Program Participants
Explore verified and in-progress products and services participating in the GovRAMP Security Program. This directory provides transparency into offerings that have met, or are actively working toward, GovRAMP’s trusted cybersecurity standards.
Authorized Product List (APL)
Verified offerings with a security status of Core, Ready, Provisionally Authorized, or Authorized are listed below on the Authorized Product List (APL).
To achieve a GovRAMP verification status, products must meet the program's security requirements. Ready, Provisionally Authorized, and Authorized products complete an independent assessment by a Third-Party Assessment Organization (3PAO), while Core products are validated directly by the GovRAMP PMO. All verification submissions are reviewed to ensure they meet GovRAMP standards.
Verified providers participate in ongoing continuous monitoring to maintain their status.
| Organization Name | Service Offering | Service Model | Impact Level | Status |
|---|---|---|---|---|
|
Impact Level: Moderate Authorization Date: 2024-09-09 SRID#: SR24021 3PAO: A-Lign Point Of Contact: Jennifer Hallin Contact Email: jennifer.hallin@cgi.com Sponsor Names: GovRAMP Approvals Committee Service Description: CGI Advantage Cloud is a unified multi-tenant SaaS ERP solution that is designed, built, and optimized for the public sector. Our solution provides financial management, procurement, grants, human capital management, payroll, labor cost distribution, time and leave, budgeting, and advanced analytics capability that addresses the public sector’s most complex requirements out of the box. Advantage Cloud requires minimal workarounds or extensions associated with dual-use ERP systems that are built for private sector and then overlaid with public sector features. |
CGI Advantage Cloud | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2022-06-06 SRID#: SR22001 3PAO: Schellman & Company Point Of Contact: Tom Cowles Contact Email: compliance@box.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Box Enterprise Content Cloud Collaboration Platform enables business to easily share, manage and secure their content. In today’s mobile-first, cloud-first world, providing employees with secure access to content at any time using any device is critical to creating a more productive, connected workforce and improved customer experiences. Beyond secure file sharing, Box enables easy access to content and collaboration tools from any device with the security, scalability and administrative controls that IT requires. |
Box Enterprise Cloud Content Collaboration Platform | SaaS, Paas | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-01-04 SRID#: SR22018 3PAO: Coalfire Systems, Inc. Point Of Contact: Appian FedRAMP/GovRAMP Team Contact Email: fedramp@appian.com Sponsor Names: GovRAMP Approvals Committee Service Description: Appian software is delivered to the Appian Cloud through a Platform-as-a-Service (PaaS) model and leverages cloud-native robotic process automation (RPA), simplifying control management and reducing overhead for customers. Government agencies should consider the Appian Government Cloud (at Impact Level 5) for critical acquisitions, case management and logistics, especially when process and business rule complexities are high. The Appian Low-Code Platform unifies the key capabilities needed to get work done faster. |
Appian Cloud | Paas, SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-06-29 SRID#: SR24053 3PAO: Lunarline, Inc. Point Of Contact: Phillip Thompson Contact Email: pthompson@aztecsoftware.com Sponsor Names: GovRAMP Approvals Committee Service Description: Aztec Learning System combines a customized Learning Management System (LMS) and Courseware to help transform the lives of adult learners. The LMS includes innovative an unique features allowing automatic per student learning customization, linear and non linear learning and coaching. The learning experience is delivered at Desktop like performance using a robust, secure, scale SAAS architecture with configurations that can be matched to the school's unique needs |
Aztec Learning System | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-01-12 SRID#: SR24082 3PAO: A-lign Point Of Contact: Mike Tiemeyer Contact Email: mtiemeyer@butterflynetinc.com Sponsor Names: GovRAMP Approvals Committee Service Description: Butterfly Network’s Inc.’s Butterfly Ultrasound Probe System enables universal access to superior medical imaging, making high quality ultrasound easy-to-use, globally accessible, and intelligently connected. Butterfly iQ™ (aka Butterfly Ultrasound Probe System) is the only ultrasound transducer that can perform “whole-body imaging” with a single handheld probe using semiconductor technology. Connected to a mobile phone or tablet, it is powered by Butterfly’s proprietary Ultrasound-on-Chip™ technology and harnesses the advantages of AI to deliver advanced imaging that is easy-to-use and improves patient outcomes. |
Butterfly iQ / Butterfly iQ+ / iQ3 Ultrasound Probe System (aka: Butterfly Ultrasound Probe System) | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-01-21 SRID#: SR23048 3PAO: Coalfire Point Of Contact: Eric Weiss Contact Email: GovRAMP@cisco.com Sponsor Names: GovRAMP Approvals Committee Service Description: Duo’s Federal Editions can verify the identity of users with secure and easy to use two-factor authentication methods that helps public sector entities satisfy NIST 800-63-3 and 53/63/171 authentication requirements. In addition to verifying users’ identities, Duo’s solution checks the security health of every device authenticating into the environment, at the time of access. Admins can use Duo to enforce stricter device and application access policies, such as blocking login requests based on location or anonymous networks. Duo ensures only trusted users and devices can access protected applications. This complete security solution prevents modern attackers that often target multiple areas - including credential theft and the exploitation of known software vulnerabilities affecting outdated software versions. Category: Network Security,Data Management, |
Duo Federal | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-09-16 SRID#: SR24009 3PAO: Securisea, Inc. Point Of Contact: Jon Dougherty Contact Email: jon.dougherty@kelmarassoc.com Sponsor Names: GovRAMP Approvals Committee Service Description: KAPS is delivered by Kelmar as a software-as-a-service solution. KAPS builds on three generations of unclaimed property systems and utilizes the latest technology advancements to provide a cost effective, highly scalable, configurable unclaimed property management solution for state governments. KAPS allows unclaimed property government agencies to automate and efficiently administer aspects of their programs utilizing a business intelligence platform that is user friendly and intuitive. KAPS provides complete on-screen capabilities to manage the entire unclaimed property process from the initial loading of reports and receipts to the ultimate payment of successful claims. KAPS features management tools for: Administrative and Workflow handling Holder Reports Receipts Processing Securities Tangible Property Claims Owner Outreach Holder Compliance and Reporting. KAPS also integrates with additional Kelmar offerings inclusive of Kelmar’s State Website Solution Claims Fast Track Integration and Identification Verification Kelmar’s Fraud Index and related LexisNexis® ThreatMetrix® Solution. |
KAPS | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-04-07 SRID#: SR26002 3PAO: Schellman & Company Point Of Contact: Aron Nakazato Contact Email: aron@cloudflare.com Sponsor Names: GovRAMP Approvals Committee Service Description: Cloudflare, Inc. (www.cloudflare.com / @cloudflare) launched in 2010 and is on a mission to help build a better Internet. Cloudflare’s platform protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare have all web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and security, decreasing spam and other attacks. Cloudflare’s architecture gives an integrated set of L3-L7 network services, all accessible from a single dashboard. It is designed to run every service on every server in every data center across our global network. The Cloudflare network runs in 250+ cities across 100+ countries. Our network interconnects with 10,000+ networks globally (major ISPs, cloud services, and enterprises). Cloudflare was built from the ground up to support the convergence of networking and security. Cloudflare also delivers Zero Trust networking capabilities as part of our offering. Theses services address mandates in OMB Cloudflare delivers a natively integrated service with secure web gateway, remote browser isolation, firewall as a service, cloud access security broker, data loss protection, and SD-WAN functionality with single-pass inspection — all managed from the same UI. We apply the same Zero Trust policies to all access decisions no matter where and how globally distributed users access the user/corporate environment — at home, on the road, or in the office. Zero Trust Services: Zero Trust Network Access (ZTNA) - zero trust as-a-service, create secure boundaries application(s) allowing access to resources after verifying identity, context and policy adherence of each specific request. Remote Browser Isolation - fast & reliable solution for remote browsing, running all browser code in the cloud. Secure Web Gateway (SWG) - web filtering and network security service which protects users and corporate data by inspecting user traffic, filtering and blocking malicious content, identifying compromised devices and using browser isolation technology to prevent malicious code from executing on user devices. Cloudflare Tunnel - create encrypted tunnels between origin web servers and the closest Cloudflare Edge PoP without opening any public inbound ports. Cloudflare Zero Trust - grouping of products: Access, Gateway, Browser Isolation, Cloudflare Tunnel. Network Services: WAN-as-a-Service - replaces legacy WAN architectures with Cloudflare’s network, providing global connectivity, cloud-based security, performance, and control through one simple user interface. Firewall-as-a-Service - network-level firewall delivered through Cloudflare to secure the enterprise. L3/L4 DDoS Protection - Cloudflare DDoS protection secures websites, applications and entire networks. Cloudflare’s 90Tbps network blocks an average of 87 billion threats per day. Network Interconnect - directly connect on-prem networks to Cloudflare’s network Application Services: Web Application Firewall (WAF) with API protection - intelligent, integrated and scalable solution to protect critical web applications with no changes to your existing infrastructure. Rate Limiting - protected against denial of service attacks, brute force login attempt and other types of abusive behavior targeting the application layer. Load Balancing - improves application performance and availability by steering traffic from unhealthy origin servers and dynamically distributing it to the most available and responsive server pools. Bot Management - manages good and bad bots in real-time. Helps prevent credential stuffing, content scraping, content spam, inventory hoarding, credit card stuffing and application DDoS. L7 DDoS Protection - Cloudflare DDoS protection secures websites, applications and entire networks. Cloudflare’s 90Tbps network blocks an average of 87 billion threats per day. Content Delivery Network (CDN) - ultra-fast static and dynamic content delivery over our global edge network. Provides users the ability to exercise precise control over how your content is cached, helps reduce bandwidth costs and take advantage of built-in unmetered DDoS protections. Domain Name System (DNS) - enterprise-grade authoritative DNS service that offers the fastest response time, unparalleled redundancy and advanced security with built-in DDoS mitigation and DNSSEC. SSL/TLS - Provides options for customers to ensure visitors are always accessing their website over a secure HTTPS connection. SSL/TLS for SaaS - SSL and CDN for 3rd party hostnames. Waiting Room - Protects origin server by preventing surges in legitimate traffic that may overload the origin Edge Developer Platform: Workers - provides a serverless execution environment that allows you to create entirely new applications or augment existing ones without configuring or maintaining infrastructure. Workers KV – is a global, low-latency, key-value data store. It supports exceptionally high read volumes with low-latency, making it possible to build highly dynamic APIs and websites which respond as quickly as a cached static file would. Durable Objects - provide low-latency coordination and consistent storage for the Workers platform through two features: global uniqueness and a transactional storage API. Cloudflare Stream - Cloudflare Stream is an on-demand video platform that offers video encoding, storage, delivery and playback Stream Delivery - Cache and deliver HTTP(S) video content, including adaptive bitrate formats to provide fast video delivery, with shorter video startup times and reduced buffering. Cloudflare for SaaS - grouping of products: SSL/TLS, DDoS, WAF Tiered Cache - Allows for only a few large, well-connected and geographically close colos to pull from the origin. Analytics & Insights: Analytics - Enables customers to access data from the Cloudflare Dashboard such as raw logs of HTTP requests for their domains. Cloudflare Logs - Provides detailed logs of your HTTP requests that can be used to debug, identify configuration adjustments to improve performance and security, and create custom analytics. Web Analytics - Provides essential stats on the usage of your website from our dashboard. See the top hostnames, URLs, countries, and other critical metrics like status codes. Filter based on any of various metrics with a click and see data that matters to you most. Investigate spikes in traffic by zooming into the relevant time range with a simple click. Privacy & Compliance; Data Localization - Set of products to maintain local control over traffic while retaining the security benefits of a global network. It consists of the following products for a subscriber's Enterprise zones: Regional Services Geo Key Manager Keyless SSL Services Category: Identity and Access Management,Cloud Security, |
Cloudflare for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-08-24 SRID#: SR21012 3PAO: The Cadence Group Point Of Contact: Vivek Siddegowda Contact Email: vivek.siddegowda@aurigo.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Aurigo Masterworks Cloud is an integrated suite of enterprise software products for owners to plan, build, and maintain large capital assets, infrastructure, and facilities. Aurigo Essentials is an all-in-one product for small to mid-size agencies with easy-to-deploy and industry-ready configurations. |
Masterworks Cloud Platform | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-02-10 SRID#: SR24034 3PAO: Schellman Point Of Contact: Loren Buhle Contact Email: lbuhle@dnanexus.com Sponsor Names: GovRAMP Approvals Committee Service Description: The DNAnexus Platform is a public cloud analysis and data management platform for processing high-throughput molecular data; for combining molecular, clinical, and real-world data to discover relationships relevant to patient and population health, precision medicine, drug discovery and regulatory approval; and for enabling a network of government, academic, and commercial collaborators to securely form research communities. DNAnexus presents a Platform-as-a-Service including a brandable, customizable web interface, and an API for integration with upstream and downstream systems such as Laboratory Information Management, Clinical Trial Management, Electronic Data Capture, and clinical interpretation and reporting systems. |
Platform | Paas | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-05-22 SRID#: SR22031 3PAO: Kratos Point Of Contact: Patrick Zientek Contact Email: patrick.zientek@cgi.com Sponsor Names: GovRAMP Approvals Committee Service Description: CGI GTO delivers centralized, highly secure and fully managed solutions specifically designed to support state and local government needs. |
CGI US Cloud | IaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2024-04-01 SRID#: SR23045 3PAO: Kratos Defense Point Of Contact: Douglas Converse Contact Email: dconverse@collabware.com Sponsor Names: GovRAMP Approvals Committee Service Description: Collabspace is a highly scalable, cloud-based records and information management solution. Collabspace enables organizations to stream content from multiple repositories into a data lake for the purposes of managing content lifecycle for regulatory compliance, and to facilitate faster execution of FOIA requests processes. Collabspace employs advanced enterprise search and records management capabilities such as OCR and audio/video transcription to help categorize and analyze records for proper retention and disposition. |
Collabspace | SaaS | High | Authorized |
|
Impact Level: High Authorization Date: 2024-02-27 SRID#: SR23031 3PAO: Fortreum Point Of Contact: Lauren Aloway Contact Email: laloway@paloaltonetworks.com Sponsor Names: GovRAMP Approvals Committee Service Description: Palo Alto Networks Government Cloud Services (GCS-High) includes a variety of cloud-based cybersecurity offerings. As your agency moves forward in its modernization efforts, it needs trusted cybersecurity solutions that will reduce the risk of data breaches while meeting compliance. Develop a comprehensive cloud cybersecurity strategy with solutions that protect workers, data and applications from cyber adversaries and advanced threats. The following products and services make up our offering. Cloud Identity Engine Identity-based security controls are a foundational requirement to achieve Zero Trust. Palo Alto Networks Cloud Identity Engine is an entirely new cloud-based architecture for identity-based security that can consistently authenticate and authorize your users, regardless of location and where user identity stores live—on-premises, in the cloud, or hybrid. As a result, security teams can effortlessly allow all users access to applications and data everywhere and quickly move toward a Zero Trust security posture. Cortex XDR A cloud-based service providing a prevention, detection and response platform that integrates network, endpoint, and cloud data to stop sophisticated attacks. Cortex XDR leverages logs, alerts, and information from Palo Alto Networks and third-party security products. It also enforces security policies on endpoints, preventing malware and data loss. Cortex XDR correlates security alerts and network logs with the endpoint processes that generated the alerts, allowing customers to investigate security alerts, as well as search for and remotely respond to threats. Cortex XSOAR A comprehensive security orchestration, automation, and response (SOAR) platform that unifies case management, automation, real-time collaboration, and threat intelligence management to serve security teams across the incident lifecycle. Cortex XSIAM A cloud-delivered, integrated SOC platform that unifies key functions, including EDR, XDR, SOAR, ASM, UEBA, TIP, and SIEM, consolidating multiple products into a single, integrated platform. XSIAM delivers an intelligent data foundation by integrating telemetry from any source, providing unified security operations across any hybrid IT architecture. Cortex Xpanse An active attack surface management solution that helps your organization discover, understand and respond to unknown risks in all internet-connected systems and services. Xpanse scans the entire internet automatically and continuously, discovering and indexing previously unknown risks, using supervised ML models to continuously map your attack surface and prioritize remediation efforts, while reducing MTTR with the help of built-in automated playbooks. Prisma Cloud A cloud native security platform that provides comprehensive visibility, threat prevention, compliance assurance and data protection consistently across hybrid and multi-cloud environments. Prisma Cloud Compute A cloud-native platform that delivers cloud workload protection. Prisma Cloud Compute provides holistic protection across hosts, containers, and serverless deployments in any cloud, throughout the software lifecycle. Prisma Cloud Compute protects all workloads regardless of their underlying compute technology or the cloud in which they run. In addition, it provides Web Application and API Security (WAAS) for any cloud native architecture. WildFire Government Cloud An analysis and prevention engine for highly evasive zero-day exploits and malware. The cloud-based service employs a unique multi-technique approach combining dynamic and static analysis and innovative machine learning techniques to detect and prevent even the most evasive threats. It is a subscription service that works with the Palo Alto Networks Next Generation Firewalls (including VM-Series and CN-Series), Prisma Access, Prisma Cloud, Cortex XSIAM, and Cortex XDR. Prisma Access A Secure Access Service Edge (SASE) that provides scalable, cloud-delivered networking and security to branch offices and remote users. With Prisma Access, agencies are able to rapidly enable consistent, secure connectivity for remote locations and employees. Prisma SD-WAN Prisma SD-WAN enables branch services such as networking and security to be delivered from the cloud, simplifying WAN management. The controller provides deep application visibility, with Layer 7 intelligence for network policy creation and traffic engineering. It automates operations and problem avoidance using machine learning and data science methodologies. Cloud Management A cloud delivered management solution used by customers to manage Prisma SASE from Palo Alto Networks. Multi-Tenant Service Provider Portal (MSP) The MSP solution provides hierarchical multi-tenant management for customers and partners PRISMA INSIGHTS Prisma Insights provides a comprehensive platform for global visibility and monitoring for the Prisma Access service. It continuously monitors the health and performance of your Prisma Access environment with Insights in the Prisma Access app. ADEM Autonomous Digital Experience Management (ADEM) provides organizations with segment-wise insights, comprehensive visibility, and SASE-native DEM integrated with Prisma SASE, the secure foundation for agile, cloud-enabled organizations. API Gateway The API Gateway provides authorization services for customers and partners to leverage Palo Alto Networks RESTful API Data Loss Prevention Data Security Palo Alto Networks’ Enterprise DLP software-as-a-service system is a network DLP service to prevent Data Loss of sensitive data. The solution helps facilitate an organization’s data protection and compliance efforts in a simplified and cost-effective manner. SAAS API / Inline / SSPM SaaS Security is a solution that helps Security teams meet the challenges of protecting the growing availability of sanctioned and unsanctioned SaaS applications and maintaining compliance consistently in the cloud while stopping threats to sensitive information, users and resources. SaaS Security options include SaaS Security API, SaaS Security Inline, and SaaS Security Posture Management (SSPM). Advanced WildFire An analysis and prevention engine for highly evasive zero-day exploits and malware. The cloud-based service employs a unique multi-technique approach combining dynamic and static analysis and innovative machine learning techniques to detect and prevent even the most evasive threats. APP-ID Cloud Engine - ACE A platform that enables the firewall or Panorama to download App-IDs from the cloud for applications that do not have specific predefined App-IDs from the Palo Alto Networks content releases. Threat Prevention The Palo Alto Networks® Threat Prevention protects and defends your network from commodity threats and advanced persistent threats (APTs). The multi-pronged detection mechanisms include a signature-based (IPS/Command and Control/Antivirus) approach, heuristics-based (bot detection) approach, sandbox-based (WildFire) approach, and Layer 7 protocol analysis-based (App-ID) approach. URL Filtering URL filtering technology protects users from web-based threats by providing granular control over user access and interaction with content on the Internet. You can develop a URL filtering policy that limits access to sites based on URL categories, users, and groups. Cortex Data Lake Collects, normalizes, and integrates data from Palo Alto Networks products with public cloud scale. |
Government Cloud Services (GCS-High) | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-01-11 SRID#: SR24051 3PAO: Schellman & Company Point Of Contact: Patrick O'Laughlin Contact Email: polaughlin@atlassian.com Sponsor Names: GovRAMP Approvals Committee Service Description: Atlassian Government Cloud is a Software as a Service (SaaS) offering that helps teams collaborate, track work, manage IT service delivery, support their DevOps practices and more - all with the security and control that agencies need. Available products include: - Jira for project management across business and software teams - Confluence for knowledge management and documentation - Jira Service Management for IT service management, including support, IT operations, customer service, and more |
Atlassian Government Cloud | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-10-19 SRID#: SR24054 3PAO: A-lign Point Of Contact: Nicholas Alex Contact Email: nalex@t3rdeyetech.com Sponsor Names: GovRAMP Approvals Committee Service Description: Mystic Message Archival provides capture and archiving of SMS/MMS data through encrypted channels receiving data directly from cellular carriers. The data is stored on behalf of the agency it is being collected for in an encrypted content and data storage for retention based on each agencies policies. APIs make it possible to retrieve this data for later usage. All data is only accessibly by authorized personnel of each agency. Data is also exportable through a user interface which requires authentication through an identity management system vetted by each agency. Data is not accessible by anyone beyond the agencies scope and access is protected through whitelisting of IP addresses and firewalls at a network level. The authorization boundary is what dictates the realm of what is accessible in our platform. |
Mystic Message Archival | SaaS | Moderate | Authorized |
|
Impact Level: High SRID#: SR24024 3PAO: Schellman & Company Point Of Contact: Melanie Huffman Contact Email: melanie.huffman@secondfront.com Sponsor Names: N/A Service Description: Cohere offers a security-first enterprise AI platform delivering advanced artificial intelligence capabilities—including Command-R-7B, Command-A-Vision, Command-A-Reasoning, Command-A-Translate, Embed-3, and Rerank-3.5—specifically engineered for state, local, and federal public sector applications such as digital targeting, drone integration, knowledge management, and sovereign AI solutions. Achieving FedRAMP High authorization in a record 90 days by leveraging Second Front Systems' Game Warden inherited authorization boundary, Cohere bypasses traditional compliance delays to provide accelerated, secure access for government agencies. The platform features containerized deployments built on hardened, FIPS-compliant Chainguard and IronBank images, multi-tenancy support, and robust deployment flexibility spanning cloud, on-premises, private SaaS, and third-party marketplace environments. Operating with zero channel conflict and full data sovereignty, the offering includes 24/7 technical support with strict severity-based response SLAs (down to 2 hours for critical issues), delivering an agile, fully compliant AI foundation designed to meet complex government procurement and security standards. - Cohere is hosted on SecondFront Systems, Game Warden platform |
Cohere | Paas, SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-03-26 SRID#: SR22021 3PAO: Coalfire Point Of Contact: Balaji Kalyanasundaram Contact Email: balajik@druva.com Sponsor Names: GovRAMP Approvals Committee Service Description: Druva is a leading provider of data security and cyber resilience solutions, delivering a true cloud-native, fully managed SaaS platform for secure, air-gapped, zero trust, and immutable data protection across cloud, on-premises, and edge environments. Leveraging AWS GovCloud, Druva’s FedRAMP-authorized solution provides secure backup and disaster recovery while meeting strict U.S. government compliance standards. By centralizing data protection in a single platform, Druva strengthens incident response, cyber remediation, ransomware recovery and governance to help organizations reduce risk, cut costs, and simplify operations. |
Druva Data Resiliency Cloud | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-05-22 SRID#: SR24007 Point Of Contact: Marlon Hughes Contact Email: govramp@cohesity.com Sponsor Names: GovRAMP Approvals Committee Service Description: Cohesity helps public sector agencies strengthen cyber resilience through a compliance-focused portfolio of cloud data protection and recovery services. Cohesity Cloud Services for Government brings together secure backup, rapid recovery, centralized management, and cyber vaulting in a streamlined service experience, helping agencies reduce operational complexity, protect mission-critical data, and recover with confidence from ransomware and other disruptive events. The portfolio includes Cohesity DataProtect and Helios for Government capabilities, as well as FortKnox SaaS vaults for DataProtect. FortKnox provides Cohesity-managed cyber vaulting that helps isolate backup data from production environments, with cold- and warm-tier vaulting options, anomaly-detection reporting, and flexible recovery capabilities. Together, these offerings give public sector agencies a scalable way to modernize data protection, improve resilience, and support mission continuity |
Cohesity Cloud Services for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-02-25 SRID#: SR23049 3PAO: Schellman Point Of Contact: Eric Weiss Contact Email: GovRAMP@cisco.com Sponsor Names: GovRAMP Approvals Committee Service Description: Cisco Cloudlock is the cloud-native Cloud Access Security Broker (CASB) that helps accelerate use of the cloud. Cisco Cloudlock secures your cloud users, data, and apps, combating account compromises, data breaches, and cloud app ecosystem risks, while facilitating compliance through a simple, open, and automated API-driven approach. Cisco Cloudlock is a simple, open, and automated solution that combats cloud account compromises, malicious insiders, data breaches, compliance violations, and cloud app ecosystem risks. With crowd-sourced security analytics across billions of data points, advanced machine learning, and the data scientist-led CyberLab, Cisco Cloudlock provides actionable cybersecurity intelligence that provides visibility and control over the most critical cloud security risks. Cloud User Security: Cross-platform User and Entity Behavior Analytics (UEBA) for SaaS, IaaS, PaaS, and IDaaS environments leverages advanced machine learning algorithms to detect anomalies. Cloudlock can also detect activities outside of whitelisted countries and actions across distances at impossible speeds. **Cloud Data Security:** Cloud Data Loss Prevention (DLP) continuously monitors cloud environments to detect and secure sensitive information through countless out-of-the-box policies as well as highly-tunable custom policies. Automated response actions can remediate risk in the event of a policy violation, including end-user notifications, encryption, transfer of ownership, quarantine, and more. Cloud App Security: The Cisco Cloudlock Apps Firewall discovers cloud apps connected via OAuth to your corporate environment, and provides a crowd-sourced Community Trust Rating for individual apps, as well as the ability to ban or whitelist them based on risk profile and access scope, increase employee awareness with email alerts, and revoke apps in bulk across the entire user base. |
Cloudlock | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2024-08-19 SRID#: SR24016 3PAO: Schellman Point Of Contact: Eric Weiss Contact Email: GovRAMP@cisco.com Sponsor Names: GovRAMP Approvals Committee Service Description: Cisco Catalyst SD-WAN for Government (SDWAN-G), powered by Cisco Viptela/IOS XE, is a highly secure, cloud-scale architecture that is open, programmable, and scalable. All vetted and monitored through the rigorous FedRAMP authorization process. Use it to connect data centers, branches, campuses, and colocation facilities to improve network speed, security, and efficiency. Cisco Catalyst SDWAN-G is a cloud-delivered overlay WAN architecture connecting branches to data centers and multi-cloud environments through a single fabric and single pane of glass. Cisco Catalyst SDWAN-G helps ensure a predictable user experience for applications optimized for SaaS, IaaS, and PaaS connections. Comprehensive on-premises and cloud-based security protect against cyberthreats while enabling IT teams to accelerate the transition to a Secure Access Service Edge (SASE) architecture where and when it is needed. Cisco Catalyst SD-WAN Government (SDWAN-G) is owned, operated, and supported directly by Cisco for use in government offerings, providing the following capabilities: - Enhanced Visibility: Extend your network visibility and observability with our core government self-service portal. You'll gain actionable insights to help you transform network operations from reactive to highly proactive model. - Right Security, Right Place: On-premises or cloud-based security with secure SDWAN-G helps to accelerate the transition to a secure access service edge (SASE) architecture where and when it's needed. - Operational Simplicity: With a highly visualized interface and intuitive user experience for simplified configuration, management, operation, and monitoring across the Cisco Catalyst SDWAN-G fabric. The Cisco Catalyst SDWAN-G solution comes with pre-configured templates to automate and expedite the deployment of most common use cases. Guided step-by-step configuration designed to intelligently expedite onboarding of new devices, and full integration of unified communication, and security into Cisco Catalyst SDWAN-G. The Cisco Catalyst SDWAN-G solution is segregated into four planes with four key components: Manager - In the management plane, the Cisco Catalyst SD-WAN Manager is the centralized network management system and represents the user interface of the solution. Network administrators and operators can configure, provision, troubleshoot, and manage the entire overlay network from a simple graphical dashboard. Validator - In the orchestration plane, the Cisco Catalyst SD-WAN Validator automatically orchestrates connectivity between edge devices and Controllers. The Validator is largely responsible for the provisioning process as well as first-line authentication, control/management information distribution, and facilitating Network Address Translation (NAT) traversal. Controller - In the control plane, the Cisco Catalyst SD-WAN Controller is the component responsible for enforcing policies centrally. When branches come online, their routing information is exchanged with the Controller and not directly with other branches. The Controller works with the Validator to authenticate edge devices as they join the network and to orchestrate connectivity among the edge devices. Edge Devices - In the data plane, the Edge devices are responsible for establishing the network fabric and handle the transmission of data traffic. Edge devices come in multiple forms, virtual and physical, and are selected based on the connectivity, throughput, and functional needs of the site. The operating system of the Edge devices is securely developed and tested as part of Cisco’s Secure Development Lifecycle (CSDL) prior to releasing a version for the customer to deploy. In-boundary scanning of the operating system deployed with Edge devices for Cisco Catalyst SDWAN-G are scanned as part of Cisco’s continuous monitoring strategy. Collectively, the architecture of the Cisco Catalyst SDWAN-G fabric simplifies IT operations with automated provisioning, unified policies, streamlined management to help ensure rapid updates and resolutions, advanced network functionality, resiliency, and security. From a single pane of glass, Cisco Catalyst SDWAN-G helps organizations avoid complex configurations and frequent policy changes that lead to uneven user experiences, thereby increasing overall network efficiency and reliability. |
Catalyst SD WAN | SaaS, IaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-09-16 SRID#: SR24013 3PAO: A-Lign Point Of Contact: Marvell Summerow Contact Email: marvell.summerow@maplarge.com Sponsor Names: GovRAMP Approvals Committee Service Description: MapLarge provides software for location intelligence analysis that runs on servers either in the cloud or on premise. MapLarge user interfaces accessed by users in web browsers or native applications on any desktop of mobile device. Customers are typically large enterprises that build their own custom solutions on top of MapLarge in a wide variety of use cases ranging from visualizing business trends, to planning flight paths, to global situational awareness for large security teams. MapLarge supports data import, editing, visualization and alerting based on a wide variety of data sources including both flat files, real time streaming connections and numerous other industry specific like ArcGIS data connectors. MapLarge processes customer data that may take any form supported by the product but typically has one or more location intelligence attributes like latitude and longitude or street address. Customer data can be visualized in a wide variety of ways including as maps, charts, lists, or exported as Portable Document Formats (PDFs), images or data files. |
MapLarge | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2022-10-02 SRID#: SR22011 3PAO: Lunarline Point Of Contact: Jamie Neilon Contact Email: jamie.neilon@id-edd.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Innovative Driven Government Cloud (ID Gov-Cloud) is a Software as a Service (SaaS) offering that provides secure and scalable government legal document services within a compliant cloud environment. Built on industry-leading technologies Relativity and Nuix and paired with expert consulting, agencies can leverage the full scope of eDiscovery services within one scalable platform, including (but not limited to) processing, document review, advanced analytics, assisted review, legal hold services, and production. Every service package is within a secure and user-friendly customer interface. Government agencies also gain the added capabilities of Innovative Discovery's government project management teams and optimal workflows, benefitting from years of experience supporting complex government electronic discovery requests. |
Innovative Driven Government Cloud | SaaS, IaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-07-29 SRID#: SR24002 3PAO: Coalfire Point Of Contact: Ben Ware Contact Email: ben.ware@oracle.com Sponsor Names: GovRAMP Approvals Committee Service Description: Oracle Taleo Cloud services are Oracle’s Software as a Service (SaaS) solution, providing a comprehensive talent management and learning service. Taleo Enterprise Edition offers a comprehensive talent management suite that spans the entire employee lifecycle and helps companies hire, manage, reward, and develop their employees with a full talent management solution for recruiting and on boarding, performance management, employee development and succession planning. Since Taleo Enterprise Edition is built on a single unified platform and delivered on demand, you can implement a single module or the full solution based on your needs. Oracle’s Taleo Learn Cloud offers an employee development and training software solution that supports the learning challenges of large complex enterprises. Taleo Learn links human resources management to learning with Talent Intelligence. The Taleo Learn Cloud Service is a solution for delivering, tracking, managing, and reporting on formal and informal learning. Users have access to learning through a single platform for online, classroom, virtual, and on-the-job training, as well as assessments, blended learning, social learning, and self-reported training. Organizations can design a tailored user experience with complete control of the user interface. |
Oracle Taleo Cloud | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-07-23 SRID#: SR23024 3PAO: A-Lign Point Of Contact: Heath Crocker Contact Email: heath.crocker@iboss.com Sponsor Names: GovRAMP Approvals Committee Service Description: With over 4,000 customers, including the largest government, financial, insurance, energy and technology organizations, iboss enables government to reduce cyber risk by delivering a FedRAMP Authorized Zero Trust Secure Service Edge that protects resources and users from wherever they work. iboss delivers security capabilities such as SWG, malware defense, browser isolation, CASB and data loss prevention within a completely unified cloud platform to protect all resources, instantaneously and at scale. This shifts the focus from protecting buildings to protecting people and resources wherever they are located. Backed by 230+ issued and pending patents, iboss processes and secures over 150 billion daily network transactions globally, blocking 4 billion threats per day. The iboss Government Cloud Platform enables federal agencies to migrate rapidly into a Zero Trust architecture as mandated by the Presidential Executive Order on Cyber. Jump-start your transformational journey and experience the future of Zero Trust cloud security today. Visit www.iboss.com to learn more. |
iboss Government Cloud Platform (IGCP) | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2024-12-15 SRID#: SR24003 3PAO: Lunarline Point Of Contact: Richard Schott Contact Email: rschott@hrtec.net Sponsor Names: GovRAMP Approvals Committee Service Description: Federal High Impact Virtualized Environment (FedHIVE) received a FedRAMP’s High Impact Level Joint Authorization Board (JAB) Provisional Authority to Operate (P-ATO) for Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS) and a DoD Commercial Cloud (Off-Premises CSO) Impact Level (IL) 4 Provisional Authorization (PA), soon to have IL-5. FedHIVE offers customers a compliant, scalable, and secure infrastructure for the safeguarding of information systems which process and store Controlled Unclassified Information (CUI), supporting the deployment of Software-as-a-Service (SaaS) solutions for Agencies, and the capabilities to assist your organization in accelerating your digital transformation objectives. FedRAMP JAB P-ATO authorized by FedRAMP JAB CISOs from DoD, DHS, and GSA DoD PA authorized by DISA RME RE2 Cloud Assessment Division. Category: Network Security,Data Management, |
FedHIVE | IaaS, Paas, SaaS | High | Authorized |
|
Impact Level: High Authorization Date: 2022-05-17 SRID#: SR21019 3PAO: Kratos Point Of Contact: Maria Keady Contact Email: securitycertifications@blackberry.com Sponsor Names: GovRAMP Approvals Committee Service Description: BlackBerry’s AtHoc is a networked crisis communication platform enabling corporations and government agencies to communicate and collaborate securely with their personnel and with other organizations through multiple devices during times of crises. BlackBerry’s AtHoc platform addresses critical communications needs including: Account: AtHoc Account enables real-time visibility into location and status for effective personnel accountability and crisis handling before, during, and after emergencies. This integrated approach to personnel accountability enables inputs from managers about their team, call center operators, data streams from HR and travel systems, as well as self-reporting by individuals. Alert: AtHoc Alert provides a comprehensive crisis communication solution that unifies all channels and devices, empowering organizations, people, and communities to collaborate during critical events. AtHoc’s flexible deployment options safeguards important personal information and enables enterprise-level command and control. Connect: AtHoc Connect empowers organizations to create their own permission-based network to establish interoperable communication and information sharing with organizations in their community. Collect: AtHoc Collect empowers your personnel in the field to be the "eyes and ears" of the operations center. AtHoc Collect enables on-scene personnel to report events, work progress, along with rich geo-tagged media that are worth a thousand words. |
BlackBerry Cloud - AtHoc Services for Government (ACSforGov) | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-05-22 SRID#: SR23010 3PAO: Earthling Security Point Of Contact: Michael Tocci Contact Email: mike@paperless-innovations.com Sponsor Names: GovRAMP Approvals Committee Service Description: Actus is SaaS based Compliance automation solution for P-Card Programs, including item sourcing, approvals workflows, credit card purchasing, reconciliation, and automated audit. Actus is designed according to 3 pillars: Accountability, Compliance , and Transparency. • Accountability - Actus helps agencies paint a complete and total picture of each expense, eliminating guesswork, human error, and manual data entry tracking. • Compliance - Simplified, structured data is at the heart of compliance automation ensuring adherence to Agency policies and acquisition regulations. The Actus platform streamlines and automates oversight processes while maintaining rich transactional records for instant audit reporting. Artificial Intelligence is used to further the regulatory mission of each agency. Adoption of Actus itself satisfies and supplements Federal paperless mandate compliance as well. • Transparency - Actus utilizes dashboards enabling full visualization of all workflow processes, transactional data and documents on a need to know basis. Audit automation occurs with every download of bank transactions without requiring manual packet creation by the cardholder. Active Audit enables inspection of every detail of each purchase made within a selected time frame—in a unified, streamlined format. P-Card Compliance Automation Features: • Custom Approval Workflows • Financial Data Capture • Full Lifecycle Spend Tracking • Cloud Storage of Reconciliation Packets • Dashboard Visualization of data & documents • Automated Reconciliation Statements • Structured Item Level (Level 3) Data • Merchant Class Code Tracking • Suspicious Pattern & Activity Detection • Alerts for Each Stage of Transaction • Transactional Keyword Search • Bank Statement Transaction Matching • Auto-Matched Transactions • Daily, Weekly, or Monthly Reconciliation • PIV/CAC authentication |
Actus | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-08-04 SRID#: SR26013 3PAO: A-LIGN Point Of Contact: Daniel Tyson Contact Email: dan.tyson@bentley.com Sponsor Names: GovRAMP Approvals Committee Service Description: Bentley for Government’s cloud solution currently includes ProjectWise, part of Bentley Infrastructure Cloud, focused on supporting infrastructure project delivery, as well as OpenGround, Bentley’s geotechnical information management and reporting software. |
Bentley for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-12-04 SRID#: SR22033 3PAO: A-Lign Point Of Contact: Erika Fry Contact Email: tech.compliance@boomi.com Sponsor Names: GovRAMP Approvals Committee Service Description: Boomi Enterprise Platform is a cloud-native integration Platform-as-a-Service (iPaaS) technology that lets you connect everyone to everything. The Boomi SaaS Enterprise Platform solves the needs of our government customers with end-to-end capabilities by integrating applications, systems, and connecting people. |
Boomi Enterprise Platform | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-04-10 SRID#: SR24040 3PAO: A-lign Point Of Contact: Mike Lauer Contact Email: mlauer@fortinet.com Sponsor Names: GovRAMP Approvals Committee Service Description: Fortinet's StateRAMP FortiCare portal is designed for Fortinet's StateRAMP customers to access their assets, updates, and support resources. Customers can use FortiCare to manage their user accounts and linked contacts and access the support services. |
FortiCare | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-12-04 SRID#: SR23001 3PAO: Fortreum Point Of Contact: Penny Klein Contact Email: penny.klein@sapns2.com Sponsor Names: GovRAMP Approvals Committee Service Description: The SAP NS2 StateRAMP Cloud Intelligent Enterprise (CIE) is a secure cloud environment that hosts the following suite of SAP cloud solutions: SAP SuccessFactors, SAP Employee Central Payroll, SAP Analytics Cloud, SAP Business Technology Platform and SAP S/4HANA Cloud, private edition. Within the StateRAMP CIE cloud environment, states and their agencies can safely adopt and deploy SAP cloud solutions within our secured cloud model. SAP NS2 offers customers enhanced security, availability, compliance, and support to help deliver a mission-critical edge. More information can be found on https://www.sapns2.com/ns2-secure-cloud/ |
Cloud Intelligent Enterprise | Paas, SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2025-12-22 SRID#: SR24071 3PAO: Schellman & Company Point Of Contact: Wasim Rahman Contact Email: wasim.rahman@crowdstrike.com Sponsor Names: GovRAMP Approvals Committee Service Description: The CrowdStrike Falcon Platform is a comprehensive cloud-native cybersecurity platform designed to provide a wide range of security functions to protect organizations from cyber threats. The primary purpose of the CrowdStrike Falcon Platform is to provide organizations with a comprehensive cybersecurity solution that encompasses the following system functions: *Endpoint Security - Advanced endpoint security capabilities to protect laptops, desktops, servers, and virtual machines from various cyber threats. *Threat Intelligence - Cloud-based intelligence engine to collect and analyze threat data from millions of endpoints worldwide. *Managed Security - Managed security services with a team of security experts actively monitoring and responding to security events. *Cloud Security - Cloud security capabilities to protect organizations' cloud environments. *Security and IT Operations - Integration of security and IT operations for a unified view of security posture. *Identity Protection - Identity protection capabilities to safeguard user identities and prevent unauthorized access. *Next-Gen SIEM - Logging and analysis capabilities to collect, correlate, and analyze security events and logs. Category: Cloud Security, |
CrowdStrike Falcon Platform for Government | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-04-17 SRID#: SR23008 3PAO: A-Lign Point Of Contact: James Armstrong Contact Email: jarmstrong@actsoft.com Sponsor Names: GovRAMP Approvals Committee Service Description: Workforce Manager for Government is a fully integrated platform, which facilitates the business needs of an Agency with mobile employees. On top of robust features such as Wireless Forms, Timekeeping, Job Dispatching, and GPS Tracking, customers with vehicles can leverage the solution’s fleet components to monitor vehicle activities like stop times, idling, driver behavior, score cards, and telematics. This intuitive, yet flexible solution addresses key market challenges such as ease of use, data collection, mobile resource management, implementation costs, worker compliance and overall accountability. The synergy of tools in Workforce Manager for Government brings customers greater efficiency and productivity gains by automating and streamlining processes that help them save time, reduce labor costs, and lower vehicle-related expenses such as fuel and maintenance. Government Customers benefit from an easily deployable solution that provides a significant return on investment. Workforce Manager for Government is equipped with enterprise-grade workforce management tools that are typically only found in high-priced business applications, making it affordable and accessible to all Government Agencies. This approach provides Government customers with a solution that delivers relevant information about daily field operations, helping agencies craft new business strategies to save both time and money. |
Workforce Manager for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-11-23 SRID#: SR24063 3PAO: A-LIGN Point Of Contact: Kevin Warner Contact Email: k.warner@quadient.com Sponsor Names: GovRAMP Approvals Committee Service Description: The S.M.A.R.T. State and Federal Edition family of products provides the ultimate Shipping, Mailing, Accounting, Reporting and Tracking experience - all from a single dashboard! This solution combines leading edge technologies to improve customer interactions and business processes. A consistent look and feel across each element provides familiarity to users, making navigation simple and intuitive. Each S.M.A.R.T. version fuels stronger business communications with your internal and external customers by providing detailed shipping and tracking notifications, chargeback accounting with postage meter reconciliation and extensive reporting options to name a few. Several S.M.A.R.T. versions, supporting from the most basic to complex workflows, are available. Choose the one that best aligns with your agency's needs." |
S.M.A.R.T. - State and Federal Editions | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-05-12 SRID#: SR25096 3PAO: Kratos Point Of Contact: GovRAMP Support Team Contact Email: absolute-govramp@absolute.com Sponsor Names: GovRAMP Approvals Committee Service Description: Absolute Secure Endpoint provides an agent-based endpoint resilience solution that leverages Absolute Persistence®, a unique, patented technology embedded in the firmware of 600+ million devices. This technology delivers an unbreakable connection between the endpoint and the Absolute Secure Endpoint SaaS and provides the source of truth for device and application health; automatic self-healing of mission critical applications and security controls; and a lifeline to protect at-risk devices and data, including the ability to locate, freeze, and wipe missing or lost devices in accordance with NIST standards. This allows agency IT and security teams to increase their cyber-resiliency, strengthen their security posture, and ensure compliance. Absolute Secure Endpoint allows customers to remotely perform the following actions on their endpoint device population via a Web UI (The Console) or Public APIs: -Track Hardware. -Measure Device Usage. -Monitor Installed Software. -Assess Security Posture. -Monitor Health of Critical Applications. -Detecting Unauthorized Device Movement. -Remotely Freeze Devices. -Remotely Delete Data. -Enable Firmware Protection. -Make Critical Applications Self-healing. -Identify Sensitive Information on Devices. -Remotely Query & Remediate Devices at Scale. Absolute Secure Endpoint supports the following use cases: -Device Lifecycle Management. -Automate Hardware Audits. -Automate Software Audits. -Improve Help Desk Efficiency. -Find and Fix Vulnerabilities. -Enforce Security Standards. -Detecting Endpoint Risks. -Respond to Endpoint Risks. -Provide Evidence of Compliance. -GDPR Compliance. In order to utilize Absolute Persistence® and all of the available features in Absolute Secure Endpoint, customers are responsible for installing Absolute agents onto their endpoints. |
Absolute Secure Endpoint Product Suite | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2025-03-18 SRID#: SR24028 3PAO: Coalfire Point Of Contact: Chris Hobert Contact Email: chobert@commvault.com Sponsor Names: GovRAMP Approvals Committee Service Description: Commvault Cloud for Government delivers a fully automated cyber resilient SaaS data backup and recovery solution, with automated deployment, reduced overhead, automated patching and upgrades, continuous security monitoring, and requiring no Agency maintenance. Fully differentiated storage enables the move to cloud by providing the option to leverage cloud or on-premises storage within the web console for hybrid cloud workloads that require synchronization to sustain operational readiness and mission delivery. Category: Cloud Security, |
Commvault | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-08-20 SRID#: SR23076 3PAO: 360advanced Point Of Contact: Karen Koester Contact Email: karen.koester@illumiatech.com Sponsor Names: GovRAMP Approvals Committee Service Description: NetMenu: NetMenu includes the following modules: CBORD Fusion, NetMenu Planner, NetMenu TrayCard, NetMenu Tray Ticket, Selective Dining, Mobile Inventory, CBORD Patient, Room Service Choice, NetMenu Floor Stock, CBORD C-Store, CBORD Data Analytics, CBORD Hub, NetNutrition, NetRecipe, Tray Logistics, Menu Display Interface (MDI); and its customer-branded applications: Horizon School Technology (HST) Back of House (BOH), BluePrint Menu Management System®, Cycle Menu Management®, Sysco® eNutrition, NetIMPAC, and Menu Wizard+. NetMenu provides an integrated food production, inventory management, and menu planning solution to support retail and patient nutrition. Electronic vendor integration and integration into CBORD customer accounts payable, general ledger, and point-of-sale software allow CBORD customers to leverage current systems when interfacing with NetMenu. GET: GET serves as a centralized, cloud-based platform tailored for organizations utilizing the CBORD card/cashless system, aimed at elevating the quality of service provided to their patrons, expanding patron engagement with the cashless program, and driving user involvement and revenue growth. GET offers an integrated experience that aligns with the expectations of today's students, particularly within the ever-evolving mobile landscape through the CBORD platform. Within the GET platform, users have access to real-time balance information, transaction history, the capability to report a lost or found card, and the convenience of making deposits using a credit card. Furthermore, GET's core features encompass food ordering, virtual card payment, mobile access, and a loyalty system. GET also supports integration with campus authentication systems and e-commerce merchant accounts for the acceptance of credit card payments. Odyessy Direct: Through Odyssey Direct, university clients have the ability to establish a comprehensive suite of services linked to a customized campus credential. This encompassing suite includes services such as card printing and credential management, photo capture, management of meal plans, debit and credit accounts, point-of-sale transactions for dining and retail, attendance tracking, as well as eligibility verification. Furthermore, the use of campus card payments is seamlessly integrated into various aspects of university life. These payment capabilities extend to dining services, vending machines, laundry facilities, photocopying and printing services, parking facilities, university bookstores, e-commerce platforms, and even select off-campus dining establishments. A dedicated mobile application ensures round-the-clock accessibility, empowering university students with access to their account information and service details. Beyond the administrative aspects of managing their campus card account, students can leverage this application to peruse dining menus, place food orders, gain access to their rooms, and, when necessary, employ it for identification purposes. |
CBORD Online Transaction Processing | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2026-05-12 SRID#: SR24065 3PAO: Schellman Point Of Contact: Phil Shea Contact Email: phil.shea@datadoghq.com Sponsor Names: GovRAMP Approvals Committee Service Description: Datadog is the monitoring and security platform for cloud applications. Our SaaS platform integrates and automates infrastructure monitoring, application performance monitoring and log management to provide unified, real-time observability of our customers' entire technology stack. Datadog is used by organizations of all sizes and across a wide range of industries to enable digital transformation and cloud migration, drive collaboration among development, operations, security and business teams, accelerate time to market for applications, reduce time to problem resolution, secure applications and infrastructure, understand user behavior and track key business metrics. The services in scope for Datadog for Government are: Infrastructure Metrics – Observe, analyze, and alert based on infrastructure metrics from hosts, containers and serverless. Application Performance Monitoring – Collect, search, and analyze traces across fully distributed architectures. Log Management – Collect, enrich, monitor, and analyze logs from all systems for troubleshooting, auditing, visualization, and alerting. Real User Monitoring – Collect user actions (e.g., button clicks) to understand user activity within a page. Network Performance Monitoring – Provide multi-cloud visibility into network flows in granular detail and enabling users to aggregate and monitor that data. Synthetics – Monitor applications and API endpoints via simulated user requests and browser rendering. Cloud Security Monitoring – Enable real time threat detection and investigate security alerts across infrastructure metrics, distributed traces, and logs. This encompasses Cloud SIEM, Cloud Workload Security, Cloud Security Platform Monitoring, and Cloud Security Management Vulnerabilities products. Error Tracking – Capture, visualize, and browse errors reported by services. Incident Management - Allow organizations to identify outages resulting in contingency actions, and track all actions related to the incident Continuous Profiler – Detect resource-consuming methods or classes within a custom application. Session Replay - Collect user actions and reconstitute user behaviors in a video format. This will be used to analyze efficacy of various features within a customer’s application. Database Monitoring – Collect, enrich, monitor, and analyze logs from customer DBMS for troubleshooting, auditing, visualization, and alerting. Network Device Monitoring - Collect, enrich, monitor, and analyze logs from customer network devices for troubleshooting, auditing, visualization, and alerting. Cloud Cost Management – Unifies cost and observability data from customer infrastructure. Mobile Application – Customers may use an application from mobile devices to access the Datadog platform. |
Datadog for Government | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-08-06 SRID#: SR26018 3PAO: Schellman Point Of Contact: Eric Weiss Contact Email: ericweis@cisco.com Sponsor Names: GovRAMP Approvals Committee Service Description: Cisco ThousandEyes for Government (ThousandEyes for Government) is software as a service (SaaS)-based network intelligence platform that provides visibility into the performance of applications and network infrastructure across the internet. ThousandEyes for Government uses a combination of active monitoring and real user data to provide insight into the performance of networks, applications, and services from a global perspective. ThousandEyes for Government is designed to help customers quickly identify and resolve network and application performance issues, improve user experience, and optimize the performance of critical applications and services. |
ThousandEyes for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-08-07 SRID#: SR24010 3PAO: Coalfire Point Of Contact: Cloudera Government Solutions Contact Email: government@cloudera.com Sponsor Names: GovRAMP Approvals Committee Service Description: Cloudera for Government is a secure and governed cloud service platform that offers a broad set of enterprise data cloud services with data analytics and artificial intelligence functionality. With Cloudera for Government, users can create and manage secure data lakes, self-service analytics, and machine learning services without installing and managing the data platform software. Cloudera for Government services are managed by Cloudera, but the customer’s data remains under their control in their AWS cloud account. Cloudera for Government lets customers: • Control cloud costs by automatically spinning up workloads when needed, scaling them as the load changes over time, and suspending their operation when complete. • Isolate and control workloads based on user type, workload type, and workload priority. • Combat proliferating silos and centrally control customer and operational data across multi-cloud and hybrid environments. |
Cloudera for Government | Paas | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-01-13 SRID#: SR23002 3PAO: A-lign Point Of Contact: NEOGOV Information Security Team Contact Email: infosec@neogov.net Sponsor Names: GovRAMP Approvals Committee Service Description: NEOGOV is a Software as a Service (SaaS) provider of cloud-based workforce management solutions, uniquely designed for the public sector, higher education, and public safety. NEOGOV offers Human Capital Management (HCM), Human Resource Information System (HRIS), and Talent Management Software (TMS) solutions that empower government agencies to seamlessly source, recruit, hire, onboard, develop, and retain a high quality workforce. Additionally, NEOGOV’s public safety workforce management platform provides a secure, all-in-one solution for public safety agencies to meet the compliance needs and complexities of their industry, allowing them to also recruit the best talent in the shortest time, train teams, and manage policies effortlessly. NEOGOV’s portfolio includes the following applications: Attract (Candidate Relationship Management - CRM), Insight (Applicant Tracking System), GovernmentJobs.com (Government Job Board), SchoolJobs.com (Education Job Board), Onboard (Employee Onboarding), Learn (Training Management), Perform (Performance Management), Ready (Field and New Role Training), Recall (Policy Training), eForms (Employee Document Management), Policy (Policy Management), Standards (Accreditation Management), CoreHR (Employee Lifecycle Management), Benefits (Benefit Plan Administration), Payroll (Pay & Tax Processing), Time & Attendance (Employee Time Tracking), Schedule (Personnel Scheduling), Engage (Community Outreach), Line (Public Safety Wellness App). |
NEOGOV Cloud | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2024-09-16 SRID#: SR22027 3PAO: Schellman Compliance, LLC. Point Of Contact: Casepoint Compliance Team Contact Email: iscompliance@casepoint.com Sponsor Names: GovRAMP Approvals Committee Service Description: Casepoint is a data discovery platform for legal, investigatory, compliance, and IT teams who struggle to get actionable insights for data-centric business processes like eDiscovery, investigations, and information requests. Casepoint empowers leading corporations and government organizations to reduce costs, lower risk, and improve time-to-insight. Casepoint’s easy-to-use AI-powered platform is purpose-built for organizations that require the highest level of security and scalability to meet the evolving demands of the modern data landscape. Casepoint Government is delivered as a SaaS offering using a multi-tenant government-only cloud computing environment and is used by government agencies to meet their complex needs, including: • Legal Hold • Regulatory Enforcement / Investigations • Litigation (eDiscovery) • FOIA / PRR • Congressional Inquiries • Legal Data Storage • Task / Case Strategy and Management The Casepoint Government platform includes Casepoint Legal Hold, Casepoint eDiscovery, Casepoint FOIA, Casepoint Filestore, APIs for cloud collections, task management, and an app builder. Casepoint Government provides agencies with the capabilities needed to manage large volumes of data in litigation, investigations, congressional inquiries, and FOIA requests, including cloud-based collections, processing, culling, review, and highly customizable productions. It also offers built-in artificial intelligence and analytics with advanced tools for predictive analysis, search, and data visualization. |
Casepoint Government eDiscovery | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-03-19 SRID#: SR24078 3PAO: Schellman & Company Point Of Contact: Glen Deskin Contact Email: gdeskin@checkpoint.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Check Point Infinity Platform for Government is a comprehensive cybersecurity solution designed to meet the stringent security and compliance requirements of government organizations. It integrates advanced threat prevention, centralized management, and cloud-native security capabilities to provide end-to-end protection across networks, endpoints, cloud environments, and email and collaboration platforms. Below is an overview of the platform's key components and capabilities: Key Components: ThreatCloud: The backbone of the Infinity Platform, ThreatCloud is the world’s largest collaborative cyber threat intelligence network. It processes over 86 billion transactions daily, leveraging artificial intelligence and machine learning to identify and block emerging threats in real time. ThreatCloud gathers intelligence from over 100,000 Check Point customers and Check Point Research, ensuring up-to-date protection against the latest vulnerabilities and attack vectors. Infinity Portal: A unified, cloud-based management platform that provides centralized visibility, control, and orchestration of security policies across all environments. It enables seamless integration of Check Point’s security solutions, ensuring consistent protection and simplified operations. The Infinity Portal supports compliance with government regulations by offering detailed reporting, auditing, and monitoring capabilities. Harmony Email & Collaboration: An API-based SaaS security solution that protects government email and collaboration platforms (e.g., Office 365 GCC) from advanced threats such as phishing, zero-day malware, account takeover, and data leakage. It operates in a "monitor-only" mode during initial deployment, ensuring no disruption to end-user workflows while providing actionable insights into potential threats. Harmony Email & Collaboration is designed to secure sensitive government communications and prevent unauthorized access to critical data. Differentiating Security Capabilities: Real-Time Threat Prevention: The Infinity Platform employs over 60 patented threat prevention engines to block attacks across all vectors, including network, endpoint, cloud, and mobile. Advanced technologies such as IPS, anti-ransomware, sandboxing, malware sanitization, and post-infection BOT prevention ensure proactive defense against known and unknown threats. Cloud-Native Security: The platform includes solutions for cloud posture management, native workload protection, and branch cloud security, ensuring secure operations in hybrid and multi-cloud environments. It supports visibility, threat hunting, and compliance monitoring for government cloud environments. Threat Intelligence Integration: ThreatCloud’s rich intelligence powers all components of the Infinity Platform, ensuring interconnected and consistent protection across all layers of security. Discoveries from Check Point Research continually enhance the platform’s ability to detect and prevent sophisticated attacks. Compliance and Scalability: The Infinity Platform is designed to meet government compliance standards, including StateRAMP requirements. Its modular architecture allows for scalability and customization to address the unique needs of government agencies. The Check Point Infinity Platform for Government provides a unified, proactive, and intelligent approach to cybersecurity, enabling government organizations to protect their critical assets and sensitive data from evolving cyber threats. |
Check Point Infinity Platform for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-01-13 SRID#: SR24012 3PAO: A-Lign Point Of Contact: Felipe Medina Contact Email: fmedina@geosolinc.com Sponsor Names: GovRAMP Approvals Committee Service Description: The VOS Sapphire® software suite is the only fully integrated workforce system in the country that provides universal employment, unemployment and case management solutions for job seekers, employers, service providers, and state and local agency staff. Offered as a web-based solution to enhance service delivery and employment outcomes, each module has been designed specifically to meet the diverse needs of American Job Centers, economic development agencies, unemployment insurance entities, human service and vocational rehabilitation agencies, correctional and educational institutions. VOS Sapphire® effectively manages all federally funded workforce benefit programs, labor exchange, case management, job aggregation, labor marketing information, service and fund tracking, human services, vocational rehabilitation federal reporting, and unemployment insurance benefits and tax. Flagship products/modules within VOS Sapphire® software suite include Virtual OneStop (VOS)®, VOS Sapphire AI®, Virtual LMI®, Virtual OneStop Reentry Employment Opportunities(VOS REO), America’s Labor Market Analyzer (ALMA)®, America’s Virtual OneStop®, Virtual Career Center (VCC), Reemployment Exchange®(REX), VOSGreeter®, VOScan®, VOSMeets, My Jobs Library, Virtual Job Fair, VOS Flex Pro, and the Geographic Solutions Unemployment System (GUS)® |
VOS Sapphire | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2025-01-13 SRID#: SR24027 3PAO: SecureIT Point Of Contact: Michael McGehee Contact Email: michael.mcgehee@telos.com Sponsor Names: GovRAMP Approvals Committee Service Description: Xacta® is a cyber GRC automation platform that supports assessment and authorization, remediation, and continuous monitoring. Xacta.ai builds on the platform with advanced AI capabilities that accelerate decision-making, reduce manual effort, and increase operational efficiency. Designed for IT risk and security compliance teams, Xacta operationalizes key security indicators (KSIs) across risk and compliance frameworks. The GovRAMP High-authorized SaaS Platform of Xacta includes Xacta 360™ with the Propagation Utility (PU) and, optionally, Xacta.io™ and Xacta.ai™. In addition to GovRAMP High, the SaaS version of Xacta is authorized at FedRAMP Class D (High), CMMC Level 2, CUI, and ISO 27001. Together, Xacta 360, Xacta.io, and Xacta.ai form a complementary suite of solutions that supports compliance and authorization for a variety of frameworks including, but not limited to, FISMA, NIST RMF, CNSSI 1253, NIST 800-53, NIST CSF, FedRAMP, COBIT 5, PCI-DSS, and ISO. The platform draws on a knowledgebase of over 5,000 security requirements and associated test procedures, cross-referenced across more than 100 security policies and standards, and produces artifacts in both human-readable office documents and machine-readable digital formats such as the Open Security Controls Assessment Language (OSCAL). Xacta 360 streamlines security, risk, and compliance programs using a project-based workflow. It features out-of-the-box cyber risk management templates, customizable in a no-code/low-code UI, and automated workflows with prerequisites, role-based approvals, and intelligent capabilities. Users can conduct asset inventory and risk assessments, generate required compliance documentation and audit artifacts in real time, and automate compliance for over 100 regulations and policies. Additionally, the Xacta 360 Propagation Utility allows administrators to easily update multiple active projects with changes from an assessment project workflow template. Xacta.io correlates results from multiple security products across your organization into a single view, and maps them to the relevant controls for security and risk management. Included with Xacta.io is Xacta MetriX™, which offers additional powerful, modular reporting capabilities that allow compliance teams to easily build and edit custom widgets and dashboards. Xacta.ai is the artificial intelligence capability at the core of the Xacta platform. Xacta.ai can be customized by integrating your organization’s data, enabling faster, more informed decisions and accelerating your GRC initiatives. Use Xacta.ai to draft control implementation statements, automatically check them for accuracy, generate targeted test procedures aligned with your environment, run queries on project artifacts, and more. Deployment options include Public SaaS up to FedRAMP Class D (High) and user provided infrastructure. |
Xacta SaaS | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-12-11 SRID#: SR23023 3PAO: Kratos Defense Point Of Contact: Drew Kahle Contact Email: drew.kahle@rubrik.com Sponsor Names: Arizona Department of Homeland Security Service Description: Rubrik Security Cloud - Government is a data security platform that delivers complete cyber resilience across enterprise, cloud, and SaaS applications. Built with zero trust design and powered by machine learning, Rubrik Security Cloud automates data policy management and enforcement, safeguards sensitive data, delivers data threat analytics and response, and orchestrates rapid cyber and operational recovery by surgically and rapidly restoring impacted apps, files, and objects. For more information please visit www.rubrik.com and follow @rubrikInc on X (formerly Twitter) and Rubrik on LinkedIn. |
Rubrik Security Cloud - Government (RSC-G) | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-02-10 SRID#: SR21031 3PAO: Schellman and Company, LLC Point Of Contact: Jennifer Aneke & John Keese Contact Email: zfgcompliance@zoom.us Sponsor Names: GovRAMP Approvals Committee Service Description: The Zoom for Government Platform is a Zoom product offering for the US Federal, and US Department of Defense communities. The Zoom for Government Platform is an all-in-one collaboration platform that makes connecting easier, more immersive, and more dynamic for people and businesses.Zoom for Government FedRAMP JAB authorized products include: • Zoom Cloud Video Conferencing - a cloud-based collaboration service which includes video, audio, content sharing webinars and collaboration.-Zoom Events - is a versatile platform that allows customers to create a variety of engaging virtual experiences for attendees. Events allow for users to manage their own branded event hub, track ticketing and registration, control user access from one dashboard, and allow networking during Zoom Events. • Zoom Rooms - software-based group video conferencing for conference and huddle rooms that run off-the-shelf hardware including a dedicated MAC or PC, camera, and speaker with an iPad controller. • Zoom Whiteboard - provides customers with a set of easy-to-use tools to collaborate together to capture ideas, processes, and concepts. With features focused on fostering innovation, Zoom Whiteboard makes it simple for hybrid teams to interact in new ways for seamless collaboration. • Zoom Canvas – a collaborative visual workspace that enables teams to organize, connect, and present information in a flexible, freeform environment, making it easy to structure complex projects and collaborate asynchronously across hybrid and distributed teams. • Zoom Hub – a centralized workspace that brings together teams, content, and collaboration tools in one organized destination, allowing organizations to create dedicated spaces for departments, projects, or teams to quickly access what they need and stay aligned. • Workspace Reservation - is a solution that enables customers to reserve flexible workspaces ahead of time or when they arrive at the office. Feature is enabled by the customer admin via the Zoom administrative portal and available workspaces are managed in the Room Management service. • Zoom Mesh - is a native client-based Mesh (eCDN) solution for Zoom Webinars and Events, that allows organizations to better manage how their users receive Webinar and Event media streams. It is all built within the existing Zoom for Government Client, subscribing to Zoom Mesh activates the ability of the Zoom for Government client to allow Mesh through customer designated client for meetings and Webinars. No transport or encryption is changed in the Mesh client communication with the Zoom for Government security boundary. • Continuous Meeting Chat allows meeting participants to communicate before, during, and after a meeting by creating a dedicated group chat in Zoom Team Chat for all meeting participants. When enabled, in-meeting chats will show up in that group chat as they are sent in the meeting, allowing meeting conversations to continue after a meeting ends. Schedule a recurring meeting and have a group chat that follows the group for the entire project, in and out of meetings. • AI Companion for ZfG, Zoom for Government’s generative AI assistant, empowers individuals by helping them be more productive, connect and collaborate with teammates, and improve their skills. AI Companion for ZfG is a set of generative AI features that can be enabled within the Zoom for Government platform. • Zoom Team Chat - send chat messages in public or private channels organized by projects, teams, or topics with the ability to share files, emojis, screenshots, and more. • Zoom Phone - a cloud-based phone system with traditional PBX features, integrated PSTN connectivity, enhanced emergency services, and support for calling from mobile apps, desktop apps, and legacy desk phone devices. • Zoom Node – an on-premises appliance solution that extends Zoom for Government services into a customer's local network infrastructure. Zoom Node supports a modular family of deployable services that enable organizations in mission-critical or connectivity-constrained environments to maintain local control over select workloads while remaining integrated with the Zoom for Government platform. • Zoom Contact Center (ZCC) - is an omnichannel contact center that's optimized for video and integrated into the same Zoom experience. Zoom Contact Center brings unified communications together with contact center capabilities. ZCC builds off the FedRAMP Authorized service Zoom Phone. ZCC is administered in the Zoom for Government administrative portal. • Zoom API - provides the ability for developers to easily add Video, Voice and Screen Sharing to your application. Our API is a server-side implementation designed around REST. The Zoom API helps manage the pre-meeting experience such as creating, editing, and deleting resources like users, meetings, and webinars. • The Zoom Meeting SDK - lets you display the familiar Zoom meeting and webinar experience in your app or website. The Meeting SDK interface resembles the Zoom client, except that it lives inside your own app or website. • Zoom Client - a local client that allows users to start/join a meeting, employ in-meeting controls for participants, hosts, and co-hosts, webinar controls, manage participants, share screen controls, chat, establish channels, add contacts, and modify settings. • The Zoom for Chrome PWA - allows customers to use FedRAMP authorized services Chat and Phone- , currently available on the desktop client or mobile app, within the Chrome web browser. • QSS - enables enterprise organizations to identify, troubleshoot, and resolve network and service disruptions in near real time for every user, host, and participant across Zoom Meetings, Webinars, & Phone (all FedRAMP authorized services) within their enterprise subscription. The change introduces a new Webhook API to the boundary to transfer this information over TLS 1.2 to customer owned tooling. Category: Content Collaboration, |
Zoom for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-01-28 SRID#: SR24084 3PAO: A-LIGN Point Of Contact: Amit Modi Contact Email: amit.modi@movius.ai Sponsor Names: GovRAMP Approvals Committee Service Description: The Movius solution offers scalable and secure communications as a service (SCAAS) for Bring Your Own Approved Device (BYOAD) devices as well as government issued cell phone programs. The MultiLine platform and solution offer application based or native experiences, that allow users to call and message through a secure business identity across any device, carrier, and connection type (Wi-Fi, Data, GSM, Satellite and Private). Movius MultiLine supports built-in recording and call/message capture, and storage for the entire workforce enabling surveillance, regulatory reporting, compliance management, and robust application security. The solution also enables work personal separation and drives productivity. |
Movius MultiLine | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-09-04 SRID#: SR24056 3PAO: Schellman Compliance, LLC Point Of Contact: Mary Schafer Contact Email: mschafer@abnormalsecurity.com Sponsor Names: The University of Texas at Austin Service Description: Abnormal Security for Government (Abnormal Gov) is a cloud-native, API-based offering that provides holistic email security for cloud email platforms – Microsoft365 and Google Workspace, against the full spectrum of email attacks including advanced phishing, fraud, account compromise, supply chain compromise, user-reporting phishing, and more. The platform connects via API to analyze thousands of signals from multiple data sets and precisely baseline known behavior of every employee within an organization and every vendor within the supply chain. Autonomous AI models enable Abnormal Gov to detect anomalous activity and stop never-before-seen attacks quickly and accurately. The platform also serves as an AI Security Co-worker by fully automating the triage and remediation of user-reported emails. AI models judge user-reported emails as safe, spam, or malicious and automatically remediate malicious emails across all affected users using AI, eliminating any manual intervention by security analysts. Additionally, AI models automatically learn the behavioral preferences of every employee through their folder movements of graymail and autonomously declutter inboxes from unwanted mail thereby boosting employee productivity. Abnormal Gov’s cloud email security product suite includes Inbound Email Security, Email Account Takeover Protection, AI Security Mailbox, Email Security Posture Management, and Email Productivity. The platform leverages a multi-tenant government cloud computing environment and is available for public, federal, state, local, and tribal governments. |
Abnormal AI for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-10-13 SRID#: SR24067 3PAO: A-Lign Point Of Contact: Troy Clark Contact Email: tclark@projectteam.com Sponsor Names: GovRAMP Approvals Committee Service Description: ProjectTeam for Government (PTG) is a cloud-based Project Management Information System (PMIS) used by federal organizations to manage construction programs and projects. It serves as a centralized hub for all project stakeholders, including owners, contractors, architects, and subcontractors, providing them with a collaborative platform to efficiently manage and track projects from inception to completion. In PTG users can track industry-standard processes such as budgets, contracts, change orders, payment applications, requests for information, submittals, design reviews, meeting minutes, and more. In addition to the default processes provided within the application, users with administrative access can build custom processes to track unique mission-critical requirements at both an organizational level and on specific projects. At its core, PTG offers a comprehensive suite of features and tools tailored specifically for the construction industry. These include document management, cost tracking, communication, and reporting functionalities. With its user-friendly interface and intuitive navigation, users can easily upload, organize, and share project documents, ensuring that all team members have access to the most up-to-date information. This promotes transparency, reduces errors, and enhances productivity by facilitating seamless collaboration and real-time communication. Category: Communications Systems, |
ProjectTeam for Government (PTG) | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-07-04 SRID#: SR22041B 3PAO: Schellman & Company Point Of Contact: Rainer VillaMercado Contact Email: Rainer.Villamercado@docusign.com Sponsor Names: State of Arizona Department of Homeland Security Service Description: DocuSign CLM is a secure contract lifecycle management product in DocuSign's Agreement Cloud. DocuSign CLM manages contracts in addition to all other types of documents across desktop, mobile, and partner applications like Salesforce. DocuSign CLM goes beyond standard document and contract management with advanced workflows that automate manual tasks and complex processes to speed time-to-revenue. Businesses use DocuSign CLM to optimize collaboration and processes across internal departments, as well as with prospects and customers. |
DocuSign Contract Lifecycle Managment (CLM) | SaaS | Moderate | Authorized |
|
Impact Level: Low SRID#: SR25092 3PAO: Prescient Security Point Of Contact: Rajib Banerjee Contact Email: rbanerjee@pmgpro.com Sponsor Names: N/A Service Description: The PMG Transportation Planning & Programming Platform consists of STIP Manager, FMIS Integration, STIP Viewer, and TIP Manager providing the features and functionality described as following: STIP Manager allows transportation agencies to create, amend, and report the federally required Statewide Transportation Improvement Plan through an easy-to-use web-based solution. STIP Manager places all applicable funding and budget information in a single location that is ready for querying and reporting. STIP Manager can also be paired with STIP Viewer, FMIS Integration, and TIP Manager (with TIP Viewer) add-ons for a more encompassing experience. STIP Manager functionality includes: • Create and manage multiple STIPs • Create and manage multiple STIPs • Create and manage specific STIP project data • Copy, move, remove, add child, or combine projects. • Full project history • Manage additions, deletions, and modifications • Route pending changes to the active/approved STIP in an ‘actions’ workflow • Standard Reports • Ad-Hoc Reports • API for STIP Manager • Full Administration Functionality • Define Quick Links • Full Internal Notifications Interface • Online Help Center The Financial Management Information System (FMIS) integration feature to STIP Manager allows users to create, modify, and inspect Federal Aid Projects. Users can sign authorization requests, track approval status, assign location information from the latest Highway Performance Monitoring Submittal (HPMS) data, and view obligation balances. FMIS Integration functionality includes: • Ability to create and edit FMIS projects • Ability to apply State Signatures • Supports upload to and download from FMIS • Standard Reports STIP Viewer is a public-facing add-on feature connected to STIP Manager. Through this feature, the general public can have viewing access to STIP information in an external website. This creates more awareness without compromising data. STIP Viewer is composed of a map-based interface which allows users to query for STIP projects. STIP Viewer functionality includes: • External web application for public consumption of Active/Approved STIP information. • Ability to post Draft STIP and STIP Revisions for public review and comment. • Quick Search Capabilities for easy filtering. • Filter results updated in both map and tabular format. • Comprehensive STIP in PDF format, including narrative or introduction document, available for download. TIP Manager is a feature for a Metropolitan Planning Organizations’ (MPOs) management of TIP information. This feature can be deployed as integrated with STIP Manager or independently as a standalone MPO instance having the same basic format and components. In either case, TIP Manager only displays data specific to the relevant MPO’s Projects, Actions, and Reports. This tool also provides administration features to create TIPs and Scenarios specific to individual MPOS. TIP Manager functionality includes: • Ability for MPOs to access all functionality within STIP Manager but specific to the TIP. • Ability to submit approved TIP modifications to STIP for seamless integration into the STIP. • Supports specific "TIP Viewers" tailored for each MPO. • Online Help Center Category: Cloud Services, |
PMG Transportation Planning & Programming Platform | SaaS | Low | Ready |
|
Impact Level: Moderate Authorization Date: 2023-02-07 SRID#: SR22034 3PAO: Kratos Defense Point Of Contact: Angela Kovach Contact Email: federal@everlaw.com Sponsor Names: GovRAMP Approvals Committee Service Description: Everlaw helps legal teams and government agencies navigate the increasingly complex ediscovery landscape to chart a straighter path to the truth. With Everlaw, government agencies of all sizes are able to transform their approach to discovery, litigation, investigations, compliance, and FOIA/Public Records Requests. Combining speed, security, and ease-of-use in a unified discovery platform, cross-functional legal teams are empowered to investigate issues more thoroughly, uncover truth more quickly, and present their findings more clearly. Built natively on AWS GovCloud (US), Everlaw is committed to innovation and future-proofing agencies against emerging data types and other fluctuating needs. Founded in 2010 and based in Oakland, California, Everlaw’s mission is to promote justice by illuminating truth. |
Everlaw | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-01-21 SRID#: SR23032 3PAO: A-Lign Point Of Contact: Marquel Waites Contact Email: mist-security@juniper.net Sponsor Names: GovRAMP Approvals Committee Service Description: HPE Mist Government Cloud uses a combination of artificial intelligence, machine learning, and data science techniques to optimize user experiences and simplify operations across the wireless, wired, and SD-WAN branch and campus environments. Data is ingested from numerous sources, including HPE Access Points, Switches, Session Smart Routers (SSR), and Firewalls (SRX) for end-to-end insight into user experiences. These devices work in concert with Mist AI to optimize user experiences from client to cloud, including automated event correlation, root cause identification, Self-Driving Network™ operations, network assurance, proactive anomaly detection, and more. HPE also leverages Mist AI for next-generation customer support. For example, it is the foundational element behind Marvis, the industry’s first AI-driven Virtual Network Assistant, providing extensive insight and guidance to IT staff via a natural language conversational interface. As a result, Mist AI saves operators time and money with faster problem resolution and fewer onsite visits. In addition, users benefit from a network infrastructure that is more predictable, reliable, and measurable. Marvis Virtual Network Assistant is the first virtual network assistant (VNA) purpose-built with Mist AI for enterprise WLANs, LANs, and WANs. It transforms network operations from reactive troubleshooting to proactive remediation through self-driving actions. HPE Mist Wi-Fi Assurance service is based on machine learning and driven by Mist AI. It replaces manual troubleshooting tasks with automated wireless operations to make Wi-Fi predictable, reliable, and measurable, providing unique visibility into user service levels. HPE Mist Wired Assurance service brings Mist AI to switching. It sets a new network management standard with AI-driven operations and automation, improving the experiences of devices connected to resources through Juniper EX/QFX Series Ethernet Switches for branch and campus deployments. HPE Mist WAN Assurance service simplifies operations and improves visibility into end-user experiences while shortening the time to repair wired and wireless devices. Premium Analytics offers network visibility and business intelligence to drive your digital transformation journey. |
HPE Mist | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-07-04 SRID#: SR22041 3PAO: Schellman & Company Point Of Contact: Rainer VillaMercado Contact Email: rainer.villamercado@docusign.com Sponsor Names: State of Arizona Department of Homeland Security Service Description: DocuSign is a San Francisco- and Seattle-based company that provides electronic signature technology and Digital Transaction Management services to facilitate electronic exchanges of contracts and signed documents. DocuSign’s features include authentication services, user identity management and workflow automation. Signatures processed by DocuSign are comparable to traditional signatures based on the product's compliance with the ESIGN Act as well as the European Union’s Directive 1999/93/EC on electronic signatures. DocuSign eSign for government entities is operated and managed as a government community cloud and provides government customers with an enterprise signing service to facilitate paperless workflow management. |
DocuSign eSignature | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-06-15 SRID#: SR26008 3PAO: Schellman Point Of Contact: Eric Wolf Contact Email: eric.wolf@marsh.com Sponsor Names: GovRAMP Approvals Committee Service Description: Mercer GovCloud is a Software as A Service (SaaS) Cloud Service Offering which provides a secure government only cloud environment in which Mercer can collaborate with public sector clients. Public sector clients of Mercer US, LLC include State and Federal clients, and federal contractors. Mercer GovCloud is built on an Azure GCC and AWS GovCloud environment which meets all Moderate impact GovRAMP requirements for handling government sensitive, PII/SPI/PHI data. The environment is designed to meet government requirements based on NIST 800-53 R5, FedRAMP, and GovRAMP. Mercer leverages Microsoft Office capabilities in a government community cloud (GCC) to deliver client and contractor collaboration. Mercer GovCloud integrates with Kiteworks for Government to provide the backbone for secure email, workspace file-sharing and managed file transfers. Mercer GovCloud is also integrated with QlikSense for Government to deliver client visualizations through secure interactive dashboards. Mercer US, LLC leverages the Mercer GovCloud offering to support state and federal agencies in achieving their mission through data-driven strategy, actuarial and financial analysis, clinical and behavioral health expertise, human capital and investment strategies, and operational transformation. Our multidisciplinary team integrates these disciplines to deliver compliant, secure, and high-performing solutions aligned with government security standards to support transparency and data integrity, aligned with CMS, HIPAA, and GovRAMP standards. |
Mercer GovCloud | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-09-14 SRID#: SR24076 3PAO: Fortreum Point Of Contact: Matt Ferguson Contact Email: mattf@knowledgeservices.com Sponsor Names: GovRAMP Approvals Committee Service Description: dotStaff is delivered as a SaaS offering using a multi-tenant SaaS cloud computing environment. Knowledge Services dotStaff is a Software as a Service (SaaS) offering that includes a Vendor Management System and a Survey Management module. The dotStaff Vendor Management System allows for organizations to manage the contractor life cycle, statement of work bidding, tracking, and selection where contingent or temporary labor is used. Government customers enter position requisitions or projects that are viewable by Contractors, who can submit responsive bids. Activity associated with the winning bid is entered, tracked, and reported. The Survey Management module provides survey automation capabilities, and can be configured to survey certain locations, property types and/or resident classifications. Customers can send survey links, schedule face to face interviews, request information through the Survey Management module. SURVEY MANAGEMENT The dotStaff Survey module delivers real-time, automated surveys which enhance access to actionable data. The module automates and improves the performance of in-person, mobile, web-based, and telephone surveys, including scheduling and data reporting. VENDOR/CONSORTIUM MANAGEMENT The dotStaff Vendor Management System allows for organizations to manage the contractor life cycle, statement of work bidding, tracking, and selection where contingent or temporary labor is used. FIELD BASED/MOBILE WORKER MANAGEMENT All services allow field-based and mobile workforce support through the dotStaff application. FORMS dotStaff Forms is utilized for the creation, submission, approval, and management of customized forms. Form submissions can be tracked via a submission tracking page where forms can be assigned a status, have permissions granted, add notes, and download as PDF. In addition, dotStaff Forms allows users to setup workflows to run automatically based on user defined set of criteria. Users with appropriate permissions can view workflow history, check the status of a workflow, and edit/configure workflows. Category: Cloud Security, |
dotStaff | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-11-28 SRID#: SR23014 3PAO: Coalfire Point Of Contact: Richard Brown Contact Email: Fedrampgccx@genesys.com Sponsor Names: GovRAMP Approvals Committee Service Description: Genesys Cloud™ is an AI-powered experience orchestration platform with a full suite of omnichannel contact center capabilities, built-in workforce engagement management (WEM) and artificial intelligence (AI). It is available to the public, federal, state, local, and tribal governments, as well as research institutions, federal contractors and government contractors. Features and capabilities include: All-in-One open platform - Genesys Cloud is a multi-tenant SaaS offering with a comprehensive set of native Contact Center-as-a-Service (CCaaS) product capabilities built on a single platform — running on Amazon Web Services (AWS). Native AI - Genesys Cloud has built-in conversational and predictive AI capabilities. It utilizes technologies such as predictive analytics, machine learning, and natural language understanding to automate, route and personalize interactions. Omnichannel routing - Genesys Cloud supports calls, email, web, text and social messages. A single routing engine leverages a variety of routing algorithms, evaluation and scoring methods to determine the next best action while maintaining context, intent, and desired outcome. Speech-enabled IVR & self-service – Genesys Cloud offers multilingual speech-enabled IVR with natural language understanding (NLU) technology. Automated bot assistants provide continuous support for routine queries. Workforce Engagement Management - A native suite of AI-powered WEM capabilities supports employee onboarding and includes workforce schedule management (WFM), coaching, speech & text analytics, quality management, performance management and gamification. Outbound campaigns – Genesys Cloud supports outbound dialing and digital campaigns for sending proactive notifications or contacting contact lists of people in accordance with programmable rules. Analytics and reporting – Genesys Cloud provides real-time dashboards and analytics for contact center management, with customizable reporting and drill-down capabilities for performance analysis. Integrations - The platform includes a rich set of open APIs, integration methods and an ecosystem of 600+ pre-built solutions and applications available via the AppFoundry® Marketplace. |
Genesys Cloud CX | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-08-19 SRID#: SR24017 3PAO: Schellman & Company Point Of Contact: Kara McMillan Contact Email: karmcmil@cisco.com Sponsor Names: GovRAMP Approvals Committee Service Description: AppDynamics GovAPM is a software-as-a-service (SaaS) application performance monitoring (APM) solution. AppDynamics GovAPM provides end-to-end visibility into the performance of applications. AppDynamics application performance monitoring and business intelligence solutions provide organizations real-time visibility into application environments and strategic insights that drive business outcomes. By utilizing industry-leading monitoring and analytics features, IT departments can automatically identify performance anomalies and resolve issues before they impact customers or revenue streams. Our unique combination of application performance and business metrics gives enterprises the power to deliver reliable performance and a flawless customer experience. |
AppDynamics | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-07-23 SRID#: SR22010 3PAO: Schellman Compliance LLC Point Of Contact: Casepoint Compliance Team Contact Email: iscompliance@casepoint.com Sponsor Names: GovRAMP Approvals Committee Service Description: eCase is a dynamic case management and rapid application development platform that empowers professionals to elevate trust in public institutions. With secure and collaborative information and document management, robust reporting, adaptive workflows, role-based security, and comprehensive audit trail capabilities, eCase helps public sector clients automate processes, reduce costs, improve transparency, and ultimately achieve better outcomes with less risk while maintaining compliance within demanding regulatory environments. eCase and eCase COTS solutions (including FOIAXpress Correspondence, OIG Audits and Investigations, and Government Workforce Management) are FedRAMP-moderate certified PaaS/SaaS. For more information, visit opexustech.com. |
Government Cloud Solutions (OGCS) | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2022-11-27 SRID#: SR22012 3PAO: A-Lign Point Of Contact: Shaun Reardon Contact Email: sreardon@keepersecurity.com Sponsor Names: GovRAMP Approvals Committee Service Description: Keeper Security Government Cloud (KSGC) transforms the way government organizations protect their operations against password-related data breaches and cyberthreats including ransomware and phishing attacks. KSGC provides IT administrators with visibility, management and control over their organization’s password security, monitoring and reporting. The KSGC cybersecurity platform utilizes a zero-trust framework and zero-knowledge security architecture and integrates with on-premise, cloud and hybrid-cloud environments. KSGC utilizes granular, role-based administrative controls including delegated administration. IT Administrators can enforce critical internal control policies including password complexity, IP white listing, two-factor authentication and Data Loss Prevention (DLP). KSGC’s modern provisioning tools allow organizations to rapidly deploy cybersecurity protection to thousands of users, on all their devices, and can integrate with any identity stack including AD, LDAP, SSO (SAML), SCIM and APIs. The cybersecurity platform includes robust event logging, reporting and auditing capabilities with seamless integration with Security Information and Event Management (SIEM) systems. |
Keeper Security Government Cloud | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-07-04 SRID#: SR23003 3PAO: Fortreum Point Of Contact: Marie Rainis Contact Email: marie.rainis@qlik.com Sponsor Names: GovRAMP Approvals Committee Service Description: Qlik Cloud Government is a SaaS platform purpose-built for delivering Qlik technology to U.S. public sector customers within a safe, FedRAMP-compliant cloud environment. Qlik empowers organizations with data and analytics technology that improves decision-making and solves their most challenging problems. Qlik Cloud Government simplifies data and analytics operations across an organization through a single platform that integrates data sources into an analytics environment where users of all levels can build analytics assets, ask questions with AI, and collaborate with others to drive action. |
Qlik Cloud Government | SaaS | Moderate | Authorized |
|
Impact Level: Low Authorization Date: 2025-05-20 SRID#: SR21009 3PAO: Schellman and Company, LLC Point Of Contact: Tina Price Contact Email: pricet@oclc.org Sponsor Names: GovRAMP Approvals Committee Service Description: OCLC is a nonprofit global library organization. Through OCLC, member libraries cooperatively produce and maintain WorldCat, the world’s most comprehensive global network of data about library collections and services. |
WorldShare Management Services | SaaS | Low | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-02-22 SRID#: SR24090 3PAO: A-LIGN Point Of Contact: Michael Bonville Contact Email: michael.bonnville@levelblue.com Sponsor Names: GovRAMP Approvals Committee Service Description: Fortra Managed WAF provides proactive web application and API security without the complexity of managing it yourself. With our fully managed, enterprise-level, cloud ready WAF, you have 24/7 SOC support that continuously tracks and blocks web app exploits from known and unknown threats. Fortra Managed WAF delivers precise, adaptive security powered by machine learning, real-time threat intelligence, and expert oversight. We build tailored traffic profiles for your unique environment, refined in detect mode to ensure high-fidelity protection and block malicious traffic without disrupting legitimate users or business operations. With dynamic IP reputation and real-time trust scoring, you’ll gain deep visibility and control over your application traffic. |
LevelBlue Managed Web Application Firewall (WAF) | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-12-04 SRID#: SR23038 3PAO: Schellman & Company Point Of Contact: Colin Whitlatch Contact Email: cwhitlatch@kahua.com Sponsor Names: GovRAMP Approvals Committee Service Description: Government, contractors and public entities use Kahua`s collaborative construction management solutions to improve efficiency, lower costs and reduce project risk throughout the lifecycle of their capital programs. Kahua’s purpose-built solutions for government, program managers and contractors enable rapid implementation that minimizes time-to-value and enhances user adoption. And with the industry’s only low-code application platform agencies can easily customize existing Kahua apps or even build their own new apps to run their programs and projects at peak efficiency today and rapidly adapt as conditions dictate. |
Government Network | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-08-19 SRID#: SR21015 3PAO: Schellman and Company, LLC Point Of Contact: Sean Frazier Contact Email: sean.frazier@okta.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Okta IDaaS Regulated package includes a number of components that may be used to provide methods of authentication and provisioning control including Okta core, Okta Mobile, Okta Verify, Okta Directory Agent, and Okta IWA Agent. |
Okta IDaaS | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-05-03 SRID#: SR24079 3PAO: Coalfire Point Of Contact: Adam Hall Contact Email: adam.m.hall@oracle.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Oracle Fusion Cloud (OFC) is Oracle's Software as a Service (SaaS) suite of Cloud Applications providing comprehensive financial, project management, sales, human resources, and supply chain services. |
Oracle Fusion Cloud | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2023-02-20 SRID#: SR22015 3PAO: Fortreum Point Of Contact: Siddique Chaudhry Contact Email: Siddique.chaudhry@snowflake.com Sponsor Names: GovRAMP Approvals Committee Service Description: Snowflake is the only data warehouse built for the cloud, enabling the data-driven enterprise with instant elasticity, secure data sharing and per-second pricing, across multiple clouds. Snowflake combines the power of data warehousing, the flexibility of big data platforms and the elasticity of the cloud at a fraction of the cost of traditional solutions. Find out more at https://www.snowflake.com/. |
Snowflake Data Cloud on Azure Government | SaaS | High | Authorized |
|
Impact Level: High Authorization Date: 2026-03-23 SRID#: SR25094 3PAO: Fortreum Point Of Contact: Philip Hickson Contact Email: phickson@omnissa.com Sponsor Names: GovRAMP Approvals Committee Service Description: Workspace ONE (WS1) is delivered as a SaaS offering using a multi-tenant Hybrid cloud computing environment. WS1 provides industry-leading mobile device, email, application, content, and browser management solutions, allowing organizations to easily deploy, configure, secure, manage and support smartphones, tablets, laptops and other devices across multiple mobile applications and operating systems. |
Omnissa Government Services - Workspace ONE | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-03-15 SRID#: SR24081 3PAO: Linford & Company Point Of Contact: Ruth Benson Contact Email: ruth@inteum.com Sponsor Names: GovRAMP Approvals Committee Service Description: Minuet is a cloud-based software application developed by Inteum, designed to manage the entire intellectual property (IP) lifecycle. It is typically used by universities, research institutions, and corporations to handle: Invention disclosures, Patent and licensing management, Contract and agreement tracking, Reporting and compliance. Minuet helps technology transfer offices (TTOs) and IP departments streamline operations, ensure regulatory compliance, and securely manage sensitive inventor and IP-related data. |
Minuet | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-07-07 SRID#: SR24006 3PAO: Fortreum Point Of Contact: Louis Simonen Contact Email: louis@orca.security Sponsor Names: GovRAMP Approvals Committee Service Description: Orca Security provides an agentless Cloud Security Platform that discovers all cloud assets, and identifies, prioritizes, and remediates risks and compliance issues across your cloud environments. The platform detects cloud risks, including vulnerabilities, malware, misconfigurations, API risks, lateral movement risks, weak and leaked passwords, and overly permissive identities. Orca deploys in minutes, provides visibility into all your assets, and automatically includes new assets as they are added. The Orca Platform helps federal agencies and contractors achieve regulatory compliance with over 65 out-of-the-box frameworks, CIS Benchmarks, and custom compliance checks. Leveraging a Unified Data Model, Orca performs contextual analysis of all the risks in your cloud estate, uncovering potential attack paths (with references to the MITRE ATT&CK framework), enabling rapid identification of which risks present the highest danger to mission data and security objectives. |
Orca Cloud Security Platform | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-07-18 SRID#: SR23066 3PAO: Lunarline Point Of Contact: Justin Fidler Contact Email: justin@sona-systems.com Sponsor Names: GovRAMP Approvals Committee Service Description: Sona Systems offers a cloud-based solution for universities to manage research participation. |
Experiment Management System (Enhanced Security Edition) | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2026-05-12 SRID#: SR26003 3PAO: Schellman & Company Point Of Contact: Brett Fox Contact Email: bfox@paloaltonetworks.com Sponsor Names: GovRAMP Approvals Committee Service Description: This is our Identity and Privilege Cloud offering on Identity Security Shared Services Platform. |
Human Identity Government Services | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-06-18 SRID#: SR22037 3PAO: Schellman & Company, LLC Point Of Contact: Alberto De Benito Aznar Contact Email: TeamMate-FedRAMP@wolterskluwer.com Sponsor Names: GovRAMP Approvals Committee Service Description: TeamMate Audit and TeamMate Controls are two integrated solutions that support government agencies in managing audits and internal controls within a secure cloud environment. TeamMate Audit enables end-to-end audit planning, execution, issue tracking, and reporting, while TeamMate Controls supports the documentation, testing, and monitoring of internal controls and remediation activities. Together, they provide a centralized approach to audit and control management, helping agencies improve oversight, consistency, and risk management. |
TeamMate | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-06-01 SRID#: SR26011 3PAO: Coalfire Point Of Contact: Jeannette Beaudry Contact Email: jbeaudry@solventum.com Sponsor Names: GovRAMP Approvals Committee Service Description: Solventum Clinician Productivity Solutions Platform is a mixed tenant environment for commercial and government organizations. Customers of CPS can be provisioned as GovRAMP or non-GovRAMP tenants. Our core suite of products includes the following: Solventum TM Clinical Documentation Service (CDS) supports Solventum applications with user profile training, profile and recognizer storage for speech recognition, draft transcript creation for backend services, and infrastructure to link frontend speech products to remote recognition servers. CDS also includes Solventum's Epic Token Service for direct integration with Epic HyperdriveTM. Solventum TM FluencyDirect TM is a speech recognition software solution designed for clinicians to streamline the creation of clinical notes directly within electronic health records (EHRs). It uses natural language understanding to contextually comprehend the patient's narrative, improving documentation accuracy. Multi-User Management (MUM) is a microservice-based web application administrative tool that manages user accounts and settings. Solventum TM Fluency TM for Transcription (FFT) is a cloud-based transcription solution that helps healthcare organizations efficiently manage workflows using speech recognition, telephony, and dictation tools. Physicians can generate documents themselves or send them for transcription and later review. FFT also includes a business intelligence web app for global clients to monitor workflow, product usage, and optimization metrics for the Fluency product line. Solventum TM Fluency TM Voice Manager (FVM) is a Solventum-hosted application that is used for capture of telephony-based dictation. The captured dictation is subsequently routed to FFT for transcription routing. The backend Admin App is used for configuration of telephony prompts and workflow maintenance. Solventum TM CDI Collaborate is a Solventum hosted web application that is client facing and enables Hospital CDI specialists to review encounter documentation to help identify any gaps or inadequacies to improve document integrity. Solventum TM CDI Engage is a Solventum product that is implemented as a client/server architecture to deliver Nudges and Queries to clinicians. We have client apps that run as plugins that run as part of the Solventum TM FluencyDirect TM ecosystem on the provider's desktop. Solventum TM CDI Engage One TM provides physicians with real-time automated reminders for documentation needs during inpatient encounters, integrating seamlessly into their workflow through the Fluency Direct control bar. For cases requiring further clinical review, CD' is presented with clear actionable opportunities and can quickly supply physicians with appropriate clinical language to ensure documentation is complete. CD' access is available via the CD' Collaborate Application or the 360 Encompass CD' Application based on system preference. Note: CDI Engage One is comprised of CDI Collaborate, CDI Engage and SolventumTM 360 EncompassTM system. CDI Collaborate and CDI Engage are included in this authorization boundary and 360 Encompass is included in the Solventum Revenue Cycle SaaS authorization boundary. Solventum Physician Query Mobile and Solventum Advanced Query Messenger are mobile applications that run on iOS and Android devices to show CDI queries to providers. |
Solventum Clinician Productivity Solutions SaaS | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2024-07-21 SRID#: SR23056 3PAO: Kratos Defense Point Of Contact: Brian Smith Contact Email: smith.brian@microsoft.com Sponsor Names: GovRAMP Approvals Committee Service Description: Microsoft 365 (M365) Government Community Cloud (GCC) is a suite of cloud-hosted messaging and collaboration services to meet the unique and evolving requirements of the United States Federal, State, Local, and Tribal governments, as well as contractors holding or processing data on behalf of the US Government. These cloud-based services are designed to provide organizations with streamlined communication, high availability, comprehensive security, and simplified information technology (IT) management. M365 GCC provides the interactivity of on-premises client and server applications with the flexibility and scalability of web-based services. M365 GCC leverages Azure Government as the IaaS/PaaS for the underlying infrastructure and hardware. Therefore, M365 GCC relies on Azure Government-inherited services. For more information on these Azure Government services, refer to the Azure Government ATO package. To be covered by the GCC GovRAMP Authorization, customers must purchase a GCC SKU. |
M365 Government Community Cloud & Supporting Services | SaaS | High | Authorized |
|
Impact Level: High Authorization Date: 2026-10-06 SRID#: SR26022 3PAO: Kratos Defense Point Of Contact: Christine Kwofie Contact Email: christine.kwofie@pega.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Pega Cloud for Government® (PCFG) is a unified, Java-based application development platform with patented technology designed for governments to facilitate rapid scaling, reuse, and collaboration. |
PEGA Cloud for Government | Paas, SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-08-19 SRID#: SR26004 3PAO: A-Lign Point Of Contact: Nicole Anderson Contact Email: Nicole.Anderson@encoura.org Sponsor Names: GovRAMP Approvals Committee Service Description: Encoura Reach is a solution for reaching across campus, from admissions to student success to alumni engagement. It guides and encourages an individual along their experience with the institution. The experience becomes a collection of interactions, building the unique story that each person’s journey tells. Institutions use those interactions, combined with the data gathered, to strengthen connections with their community in a personalized way. With powerful insights from that data, institutions can be strategic and agile in making the decisions that make a difference in bringing in the next class, driving retention initiatives, and meeting advancement goals. |
Encoura Reach | SaaS | Moderate | Authorized |
|
Impact Level: Low Authorization Date: 2026-06-09 SRID#: SR26007 3PAO: Coalfire Point Of Contact: Nathan Faulkner Contact Email: nfaulkner@kmilearning.com Sponsor Names: GovRAMP Approvals Committee Service Description: TRAIN is the trusted training source for public health professionals. Reaching over 6 million users, TRAIN brings together a community of health departments, federal health organizations, emergency preparedness-focused groups, academic institutions, and others dedicated to building a strong public health workforce. Our Learning Management System (LMS) offers the largest collection of free courses accessible in one central learning hub for public health professionals. |
TRAIN Learning Management System | SaaS | Low | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-03-11 SRID#: SR25093 3PAO: Lunarline Point Of Contact: Josh Lober Contact Email: josh.lober@eschat.com Sponsor Names: GovRAMP Approvals Committee Service Description: ESChat for Government is a hardened version of the ESChat broadband communication, collaboration, and interoperability platform. ESChat is a Secure Broadband Push-to-Talk (PTT) communication system that facilitates secure inter-agency PTT communication, multimedia messaging, and a Common Operating Picture (COP) within and between agencies for mutual-aid or tactical purposes. ESChat for Government also supports external interfaces including Land Mobile Radio (LMR), dispatch consoles, and logging recorders There are three main components that make up this offering: - The ESChat portal is a browser-based application which allows customers to manage all aspects of their network including managing accounts, devices, groups, integrations,live and historical location display, etc. - The ESChat clients are mobile applications (Android, iOS, Linux), Land Mobile Radio (LMR) gateways, and PC Client applications that communicate using the ESChat protocol. The ESChat clients are the functional endpoints that the users of the system interact with to perform Push-to-Talk voice and multimedia messaging communications with one another. - The ESChat back-end services provide ESChat users with inter-carrier, inter-agency, inter-system, and inter-vendor interoperability all managed and controlled within the authorization boundary, ensuring ESChat is the only solution needed to provide reliable, secure, and interoperable communications. |
ESChat for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-01-21 SRID#: SR23050 3PAO: Coalfire Point Of Contact: Eric Weiss Contact Email: GovRAMP@cisco.com Sponsor Names: GovRAMP Approvals Committee Service Description: Cisco Security Cloud for Government provides cloud-based security solutions with multiple component products. Cisco Secure Access for Government Cisco Secure Access for Government is a comprehensive Security Service Edge solution that empowers Federal, State, and Local agencies to secure their workforce and data, simplify operations, and advance their mission with confidence. Its adaptive security capabilities, powered by Cisco Talos and AI, enable real-time threat detection, behavioral analysis, and predictive defense—ensuring proactive protection of your people and data against evolving cyber risks. With a comprehensive zero trust approach and a unique unified client, users gain seamless, secure access to critical applications across devices and locations—without compromising usability or performance. IT teams benefit from a single platform that centralizes management, streamlines policy enforcement, and reduces overhead. AI-driven automation accelerates response times and reduces human error, while FedRAMP-moderate integrations with solutions like Duo and Cisco SD-WAN will enable a compliant, Zero Trust architecture tailored for public sector needs. Cloud-native and continuously updated, Cisco Secure Access removes hardware complexity and scales effortlessly to meet the demands of dynamic government environments. The result: stronger security, improved user experience, and simplified operations—all built to protect the mission and serve the public. • Secure Access for Government includes the following: Secure Internet Access (SIA) and Secure Private Access (SPA). Both products have Essentials and Advantage SKUs. • Offers robust protection against modern-day cyber threats through Zero Trust Network Access, DNS security, Secure Web Gateway (SWG), Data Loss Prevention (DLP), Cloud-Delivered Firewall (FWaaS), Cloud Access Security Broker (CASB), VPN as-a-Service (VPNaaS), Advanced Malware Protection, and Talos® Threat Intelligence capabilities. • Extends DNS security with an Integration with the Cybersecurity and Infrastructure Security Agency (CISA’s) Protective DNS (PDNS). • When integrated with Catalyst® SD-WAN it forms a complete SASE solution. Integration with Catalyst SD-WAN is coming in Q2 FY26. • Offers protection through Federal Information Processing Standard (FIPS)-compliant* client binaries for roaming devices and mobile devices • Remote Browser Isolation (RBI) included . Cisco Umbrella for Government Cisco Umbrella for Government delivers advanced, cloud-native cybersecurity, ensuring protection and compliance for government agencies to support their mission. It significantly uplevels government cybersecurity, offering comprehensive protection that meets the unique needs of government agencies. Cisco Umbrella for Government provides a comprehensive security suite with DNS-layer security and Secure Internet Gateway (SIG) capabilities, such as secure web gateway (SWG) , cloud-delivered firewall and intrusion prevention (Snort IPS), cloud access security broker (CASB), and data loss prevention (DLP), and integration with CISA Protective DNS. The feature set is comparable to the Cisco Umbrella product in use by over 30,000 Enterprise customers. Cisco Secure Access for Government includes more robust SSE capabilities than Cisco Umbrella for Government. Agencies looking for ZTNA and a high-performance architecture should choose Secure Access for Government. Cisco Secure Cloud Control - Firewall Management for Government Cisco Security Cloud Control - Firewall Management for Government delivers cloud-native firewall policy and device management through a unified management plane accessible through an intuitive web-based console. It enables centralized, scalable, and secure orchestration of Cisco next-generation firewalls (NGFWs) — including ASA and Secure Firewall Threat Defense (FTD) devices — across hybrid, cloud, and on-premises environments. With real-time visibility into traffic and threats, automated policy and object updates, and zero-touch provisioning for remote deployments - Security Cloud Control Firewall Management for Government reduces operational complexity for IT teams while strengthening cyber resilience and enabling secure modernization across mission-critical infrastructure. Cisco Multicloud Defense for Government Cisco Multicloud Defense for Government is designed to provide consistent, automated protection across multicloud environments, including AWS, Azure, GCP, and OCI. It integrates network security with multicloud networking, offering multi-directional protection to stop inbound attacks, prevent lateral movement, and block data exfiltration. With its centralized SaaS control plane, Cisco Multicloud Defense simplifies security management, enabling organizations to create and enforce unified security policies across all cloud environments in real-time. By leveraging advanced features such as dynamic policy management, continuous asset discovery, and automation, Cisco Multicloud Defense empowers organizations to reduce complexity, enhance operational efficiency, and maintain robust security across their multi-cloud infrastructure. |
Security Cloud for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-02-25 SRID#: SR23059 3PAO: Kratos Defense Point Of Contact: Usama Jawed Contact Email: usama.jawed@microsoft.com Sponsor Names: GovRAMP Approvals Committee Service Description: A modern solution for the Women, Infants, and Children Program impacting participation, eligibility, and retention. |
WIC Mosaic | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-05-20 SRID#: SR23057 3PAO: Fortreum Point Of Contact: Steven Ryan Contact Email: steven_ryan@trendmicro.com Sponsor Names: GovRAMP Approvals Committee Service Description: Trend Micro Vision One for Government is a modern security operations platform that enables organizations to detect, investigate, prioritize, and respond to threats faster. With built-in security analytics and threat intelligence, Trend Micro Vision One correlates data across multiple security layers from native sensors and third-party data sources to help security teams quickly see the full story of an attack and respond faster and more confidently. Trend Micro Vision One serves the EDR use case with our Trend Micro Endpoint Sensor while delivering a solution path to a broader XDR strategy to extend detection and response to additional attack vectors, including servers and cloud workloads. Built for the SOC analyst, CISO, and threat hunter, this platform leverages AI and predictive machine learning to arm defenders with earlier threat detection and automated response options that make a difference. The visibility and efficiency provided by Trend Micro Vision One makes great security teams even better, enabling them to do more with less. Trend Micro is trusted by 9 out of the top 10 Fortune 500 companies, blocks over 94 billion threats per year, analyzes over 100 TB of threat information per day and processes over 2.5 trillion events per day. We are cyber security experts. |
Trend Micro Vision One for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-12-16 SRID#: SR24049 3PAO: Schellman Point Of Contact: Kate Sullivan Contact Email: ksullivan@powertrain.com Sponsor Names: GovRAMP Approvals Committee Service Description: Software as a Service (SaaS) for the PowerTrain State Learning Enclave (SLE) supporting training and on-line system delivery, tracking, and reporting as well as a range of human capital solutions. StateRAMP product offerings include: Learning eXperience Platform (LXP) - Full Learning Management System (LMS) based on Moodle ™ - LXPgov – LMS Express - Custom modules to support government agencies including Single Sign-On, Two-Factor Authentication, registration, wait list, and enhanced reporting - Content Management System (CMS) - Learning Record Store (LRS) connected to learning activities and integrated with the LMS via xAPI - Additional Secure on-line applications including: - Event Registration System - Career Mapping Tool - Talent Management System (TMS) - Competency Management - Reporting Tool - Testing System Survey Tool. |
Government Learning Enclave (GLE) | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-11-19 SRID#: SR22022 3PAO: Schellman Point Of Contact: Abel Sanchez Contact Email: abel.sanchez@rackspace.com Sponsor Names: GovRAMP Approvals Committee Service Description: Rackspace Government Cloud (RGC) is purpose-built to help organizations achieve Assessment & Authorization faster and with cost savings of up to 70%. The platform is designed to support a government agency, systems integrator, or independent software vendor. Rackspace Government Cloud (RGC) wraps VMware and AWS in a secure-by-design management platform to meet the compliance requirements for FedRAMP and DoD Cloud Computing SRG. Customer solutions are deployed and managed in secured enclaves within US Rackspace datacenters and/or AWS East/West and GovCloud. Customers are provided with dedicated application stacks to maintain data security at the necessary levels. All this is backed by a 24x7x365 U.S. only support model that allows Rackspace to provide the highest levels of assurance and security to our government customers. |
Rackspace Government Cloud | Paas | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2024-06-23 SRID#: SR23081 3PAO: Coalfire Point Of Contact: Rico McGee Contact Email: rico.mcgee@oracle.com Sponsor Names: GovRAMP Approvals Committee Service Description: Oracle Cloud Infrastructure is a set of complementary cloud services that enable you to build and run a wide range of applications and services in a highly available hosted environment. Oracle GovCloud Infrastructure (OCI) offers high-performance compute capabilities (as physical hardware instances) and storage capacity in a flexible overlay virtual network that is securely accessible from your on-premises network. |
Oracle Cloud Infrastructure Government Cloud | IaaS, Paas | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-09-25 SRID#: CR26010 Point Of Contact: Nick Hardy Contact Email: nick.hardy@samsara.com Sponsor Names: N/A Service Description: Samsara’s core competencies include vehicle telematics, driver safety dash cameras, asset tracking, mobile device management, and digital forms and workflows - all in an integrated, open, real-time, cloud platform. In addition to our core competencies, Samsara prides itself on its customer-centric feedback loop that enables continued, innovative, cost-effective ways to help our customers increase the efficiency, safety, and sustainability of their operations. |
Samsara's Connected Operations Cloud | SaaS | Moderate | Core |
|
Impact Level: Moderate Authorization Date: 2026-07-29 SRID#: SR24086 3PAO: Schellman & Company Point Of Contact: Joi Frederick Contact Email: joi.frederick@spectrocloud.com Sponsor Names: GovRAMP Approvals Committee Service Description: Spectro Cloud Palette VerteX automates the provisioning of Kubernetes clusters across on-premise, Edge, and cloud systems allowing for easy development and deployment. Spectro Cloud has simplified the path to provisioning a functional Kubernetes cluster across multiple backend systems including but not limited to AWS, Google Cloud Platform (GCP), and Azure. The system incorporates the provisioning of pre-hardened Amazon Machine Image (AMI) and container images as well as the ability to simplify deployments to pre-defined blueprints. Spectro Cloud delivers a simplified pipeline to customer management and deployment of Kubernetes at scale with the ability to support thousands of clusters. Palette VerteX allows users to construct flexible stacks from operating system (OS), Kubernetes, container network interfaces (CNI), and container storage interfaces (CSI) to additional add-on application services therefore, the entire stack of Kubernetes is deployed, updated, and managed as one unit, without split responsibility from virtual machines, base OS, Kubernetes infrastructure, and add-ons. |
Palette VerteX | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-04-14 SRID#: SR24077 3PAO: Schellman & Company Point Of Contact: Drew Ellis Contact Email: drew.ellis@psionline.com Sponsor Names: GovRAMP Approvals Committee Service Description: Education: Test and Certification development, proctoring, and delivery platform. |
Gov Secure Cloud | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2023-10-02 SRID#: SR22045 3PAO: Kratos Defense Point Of Contact: N/A Contact Email: registrations@mark43.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Mark43 service offering provides a public safety CAD, RMS, analytics, and property and evidence platform. The Mark43 platform provides security and law enforcement capabilities to support functions such as situational awareness, information sharing, investigations, homeland defense, security missions, domestic emergency responses, and military support to civil authorities. Additionally, the platform provides emergency management and critical communications capabilities in support of public safety organizations, facilities, first responders, and force protection activities. |
Mark43 Public Safety Platform | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-01-21 SRID#: SR24023 3PAO: Coalfire Point Of Contact: Irene Manautou Contact Email: team@pulselight.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Pulselight Data Platform and SaaS applications, such as Aura™ and Torch®, provide customers with the ability to manage and process data for scalable, automated, and extensible analytics, investigation, and case management. These applications help decision-makers use healthcare data to improve quality of care for the individuals they serve and ensure the integrity of critical public programs. Additionally, Pulselight applications give customers answers, insights, and actionable analysis. With powerful algorithms, automation, and workflow efficiencies, the Pulselight Information System helps customers: • measure, report, and act on person-centered care, service quality & access • detect, manage, and prevent incidents related to abuse, neglect and exploitation • detect, investigate, and manage cases of suspicious or fraudulent practices Uses cases include healthcare quality improvements, outcome analysis, law enforcement action, civil action, audits, overpayment recoveries, policy setting, cost control, benefit entitlements, and opioid prevention and treatment. |
Pulselight Data Platform | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-08-07 SRID#: SR24035 3PAO: Schellman Point Of Contact: King Quaidoo Contact Email: king.quaidoo@ninjaone.com Sponsor Names: GovRAMP Approvals Committee Service Description: NinjaOne is a remote monitoring and management (RMM) platform delivered as a software as a service offering using a multi-tenant public cloud computing environment. It includes facilities for patch management, software deployment, endpoint health and performance monitoring, as well as scripting and automation. It is available to the public, federal, state, local, and tribal governments, as well as research institutions, federal contractors, government contractors. |
NinjaOne | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2024-02-29 SRID#: SR23055 3PAO: Kratos Defense Point Of Contact: MSFC Compliance Team Contact Email: MSIFedRAMPCompliance@motorolasolutions.com Sponsor Names: GovRAMP Approvals Committee Service Description: Motorola Solutions is expanding its “Mission Critical Ecosystem” which consists of a suite of software and technology that supports mission critical communications in evolving ways and that provides fast access to actionable information. The purpose of the Motorola Solutions Federal Cloud (MSFC) is to serve as the platform upon which the applications and solutions that are part of this Mission Critical Ecosystem will securely operate to provide our U.S. state and local users with enhanced capabilities. Primary to our cloud offering as our initial secure cloud application is the APX NEXT smart radio, a next-generation P25 platform purpose-built for first responders to access and act on information while maintaining focus in critical situations. The Motorola Solutions Federal Cloud enables APX NEXT and additional SaaS services to provide new Common Operating Picture (COP) capabilities to U.S. state and local users, law enforcement officers (LEOs), first responders, and public safety personnel in the field with a new ownership experience to operations and support personnel. The underlying Motorola Solutions Federal Cloud architecture is reinforced by a modern and comprehensive application of security technology. Once deployed, our cloud services production systems are monitored 24x7x365 by Motorola Solutions’ Security Operations Center using state-of-the-art Security Information and Event Management (SIEM) technology. |
Motorola Solutions Federal Cloud | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-07-24 SRID#: SR24008 3PAO: Coalfire Point Of Contact: Eric Weiss Contact Email: GovRAMP@cisco.com Sponsor Names: GovRAMP Approvals Committee Service Description: Cisco Meraki for Government provides a secure and efficient way to support your networking transformation within budget. Our cloud-managed platform simplifies networking to make it easier to deploy, manage, and optimize networks – driving IT modernization and enabling hybrid work. Meraki helps future proof networks and allows agencies to stay ahead of changing citizen and regulatory demands while improving employee productivity. Meraki has developed the most sophisticated platform in the industry based on cloud-first operations, network intelligence (AI), and open APIs to better integrate and automate processes, while providing a way to customize the monitoring and management of a network. The Meraki platform is built with a modern cloud-managed architecture that is able to quickly scale to meet the needs of customers worldwide. We have taken that knowledge and technical sophistication to create a tailored solution for the U.S. Government. Our solution gives government agencies the ability to quickly deploy, scale and manage cloud networks anywhere in the world in an effort to help meet their cloud-first initiatives. Security is a high priority of our solution, which is why we created a separate platform that stores data on U.S. soil and includes FIPS to further protect government telemetry data from device to cloud. Meraki will offer certain MS (Switching), MR (Wireless) and MX (Security and SD-WAN) devices as part of the offering. Category: Access Management, |
Cisco Meraki for Government | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2025-07-23 SRID#: SR24024 3PAO: Schellman & Company Point Of Contact: Melanie Huffman Contact Email: melanie.huffman@secondfront.com Sponsor Names: GovRAMP Approvals Committee Service Description: 2F Game Warden is a fully managed and compliant multi-tenant DevSecOps platform that accelerates the delivery of commercial cloud software to federal government customers, State, Local, and Education (SLED) agencies, and highly regulated industries. Engineered to support dual compliance pathways, Game Warden can be leveraged as a pre-authorized FedRAMP PaaS for external systems or utilized for fully in-boundary application hosting, granting customers an inherited FedRAMP certification. Built to provide Fort Knox level infrastructure security, customer workloads deploy natively on our managed infrastructure across AWS, Azure, and Google Cloud Platform (GCP) utilizing Kubernetes containers, serverless functions, or virtual machines. The platform fully automates continuous monitoring, threat mitigation, vulnerability scanning, patch management, and control inheritance required to conform to strict FedRAMP High, DoD IL5, and GovRAMP standards. Second Front Systems handles 100% of the underlying infrastructure maintenance, enabling commercial SaaS technology to rapidly scale across public sector and regulated missions without the overhead of building traditional compliance frameworks from scratch. In-boundary Services: Cohere. |
Game Warden | Paas, SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-05-12 SRID#: SR25098 3PAO: Fortreum Point Of Contact: Todd Kyle Contact Email: tkyle@gitlab.com Sponsor Names: GovRAMP Approvals Committee Service Description: GitLab is an all-in-one DevSecOps platform that provides source code management, CI/CD pipelines, issue tracking, security scanning, and many other development tools in a single application. |
GitLab Dedicated for Government | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2025-02-10 SRID#: SR21006 3PAO: Coalfire Systems Point Of Contact: Joshua Krueger Contact Email: josh.krueger@projecthosts.com Sponsor Names: GovRAMP Approvals Committee Service Description: The GSS One- Azure is a General Support System (GSS) platform (PaaS) built primarily on Microsoft Azure Government. Project Hosts also deploys customer dedicated subnets on Azure commercial for those customers/ agencies that request this. The GSS is composed of systems and services that manage access control, authentication, auditing, monitoring, scanning, patching, configuration management, malware prevention, intrusion prevention, incident response, backup, and disaster recovery for each Application deployed on the GSS One- Azure. The GSS One- Azure is classified as a hybrid cloud deployment model to enable state and local agencies as well as commercial entities to deploy applications in a secure environment on top of the GSS One- Azure GSS system. There are two main types of customers who use the GSS One- Azure: (i) Independent Software Vendors (ISVs) deploying multitenant SaaS applications and (ii) Federal, state or local agencies and commercial customers deploying dedicated applications just for their agency or organization (not multitenant). For both types of customers, their applications are deployed on customer-dedicated virtual servers (or Azure PaaS services) inside customer-dedicated subnets. Network security group access controls ensure that each customer’s subnet is completely isolated from and has no access to any other customer’s subnet. PaaS security subnets handling functions such as authentication, DMZ, SIEM, etc. are built on Azure Government. Customers have the option to have their dedicated application subnets built on either Azure Government or Azure Commercial. Either way, customer subnets are connected to the PaaS security subnets through V-net peering as described more fully here: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview . For GSS One- Azure customers, Project Hosts also provides services that are over and above the PaaS offering described in the GSS One- Azure FedRAMP package. Namely, Project Hosts deploys, secures, manages, and provides continuous monitoring for applications that are compatible with GSS One- Azure architecture, authentication, operating system, database, and access requirements. For ISV customers, Project Hosts also creates their SaaS-level FedRAMP package, helps them throughout the agency authorization process, and manages their 3PAO annual assessments. For agency customers, Project Hosts assists them in the creation of their own SSP, manages annual 3PAO scanning and penetration testing of their dedicated applications, and provides a monthly application-level POA&M. Following is a partial list of applications for which Project Hosts is providing these services over and above the GSS One- Azure platform: Accenture Federal (Task management Tool) Blue Prism (Blue Prism) BrightWork (BrightWork SharePoint-based Project Management) Checkmarx (CxSAST Source Code Scanner) Drupal (Drupal CMS) FlowVU (FlowVU Collaboration) Gimmal (Gimmal Records Management) Lexmark (Managed Print Service) Microsoft (Office, Dynamics, Power BI Server, Project Server, SharePoint, SSRS) Sopheon (Accolade Enterprise Innovation Management) UMT360 (SharePoint-based Enterprise Portfolio Management) Veritas (eVault, eDiscovery, Merge1) WordPress (WordPress CMS) Permuta (Defense Ready) Gimmal (Records Management) Invoke (UiPath Orchestrator and RPA) Conga (Contract Lifecycle Management and Conga Approvals) Davra (WebEx Legislate, Internet of Things) Ephesoft (Transact) OM Group Inc (ProjNet) Nintex (K2 Five, Workflow Cloud) WordPress As a Service (WPaaS) C3 AI (C3 AI Suites) MURAL (MURAL for Government) WillCo Tech (CyberSTAR) Kofax (Control Suite, Kofax TotalAgility, Kofax Robotics Process Automation) If an agency would like to use one of these Applications or bring in another GSS One- Azure-compatible Application, Project Hosts will provide application-level artifacts that will help the agency assess the risk of deploying that application in the GSS One- Azure as well as any other documentation or evidence required in order to grant an Authority to Operate (ATO). Category: Encryption and Decryption Services, |
GSS One- Azure | Paas | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-02-22 SRID#: SR24091 3PAO: Schellman & Company Point Of Contact: Milica Lijeskic Contact Email: militza_lijeskic@rapid7.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Rapid7 InsightGovCloud is a suite of cloud-based SaaS applications that provides agencies with the tools and clarity they need to assess their attack surface, detect suspicious behavior, and respond and remediate quickly with intelligent automation. Features are enabled/disabled in near real time within a central web user interface (UI) with additional application programming interface (API) features. This suite of applications includes the following Rapid7 SaaS products: InsightPlatform, InsightVM, InsightCloudSec, and InsightConnect. |
InsightGovCloud | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2023-02-16 SRID#: SR22026 3PAO: Coalfire Systems Point Of Contact: Ashleigh Laone Contact Email: stateramp@google.com Sponsor Names: GovRAMP Approvals Committee Service Description: Google Workspace is a cloud-based offering for enterprise and government customers. Google’s product offerings, including Google Workspace and Application Programming Interfaces (APIs), are comprised of communication, productivity, collaboration and security tools that can be accessed virtually from any location with Internet connectivity. |
Google Workspace | SaaS | High | Authorized, Federal JAB |
|
Impact Level: Moderate Authorization Date: 2025-02-10 SRID#: SR22005 3PAO: Schellman Point Of Contact: Tariq Iqbal Contact Email: tiqbal@proofpoint.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Proofpoint Email and Information Protection Service is a powerful cloud email security service that integrates threat protection, virus protection, spam detection, message encryption, data loss prevention (DLP), and digital asset protection technologies into an extensible message management platform. The service is designed to fit easily into existing messaging infrastructure, providing efficient performance, accurate message analysis, and a web-based interface for reporting, configuration, and management tasks. |
Proofpoint Email and Information Protection Service | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-01-01 SRID#: SR23021 3PAO: Kratos Defense Point Of Contact: Matt King Contact Email: matt.king@socure.com Sponsor Names: GovRAMP Approvals Committee Service Description: Socure leverages the power of AI / ML to provide digital identity proofing and verification solutions for consumer identity management. The Socure for Government (SocureGov) platform ingests consumer-submitted data, validates the data against authoritative sources, and analyzes every dimension of the digital identity to generate a risk-based assessment of whether someone is who they claim to be online. These identity verification, fraud prevention, and risk decisioning capabilities are delivered and orchestrated through Socure’s RiskOS platform within the SocureGov authorized environment. This includes a comprehensive analysis of name, email, phone, address, date of birth, SSN, IP, device, velocity, network and behavioral intelligence, and more. |
Socure for Government (SocureGov) | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2022-05-17 SRID#: SR21022 3PAO: Coalfire Systems Point Of Contact: Razaq Ahmed Contact Email: ATO@smxtech.com Sponsor Names: GovRAMP Approvals Committee Service Description: SMX Elevate Intelligent Automation Platform (IAP) is a GovRAMP certified PaaS that accelerates secure cloud adoption for commercial and government organizations—even in the most regulated environments. Elevate IAP integrates provisioning, monitoring, security, and lifecycle management to streamline operations, minimize complexity, and mitigate risks. What sets Elevate IAP apart: Built-in compliance at scale: Native controls and automations to support CMMC, HIPAA, HITECH, CJIS, PCI, SOC 1/2, FedRAMP, and DoD ILx baselines. Integrated authorization and governance: Platform-level authorization plus policy-driven guardrails simplify multi-tenant and cross-domain operations. ISV ecosystem on day one: Rapidly deploy leading solutions through the platform and partnerships — Beyond Identity, C3 AI, ColorTokens, eShare, Versa — augmented by embedded capabilities like Dynatrace and Tenable Nessus SC. Additional accredited IAP platforms deliver Appian and Juvare. Mission-ready accelerators: Pre-built SMX solutions run natively on IAP to jumpstart outcomes: Elevate AI: Secure Generative AI for sensitive missions Elevate ATO Fast Track: Accelerated FedRAMP, CMMC, and DoD authorizations Elevate FM: Financial Management Elevate ISR: Intelligence, Surveillance, and Reconnaissance Elevate NetEdge: Global resilient networking Elevate Sensing: Space Domain Awareness Beyond Identity offers an authentication and access solution that maximizes phishing resistance, eliminates verifier impersonation risks, and leverages advanced cryptography to support enterprise environments seamlessly. C3 AI enables organizations to design, develop, deploy, and operate big data, predictive analytics, AI/ML, and Internet of Things (IoT) software applications. By combining state-of-the-art foundational large language models (LLMs), deep learning retrieval models, and the C3 AI Platform, C3 Generative AI serves as a deep domain knowledge source to support information retrieval across disparate datasets and improve decision-making. ColorTokens Xshield is a Zero Trust micro segmentation solution engineered to halt lateral movement of malware, ransomware, and other threats across cloud workloads, on premises servers, endpoints, Kubernetes containers, OT/IoT devices, and legacy systems. eShare enables organizations to share files and collaborate using link-based access—with dynamic access controls, watermarking, and persistent policy enforcement that travel with the data even after sharing. eShare ensures regulatory compliance and governance while boosting productivity, reducing IT overhead, and maintaining full data sovereignty.] Versa solution provides a Unified Secure Access Service Edge (SASE) for government that combines security and networking by integrating zero trust network access (ZTNA), secure web gateway (SWG), cloud access security broker (CASB), and software-defined wide area network (SD-WAN). Category: Infrastructure, |
Elevate Intelligent Automation Platform (IAP) | Paas | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-05-24 SRID#: SR22038 3PAO: Schellman Point Of Contact: Splunk GovRAMP Team Contact Email: ssg-StateRAMP@splunk.com Sponsor Names: GovRAMP Approvals Committee Service Description: Splunk Cloud Platform delivers the benefits of award-winning Splunk® Enterprise as a cloud-based service. Using Splunk Cloud Platform, you gain the functionality of Splunk Enterprise for collecting, searching, monitoring, reporting, and analyzing all of your real-time and historical machine data using a cloud service that is centrally and uniformly delivered by Splunk to its large number of cloud customers, from Fortune 100 companies to small and medium-size businesses. Splunk manages and updates the Splunk Cloud Platform service uniformly, so all customers of Splunk Cloud Platform receive the most current features and functionality. Other Service(s) Admin Config Service Automated Private App Validation Cloud Monitoring Console Dashboard Studio Dynamic Data Active Archive (DDAA) Dynamic Data Active Searchable (DDAS) Dynamic Data Self-Storage (DDSS) Federated Search Federated Search S3 Ingest Actions KV Store Private Connectivity Splunk Cloud Platform Splunk Enterprise Security Splunk IT Service Intelligence Splunk SOAR |
Splunk Cloud | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-04-07 SRID#: SR23033 3PAO: Fortreum Point Of Contact: Lauren Aloway Contact Email: laloway@paloaltonetworks.com Sponsor Names: GovRAMP Approvals Committee Service Description: Palo Alto Networks Government Cloud Services (GCS-Mod) includes a variety of cloud-based cybersecurity offerings. As your agency moves forward in its modernization efforts, it needs trusted cybersecurity solutions that will reduce the risk of data breaches while meeting compliance. Develop a comprehensive cloud cybersecurity strategy with solutions that protect workers, data and applications from cyber adversaries and advanced threats. The following products and services make up our offering. Cloud Identity Engine Identity-based security controls are a foundational requirement to achieve Zero Trust. Palo Alto Networks Cloud Identity Engine is an entirely new cloud-based architecture for identity-based security that can consistently authenticate and authorize your users, regardless of location and where user identity stores live—on-premises, in the cloud, or hybrid. As a result, security teams can effortlessly allow all users access to applications and data everywhere and quickly move toward a Zero Trust security posture. Cortex XDR A cloud-based service providing a prevention, detection and response platform that integrates network, endpoint, and cloud data to stop sophisticated attacks. Cortex XDR leverages logs, alerts, and information from Palo Alto Networks and third-party security products. It also enforces security policies on endpoints, preventing malware and data loss. Cortex XDR correlates security alerts and network logs with the endpoint processes that generated the alerts, allowing customers to investigate security alerts, as well as search for and remotely respond to threats. Cortex XSOAR A comprehensive security orchestration, automation, and response (SOAR) platform that unifies case management, automation, real-time collaboration, and threat intelligence management to serve security teams across the incident lifecycle. Cortex XSIAM A cloud-delivered, integrated SOC platform that unifies key functions, including EDR, XDR, SOAR, ASM, UEBA, TIP, and SIEM, consolidating multiple products into a single, integrated platform. XSIAM delivers an intelligent data foundation by integrating telemetry from any source, providing unified security operations across any hybrid IT architecture. Cortex Xpanse An active attack surface management solution that helps your organization discover, understand and respond to unknown risks in all internet-connected systems and services. Xpanse scans the entire internet automatically and continuously, discovering and indexing previously unknown risks, using supervised ML models to continuously map your attack surface and prioritize remediation efforts, while reducing MTTR with the help of built-in automated playbooks. Prisma Cloud A cloud native security platform that provides comprehensive visibility, threat prevention, compliance assurance and data protection consistently across hybrid and multi-cloud environments. Prisma Cloud Compute A cloud-native platform that delivers cloud workload protection. Prisma Cloud Compute provides holistic protection across hosts, containers, and serverless deployments in any cloud, throughout the software lifecycle. Prisma Cloud Compute protects all workloads regardless of their underlying compute technology or the cloud in which they run. In addition, it provides Web Application and API Security (WAAS) for any cloud native architecture. WildFire Government Cloud An analysis and prevention engine for highly evasive zero-day exploits and malware. The cloud-based service employs a unique multi-technique approach combining dynamic and static analysis and innovative machine learning techniques to detect and prevent even the most evasive threats. It is a subscription service that works with the Palo Alto Networks Next Generation Firewalls (including VM-Series and CN-Series), Prisma Access, Prisma Cloud, Cortex XSIAM, and Cortex XDR. Prisma Access A Secure Access Service Edge (SASE) that provides scalable, cloud-delivered networking and security to branch offices and remote users. With Prisma Access, agencies are able to rapidly enable consistent, secure connectivity for remote locations and employees. Prisma SD-WAN Prisma SD-WAN enables branch services such as networking and security to be delivered from the cloud, simplifying WAN management. The controller provides deep application visibility, with Layer 7 intelligence for network policy creation and traffic engineering. It automates operations and problem avoidance using machine learning and data science methodologies. Cloud Management A cloud delivered management solution used by customers to manage Prisma SASE from Palo Alto Networks. Multi-Tenant Service Provider Portal (MSP) The MSP solution provides hierarchical multi-tenant management for customers and partners PRISMA INSIGHTS Prisma Insights provides a comprehensive platform for global visibility and monitoring for the Prisma Access service. It continuously monitors the health and performance of your Prisma Access environment with Insights in the Prisma Access app. ADEM Autonomous Digital Experience Management (ADEM) provides organizations with segment-wise insights, comprehensive visibility, and SASE-native DEM integrated with Prisma SASE, the secure foundation for agile, cloud-enabled organizations. API Gateway The API Gateway provides authorization services for customers and partners to leverage Palo Alto Networks RESTful API Data Loss Prevention Data Security Palo Alto Networks’ Enterprise DLP software-as-a-service system is a network DLP service to prevent Data Loss of sensitive data. The solution helps facilitate an organization’s data protection and compliance efforts in a simplified and cost-effective manner. SAAS API / Inline / SSPM SaaS Security is a solution that helps Security teams meet the challenges of protecting the growing availability of sanctioned and unsanctioned SaaS applications and maintaining compliance consistently in the cloud while stopping threats to sensitive information, users and resources. SaaS Security options include SaaS Security API, SaaS Security Inline, and SaaS Security Posture Management (SSPM). Advanced WildFire An analysis and prevention engine for highly evasive zero-day exploits and malware. The cloud-based service employs a unique multi-technique approach combining dynamic and static analysis and innovative machine learning techniques to detect and prevent even the most evasive threats. APP-ID Cloud Engine - ACE A platform that enables the firewall or Panorama to download App-IDs from the cloud for applications that do not have specific predefined App-IDs from the Palo Alto Networks content releases. Threat Prevention The Palo Alto Networks® Threat Prevention protects and defends your network from commodity threats and advanced persistent threats (APTs). The multi-pronged detection mechanisms include a signature-based (IPS/Command and Control/Antivirus) approach, heuristics-based (bot detection) approach, sandbox-based (WildFire) approach, and Layer 7 protocol analysis-based (App-ID) approach. URL Filtering URL filtering technology protects users from web-based threats by providing granular control over user access and interaction with content on the Internet. You can develop a URL filtering policy that limits access to sites based on URL categories, users, and groups. Cortex Data Lake Collects, normalizes, and integrates data from Palo Alto Networks products with public cloud scale. Category: Cloud Security, |
Government Cloud Services (GCS-Mod) | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-04-01 SRID#: SR22013 3PAO: Fortreum Point Of Contact: Siddique Chaudhry Contact Email: Siddique.chaudhry@snowflake.com Sponsor Names: GovRAMP Approvals Committee Service Description: Snowflake is the only data warehouse built for the cloud, enabling the data-driven enterprise with instant elasticity, secure data sharing and per-second pricing, across multiple clouds. Snowflake combines the power of data warehousing, the flexibility of big data platforms and the elasticity of the cloud at a fraction of the cost of traditional solutions. Find out more at https://www.snowflake.com/. Category: Content Collaboration, |
Snowflake Data Cloud on AWS US East/West | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-01-12 SRID#: SR24030 3PAO: A-Lign Point Of Contact: Tammy Spangler Contact Email: tspangler@ncsbn.org Sponsor Names: GovRAMP Approvals Committee Service Description: Nursys (nursys.org) is a comprehensive electronic information system designed for use by US state and territorial boards of nursing (BONs) that enables the collection and storage of nurse personal information, licensing information, disciplinary information and license verifications. BONs that participate in Nursys are able to view discipline and licensure details that other BONs add (with certain limitations). BONs designate what data is publicly available on NCSBN's Nursys.com website for employers and others to verify the status of nursing licenses. As of August 3, 2023, 59 BONs use Nursys. The Optimal Regulatory Board System (ORBS) (various websites) is a turnkey solution for license management and discipline enforcement across the lifespan of a nurse. It provides modules for licensing, discipline and education program management functions while efficiently reducing the operational processes at BONs. As of August 3, 2023, 16 BONs use ORBS as their licensure management system. NCSBN Passport (passport.ncsbn.org) is NCSBN's identity management system that provides BONs access to all NCSBN websites and applications. BON administrators create, manage and deactivate user accounts for their BONs. Administrators provide access rights to Nursys and ORBS application using the Passport system. As of August 3, 2023, 59 BONs utilize Passport. |
Nursys, ORBS, NCSBN Passport | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-08-24 SRID#: SR26015 3PAO: Coalfire Point Of Contact: Jada Shamley Contact Email: jada.shamley@totara.com Sponsor Names: GovRAMP Approvals Committee Service Description: TotaraGov is a FedRAMP® Authorized SaaS Learning Management System purpose-built for federal agencies to meet the complex demands of government-wide training, compliance, and workforce development. Designed with the needs of the public sector in mind, TotaraGov streamlines the delivery of mandatory training, supports workforce upskilling, competency management, and enhances engagement through personalized learning pathways. |
TotaraGov | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-08-19 SRID#: SR24020 3PAO: 360Advanced Point Of Contact: Jerry DeLuca Contact Email: evaluationsystems@pearson.com Sponsor Names: GovRAMP Approvals Committee Service Description: Evaluation Systems designs, develops, scores, and reports results for high-stakes PK-12 educator and school administrator certification assessments. The assessments cover both pedagogy and content relevant to a given field and give candidates the opportunity to demonstrate what they know and can do. |
Evaluation Systems | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-09-14 SRID#: SR24064 3PAO: EmagineIT Point Of Contact: InfoSec-Compliance Contact Email: compliance@tenable.com Sponsor Names: GovRAMP Approvals Committee Service Description: Tenable Cloud Security is the actionable solution to cloud risk, rapidly exposing and closing priority security gaps caused by cloud misconfigurations, risky entitlements for users and services, vulnerabilities and overly-permissive access to confidential data. Tenable Cloud Security is a Cloud Native Application Protection Platform (CNAPP) solution that isolates and minimizes these risks at scale across infrastructure, workloads, identities and data in the cloud. |
Tenable Cloud Security | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-05-20 SRID#: SR23058 3PAO: Fortreum Point Of Contact: Steven Ryan Contact Email: steven_ryan@trendmicro.com Sponsor Names: GovRAMP Approvals Committee Service Description: Trend Micro offers the leading cybersecurity solution to protect endpoints, servers, and cloud workloads. Deploy security across your endpoints and physical, virtual, and multi-cloud environments to gain unified visibility, management, detection and prevention with Trend Micro Cloud One for Government. Native integrated endpoint and server detection and response (EDR/XDR) sensors allow for quicker detection of complex attacks that bypass prevention. This provides an unmatched understanding of the activity data in your environment and a balanced approach to security, as teams can quickly see the story of an attack and respond faster and more confidently. The platform's real-time prevention and detection capabilities (application control, anti-malware, behavioral analysis, machine learning, EDR, intrusion prevention (IPS), firewall, integrity monitoring, and log inspection) are managed via a single lightweight agent deployed on the endpoint, server, or VM being protected. Combined with a rich set of application programming interfaces (APIs), Trend Micro Cloud One for Government allows you to automate security and reduce impact on your teams. Trend Micro Is trusted by 9 out of the top 10 Fortune 500 companies, blocks over 94 billion threats per year, analyzes over 100 TB of threat information per day and processes over 2.5 trillion events per day. We are cyber security experts. |
Trend Micro Cloud One for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-05-07 SRID#: SR22044 3PAO: Schellman and Company, LLC Point Of Contact: Vidya Meenakshisundaram Contact Email: Vidya@zscaler.com Sponsor Names: GovRAMP Approvals Committee Service Description: Zscaler Private Access delivers your security stack as a service from the cloud, eliminating the cost and complexity of traditional secure web gateway approaches. |
Zscaler Private Access | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2024-05-20 SRID#: SR23072 3PAO: Fortreum Point Of Contact: Mike Schimmel Contact Email: fedops@wiz.io Sponsor Names: GovRAMP Approvals Committee Service Description: Wiz for U.S. Government is an agentless vulnerability scanning tool that uses an application programming interface (API) connector to scan customer environments in AWS GovCloud. Wiz Gov scans various cloud architectures including virtual machines (VMs), containers, serverless, and PaaS solutions. Integrations with the continuous integration/continuous deployment (CI/CD) pipeline allow Wiz Inc. customers to define scanning policies for images and Infrastructure as Code (IaC) prior to deploying into production. Wiz Gov inventories the technologies discovered in the environment to provide insight into all assets, including third-party access to the environment and code libraries detected on workloads. In addition to scanning for vulnerabilities and configuration standards and uses a threat intelligence feed to scan cloud workloads, detect malicious code, and provide information regarding the severity of the threat, and can give insight into all the privileged role assignments in the environment. |
Wiz Moderate for U.S. Government | SaaS | High | Authorized |
|
Impact Level: Low SRID#: SR24085 3PAO: A-Lign Point Of Contact: Jim Flynn Contact Email: flynn@civicplus.com Sponsor Names: N/A Service Description: Our 311 CRM solution enables your residents to report non-emergency issues to government leaders, share feedback, and request information about your community. For your staff, our software powers efficient and frictionless workflows to encourage data-driven decisions. As a result, you can collaboratively create a stronger community. |
SeeClickFix 311 CRM | SaaS | Low | Ready |
|
Impact Level: Moderate Authorization Date: 2024-12-12 SRID#: SR24029 3PAO: A-Lign Point Of Contact: Eric Brown Contact Email: eric.brown@sas.com Sponsor Names: GovRAMP Approvals Committee Service Description: SAS Artificial Intelligence and Analytics (AIA) information system is a cloud-based service offering that is managed by SAS Institute Inc. The SAS AIA information system aims to help customers reduce workload and operational cost. It is a Software as a Service (SaaS) cloud option for SAS Software customers and more specifically, government agencies, including State, Local and Federal. The SAS AIA information system infrastructure leverages Microsoft Azure Commercial cloud within United States data centers. SAS provides and manages the platforms and software included in these offerings. |
SAS AI and Analytics for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-11-20 SRID#: CR25008 Point Of Contact: John Bergin Contact Email: berginjohn@microsoft.com Sponsor Names: GovRAMP Approvals Committee Service Description: Microsoft 365 (M365) Commercial is a suite of cloud-hosted messaging and collaboration services. These cloud-based services are designed to provide organizations with streamlined communication, high availability, comprehensive security, and simplified information technology (IT) management. M365 provides the interactivity of on-premises client and server applications with the flexibility and scalability of web-based services. M365 leverages Microsoft Azure as the IaaS/PaaS for the underlying infrastructure and hardware. Therefore, M365 relies on Azure-inherited services. For more information on these Azure services, refer to the Azure ATO package. |
Microsoft 365 Commercial | SaaS | Moderate | Core |
|
Impact Level: Moderate Authorization Date: 2025-03-18 SRID#: SR22006 3PAO: Schellman Point Of Contact: Tariq Iqbal Contact Email: tiqbal@proofpoint.com Sponsor Names: GovRAMP Approvals Committee Service Description: Proofpoint Targeted Attack Protection (TAP) helps detect, mitigate, and block advanced threat that target people through email. It detects both known and new, never-before-seen attacks that use malicious attachments and URLs to install malware on a device or trick users to share their passwords or other sensitive information. |
Proofpoint Targeted Attack Protection | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-05-31 SRID#: CR25004 3PAO: N/A Point Of Contact: Adam Attinello Contact Email: adam.attinello@laerdal.com Sponsor Names: N/A Service Description: SimCapture Cloud is delivered as a SaaS offering using a multi-tenant cloud computing environment. It is available to hospitals and healthcare education programs for the purpose of recording, debriefing, and tracking healthcare simulation experiences. |
SimCapture Cloud | SaaS | Moderate | Core |
|
Impact Level: Moderate SRID#: SR23065 3PAO: Schellman & Company Point Of Contact: Steve Cobb Contact Email: steve.cobb@securityscorecard.io Sponsor Names: N/A Service Description: SecurityScorecard Security Ratings monitors the security posture of millions of companies by calculating a risk score derived from publicly available data. Companies are assigned A-F ratings across risk factors including domain name system (DNS) health, internet protocol (IP) reputation, web application security, network security, leaked information, hacker chatter, endpoint security, and patching cadence. This data is provided to customers via the Security Ratings web application. Customers use the Security Ratings web application to review security ratings and detailed security reports. Users access Security Ratings through a standard web browser and leverage identity federation for authentication. Within the application, users search for companies of interest and review security reports developed by SecurityScorecard. These ratings and reports allow customers to evaluate the cybersecurity risk for companies of interest using data-driven, objective, and continuously evolving metrics that provide visibility into information security control weaknesses as well as potential vulnerabilities throughout the supply chain ecosystem. Users can also create "portfolios" to group together companies of interest and easily compare vendors to help make procurement decisions, evaluate acquisition targets, conduct industry benchmarking, and more. Additional capabilities and data points (collected from publicly available data sources) in the Security Ratings web application include: • IP attribution to company domain(s) • Security vulnerability monitoring by company and security factors • Security risk benchmarking and scoring by company and industry • Alerts for changes in risk scores • Executive and detailed company scorecard reports • Workflow for collaboration and remediation with monitored suppliers |
Ratings Cloud Service | SaaS | Moderate | Ready |
|
Impact Level: Moderate Authorization Date: 2024-01-01 SRID#: SR23042 3PAO: Coalfire Point Of Contact: Jeanette Beaudry Contact Email: jbeaudry@solventum.com Sponsor Names: GovRAMP Approvals Committee Service Description: Solventum Health Services Platform (SHSP) is a cloud-native platform of applications and services that provide reliable and secure processing of healthcare data. SHSP is used by Solventum’s Revenue Cycle, Performance Management and Clinician Productivity Solutions products. SHSP also includes Solventum’s Grouper Plus Content Services (GPCS) product that provides access to Solventum’s comprehensive grouping, editing, reimbursement and pay for performance content. |
Solventum Health Services Platform (SHSP) | SaaS | Moderate | Authorized |
|
Impact Level: High Authorization Date: 2023-04-16 SRID#: SR22035 3PAO: Schellman Point Of Contact: Matthew Valenzuela Contact Email: fedramp@qualtrics.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Qualtrics XM Platform is a web-based application that allows Government agencies to create surveys and then collect, analyze, and store the data produced from those surveys. Government agencies can use the application to collect and analyze citizen, employee, and community feedback to improve services and engagement for both external customers (citizens) and internal customers (public sector employees). The Qualtrics XM Platform enables multiple departments within an agency to collect and analyze survey data within a single enterprise system, allowing all levels of the agency or department to have access to important feedback data. The XM Platform includes an array of services that can be utilized to track, manage, and improve the experience of external and internal customers, such as: • XM Core – Allows agencies to construct surveys, distribute them to participants, and then manage and analyze individual participant responses. Agencies can then create reports that present the results and publish these reports to the web or share the report links with others. • Customer Experience - Allows agencies to study and improve the customer experience by employing Relationship NPS, Transactional NPS, Customer Satisfaction, and Event Feedback programs. • Employee Experience - Allows agencies to measure and manage employee engagement by creating feedback loops for relevant aspects of public sector employment, such as Manager Feedback, Training Feedback, Employee Engagement, and Employee Pulse programs. • Site Intercept – Allows agencies to display a piece of text, graphic, or widget that encourages a visitor to their website to take a survey or redirect to a specific webpage. To implement, the agency administrator places a snippet of Qualtrics’ JavaScript code on the agency’s website. • Actions and Tickets - Allows defining and triggering a workflow when a set of conditions are met, such as creating support tickets or integrating with external systems via web service API. • Data Analytics - Provides ability to perform natural language processing, statistical and predictive analysis of the data collected via the Research Suite. • Reports and Dashboards – Enables agencies to build dashboards that provide visual displays of the data collected from an agency’s surveys combined with other imported data sources. Qualtrics creates a library where each agency can store question templates, graphics, messages, and files to be used in building surveys and sending messages to participants. Agencies can integrate data from other sources, such as their customer relationship management (CRM) tools, and produce and share reports. They can upload a list of contacts as a CSV file or manually enter or edit contacts. Agencies can also view the complete history of interactions that they have had with their contacts via emails or survey responses. The XM Platform allows customers to send surveys, notifications, and other messages via a built-in email mechanism. To enable this, the application provides an outbound mail delivery engine via SMTP. In addition, customers can generate a URL that links to their survey and send the URL out to survey participants via their own email systems. Reports and data can be exported to a variety of formats, including Word, Excel, PDF, and CSV/TSV, etc. The XM Platform provides an Administration tool that allows designated agency admins to create groups and user permissions and assign them to authorized agency users. Permissions can be set up at the agency, division, or organization level. A single sign-on (SSO) capability enables agencies to implement identity federation via LDAP, SAML / Shibboleth, central authentication service (CAS), or OAuth 2.0. Qualtrics also makes available a REST API to allow agencies to automate functions such as connecting Qualtrics surveys with external systems such as a CRM like Salesforce. |
Qualtrics XM Platform | SaaS | High | Authorized |
|
Impact Level: Moderate SRID#: SR24048 3PAO: A-Lign Point Of Contact: Jim Flynn Contact Email: flynn@civicplus.com Sponsor Names: N/A Service Description: Agenda and Meeting Management Select provides an end-to-end solution that enables municipal clerks to easily manage agendas, minutes, and public meetings, while providing the public with unparalleled transparency and access to the meeting process. |
CivicPlus Agenda and Meeting Management Select | SaaS | Moderate | Ready |
|
Impact Level: Moderate SRID#: SR24072 3PAO: Coalfire Point Of Contact: Sean Hazle Contact Email: sean.hazle@solari-inc.org Sponsor Names: N/A Service Description: CCX is a cloud-based solution designed to provide a complete technology services solution to build and support social, mental health, and substance use clinical services programs. Its primary function is to provide a web-form workflow for clinical staff to enter case information that may then be used in determinations and case management for the client and data analytics for reporting. The CCX system is designed to operate in a secure and scalable manner to support data-driven human services programs, including contact centers, referral, case management, and dispatch services, for use in mental health crisis response, intervention, referral, and data service. |
CCX | SaaS | Moderate | Ready |
|
Impact Level: High Authorization Date: 2023-04-23 SRID#: SR22016 3PAO: Fortreum Point Of Contact: Siddique Chaudhry Contact Email: Siddique.chaudhry@snowflake.com Sponsor Names: GovRAMP Approvals Committee Service Description: Snowflake is the only data warehouse built for the cloud, enabling the data-driven enterprise with instant elasticity, secure data sharing and per-second pricing, across multiple clouds. Snowflake combines the power of data warehousing, the flexibility of big data platforms and the elasticity of the cloud at a fraction of the cost of traditional solutions. Find out more at https://www.snowflake.com/. |
Snowflake Data Cloud on AWS GovCloud | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-02-26 SRID#: SR22014 3PAO: Lunarline Point Of Contact: Allison Lehman Contact Email: allison.lehman@wingswept.com Sponsor Names: GovRAMP Approvals Committee Service Description: WingSwept has provided case management solutions to investigators at government agencies for more than a decade. WingSwept converted its Case Management & Tracking System (CMTS) into a Commercial Off-The-Shelf (COTS) service offering in 2010. Built with both security and flexibility in mind, CMTS provides for the secure storage, retrieval, and reporting of case management data for investigative offices at all levels of government. The CMTS design is neither static nor monolithic. Intentionally flexible, CMTS provides government agencies with the ability to establish unique naming conventions, tailor agency-specific workflows, and to support a wide range of other user-preferred configurations. An idle-case tracking function also includes both time and activity-based notifications in order to establish and maintain a seamless agency workflow. As an added layer of security, each CMTS customer operates in a secure environment with data separated by customer. Hosted on Amazon Web Services (AWS), CMTS is a web-based, browser-accessible application that requires no device-specific software for implementation. Highly customizable dashboards, combined with specialized labels and entry fields provide investigators with the ability to compile and display comprehensive case metrics in a simplified, user-friendly format. CMTS can display ad-hoc and pre-defined reports in minutes, drastically reducing processing times and increasing staff efficiency. This flexible design allows agencies to tailor workflows in order to match existing processes and to provide for continuity in ongoing investigations. As a result, CMTS may be readily adapted to serve investigative offices of any size. Many of the CMTS customers leverage our optional Online Intake Service (OIS) which allows customers to host or leverage OIS hosted internet facing forms which can collect case intakes to be later securely picked up by the agency CMTS server for potential ingestion as a case. |
Case Management & Tracking System (CMTS) | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-04-16 SRID#: SR23004 3PAO: Schellman and Company, LLC Point Of Contact: Tim Jarrett Contact Email: TJarrett@Veracode.com Sponsor Names: GovRAMP Approvals Committee Service Description: Veracode’s unified platform helps Government developers and application security teams assess and improve the security of applications from inception through production. With a combination of automation, process, and speed, Veracode integrates application security into the software lifecycle, effectively eliminating vulnerabilities during the development/deployment chain. This solution is widely used by enterprises to secure web, mobile, legacy, and third-party enterprise applications, with a simpler and more scalable way to help reduce software security risk across software infrastructure. |
Veracode Online Security Platform for Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate SRID#: SR24044 3PAO: A-Lign Point Of Contact: Jim Flynn Contact Email: flynn@civicplus.com Sponsor Names: N/A Service Description: CivicEngage Evolve is built upon the CivicPlus® Platform’s HCMS, which means CivicEngage Evolve data seamlessly integrates with all available CivicPlus products and solutions for a consistent administrative experience. CivicEngage Evolve is easy enough for the non-technical users and functional and flexible for technical teams to take advantage of its full capabilities and API-first architecture.Perhaps most importantly, CivicEngage Evolve enables municipalities to implement a content as a service (CaaS) communication model. Category: Infrastructure, |
CivicPlus Municipal Website Evolve | SaaS | Moderate | Ready |
|
Impact Level: Moderate SRID#: SR24047 3PAO: A-Lign Point Of Contact: Jim Flynn Contact Email: flynn@civicplus.com Sponsor Names: N/A Service Description: CivicPlus Pay is what we refer to as a "Power Product" it is an add-on to a regular website product and serves as website layer of abstraction between our other webproducts and PCI compliant payment gateways. Pay functions to redirect browsers to payment gateways and to house limited PII related to payment transactions and makes it possible for us to have a single PCI certified product rather than seeking the certification on all the connected products. |
CivicPlus Pay | SaaS | Moderate | Ready |
|
Impact Level: High Authorization Date: 2022-11-03 SRID#: SR21005 3PAO: Coalfire Systems Point Of Contact: Amit Patel Contact Email: stateramp@google.com Sponsor Names: GovRAMP Approvals Committee Service Description: Google Services is comprised of Google’s multi-tenant public cloud Google Cloud Platform and built atop the Google Common Infrastructure. The Google Common Infrastructure powers Google worldwide. |
Google Services | IaaS, Paas, SaaS | High | Authorized, Federal JAB |
|
Impact Level: Moderate Authorization Date: 2023-05-04 SRID#: SR22019 3PAO: Lunarline Point Of Contact: Brian Justice Contact Email: stateramp@tanium.com Sponsor Names: GovRAMP Approvals Committee Service Description: "Tanium Cloud for US Government (TC-USG) delivers an agent-based endpoint management and security platform, managed and delivered as a cloud-hosted SaaS. The Tanium Core Platform and its services are automatically configured and maintained. For more information, please visit https://tanium.com The following TC-USG services are included within authorization boundary and are offered to customers individually or as desired: Tanium Interact, Tanium Asset, Tanium Comply, Tanium Connect, Tanium Deploy, Tanium Discover, Tanium Enforce, Tanium Impact, Tanium Integrity Monitor, Tanium Map, Tanium Patch, Tanium Performance, Tanium Provision, Tanium Reveal, Tanium Risk, Tanium Threat Response, Tanium Trends." From FedRAMP Marketplace. |
Tanium Cloud for US Government (TC-USG) | SaaS | Moderate | Authorized |
|
Impact Level: Moderate SRID#: SR26009 3PAO: Linford & Co Point Of Contact: Necip Tomurcuk Contact Email: security@blackkite.com Sponsor Names: N/A Service Description: Black Kite is delivered as a SaaS offering using a multi-tenant public cloud computing environment. It is available to the public, federal, state, local, and tribal governments, as well as research institutions, federal contractors, government contractors etc. Black Kite offers a separate configuration for federal/public sector customers to maintain the highest possible level of information security. Black Kite provides a defensive platform that spans the entirety of the third-party risk management life cycle for cyber risk professionals looking to quantify and maintain visibility of their risk exposure. Black Kite’s core application, Security Rating Service (“SRS”, “the System” or “the Platform”), is a multi-user, transaction-based application suite that gives a three-dimensional risk picture of a company and its vendors through: • A cyber risk technical assessment. • A factor analysis of information risk (FAIR) analysis (the probable financial impact of a breach caused by a vendor). • An external estimate of compliance (assessing that vendors have appropriate policies and processes in place). • Executives get an easy-to-understand “Cyber Risk Report” with letter grade scores. • IT security teams can drill down to the technical details behind each risk category. • Risks/vulnerabilities are prioritized by severity so that security engineers can quickly identify critical issues and mitigate |
Black Kite Third Party Risk Intelligence | SaaS | Moderate | Ready |
|
Impact Level: Moderate Authorization Date: 2024-04-18 SRID#: SR21001 3PAO: Schellman and Company, LLC Point Of Contact: Vidya Meenakshisundaram Contact Email: Vidya@zscaler.com Sponsor Names: State of Arizona Service Description: Zscaler Internet Access delivers your security stack as a service from the cloud, eliminating the cost and complexity of traditional secure web gateway approaches. |
Zscaler Internet Access - Government (ZIA Gov) | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-12-22 SRID#: SR24074 3PAO: Coalfire Point Of Contact: Jeanette Beaudry Contact Email: jbeaudry@solventum.com Sponsor Names: GovRAMP Approvals Committee Service Description: Solventum Revenue Cycle SaaS includes the following: • Solventum™ 360 Encompass™ System (360E) is a collection of applications that work together to help hospitals streamline processes, receive accurate reimbursement, promote compliance and make data-informed decisions. 360E includes cloud-based services such as Analytics and Worksheet Services. Analytics provides a wide array of dashboards across CDI, quality, and coding functionalities. These dashboards deliver key summaries of coder and CDI performance, while also tracking a variety of performance metrics. Worksheet Services provides various worksheets that assist chargers and coders to accurately and completely capture evidence and CPT® codes from documentation provided by a given client. • SolventumTM Data Delivery Services (DDS) – Solventum’s DDS is an efficient and secure method for obtaining a daily feed of 360E data. The data includes multiple inpatient, outpatient, and professional data sets that can be imported into a data warehouse or a reporting platform for a wide range of uses and deeper analysis. Use the data to build powerful cross platform reports and dashboards by aggregating data with additional data sources. By using a simple and secure service, you can ensure the integrity and confidentiality of sensitive health information while maximizing the potential of data assets. • CodeAssist is a web-based system that leverages advanced Natural Language Processing (NLP) to examine the full text of a physician’s report and automatically assign accurate Current Procedural Terminology (CPT®) codes and International Classification of Diseases (ICD) diagnosis codes. • Cloud Platform Managed Services (MS) delivers the Solventum™ 360 Encompass™ System and Solventum™ Coding and Reimbursement System (CRS) in the cloud. This platform provides a secure way to manage and maintain Solventum’s coding and CDI applications in real-time, with significantly reduced maintenance windows and a seamless, straightforward implementation process. • Solventum™ Performance Data Monitoring (PDM) is a web application that enables healthcare providers to benchmark, monitor and analyze Clinical Documentation Improvement (CDI) performance. PDM enriches healthcare claims data with public and proprietary Solventum methodologies before applying Solventum benchmarks to generate expected vs. actual results that are used for analysis. PDM provides access to dashboards and reports with performance indicators that enable drill-down and physician level reporting. • Solventum™ Performance Insights (PI) is an analytics application that is designed for executives and operational leaders in CDI, Coding or Quality to benchmark and quickly identify performance opportunities. By enriching the data with Solventum’s trusted methodologies, applying standard or client comparative benchmarks, PI delivers powerful analytics driven by expert prioritization to enable informed decision-making for targeted improvements. PI provides our clients with prioritized opportunities with the highest impact on accurate reimbursement and quality reporting while reducing cost. |
Solventum Revenue Cycle Saas | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-09-14 SRID#: SR21039 3PAO: EmagineIT Point Of Contact: InfoSec-Compliance Contact Email: compliance@tenable.com Sponsor Names: GovRAMP Approvals Committee Service Description: Tenable One for Government is a SaaS platform that protects customers from advanced attacks by providing visibility into and assessment of the entire attack surface spanning IT, cloud, identities, hybrid apps, OT, IoT and unseen assets. The platform includes vulnerability management and enumeration, compliance management, cyber risk analysis and inventory capabilities. Included in this platform are Tenable Vulnerability Management FedRAMP, Tenable Web App Scanning FedRAMP, Tenable Identity Exposure (on-prem), Tenable Cloud Security FedRAMP (in process), Tenable OT Security (on-prem), Asset Inventory FedRAMP and Lumin Exposure View FedRAMP. These Tenable solutions can be licensed as part of Tenable One for Government, or individually to meet customers' unique requirements. |
Tenable Government Solutions | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-04-15 SRID#: SR24036 3PAO: Fortreum Point Of Contact: Peter Averill Contact Email: paverill@sos-tech.com Sponsor Names: GovRAMP Approvals Committee Service Description: SmartSOS is a threat detection and response platform that is designed to help organizations better prevent and respond to workplace violence. SmartSOS is the only product of its kind that eliminates the need for a 911 call reducing police dispatch times from 10 minutes to less than 10 seconds. |
SmartSOS | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-05-12 SRID#: SR24042 3PAO: Fortreum Point Of Contact: Annette Lam Contact Email: annette.lam@sailpoint.com Sponsor Names: GovRAMP Approvals Committee Service Description: SailPoint Identity Security Cloud is a SaaS-based multi-tenant solution that enables organizations to manage and secure real-time access to critical data, applications, and systems for every enterprise identity with an intelligent and unified approach designed with advanced AI capabilities, a centralized data model, and robust workflows. The solution provides the tools and insights for agencies to meet complex compliance requirements and manage risky access to improve security posture. Category: Customer Management and Experience Solutions, |
SailPoint Identity Security Cloud | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-03-17 SRID#: SR23043 3PAO: Schellman & Company Point Of Contact: Peter Nancarrow Contact Email: pnancarrow@virtru.com Sponsor Names: Arizona Department of Homeland Security Service Description: The Virtru Data Protection Platform is a data-centric content encryption solution that provides for pervasive protection of content types, the ability to share content internally and externally without manual encryption key exchanges, and integration with existing applications and workflows. Category: Content Collaboration, |
Virtru Data Protection Platform | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-06-16 SRID#: SR24001 3PAO: Coalfire Point Of Contact: Michael Bonville Contact Email: michael.bonnville@levelblue.com Sponsor Names: GovRAMP Approvals Committee Service Description: 24x7x365 monitoring and management of EDR / SIEM / security technologies by U.S. based employees in AWS GovCloud. |
Managed Detection and Response (MDR) and Co-Managed SIEM | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-04-10 SRID#: SR24039 3PAO: Fortreum Point Of Contact: Ryan Swanson Contact Email: ryan.swanson@snowflake.com Sponsor Names: GovRAMP Approvals Committee Service Description: Snowflake is the only data warehouse built for the cloud, enabling the data-driven enterprise with instant elasticity, secure data sharing and per-second pricing, across multiple clouds. Snowflake combines the power of data warehousing, the flexibility of big data platforms and the elasticity of the cloud at a fraction of the cost of traditional solutions. Find out more at https://www.snowflake.com/. |
Snowflake Data Cloud on Azure South Central US | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-06-15 SRID#: SR26005 3PAO: Fortreum Point Of Contact: Jon Andersen Contact Email: jon.andersen@verkada.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Verkada Command Platform is Verkada’s government-grade offering designed to help government organizations and their partners take a proactive, simple, and scalable approach to physical security, alongside numerous security enhancements that are critical for certain government users. The system consists of the following key features: * Command in AWS GovCloud * Verkada Command, Pass, and Guest Mobile Applications * Cellular Gateway * FIPS-validated Devices including Video Security, Physical Access Control, Air Quality Sensors, Guest Management, and Command Connector |
Verkada Cloud Platform | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2023-03-26 SRID#: SR22040 3PAO: A-Lign Point Of Contact: Samuel Petreski Contact Email: spetreski@microstrategy.com Sponsor Names: GovRAMP Approvals Committee Service Description: MicroStrategy is the world’s top-rated platform for enterprise analytics. The MicroStrategy Intelligence Platform offers a full range of trusted, modern BI experiences, and is designed to help departments and agencies build data-driven cultures and make faster, smarter decisions. Built for performance at scale, MicroStrategy delivers concrete answers to users where and when they’re needed. Foundationally, the platform offers out-of-the-box drivers and gateways for a variety of data sources, types, and formats, and APIs/SDKs which are hosted within the MicroStrategy Platform Deployed within Customer Tenant. Using the platform’s proprietary enterprise semantic graph, agencies can establish a unified, governed, secure, and reusable data model on which a variety of intelligence solutions can be built to deliver accurate, personalized, and trusted information to individual users based on each agency’s enterprise data dictionary. The MicroStrategy Cloud for Government is a fully managed enterprise analytics solution that offers all the market-leading capabilities of the MicroStrategy Intelligence Platform on a unique Amazon Web Services (AWS) GovCloud implementation. MicroStrategy Cloud for Government features a fully optimized reference architecture built specifically for deployment in a customer-licensed AWS environment, offered as a software-as-a-service (SaaS) solution. MicroStrategy administers each unique MicroStrategy Cloud for Government environment on the behalf of each government department or agency, including steady state operations, routine application of software upgrades, robust system monitoring and alerting, and 24/7/365 technical support for priority issues. The components that directly support the MicroStrategy Cloud for Government cloud service offering are described in the subsections below. MicroStrategy Cloud for Government is a SaaS service built on top of AWS GovCloud (US) IaaS servers. MicroStrategy utilizes AWS GovCloud (US) to provide the resources that host the MicroStrategy Cloud for Government platform and leverages the experience and resources of AWS to scale quickly and securely as necessary to meet current and future demand. MicroStrategy is responsible for designing and configuring the MicroStrategy Cloud for Government architecture within AWS GovCloud (US) to ensure that the availability, security, and resiliency requirements are met. |
Managed Cloud Government | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-09-14 SRID#: SR22004 3PAO: Lunarline Point Of Contact: Rich Barndt and Mark Meakins Contact Email: Infosecgovramp@wellspring.com Sponsor Names: GovRAMP Approvals Committee Service Description: Wellspring Knowledge Management System (Sophia) is a Software-as-Service (SaaS) solution designed to manage technology transfer operations and knowledge asset tracking for those working in the area of research and innovation. The product services solutions within intellectual property (patent) management, licensing and contract management, invention and ideas disclosure, along research and development (R&D) portfolios and project management. The data in the system is typically directly entered by users and includes storage of various metadata around invention, patents, projects, contracts, and contacts associated with those records. Users may supplement these with uploaded notes, related files, workflow status, financial information, contract terms and other information that is critical to the tracking of the end users portfolio. Key functional areas of the system are: idea disclosure from researchers and inventors. evaluation of inventions and Intellectual property protection support of patent prosecution and monitoring tracking contracts and technology licensing terms financial management of patent expenses and licensing revenue compliance with contract terms and invention reporting project and portfolio management |
Sophia Knowledge Management System | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-05-25 SRID#: SR25097 3PAO: Schellman Point Of Contact: Nadav Movshovits Contact Email: nmovshovits@varonis.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Varonis Data Security Platform is a cloud-hosted data security platform for protecting and governing enterprise data. Varonis DSP protects the most used data stores by enforcing least privilege, fixing misconfigurations, inventorying and labeling critical data sets, and stopping insider threats. |
Varonis Data Security Platform (DSP) | SaaS | Moderate | Authorized |
|
Impact Level: High SRID#: SR25100 3PAO: N/A Point Of Contact: Judge Small Contact Email: judgesma@amazon.com Sponsor Names: N/A Service Description: AWS GovCloud (US) is an AWS Region designed to allow US government agencies and customers supporting the US government to move more sensitive workloads into the cloud. In addition to complying with FedRAMP requirements, the AWS GovCloud (US) framework adheres to U.S. International Traffic in Arms Regulations (ITAR) regulations. Additional information is available at http://aws.amazon.com/govcloud-us/. |
AWS GovCloud (US) | SaaS, IaaS, Paas | High | Authorized, Hyperscale Inheritance Authority (HIA) |
|
Impact Level: Moderate SRID#: SR24066 3PAO: Coalfire Point Of Contact: Lewis Drummond Contact Email: govteam@ramp.com Sponsor Names: N/A Service Description: Ramp provides a unified platform for charge cards and expense management, designed to maximize visibility, enforce policy controls, and drive operational efficiency at scale. Our customers rely on Ramp to manage their financial operations, drive efficiency, and stop wasteful spending." |
RampGov | SaaS | Moderate | Ready |
|
Impact Level: Moderate Authorization Date: 2026-08-31 SRID#: SR26025 3PAO: Fortreum Point Of Contact: Michelle Leveille Contact Email: michelle.leveille@workiva.com Sponsor Names: GovRAMP Approvals Committee Service Description: The Workiva Platform delivers an intuitive cloud product that modernizes how people work within thousands of organizations. The platform is built upon a data management engine, offering controlled collaboration, data integration, granular permissions, and a full audit trail. The platform helps mitigate risk, improves productivity, and gives users confidence in their data-driven decisions. Complex reports made easy— our customers create and connect data and narratives to consolidate and publish financial, performance, and regulatory reports. We provide confidence in the numbers and enable pride in the delivery. Compliance made simple— streamline documentation, testing, and reporting in a connected environment. Manage risk assessments, evidence requests, issues, and findings with real-time reports and dashboards. Connect your documents and data at an enterprise scale in a collaborative work management platform. Import documents, sync with Excel®, or connect the platform to your ERP, CRM, or other operational systems. The platform is built for the way you work. Trust your data from beginning to end. The Platform can be used across every department to create a single source of data for multiple business processes. |
Workiva Platform | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-04-10 SRID#: SR24041 3PAO: A-lign Point Of Contact: Mike Lauer Contact Email: mlauer@fortinet.com Sponsor Names: GovRAMP Approvals Committee Service Description: FortiGuard service is an industry leading cybersecurity intelligence service. It delivers the latest threat intelligence with heightened efficacy against the most complex cyberthreats. FortiGuard service coordinates prevention, detection, and response in real time across organizations’ broader security infrastructure. |
FortiGuard | SaaS | Moderate | Authorized |
|
Impact Level: Moderate SRID#: SR26024 3PAO: A-LIGN Point Of Contact: Andrew Scherer Contact Email: drew.scherer@phenom.com Sponsor Names: N/A Service Description: Phenom is an applied AI company committed to helping public agencies hire faster, develop better, and retain longer - all through the power of experience and intelligence. Our AI-powered talent experience platform connects every stakeholder in the talent journey - candidates, recruiters, employees, and hiring managers - to improve productivity, retention, and hiring outcomes. Phenom for Government is delivered as a SaaS offering using a multi-tenant Government-only cloud computing environment. It is available to federal, state, local, and tribal governments, as well as research institutions, federal contractors, and government contractors. Built on a scalable, secure, and extensible architecture, Phenom’s platform enables public sector organizations to modernize how they attract, engage, and retain talent while ensuring security and privacy compliance. From intelligent career sites that improve the candidate experience to automated screening, scheduling, and onboarding, Phenom accelerates the hiring process while reducing administrative burden on HR teams. Trusted by global enterprises, Phenom enables agencies and contractors to address today’s talent challenges including skill shortages, digital transformation, and workforce modernization with a unified platform built for speed, agility, and scale. |
Phenom for Government (PHGOV) | SaaS | Moderate | Ready |
|
Impact Level: High Authorization Date: 2022-04-24 SRID#: SR21023 3PAO: Kratos Point Of Contact: John Gallagher Contact Email: jogallag@microsoft.com Sponsor Names: GovRAMP Approvals Committee Service Description: Microsoft Azure is a cloud platform with more than 200 products and cloud services designed to help deliver solutions across different deployment scenarios – Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), and Software-as-a-Service (SaaS). Microsoft Azure supports more than 90 compliance standards including FedRAMP High. |
Microsoft Azure Commercial | SaaS, Paas, IaaS | High | Authorized, Federal JAB |
|
Impact Level: Moderate Authorization Date: 2025-08-07 SRID#: SR24062 3PAO: Fortreum Point Of Contact: Deborah Beckett Contact Email: deborah@automattic.com Sponsor Names: GovRAMP Approvals Committee Service Description: WordPress VIP provides web application hosting, platform, support, and professional services necessary to provide performance, scalability, security, and reliability to organizations. Our customers range from Enterprise SaaS providers like Salesforce, to US Federal institutions like NASA and the White House, to Fortune 100 organizations like Merck, and high-scale media publishers like Newscorp. |
WordPress VIP | Paas | Moderate | Authorized |
|
Impact Level: Moderate SRID#: SR24045 3PAO: A-Lign Point Of Contact: Jim Flynn Contact Email: flynn@civicplus.com Sponsor Names: N/A Service Description: Recreation Management (CivicRec) provides parks and recreation software that can help centralize all your activity, facility, staffing, and point-of-sale needs. The cloud-based nature of CivicRec means that staff can manage their operations from anywhere— and on any device. Our interface is both clean and easy-to-use so that you can present a modern face to the public. Whether the public is using the recreation registration software to sign up for programs, rent facilities, or browse catalog offerings, you can be confident that your parks and recreation department is presenting an easy-to-use option for the public, making it convenient to engage with your programs and facilities. |
CivicPlus Recreation Management | SaaS | Moderate | Ready |
|
Impact Level: Moderate Authorization Date: 2025-03-18 SRID#: SR24031 3PAO: Schellman & Company Point Of Contact: James Norden Contact Email: james.norden@uipath.com Sponsor Names: GovRAMP Approvals Committee Service Description: UiPath Automation Cloud Public Sector is a FedRAMP-authorized SaaS delivery of the UiPath Business Automation Platform, designed for US public sector organizations. The UiPath Business Automation Platform offers comprehensive, integrated AI-powered automation capabilities, including: UI + API Automation, Process Orchestration, Document Understanding/IDP, Process and Task Mining, Low-code Application Development, Testing, Digital Assistants, and more. It implements governance and management tools across these capabilities, and delivers an open architecture with connectors to optimize and automate processes across any technology. By using self-hosted Robot and Studio components, organizations also have the option to work with data in-place, without moving it to Automation Cloud. |
UiPath Automation Cloud Public Sector | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-02-11 SRID#: SR25099 Point Of Contact: Judge Small Contact Email: judgesma@amazon.com Sponsor Names: N/A Service Description: The AWS US East/West Regions are delivered as a multiple service layer cloud architecture model offering using a multi-tenant Public cloud computing environment. It is available to both government and non-government customers. |
AWS US East/West | SaaS, IaaS, Paas | Moderate | Authorized, Hyperscale Inheritance Authority (HIA) |
|
Impact Level: Moderate Authorization Date: 2024-01-21 SRID#: SR23054 3PAO: Fortreum Point Of Contact: Joe Dimarcantonio Contact Email: govramp@cgc.cloud Sponsor Names: GovRAMP Approvals Committee Service Description: Constellation GovCloud (CGC) is an information system that provides the necessary Platform as a Service (PaaS) architecture layers to support a RAMP authorization. CGC is a managed service that is designed to accelerate FedRAMP authorizations allowing SaaS companies to achieve a FedRAMP/GovRAMP Authorization more quickly and cost-effectively. Authorized Services: • Cynamics AI Cynamics, a leading innovator in network cybersecurity, presents a next-generation SOC AI platform powered by its proprietary sample-based NDR and cybersecurity large language model, CynLLM. By integrating intelligent sampling with cutting-edge AI, Cynamics facilitates real-time and scalable threat detection without the heavy infrastructure requirements of traditional solutions. Already endorsed by Tier-1 municipalities, enterprises, and critical infrastructure providers globally, Cynamics offers unparalleled visibility, automation, and operational efficiency for today’s security teams. InfoSec Global Federal’s AgileSec Analytics provides automated discovery, monitoring, and policy driven control of cryptographic assets, including keys, certificates, algorithms, libraries, devices, applications, firmware, and protocols, across cloud and on premise environments. The AgileSec Analytics platform ensures agencies are prepared for emerging cryptographic threats, including quantum attacks, by monitoring usage of cryptography and preparing migration to post-quantum cryptography. Key capabilities include Automated Cryptographic Discovery & Inventory, Vulnerability Identification and Compliance Reporting, Post-Quantum Readiness, and Continuous Monitoring and Remediation Workflows. The AgileSec Analytics solution supports regulatory requirements including OMB 23-02 mandates and continuous diagnostics, with built-in reporting features evaluated and recognized by federal standards organizations. It also integrates with numerous ecosystem technologies including EDR, CLM, PKI, HSM, CDM dashboards, ITSM, GRC tools and more. • InfoSec Global Federal - AgileSec Analytics InfoSec Global Federal’s AgileSec Analytics provides automated discovery, monitoring, and policy driven control of cryptographic assets, including keys, certificates, algorithms, libraries, devices, applications, firmware, and protocols, across cloud and on premise environments. The AgileSec Analytics platform ensures agencies are prepared for emerging cryptographic threats, including quantum attacks, by monitoring usage of cryptography and preparing migration to post-quantum cryptography. Key capabilities include Automated Cryptographic Discovery & Inventory, Vulnerability Identification and Compliance Reporting, Post-Quantum Readiness, and Continuous Monitoring and Remediation Workflows. The AgileSec Analytics solution supports regulatory requirements including OMB 23-02 mandates and continuous diagnostics, with built-in reporting features evaluated and recognized by federal standards organizations. It also integrates with numerous ecosystem technologies including EDR, CLM, PKI, HSM, CDM dashboards, ITSM, GRC tools and more. Hyperproof delivers a modern, cloud-based compliance operations platform designed to help government agencies and regulated organizations manage risk and compliance with confidence. Hyperproof Gov is a cloud-based governance, risk, and compliance (GRC) platform designed to support regulated organizations in managing security and compliance programs. The system provides centralized capabilities for control management, evidence collection, risk tracking, audit support, and continuous monitoring. Hyperproof Gov enables structured workflows and real-time compliance status reporting to support authorization, assessment, and ongoing monitoring activities. The platform is designed to integrate with external systems for automated evidence collection and to maintain traceability between controls, requirements, and supporting artifacts, supporting consistent and repeatable compliance operations. |
Constellation GovCloud | Paas | Moderate | Authorized |
|
Impact Level: Moderate SRID#: SR24046 3PAO: A-Lign Point Of Contact: Jim Flynn Contact Email: flynn@civicplus.com Sponsor Names: N/A Service Description: NextRequest is the leading FOIA management software empowering local and state governments with tools to easily manage and fulfill public records requests. Agencies and special districts of all sizes rely on NextRequest to coordinate records requests cross-departmentally, to increase compliance, and to decrease costs associated with record management. Agencies save time and increase transparency with our secure and easy-to-use software. |
NextRequest | SaaS | Moderate | Ready |
|
Impact Level: Moderate SRID#: SR24050 3PAO: Linford & Co Point Of Contact: Eric Staley Contact Email: staley@glsolutions.com Sponsor Names: N/A Service Description: GL Suite is a full-service, cloud-based SaaS licensing and credentialing regulatory solution used currently in dozens of states. GL Suite was developed 25 years ago by regulatory officials to “Help Governments run, grow and adapt” as the mission statement of GL Solutions states. Modernization and optimization of government agencies increases efficiency and brings trust to the regulatory agencies. |
GL Suite | SaaS | Moderate | Ready |
|
Impact Level: High Authorization Date: 2025-12-03 SRID#: SR24061 3PAO: Schellman & Company Point Of Contact: Eddie Baez Contact Email: eddie.baez@sentinelone.com Sponsor Names: GovRAMP Approvals Committee Service Description: The SentinelOne Singularity platform is a unified, cloud-delivered security platform that provides customers with automation, endpoint detection and response and security information and event management (SIEM) capabilities integrated with a unified data lake to ingest and centralize structured and unstructured data. SentinelOne leverages advanced machine learning algorithms and behavioral AI to analyze and automatically contextualize endpoint data collected across Windows, macOS, Linux, and Cloud Workloads. Data is contextualized and correlated into our patented Storylines technology, which accelerates triage and reduces mean time to detect/respond. Data is organized into a cohesive threat narrative which allows analysts to easily identify threat-related events as well as pivot and hunt to scope threat tactics, techniques, and impact. This gives our customers the ability to quickly stop ransomware and cyber attacks at machine speed with 1-click automated remediation and rollback of malicious activities and changes. Additionally, SentinelOne offers world-class managed detection and response (MDR), digital forensics and incident response (DFIR), and threat hunting services. Our MDR service not only augments security teams by triaging active or suspicious alerts and mitigating and blocking threats as needed, but also keeps them informed and protected from global advanced persistent threat (APT) campaigns, novel attacker techniques, and emerging trends in cybercrime with included threat hunting services. Customers can also call on SentinelOne’s integrated DFIR team for deeper forensic analysis of an event and assistance with incident response. |
SentinelOne Singularity Platform | SaaS | High | Authorized |
|
Impact Level: Moderate Authorization Date: 2025-01-13 SRID#: SR24037 3PAO: A-lign Point Of Contact: John Winkelman Contact Email: john.winkelman@pb.com Sponsor Names: GovRAMP Approvals Committee Service Description: Service Description Pitney Bowes SendPro 360 Sending, Receiving, and Locker Management Solution Pitney Bowes SendPro 360 is a comprehensive, cloud-based sending, receiving, locker management, and analytics solution that powers your mailroom operations for maximum efficiency and transparency. Multi-Carrier Shipping and Mailing SendPro 360 makes mailing and shipping quick and easy by empowering departments with the flexibility to send in the way that’s right for them. Users save time and money by printing stamps directly from the online interface and by accessing SendPro 360 multi-carrier shipping functionality to compare rates and print labels across major carriers. The ability to track spend and activity by account or department, facilitates project or departmental chargebacks for accurate accounting. SendPro360 includes a dedicated certified and electronic return receipt (ERR) and registered mailing process with proof of delivery reporting. Also, qualified users can prepare ship requests for packages sent to the mailroom for processing. Package Receiving, Tracking and Delivery The SendPro 360 platform automates the process of receiving, tracking, and delivering incoming packages and mail through a simple scan of a barcode. Manually logging items instantly becomes a process of the past. It can configure delivery routes, provide lists of packages, and has the ability to manage assets. Package tracking notifications via email and SMS as well as SLA management simplify and enhance the experience. -The SendPro 360 platform automates the process of receiving, tracking, and delivering incoming packages and mail through a simple scan of a barcode. Smart Locker Management Effectively manage the delivery process of packages, assets, and other important items moving across your organization with SendPro 360 Smart Locker Management capabilities. This software solution is the intelligence behind a physical smart locker and helps ensure safe, secure contactless delivery. It modernizes the pickup process by enabling convenient 24/7 self-service locker access and automates alerts notifying recipients they have an item for pickup while preserving chain-of-custody. Our Smart Locker Management Software allows users to remotely manage or troubleshoot smart lockers across a single site or multiple locations. Plus, it offers extensibility ensuring seamless expansion to additional workflows to meet evolving needs. -These solutions will require customer-provided hardware and will require assessment, authorization, and continuous monitoring of such capabilities by using agencies. Pitney Bowes has the technical expertise to help determine which hardware best meets agency needs and to assist with agency authorization and approval processes. Analytics From smaller mailrooms to multi-location operations, SendPro 360 offers complete visibility into your receiving and sending operations. Dynamic views can be filtered by divisions, locations, cost accounts, and users, across any date range. View and manage postage and shipping spend, and gain insights to your receiving and locker metrics all the way through final delivery to ensure packages and mail are accounted for and delivered on time. Gauge performance, operator efficiency, and resource utilization to ensure service level agreement (SLA) metrics are being met. To locate a package, SendPro 360 provides end-to-end tracking of packages, locker activity, as well as shipping and mailing activity across your government agency. |
SendPro360 | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2024-04-14 SRID#: SR23073 3PAO: Kratos Defense Point Of Contact: Chris Carlson Contact Email: fedramp@infoblox.com Sponsor Names: GovRAMP Approvals Committee Service Description: Infoblox Government Cloud is a GovRAMP-authorized cloud-native SaaS offering in AWS GovCloud (US) that provides centralized management of DNS, DHCP, and IP address management (DDI), and network-centric asset visibility across hybrid and multi-cloud environments through Universal DDI, Universal Asset Insights, and the Threat Defense component services TIDE and Dossier. Through a single portal, APIs, and role-based access controls, the service helps agencies enforce DDI policy, maintain an authoritative asset inventory, identify IP conflicts and non-compliant or orphaned assets, and accelerate threat investigation and response with curated intelligence and analyst research tools. |
Infoblox Government Cloud | SaaS | Moderate | Provisionally Authorized |
|
Impact Level: High Authorization Date: 2022-04-24 SRID#: SR21024 3PAO: Kratos Point Of Contact: John Gallagher Contact Email: jogallag@microsoft.com Sponsor Names: GovRAMP Approvals Committee Service Description: Microsoft Azure Government is a separate cloud platform to support US federal, state, local, and tribal government agencies. It can support data that’s subject to the CJIS Security Policy and IRS Publication 1075 along with FedRAMP High and other compliance standards. Microsoft Azure Government is delivered through separate datacenters with physical, logical, and network isolation from the commercial cloud and is operated by US persons who have passed fingerprint-based background checks performed by the states. |
Microsoft Azure Government | SaaS, Paas, IaaS | High | Authorized, Federal JAB |
|
Impact Level: Moderate SRID#: SR24043 3PAO: A-Lign Point Of Contact: Jim Flynn Contact Email: flynn@civicplus.com Sponsor Names: N/A Service Description: The CivicEngage Central (CivicEngage) content management system (CMS) is robust and flexible with all the features and functionality you need today and in the future. Developed for municipalities that need to update their website frequently, CivicPlus provides a powerful government content management structure and website menu management system. The easy-to-use system allows non-technical employees to efficiently update any portion of your website. Each website begins with a unique design developed to meet your specific communication and marketing goals, while showcasing the individuality of your community. Features and capabilities are added and customized as necessary, and all content is organized in accordance with web usability standards. |
CivicPlus Municipal Website Central | SaaS | Moderate | Ready |
|
Impact Level: Moderate SRID#: SR26028 3PAO: A-Lign Point Of Contact: Parminder Purewal Contact Email: govramp@simplifyvms.com Service Description: SimplifyVMS is an award-winning, AI-driven VMS technology provider, designed to meet the future demands of workforce management. Our technology ecosystem transforms how organizations engage, manage, and optimize their contingent workforce. We offer next-gen vendor management solutions that cater to diverse industries. Our platform enhances efficiency, reduces costs, streamlines processes, making vendor management simpler and more effective for organizations worldwide. |
SimplifyVMS | SaaS | Moderate | Ready |
|
Impact Level: Moderate Authorization Date: 2023-05-22 SRID#: SR23009 3PAO: A-Lign Point Of Contact: Michael Jolly Contact Email: mjolly@tmetrics.com Sponsor Names: GovRAMP Approvals Committee Service Description: The T-Metrics Cloud Contact Center is an Omnichannel Contact Center as a Service (CCaaS) solution that offers voice, email, SMS, artificial intelligence, analytics, ACD, call and screen recording, scorecard, and survey to state and local agencies to improve constituent services. The advanced SaaS solution enables agencies to leverage their investments in Unified Communications, Phones, Carrier and SMS Services with its unique design. The architecture offers agencies the flexibility to consume the service however they decide - premises, hybrid, cloud. |
T-Metrics Cloud Contact Center | SaaS | Moderate | Authorized |
|
Impact Level: Moderate Authorization Date: 2026-07-30 SRID#: CR25005 Point Of Contact: Kaleem Din Contact Email: kdin@citi-us.com Sponsor Names: N/A Service Description: CITI’s Early Development Management System (Arise) is a case management system engineered to facilitate and augment Child Care subsidy requirements at the State and County level. |
Arise | SaaS | Moderate | Core |
Showing 1 to 0 of 163 entries
Details
Progressing Product List (PPL)
The Progressing Product List (PPL) recognizes offerings actively working toward a verified GovRAMP security status.
Listings include products and services participating in the Progressing Security Snapshot Program or those engaged with a Third-Party Assessment Organization (3PAO) as they prepare for Ready or Authorized Verification.
| Organization Name | Service Offering | Service Model | Impact Level | Status |
|---|---|---|---|---|
|
Impact Level: Moderate SSID#: SS26036 Point Of Contact: Amy Ledford Contact Email: amy.ledford@anthem.com Service Description: Enterprise /GBD Platform Services |
Elevance Health GBD Facets APM | Paas | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24064 Point Of Contact: Brittany Wilbert Contact Email: brittany@binti.com Service Description: Binti builds modern software with the goal of helping every child have a family. 400,000 children are currently in foster care in the US and millions are in orphanages around the world. 30% of the US’s homeless population and 25% of prison inmates experienced foster care as youth. It’s clear that children who don’t have families don’t have a fair chance at life. Binti wants to change that. By streamlining the foster/adoption process with user-friendly tools, we are working to address the nationwide shortage of foster families. |
Binti | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24108 Point Of Contact: Blake Gladfelter Contact Email: blake.gladfelter@globalpay.com Service Description: Active Network is the leading provider of cloud-based activity and participant management solutions serving a wide range of customer groups including community activities, the public sector, non-profits, and sports. Our proprietary technology platforms transform the way organizations manage their activities, facilities, and events by facilitating online and in-person commerce and streamlining other critical management functions, while also driving consumer participation to their events. |
JumpForward | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24164 Point Of Contact: Michael Stanton Contact Email: mstanton@arborprousa.com Service Description: A gis inventory software solution to collect and manage trees and other assets in the browser. |
Arborpro | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24157 Point Of Contact: Ryan Ellis Contact Email: ryan.ellis@apiexperience.com Service Description: APIConnect is a data-driven, experiential education platform developed to help colleges, universities and students create and find learning experiences customized to meet their needs. |
APIConnect | SaaS | Moderate | Progressing |
|
SSID#: SS24048 Point Of Contact: Mark Jones Contact Email: mjones@dualenroll.com Service Description: Cloud platform for managing dual/concurrent enrollment programs at colleges/universities |
DualEnroll | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24031 Point Of Contact: Arve Kjoelen / Darragh McMahon Contact Email: compliance@barracuda.com Service Description: Barracuda Cloud-to-Cloud Backup for Microsoft 365 protects Exchange Online, OneDrive for Business, SharePoint, and Teams data by backing up directly to Barracuda Cloud Storage |
Cloud to Cloud Backup (CCB) | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26056 Point Of Contact: Michael Mumma Contact Email: sales@concoursetech.com Service Description: The Concourse platform is a cloud-based, configurable software platform that enables government agencies, educational institutions, and other public-sector organizations to digitize, manage, and automate their operational workflows |
Concourse | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS24092 Point Of Contact: Mason Yin Contact Email: mason.yin@blackboard.com Service Description: Blackboard solution offers agencies next-generation online, social and mobile tools that create a continuous learning environment, built around peer-to-peer interaction, content and discussions. Outcomes enables institutions to effectively manage their outcomes assessment processes at their institution. The application helps standardize the process of outcome assessment which in turn makes it easier to compare the achievement levels across the institution. Evaluate streamlines the course evaluation process so that perceptions of a student’s learning experience can be easily used to gain a deeper understanding of where course adjustments can be made. It supplies analysis with recommendations for development that considers both instructors’ goals and students’ self-rated progress. Milestone Enable learners to certify and showcase their skills and accomplishments. Support them by aligning paths and outcomes as they transition into the next stage of their educational or professional journey. |
Blackboard Core and Premium Solutions (including: Blackboard LMS, Evaluate and Milestone) | SaaS | Moderate | Progressing |
|
SSID#: SS24159 Point Of Contact: Mike McCaman Contact Email: mike.mccaman@claritysolutionsgroup.net Service Description: ClarityLink is a communications platform that unifies physical and digital channels to streamline document exchange for human services agencies. It automates outbound correspondence by capturing desktop print jobs and routing them through centralized print and mail operations. Simultaneously, it simplifies inbound document handling by capturing files from mail, fax, email, and online uploads, then intelligently indexing and routing them into agency systems. By integrating both sides of the communication cycle, ClarityLink reduces manual effort, accelerates case processing, and enhances overall client engagement. |
ClarityLink | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS26077 Service Description: The Abacus Insights Platform is a data management and analytics enablement solution that organizes, curates and enriches disparate healthcare datasets to drive powerful insights for improvements in member engagement and satisfaction. |
Abacus Insights Data Management Platform | Moderate | Progressing | |
|
SSID#: SS26045 Service Description: The platform provides intake, case management, and reporting applications for multi-model early childhood home visiting services and their state administrators. |
Allied Platform | Paas | Progressing | |
|
Impact Level: Moderate SSID#: SS26029 Point Of Contact: Melissa Tabor Contact Email: melissa.tabor@b2gnow.com Service Description: B2Gnow is the leading business diversity, procurement, and grant management platform that helps organizations streamline and automate their compliance processes. Over 400 public and private sector organizations—including the federal government, more than half of U.S. state governments, major airports, and Fortune 500 companies—rely on B2Gnow to securely manage their vendor diversity and labor compliance. Founded in 1999, B2Gnow maintains North America's largest database of over 500,000 certified disadvantaged business entities and serves customers nationwide from its headquarters in Phoenix, Arizona. |
B2G | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23090 Point Of Contact: Matt Dinsmore Contact Email: mdinsmore@explorance.com Service Description: The Explorance software suite, including Blue, MLY, Metrics that Matter (MTM), and Forms, helps you extract the most important feedback insights to boost your student or employee engagement, increase retention, and reduce turnover. With industry-leading integration with LMS, HRIS, and other platforms, as well as purpose-built AI comment analysis technology, you can fuel significant cultural and organizational growth with better data-driven decision-making. |
Blue | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23025 Point Of Contact: Cheryl Slinkard Contact Email: cls@auto-graphics.com Service Description: Our library resource sharing system facilitates the inter-connectivity of consortia, providing you the ability to simultaneously interface with multiple ILS and ILL systems. |
SHAREit | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26066 Point Of Contact: Richard Gould Contact Email: rgould@gouldintelligent.com Service Description: Government Agency Licensing and Registration Management System |
GouldGov | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS24170 Point Of Contact: Dan Hess Contact Email: dan.hess@edmentum.com Service Description: Edmentum’s products are designed to propel academic growth, test readiness, and graduation success rates everywhere learning occurs. Apex Courses provides digital curricula for grades 6–12 learners, increases on-time graduation rates and supports high-quality programs for first-time credit, credit recovery, and expanded course access. Tutorials offer retest-driven concept recovery to help grade 6–12 students catch up and find success in the courses they're taking and aids in test preparation. Calvert Learning supplies elementary, project-based digital curricula for virtual or blended learning environments and are designed to set a strong foundation for future success. Edmentum Courseware offers customizable digital curriculum for grades 6–12, aligned to TEKS standards, including core, AP®, CTE, electives, world languages, and test preparation courses. Multimodal learning units feature interactive lessons to engage students, build mastery, and reinforce real-world application. Robust reporting, grading, and data dashboards allow real-time progress tracking. Exact Path provides diagnostic-driven learning paths and powerful teaching tools to scale K–12 interventions in math, reading, and language arts and empower educators to reach all students through personalized instruction. MajorClarity connects vision to action, building scalable, future-ready college and career readiness programs that transform limited access into limitless opportunity. Study Island includes K–12 TEKS-aligned standards mastery practice, test prep, and assessments to advance grade-level proficiency in math, ELA, science, and social studies and build testing confidence for all learners. |
Edmentum Product Suite (includes Apex Courses, Tutorials, Calvert Learning, Edmentum Courseware, Exact Path, MajorClarity, and Study Island) | SaaS | Moderate | Progressing |
|
SSID#: SS24149 Point Of Contact: Chad Walters Contact Email: chad.walters@campusiq.com Service Description: ## Revolutionizing Campus Space Management with Data-Driven Insights CampusIQ offers a cutting-edge platform that helps higher education institutions leverage existing data infrastructure to gain comprehensive insights into student experiences and campus utilization without requiring new hardware investments. ### Key Takeaways - Utilizes data from existing enterprise wireless networks and 50+ campus tools - Provides actionable insights for campus planning - Enables data-informed decision-making without additional hardware costs |
Space Management | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24009 Point Of Contact: Evelyn Hartline Contact Email: security@bywatersolutions.com Service Description: Suite of Physical library software, Open Source |
Koha/Libki/Metabase/Aspen | SaaS | Moderate | Progressing |
|
SSID#: SS26007 Service Description: Magic Notes is an AI-powered ambient voice technology focused on front line workers that automatically generates documentation by listening to consultations, allowing health and social care professionals to focus on care rather than note-taking. The solution captures the natural conversation between front line worker and the service user and transforms it into structured, accurate records and case notes. |
Magic Notes | SaaS | Progressing | |
|
SSID#: SS25018 Point Of Contact: David Vanauken Contact Email: david.vanauken@deighton.com Service Description: The dTIMS Platform is an Enterprise Asset Management Solution (EAMS) that encompasses strategic planning with maintenance operations and capital investment decision-making. |
dTIMS | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS26009 Service Description: Dubber provides cloud-based communications recording and voice intelligence products and services. |
Dubber | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24126 Point Of Contact: Jeremy Moulton Contact Email: jeremy.moulton@act.org Service Description: The ACT test, Pre-ACT, and Workkeys assessments for State & District customers. |
The ACT | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23092 Point Of Contact: John Kelly Contact Email: jkelly@accela.com Service Description: Accela Inc. is a software development and engineering company that designs and maintains a cloud-based, software-as-a-service (SaaS) platform of services utilized by government agencies to improve productivity, efficiency, and civic engagement. The Company is a provider of civic engagement solutions for government. The Accela Civic Platform includes application programming interfaces (APIs) and mobile applications and is designed to enable and improve core processes for city, county, state, and federal governments. The Company’s solutions uniquely address the diverse needs of agencies, citizens, and businesses by enhancing workflow and making publicly available information more accessible. |
Civic Platform | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24042 Point Of Contact: Government Team Contact Email: government@jotform.com Service Description: Jotform is a powerful online form builder that assists businesses and organizations in creating online forms, generating PDF documents, and automating workflows. Jotform Government, provided by Jotform Inc. based in San Francisco, offers customized data collection and processing solutions that meet the strict security requirements of government agencies and institutions. It provides a user-friendly platform to create online forms, convert traditional PDF contracts into digital agreements, collect e-signatures satisfying ESIGN Act requirements, automate PDF document generation, and streamline the business logic of organizations into digital workflows, all while eliminating the need for paper forms. |
Jotform Government | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS25023 Point Of Contact: Forrest Barnes lll Contact Email: mary.owusu@aspiraconnect.com Service Description: Aspira is a comprehensive, enterprise-grade platform that enables government agencies and outdoor recreation organizations to manage, automate, and scale their sports licensing, campground reservations, and commercial permitting programs through a single integrated solution. Aspira consolidates multiple legacy systems into one modern platform, improving operational efficiency, customer experience, and regulatory compliance. |
AspiraOne | SaaS | Moderate | Progressing |
|
SSID#: SS24014 Point Of Contact: Jason Fischer Contact Email: jason.fischer@debtbook.com Service Description: DebtBook is a cloud-based debt, lease, and subscription management solution. |
DebtBook | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24067 Point Of Contact: Rich Davidson Contact Email: security@bned.com Service Description: AIP, FDC and DDP provide courseware services to students and faculty on college campuses. inSIte and ARC provide retail and ecommerce management services to college bookstores |
Adoptions & Insights Portal (AIP), First Day Complete (FDC), Direct Digitial Platform (DDP), inSite ECommerce and Advanced Retail Center (ARC) | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24129 Point Of Contact: Niki Papazoglakis Contact Email: admin@mobility4ps.com Service Description: Bridge4PS is a secure mobile and desktop communications and data sharing app designed specifically for first responders to communicate in real-time across teams, departments, agencies, and jurisdictions. |
Bridge4PS | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23113 Point Of Contact: Mark Potter Contact Email: mpotter@backblaze.com Service Description: Backblaze makes it astonishingly easy to store, use, and protect data. Backblaze B2 Cloud Storage provides always-hot, S3-compatible, specialized object storage for backup and archive, application storage, and media workflows. Backblaze Computer Backup provides unlimited, automated Mac and PC backup. |
Backblaze B2 Cloud Storage and Computer Backup | IaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26050 Point Of Contact: Patrick Vlaskovits Contact Email: pv@blazestack.com Service Description: Blazestack Fire Investigation and Inspection |
Blazestack | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26061 Point Of Contact: Julie Wolfe Contact Email: julie.wolfe@cantatahealth.com Service Description: Arize EHR is a cloud-hosted electronic health record (EHR) platform designed for behavioral health, intellectual and developmental disabilities (I/DD), human services, and related healthcare organizations. The platform supports clinical documentation, treatment planning, care coordination, scheduling, reporting, telehealth services, and Acute Medication Management capabilities. The Telehealth solution facilitates remote patient care and consultations through secure video conferencing, messaging, and integration with electronic health record workflows. Cantata’s Consumer Access and Stakeholder Access portals allow clients to securely communicate and share information with providers;they can better manage their health and stay on top of their treatments and appointments. With Consumer Access, staff can provide the ability for clients to: • Complete and sign documentation (e.g., consent forms, assessments, etc.) • Upload and share scanned images and forms • Request, confirm, or request changes for appointments • View test results and pay bills • Launch telehealth visits from the app • Self-service lookup of important details in clinical records, such as prescribed medications or care documents Authorized persons such as parents, guardians, or legal/court system representatives can also have direct, secure, and limited access to necessary documents and information through the Stakeholder Access portal. Acute Medication Management supports medication-related clinical processes, eMAR (Electronic Medication Administrator Record) medication records, and integrates with electronic prescribing services. Arize EHR also integrates with select third-party services, including payment processing and e-prescribing solutions, to support clinical and operational requirements while maintaining healthcare privacy and security standards. |
Arize EHR | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS24032 Point Of Contact: Arve Kjoelen / Darragh McMahon Contact Email: compliance@barracuda.com Service Description: The Barracuda Cloud Archiving Service is a Software as a Service (SaaS) solution hosted in the Barracuda Cloud, previously referred to as direct-to-cloud. The Barracuda Cloud Archiving Service is designed for customers that do not want to manage a physical or virtual appliance. |
Barracuda Cloud Archiving Service (BCAS) | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24052 Point Of Contact: Joyda Bianco Contact Email: legal@hyperviewhq.com Service Description: Hyperview is the leading AI-driven, cloud-based data centre infrastructure management (DCIM) platform that empowers enterprises to optimize capacity, reduce power and energy consumption, lower costs, and avoid outages. |
Hyperview | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26040 Point Of Contact: Jorge Suazo Contact Email: jsuazo@insure-rite.com Service Description: Automobile and watercraft liability insurance verification services. |
Insurance Verification Services | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS24093 Point Of Contact: Omar Ghory Contact Email: omar.ghory@curemd.com Service Description: Practice Management and Electronic Health Records |
CureMD10g | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26049 Point Of Contact: Emily Green Contact Email: emily.green@castlerockits.com Service Description: Castle Rock’s CARS (Condition Acquisition and Reporting System) is a comprehensive, human-centered event management and real-time road condition reporting platform designed to help transportation agencies capture and share human-centered roadway knowledge. CARS is a modular platform that can stretch to support Advanced Traveler Information Systems (ATIS) and Advanced Traffic Management Systems (ATMS) of all sizes. The CARS platform bridges the gap between complex roadway data and actionable traveler insights through its specialized, interconnected modules that ensure high performance, technological innovation, and system scalability from routine summer days to severe winter storms. Castle Rock hosts the CARS platform in AWS and provides 24/7/365 Support to all modules in the system. |
CARS | Moderate | Progressing | |
|
SSID#: SS26019 Point Of Contact: Caden Gee Contact Email: caden@avihumanservices.org Service Description: The service provides a web-based platform for collecting, analyzing, and evaluating pre-employment transition services (Pre-ETS). The platform facilitates data-driven services and enhanced monitoring of outcomes. |
Transition Readiness Toolkit | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24137 Point Of Contact: Eric Chailler Contact Email: echailler@liaisonedu.com Service Description: Liaison International’s Living Profile product is a student-focused, full-lifecycle tool that supports planning and documentation of activities for people from high school, through higher education, to career. Using Living Profile, users can explore educational opportunities for college and graduate school, begin the application process, and track their accomplishments. As they do this, they can publish a curated version of their academic, extra-curricular and career accomplishments to a private website, then share the URL to the site with whomever they wish – teachers, mentors, admissions officers, employers, etc. Because Living Profile data belongs to the account owners, it is a record that stays with them as they move between academic opportunities and employment the account owner chooses with whom and when they would like to share their information. The Living Profile is also a powerful new consumer access point to the Liaison family of products and services, including Liaison’s CAS applications for higher education. |
Living Profile | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26054 Point Of Contact: Henry Pack | Sheldon Brewster Contact Email: henry@dx-web.com | sheldon@dx-web.com Service Description: A complete e-prescribing solution with AI functionality to calculate a Wellness Data Score (WDS), made in the USA |
DxScript-Coglitix AI | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS24077 Point Of Contact: Chuck White Contact Email: cpwhite@follett.com Service Description: The information system consists of a suite of micro-services designed specifically for the provisioning and access of Digital course materials for the higher education faculty and students. Willo is powered by the AWS Cloud and offers unlimited performance and capacity. With a wide variety of integration options for universities, our products can work together as one cohesive flow or standalone as a partial integration. Our mission and objective is to provide the best possible access to a multitude of Digital Materials in a single integration. Our staff is highly focused. Our products have endured the test of time. Our products are used in thousands of universities throughout the nation. |
Discover / Willo | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24131 Point Of Contact: Amanda Ferrante Contact Email: aferrante@ebsco.com Service Description: The FOLIO platform is an open-source library services platform (LSP) that uses a microservices architecture to manage both print and electronic resources. It supports core library functions like circulation, cataloging, and acquisitions. EBSCO offers FOLIO hosting and support, as well as add-on functionality such as the Locate OPAC. |
EBSCO FOLIO | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26021 Service Description: Asset Panda is a cloud-based asset management and tracking platform designed to help organizations manage, monitor, and control their physical and digital assets throughout their entire lifecycle. The solution is delivered as a Software-as-a-Service (SaaS) application accessible through a web browser and mobile applications, enabling users to track assets, manage inventories, and automate operational workflows from anywhere. The platform provides organizations with a centralized system to create, maintain, and monitor asset inventories, including equipment, IT hardware, tools, vehicles, consumables, and other operational resources. Asset Panda enables users to capture asset data, perform audits, manage maintenance schedules, track asset movement, and generate real-time reports and analytics to support operational decision-making. |
Asset Panda | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24177 Point Of Contact: Tina Burgess Contact Email: tina@ameritrustsolutions.com Service Description: AmeriTrust Solutions offers a cloud-based software platform designed to streamline and accelerate the Medicaid application process. Our system automates the prefill and verification of applicant information using secure integrations with authoritative third-party data sources such as Equifax. By reducing administrative burdens and shortening application cycles, we reduce administrative costs, improve accuracy, and provide earlier access to care for vulnerable populations. |
Application Management Platform | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24163 Point Of Contact: Charles Fehrman Contact Email: cfehrman@axon.com Service Description: Axon Cloud Services refers to the suite of secure, cloud-based platforms and capabilities developed by Axon Enterprise, Inc. to support law enforcement, public safety agencies, and related entities in managing, storing, and processing Criminal Justice Information (CJI) and Controlled Unclassified Information (CUI). These services are designed with compliance, scalability, and operational efficiency in mind, aligning with federal standards like CJIS Security Policy v6.0, NIST SP 800-53 Rev. 5, FIPS 199, and FIPS 140-3. |
Axon Cloud Services (ACS) | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24033 Point Of Contact: Arve Kjoelen / Darragh McMahon Contact Email: compliance@barracuda.com Service Description: Barracuda WAF-as-a-Service provides cloud-delivered, enterprise-grade application security without the administrative overhead of an appliance. With Barracuda WAF-as-a-Service, you can secure your applications within minutes, regardless of where they are hosted. There is nothing to deploy, scale, size, or maintain. Built on Barracuda’s proven security effectiveness, Barracuda WAF-as-a-Service protects against advanced layer 7 attacks such as DDoS, SQL injection, zero-day threats, AJAX and JSON payloads, the OWASP Top Ten, and others. |
Web Application Firewall as a Service (WAFaaS) | SaaS | Moderate | Progressing |
|
SSID#: SS23124 Point Of Contact: Aaron Salinas Contact Email: aaron.salinas@biote.com Service Description: Major software program that Biote provides it's customer giving them one location for inventory, ordering, and tracking of customer purchases, products, and procedures. |
Method | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24078 Point Of Contact: Andrew Bender Contact Email: andrew.bender@erezlife.com Service Description: A cloud-based system to manage operations for Residence Life departments at colleges and universities. |
eRezLife | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24081 Point Of Contact: Gracie Russell Contact Email: gracie.russell@florencehc.com Service Description: eBinders™ is a 21 CFR Part 11 compliant SaaS platform that enables digital workflows for the customer to create, access, and track essential trial documents via electronic investigator site files (eISF), participant binders, and eLogs. Within eBinders™, the customer can also provide controlled, timed access to other users—such as auditors, monitors, or sponsors—to enable remote start-up, monitoring, and source data review. The customer can save time and costs by using eBinders™, including decreasing study start-up timelines by as much as 40% one NCI Cancer Center reduced average time to sign from 2 weeks to 4 hours. Throughout your use of eBinders™ to collect signatures, update eLogs, and upload patient health information (PHI) and source data, Florence prioritizes regulatory compliance. eBinders™ is compliant and compatible with the technical regulatory body requirements for electronic records and electronic signatures as well as the industry standards for GxP. eBinders™ is currently used and compliant across 50+ countries regulatory authorities and publications where Florence complies include FDA 21 CFR 11, HIPAA, GDPR, ICH E6(R2) GCP, and Annex 11. |
Site Enablement Platform | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24102 Point Of Contact: Kyle McGrath Contact Email: kylem@rampxchange.com Service Description: Online marketplace for buyers to procure cybersecurity products and/or services from a pool of verified providers. |
RAMPxchange | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26020 Point Of Contact: Brandon Path Contact Email: brandon.path@bonditech.com Service Description: CAWEB is designed specifically for managing cases involving crime victim compensation and sexual assault claims. It offers out-of-the-box capabilities that enable seamless management, reporting, and secure support for these processes. |
ClaimsAssistant Web (CAWEB) | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23037 Point Of Contact: Satish Chandra Contact Email: satish@springshare.com Service Description: Springshare LibApps Suite consists of SaaS tools for librarians which include the following: LibGuides - for curating resources and building websites LibAnswers - ticketing/help desk, social media, and LibChat LibCal - manage library hours, events, rooms, equipment LibConnect - build and cultivate strong relationships with the community LibStaffer - manage staff schedule, with reporting LibWizard - create forms, surveys, tutorials and quizzes LibInsight - gather data and analyze statistics More information at https://springshare.com/platform/ |
LibApps Suite | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23102 Point Of Contact: Chet Smith Contact Email: chetsmith@cambridgepub.com Service Description: MyBusinessCourse.com is an online homework management and elearning system to accompany Cambridge Business Publishers Accounting textbooks. |
MyBusinessCourse.com | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23050 Point Of Contact: Madison Feldkamp Contact Email: mfeldkamp@frontrush.com Service Description: Student-Athlete life-cycle management system. |
Front Rush Elite & Essentials | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24132 Point Of Contact: Kevin Smith Contact Email: kevin.smith@mybentek.com Service Description: SaaS Benefits Administration Solution |
Bentek | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26026 Point Of Contact: Dean Scontras Contact Email: dean.scontras@island.io Service Description: # 🌐 Island Enterprise Browser - Product Description ## Overview Island is the enterprise browser that gives organizations complete control, security, and visibility over how employees access and interact with web applications and data. Built on Chromium, Island embeds enterprise-grade security, data protection, and management capabilities directly into the browser itself—eliminating the need for complex agent deployments, VPNs, or virtual desktop infrastructure. ## What Makes Island Different Unlike consumer browsers retrofitted with extensions and plugins, Island is purpose-built for enterprise use. It provides a unified platform that secures the "last mile" of user activity—where work actually happens—while maintaining the speed, compatibility, and user experience employees expect from modern browsers. ## Key Capabilities **🔐 Zero Trust Access & Security** - Conditional access controls based on identity, device posture, network, location, and application context - Built-in protection against phishing, malware, session hijacking, and browser exploits - Zero trust network access (ZTNA) to private applications without separate agents - Enhanced privileged access management for admin consoles and critical systems **🛡️ Intelligent Data Protection** - Granular, context-aware data loss prevention (DLP) policies - Control copy/paste, downloads, uploads, screenshots, and printing—even outside the browser - Application boundaries that allow data to flow freely between approved apps while preventing leakage - Works across SaaS applications, websites, and desktop tools like Zoom, Slack, Teams, and WhatsApp **👁️ Complete Visibility & Analytics** - High-fidelity monitoring of all work activity with privacy protections for personal browsing - Clear privacy indicators that show users when they're in monitored vs. private environments - Digital Employee Experience (DEX) analytics on application performance, network health, and device status - Full session recording and audit logs for compliance and incident response **⚡ Enhanced Productivity** - Built-in AI Assistant for writing, research, and summarization - Smart clipboard with advanced copy/paste features - Integrated password manager with zero-knowledge encryption - Ad and tracker blocking for faster browsing - Browser automation to optimize workflows without touching source code **🎨 Enterprise Customization** - Fully customizable interface including colors, backgrounds, and branding - Centralized policy management and deployment - Seamless integration with existing identity providers and security tools ## Universal Compatibility **Platforms:** Windows, macOS, Linux, Chromebook, iOS, iPadOS, Android **Browser Engines:** Chromium-based with support for Chrome, Edge, Safari, and Firefox workflows ## Common Use Cases - Secure remote and hybrid work on any device (including BYOD) - Replace or reduce VDI costs while maintaining security - Third-party and contractor access with granular controls - Regulatory compliance (GDPR, HIPAA, SOC 2, etc.) - SaaS and web application security without VPNs or proxies - Workforce privacy by separating work and personal browsing ## Who Uses Island Organizations across finance, healthcare, technology, retail, manufacturing, education, legal, pharmaceutical, and hospitality sectors trust Island to secure their workforce while enabling flexible, productive work from anywhere. --- |
Island Enterprise Browser | Moderate | Progressing | |
|
SSID#: SS25020 Point Of Contact: David Terneus Contact Email: david.terneus@topodot.com Service Description: TopoShare is a geospatial data management solution that interfaces with our customer's cloud storage and provides users with a map-based dashboard for ease of accessing that data. |
TopoShare | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24118 Point Of Contact: Marijke Koster Contact Email: m.koster@scisure.com Service Description: SciSure is a management platform designed to assist compliance and safety officers in tracking hazardous activity in their organization. It is a tool to allow these users to generate high level reports, track activity (such as training), log safety activity (such as Lab Inspections), manage inventory (such as equipment), and more. |
SciSure | SaaS | Moderate | Progressing |
|
SSID#: SS24180 Point Of Contact: Vance Bradshaw Contact Email: vance@ims16.com Service Description: The iMS software suite is a single system comprised of various applications that will support municipal agencies in the areas of land development, permitting, plan review, inspections, code enforcement and licensing. |
iMS Suite | SaaS | Progressing | |
|
SSID#: SS25022 Point Of Contact: Jonathan Askins Contact Email: jonathan.askins.c@coreview.com Service Description: Configuration management platform and backup utility for the M365 Tenant. |
CoreView One | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS23079 Point Of Contact: Kris Hall Contact Email: khall@caseiq.com Service Description: Software to streamline workplace investigations and risk mitigation for today’s organizations through omni-channel case intake, configurable workflows, smart automations, and meaningful analytics. |
Case IQ | SaaS | Moderate | Progressing |
|
SSID#: SS26001 Service Description: Cloud hosted CJIS case management solution, and an AI Data Assessor. |
VantagePoint, AIDA | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS23108 Point Of Contact: Jordan Erickson Contact Email: jordan.erickson@alegeus.com Service Description: The Alegeus WealthCare Administration system (WCA) is the only single system in the industry that houses the administration for all consumer-directed healthcare (CDH) accounts, recordkeeping for health savings accounts (HSAs), and benefits, debit card (debit card) transaction processing enabling not just the stacking of multiple plans but also increased efficiency in end-to-end processes required to fully support multiple account types together. Alegeus offers a stacked or multi-purse debit card solution that enables multiple benefit accounts to be stacked on a single debit card. Each benefit account represents a separate purse on the card. Employers can define the order of reimbursement for account types which have overlapping available services (e.g., HSA and FSA both allow pharmacy swipes). We also provide unique automation capabilities to coordinate activities between HSA and non-HSAs. For example, we provide the ability to configure deductible rules that dynamically update account descriptions and spending eligible when transitioning from a full FSA to a limited purpose FSA with an HSA. |
WealthCare Administration | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26104 Point Of Contact: Tracey Mannion Contact Email: proposals.amer@dtn.com Service Description: DTN ClearPath Weather® (MDSS) is a cloud-based Maintenance Decision Support System (MDSS) designed to support transportation agencies and road maintenance organizations in managing weather-related roadway operations. The platform integrates weather forecasts, pavement condition modeling, road observations, maintenance activity data, and operational constraints to provide actionable recommendations for winter road treatment and maintenance decisions. ClearPath Weather delivers site-specific and route-specific forecasts, pavement and bridge condition predictions, treatment recommendations, mobile access, reporting capabilities, and operational analytics to help agencies improve roadway safety, optimize resource utilization, and enhance decision-making before, during, and after weather events. |
DTN ClearPath Weather® (MDSS) | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS26003 Service Description: IntelliGrants® allows our clients to manage all data related to the complete lifecycle of their grants in one user-friendly environment. |
IntelliGrants | SaaS | Moderate | Progressing |
|
SSID#: SS26014 Service Description: Davis Advantage is a complete, integrated solution that combines a student-friendly textbook (either a print textbook with an access code or a digital eBook with instant access) with an online program that combines personalized learning, clinical judgment, and quizzing assignments. Davis Advantage equips instructors with actionable analytics to track students’ participation and progress, and identify weak topic areas or concept areas. |
Davis Advantage | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24128 Point Of Contact: Craig Ficik Contact Email: cficik@extremenetworks.com Service Description: ExtremeCloudTM IQ provides unified management for wired, wireless, and SD-WAN to reduce risk and simplify operations. It is a core component of Extreme’s One Network, One Cloud framework that is secure by design and provides cloud choice for data residency and privacy. ExtremeCloud IQ delivers unified management of Extreme devices, and it manages Cisco and HPE Aruba switches, easing the transition to cloud-based management. It also provides basic setup and monitoring of a large array of other third-party devices. |
ExtremeCloud IQ | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26069 Point Of Contact: Matthew Peters Contact Email: matthew.peters@cai.io Service Description: This product is an AWS S3 bucket where data from the VMS systems we use to deliver MSP services is collected in a client-specific bucket to enable on-demand data analysis upon client request. |
VMS Reporting Landing Zone | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS26044 Service Description: Provides employment and income verification services for State Social Services Programs. A Social Service verification report provided via the Service (“Verification Report”) will include, without limitation and as available, the Consumer’s (i) employer name, (ii) employment status, (iii) employer address, (iv) employment dates, (v) position title, (vi) medical and dental insurance information, (vii) employer wage garnishment address, (viii) pay rate, (ix) up to three (3) years of year-to-date gross income details, and (x) up to three (3) years. |
Equifax Verification Services | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24054 Point Of Contact: Jean Hernandez Contact Email: jean.hernandez@tmasystems.com Service Description: asset & facility management platform |
WebTMA | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24125 Point Of Contact: David Philpott Contact Email: david.philpott@hdisolutions.com Service Description: This application collects automobile insurance policy information and vehicle registration information to determine insurance coverage on vehicles registered in the State of Texas. |
Mississippi Vehicle Insurance Verification System (MSVIVS) | Paas | Moderate | Progressing |
|
SSID#: SS24029 Point Of Contact: Arve Kjoelen / Darragh McMahon Contact Email: compliance@barracuda.com Service Description: Email Gateway Defense protects both inbound and outbound email against the latest spam, viruses, worms, phishing, denial of service attacks and zero-day threats. Email Gateway Defense is a pass-through service, acting as a filter in front of your hosted email service or servers. |
Email Gateway Defense (EGD) | SaaS | Progressing | |
|
Impact Level: Low SSID#: SR26036 3PAO: A_LIGN Point Of Contact: Leslie Buckner Contact Email: leslie.buckner@120water.com Service Description: The 120Water Water Quality, Compliance and Sampling Platform is a cloud-based Software-as-a-Service (SaaS) application that helps state agencies, local governments, and water utilities manage water quality compliance programs. The platform supports lead and copper testing, service line inventory management, sample collection, laboratory result tracking, regulatory reporting, and public transparency initiatives. Primary Functions The platform provides the following core capabilities: 1. Service Line Inventory Management: Track water service line locations, materials (lead, copper, galvanized, plastic), installation dates, and verification records 2. Water Quality Sample Management: Coordinate sample collection schedules, assign field technicians, track sample status from collection through laboratory analysis 3. Laboratory Results Processing: Receive and store water quality test results from certified laboratories, including lead levels, copper levels, and other contaminants 4. Compliance Reporting: Generate regulatory reports for EPA Lead and Copper Rule compliance, state-specific requirements, and federal grant programs 5. Public Transparency Dashboards: Provide public-facing websites displaying service line materials and water quality results at individual addresses, utility-wide, or state-wide levels 6. Customer Communications: Send automated notifications to residents about sampling schedules, test results, and compliance actions via email, SMS, and direct mail |
Water Quality Management & Facilities PTD | Paas | Low | Pending |
|
Impact Level: Moderate SSID#: SS24059 Point Of Contact: Eric Chailler Contact Email: echailler@liaisonedu.com Service Description: Schools worldwide are effortlessly creating automated inquiry response and multi-touch marketing campaigns proven to engage prospects using our unique combination of Enrollment Marketing software and Admission Services for Higher Ed. You can too. Liaison’s Marketing Services make it easy. Our powerful Enrollment Marketing software, built exclusively for higher education, allows you to create, manage, and analyze omnichannel marketing campaigns that are: - Immediate - Relevant - Automated - Trackable |
EMP | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24010 Point Of Contact: Colby King Contact Email: colby.king@fivoshealth.com Service Description: Registry Product |
Pathways | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24117 Point Of Contact: Trevor Ward Contact Email: trevor@dorgersoft.com Service Description: Valence CRM is a highly configurable, cloud-based case management solution designed to streamline complex workflows for government agencies and public organizations. With robust features such as document management, automated business rules, role-based security, and customizable dashboards, Valence CRM allows organizations to efficiently manage regulatory compliance, case tracking, licensing, and revenue processes. |
Valence CRM | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23096 Point Of Contact: Zalak Shah Contact Email: zshah@ixl.com Service Description: IXL is the end-to-end learning solution to drive positive student learning outcomes. Research-based and research-proven, IXL is the essential solution that supports teachers with up-to-date assessment of where students are, insight on where they need help, and actionable next steps to differentiate instruction and accelerate their learning. IXL supports every student to learn independently, at their working level, and at their own pace. With personalized guidance and insightful analytics, students are empowered to take ownership of their learning, making informed choices about what to learn next and tracking their progress towards mastery. IXL is built on five key components: comprehensive PK-12 curriculum and personalized guidance instructional resources and classroom engagement tools first-of-its-kind assessment suite actionable district-wide analytics and district partnership, professional learning and implementation services. Integrated into a single platform, each component is designed to work together seamlessly to give educators the tools and insights they need to maximize learning for every student. |
IXL | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS25013 Point Of Contact: Kevin Bradt Contact Email: kevin.bradt@ingios.com Service Description: COMP-Score® CORE is a data analysis and project management tool for e-Compaction projects (construction). This web application delivers data gathered by COMP-Score® RT and processed by COMP-Score® Pro. |
COMP-Score® CORE | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26042 Service Description: Intermedia UCaaS (Unified Communications as a Service), branded as Intermedia Unite, is a cloud-based platform combining voice (VoIP), video conferencing, team chat, screen sharing, and file management into one, AI-powered system. It offers remote-enabled, secure, and mobile-friendly tools designed for hybrid work, featuring built-in security, easy scalability, and integration with tools like Microsoft Teams. |
Intermedia | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23111 Point Of Contact: Adam Cutts Contact Email: adam.cutts@commscope.com Service Description: RUCKUS One is an AI-driven network assurance and business intelligence platform that enables enterprises to easily manage a converged network, make better business decisions, and deliver exceptional user experiences. With flexible subscription and deployment models, RUCKUS One enables you to deploy future-proof networks simply, reliably, securely and at cloud-scale. |
RUCKUS One | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24142 Point Of Contact: Allyson Kuegel Contact Email: allyson@pendo.io Service Description: The Pendo platform functions by collecting user event activity, including logins, page loads, and clicks within a customer’s software application. This data may be used to analyze and visualize user behavior, capture feedback, and guide users within the application. The Pendo platform serves the following two customer groups: Pendo for Customers: Enables organizations who develop software for external end users to understand, guide, and gather feedback from their users. Pendo for Employees: Enables organizations to drive digital adoption of internal and third-party applications by their employees. In addition, Pendo’s Partner Ecosystem Program allows organizations to package and sell a white-labeled version of Pendo’s in-application training product to their own customers. The Pendo platform includes the following product offerings that are provided to customers via code running on customers’ applications: -Product Analytics: capabilities are tailored for software products with logged-in users. User activities across the application are captured and aggregated at both the user (individual) and account (company / customer) level, or across customized segments. Segments can be defined based on demographic information (location, browser type), or by specific behavior in the application (e.g., power users). Pendo supports feature-level tracking, in addition to specific pages or links, allowing page elements or clicks to be grouped into defined features. Pendo also tracks how users navigate through the application, including viewing routes users take through different features and pages and how well they follow expected paths. -In-App Guides (“Guides”): overlays and embeds are used to deliver data-informed, personalized communication, such as announcing new features or updates in the customer’s application, provide step-by-step walkthroughs of features, or display tooltips next to specific elements within the user interface. Guides can be added, customized, and updated without coding, completely within the customer’s application allowing them to automatically inherit application or page styles. The purpose of Guides is to educate users and support application navigation. Guides can be paired with user information captured by Pendo One. Using analytic data, customers can select which of their users or segments should be shown a particular guide. -Listen: allows customers to embed input fields within their applications used to capture feature requests and feedback from internal and external stakeholders. Polls can be used to rate a specific feature, capture open-ended feedback, and calculate Net Promoter Scores (NPS) at any point in their application. Poll results are aggregated along with other user, account, and segment analytics, allowing customers to view poll completion rates, summary results, and drill into individual results to see specific user feedback. The combination of quantitative and qualitative user information can be analyzed based on segment, spend, and tags to provide insights into how products are being used. This data also allows customers’ product teams to perform demand planning tasks and create customizable product roadmaps. -Session Replay is: a reproduction of a user’s interactions on the application. Session Replay allows for capture of a user’s events, clicks and mouse movements and plays it back as a video. -Pendo AI: provides users with automated, personalized content by using AI to analyze, sort, and identify trends in end user data. -SaaS Portfolio Insights: analyzes software usage of employees to understand which tools are and are not being used, as well as identify license utilization. -Data Sync: exports event data to a cloud storage destination of choice: Google Cloud Storage, Amazon S3, and Microsoft Azure. |
Pendo Platform | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23125 Point Of Contact: Mark Seligman Contact Email: mseligman@measurelearning.com Service Description: Remote Online Examination proctoring |
ProctorU Proctoring Platform, Examity V4/V5 platforms | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24004 Point Of Contact: Eric Chailler Contact Email: echailler@liaisonedu.com Service Description: The cloud-based application service streamlines researching and applying to multiple programs of interest, guiding students through the application process. With CAS you will: - Encourage application completion - Provide institution-to-student connection - Make your data actionable |
Centralized Application Service (CAS) | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24085 Point Of Contact: Arthur Almazan Contact Email: aalmazan@apspayroll.com Service Description: The APS cloud-based HR and payroll platform provides accessibility to key payroll and HR workflows for optimal efficiency and productivity. It’s easy to use for everyone in your workforce, promoting better adoption and usability . |
APS Payroll | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SR26016 3PAO: A-LIGN Point Of Contact: Lisa Maguire Contact Email: lmaguire@copado.com Service Description: Copado GovCloud provides an integrative solution for the entire development process. It automates manual tasks and provides visibility across the development lifecycle, the release pipeline, the flow of data and metadata between environments to ensure quality and compliance of your releases. Copado GovCloud provides pre-built reports, dashboards and exception-based alerts and notifications. It provides the ability to run regression tests, set up compliance rules and run automated jobs to continuously monitor and scan development releases along with alerts in real-time. Copado GovCloud allows you to automate the analysis of Apex code daily to detect code quality and security risks. Copado GovCloud maintains a complete history of all changes made across your orgs and individuals, along with alerts for events and exceptions. |
Copado GovCloud | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SS23041 Point Of Contact: Maurice Collins Contact Email: maurice@inforeadycorp.com Service Description: Submission vetting platform |
InfoReady Platform | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26039 Point Of Contact: Jake Nix Contact Email: jake.nix@civicplus.com Service Description: DocAccess provides real-time accessibility remediation for PDFs |
DocAccess Powered by CivicPlus | Moderate | Progressing | |
|
SSID#: SS24176 Point Of Contact: Mark Hoffman Contact Email: mhoffman@promiles.com Service Description: The ProMiles Permitting System is a web-based application designed to route and issue oversize/overweight (OS/OW) permits client DOT, and to provide all functionality needed to support this permitting. |
Permit System | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: CR26012 3PAO: N/A Point Of Contact: Michael Mainardi Contact Email: michael.mainardi@laserfiche.com Sponsor Name: N/A Service Description: Laserfiche is a leading enterprise platform that helps organizations digitally transform operations and manage their content with AI-powered solutions. Through scalable workflows, customizable forms, no-code templates and AI-enabled capabilities, the Laserfiche® document management platform accelerates how business gets done, enabling leaders to focus on growth across the enterprise. |
Laserfiche Cloud with Enterprise Security | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SS23047 Point Of Contact: Andrew Scheifele Contact Email: drew@saltycloud.com Service Description: Isora GRC from SaltyCloud is the Lightweight GRC Assessment Platform that enables organizations to gain risk visibility at scale without the complexities of manual processes or legacy software solutions. |
IsoraGRC | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24019 Point Of Contact: Shawn Hermann Contact Email: shawn@mccinnovations.com Service Description: JustFOIA is a GovTech company providing the easiest-to-use records request software to agencies nationwide. JustFOIA manages every step of the process from intake to delivery, saving valuable time through automating repetitive tasks, reminders, and communication with requesters and responders |
JustFOIA | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24057 Point Of Contact: Gunjan Seth Contact Email: gunjan@compansol.com Service Description: BOT software is used by TRIO programs (Title IV Federal Program) for student data management. It helps them prepare the APR (Annual Performance Report) as per Department of Education guidelines. It has several mass communication tools like bulk email, bulk text. etc. for TRIO programs to stay in touch with student participants. BOT has over 200 reports, labels, graphs for tracking and data analysis purposes. |
BOT - Blumen Online for TRIO | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26087 Point Of Contact: Jeff Steyer Contact Email: jsteyer@systemautomation.com Service Description: Evoke is an enterprise Low-code SaaS application used by State and Local governments to perform regulatory operations. |
Evoke | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23095 Point Of Contact: Vincent Holcomb Contact Email: vince.holcomb@octagoshealth.com Service Description: Cloud based platform for remote monitoring management of cardiac devices. |
Octagos Health | SaaS | Moderate | Progressing |
|
Impact Level: High SSID#: SR26006 3PAO: Schellman Compliance, LLC Point Of Contact: ECFax Security Contact Email: ecfaxsecurity@consensus.com Service Description: ECFax® is a unified, secure, cloud-based managed service solution that modernizes manual or semi-automated faxing processes and eliminates the need for multiple faxing solutions. Built with a human-centered design approach, ECFax® simplifies fax services, improves the user experience, provides secure data transfer for PHI/PII, and reduces administrative costs. The solution gives agencies more control over their fax data transfer processes, eliminates the need to manage multiple vendors, and offers 24/7 state-of-the-art faxing capability and help desk support. ECFax® delivers faxes digitally across multiple endpoints, including multifunction devices, shared folders, distribution lists, and inboxes: yielding operational efficiencies and reducing the need for standalone hardware. The solution is: ● Scalable: Hosted on Amazon Web Services GovCloud, ECFax® scales on- demand to hundreds of millions of pages per month through auto-scaling and elastic load balancing. ● Transparent: Performance dashboards provide visibility into service usage and operational status, which allows for near real-time production metrics. ● Secure: ECFax and add on components are FedRAMP High certified and meet the most important security and quality assurance protocols for data protection—including FIPS 140-2. ECFax® Services was developed specifically for the cloud, government agencies benefit from rapid scaling, efficiency and speed. ECFax® is: ● Accessible via AWS GovCloud;● Section 508 Compliant ● Designed to meet the highest security standards required by government agencies In addition, the solution: ● Integrates with other applications via Restful API ● Supports IDP-initiated SSO for authentication ● Facilitates standardization across multiple locations |
ECFax | High | In Process | |
|
Impact Level: Moderate SSID#: SS26025 Service Description: SmarterProctoring is an online exam proctoring platform built to protect academic integrity. It supports multiple proctoring modalities — from automated AI monitoring to live human proctors — and integrates directly into your LMS to streamline scheduling and deliver a secure, reliable testing experience. |
SmarterProctoring | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS26047 Point Of Contact: Thedy Brezault Contact Email: thedyd@medez.com Service Description: EHR/EMR Software designed specifically for Mental Health and Substance Abuse facilities. |
MedEZ® | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS24147 Point Of Contact: Matt Bernhard Contact Email: matt.bernhard@enhancedvoting.com Service Description: Enhanced Voting provides several election-support technologies via a cloud-based platform. This includes electronic ballot delivery and return, election results reporting, absentee ballot tracking, and post-election auditing. |
Enhanced Voting | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26081 Point Of Contact: Andrew Massing Contact Email: amassing@cleargov.com Service Description: Disclosure Studio, Financial Engagement, and Budgeting Suite are multi-tenant SaaS applications used by state and local government finance organizations across the budget and financial reporting cycle. Disclosure Studio compiles, reviews, and publishes statutory and public financial reports, including the Annual Comprehensive Financial Report (ACFR), popular annual financial reports, budget books, and interim monthly and quarterly reports. Budgeting Suite prepares, consolidates, and approves annual operating, personnel, and capital budgets, from departmental request through approval workflow, including position-level personnel budgeting and capital project modeling. Financial Engagement publishes budget and financial information to residents and collects structured public feedback through surveys and polls delivered by web and SMS. Financial data is imported from the customer's accounting or ERP system or supplied as file exports. All customer data is held in United States regions with logical tenant isolation, federated single sign-on, encryption in transit and at rest, and tenant-scoped audit logging. Optional AI-assisted features can be disabled at the tenant level. |
Disclosure Studio | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS26064 Point Of Contact: Young Don (YD) Contact Email: yd.jung@saesol.tech Service Description: SAESOL Tech S2X CMS is a system that issues and manages large-scale, highly reliable security certificates in communication environments across mobility services, such as V2X, EV charging payment, and drone security authentication. |
S2X CMS | Moderate | Progressing | |
|
SSID#: SS23054 Point Of Contact: Ibrahim Aissam Contact Email: ibrahim@ecourtdate.com Service Description: Cloud-based communication and payment platform for courts and law enforcement agencies. |
eCourtDate | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24030 Point Of Contact: Arve Kjoelen / Darragh McMahon Contact Email: compliance@barracuda.com Service Description: IP, automatically detect and prevent impersonation, business email compromise, and other targeted attacks. Barracuda's AI engine learns your organization's unique communication patterns and leverages these patterns to identify anomalies and prevent social-engineering attacks in real time. IR, stop phishing attacks used to harvest credentials for account takeover. Our AI detects anomalous email behavior and alerts IT, then finds and removes all fraud emails sent from compromised accounts. Remediate threats quickly and efficiently, by automating investigative workflows and enabling direct removal of malicious emails. Take advantage of fully-automated, post-delivery incident response and threat-hunting capabilities. |
Impersonation Protection / Incident Response | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26030 Point Of Contact: Douglas Gimenes Contact Email: douglas@yeslms.com Service Description: YesLMS is an accessible, cloud-based learning management system designed for vocational rehabilitation and workforce programs. It combines a powerful LMS platform with a curated course library to help organizations deliver training, track outcomes, and support learner success—while meeting accessibility and compliance standards. |
YesLMS | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23101 Point Of Contact: Isaac Gomez Contact Email: isaac@podiumeducation.com Service Description: The Global Tech Experience provides students with in-demand, future-proof skills that ensure they are career-ready, wherever they are. |
The Global Tech Experience | SaaS | Moderate | Progressing |
|
SSID#: SS24167 Point Of Contact: Marco Lopez Contact Email: mlopez@twilio.com Service Description: Cloud communications platform as a service including services such as email, SMS, RCS, Voice, Chat, and serverless functions. API Ecosystem leveraged by any backend application. Cloud Contact Center with powerful AI functionality to increase utilization of data silos to aggregate customer engagement and provide a 360 degree view of customers. |
Twilio Core Platform | SaaS | Progressing | |
|
SSID#: SS24172 Point Of Contact: Eva Coop Contact Email: eva.coop@blackbaud.com Service Description: Blackbaud is a provider of software designed for the social good community of nonprofit organizations and commercial businesses supporting nonprofit fundraising. Blackbaud enables these customers to automate aspects of their operations, manage relationships, and fundraise to support their missions. The Blackbaud portfolio of software applications offers fundraising and relationship management to traditional nonprofits, K-12 schools, universities and colleges, healthcare organizations, religious organizations, and employee fundraising in the commercial business sector. Products include: Altru, Education Management (Billing Mgmt, Enrollment Mgmt System, School Website System, Learning Mgmt System, Student Info System, Tuition Mgmt, Financial Aid Mgmt), BLKB CRM, Blackbaud Internet Solutions (BBIS), Blackbaud Integrated Payments (Merchant Services, Payments API, Checkout, and Blackbaud Payment Service), eTapestry, Raiser's Edge NXT, Financial Edge NXT, and YC CSRconnect |
Blackbaud Inc Suite of Products | SaaS | Progressing | |
|
SSID#: SS24166 Point Of Contact: Kuljit Dharni Contact Email: kdharni@hawkeslearning.com Service Description: The Hawkes Learning Platfrom is a proritory elearning platfrom that delivers courseware (e.g., subjects such as stastics, precalc, biology, sociology) and associated assessment questions to higher education instutions within the USA. A full list of our products currently in the market can be viewed here: https://www.hawkeslearning.com/Products.htm The Platform is a SaaS application that is multi-tenant and hosted on an IaaS environment using private (non-shared) systems. Additionally, we have a geographically seperate DR facility with a different IaaS vendor for service recovery if needed. Currently we perform annual tests of the failover. The technology stack of the platfrom is primarly composed of Microsoft technologies with JavaScript (TypeScript), C#, and T-SQL being primary. The application is hosted on a VMware cluster running Windows IIS servers for managing client requests with Redis leveraged as a caching layer, and redundant MS-SQL serrvers providing the database layer. External traffic is routed through a redundant pair of firewalls to the IIS servers and ports 80 / 443. Access to the internal network is via VPN and defined roles. For the Hawkes Learning Platform, the general application hierarchy is: Institution (i.e., higher ed school) --> Course --> 1 to n sections For security, the platfrom is split into a "teacher" and "student" applications. Thus, only those with instructor previlages (login account & assigned role) can log onto the teacher application. Students can only log onto the student application. Administrative roles are limited to the institution + course, this limits their actions to that one course and (if used) the dependant sections. Only authorized Hawkes admin accounts have access to the multiple institutions or, if granted, have the ability to proxy users. For most instutions the login for students occurs through the Learning Managemnt System (LMS) at the instution. This is the most common method of students accessing our platfrom. This allows the instution to both provide a more convenient point of access to the students and to control their autherntication (i.e., with a MFA protected SSO service). Hawkes does not require any PII information and limits identity information to: First Name, Last Name, email address, and password (assuming SSO is not leverage via the LMS). Since we do store student answers and grades we do comply with FERPA. All data are encrypted at rest and in transit. Additionally, we have deidentification processes to remove any identification information (e.g., instution name) from any data used in the non-production environment. We also have strict controls on who is able to access which environment (Development, Stage, Performance, Demo, Production). |
Hawkes Learning Platfrom | IaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS26028 Service Description: Fire Aside, Inc. was established with a crucial mission: empowering residents to mitigate wildfire risks in their homes and communities. Our innovative software serves as a vital link between fire agencies and the public, enabling comprehensive data collection and cataloging at the parcel level. |
The Fire Aside Platform | SaaS | Moderate | Progressing |
|
SSID#: SS24138 Point Of Contact: Jagmit Singh Contact Email: jagmit@gingercube.com Service Description: Patient billing charge capture at point of care. Providers can capture their patient and billing date using mobile applications for iOS and Android and web application running on any web browser. |
maxRVU | SaaS | Progressing | |
|
SSID#: SS24016 Point Of Contact: Vijay Jayaraman Contact Email: vjayaraman@symplr.com Service Description: Healthcare contract lifecycle management software. Manage active and historical contracts, terms, approvals, and expirations for physicians and BAAs, vendors, materials, lease agreements, and more. |
symplr Contracts (formerly Meditract) | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24097 Point Of Contact: Eric Chailler Contact Email: echailler@liaisonedu.com Service Description: Engineered specifically for higher education admissions and enrollment management teams, Liaison’s Outcomes CRM is a student enrollment software that’s easy to manage and customize, freeing your resources to build a best-fit class and ensure positive student outcomes. |
Liaison Outcomes | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24089 Point Of Contact: Jason Fill Contact Email: jason@smarterservices.com Service Description: SmarterMeasure is a web-based assessment that measures non-cognitive attributes, technical skills, and readiness for online and self-regulated learning. Students receive a detailed report of their results with positive reinforcement and helpful resources. |
SmarterMeasure | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23084 Point Of Contact: Eric Chailler Contact Email: echailler@liaisonedu.com Service Description: Liaison’s Othot cloud-based predictive analytics platform uses artificial intelligence to deliver insights that help you make informed decisions across the student lifecycle. Through simple interactions, our software identifies who is most likely to enroll and to persist, and where to focus your resources for the greatest positive outcome. You can do more in less time and with fewer resources. Our Othot analytics software delivers made-to-order predictive and prescriptive models with: - Immediate predictions - Explainable AI - Continuous intelligence |
Othot | SaaS | Moderate | Progressing |
|
SSID#: SS24106 Point Of Contact: andy.perkins@jadu.net Contact Email: Andy Perkins Service Description: The Jadu Digital Platform is an enterprise-grade platform which includes website content management, intelligent online forms and customer relationship & case management capabilities. This brings together the best Jadu low-code technology to deliver an easy-to-use, accessible and mobile responsive experience for your online service users. Jadu Digital Platform provides you with simple-to-use, low-code, accessible administration tools, a robust approach to extensibility and a focus on integration. Easily create transactional services and manage digital customer journeys through data capture via a browser, touch screen or smartphone interfaces. |
Jadu Digital Platform | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SR26012 3PAO: Linford & Co. Point Of Contact: Henry Choo Contact Email: hchoo@authentic8.com Service Description: Silo is a remote browser that embeds security, identity and data policies directly into the browser. Available from anywhere, policies follow users regardless of environment. By shifting exposure away from the user's network and devices, Silo reduces risk and improves internal processes. With a configurable, centrally managed browser, users unlock the power of SaaS. Authentic8 is redefining how enterprises conduct business on the web with the Silo web isolation platform. Silo insulates and isolates all web data and code execution from user endpoints, providing powerful, proactive security while giving users full, interactive access to the web. Silo also gives IT complete control over how the web is used. Commercial enterprises and public sector organizations use Silo solutions to provide secure web access to control web data, apps, and workflows and to conduct sensitive online research. |
Silo | Moderate | Pending | |
|
Impact Level: Moderate SSID#: SS24065 Point Of Contact: JT Pickering Contact Email: joseph.pickering@wolterskluwer.com Service Description: Courseware is a web-based teaching and learning platform which comes with extensive healthcare education content including LMS features. Instructors can use Courseware for reference, to deliver course assignments and assign quizzes, manage grades, transform lecture presentations to include 3D models and animations, and expand and enhance anatomy lab dissections. |
Courseware for Medicine | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24091 Point Of Contact: Nicole Anderson Contact Email: Nicole.Anderson@encoura.org Service Description: Encoura Student is a cloud-based Student Information System (SIS) that enables institutions to manage the entire academic lifecycle of a student from Acceptance to Graduation, including financial aid, student accounts, career services, and a robust analytics repository. |
Encoura Student Success | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24119 Point Of Contact: Nicole Anderson Contact Email: Nicole.Anderson@encoura.org Service Description: Data-empowered innovation that transforms the student experience. Build and foster an unmatched student engagement experience. Meaningfully involve students and strengthen your data-driven insights with an accessible |
Encoura Engage and Federation Provider | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24153 Point Of Contact: Clint Dewitt Contact Email: clint@edealersvcs.com Service Description: Our ELT Single Gateway Hub solution offers a secure single interface for motor vehicle agencies and lienholders to transmit ELT transactions either through batch files or real-time transactions. With our program and services, we partner with jurisdiction agencies in the development of a unique ELT program that fits the needs of their jurisdiction while offering them guidance and our ELT expertise for best practices. We not only assist with the implementation of the program including enrollment and education of service providers and lienholders, but we also maintain the program after implementation by working directly with all parties involved including jurisdiction personnel, service providers, lienholders, consumers and dealerships. |
Electronic Lien & Title (ELT) | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26062 Point Of Contact: Jim Lindstrom Contact Email: jim.lindstrom@augintel.us Service Description: Augintel helps social services agencies make better use of their case documentation, through chat, search, and analytics. |
Augintel | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS26057 Point Of Contact: Erik Person Contact Email: erik@brightharbor.com Service Description: Disaster survivor platform |
Bright Harbor | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS23104 Point Of Contact: Eric Pinault Contact Email: erin.pinault@peoplegrove.com Service Description: PeopleGrove empowers colleges and universities to deliver meaningful engagement and hands-on learning that drive measureable outcomes for students. Our platform turns every interaction into measurable outcomes, strengthening communities, advancing careers and scaling institutional success. |
PeopleGrove Platforfm | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24095 Point Of Contact: Eric Chailler Contact Email: echailler@liaisonedu.com Service Description: SlideRoom is a comprehensive system designed to accept and review application forms, references, portfolios, and payments in one secure location. |
SlideRoom | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24075 Point Of Contact: Quaid Atkinson Contact Email: quaid@gmetrix.com Service Description: GMetrix is a custom LMS that delivers exam prep products such as courseware and practice exams, primarily focused on entry level CTE certifications. |
GMetrix | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24022 Point Of Contact: Robert McGuinness Contact Email: rob@cebroker.com Service Description: CE Broker is the official CE tracking system for more millions of licensees nationwide. We bring together regulating entities, licensed professionals, educational providers, and employers to ease the friction of compliance. |
CE Broker | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23122 Point Of Contact: Jamal Balametov Contact Email: jbalametov@masterword.com Service Description: Allows customers to place and manage language service requests. Allows language professionals to manage their assignments |
Customer Service Portal/ Language Professionals Portal | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: CR26006 3PAO: N/A Point Of Contact: Oleksandra Wierzbicka Contact Email: sasha@v7labs.com Service Description: V7 Go is V7 Labs’ AI‑powered work‑automation and agent platform designed to automate complex, repetitive tasks across documents, images, text, and video using foundation models at scale. |
V7 Go | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SS24073 Point Of Contact: Richard Sadler Contact Email: richard.sadler@gravyty.com Service Description: Ivy.ai is a technology company specializing in AI-driven chatbots and customer support solutions designed for automated support, answering common questions, and performing various tasks on digital platforms. The Ivy Quantum is their generative AI chatbot that offers seamless integration with third-party vendors, ensuring personalized interactions by accessing user-specific records. A majority, 95% of Ivy.ai's customers, are universities, with other users including state and local governments, healthcare institutions, and private corporations. |
Ivy AI | SaaS | Moderate | Progressing |
|
SSID#: SS26016 Point Of Contact: Danielle Dufner Contact Email: danielle@smarty.com Service Description: Smarty provides a suite of address and location-data services designed to help businesses clean, validate, enrich, and geocode address information through easy-to-use APIs and tools: Address Verification – Validate and standardize mailing addresses in the U.S. and internationally to improve data quality and deliverability. Address Autocomplete – Suggest accurate address completions as users type to speed up form fill-outs and reduce errors. Geocoding – Convert addresses into precise latitude/longitude coordinates (and vice versa) with rooftop-level accuracy. Address Enrichment – Add detailed property and geographic attributes (e.g., census data, property characteristics) to verified addresses. Data Products – Access comprehensive datasets like the U.S. Master Address List and parcel boundary data for analytics and reporting. These products are APIs to improve data quality, enhance user experiences, and support analytics across industries like retail, logistics, finance, and more. |
US Street API, UA Autocomplete Pro API, US Enrichment API, US Extract API, US Reverse Geo API, US ZIIP Code API, Download API, Forward Proxy API | SaaS | Progressing | |
|
SSID#: SS24099 Point Of Contact: Gillian Thiebe Contact Email: gillian@jb.international Service Description: Trilby Suite is a case management immigration solution for higher education, hospital groups, and any other institution that would host international scholars, employees, and students. |
Trilby Suite | SaaS | Progressing | |
|
SSID#: SS24135 Point Of Contact: David Lavigne Contact Email: david.lavigne@kortext.com Service Description: For Higher Education Institutions who want to elevate their students’ digital experience to enhance learner engagement and enable better outcomes. Kortext Fusion is an AI powered digital education platform pivotal to universities’ digital transformation strategy. It extends the capabilities of virtual learning environment and modernizes academic teaching, and the way students discover and learn from library content. Unlike other library platforms, Kortext Fusion and applications are built from the ground up with next generation AI powered assistants that unlock the power of institutional data. It delivers better engagement and learning outcomes with library content. It provides is a unique combination of access to Library eTextbooks and adopted learning content, study tools and teaching workflow support, while leveraging reporting and student engagement insights to support wellbeing and retention and impact analysis. Kortext Fusion is adaptable and interoperable with workflows, technology standards and integrates with wider technology landscapes. |
Kortext Fusion | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24109 Point Of Contact: Blake Gladfelter Contact Email: blake.gladfelter@globalpay.com Service Description: TouchNet supports colleges and universities as they balance competing needs to effectively manage their business and keep students safe on campus. At a time when hybrid learning experiences — including both virtual and in-person — are emerging, TouchNet delivers mobile-first strategies, reporting and analytics, and insight into student engagement to help identify trends, measure success, and inform decisions. Our U.Commerce platform solution streamlines administrative access to complete student profiles and provides all-in-one student access to payments, credentials, and services that's both flexible and secure. Additionally, U.Commerce offers refund options that meet students' evolving needs and spotlights smart tools geared toward managing and measuring student success outside the classroom. It's easy to use, simple to license, highly secure, and integrates seamlessly so you can focus on your true mission, educating students. TouchNet also support colleges and universities by providing robust, flexible reporting and visualization tools to analyze TouchNet Marketplace data and trends. This includes the ability to schedule reports for email delivery using defined filters based on target audience. These Marketplace dashboards enable clients to assist with reconciliation of items like their G/L information, payment gateway batches, and overall sales for campus or store depending on their role. |
Platform Reporting, U. Commerce | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26079 Point Of Contact: Shan Grant Contact Email: shan.grant@sap.com Service Description: SAP Concur Travel and Expense (CTE) is a cloud-based platform that helps you manage expense, travel, and invoice processes in one place. Our solutions automate how employees submit expenses, book travel, and handle invoices, while giving companies better visibility and control over their spending. It includes a web application portal for communicating with system users and providing access to all services. The web application enables users to book travel, change travel reservations, and authorize travel. From vouchering services to documenting trip approvals and expense reimbursements. |
Concur Travel and Expense | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS23100 Point Of Contact: Jeff Shaw Contact Email: jeff.shaw@cybercheck.ai Service Description: Cybercheck Case provides Law Enforcement (LE) with actionable intelligence to help solve some of the most complicated criminal cases. Using AI and machine learning algorithms, Cybercheck provides agencies with qualified investigative leads that can be used for the buildup of the body of evidence to further investigations along the judicial process and provide added probable cause. Leveraging open-source data on the open, deep, & dark web, Cybercheck focuses on placement and interactions of cyber profiles or CyberDNA, associated with criminal incidents and crime scenes. |
Cybercheck Case | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS25016 Point Of Contact: Chris Miller Contact Email: chrism@messagepoint.com Service Description: Messagepoint is a SaaS-based Customer Communications Management platform, for managing the content lifecycle of enterprise letter and digital communications, which works with Production Manager, on-premise of SaaS-based modes, to process client PII to generate individual, personalized communications. |
Messagepoint & Production Manager | SaaS | Moderate | Progressing |
|
SSID#: SS25017 Point Of Contact: Greg Kessler Contact Email: greg@myvideospot.com Service Description: MyVideoSpot is a web based content management and sharing platform. |
MyVideoSpot | SaaS | Progressing | |
|
SSID#: SS26004 Point Of Contact: Dennis Sheldon Contact Email: dennis@merydyan.com Service Description: Compliance Management software for businesses of any size. Pryme consists of modules such as People, Assets, Audit, Licensing, Incident Reporting and more. |
Pryme | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS26055 Point Of Contact: Greg Jones Contact Email: greg.jones@feisystems.com Service Description: FEI’s Web Infrastructure for Treatment Services (WITS) platform is a modular, web-based application designed to meet the growing need to capture client services data, including outcomes and costs, in one centralized place. WITS serves more than 35 states and counties across the United States, with data reporting in from close to 10,000 provider agencies. WITS modules include an ONC-Certified Electronic Health Record for behavioral health that can be customized and configured to address separate or concurrent mental health and substance use disorders (SUDs) treatment. Separate Data Warehouse components allow public agencies and their publicly funded service providers, including community-based organizations, to report numerous data sets that are required to meet various government mandates. WITS includes modules for the following: • Federal grant management • Integration with specialty courts • Mobile crisis programs • Prevention, treatment, and recovery • Re-entry planning and case management • Timeliness of care tracking • Waitlist and bed management WITS facilitates cooperation and collaboration among providers, enabling them to share client services information online, and allows county or state authorities to access data and manage relationships with providers and community organizations. WITS includes third-party billing capabilities, client self-pay, and an integrated Contract/Funding Management module that incorporates multiple forms of billing management between a government entity and its community of providers. |
Web Infrastructure for Treatment Services (WITS) | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS26013 Service Description: PMWEB is a web-based construction project management application |
PMWEB | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23038 Point Of Contact: Rachel Cerniglia Contact Email: Rachel.Cerniglia@tylerfederal.com Service Description: State Regulatory Platform suite comprises separate, configurable applications for Licensing, Enforcement, and Inspections that can be implemented individually or as part of a complete, end-to-end installation. https://www.tylertech.com/solutions/public-administration/regulatory/state-regulatory-platform-suite |
State Regulatory Platform Suite | SaaS | Moderate | Progressing |
|
SSID#: SS26033 Service Description: Cloud-native, full-stack platform built to scale innovation and accelerate transformation in healthcare by deriving rapid insights from data distributed across disparate data silos and unique proprietary legacy systems across the healthcare ecosystem. |
Innovaccer | Progressing | ||
|
Impact Level: Moderate SSID#: SS24162 Point Of Contact: Laura Schaefer Contact Email: laura.schaefer@protocallservices.com Service Description: Protocall's Welltrack Ecosystem is comprised of a 24/7 crisis hotline service, a self-help app, and a national therapy referral platform. |
Welltrack Ecosystem | SaaS | Moderate | Progressing |
|
Impact Level: High SSID#: SR26033 3PAO: Coalfire Point Of Contact: Richard Johnson Contact Email: richard.johnson@knoxsystems.com Service Description: Knox Systems provides a multi-tenant cloud platform for delivering commercial software to federal government customers. Customer applications deploy on Knox's managed infrastructure across AWS, Azure, and Google Cloud Platform using Kubernetes containers, serverless functions, or virtual machines. Knox provides 24/7 Security Operations Center and Network Operations Center management, continuous security monitoring, vulnerability scanning, patch management, and incident response for all customer workloads. |
Knox Systems FedRAMP Managed Platform (High) | SaaS | High | Pending |
|
Impact Level: Moderate SSID#: SS24101 Point Of Contact: Mark Russell Contact Email: mark.russell@talklife.com Service Description: TalkCampus is a peer support community accessible via web and mobile app. It provides instant, anonymous support 24/7 for students around the world. TalkCampus enables students to interact within a professionally moderated community via posting, commenting, interacting and messaging. It supports both 1:1 and group messaging as well as the ability for user created public groups. TalkCampus also allows students to track their mood, journal, save content and engage with regularly updated and relevant well-being content. TalkCampus provides real time clinical escalation and incident reporting for at-risk students and can create bespoke communication pathways with each institution. It also embeds bespoke student services within the app. |
TalkCampus | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SR26019 3PAO: Schellman Point Of Contact: Eric Weiss Contact Email: ericweis@cisco.com Service Description: Cisco Spaces for Government (formerly DNA Spaces) uses MAC address-based location data to gain insights into the behavior of end user devices and network connected objects in any place with wireless connectivity, allowing customers to make informed business decisions, optimize operations, and improve experiences. Spaces brings together multiple location-based service capabilities in a unified platform and user interface (the service). Cisco Spaces for Government enterprises operating in the physical world have limited to no visibility into the behavior of people and connected assets within their buildings. Cisco Spaces for Government solves this physical blind spot problem by sensing location intelligence from all underlying Cisco wireless network and translating it into business ready insights. |
Spaces for Government | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SS26074 Point Of Contact: Ernie Hudson Contact Email: ernie@countertools.org Service Description: SaaS product used for point-of-sale data collection and data visualizations. |
POST (Point of Sale Toolkit) | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26082 Point Of Contact: Nate Shellenbarger Contact Email: nate.s@reframesolutions.com Service Description: Assist Secretaries of State offices, licensing agencies, and state-level divisions in modernizing filings, registrations, renewals, and service delivery. |
ReFrame Business Services | Moderate | Progressing | |
|
SSID#: SS26035 Point Of Contact: Musa Anwar Contact Email: musa.anwar@peregrine.io Service Description: Peregrine is a real-time decision and operations management platform for law enforcement and public safety organizations. We integrate and analyze public safety data to help agencies operate more effectively. |
Peregrine | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS23086 Point Of Contact: Scott Jones Contact Email: sjones@bluehilldata.com Service Description: Mainframe hosting, remote systems support, applications support. |
Mainframe as a Service | Paas, IaaS | Moderate | Not Progressing |
|
Impact Level: Moderate SSID#: SS26089 Point Of Contact: Jeffrey Janover Contact Email: jjanover@classlink.com Service Description: ClassLink LaunchPad provides secure single sign-on and automated roster synchronization, enabling users to access authorized educational applications while securely provisioning student, staff, class, and enrollment data. |
LaunchPad | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23106 Point Of Contact: David Hansen Contact Email: david.hansen@netdocuments.com Service Description: A Cloud hosted Document Management Service that entities subscribe to so the entity users can use the Service to securely store and manage their files. |
NetDocuments | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS25021 Point Of Contact: Matt Parks Contact Email: Info@mysoftwaresolutions.com Service Description: Cloud-based ERP Software for Public Accounting, Human Resources, Payroll, and Utility Billing |
Visual Intelligence Portfolio (VIP) Software | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SR26034 3PAO: Coalfire Point Of Contact: Richard Johnson Contact Email: richard.johnson@knoxsystems.com Service Description: Knox Systems provides a multi-tenant cloud platform for delivering commercial software to federal government customers. Customer applications deploy on Knox's managed infrastructure across AWS, Azure, and Google Cloud Platform using Kubernetes containers, serverless functions, or virtual machines. Knox provides 24/7 Security Operations Center and Network Operations Center management, continuous security monitoring, vulnerability scanning, patch management, and incident response for all customer workloads. |
Knox Systems Initial PMO Security Review (Moderate) | Paas, SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SS24174 Point Of Contact: Roger Hiers Contact Email: rhiers@exammaster.com Service Description: Online Health Sciences focused study resource and exam delivery platform |
Exam Master Online / Academic Manager | SaaS | Moderate | Progressing |
|
SSID#: SS24024 Point Of Contact: Daniel Camputaro Contact Email: camputaro@scarletcs.com Service Description: The Self-reported Testing and Academic Record System (STARS) aka. SRAR/SSAR allows students to self-report their high school and college coursework, grades, and exam information to colleges and universities. |
STARS Platform (SRAR/SSAR, STARSApply) | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS26067 Point Of Contact: Alexander Burks Contact Email: info@myfcr.org Service Description: Family Case Registry (FCR) is a case management platform for government-adjacent agencies in Indiana. |
Family Case Registry | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS24020 Point Of Contact: Dave Parks Contact Email: dparks@enchoice.com Service Description: CS4Gov is a set of cloud-hosted solutions that enable citizens and government entities to interact seamlessly with automated capabilities. |
Citizen Services for Government (CS4Gov) | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26048 Point Of Contact: Benoit Kroely Contact Email: benoit.kroely@sixense-group.com Service Description: Asset management system to help track, inspect and maintain civil infrastructures |
Beyond Asset | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: CR26014 Point Of Contact: Margaret Kelley Contact Email: margaret@amida.com Service Description: Medicaid data lakehouse built on Snowflake. Ingests, validates, and transforms Transformed Medicaid Statistical Information System (T-MSIS) and Medicaid data into analytics ready datasets, with Data Vault 2.0 modeling, data quality frameworks, and federal compliance reporting built in. Provides the data foundation that the rest of the Medicaid portfolio consumes. |
Tessarix | Moderate | Pending | |
|
Impact Level: Moderate SSID#: SS26023 Point Of Contact: Ryan Davis Contact Email: ryan.davis@roche.com Service Description: Roche navify digital healthcare solutions securely integrate data across care settings, connecting the healthcare community and accelerating access to innovation. A cloud‑based operational analytics solution that gives laboratories operational and financial insights, enabling efficiency improvements, productivity tracking, and test‑turnaround optimization. It belongs to the “navify operational excellence solutions” portfolio (along with navify Monitoring). |
navify® Analytics | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24041 Point Of Contact: Que Sengmany Contact Email: que.sengmany@tophat.com Service Description: Aktiv Learning’s next-generation platform increases student engagement and improves student outcomes in STEM courses. Students will use this platform to access in-class engagement, online homework, and e-texts for all general chemistry courses. |
Aktiv | SaaS | Moderate | Progressing |
|
SSID#: SS24130 Point Of Contact: Naray Viswanathan Contact Email: naray@hirezon.com Service Description: Applicant Tracking System, HR Forms Tracking and Workflow, Onboarding, Performance Evaluation, MyReferred: Referral Management. AI notation: Our product offers optional, custom AI-enabled features that are available only when explicitly requested and enabled by the customer. These features are not enabled by default. When enabled, they may process or otherwise interact with customer data to provide the requested functionality. |
Hirezon / Interview Exchange | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS23076 Point Of Contact: Bradley Wagner Contact Email: ramp-programs@hannonhill.com Service Description: A cloud-based Content Management System designed for the authoring and publishing of web content. |
Cascade CMS Cloud | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24017 Point Of Contact: Edward Hay Contact Email: edward.hay@intapp.com Service Description: Intapp DealCloud is a data-powered platform that delivers vertical-specific solutions that enable professional and financial services firms to harness the intellectual capital of their people and processes within one unified system. By centralizing firm-wide intelligence, DealCloud empowers professionals with the ability to easily access and digest firm-wide insights related to relationship intelligence, business development initiatives, pipeline progress, and other firm-related activity to promote quick and effective decision making. o Customer Relationship Management (CRM) provides sector and practice 360-degree intelligence to help partners develop key-client plans, enables business development teams to identify new opportunities, and empowers marketers to deliver events and campaigns with impact. o Deal & Relationship Management provides zero-entry capture of e-mail signature data to create a single global contact database, generate relationship-strength metrics, and encourage relationship-building behaviours o DataCortex helps dealmakers manage proprietary and third-party data in one unified platform and empowers them to transform that data into institutional knowledge. The solution is fully integrated into the DealCloud platform, so firms can easily run complex reports, analyse industry trends, and evaluate potential synergies in the same hub where deals are originated, and relationships are managed. o Experience management helps capture and leverage a firm’s collective experience, using an AI-based approach that sources current, comprehensive, and granular data while minimizing manual entry bringing a firm’s experience to the forefront helping to enhance competitive win rates, work allocation, knowledge management, and talent development. |
Intapp DealCloud | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SR26041 3PAO: A-LIGN Point Of Contact: Seth Cutler Contact Email: seth.cutler@innovaccer.com Service Description: Cloud-native, full-stack platform built to scale innovation and accelerate transformation in healthcare by deriving rapid insights from data distributed across disparate data silos and unique proprietary legacy systems across the healthcare ecosystem. |
Innovaccer Health Cloud (Data Activation Platform & Value Based Care) & Innovaccer Gravity | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SS26072 Point Of Contact: Tonya Stoll Contact Email: compliance@magicschool.ai Service Description: MagicSchool is an AI platform for K-12 schools that gives educators access to tools for common classroom tasks like lesson planning, writing feedback, differentiation, and assessment creation. Teachers can also set up student-facing AI tools through a feature called MagicStudent, where they control what students have access to. For districts, the platform includes reporting dashboards, SSO integration, and customization options. It works by connecting to third-party AI models through an education-specific layer, and does not train on user data. |
MagicSchool Enterprise | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24005 Point Of Contact: Eric Chailler Contact Email: echailler@liaisonedu.com Service Description: More than 400 campuses worldwide use TargetX to recruit a larger class of best-fit students, improve student success and increase completion rates. You can too. Our suite of solutions builds on the Salesforce platform to deliver an end-to-end system for: - Marketing Automation - Application & Decision Management - Improved Recruitment and Retention Outcomes |
TargetX | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26006 Service Description: The Transition Planning Management System (TPM)™ is a secure, unified platform designed to facilitate compliant, personalized transition planning for learners. TPM brings together the Transition Readiness Score (an assessment that covers key areas of transition planning), an automated Transition Plan Creator, and Career Discovery curriculum to guide learners toward a meaningful transition outcomes. |
The Transition Planning Management System (TPM)™ | SaaS | Moderate | Progressing |
|
SSID#: SS24114 Point Of Contact: Shelley Oishi Contact Email: hello@truewayasl.com Service Description: TRUE+WAY ASL offers an advanced American Sign Language (ASL) curriculum for K-12 and university educators, featuring engaging lessons, practice exercises, and community support. Our versatile platform allows you to either host the curriculum on TRUE+WAY ASL or integrate it seamlessly with your current school systems. Enhance your teaching toolkit and provide your students with an unparalleled ASL learning journey. |
TRUE+WAY ASL | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS23083 Point Of Contact: Eric Chailler Contact Email: echailler@liaisonedu.com Service Description: Liaison’s WebAdMIT is an admissions management solution that helps users work more strategically to recruit, evaluate, admit, and enroll best-fit students for institution’s programs. With WebAdMIT, users can analyze and report on applicant data, communicate with applicants, and collaborate with evaluators to build classes of best-fit students. WebAdMIT streamlines administrative tasks for everyone involved in the admissions process. With WebAdMIT, users can: • Establish work groups and manage user rights and privileges • Assign admissions workflow components and track progress • Schedule, manage and score interviews • Manage processes by program and across institutions WebAdMIT facilitates increased collaboration and improved operational efficiencies, allowing users to focus on strategic priorities. |
WebAdMIT | SaaS | Moderate | Progressing |
|
SSID#: SS24111 Point Of Contact: Chris Buck Contact Email: chris@phiredup.com Service Description: CampusDirector serves a recruitment registration and management software for college fraternity and sorority communities. |
CampusDirector | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24165 Point Of Contact: Jeremy Knipper Contact Email: jeremyknipper@gmail.com Service Description: A health and wellbeing employer platform and services. |
Navigate Wellbeing Solutions Ignite Platform | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: CR26015 3PAO: N/A Point Of Contact: Andrew Massing Contact Email: amassing@cleargov.com Sponsor Name: N/A Service Description: Disclosure Studio, Financial Engagement, and Budgeting Suite are multi-tenant SaaS applications used by state and local government finance organizations across the budget and financial reporting cycle. Disclosure Studio compiles, reviews, and publishes statutory and public financial reports, including the Annual Comprehensive Financial Report (ACFR), popular annual financial reports, budget books, and interim monthly and quarterly reports. Budgeting Suite prepares, consolidates, and approves annual operating, personnel, and capital budgets, from departmental request through approval workflow, including position-level personnel budgeting and capital project modeling. Financial Engagement publishes budget and financial information to residents and collects structured public feedback through surveys and polls delivered by web and SMS. Financial data is imported from the customer's accounting or ERP system or supplied as file exports. All customer data is held in United States regions with logical tenant isolation, federated single sign-on, encryption in transit and at rest, and tenant-scoped audit logging. Optional AI-assisted features can be disabled at the tenant level. |
Disclosure Studio | SaaS | Moderate | Pending |
|
SSID#: SS25010 Point Of Contact: Devin Lukomski Contact Email: dlukomski@otmcyber.com Service Description: Vanguard provides proactive cybersecurity visibility, detection, and response, allowing clients to focus on their mission instead of worrying about cyberattacks. Vanguard is a Security Operations Center as a Service (SOCaaS) offering with included incident response support. |
OTM Cyber Vanguard | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SR26038 3PAO: Ignyte Platform Inc. Point Of Contact: Jonah Calvo Contact Email: jonah@vulcan.ai Service Description: Justinian is a multi-tenant, cloud-hosted SaaS application from Vulcan Technologies that gives state and local government agencies an AI assistant for regulatory and legal analysis, document drafting and collaboration, and agentic research over a curated corpus of statutes, legislation, administrative code, and court and agency records. The service runs entirely on Amazon Web Services. |
Justinian | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SS26024 Point Of Contact: Ryan Davis Contact Email: ryan.davis@roche.com Service Description: Roche navify digital healthcare solutions securely integrate data across care settings, connecting the healthcare community and accelerating access to innovation. A clinical decision‑support ecosystem that hosts Roche and partner medical algorithms, integrating them into lab and hospital clinical workflows. Its purpose is to combine clinical source data and deliver algorithmic outputs to clinicians. |
navify® Algorithm Suite | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SR25095 3PAO: NCC Group Point Of Contact: Daniel Jennings Contact Email: djennings@advancedutility.com Sponsor Name: GovRAMP Approvals Committee Service Description: The Infinity Cloud Platform is a comprehensive, cloud-based Customer Information System (CIS) designed for utilities, featuring an intuitive, customizable interface, automated workflows, and seamless integration with third-party applications to enhance productivity, streamline customer service, and support hybrid working environments. It delivers robust functionality—including embedded MDM and GIS, automated customer communications, and flexible process management—while minimizing infrastructure costs and future-proofing your system investment. |
Infinity Cloud Platform | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SS23103 Point Of Contact: David Weinstein Contact Email: david.weinstein@sharestream.com Service Description: The ShareStream Video Platform is tailored to the unique needs of education, where streamlined content ingestion, centralized media management, and collaborative video-based learning are paramount. Among other benefits, ShareStream enables academic institutions to embrace innovative teaching models including flipped classrooms and active learning, and enhance student engagement and learning outcomes. |
ShareStream Video Platform | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS23109 Point Of Contact: Vijay Jayaraman Contact Email: vjayaraman@symplr.com Service Description: symplr Payer provides a single source of truth for provider data that is consistently reconciled and validated against primary sources. It improves data quality, access, and transparency. Further, it eliminates duplicate requests for information, reducing provider frustration. Using symplr Payer as the enterprise-wide hub for provider data, payers can feed timely, accurate information to other downstream systems. |
symplr Payer, Provider | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26070 Point Of Contact: Christine Bohannon Contact Email: christine.bohannon@ks.gov Service Description: America's JobLink is a state workforce development system that connects job seekers with employers and employment resources. The platform provides job search tools, resume assistance, and career planning services while helping employers find qualified candidates. CertLink supports Work Opportunity Tax Credit (WOTC), a federal tax credit available to employers who hire individuals from eligible target groups with significant barriers to employment. CertLink allows employers and employer consultants to apply for and manage WOTC applications and certifications, and allows state workforce agencies to administer the WOTC program. |
America's JobLink | Moderate | Progressing | |
|
SSID#: SS24115 Point Of Contact: Nathan Becker Contact Email: nathan_becker@steris.com Service Description: Sterile Processing Management software for hospitals |
SPM | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SR23052 3PAO: Coalfire Point Of Contact: Jon Brockway Contact Email: jon.brockway@walkme.com Sponsor Name: City of Chandler, Arizona Service Description: WalkMe maximizes and accelerates the impact of your digital transformation strategy by driving user adoption of your digital assets. Leverage WalkMe’s Digital Adoption Platform to constantly identify gaps and problem areas, and drive users to success, codelessly, and without changes to your underlying platforms.The WalkMe Digital Adoption Platform (DAP) system adapts software and websites to meet the needs of employees, customers & citizens. The WalkMe DAP system creates a consistent user experience, streamlining productivity and engagement while reducing costs. The WalkMe FedRAMP offering is specific to federal customers and is built on a dedicated government environment. |
Digital Adoption Platform | SaaS | Moderate | In Process |
|
Impact Level: Moderate SSID#: SS23034 Point Of Contact: Que Sengmany Contact Email: que.sengmany@tophat.com Service Description: Top Hat is an end-to-end teaching platform that empowers educators to increase student engagement and build comprehension in and out of the classroom. |
Top Hat | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24026 Point Of Contact: JT Pickering Contact Email: joseph.pickering@wolterskluwer.com Service Description: Wolters Kluwer’s CoursePoint system is a learning application that includes courseware such as digital textbooks (eBooks), interactive tutorials, simulations, videos, quizzes, etc., through a public web portal. Students are assigned a selection of courses and due dates by their instructors or learning institution, which are products that the user has a valid subscription or entitlement to. CoursePoint pulls in the applicable eBooks, tutorials, simulations, videos, etc. (called assets) from their data stores as well as other Wolters Kluwer systems such as Lippincott Advisor and vSim or third-party partners such as Vital Source and Laerdal. Once the student has completed the course, their grade is transmitted to the instructor and/or the learning management system (LMS) used by the institution, such as Canvas or Blackboard. |
CoursePoint | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS25012 Point Of Contact: Jonathan Roberts Contact Email: jroberts@watchsystems.com Service Description: OffenderWatch is the first full-spectrum software application in a suite of the most groundbreaking and comprehensive sex offender registry monitoring resources available today. With OffenderWatch, law enforcement agencies throughout the country and the world can access the tools they need to effectively register and monitor sex offenders, provide accurate status updates and alerts to the public, collaborate seamlessly across jurisdictional, and maintain compliance with all applicable local, state, and federal statutes––saving significant time, money, and resources in the process. |
OffenderWatch | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24154 Point Of Contact: Matt Allen Contact Email: matthew.allen@speridian.com Service Description: CaseXellence is a low-code cloud-based platform that enables public sector organizations to create business process management (BPM), and case management applications through configurable features, tools, and components, enabling accelerated delivery. |
CaseXellence | Paas, SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SR26001 3PAO: 360 Advanced Point Of Contact: Karen Koester Contact Email: karen.koester@illumiatech.com Service Description: Transact Campus Platform is an integrated, cloud-native, and mobile-first ecosystem that brings together Payments, Campus ID, Commerce, and third-party software with standards-based, scalable technologies and common data integrations. The Transact SaaS applications are hosted in the public cloud at Microsoft Azure. The infrastructure uses a mixture of Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS) offerings from the cloud providers, with a preference towards PaaS whenever feasible due to greater operational efficiencies. |
Transact Campus Platform | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SS24096 Point Of Contact: Eric Chailler Contact Email: echailler@liaisonedu.com Service Description: An online clinical training management tool to track, verify, and organize experiences. |
Time2Track | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26005 Point Of Contact: Chris Bissell Contact Email: chris.bissell@grantstreet.com Service Description: Tax collection and billing software with payment processing and financial lien auction services. |
GSG Application Suite (TaxSys, PaymentExpress) | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24087 Point Of Contact: Liz Roden Hall Contact Email: liz.rodenhall@sagepub.com Service Description: Courseware platform with LTI 1.3 integration capability serving US higher education instructors and students. |
Vantage | Paas | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SR26027 3PAO: Fortreum Point Of Contact: Tim Anderson Contact Email: tim.anderson@id.me Service Description: ID.me Identity Gateway (IDIG) is a Software-as-a-Service identity platform that provides secure identity proofing, authentication, and community affiliation verification for government and commercial relying parties. Public users establish a verified, portable digital credential that can be reused across participating agencies and services. IDIG supports NIST SP 800-63 Identity Assurance Level (IAL) 1 and 2 and Authenticator Assurance Level (AAL) 1 and 2, and integrates via SAML 2.0, OAuth 2.0, and OpenID Connect. ID.me is an accredited credential service provider assessed annually by the Kantara Initiative against NIST 800-63 IAL2/AAL2, and IDIG holds a FedRAMP Moderate authorization (Package ID FR1718334757). |
ID.me Identity Gateway (IDIG) | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SR23039 3PAO: A-Lign Point Of Contact: Matilda Asiedu Contact Email: matilda.asiedu@armedia.com Sponsor Name: GovRAMP Approvals Commitee Service Description: The Armedia Content Cloud (ACC) provides an operational, fully provisioned infrastructure that meets FedRAMP Moderate requirements. ACC is a digital transformation platform that allows public sector clients to meet agency requirements with enhanced reliability and security without major capital investment and reduced technical staff. ACC offers four applications to support digital transformation and hyper-automation – ArkCase for case management system, Hyland Alfresco for document, business process and records management system, Ephesoft Transact for Intelligent Document Processing and the Open Text Documentum enterprise content management (ECM) system. ACC provides a wide array of digital transformation solutions to include Business Process Management, Case Management, Complaint Management, Correspondence Management, Document Management, eFiling and eDocket Management, FOIA Management, Intelligent Document Capture, Public Records Request, Records Management, etc. |
Armedia Content Cloud | SaaS | Moderate | In Process |
|
Impact Level: Moderate SSID#: CR25003 Point Of Contact: Nicholas Ponce Contact Email: Nicolas@addigy.com Sponsor Name: N/A Service Description: Addigy is an Apple Device Management Platform. |
Addigy | SaaS | Moderate | Pending |
|
SSID#: SS24124 Point Of Contact: Jorge Conde-Berrocal Contact Email: jorge.conde-berrocal@v3cybersecurity.com Service Description: Cyber Risk Management Platform |
Minerva / Minerva EDU | SaaS | Progressing | |
|
Impact Level: High SSID#: SR26017 Point Of Contact: Christopher Denton Contact Email: christopher.denton@magnetforensics.com Service Description: Magnet One Review delivers secure digital forensics and investigative analysis capabilities within a FedRAMP High authorized cloud environment, enabling U.S. federal agencies to ingest, process, analyze, and manage digital evidence in compliance with federal security requirements. The offering combines Magnet One’s advanced evidence review and collaboration features with a rigorously controlled architecture, documented security controls, and continuous monitoring aligned to FedRAMP and StateRAMP standards, supporting mission operations while maintaining the confidentiality, integrity, and availability of sensitive federal data. |
Magnet One | SaaS | High | In Process |
|
Impact Level: Moderate SSID#: SS24056 Point Of Contact: JT Pickering Contact Email: joseph.pickering@wolterskluwer.com Service Description: Sentri7 Drug Diversion is the only drug diversion software funded by the NIH. Utilizing machine learning, Sentri7 enables quick detection of potential diversion from purchase to the patient with predictive analytics and actionable dashboards. Sentri7 integrates data from multiple IT systems including Automated Dispensing Cabinet (ADC), Electronic Health Records (EHR), and other data systems to provide a comprehensive assessment of diversion risk across the entire supply chain. |
Sentri7 Drug Diversion | SaaS | Moderate | Progressing |
|
Impact Level: Low SSID#: SR26020 3PAO: Securisea Point Of Contact: Gary Powell Contact Email: gary.powell@debtbook.com Sponsor Name: N/A Service Description: DebtBook provides local governments, nonprofits, and similar organizations with the tools they need for complete debt, lease, and subscription management and accounting standards compliance (like GASB-87 and GASB-96), all in a refreshingly simple yet comprehensive user interface. |
DebtBook | Low | In Process | |
|
Impact Level: High SSID#: SR26006 3PAO: Schellman Point Of Contact: Scott Steele Contact Email: scott.steele@consensus.com Service Description: ECFax® is a unified, secure, cloud-based managed service solution that modernizes manual or semi-automated faxing processes and eliminates the need for multiple faxing solutions. Built with a human-centered design approach, ECFax® simplifies fax services, improves the user experience, provides secure data transfer for PHI/PII, and reduces administrative costs. The solution gives agencies more control over their fax data transfer processes, eliminates the need to manage multiple vendors, and offers 24/7 state-of-the-art faxing capability and help desk support. ECFax® delivers faxes digitally across multiple endpoints, including multifunction devices, shared folders, distribution lists, and inboxes: yielding operational efficiencies and reducing the need for standalone hardware. The solution is: ● Scalable: Hosted on Amazon Web Services GovCloud, ECFax® scales on- demand to hundreds of millions of pages per month through auto-scaling and elastic load balancing. ● Transparent: Performance dashboards provide visibility into service usage and operational status, which allows for near real-time production metrics. ● Secure: ECFax and add on components are FedRAMP High certified and meet the most important security and quality assurance protocols for data protection—including FIPS 140-2. ECFax® Services was developed specifically for the cloud, government agencies benefit from rapid scaling, efficiency and speed. ECFax® is: ● Accessible via AWS GovCloud;● Section 508 Compliant ● Designed to meet the highest security standards required by government agencies In addition, the solution: ● Integrates with other applications via Restful API ● Supports IDP-initiated SSO for authentication ● Facilitates standardization across multiple locations |
ECFax | SaaS | High | Pending |
|
Impact Level: Moderate SSID#: SS26063 Service Description: Volunteer management system. |
CORES RMS | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS24155 Point Of Contact: Travis DeBary Contact Email: tdebary@symplr.com Service Description: Symplr's cloud-based provider quality software tools provide the comprehensive provider quality reporting and monitoring that organizations need for your quality improvement initiatives. From initial onboarding to CMS accreditation measurements to value-based payment reporting and outcomes, the symplr Quality Review suite of tools pulls the information organizations need into actionable dashboards so that they can focus their time and energy on the most critical provider issues. |
Quality Review | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SR26029 3PAO: Schellman & Company Point Of Contact: Todd Benge Contact Email: todd.benge@trackvia.com Service Description: Operational Intelligence and Execution for Mission-Critical Programs TrackVia is an AI-ready operational intelligence platform that helps state and local government agencies, tribal nations, and mission-driven organizations improve workforce readiness, strengthen compliance, and gain real-time visibility into critical operations. By connecting people, processes, and data in a centralized operational environment, TrackVia enables government organizations to modernize operational workflows that are often limited by legacy platforms and manual processes. Built for Government Security Requirements. TrackVia Government is designed to meet the security, compliance, and governance requirements of state and local government organizations. The platform supports secure handling of sensitive operational data, including Controlled Unclassified Information (CUI), while helping organizations meet evolving security and governance expectations. |
TrackVia Government | SaaS | Moderate | Pending |
|
Impact Level: High SSID#: SR24014 3PAO: Securisea Point Of Contact: David O'Connell Contact Email: doconnell@simpligov.com Sponsor Name: California Department of Child Support Services Service Description: SimpliGov simplifies government processes through integrated online forms and workflow process automation that improves operations by eliminating errors, reducing costs and accelerating responsiveness to the community. SimpliGov is specifically designed for the way state and local governments do business. |
SimpliGov Automation Platform | SaaS | High | In Process |
|
Impact Level: Moderate SSID#: SS24098 Point Of Contact: ActiveEye Compliance Team Contact Email: activeeyecompliance@motorolasolutions.com Service Description: ActiveEye Managed Detection and Response (MDR) leverages our advanced ActiveEye security platform and experienced 24x7x365 Security Operations Center analysts to detect and respond to cyber threats. The ActiveEye platform ingests data from connected network elements, analyzes it and sends relevant data and insights to cybersecurity personnel. Analytics and filtering help to differentiate between malicious and routine traffic, making it simpler to focus on actual threats. Log analytics, network detection, endpoint detection and response (EDR), DNS detection, and vulnerability detection are available threat detection modules in the ActiveEye platform. The ActiveEye platform collects and manages security data, optimizing threat detection and increasing focus on the most critical alerts that require quick responses. Built-in analytics capabilities examine multiple real-time threat intelligence feeds, reference past events and follow defined playbooks to automate most analyst actions. Analytics also rank manual investigations, prioritizing those most likely to require remediation. |
ActiveEye | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SR24055 3PAO: SecureIT Point Of Contact: Lillian Wetherington Contact Email: lillian.wetherington@infor.com Sponsor Name: StateRAMP Approvals Committee Service Description: Infor Government Solutions (IGS) offers integrated cloud application suites tailored for industries such as Public Sector, Aerospace & Defense, Automotive, Industrial, and Healthcare, leveraging the Infor Operating Service Platform (Infor OS) to drive digital transformation. Hosted in a secure AWS GovCloud region, IGS meets strict compliance standards including ITAR, FedRAMP, HIPAA, and NIST, ensuring robust security and data protection. Key functionalities encompass Financial & Supply Management, Manufacturing ERP, and Human Capital Management, along with integrated tools for Asset & Maintenance Management and Business Intelligence. IGS also provides features like single sign-on through Infor Federated Security, customizable Enterprise Portals, and a flexible Intelligent Open Network for seamless integration across applications. With solutions designed to optimize operations and enhance decision-making, IGS empowers organizations to manage financials, streamline HR processes, and effectively oversee assets while ensuring compliance and risk management. |
Infor Government Solutions - GovCloud | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SS24133 Point Of Contact: Amanda Ferrante Contact Email: aferrante@ebsco.com Service Description: EBSCOhost is an intuitive online research platform used by thousands of institutions and millions of users worldwide. With quality databases and search features, EBSCOhost helps researchers of all kinds find the information they need fast. |
Researcher | SaaS | Moderate | Not Progressing |
|
SSID#: SS26034 Service Description: xSwitch is a traditional law enforcement message switch for CJIS with an accompanying web portal interface for public safety and justice use. |
xSwitch | Progressing | ||
|
Impact Level: Moderate SSID#: SR24083 Point Of Contact: Molly Cooper Contact Email: mcooper@labarchives.com Service Description: LabArchives for Government (LG) is a cloud-based SaaS web application that consists of three independent applications: Electronic Lab Notebook (ELN), Inventory, and Scheduler. LG ELN is a cloud-based electronic lab notebook designed for research that enables researchers to capture, manage, store, and share information and data. LG Scheduler is a scheduling solution for labs and research organizations. LG Inventory organizes, tracks, and helps with ordering lab inventory. |
LabArchives for Government (LG) | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SR24038 3PAO: Schellman & Company Point Of Contact: Annabel Starratt Contact Email: annabel.starratt@talkdesk.com Sponsor Name: StateRAMP Approvals Committee Service Description: Talkdesk CX Cloud™ is a cloud-native contact center platform that helps government institutions deliver modern customer service, increase efficiencies, reduce costs, and innovate with technology to better meet their mission. The secure, flexible, and open platform offers a comprehensive suite of applications for voice and digital engagement, workforce management, and contact center operations. Talkdesk CX Cloud provides seamless engagement across voice and digital channels, preserving conversation context, to create a connected customer journey with more personalized interactions. A single, unified interface provides employees with all tools and data needed to deliver exceptional customer experience, empowering them to work more efficiently and effectively. With clicks, not code, non-technical stakeholders can orchestrate customer journeys and route calls to the right agencies, departments, or resources the first time. Workforce management tools optimize staffing and scheduling decisions, reduce administrative effort, and deliver employee experiences designed to meet the needs of modern, distributed workforces. Real-time reporting and tools to evaluate customer interactions enable actionable feedback for improved service quality and performance. The platform reduces burden on IT resources with low-code and no-code tools for customization and personalization to ensure agility despite budget and resource constraints. For added flexibility, Talkdesk offers a BYOC (bring-your-own-carrier) option to ensure that current telephony infrastructure is not a barrier to cloud adoption and IT modernization. Features: - Voice Engagement: Route calls based on caller data, IVR selection, business hours, agent skills, and other out-of-the-box variables, or configure your own custom attributes, to optimize the caller experience. Leverage a full suite of call handling features, including click-to-call functionality. - Digital Engagement: Interact with customers on their preferred communication channel, including chat and SMS. - Orchestration & Routing: Orchestrate your customer's journey and experience with a visual routing designer that enables non-technical stakeholders to build IVR menus and flows using clicks, not code, and a powerful routing engine that gets your customers to the right resource the first time. - Connections: Quickly build custom integrations and actions between Talkdesk and third-party systems, for any systems that are not part of the Talkdesk out-of-the-box integrations library. - API Access: Fully documented APIs are available to connect and synchronize other apps (e.g., CRM, mobile app, etc.) with your contact center. - BYOC (bring-your-own-carrier): Gain the benefits of a leading cloud-native contact center platform while maintaining your existing telephony infrastructure and carrier relationships. - Agent Workspace: Surface customer data (including contact information, open tickets, - previous interactions) on a “single pane of glass” so agents know who’s contacting them and have the necessary context. Eliminate context-switching between applications to improve productivity and time to resolution. - Standard Reporting: Improve contact center agents’ performance with real-time and historical reporting on performance against SLAs and key metrics in a comprehensive set of out-of-the-box reports and dashboards. - Custom Reporting: Get a more granular and bespoke view of your contact center data with custom reports and dashboards. Use custom calculations to blend more than 900 values to define new measures and report on virtually any metric. - Quality Management: Evaluate contact center agent interactions, identify key areas of improvement, and provide agents with the actionable feedback they need to improve service delivery and customer satisfaction. Includes unlimited voice recording storage. - Workforce Management: Anticipate customer demand and plan and develop staff schedules more effectively with accurate, omnichannel forecasts based on historical and real-time data. |
CX Cloud FedRAMP Edition | SaaS | Moderate | Pending |
|
SSID#: SS26032 Point Of Contact: Frank Hailstones Contact Email: fhailstones@redcapcloud.com Service Description: REDCap Cloud. REDCap Cloud is a comprehensive on-demand, hosted technology platform that integrates EDC, with a clinical data management system (CDMS) in a single solution. Within the application are a series of components which come standard with REDCap Cloud, which include Project Templates , Workflow Engine, Reporting with Dashboards, Data Imports/Exports, Medical Coding, Survey/ePRO, ECOA, eLearning with Certifications, Randomization, Android and Apple Apps, and robust API Integrations. |
REDCap Cloud | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24110 Point Of Contact: Blake Gladfelter Contact Email: blake.gladfelter@globalpay.com Service Description: ESCI provides software to manage student loan portfolios for U.S.-based higher education institutions, government agencies, and private lenders. ESCI offers platforms for clients to view and access data related to their student loan account portfolios as well as for students and borrowers to view, manage and make payments on their student loan. |
RecoverySelect, ServicingSelect, TaxSelect, OutSourceSelect, RefundSelect, and TuitionSelect | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: CR26011 3PAO: N/A Point Of Contact: Jeffrey Mizokawa Contact Email: jmizokawa@keenan.com Service Description: BenefitBridge is a comprehensive benefits administration platform that simplifies employee enrollment and ongoing benefits management through a centralized, user-friendly experience. The platform supports open enrollment, qualifying life event changes, eligibility management, carrier connectivity, and benefits reporting, helping organizations streamline administrative processes and improve accuracy. Automated workflows, data audits, and reconciliation tools help ensure that employee benefit information remains current and aligned with carrier records, reducing manual effort and the potential for errors. By providing seamless carrier communication and an intuitive enrollment experience, BenefitBridge enables employers to efficiently manage their benefits programs while enhancing employee engagement and service delivery |
BenefitBridge | IaaS | Moderate | Pending |
|
SSID#: SS26038 Point Of Contact: Greg Whitt Contact Email: greg.whitt@govhost.com Service Description: Cloud CAD is a cloud‑hosted computer‑aided dispatch system used to manage incoming calls for service, create and update incidents, track unit status, and support real‑time dispatch operations. It provides dispatchers with tools to record caller information, assign and monitor responding units, capture timestamps, and maintain an accurate operational picture throughout an event. Cloud RMS is a records management system that supports the full lifecycle of incident and case documentation, including report creation, data entry, approvals, and statutory reporting. Together, the systems allow agencies to document field activity, maintain operational records, and support required reporting and administrative workflows. |
GovHost Cloud RMS/CAD | SaaS | Progressing | |
|
SSID#: SS23035 Point Of Contact: Jen Paulin Contact Email: jpaulin@starrez.com Service Description: StarRez provides Software-as-a-Service (SaaS) solutions that enable institutions to efficiently manage residential housing, student life, conferences, events and related operations on and off-campus. The StarRez platform includes several integrated components designed to meet diverse customer needs. StarRez Web allows administrators to manage housing assignments, maintenance, programming, meals, events, and payment processing; PortalX enables residents to select housing, submit required information, connect with roommates, request maintenance, complete room condition reports, and manage their check-in and check-out processes; PortalE allows registration for conferences and events. College Pads supports off-campus housing operations by providing student housing listings, roommate and sublease finders, renter education, and parking options; Iris Conference and Registration allows administrators to plan and manage conferences and events, including attendee registration and payment collection. |
Iris Conference Platform | SaaS | Progressing | |
|
Impact Level: Moderate 3PAO: Ignyte Point Of Contact: Jeffrey Janover Contact Email: jjanover@classlink.com Sponsor Name: Not Required Service Description: ClassLink LaunchPad is a single sign-on (SSO) tool that provides access to school resources, including apps, files, and classes. It's available on many devices, including Android, iOS, and Mac, and is designed for education. |
LaunchPad | SaaS | Moderate | In Process |
|
Impact Level: Moderate SSID#: SR24033 3PAO: Coalfire Point Of Contact: Felix Geelhaar Contact Email: felix.geelhaar@snyk.io Service Description: Snyk is a developer security platform that helps identify and fix vulnerabilities in code, open-source dependencies, containers, and infrastructure as code. |
Snyk for Government | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SS24036 Point Of Contact: Christo Smeda Contact Email: christo.smeda@motorolasolutions.com Service Description: Radius is a cloud-based tactical 9-1-1 mapping solution for ECCs. Radius is powered by an NG9-1-1 GIS platform that leverages Esri capabilities and the customer’s authoritative GIS data. In addition to countless base layers and standard feature layers, one can easily configure custom map layers, Geocoding, and other services in real-time. Eclipse is an easy-to-use cloud-based analytics solution. It provides reports that are most important to PSAPs to drive operational efficiency and state-required reporting on-demand. When deployed at a state level, Eclipse Analytics provides a single source of truth that can quickly be scaled. RapidDeploy Lightning is a mobile app designed specifically to empower Field Responders with the tools and information they need to respond to emergencies swiftly and effectively. It equips them with the vital situational awareness and capabilities to make critical decisions in the field and ultimately, help save lives. |
Radius Mapping, Eclipse Analytics, Lightning App | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26052 Service Description: A platform-as-a-service, designed for community service management and disaster relief |
CommunityOS | Paas | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24145 Point Of Contact: James McKee Contact Email: jamesmckee@perlego.com Service Description: Perlego is an online digital library and eBook subscription service that gives users unlimited access to a vast collection of academic, professional, and non-fiction books. Perlego helps students, educators, and professionals access high-quality content from leading publishers. With features like offline reading, highlighting, and note-taking, Perlego makes learning flexible and accessible anywhere. |
Perlego | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS24179 Point Of Contact: Greg Aldridge Contact Email: greg.aldridge@justice-one.com Service Description: SaaS based application for law enforcement and court systems. |
JusticeOne | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SR24073 Point Of Contact: Craig Ficik Contact Email: cficik@extremenetworks.com Sponsor Name: Not Required Service Description: ExtremeCloudTM IQ provides unified management for wired, wireless, and SD-WAN to reduce risk and simplify operations. It is a core component of Extreme’s One Network, One Cloud framework that is secure by design and provides cloud choice for data residency and privacy. ExtremeCloud IQ delivers unified management of Extreme devices, and it manages Cisco and HPE Aruba switches, easing the transition to cloud-based management. It also provides basic setup and monitoring of a large array of other third-party devices. This innovative platform streamlines operations by delivering new levels of network visibility, automation, and intelligence using transparent machine learning (ML) algorithms. ExtremeCloud IQ incorporates many artificial intelligence (AI) Networking capabilities such as ML Insights and Client Monitor that help users reduce mean time to resolution (MTTR). It also features intuitive configuration workflows, real-time and historical monitoring, comprehensive troubleshooting, and integrated network applications. |
ExtremeCloud IQ | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SS26059 Point Of Contact: Brenda Thompson-Wattles Contact Email: chefbrenda@sproutcnp.com Service Description: SproutCNP provides purpose-built technology for K-12 school Child Nutrition Programs, used by school nutrition directors, staff, and state agencies. The suite includes tools for staff training and compliance tracking, financial and operational reporting, staff scheduling and labor planning, demand forecasting and procurement, inventory management, and recipe conversion — helping programs manage day-to-day operations and meet USDA and state compliance requirements. |
SproutCNP Technology | Moderate | Progressing | |
|
Impact Level: Moderate SSID#: SS26090 Point Of Contact: Irene Nevar Contact Email: irene.nevar@vectorvms.com Service Description: A SaaS contingent labor management platform |
VectorVMS | SaaS | Moderate | Progressing |
|
SSID#: SR26021 Point Of Contact: Nathan Young Contact Email: nathan.young@darktracefederal.com Service Description: Darktrace Commercial Government Cloud (DCGC) AI-powered solutions actively defend US Government (SLTT) organizations on-premises networks, cloud, OT, email systems, and zero trust architectures from cyber disruptions and ensure mission resilience. Rather than relying on signatures or historic attack data, DCGC's Self-Learning AI understands the normal operational behavior of each organization to identify unusual activities and autonomously respond in real-time. The Cyber AI platform consists of Cyber AI Mission Defense (CAMD) and Cyber AI Email Protection (CAEP) to form an adaptive knowledge of every device, user, peer group, network segment, and email communication. Together, CAMD and CAEP empower government agencies to defend their digital ecosystems against sophisticated threats including nation-state attacks, insider threats, zero-days, phishing attacks and more. |
Cyber AI Mission Defense and Email Protection | In Process | ||
|
Impact Level: Moderate SSID#: SS26012 Point Of Contact: Scott Hammers Contact Email: scott.hammers@schedulesource.com Service Description: Cloud-based Workforce Management Suite including bidding, forecasting, scheduling, time, attendance, leave and client-centered management systems. |
TeamWork | SaaS | Moderate | Progressing |
|
Impact Level: Moderate SSID#: SS26008 Point Of Contact: Peter Henggeler Contact Email: peter@recidiviz.org Service Description: Recidiviz has built an open-source data platform that links and standardizes data across silos and exposes it in usable formats to help drive justice systems toward real-time, data-informed decision-making. Recidiviz helps corrections leaders test what’s working and what’s not—and then do more of what’s working. Recidiviz’s mission is to build healthier, safer communities by improving outcomes for justice-involved individuals. |
Recidiviz Data Platform | SaaS | Moderate | Progressing |
|
Impact Level: High 3PAO: Schellman & Company Point Of Contact: Josh Beard Contact Email: josh.beard@cyera.io Sponsor Name: GovRAMP Approvals Committee Service Description: Cyera is an AI and cloud-native data security platform that provides automated, real-time visibility into an organization's data across all environments, including cloud, SaaS, and on-premises. The platform discovers, classifies, and monitors sensitive data, identifies security and compliance risks using deep AI-powered context, and enables automated, actionable remediation to reduce a company's data attack surface and manage risk. |
Cyera | SaaS | High | In Process |
|
SSID#: SS24055 Point Of Contact: Mark Smith Contact Email: mark.smith@thesiscloud.com Service Description: A streamlined student information system that is high tech and human centered, designed for small colleges and universities in the United States or Canada |
Thesis Elements | SaaS | Progressing | |
|
Impact Level: Moderate SSID#: SS24034 Point Of Contact: Noah Bliss Contact Email: noah.bliss@wizehive.com Service Description: Zengine/NextZen is a flexible SaaS web application designed to help organizations manage and distribute grants and scholarships. It includes a submission portal for applicants, user management of the current customer programs, and strong reporting statistics to help maximize impact. |
Next | SaaS | Moderate | Not Progressing |
|
Impact Level: Moderate SSID#: SR26037 3PAO: A-LIGN Point Of Contact: Adam Attinello Contact Email: adam.attinello@laerdal.com Service Description: SimCapture Cloud is delivered as a SaaS offering using a multi-tenant cloud computing environment. It is available to hospitals and healthcare education programs for the purpose of recording, debriefing, and tracking healthcare simulation experiences. |
SimCapture Cloud | SaaS | Moderate | Pending |
|
Impact Level: Moderate SSID#: SR26026 3PAO: Kratos Point Of Contact: Abby Zumstein Contact Email: abby.zumstein@elastic.co Service Description: Elastic Cloud is a fully managed SaaS offering that brings the power of the Elastic Stack — including Elasticsearch, Kibana, and advanced capabilities like machine learning, alerting, and monitoring — to the cloud. Designed for key use cases in Observability, Security, Search (including Vector Search), Elastic Cloud makes it easy to ingest, search, and analyze data from any source in real time. Deployments are preconfigured with use-case-optimized hardware profiles for logging, search, and analytics workloads, and can be customized to meet your performance or compliance needs. Elastic Cloud supports enterprise-grade security with features like role-based access control, SAML authentication, and encryption. As an open platform, Elastic Cloud also supports cross-cluster search and hybrid data architectures, allowing customers to unify data across Elastic’s cloud, self-managed environments, and other Elastic-compatible data sources. |
Elastic Cloud Hosted | SaaS | Moderate | Pending |
Showing 1 to 0 of 230 entries
Details
Accredited Third-Party Assessment Organizations (3PAOs)
Third-Party Assessment Organizations (3PAOs) are independent entities accredited by A2LA to conduct security assessments for GovRAMP participants. They evaluate products and services against standardized, NIST-based controls to support GovRAMP verification.
All 3PAOs listed below are A2LA-accredited and actively participating with GovRAMP.
Disclaimer: GovRAMP does not endorse or recommend any specific 3PAO.
.png)
.png)
Showing 1 to 0 of 32 entries
Details
Subscribe for GovRAMP Updates
Sign up to receive updates on new product listings, evolving security policies, and opportunities to engage with the GovRAMP community.