "authenticationRequired": false, "accessRequestInstructions": "" }, "secure_configuration_guidance": null, "certified_services": [ { "serviceName": "ITSM", "serviceDescription": "– A comprehensive IT Service Management solution built on ITIL best practices, unifying incident, problem, change, and request management on a single platform", "dateAvailable": "2027-06-01" }, { "serviceName": "ITOM", "serviceDescription": "– IT Operations Management with dependency mapping and signal correlation across systems, enabling proactive incident coordination before employees feel the impact", "dateAvailable": "2027-06-01" }, { "serviceName": " ITAM ", "serviceDescription": "Continuous, agentless hybrid IT discovery, inventory, and dependency mapping delivers instant visibility into hardware, software, and services across data centers, hybrid, and multi-cloud environments, with insights to optimize infrastructure and applications", "dateAvailable": "2027-06-01" }, { "serviceName": "ESM", "serviceDescription": "Extends service delivery beyond IT to HR, Finance, and other business teams on a common data and workflow model", "dateAvailable": "2027-06-01" }, { "serviceName": "Freddy AI ", "serviceDescription": " Domain-specialized AI for IT service operations, powering a continually increasing portfolio of AI service workflows built on a decade of experience, workflow, and service domain context across tens of thousands of customers. By unifying agentic and assistive AI, Freddy AI enables zero-touch resolutions, proactive operations, and service intelligence to anticipate and solve problems at the source", "dateAvailable": "2027-06-01" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "F1603047866", "useCase": "Used to host the solutions" } ], "nonCertified": [] } }, { "fedramp_id": "FR2630354492", "name": "MaintainX", "cloud_service_provider": "MaintainX", "cloud_service_offering": "MaintainX for Government", "logo": "https://mx-gov-public-init.s3.us-gov-west-1.amazonaws.com/default-org-logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-04T20:12:13.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Schellman Compliance, LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "MaintainX is a mobile and cloud based Computerized Maintenance Management System (CMMS) deployed in a FedRAMP Moderate-authorized environment dedicated for U.S. government use. The system provides work order management, preventive maintenance scheduling, asset tracking, standardized procedure management, realtime team communication, and reporting/analytics. All services are delivered through a secure SaaS platform hosted in AWS GovCloud, with backend microservices orchestrated on Amazon EKS. Security measures include container hardening (CIS/STIG baselines), end to end TLS 1.2+ encryption, role based access via a dedicated fed only identity provider with CAC/PIV support, continuous monitoring and anomaly detection, malware scanning for uploaded files, configuration drift detection, and vulnerability scanning. The authorization boundary includes all production services, storage, monitoring and logging pipelines. This deployment is available exclusively to members of the U.S. government community, including federal, state, local, and tribal agencies, as well as authorized federal contractors.", "fedramp_msg": "", "sales_email": "sonny.hashmi@getmaintainx.com", "security_email": "andrew.krumel@getmaintainx.com", "website": "https://www.getmaintainx.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [], "all_others": [], "service_acronym": "CSP", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2630354494", "name": "NextgenID, Inc.", "cloud_service_provider": "NextgenID, Inc.", "cloud_service_offering": "NextgenID User Interface as a Service (UIaaS)", "logo": "https://www.nextgenid.com/wp-content/themes/nextgenid/public/nextgen-logo.svg", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-04T20:12:14.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Government-Only Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "The NextgenID UIaaS is a SaaS offering that resides in the AWS East/West Infrastructure as a Service (IaaS) cloud environment. NextgenID UIaaS provides identity & credential management services utilizing Supervised Remote Identity Proofing (SRIP) services. NextgenID UIaaS provides clients with an identity-proofing solution meeting digital Identity Assurance Level 3 (IAL3), and lower, requirements. Applicants that have a requirement to provide evidence of their identity utilize the NextgenID UIaaS Identity Station and Identity as a Service software to self-enroll while being remotely supervised by a SRIP Agent so that the requirements for IAL3 are met. The NextgenID UIaaS Identity Station captures the applicant's biometrics and identity documentation, including biometrics (fingerprints and photo), documents (driver's license, passport, etc.), and other biographic information to verify the identity of the applicant. After the SRIP Agent has verified the applicant's identity, the NextgenID UIaaS transmits the package to the adjudicating agency.", "fedramp_msg": "", "sales_email": "info@nextgenid.com", "security_email": "jabdeen@nextgenid.com", "website": "https://www.nextgenid.com/", "uei": "MG92A8AJK343", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management" ], "service_last_90": [], "all_others": [], "service_acronym": "UIaaS", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://www.nextgenid.com/trust-center/", "repositoryDescription": "Public TrustCenter information for NextgenID UIaaS.", "authenticationRequired": false }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://www.nextgenid.com/trust-center/#configuration", "repositoryDescription": "User Guide and Baseline Configuration Guides (CIS Benchmarks).", "authenticationRequired": false }, "certified_services": [ { "serviceName": "Identity Station", "serviceDescription": "Self-enrollment stations located in client facilities. The Identity Station captures the applicant's biometrics and identity documentation, including biometrics (fingerprints and photo), documents (driver's license, passport, etc.), and other biographic information to verify the identity of the applicant. No PII is persisted on the Identity Station. Security Category: Moderate.", "dateAvailable": "2023-08-23" }, { "serviceName": "Workflow Application", "serviceDescription": "The workflow software application installed on the Identity Station packages and encrypts the enrollee's data (the enrollment package) for transmission. Security Category: Moderate.", "dateAvailable": "2023-08-23" }, { "serviceName": "Supervised Remote Identity Proofing (SRIP) System", "serviceDescription": "Connects Identity Stations and Trust Agents for remotely supervised enrollment sessions, supporting screen sharing and video conferencing through a built-in WebRTC-based communication infrastructure. Comprises the SRIP Agent Console and the SRIP Management Server. Security Category: Moderate.", "dateAvailable": "2023-08-23" }, { "serviceName": "Command Center", "serviceDescription": "Enterprise-level reporting, monitoring, and deployment management system for the Identity Stations, enabling workflow creation, deployment scheduling, telemetry collection, and infrastructure monitoring. Comprises the Command Center Management Server and the Management Console. Security Category: Moderate.", "dateAvailable": "2023-08-23" }, { "serviceName": "Transactional Gateway", "serviceDescription": "Facilitates the secure exchange of verification information between validation partners via API connections, including address verification, face matching, and pre-enrollment and package submission. Security Category: Moderate.", "dateAvailable": "2023-08-23" } ], "third_party_information_resources": null }, { "fedramp_id": "FR2630354495", "name": "Files.com", "cloud_service_provider": "Files.com", "cloud_service_offering": "Files.com", "logo": "https://filescorp.hosted-by-files.com/Compliance-Hosting/FedRAMP-Logo/files-pinwheel.svg", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-04T20:12:15.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Files.com is a Software-as-a-Service (SaaS) platform with one unified application and API to manage, store, and transfer files across your organization.", "fedramp_msg": "", "sales_email": "sales@files.com", "security_email": "fedramp-notifications@files.com", "website": "https://www.files.com/", "uei": "E41FM27LQUY7", "small_business": false, "business_categories": [ "Data Management", "Storage" ], "service_last_90": [], "all_others": [], "service_acronym": "FILES", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.files.com", "repositoryDescription": "Files.com's FedRAMP-compatible Trust Center, providing access to FedRAMP Certification Data including the Security Decision Record, POA&M summary, and SOC 2 Type II report.", "authenticationRequired": true, "accessRequestInstructions": "Submit the Trust Center access request form with first name, last name, work email, company name, and reason for access (existing customer, prospective customer, or other). Requests are reviewed by the Files.com security team before access is granted. Existing accessors can use the 'Reclaim access' option on the same page." }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://www.files.com/docs/settings-and-usage/security/configuring-filescom-for-maximum-security", "repositoryDescription": "Guidance for securely configuring Files.com, including administrative account settings and security-related options.", "authenticationRequired": false }, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2630447318", "name": "Stoke Space Technologies, Inc.", "cloud_service_provider": "Stoke Space Technologies, Inc.", "cloud_service_offering": "Boltline", "logo": "https://boltline.com/wp-content/themes/boltline/public/favicons/android-chrome-512x512.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-07-20T17:44:15.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Coalfire Systems, Inc.", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Boltline is a multi-tenant manufacturing execution and operations SaaS platform. Federal customers use Boltline to manage engineering-to-production workflows, including parts, bills of materials, inventory, work plans, orders, integrations, attachments, and auditable workflow activity.\n\nBoltline may store, process, or transmit federal customer data including user and organization records, technical product metadata, part and BOM data, work instructions, inventory and order records, files and attachments, connector payloads, integration metadata, security events, and audit logs. Depending on customer use, this data may include controlled unclassified information. Boltline is not intended to store classified information.\n\nThe primary FedRAMP assessment boundary is the Stoke-operated Boltline SaaS production environment in AWS GovCloud (`prod-govcloud`).", "fedramp_msg": "", "sales_email": "marketing@boltline.com", "security_email": "boltline-fedramp@stokespace.com", "website": "https://www.boltline.com/", "uei": "QDQ6V2X12WF1", "small_business": false, "business_categories": [ "Operations Management", "Data Management", "Development Tools", "Collaboration" ], "service_last_90": [], "all_others": [], "service_acronym": "BL", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.paramify.com/stoke/boltline", "repositoryDescription": "Boltline Trust Center on Paramify. Public compliance program summary, controls, interconnections, and deliverables. Restricted authorization package access for agency and FedRAMP reviewers after approval.", "authenticationRequired": true, "accessRequestInstructions": "Visit https://trust.paramify.com/stoke/boltline and select **Request Access**. Include agency or organization name, requested materials, business justification, and FedRAMP Package ID FR2630447318. Stoke reviews access requests within five business days and grants named trust center accounts where appropriate. For urgent FedRAMP communications, email boltline-fedramp@stokespace.com." }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://help.boltline.com/boltline/Organization/Preferences", "repositoryDescription": "Interim customer configuration guidance for organization session timeouts, access restrictions, and admin settings. Full FedRAMP Secure Configuration Guide pending publication.", "authenticationRequired": false }, "certified_services": [ { "serviceName": "Boltline Web UI", "serviceDescription": "Customer-facing web application for manufacturing operations, workflows, inventory, orders, and attachments.", "dateAvailable": "2025-08-14" }, { "serviceName": "Boltline API", "serviceDescription": "GraphQL and REST API, authentication flows, and customer integration endpoints included in the FedRAMP boundary.", "dateAvailable": "2025-08-14" }, { "serviceName": "Organization and user management", "serviceDescription": "Tenant provisioning, user lifecycle, roles, groups, and organization preferences.", "dateAvailable": "2025-08-14" }, { "serviceName": "Parts, BOMs, inventory, work plans, and orders", "serviceDescription": "Core manufacturing execution data and workflow records.", "dateAvailable": "2025-08-14" }, { "serviceName": "Integrations and connector processing", "serviceDescription": "Customer-authorized PLM, ERP, and connector workflows included in the federal boundary.", "dateAvailable": "2025-08-14" }, { "serviceName": "Supporting AWS GovCloud runtime services", "serviceDescription": "Production runtime and platform services in scope for `prod-govcloud`, including ECS, RDS PostgreSQL, S3, Redis, Temporal, Topaz, Cognito, KMS, Secrets Manager, SSM, ALB, WAF, CloudWatch, and related network services.", "dateAvailable": "2025-08-14" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "F1603047866", "useCase": "AWS GovCloud hosts the Boltline production environment, including compute, storage, database, identity, networking, encryption, logging, and email services inherited into the authorization boundary." } ], "nonCertified": [ { "name": "Datadog Gov", "provider": "Datadog, Inc.", "website": "https://www.datadoghq.com/", "useCase": "Central logging, metrics, traces, monitoring, and alerting for production operations." }, { "name": "GitHub Enterprise", "provider": "GitHub, Inc.", "website": "https://github.com/", "useCase": "Source control, CI/CD, deployment automation, and SDLC evidence for production changes." }, { "name": "PagerDuty", "provider": "PagerDuty, Inc.", "website": "https://www.pagerduty.com/", "useCase": "Incident routing and on-call escalation." }, { "name": "JFrog Artifactory", "provider": "JFrog Ltd.", "website": "https://jfrog.com/", "useCase": "Artifact and container image storage and promotion in the deployment path." } ] } }, { "fedramp_id": "FR2631054533", "name": "Portal26, Inc.", "cloud_service_provider": "Portal26, Inc.", "cloud_service_offering": "Portal26 SaaS Platform (GovCloud)", "logo": "https://portal26.ai/wp-content/uploads/2023/06/portal26_logo_art-300x67.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-11T20:17:54.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Government-Only Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Portal26 is an AI visibility, security, governance, and adoption management\nplatform. Portal26 provides a SaaS application for Agentic, Generative and Embedded\nAI governance and adoption, together with AI network gateways for\nreal-time traffic routing and analysis.\n\nThe platform gives agencies detailed visibility into AI\ndeployment, usage, risk, cost, business value, compliance, and overall impact — enabling \na rich understanding where and how AI is used, ensure its security, assess its contribution,\nand ensure alignment with mission objectives, regulations, and policy.\n\nThe FedRAMP offering is deployed in AWS GovCloud (US) for direct use by\nfederal agency customers handling Controlled Unclassified Information\n(CUI). Federal customer data is encrypted in transit and at rest, and\npersonally identifiable information is additionally encrypted at the field\nlevel under a key specific to each customer.", "fedramp_msg": "", "sales_email": "federal@portal26.ai", "security_email": "security@portal26.ai", "website": "https://www.portal26.ai/", "uei": "J383UFKBFXA6", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Cybersecurity & Risk Management", "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [], "all_others": [], "service_acronym": "P26", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.portal26.ai/", "repositoryDescription": "Portal26 Trust Center: public security documentation, current compliance certifications, FedRAMP progress and milestones, and instructions for federal agencies requesting access to controlled certification data.", "authenticationRequired": false }, "secure_configuration_guidance": null, "certified_services": [ { "serviceName": "Generative AI Governance & Adoption Platform", "serviceDescription": "SaaS application providing visibility into Generative AI and Agentic AI deployment, usage, cost, and business impact, with governance policy management and reporting. Security category: Moderate.", "dateAvailable": "2026-08-15" }, { "serviceName": "Generative AI Network Gateway", "serviceDescription": "Real-time traffic routing and analysis for Generative AI network traffic, supporting inline visibility and policy enforcement. Security category: Moderate.", "dateAvailable": "2026-08-15" }, { "serviceName": "Risk Detection & Policy Engine", "serviceDescription": "Pattern, exact-match, and composite detectors that evaluate AI interactions against configured risk policies and generate mitigation events and audit records. Security category: Moderate.", "dateAvailable": "2026-08-15" } ], "third_party_information_resources": null }, { "fedramp_id": "FR2631054539", "name": "Mycroft Technologies Inc", "cloud_service_provider": "Mycroft Technologies Inc", "cloud_service_offering": "Mycroft GRC Platform", "logo": "https://static-assets.mycroft.io/production/org_logos/0b3d4e12-16c0-44d6-b1a9-9b2b86fcbd11.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-11T20:17:59.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "Insight Assurance LLC", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "The Mycroft Platform is a compliance and security management solution designed to help customers build, maintain, and demonstrate compliance with various security frameworks. Key capabilities include: Compliance Automation: task management dashboards and templates for policy documentation, vendor and risk management, and IT asset management. Continuous Monitoring: automated evidence collection and control monitoring. Vulnerability and Threat Monitoring: centralized tracking via integrations with third-party tools and cloud security posture management. Mycroft Agent: installed on customer-employee workstations to provide device management, control monitoring, and Endpoint Detection and Response (EDR). AI Integration: leverages generative AI (large language models) for conversational troubleshooting, adaptive remediation, and context-specific guidance, which requires customer review prior to implementation.", "fedramp_msg": "", "sales_email": "sales@mycroft.io", "security_email": "security@mycroft.io", "website": "https://mycroft.io/", "uei": "", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Governance, Risk, and Compliance (GRC)", "Mobile Device Management (MDM)" ], "service_last_90": [], "all_others": [], "service_acronym": "MYC", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.mycroft.io", "repositoryDescription": "Trust Center containing all the necessary documentation for FedRAMP Certification submission package.", "authenticationRequired": true, "accessRequestInstructions": "Access requests can be submitted by pressing the 'Request Access' button on the top right of the Trust Center." }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://trust.mycroft.io", "repositoryDescription": "Secure Configuration Guidance is currently stored within the Mycroft Trust Center.", "authenticationRequired": true, "accessRequestInstructions": "Access requests can be submitted by pressing the 'Request Access' button on the top right of the Trust Center." }, "certified_services": [ { "serviceName": "Mycroft GRC Platform", "serviceDescription": "Compliance and security management platform providing compliance automation, continuous monitoring, vulnerability and threat monitoring, endpoint management via the Mycroft Agent, and AI-assisted guidance.", "dateAvailable": "2024-06-04" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "FR1811566861", "useCase": "Google Cloud Platform (High Impact, JAB authorized). Primary cloud infrastructure provider hosting the Mycroft GRC Platform." }, { "fedRampCertifiedThirdPartyInformationResource": "FR2004246944", "useCase": "Google Cloud Services (Moderate Impact, JAB authorized). Cloud infrastructure services supporting the Mycroft GRC Platform." }, { "fedRampCertifiedThirdPartyInformationResource": "FR1805121652", "useCase": "Google Workspace (High, Agency authorized). Corporate productivity, email, and collaboration suite." }, { "fedRampCertifiedThirdPartyInformationResource": "FR1916353272", "useCase": "Cloudflare for Government (Moderate, Agency authorized). Content delivery network, DNS, and web application security." }, { "fedRampCertifiedThirdPartyInformationResource": "FR1909141071", "useCase": "GitHub Enterprise Cloud (Moderate, Agency authorized). Source code management and CI/CD for platform development." }, { "fedRampCertifiedThirdPartyInformationResource": "FR1811231846", "useCase": "Slack Enterprise Grid (Moderate, Agency authorized). Internal team communication and collaboration." }, { "fedRampCertifiedThirdPartyInformationResource": "FR1805111100", "useCase": "Salesforce Multi-Tenant (Moderate). Customer relationship management." } ], "nonCertified": [ { "name": "1Password", "provider": "1Password", "website": "https://1password.com", "useCase": "Password manager." }, { "name": "Linear", "provider": "Linear", "website": "https://linear.app", "useCase": "Project management software." }, { "name": "Resend", "provider": "Resend", "website": "https://resend.com", "useCase": "Transactional email provider." }, { "name": "Twilio SendGrid", "provider": "Twilio", "website": "https://sendgrid.com", "useCase": "Transactional email provider." }, { "name": "PropelAuth", "provider": "PropelAuth", "website": "https://propelauth.com", "useCase": "Authentication gateway." }, { "name": "PostHog", "provider": "PostHog", "website": "https://posthog.com", "useCase": "Product analytics." }, { "name": "Mycroft", "provider": "Mycroft Technologies Inc", "website": "https://mycroft.io", "useCase": "Compliance automation and technology stack." }, { "name": "Pylon", "provider": "Pylon", "website": "https://usepylon.com", "useCase": "Customer support ticket management." } ] } }, { "fedramp_id": "FR2631054482", "name": "Concourse Tech Inc.", "cloud_service_provider": "Concourse Tech Inc.", "cloud_service_offering": "Concourse Platform", "logo": "https://www.concoursetech.com/images/concourse-logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-11T20:18:02.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "The Concourse platform is a cloud-based, configurable software platform that enables government agencies, educational institutions, and other public-sector organizations to digitize, manage, and automate their operational workflows. The platform is modular in design, allowing customers to adopt capabilities individually or in combination based on their specific requirements. Concourse delivers its services to federal, state, and local government agencies; K–12 and higher education institutions; public utilities; transit authorities; and similar public-sector organizations.\n\nThe capability categories that make up the platform are listed individually below.", "fedramp_msg": "", "sales_email": "sales@concoursetech.com", "security_email": "security@concoursetech.com", "website": "https://www.concoursetech.com/", "uei": "R1XGH5JT24M1", "small_business": false, "business_categories": [ "Operations Management", "Finance", "Legal & Policy", "Customer Service", "Content Management System (CMS)", "Data Management", "Grant Management", "Human Resources", "Law Enforcement", "Artificial Intelligence (AI)" ], "service_last_90": [], "all_others": [], "service_acronym": "CONCOURSE", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.concoursetech.com/", "repositoryDescription": "Concourse Trust Center — the SOC 2 Type I and Type II reports and fifteen security policies, including access control, cryptography, incident response, risk management, secure development, and third-party management.", "authenticationRequired": true, "accessRequestInstructions": "Open https://trust.concoursetech.com/ and use the access request form on that page. Requests from federal, state, local, and education customers and prospective customers are reviewed by the Concourse security team; documents under NDA are released once the request is approved. Agencies evaluating Concourse for a FedRAMP Certification should note that in the request so it can be routed accordingly. Questions: security@concoursetech.com." }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://www.concoursetech.com/fedramp/secure-configuration", "repositoryDescription": "", "authenticationRequired": false }, "certified_services": [ { "serviceName": "Data Management and Search", "serviceDescription": "Centralized storage, search, and retrieval of structured and unstructured records.", "dateAvailable": "2025-09-01" }, { "serviceName": "Workflow Automation", "serviceDescription": "Configurable multi-step approval workflows, task routing, and automated notifications.", "dateAvailable": "2025-09-01" }, { "serviceName": "Reporting and Analytics", "serviceDescription": "Dashboards, KPI tracking, compliance reporting, and data visualization.", "dateAvailable": "2025-09-01" }, { "serviceName": "Citizen and Public-Facing Portals", "serviceDescription": "Self-service portals for public engagement, applications, service requests, and transparency.", "dateAvailable": "2025-09-01" }, { "serviceName": "Document and Records Management", "serviceDescription": "Upload, storage, indexing, version control, and retrieval of documents and records.", "dateAvailable": "2025-09-01" }, { "serviceName": "Integration Services", "serviceDescription": "APIs and data connectors enabling interoperability with third-party systems.", "dateAvailable": "2025-09-01" }, { "serviceName": "AI-Assisted Capabilities", "serviceDescription": "AI-powered search, content generation, and decision support tools.", "dateAvailable": "2025-09-01" }, { "serviceName": "User and Role Management", "serviceDescription": "Multi-tenant, role-based access control for internal and external users.", "dateAvailable": "2025-09-01" } ], "third_party_information_resources": null }, { "fedramp_id": "FR2631054484", "name": "Anysphere, Inc.", "cloud_service_provider": "Anysphere, Inc.", "cloud_service_offering": "Cursor", "logo": "https://cursor.com/marketing-static/favicon.svg", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-11T20:18:04.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Cursor is an AI-powered software development platform that helps developers and organizations understand, generate, review, and maintain software. The offering includes the Cursor editor, AI-assisted development workflows, and related cloud services. Anysphere, Inc. is pursuing FedRAMP 20x Class A certification for the Cursor platform. Certification has not yet been granted.", "fedramp_msg": "", "sales_email": "revops-pub-sec+sam@anysphere.co", "security_email": "security@cursor.com", "website": "https://cursor.com/", "uei": "YK4LNCE1L847", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Development Tools" ], "service_last_90": [], "all_others": [], "service_acronym": "CURSOR", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.cursor.com", "repositoryDescription": "The Cursor Trust Center provides security and compliance documentation for organizations evaluating the Cursor platform.", "authenticationRequired": true, "accessRequestInstructions": "Visit the Cursor Trust Center, select the resource you want to review, and submit the access request form. Cursor reviews each request and grants access to approved resources." }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://cursor.com/docs/enterprise/security-hardening", "repositoryDescription": "Public guidance for configuring identity, privacy, agent controls, network access, extensions, and monitoring for a secure Cursor deployment.", "authenticationRequired": false }, "certified_services": [ { "serviceName": "Cursor Agent", "serviceDescription": "Cursor Agent completes complex software development tasks, runs terminal commands, edits code, searches codebases, and uses supported tools. The same agent runtime is available through the editor, CLI, and SDK.", "dateAvailable": "2025-06-04" }, { "serviceName": "Cursor Cloud Agents", "serviceDescription": "Cursor Cloud Agents execute software development tasks in isolated cloud development environments and support parallel, long-running, scheduled, and event-driven workflows.", "dateAvailable": "2025-06-04" }, { "serviceName": "Bugbot", "serviceDescription": "Bugbot reviews source code changes in supported source control systems, reports potential defects, and can propose fixes through Cursor agent workflows.", "dateAvailable": "2025-06-04" }, { "serviceName": "Cursor Tab", "serviceDescription": "Cursor Tab provides AI-powered inline autocomplete with multi-line edits, cross-file suggestions, and jump-in-file navigation.", "dateAvailable": "2025-01-13" }, { "serviceName": "Enterprise Administration", "serviceDescription": "Enterprise Administration provides organization and team management, identity and access controls, policy enforcement, usage and spend controls, audit and compliance logging, and administrative APIs.", "dateAvailable": "2025-12-18" } ], "third_party_information_resources": null }, { "fedramp_id": "FR2631154499", "name": "IronWiFi, LLC", "cloud_service_provider": "IronWiFi, LLC", "cloud_service_offering": "IronWiFi Cloud RADIUS and Wi-Fi Authentication Platform", "logo": "https://www.ironwifi.com/ironwifi.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-12T20:50:19.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "IronWiFi is a cloud-native SaaS providing RADIUS authentication (802.1X / EAP-TLS), captive portals, cloud PKI with SCEP certificate enrollment, and Wi-Fi identity threat detection (ITDR). It authenticates users and devices against enterprise identity providers including Microsoft Entra ID (commercial and GCC High), Google Workspace, Okta, and LDAP/Active Directory, across 200+ wireless hardware vendors. The service is vendor-neutral: agencies keep their existing access points and switches while IronWiFi provides the authentication, policy, and monitoring layer.", "fedramp_msg": "", "sales_email": "sales@ironwifi.com", "security_email": "security@ironwifi.com", "website": "https://www.ironwifi.com/", "uei": "TB1XW4HNNUG9", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Network Management" ], "service_last_90": [], "all_others": [], "service_acronym": "IronWiFi", "trust_center": { "repositoryType": [ "Trust Center", "Assessment Reports" ], "url": "https://trust.ironwifi.com/", "repositoryDescription": "IronWiFi Trust Center hosting SOC 2 Type II / SOC 3 reports, security control and subprocessor listings, and FedRAMP Certification Data for this offering.", "authenticationRequired": false, "accessRequestInstructions": "The Trust Center landing page and its Controls and Subprocessors sections are open, no account required. Under Resources, the SOC 3 report, Data Processing Agreement, Terms of Service, and this FedRAMP Public Information package open directly via View. The SOC 2 Type II report is gated: select Request access on that resource; requests are reviewed and access is granted to the requesting email address under a non-disclosure agreement. Questions about a request, or requests from federal agencies that need a different route, go to security@ironwifi.com." }, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2631258113", "name": "TRM Labs, Inc.", "cloud_service_provider": "TRM Labs, Inc.", "cloud_service_offering": "TRM Labs on GovCloud", "logo": "https://trmlabs.com/trm-logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-13T21:01:33.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "TRM Labs provides blockchain intelligence and all-source AI investigation software that helps law enforcement, national security agencies, financial institutions, and cryptocurrency businesses detect, investigate, and disrupt fraud and financial crime. Delivered as multi-tenant Software as a Service from AWS GovCloud under the cloud service offering TRM Labs on GovCloud, the platform combines on-chain investigation with all-source intelligence. Investigators can trace cryptocurrency flows across over 66 blockchains and more than 1.9 billion assets in a single multi-chain graph with glass-box attribution, and resolve a lead - a name, an account, an address - across connected sources including corporate registries, sanctions data, and the dark web. All capabilities share a common identity and access management layer, workspace-based multi-tenancy, and a unified data plane within the GovCloud authorization boundary.", "fedramp_msg": "", "sales_email": "fedramp-sales@trmlabs.com", "security_email": "fedramp-security@trmlabs.com", "website": "https://www.trmlabs.com/", "uei": "EW97MHKPD1P8", "small_business": false, "business_categories": [ "Cybersecurity & Risk Management", "Law Enforcement", "Analytics" ], "service_last_90": [], "all_others": [], "service_acronym": "TRM", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.trmlabs.com/", "repositoryDescription": "TRM's FedRAMP Trust Center — the complete and definitive source for FedRAMP Certification Data for TRM Labs on GovCloud, following the FedRAMP Certification Data Sharing rules.", "authenticationRequired": false, "accessRequestInstructions": "Public FedRAMP service information and this machine-readable Certification Package Overview are available without authentication. Additional FedRAMP Certification Data is available to agency customers and other necessary parties by requesting access from the Trust Center landing page, which prompts for a work email address and routes the request to TRM for approval." }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://support.trmlabs.com/en/articles/16164875-trm-labs-govcloud-secure-configuration-guide", "repositoryDescription": "The TRM Labs GovCloud Secure Configuration Guide — secure configuration guidance for operating TRM Labs on GovCloud in the FedRAMP-recommended configuration in AWS GovCloud (us-gov-west-1). This URL is the guide's landing page; because the offering's products use different role models, it routes to a per-product edition for each. Each edition documents how to securely access, configure, operate, and decommission the top-level administrative account for a customer organization, the security-relevant settings only that account can operate and their security implications, the settings operable by privileged accounts, the recommended secure defaults, and the release history of those defaults.", "authenticationRequired": true, "accessRequestInstructions": "Reading the guide on the TRM Labs Help Center (https://support.trmlabs.com) requires a sign-in. Any signed-in user of the product may read it: beyond the sign-in itself, no request, licence, non-disclosure agreement, or approval step applies, and TRM applies no per-requester sharing decision to this guide. TRM keeps the guide behind sign-in deliberately — it documents the administrative configuration of a commercial offering in operational detail, and every intended reader is a signed-in agency customer administrator. An agency that is evaluating the offering and does not yet hold an account, an assessor who needs to review the guide, or any reader who needs it in another format or pinned to a specific date for their own records, may request it from fedramp-security@trmlabs.com; TRM supplies it on request." }, "certified_services": [ { "serviceName": "TRM Labs on GovCloud", "serviceDescription": "The certified offering is TRM Labs on GovCloud as a single bundle: blockchain intelligence and all-source AI investigation software, delivered as multi-tenant Software as a Service from AWS GovCloud and accessible through a secure web application and the TRM API. Its capabilities share one identity and access management layer, workspace-based multi-tenancy, and a unified data plane within the GovCloud authorization boundary.", "dateAvailable": "2026-10-31" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "F1603047866", "useCase": "AWS GovCloud (US) — FedRAMP-authorized foundational IaaS (Rev5, High baseline; listed on the FedRAMP Marketplace as Class D (High), Agency path) per package F1603047866, hosting the entire TRM Labs on GovCloud trust boundary in us-gov-west-1; inherit IaaS/PaaS controls via the AWS Customer Responsibility Matrix. Inheritance is a claim TRM verifies against the AWS CRM, not a default." } ], "nonCertified": [] } }, { "fedramp_id": "FR2631258122", "name": "Cahill Swift, LLC", "cloud_service_provider": "Cahill Swift, LLC", "cloud_service_offering": "Cahill Swift Compliance Management Platform", "logo": "https://static.wixstatic.com/media/d20771_5c36cb323cfe4adc98a74712d918dfc2.gif", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-13T05:44:25.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "The Cahill Swift Compliance Management Platform is a cloud-based offering supporting federal transportation safety compliance programs. The platform operates within a single FedRAMP 20x Class C certification boundary with a unified continuous-monitoring and automated evidence program. The initial service, Rallidocs, will be used by Federal Railroad Administration personnel to review and approve railroad industry drug and alcohol testing policies under 49 CFR Part 219, with structured review workflows and tamper-evident approval records. Additional compliance management services will be added to the offering through the FedRAMP change management process as they become production-ready, and will appear on the public service list when included in the Minimum Assessment Scope.", "fedramp_msg": "", "sales_email": "jlofgren@cahillswift.com", "security_email": "security@cahillswift.com", "website": "https://cahillswift.com/", "uei": "R5K8SX8G5JE7", "small_business": false, "business_categories": [ "Governance, Risk, and Compliance (GRC)" ], "service_last_90": [], "all_others": [], "service_acronym": "CSCMP", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://cahillswift.com/trust", "repositoryDescription": "Trust center landing page providing access to FedRAMP certification data, KSI validation reports, security policies, and quarterly Initial Implementation Phase progress updates.", "authenticationRequired": false, "accessRequestInstructions": "Public information is available directly at the URL. Access to non-public FedRAMP Certification Data may be requested by contacting security@cahillswift.com; agency requests are provisioned without interruption." }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://cahillswift.com/trust/configuration", "repositoryDescription": "Secure configuration guidance for the Cahill Swift Compliance Management Platform, including administrative account setup, operation, and decommissioning.", "authenticationRequired": false, "accessRequestInstructions": "Publicly available at the URL; no access request required." }, "certified_services": [ { "serviceName": "Rallidocs — Policy Submission Portal", "serviceDescription": "Intake of industry drug & alcohol testing policy documents for FRA review. Security category: Low confidentiality / Low integrity / Low availability (no PII).", "dateAvailable": "2026-08-31" }, { "serviceName": "Rallidocs — Review & Approval Workflow", "serviceDescription": "Structured FRA reviewer workflow with tamper-evident approval records. Security category: Low confidentiality / Low integrity / Low availability (no PII).", "dateAvailable": "2026-08-31" }, { "serviceName": "Rallidocs — Document Repository", "serviceDescription": "Encrypted storage of policy documents and approval history. Security category: Low confidentiality / Low integrity / Low availability (no PII).", "dateAvailable": "2026-08-31" } ], "third_party_information_resources": null }, { "fedramp_id": "FR2631258125", "name": "Certivo, Inc.", "cloud_service_provider": "Certivo, Inc.", "cloud_service_offering": "Certivo Compliance Platform", "logo": "https://framerusercontent.com/images/S9sGny65rueqYeyz6Z5NwHE26M.png?width=3840&height=696", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-13T21:01:46.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Government-Only Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Certivo is an AI-powered product and supply chain compliance platform for manufacturers and regulated industries. It replaces manual, spreadsheet-driven compliance work with a continuously maintained evidence base that links every supplier document to the parts, products, and requirements it supports.", "fedramp_msg": "", "sales_email": "sales@certivo.com", "security_email": "security@certivo.com", "website": "https://www.certivo.com/", "uei": "E457B1U8K8P5", "small_business": false, "business_categories": [ "Governance, Risk, and Compliance (GRC)", "Artificial Intelligence (AI)", "Data Management", "Operations Management", "Analytics" ], "service_last_90": [], "all_others": [], "service_acronym": "Certivo", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust-gov.certivo.com/", "repositoryDescription": "Public Trust Center containing security, compliance, and authorization information for the Certivo Compliance Platform.", "authenticationRequired": false }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://trust-gov.certivo.com/doc/trust?rid=6a79ef4b65901ae39a435eee&r=onesr9vjdb2nj6k01q6n2&download=true", "repositoryDescription": "Secure configuration guidance for the Certivo Compliance Platform.", "authenticationRequired": false }, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2631258127", "name": "NEXGEN Asset Management", "cloud_service_provider": "NEXGEN Asset Management", "cloud_service_offering": "NEXGEN Asset Management", "logo": "https://www.nexgenam.com/wp-content/uploads/2021/05/NEXGEN_Brandmark_Horizontal_SteelGrey.svg", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-13T21:01:47.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "A-lign", "service_model": [ "SaaS" ], "deployment_model": "Government-Only Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "NEXGEN Asset Management (NEXGEN AM) is a cloud-hosted Enterprise Asset Management (EAM) and Computerized Maintenance Management System (CMMS) delivered as Software as a Service (SaaS). It provides real-time inventory tracking, asset lifecycle management, predictive maintenance workflows, analytics and reporting, and secure mobile field access for technicians through integrated web and mobile interfaces. Federal agencies use NEXGEN AM to manage government-owned physical assets, facilities, vehicles, equipment, and critical infrastructure. Key capabilities support shifting from reactive to predictive maintenance, minimizing downtime, optimizing resource allocation and capital planning, reducing costs, and enabling data-driven decisions.", "fedramp_msg": "", "sales_email": "jklegseth@nexgenam.com", "security_email": "gnaik@nexgenam.com", "website": "https://www.nexgenam.com/", "uei": "", "small_business": false, "business_categories": [ "Operations Management" ], "service_last_90": [], "all_others": [], "service_acronym": "NEXGEN AM", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://www.nexgenam.com/fedrampcert/", "repositoryDescription": "Public FedRAMP progress, security information, and certification package overview materials for NEXGEN Asset Management (NEXGEN AM).", "authenticationRequired": false }, "secure_configuration_guidance": null, "certified_services": [ { "serviceName": "NEXGEN Asset Management", "serviceDescription": "Core Enterprise Asset Management (EAM) and Computerized Maintenance Management System (CMMS) capabilities including real-time inventory tracking, asset lifecycle management, predictive maintenance workflows, analytics and reporting, and secure mobile field access. Included in the FedRAMP Minimum Assessment Scope.", "dateAvailable": "2026-01-01" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "F1603087869", "useCase": "Azure Government IaaS and PaaS services including virtual networking, compute, storage, database services, identity services, security monitoring (Microsoft Sentinel, Defender for Cloud, Azure Monitor), key management (Key Vault), and supporting platform services." }, { "fedRampCertifiedThirdPartyInformationResource": "FR1811073663A", "useCase": "Esri ArcGIS Online (AGO) for geospatial capabilities." }, { "fedRampCertifiedThirdPartyInformationResource": "FR1805751477", "useCase": "Google Cloud Platform products and underlying infrastructure." }, { "fedRampCertifiedThirdPartyInformationResource": "FR2023864279", "useCase": "DataDog for Government for monitoring and observability." } ], "nonCertified": [] } }, { "fedramp_id": "FR2631258132", "name": "Harness, Inc.", "cloud_service_provider": "Harness, Inc.", "cloud_service_offering": "Harness for Government", "logo": "https://cdn.prod.website-files.com/6222ca42ea87e1bd1aa1d10c/67c1e03a066112554425a47b_harness-logo%20white-p-500.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-13T21:01:53.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Harness.io Software-as-a-Service (SaaS) is a fully managed, cloud-native software delivery platform that provides continuous integration, continuous delivery, security testing, and related DevSecOps capabilities using a cloud computing environment. It enables its customers to focus on building and shipping software instead of managing the underlying infrastructure supporting their delivery pipelines. It is available to public, federal, state, local and tribal governments, as well as research institutions, federal contractors, and government contractors.\n\nThe Harness offering is comprised of two components — the SaaS Control Plane and the customer-deployed Harness Agents. The Control Plane is hosted in Amazon Web Services (AWS) GovCloud on Amazon Elastic Kubernetes Service, and is used by customers to configure, orchestrate, and monitor their pipelines and workloads. Customers deploy one or more Agents inside their own environment — such as their AWS GovCloud tenancy — to execute pipeline operations. The Agents initiate a single outbound HTTPS connection to the Harness Control Plane to receive task instructions; no inbound connection from the Control Plane into the customer's environment is required. All customer source code (unless using Harness Code), artifacts, and workload data remain within the customer's environment where the Agents operate, and no such customer data is transmitted to or retained in the Control Plane.", "fedramp_msg": "", "sales_email": "sales@harness.io", "security_email": "security@harnessgov.com", "website": "https://www.harness.io/", "uei": "", "small_business": false, "business_categories": [ "Collaboration", "Cybersecurity & Risk Management", "Development Tools" ], "service_last_90": [], "all_others": [], "service_acronym": "HARG", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.paramify.com/harness/harness-for-government", "repositoryDescription": "Harness Federal Trust Center", "authenticationRequired": true, "accessRequestInstructions": "https://support.paramify.com/hc/en-us/articles/48690571994003-Trust-Center-Deliverables-in-Paramify-Cloud" }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://developer.harness.io/", "repositoryDescription": "Harness Platform", "authenticationRequired": false }, "certified_services": [ { "serviceName": "Harness for Government", "serviceDescription": "Software Delivery Platform", "dateAvailable": "2026-08-03" }, { "serviceName": "Harness CI (Continuous Integration)", "serviceDescription": "Continuous Integration", "dateAvailable": "2026-08-03" }, { "serviceName": "Harness CD (Continuous Delivery)", "serviceDescription": "Continuous Delivery & GitOps", "dateAvailable": "2026-08-03" }, { "serviceName": "Harness STO (Security Testing Orchestration)", "serviceDescription": "Security Testing Orchestration", "dateAvailable": "2026-08-03" }, { "serviceName": "Harness IaCM (Infrastructure as Code Management)", "serviceDescription": "Infrastructure as Code Management", "dateAvailable": "2026-08-03" }, { "serviceName": "Harness CODE (Code Repository)", "serviceDescription": "Code Repository", "dateAvailable": "2026-08-03" }, { "serviceName": "Harness SCS (Supply Chain Security)", "serviceDescription": "Supply Chain Security", "dateAvailable": "2026-08-03" }, { "serviceName": "Harness DB DevOps (DBD)", "serviceDescription": "Database DevOps", "dateAvailable": "2026-08-03" }, { "serviceName": "Harness Resilience Testing", "serviceDescription": "Resilience Testing", "dateAvailable": "2026-08-03" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "F1603047866", "useCase": "Cloud Hosting Provider" } ], "nonCertified": [ { "name": "Zendesk", "provider": "Zendesk", "useCase": "Support Tickets" }, { "name": "Okta Workforce", "provider": "Okta", "useCase": "IDP" }, { "name": "Google SecOps", "provider": "Google", "useCase": "SIEM" }, { "name": "Google Workspace", "provider": "Google", "useCase": "E-mail and Collaboration" } ] } }, { "fedramp_id": "FR2631258135", "name": "Specset", "cloud_service_provider": "Specset", "cloud_service_offering": "Specset Cloud Platform", "logo": "https://specset.com/fedramp/specset-logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-13T21:01:55.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Specset is the AI platform for high-stakes construction. The Specset Cloud Platform automates technical review across Project Manuals, Drawing Sheets, and Shop Drawings — including submittal review against project specifications, UFGS compliance checking, design review automation, and asset management logic — flagging potential issues and delivering fast, accurate answers across project documents in seconds.", "fedramp_msg": "", "sales_email": "sales@specset.com", "security_email": "security@specset.com", "website": "https://specset.com/", "uei": "S7RZBSZXNBD5", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Construction" ], "service_last_90": [], "all_others": [], "service_acronym": "SCP", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.specset.com", "repositoryDescription": "Specset Trust Center. The landing page, compliance posture summary, and FedRAMP milestone information are publicly viewable without authentication.", "authenticationRequired": true, "accessRequestInstructions": "The Trust Center landing page at https://trust.specset.com is publicly accessible with no login. Certain detailed compliance documents require submitting an access request directly on the page; requests are reviewed promptly by the Specset security team (security@specset.com). All information required by FedRAMP CDS-CSO-PUB is published without authentication at https://specset.com/fedramp/ and https://specset.com/fedramp/fedramp.json." }, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2631354503", "name": "MIS Sciences Corporation", "cloud_service_provider": "MIS Sciences Corporation", "cloud_service_offering": "GovPoint Cloud Services", "logo": "https://www.fedramp.gov/assets/img/logos/CSP_logos/MIS%20Sciences%20Logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-14T20:55:23.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "First Information Technology Services, Inc.", "service_model": [ "IaaS", "PaaS", "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "GCS is a FedRAMP Moderate (previously JAB P-ATO authorized) IaaS/PaaS/SaaS platform offering scalable compute, private cloud, and SaaS solutions to federal agencies. Customers may deploy on shared infrastructure, provision a dedicated private cloud, or co-locate their own hardware within the GCS authorization boundary.\n\nOverview of Authorized Services\n\nCompute (IaaS)\nConfigurable virtual machines balancing CPU, RAM, and high-I/O flash storage; available as pre-hardened images or custom builds.\n\nPrivate FedRAMP Cloud (IaaS)\nDedicated, tenant-isolated compute, networking, and storage fully within the GCS boundary for agencies requiring resource segregation.\n\nBring Your Own Hardware\nCustomer-owned hardware co-located within the GCS boundary, leveraging inherited GCS controls for specialized appliances and equipment.\n\nVirtual Desktop Services (DaaS)\nBrowser-accessible virtual desktops hosted within the GCS boundary, providing agency users with secure, managed access to applications and data from any endpoint without local installation requirements.\n\nAuthorization as a Service (AaaS)\nEnables SaaS providers to inherit GCS controls and deliver FedRAMP-authorized products under the GCS P-ATO.\n\nCalabrio Workforce Engagement Management (SaaS)\nContact center workforce optimization suite covering scheduling, agent performance analytics, and business intelligence.\n\nSharetru Federal (SaaS)\nManaged File Transfer as a Service (MFTaaS) supporting CMMC, ITAR, HIPAA, and PCI-DSS regulated data exchange.\n\nSayari Risk Intelligence (SaaS)\nSupply chain and counterparty risk platform aggregating corporate ownership and trade data from 250+ jurisdictions.\n\nGRID20/20 ATI (SaaS/IoT)\nCloud-based distribution grid and environmental monitoring platform covering wildfire detection, auto-alerting, and AI-enhanced analytics. Field sensor devices operate outside the authorization boundary and feed data into the GCS-hosted ATI application, which is fully within scope.\n\nIGS Bridge (SaaS)\nSecure, platform-agnostic integration suite connecting enterprise and legacy systems (Bridge Connect), coordinating clinical decision support (Bridge Care), standardizing data relationships (Bridge Map), and delivering real-time operational analytics (Bridge Monitor).\n\nAutomated Background Investigation System (ABIS)\nABIS is a personnel security case management system that tracks background investigations for Federal Employees, Contractors, Volunteers, and Interns from initiation through final adjudication. The system allows cases to be checked for transfer of trust, eApp initiation, and to conduct all pre-hire checks, and to make pre-hire and final adjudication determinations. The system also processes security clearances, SEAD-3 self-reporting, Detailee cases, and other types of cases. Interfaces with DCSA's eDelivery, CVS, OF79a Adjudications, and other interfaces are included in the system. The system fully implements Continuous Vetting (CV) and RapBack enrollment/unenrollment and processing of alerts received from CV/Rapback", "fedramp_msg": "", "sales_email": "jamie@mis-sciences.com", "security_email": "security@mis-sciences.com", "website": "http://www.mis-sciences.com/", "uei": "XGTZMLVEG7R9", "small_business": false, "business_categories": [ "Data Management", "Development Tools", "Storage", "Virtual Private Network (VPN)" ], "service_last_90": [], "all_others": [], "service_acronym": "GCS", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://missc.sharepoint.com/sites/GovPointTrustCenter", "repositoryDescription": "GovPoint Documents, Compliance Scans, SSP, etc", "authenticationRequired": true, "accessRequestInstructions": "For access: email security@mis-sciences.com\nThis will allow user access going forward without re-requesting access\n" }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://missc.sharepoint.com/:f:/s/GovPoint/IgCY9x0kBCzmSakZE-m9uOnFAULJ0WAwfd-58fjFC-pqDIY?e=83FRab", "repositoryDescription": "Recommended Secure Configuratiuon Guides", "authenticationRequired": true, "accessRequestInstructions": "For access: email security@mis-sciences.com\n" }, "certified_services": [ { "serviceName": "IGS Bridge Care", "serviceDescription": "Coordinates clinical decision support as part of the IGS Bridge integration suite. TODO: confirm/expand description.", "dateAvailable": "2026-07-01" }, { "serviceName": "IGS Bridge Connect", "serviceDescription": "Connects enterprise and legacy systems as part of the IGS Bridge integration suite. TODO: confirm/expand description.", "dateAvailable": "2026-07-01" }, { "serviceName": "Calabrio Workforce Engagement Management", "serviceDescription": "Contact center workforce optimization suite covering scheduling, agent performance analytics, and business intelligence.", "dateAvailable": "2024-09-10" }, { "serviceName": "GRID20/20 - Advanced Transformer Infrastructure (ATI) - Sensor Devices", "serviceDescription": "TODO: confirm description — how should the sensor device component specifically be scoped/described for the certification package.", "dateAvailable": "2026-03-03" }, { "serviceName": "IGS Bridge Map", "serviceDescription": "Standardizes data relationships as part of the IGS Bridge integration suite. TODO: confirm/expand description.", "dateAvailable": "2026-07-01" }, { "serviceName": "IGS Bridge Monitor", "serviceDescription": "Delivers real-time operational analytics as part of the IGS Bridge integration suite. TODO: confirm/expand description.", "dateAvailable": "2026-07-01" }, { "serviceName": "Private FedRAMP Cloud", "serviceDescription": "Dedicated, tenant-isolated compute, networking, and storage fully within the GCS boundary for agencies requiring resource segregation.", "dateAvailable": "2025-01-01" }, { "serviceName": "Sayari Counterparty and Supply Chain Risk Intelligence", "serviceDescription": "Supply chain and counterparty risk platform aggregating corporate ownership and trade data from 250+ jurisdictions.", "dateAvailable": "2025-06-03" }, { "serviceName": "Sharetru Federal", "serviceDescription": "Managed File Transfer as a Service (MFTaaS) supporting CMMC, ITAR, HIPAA, and PCI-DSS regulated data exchange.", "dateAvailable": "2026-03-01" }, { "serviceName": "Virtual Desktop Services", "serviceDescription": "Browser-accessible virtual desktops hosted within the GCS boundary, providing agency users with secure, managed access to applications and data from any endpoint without local installation requirements.", "dateAvailable": "2025-01-01" }, { "serviceName": "Automated Background Investigation System (ABIS)", "serviceDescription": "ABIS is a personnel security case management system that tracks background investigations for Federal Employees, Contractors, Volunteers, and Interns from initiation through final adjudication.", "dateAvailable": "2026-04-01" } ], "third_party_information_resources": null }, { "fedramp_id": "FR2631654537", "name": "Wisedocs USA Inc.", "cloud_service_provider": "Wisedocs USA Inc.", "cloud_service_offering": "Wisedocs for Government", "logo": "https://static-assets.mycroft.io/production/org_logos/e918d50f-f8ea-4f2c-a4d6-c1fad5a7222f.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-17T20:58:57.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Public Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "The Wisedocs Platform is a cloud-based, AI-powered document processing system designed to help insurance companies, independent medical evaluation firms, and legal entities process medical claims. The Platform uses optical character recognition to process unstructured medical documents such as handwritten clinician notes, medical briefs and records, and discharge summaries, and creates fully searchable records. It organizes, indexes, and identifies duplicate documents to streamline the review, documentation, and management of the medical record life cycle, with embedded machine learning supporting document processing workflows via foundational model providers including AWS Bedrock, Google Cloud Vertex AI, and Azure OpenAI Service. The Platform is hosted on AWS cloud infrastructure and made available to customers through a web application format.", "fedramp_msg": "", "sales_email": "sales@wisedocs.com", "security_email": "security@wisedocs.com", "website": "https://wisedocs.ai/", "uei": "", "small_business": false, "business_categories": [ "Data Management", "Artificial Intelligence (AI)", "Health & Wellness", "Legal & Policy" ], "service_last_90": [], "all_others": [], "service_acronym": "WD", "trust_center": { "repositoryType": [ "Trust Center", "Assessment Reports" ], "url": "https://trust.mycroft.io/wisedocs", "repositoryDescription": "Trust Center containing all the necessary documentation for FedRAMP Certification submission package.", "authenticationRequired": true, "accessRequestInstructions": "Access requests can be submitted by pressing the 'Request Access' button on the top right of the Trust Center." }, "secure_configuration_guidance": null, "certified_services": [ { "serviceName": "Wisedocs for Government", "serviceDescription": "AI-powered medical document processing platform providing OCR of unstructured medical records, document organization and indexing, duplicate identification, and searchable medical record life cycle management for insurance, independent medical evaluation, and legal entities.", "dateAvailable": "2026-03-24" } ], "third_party_information_resources": { "certified": [ { "fedRampCertifiedThirdPartyInformationResource": "AGENCYAMAZONEW", "useCase": "Amazon Web Services (AWS US East/West). Primary cloud infrastructure provider hosting the Wisedocs Platform." }, { "fedRampCertifiedThirdPartyInformationResource": "F1209051525", "useCase": "Microsoft Azure foundational model provider via Azure OpenAI Service." }, { "fedRampCertifiedThirdPartyInformationResource": "FR1805751477", "useCase": "Google Cloud Vertex AI, compute and foundational model provider." }, { "fedRampCertifiedThirdPartyInformationResource": "FR1809360201", "useCase": "Snowflake data storage and analytics platform." } ], "nonCertified": [ { "name": "Claude", "provider": "Anthropic", "website": "https://www.anthropic.com", "useCase": "AI models. " }, { "name": "Microsoft 365", "provider": "Microsoft", "website": "https://www.microsoft.com/microsoft-365", "useCase": "Email, file sharing, messaging, and productivity tools." }, { "name": "Bitbucket", "provider": "Atlassian", "website": "https://bitbucket.org", "useCase": "Source code repository and CI/CD." }, { "name": "Jira", "provider": "Atlassian", "website": "https://www.atlassian.com/software/jira", "useCase": "Project management and issue tracking, including tracking of security deficiencies and remediation." }, { "name": "Sentry", "provider": "Functional Software, Inc.", "website": "https://sentry.io", "useCase": "Application monitoring and error tracking." } ] } }, { "fedramp_id": "FR2631747315", "name": "Sustainment Technologies Inc.", "cloud_service_provider": "Sustainment Technologies Inc.", "cloud_service_offering": "Sustainment Digital Manufacturing Hub", "logo": "https://cdn.prod.website-files.com/67082abf9680c4d0489861fb/6875b3a87bb05de07b4cd3d2_SUST-Logo-Full_White%20(1).png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-18T18:34:35.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Government-Only Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Sustainment Digital Manufacturing Hub (DMH) is a cloud-based platform that provides advanced manufacturing capabilities, including AI-driven analytics, operations management, and data management solutions for government agencies.", "fedramp_msg": "", "sales_email": "sales@sustainment.com", "security_email": "zachary.tschirhart@sustainment.com", "website": "https://sustainment.com/", "uei": "FYX9J759QPE4", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Operations Management", "Analytics", "Data Management" ], "service_last_90": [], "all_others": [], "service_acronym": "DMH", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trustcenter.sustainment.com/", "repositoryDescription": "Sustainment Technologies Inc. public facing trust center.", "authenticationRequired": false, "accessRequestInstructions": "" }, "secure_configuration_guidance": { "repositoryType": [ "Secure Configuration Guidance" ], "url": "https://fedramp-20x-2d57df.gitlab.io/sdr.html", "repositoryDescription": "Sustainment Technologies Inc. private trust center which currently houses the Secure Configuration Guidance for Sustainment Digital Manufacturing Hub (DMH).", "authenticationRequired": true, "accessRequestInstructions": "Access to Secure Configuration Guidance is currently controlled, contact security@sustainment.com for access." }, "certified_services": [ { "serviceName": "SOC 2 Type II", "serviceDescription": "SOC 2 Type II report for Sustainment Technologies Inc. platform.", "dateAvailable": "2026-02-15" } ], "third_party_information_resources": { "certified": [], "nonCertified": [] } }, { "fedramp_id": "FR2631747321", "name": "Specset", "cloud_service_provider": "Specset", "cloud_service_offering": "Specset Cloud Platform", "logo": "https://specset.com/fedramp/specset-logo.png", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-18T18:34:38.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Government Community Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Specset is the AI platform for high-stakes construction. The Specset Cloud Platform automates technical review across Project Manuals, Drawing Sheets, and Shop Drawings — including submittal review against project specifications, UFGS compliance checking, design review automation, and asset management logic — flagging potential issues and delivering fast, accurate answers across project documents in seconds.", "fedramp_msg": "", "sales_email": "sales@specset.com", "security_email": "security@specset.com", "website": "https://specset.com/", "uei": "S7RZBSZXNBD5", "small_business": false, "business_categories": [ "Artificial Intelligence (AI)", "Construction" ], "service_last_90": [], "all_others": [], "service_acronym": "SCP", "trust_center": { "repositoryType": [ "Trust Center" ], "url": "https://trust.specset.com", "repositoryDescription": "Specset Trust Center. The landing page, compliance posture summary, and FedRAMP milestone information are publicly viewable without authentication.", "authenticationRequired": true, "accessRequestInstructions": "The Trust Center landing page at https://trust.specset.com is publicly accessible with no login. Certain detailed compliance documents require submitting an access request directly on the page; requests are reviewed promptly by the Specset security team (security@specset.com). All information required by FedRAMP CDS-CSO-PUB is published without authentication at https://specset.com/fedramp/ and https://specset.com/fedramp/fedramp.json." }, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null }, { "fedramp_id": "FR2631747327", "name": "Geographic Solutions Inc.", "cloud_service_provider": "Geographic Solutions Inc.", "cloud_service_offering": "Virtual One Stop", "logo": "https://www.geographicsolutions.com/Portals/0/GSI-Web-Logo.png?ver=fKp9ISSQr5Siv43345L-4g%3d%3d", "status": "Initial Implementation", "phase": "Initial Implementation", "under_cap": false, "cap_date": null, "event_log": [ { "date": "2026-08-18T18:34:44.000Z", "category": "Status Change", "description": "Status set to Initial Implementation" } ], "authorizations": 0, "reuse": 0, "ready_status": "Unknown", "ready_date": null, "ip_jab_status": "Unknown", "ip_jab_date": null, "ip_prog_status": "Unknown", "ip_prog_date": null, "ip_prog_date2": null, "ip_agency_status": "Unknown", "ip_agency_date": null, "ip_pmo_status": "Unknown", "ip_pmo_date": null, "cert_date": null, "cert_path": "Unknown", "fedramp_ready": "Unknown", "partnering_agency": "", "fedramp_auth": null, "annual_assessment": "", "independent_assessor": "", "service_model": [ "SaaS" ], "deployment_model": "Hybrid Cloud", "impact_level": "Unknown", "impact_level_number": "0", "leveraged_systems": [], "agency_authorizations": [], "agency_reuse": [], "service_description": "Virtual OneStop Sapphire (VOS Sapphire) is a cloud-based workforce development platform that helps government agencies modernize employment services. It combines labor exchange, case management, employer services, unemployment insurance integration, labor market information, reporting, and program management into one secure system. VOS Sapphire streamlines operations through automation, improves collaboration and compliance, and delivers personalized services for job seekers, employers, workforce professionals, educators, and partner organizations.", "fedramp_msg": "", "sales_email": "", "security_email": "", "website": "https://www.geographicsolutions.com/", "uei": "", "small_business": false, "business_categories": [], "service_last_90": [], "all_others": [], "service_acronym": "VOS", "trust_center": null, "secure_configuration_guidance": null, "certified_services": [], "third_party_information_resources": null } ] } }