Progress toward FedRAMP Certification
Last updated 12 November 2026
CIPHER GRC is pursuing FedRAMP 20x Class C Certification. This page lists our goals and milestones and where each one stands. We update it whenever a milestone changes, and at least once every quarter.
Goal
FedRAMP 20x Class C Certification for CIPHER GRC, with every Key Security Indicator validated continuously from telemetry and approved records, and certification data shared through a FedRAMP-compatible trust center.
Milestones
| Milestone | Target | Status |
|---|---|---|
| CIPHER GRC launched | 9 November 2026 | Done |
| Public FedRAMP information published as a page and as JSON | November 2026 | Done |
| FedRAMP Marketplace listing requested | November 2026 | In progress |
| Evaluation built for all 46 Key Security Indicators (automated, manual and hybrid) | 12 November 2026 | Done |
| All 46 Key Security Indicators validated for CIPHER GRC itself | 30 November 2026 (was first quarter 2027, changed 12 November 2026) | Planned |
| Ready for independent assessment | 30 November 2026 | Planned |
| FedRAMP Recognized independent assessor engaged | December 2026 | Planned |
| FedRAMP 20x Class C assessment scheduled | December 2026 or January 2027 | Planned |
| Certification data shared with agencies through our trust center | First quarter 2027 | Planned |
| FedRAMP 20x Class C Certification | End of first quarter 2027 | Planned |
The certification date is a projection. It depends on engaging a FedRAMP Recognized independent assessor and on that assessor’s schedule, and it will be restated here once the assessment is scheduled.
How we measure progress
Each milestone has one target and one status: Planned, In progress or Done. A target that moves is shown with its new date and the date it changed, and nothing is removed from this list.
Questions about our progress go to contact@traverge.com.