Authorized Product List
Verified offerings with a security status of Ready, Provisionally Authorized, or Authorized are listed below on the Authorized Product List (APL). The APL was first published on September 14, 2021, and is updated at the end of every business day.
To be verified, the product must meet minimum security requirements and provide an independent audit conducted by a Third Party Assessment Organization (3PAO). StateRAMP recognizes three verified statuses, including Ready, Provisionally Authorized, and Authorized.
- Ready products meet requirements defined by the Minimum Ready Minimum Mandatory Requirements Policy;
- Provisionally Authorized status may be assigned by a sponsoring government or Approvals Committee to a package submitted for Authorized Status, if the product meets the Authorization requirements, but one of the product’s interconnected technologies is not StateRAMP or FedRAMP Authorized. To achieve a Provisionally Authorized Status, the interconnected technology must have a current StateRAMP Security Snapshot, per the StateRAMP Authorization Boundary Guidance.
- Authorized is the highest level of authorization and is for products that have demonstrated compliance with all required security controls by impact level.
Products that have been awarded both a StateRAMP Authorized status and Federal JAB status are now listed on the APL as Authorized, Federal JAB.
The StateRAMP PMO provides independent validation and verification that the security package and audit comply with the standards established by the StateRAMP governing boards. To ensure ongoing security compliance and risk mitigation, providers must comply with continuous monitoring requirements to maintain a verified security status.
Company | Product Name | Security Status | Service Model | Impact Level | Ready Date | Authorization Date | Package ID | 3PAO | Point Of Contact | Contact Email | Sponsor Names | Service Description | Category |
---|
Company | Product Name | Security Status | Service Model | Impact Level | Ready Date | Authorization Date | Package ID | 3PAO | Point Of Contact | Contact Email | Sponsor Names | Service Description | Category |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Casepoint LLC | Casepoint Government Ediscovery | Authorized | SaaS | High | 2024-09-17 | SR22027 | Schellman Compliance, LLC. | Usha Raj | uraj@casepoint.com | StateRAMP Approvals Committee | Casepoint is a data discovery platform for legal, investigatory, compliance, and IT teams who struggle to get actionable insights for data-centric business processes like eDiscovery, investigations, and information requests. Casepoint empowers leading corporations and government organizations to reduce costs, lower risk, and improve time-to-insight. Casepoint’s easy-to-use AI-powered platform is purpose-built for organizations that require the highest level of security and scalability to meet the evolving demands of the modern data landscape. Casepoint Government is delivered as a SaaS offering using a multi-tenant government-only cloud computing environment and is used by government agencies to meet their complex needs, including: • Legal Hold • Regulatory Enforcement / Investigations • Litigation (eDiscovery) • FOIA / PRR • Congressional Inquiries • Legal Data Storage • Task / Case Strategy and Management The Casepoint Government platform includes Casepoint Legal Hold, Casepoint eDiscovery, Casepoint FOIA, Casepoint Filestore, APIs for cloud collections, task management, and an app builder. Casepoint Government provides agencies with the capabilities needed to manage large volumes of data in litigation, investigations, congressional inquiries, and FOIA requests, including cloud-based collections, processing, culling, review, and highly customizable productions. It also offers built-in artificial intelligence and analytics with advanced tools for predictive analysis, search, and data visualization. | ||
CBORD | CBORD Online Transaction Processing | Authorized | SaaS | Moderate | 2024-08-21 | SR23076 | Securisea | Josh Elder | jle@cbord.com | NetMenu: NetMenu includes the following modules: CBORD Fusion, NetMenu Planner, NetMenu TrayCard, NetMenu Tray Ticket, Selective Dining, Mobile Inventory, CBORD Patient, Room Service Choice, NetMenu Floor Stock, CBORD C-Store, CBORD Data Analytics, CBORD Hub, NetNutrition, NetRecipe, Tray Logistics, Menu Display Interface (MDI); and its customer-branded applications: Horizon School Technology (HST) Back of House (BOH), BluePrint Menu Management System®, Cycle Menu Management®, Sysco® eNutrition, NetIMPAC, and Menu Wizard+. NetMenu provides an integrated food production, inventory management, and menu planning solution to support retail and patient nutrition. Electronic vendor integration and integration into CBORD customer accounts payable, general ledger, and point-of-sale software allow CBORD customers to leverage current systems when interfacing with NetMenu. GET: GET serves as a centralized, cloud-based platform tailored for organizations utilizing the CBORD card/cashless system, aimed at elevating the quality of service provided to their patrons, expanding patron engagement with the cashless program, and driving user involvement and revenue growth. GET offers an integrated experience that aligns with the expectations of today's students, particularly within the ever-evolving mobile landscape through the CBORD platform. Within the GET platform, users have access to real-time balance information, transaction history, the capability to report a lost or found card, and the convenience of making deposits using a credit card. Furthermore, GET's core features encompass food ordering, virtual card payment, mobile access, and a loyalty system. GET also supports integration with campus authentication systems and e-commerce merchant accounts for the acceptance of credit card payments. Odyessy Direct: Through Odyssey Direct, university clients have the ability to establish a comprehensive suite of services linked to a customized campus credential. This encompassing suite includes services such as card printing and credential management, photo capture, management of meal plans, debit and credit accounts, point-of-sale transactions for dining and retail, attendance tracking, as well as eligibility verification. Furthermore, the use of campus card payments is seamlessly integrated into various aspects of university life. These payment capabilities extend to dining services, vending machines, laundry facilities, photocopying and printing services, parking facilities, university bookstores, e-commerce platforms, and even select off-campus dining establishments. A dedicated mobile application ensures round-the-clock accessibility, empowering university students with access to their account information and service details. Beyond the administrative aspects of managing their campus card account, students can leverage this application to peruse dining menus, place food orders, gain access to their rooms, and, when necessary, employ it for identification purposes. | |||
Cisco | Cisco Meraki for Government | Authorized | saaS | Moderate | 2024-07-25 | SR24008 | Coalfire | James huan | jamhuan2@cisco.com | Cisco Meraki for Government provides a secure and efficient way to support your networking transformation within budget. Our cloud-managed platform simplifies networking to make it easier to deploy, manage, and optimize networks – driving IT modernization and enabling hybrid work. Meraki helps future proof networks and allows agencies to stay ahead of changing citizen and regulatory demands while improving employee productivity. Meraki has developed the most sophisticated platform in the industry based on cloud-first operations, network intelligence (AI), and open APIs to better integrate and automate processes, while providing a way to customize the monitoring and management of a network. The Meraki platform is built with a modern cloud-managed architecture that is able to quickly scale to meet the needs of customers worldwide. We have taken that knowledge and technical sophistication to create a tailored solution for the U.S. Government. Our solution gives government agencies the ability to quickly deploy, scale and manage cloud networks anywhere in the world in an effort to help meet their cloud-first initiatives. Security is a high priority of our solution, which is why we created a separate platform that stores data on U.S. soil and includes FIPS to further protect government telemetry data from device to cloud. Meraki will offer certain MS (Switching), MR (Wireless) and MX (Security and SD-WAN) devices as part of the offering. | |||
Blackboard | Blackboard Learn SaaS GovCloud | Authorized | SaaS | Moderate | 2023-03-27 | SR21032 | A-Lign | Andrew Keeney | andrew.keeney@blackboard.com | StateRAMP Approvals Committee | Blackboard's Learn SaaS solution offers government and military agencies next-generation online, social and mobile tools that create a continuous learning environment, built around peer-to-peer interaction, content, and discussions | ||
Box, Inc. | Box Enterprise Cloud Content Collaboration Platform | Authorized | SaaS, PaaS | Moderate | 2022-05-19 | 2024-05-15 | SR22001 | Schellman & Company | Tom Cowles | compliance@box.com | Los Angeles City Employees' Retirement System (LACERS) | The Box Enterprise Content Cloud Collaboration Platform enables business to easily share, manage and secure their content. In today’s mobile-first, cloud-first world, providing employees with secure access to content at any time using any device is critical to creating a more productive, connected workforce and improved customer experiences. Beyond secure file sharing, Box enables easy access to content and collaboration tools from any device with the security, scalability and administrative controls that IT requires. | |
Actsoft, Inc | Workforce Manager for Government | Authorized | SaaS | Moderate | 2023-04-18 | SR23008 | A-Lign | James Armstrong | jarmstrong@actsoft.com | StateRAMP Approvals Committee | Workforce Manager for Government is a fully integrated platform, which facilitates the business needs of an Agency with mobile employees. On top of robust features such as Wireless Forms, Timekeeping, Job Dispatching, and GPS Tracking, customers with vehicles can leverage the solution’s fleet components to monitor vehicle activities like stop times, idling, driver behavior, score cards, and telematics. This intuitive, yet flexible solution addresses key market challenges such as ease of use, data collection, mobile resource management, implementation costs, worker compliance and overall accountability. The synergy of tools in Workforce Manager for Government brings customers greater efficiency and productivity gains by automating and streamlining processes that help them save time, reduce labor costs, and lower vehicle-related expenses such as fuel and maintenance. Government Customers benefit from an easily deployable solution that provides a significant return on investment. Workforce Manager for Government is equipped with enterprise-grade workforce management tools that are typically only found in high-priced business applications, making it affordable and accessible to all Government Agencies. This approach provides Government customers with a solution that delivers relevant information about daily field operations, helping agencies craft new business strategies to save both time and money. | ||
CGI | CGI Advantage Cloud | Authorized | SaaS | Moderate | 2024-09-10 | SR24021 | A-Lign | Rosemary Milliken | rosemary.milliken@cgi.com | State of Arizona Department of Homeland Security | CGI Advantage Cloud is a unified multi-tenant SaaS ERP solution that is designed, built, and optimized for the public sector. Our solution provides financial management, procurement, grants, human capital management, payroll, labor cost distribution, time and leave, budgeting, and advanced analytics capability that addresses the public sector’s most complex requirements out of the box. Advantage Cloud requires minimal workarounds or extensions associated with dual-use ERP systems that are built for private sector and then overlaid with public sector features. | ||
Anthology | Anthology Reach | Authorized | SaaS | Moderate | 2024-08-20 | SR23070 | A-Lign | Josh Rector | josh.rector@anthology.com | Anthology Reach is a solution for reaching across campus, from admissions to student success to alumni engagement. It guides and encourages an individual along their experience with the institution. The experience becomes a collection of interactions, building the unique story that each person’s journey tells. Institutions use those interactions, combined with the data gathered, to strengthen connections with their community in a personalized way. With powerful insights from that data, institutions can be strategic and agile in making the decisions that make a difference in bringing in the next class, driving retention initiatives, and meeting advancement goals. Anthology® Reach combines Anthology’s deep CRM solutions expertise with Microsoft’s application and cloud infrastructure to deliver a system of intelligence for higher education. | Customer Management and Experience Solutions,Application Security,Application Security,Access Management, | ||
Boomi | AtomSphere | Authorized | SaaS | Moderate | 2023-12-18 | SR22033 | A-Lign | Erika Fry | tech.compliance@boomi.com | Boomi AtomSphere is a cloud-native integration Platform-as-a-Service (iPaaS) technology that lets you connect everyone to everything. The Boomi SaaS AtomSphere Platform solves the needs of our government customers with end-to-end capabilities by integrating applications, systems, and connecting people. | |||
DocuSign | DocuSign Federal (eSign) | Authorized | SaaS | Moderate | 2023-07-05 | SR22041 | Schellman & Company | Rainer VillaMercado | rainer.villamercado@docusign.com | State of Arizona Department of Homeland Security | DocuSign is a San Francisco- and Seattle-based company that provides electronic signature technology and Digital Transaction Management services to facilitate electronic exchanges of contracts and signed documents. DocuSign’s features include authentication services, user identity management and workflow automation. Signatures processed by DocuSign are comparable to traditional signatures based on the product's compliance with the ESIGN Act as well as the European Union’s Directive 1999/93/EC on electronic signatures. DocuSign eSign for government entities is operated and managed as a government community cloud and provides government customers with an enterprise signing service to facilitate paperless workflow management. | Customer Management and Experience Solutions,Application Security,Application Security,Access Management, | |
Cisco Systems, Inc. | AppDynamics | Authorized | SaaS | Moderate | 2024-08-20 | SR24017 | Schellman & Company | James Huang | jamhuan2@cisco.com | StateRAMP Approvals Committee | AppDynamics GovAPM is a software-as-a-service (SaaS) application performance monitoring (APM) solution. AppDynamics GovAPM provides end-to-end visibility into the performance of applications. AppDynamics application performance monitoring and business intelligence solutions provide organizations real-time visibility into application environments and strategic insights that drive business outcomes. By utilizing industry-leading monitoring and analytics features, IT departments can automatically identify performance anomalies and resolve issues before they impact customers or revenue streams. Our unique combination of application performance and business metrics gives enterprises the power to deliver reliable performance and a flawless customer experience. | Cloud Security, | |
Authorium | Authorium Systems | Authorized | SaaS | Moderate | 2024-07-19 | SR24015 | Schellman & Company | Chris Mayhew | Chris.mayhew@authorium.com | StateRAMP Approvals Committee | Authorium's cloud-based, no-code platform for Document Process Automation radically reduces the time it takes to develop complex document sets that form the backbone of government processes for procurement, contracting, grants, and budgeting. With built-in project management tools, powerful collaboration capabilities and easy integration with existing government systems, Document Process Automation speeds up the fundamental processes of procurement, contracting, grants, and budgeting by 50-70%. | ||
Cisco Systems, Inc. | Duo Federal | Authorized | SaaS | Moderate | 2024-01-22 | SR23048 | Coalfire | James Huang | jamhuan2@cisco.com | Duo’s Federal Editions can verify the identity of users with secure and easy to use two-factor authentication methods that helps public sector entities satisfy NIST 800-63-3 and 53/63/171 authentication requirements. In addition to verifying users’ identities, Duo’s solution checks the security health of every device authenticating into the environment, at the time of access. Admins can use Duo to enforce stricter device and application access policies, such as blocking login requests based on location or anonymous networks. Duo ensures only trusted users and devices can access protected applications. This complete security solution prevents modern attackers that often target multiple areas - including credential theft and the exploitation of known software vulnerabilities affecting outdated software versions. | Content Collaboration, | ||
MapLarge, INC | MapLarge | Authorized | SaaS | Moderate | 2024-09-17 | SR24013 | A-Lign | Marvell Summerow | marvell.summerow@maplarge.com | Not Required | MapLarge provides software for location intelligence analysis that runs on servers either in the cloud or on premise. MapLarge user interfaces accessed by users in web browsers or native applications on any desktop of mobile device. Customers are typically large enterprises that build their own custom solutions on top of MapLarge in a wide variety of use cases ranging from visualizing business trends, to planning flight paths, to global situational awareness for large security teams. MapLarge supports data import, editing, visualization and alerting based on a wide variety of data sources including both flat files, real time streaming connections and numerous other industry specific like ArcGIS data connectors. MapLarge processes customer data that may take any form supported by the product but typically has one or more location intelligence attributes like latitude and longitude or street address. Customer data can be visualized in a wide variety of ways including as maps, charts, lists, or exported as Portable Document Formats (PDFs), images or data files. | ||
Infoblox | BloxOne Threat Defense Federal Cloud | Authorized | SaaS | Moderate | 2024-04-29 | SR23074 | Kratos Defense | Chris Carlson | ccarlson@infoblox.com | StateRAMP Approvals Committee | B1TD FedCloud is a suite of capabilities that enable organizations to defend their networks, conduct threat investigations and research, and provide rapid correlation and contextualization to minimize incident response times. B1TD FedCloud contains millions of verified indicators in vendor-agnostic formats that may be exported to facilitate detection, blocking, and containment of modern malware (e.g., Advanced Persistent Threats (APTs), ransomware, phishing, exploits) via an open application programming interface (API) and an analyst research portal. | ||
Appian | Appian | Authorized | PaaS | Moderate | 2023-01-05 | SR22018 | Coalfire | Appian FedRAMP/StateRAMP Team | fedramp@appian.com | StateRAMP Approvals Committee | Appian software is delivered to the Appian Cloud through a Platform-as-a-Service (PaaS) model and leverages cloud-native robotic process automation (RPA), simplifying control management and reducing overhead for customers. Government agencies should consider the Appian Government Cloud (at Impact Level 5) for critical acquisitions, case management and logistics, especially when process and business rule complexities are high. The Appian Low-Code Platform unifies the key capabilities needed to get work done faster. | ||
3M | Solventum Health Services Platform (SHSP) | Authorized | SaaS | Moderate | 2024-01-24 | SR23042 | Coalfire | Jeanette Beaudry | jbeaudry@mmm.com | 3M Grouper Plus Content Services (GPCS) provides reliable, secure processing of patient claims and other coded data in the cloud. The web-based delivery system hosts a selection of classification and reimbursement content users need to group, edit and calculate reimbursement of claims. The system is responsible for processing markup language (machine readable) grouping, editing, and reimbursement claims over the internet through a secured channel and processing them for customers. There are multiple content versions and interface versions supported for backwards compatibility. The system includes an interface managing users, payment processing schedules, and interactive claims processing. | Document Management, | ||
Everlaw | Everlaw | Authorized | SaaS | Moderate | 2024-04-26 | SR22034 | Kratos Defense | Angela Kovach | federal@everlaw.com | StateRAMP Approvals Committee | Everlaw helps legal teams and government agencies navigate the increasingly complex ediscovery landscape to chart a straighter path to the truth. With Everlaw, government agencies of all sizes are able to transform their approach to discovery, litigation, investigations, compliance, and FOIA/Public Records Requests. Combining speed, security, and ease-of-use in a unified discovery platform, cross-functional legal teams are empowered to investigate issues more thoroughly, uncover truth more quickly, and present their findings more clearly. Built natively on AWS GovCloud (US), Everlaw is committed to innovation and future-proofing agencies against emerging data types and other fluctuating needs. Founded in 2010 and based in Oakland, California, Everlaw’s mission is to promote justice by illuminating truth. | Customer Management and Experience Solutions,Application Security,Application Security,Access Management, | |
Google Services | Authorized | IaaS, PaaS, SaaS | High | 2022-10-25 | SR21005 | Coalfire Systems | Ashleigh Laone | stateramp@google.com | Arizona Department of Homeland Security | Google Services is comprised of Google’s multi-tenant public cloud Google Cloud Platform and built atop the Google Common Infrastructure. The Google Common Infrastructure powers Google worldwide. | Customer Management and Experience Solutions,Application Security,Application Security,Access Management, | ||
Geographic Solutions, Inc. | Virtual OneStop - VOS | Authorized | SaaS | Moderate | 2025-01-16 | SR24012 | A-Lign | Felipe Medina | fmedina@geosolinc.com | Arizona Department of Homeland Security | The Virtual OneStop® software suite is the only fully integrated workforce system in the country that provides universal employment solutions for job seekers, employers, service providers, and state and local agency staff. Offered as a web-based solution to enhance service delivery and employment outcomes, each module has been designed specifically to meet the diverse needs of American Job Centers, economic development agencies, unemployment insurance entities, correctional and educational institutions. Virtual OneStop® effectively manages all federally funded partner programs under the Workforce Innovation and Opportunity Act, labor exchange, case management, job aggregation, labor marketing information, service and fund tracking, human services, federal reporting, and unemployment insurance benefits. Flagship products/modules within the Virtual OneStop® software suite include VOS Sapphire®, Virtual LMI®, Virtual OneStop Reentry Employment Opportunities (VOS REO), America’s Labor Market Analyzer (ALMA)®, America’s Virtual OneStop®, Virtual Career Center, Reemployment Exchange®(REX), and the Geographic Solutions Unemployment System (GUS)®. | Content Collaboration,Learning Management System, |
Progressing Product List
StateRAMP recognizes cloud service offerings in the process of working toward a verified offering.
To have a product listed as in progress, the product must: 1) be enrolled in the StateRAMP Progressing Snapshot Program, or 2) Have engaged with a Third-Party Assessment Organization (3PAO) to conduct an independent audit for Ready or Authorized.
The progressing statuses include:
Security Snapshot
- Enrolled products are enrolled in the Progressing Snapshot Program and working toward their initial Snapshot score.
- Progressing products are enrolled in the Progressing Snapshot Program and have submitted artifacts to receive their Snapshot scores.
Security Product Review (Non-Snapshot)
- Active products are working toward Ready.
- In Process products are working toward Authorized status.
- Pending products are currently being reviewed by the StateRAMP Program Management Office (PMO) and are awaiting a determination for a verified status.
Company | Product Name | Security Status | Service Model | Impact Level | Ready Date | Authorization Date | Package ID | 3PAO | Point Of Contact | Contact Email | Sponsor Names | Service Description |
---|
Company | Product Name | Security Status | Service Model | Impact Level | Ready Date | Authorization Date | Package ID | 3PAO | Point Of Contact | Contact Email | Sponsor Names | Service Description |
---|---|---|---|---|---|---|---|---|---|---|---|---|
Almabase Inc | Almabase | Progressing | SaaS | High | Vishnu Vinod | vishnu@almabase.com | Not Required | Software tools & strategy for educational institutions to build alumni-centric programs that turn unengaged alumni into supporters for life. | ||||
Automox | Automox | Progressing | SaaS | Moderate | Tom Bowyer | tom.bowyer@automox.com | Not Required | Established in 2015 and originally from Boulder, Colorado, Automox now operates as a fully remote company headquartered in Austin, Texas. Offering a groundbreaking, Autonomous Endpoint Management (AEM) platform, Automox provides a comprehensive array of cloud-based patching, configuration, and remote control services, including third-party software patching, to customers worldwide. The Automox agent manages updates for devices running on Windows, macOS, and Linux while also keeping hundreds of crucial applications up to date, including Chrome, Firefox, Adobe, Zoom, and Slack. Moreover, Automox excels in providing robust configuration management and automation services. All these functionalities can be seamlessly accessed and administered from a unified dashboard, underscoring Automox's commitment to delivering modern, all-inclusive, remote IT solutions. | ||||
Alegeus Technologies, LLC | WealthCare Administration | Progressing | SaaS | Moderate | Jordan Erickson | jordan.erickson@alegeus.com | Not required | The Alegeus WealthCare Administration system (WCA) is the only single system in the industry that houses the administration for all consumer-directed healthcare (CDH) accounts, recordkeeping for health savings accounts (HSAs), and benefits, debit card (debit card) transaction processing enabling not just the stacking of multiple plans but also increased efficiency in end-to-end processes required to fully support multiple account types together. Alegeus offers a stacked or multi-purse debit card solution that enables multiple benefit accounts to be stacked on a single debit card. Each benefit account represents a separate purse on the card. Employers can define the order of reimbursement for account types which have overlapping available services (e.g., HSA and FSA both allow pharmacy swipes). We also provide unique automation capabilities to coordinate activities between HSA and non-HSAs. For example, we provide the ability to configure deductible rules that dynamically update account descriptions and spending eligible when transitioning from a full FSA to a limited purpose FSA with an HSA. |
||||
APS Payroll | APS Payroll | Progressing | SaaS | High | Arthur Almazan | aalmazan@apspayroll.com | Not Required | The APS cloud-based HR and payroll platform provides accessibility to key payroll and HR workflows for optimal efficiency and productivity. It’s easy to use for everyone in your workforce, promoting better adoption and usability. | ||||
Barracuda Networks | Barracuda Cloud Archiving Service (BCAS | Progressing | SaaS | Moderate | Adeeb Mohammed | compliance@barracuda.com | Not Required | The Barracuda Cloud Archiving Service is a Software as a Service (SaaS) solution hosted in the Barracuda Cloud, previously referred to as direct-to-cloud. The Barracuda Cloud Archiving Service is designed for customers that do not want to manage a physical or virtual appliance. | ||||
Accela Inc. | Civic Platform | Progressing | SaaS | Moderate | Dale Wilhelm | dwilhelm@accela.com | Not Required | Accela Inc. is a software development and engineering company that designs and maintains a cloud-based, software-as-a-service (SaaS) platform of services utilized by government agencies to improve productivity, efficiency, and civic engagement. The Company is a provider of civic engagement solutions for government. The Accela Civic Platform includes application programming interfaces (APIs) and mobile applications and is designed to enable and improve core processes for city, county, state, and federal governments. The Company’s solutions uniquely address the diverse needs of agencies, citizens, and businesses by enhancing workflow and making publicly available information more accessible. | ||||
American Telephysicians | SmartClinix | Progressing | SaaS | Moderate | Faisal Saleem | faisal.saleem@amercantelephysicians.com | Not Required | Healthcare needs a unified solution that meets requirements and makes care delivery truly digital. The New and Improved SmartClinix system is a complete virtual solution that can speed up healthcare progress on all fronts. The recently upgraded SmartClinix is meant for Physicians, Hospitals, Facilities, International Practices, and other areas where efficient care delivery is required. | ||||
Agilix Labs | Buzz | Progressing | SaaS | Moderate | Eric Baker | eric.baker@agilix.com | Not Required | The First K-12 Solution that Combines All the Tools You Need to Create, Deliver, and Scale Learning. | ||||
Active Network | JumpForward | Progressing | SaaS | Moderate | Blake Gladfelter | blake.gladfelter@globalpay.com | Not Required | Active Network is the leading provider of cloud-based activity and participant management solutions serving a wide range of customer groups including community activities, the public sector, non-profits, and sports. Our proprietary technology platforms transform the way organizations manage their activities, facilities, and events by facilitating online and in-person commerce and streamlining other critical management functions, while also driving consumer participation to their events. | ||||
Barracuda Networks | Cloud to Cloud Backup (CCB) | Progressing | SaaS | Moderate | Adeeb Mohammed | compliance@barracuda.com | Not Required | Barracuda Cloud-to-Cloud Backup for Microsoft 365 protects Exchange Online, OneDrive for Business, SharePoint, and Teams data by backing up directly to Barracuda Cloud Storage | ||||
Barracuda Networks | Web Application Firewall as a Service (WAFaaS) | Progressing | SaaS | Moderate | Adeeb Mohammed | compliance@barracuda.com | Not Required | Barracuda WAF-as-a-Service provides cloud-delivered, enterprise-grade application security without the administrative overhead of an appliance. With Barracuda WAF-as-a-Service, you can secure your applications within minutes, regardless of where they are hosted. There is nothing to deploy, scale, size, or maintain. Built on Barracuda’s proven security effectiveness, Barracuda WAF-as-a-Service protects against advanced layer 7 attacks such as DDoS, SQL injection, zero-day threats, AJAX and JSON payloads, the OWASP Top Ten, and others. |
||||
Biote Medical LLC | Method | Progressing | SaaS | High | Aaron Salinas | aaron.salinas@biote.com | Not Required | Major software program that Biote provides it's customer giving them one location for inventory, ordering, and tracking of customer purchases, products, and procedures. | ||||
Barnes and Noble Education | Adoptions & Insights Portal (AIP), First Day Complete (FDC), Direct Digitial Platform (DDP), inSite ECommerce and Advanced Retail Center (ARC) | Progressing | SaaS | Moderate | Rich Davidson | security@bned.com | Not Required | AIP, FDC and DDP provide courseware services to students and faculty on college campuses. inSIte and ARC provide retail and ecommerce management services to college bookstores | ||||
Compansol | BOT - Blumen Online for TRIO | Progressing | SaaS | Moderate | Gunjan Seth | gunjan@compansol.com | Not Required | BOT software is used by TRIO programs (Title IV Federal Program) for student data management. It helps them prepare the APR (Annual Performance Report) as per Department of Education guidelines. It has several mass communication tools like bulk email, bulk text. etc. for TRIO programs to stay in touch with student participants. BOT has over 200 reports, labels, graphs for tracking and data analysis purposes. | ||||
Binti, Inc. | Binti | Progressing | SaaS | Moderate | Brittany Wilbert | brittany@binti.com | Not required | Binti builds modern software with the goal of helping every child have a family. 400,000 children are currently in foster care in the US and millions are in orphanages around the world. 30% of the US’s homeless population and 25% of prison inmates experienced foster care as youth. It’s clear that children who don’t have families don’t have a fair chance at life. Binti wants to change that. By streamlining the foster/adoption process with user-friendly tools, we are working to address the nationwide shortage of foster families. | ||||
Customer Expressions Corp | Case IQ | Progressing | SaaS | Moderate | Kris Hall | khall@caseiq.com | Not Required | Software to streamline workplace investigations and risk mitigation for today’s organizations through omni-channel case intake, configurable workflows, smart automations, and meaningful analytics. | ||||
CommScope | RUCKUS One | Progressing | SaaS | Moderate | Adam Cutts | adam.cutts@commscope.com | Not Required | RUCKUS One is an AI-driven network assurance and business intelligence platform that enables enterprises to easily manage a converged network, make better business decisions, and deliver exceptional user experiences. With flexible subscription and deployment models, RUCKUS One enables you to deploy future-proof networks simply, reliably, securely and at cloud-scale. | ||||
Blue Hill Data Services | Mainframe as a Service | Progressing | PaaS, IaaS | Moderate | Scott Jones | sjones@bluehilldata.com | Not Required | Mainframe hosting, remote systems support, applications support. | ||||
Auto-Graphics, Inc. | SHAREit | Progressing | SaaS | Moderate | Cheryl Slinkard | cls@auto-graphics.com | Not Required | Our library resource sharing system facilitates the inter-connectivity of consortia, providing you the ability to simultaneously interface with multiple ILS and ILL systems. |
||||
Anthology Inc. | Anthology Encompass | Progressing | SaaS | Moderate | Nicole Anderson | nanderson@anthology.com | Not Required | Encourage your alumni and supporters to do more than just engage. By combining analytics with leading engagement tools, you benefit from a seamless constituent experience to further build involvement and support. |
See Who’s Leading the Way in Cybersecurity Alignment
Explore our list of participating government organizations & educational institutions recognizing a common standard for cybersecurity.
These SLED (State, Local, and Education) organizations have engaged StateRAMP to recognize and adopt standards that provide effective and efficient cloud security solutions for their organizations and vendor communities. Browse the listings below and check back regularly for new additions.
Federal JAB Attestations
StateRAMP seeks to provide recognition to those products who have achieved a FedRAMP Authorization through Joint Authorization Board (JAB) approval. These products have undergone a rigorous audit and review from both a Third Party Assessment Organization (3PAO) and the FedRAMP JAB. StateRAMP wishes to highlight their efforts and provide an avenue for these products to be included in StateRAMP.
Company | Product Name | Security Status | Service Model | Impact Level | Ready Date | Authorization Date | Package ID | 3PAO | Point Of Contact | Contact Email | Sponsor Names | Service Description | Category |
---|
Company | Product Name | Security Status | Service Model | Impact Level | Ready Date | Authorization Date | Package ID | 3PAO | Point Of Contact | Contact Email | Sponsor Names | Service Description | Category |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
MIS Sciences Corporation | GovPoint Cloud Services | Federal JAB | SaaS, PaaS, IaaS | SecureIT | Jeff Willis | jeff@mis-sciences.com | Full suite of FedRAMP IaaS/PaaS/SaaS services including Calabrio Workforce Engagement Management |