Trust register

Authorizations

A scope-specific register for formal authorizations, assessments, certifications, and clearances that may be published with supporting evidence.

No blanket claims

No public authorization entries are currently asserted.

When an entry can be published, it will identify the exact authority, system boundary, scope, status, dates, evidence owner, and limitations. Customer-specific or protected records remain in the applicable controlled channel.

Environment profiles

Certification requirements by mission boundary.

These profiles preserve the terminology agencies expect to see while separating a requirement or readiness target from a current authorization.

EnvironmentIntended boundaryRelevant authorization and certification targetsCurrent public status
CommercialGeneral and civilian workloadsFedRAMP High P-ATO (JAB); StateRAMP High; DoD IL2 (PA); FIPS 140Requirements/readiness only
GovernmentU.S.-resident CUI and sensitive workloadsFedRAMP High P-ATO (JAB); StateRAMP High; DoD IL2/4/5 (PA); CJIS; ITAR; IRS 1075; NIST SP 800-171; HIPAA; FIPS 140Requirements/readiness only
Secret ReadySecret-classified mission pathwayDoD IL6 (PA); ICD 503 ATO; JSIG PL-3 ATO; cleared U.S.-citizen operationsRequirements/readiness only
Top Secret ReadyTop Secret mission pathwayICD 503 ATO; ICD 705-accredited facilities; JSIG PL-3 ATO; cleared U.S.-citizen operationsRequirements/readiness only

Required record

Every future authorization entry must answer four questions.

Named boundary

The exact system, service, node, environment, organization, and included components.

Authority and basis

The approving or assessing body, framework, agreement, decision type, and source record.

Status and dates

Issued, effective, expiration, monitoring, change, suspension, and withdrawal dates as applicable.

Limitations

Excluded services, locations, data, workloads, configurations, inherited controls, and customer responsibilities.

Next step

Request scoped assurance information

Describe the product, environment, framework, boundary, artifact type, and evaluation purpose at an unclassified, nonsensitive level.

Request an assessment