Cloud services that claim FedRAMP Moderate equivalency for defense contractors' CUI, each linked to where the
claim was made and checked daily against GSA's FedRAMP Marketplace.
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
has achieved FedRAMP Moderate Equivalence through an independent assessment by a FedRAMP-accredited Third-Party Assessment Organization (3PAO)Where the vendor says itread 22 Oct 2026
Not listed. For an equivalency claim that is normal: the route involves no FedRAMP step.
Avatara Platform (managed enclave)
Avatara
Claims FedRAMP Moderate equivalency
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
Avatara Platform has achieved FedRAMP Moderate Equivalency under Department of Defense (DoD) mandatesWhere the vendor says itread 22 Oct 2026
FedRAMP Marketplace
Not listed. For an equivalency claim that is normal: the route involves no FedRAMP step.
CMMC Space
ATX Defense
Claims FedRAMP Moderate equivalency
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
has been independently assessed as FedRAMP Moderate EquivalentWhere the vendor says itread 22 Oct 2026
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
Deltek's Costpoint GCCM Completes FedRAMP Moderate Equivalency AssessmentWhere the vendor says itread 22 Oct 2026
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
has achieved FedRAMP Moderate Equivalency (FRME) attestationWhere the vendor says itread 22 Oct 2026
FedRAMP Marketplace
Not listed. For an equivalency claim that is normal: the route involves no FedRAMP step.
EgnyteGov
Egnyte, Inc.
Claims FedRAMP Moderate equivalency
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
achieved FedRAMP Moderate Equivalency status for engagements with U.S. Department of Defense (DoD) contractors and subcontractorsWhere the vendor says itread 22 Oct 2026
FedRAMP Marketplace
Egnyte / EgnyteGov: Agency Authorization In Process, not an authorization
GovDash (federal environment)
GovDash
Claims FedRAMP Moderate equivalency
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
building on its FedRAMP Moderate Equivalency posture in place since January 2026Where the vendor says itread 22 Oct 2026
Also listed as 20x Class B (Low). DoD has not yet accepted 20x for CUI under DFARS 252.204-7012 or CMMC. A Low listing does not meet the Moderate baseline in any case.
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
Upon completion, A-LIGN granted IntelliGRC FedRAMP Moderate Equivalent statusWhere the vendor says itread 22 Oct 2026
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
Paperless Parts is one of the only quoting solutions to be CMMC compliant, FedRAMP Moderate Equivalent, and audited by a 3PAOWhere the vendor says itread 22 Oct 2026
Not listed. For an equivalency claim that is normal: the route involves no FedRAMP step.
PreVeil (encrypted email and file sharing)
PreVeil, Inc.
Claims FedRAMP Moderate equivalency
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
PreVeil is the first Cloud Service Provider to meet the DoD's FedRAMP Moderate Equivalency requirement for CUI protection under CMMC and DFARS 7012Where the vendor says itread 22 Oct 2026
Not listed. For an equivalency claim that is normal: the route involves no FedRAMP step.
ProShop FedCloud (AWS GovCloud)
ProShop ERP
Claims FedRAMP Moderate equivalency
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
independently assessed against the FedRAMP Moderate baseline by a recognized 3PAOWhere the vendor says itread 22 Oct 2026
Not listed. For an equivalency claim that is normal: the route involves no FedRAMP step.
PTC Arena Federal CSO
PTC (Arena)
Claims FedRAMP Moderate equivalency
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
The PTC Arena Federal CSO was subjected to such an assessmentWhere the vendor says itread 22 Oct 2026
FedRAMP Marketplace
Not listed. For an equivalency claim that is normal: the route involves no FedRAMP step.
RegDOX Secure Data Room Service (SDRS)
RegDOX Solutions
Claims FedRAMP Moderate equivalency
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
completed its assessment for FedRAMP Moderate EquivalencyWhere the vendor says itread 22 Oct 2026
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
Tulip has achieved FedRAMP Moderate Equivalency in accordance with NIST 800-53 Rev.5 as concluded by a certified Third Party Assessment Organization(3PAO)Where the vendor says itread 22 Oct 2026
FedRAMP Marketplace
Not listed. For an equivalency claim that is normal: the route involves no FedRAMP step.
Unanet ERP GovCon
Unanet
Claims FedRAMP Moderate equivalency
The vendor's own statement. FedRAMP keeps no list of equivalent services, so nothing public can confirm it. A contractor relying on it must get the body of evidence and check it.
The claim
validated through an independent assessment by ControlCase, Unanet's 3PAOWhere the vendor says itread 22 Oct 2026
Not listed. For an equivalency claim that is normal: the route involves no FedRAMP step.
Once marketed as FRME, now Rev5 authorized
These services claimed, or worked toward, FedRAMP Moderate equivalency, and GSA's Marketplace now lists them
as authorized at Rev5 Class C or D. Their old FRME announcements are still online, so they stay here with that history linked.
Services that only ever claimed an authorization are not listed: the
FedRAMP Marketplace already answers for them.
FutureFeed (hosted in Project Hosts GSS One)
FutureFeed
Authorized inside GSS One AWS (Rev5 High)
Once marketed as FedRAMP Moderate equivalent. GSA's listing for Project Hosts' GSS One AWS names this service among the applications assessed and certified as part of the GSSOne AWS system. The authorized system is GSS One, and it covers this service only as delivered inside GSS One. Cite the GSS One package, FR2300457485, and confirm your instance runs there.
Once marketed as FedRAMP Moderate equivalent. GSA's FedRAMP Marketplace now lists it as authorized at Rev5 Class C (Moderate), which carries the FedRAMP Moderate baseline, so the equivalency memo no longer applies to it and no body of evidence is needed.
Its FRME claim
has achieved Federal Risk and Authorization Management Program (FedRAMP) Moderate EquivalencyWhere the vendor said it
Once marketed as FedRAMP Moderate equivalent. GSA's listing for Project Hosts' GSS One AWS names this service among the applications assessed and certified as part of the GSSOne AWS system. The authorized system is GSS One, and it covers this service only as delivered inside GSS One. Cite the GSS One package, FR2300457485, and confirm your instance runs there.
Its FRME claim
successfully achieved FedRAMP Moderate Equivalency, after an assessment from Third-Party Assessment Organization (3PAO), LunarlineWhere the vendor said it
Once marketed as FedRAMP Moderate equivalent. GSA's FedRAMP Marketplace now lists it as authorized at Rev5 Class C (Moderate), which carries the FedRAMP Moderate baseline, so the equivalency memo no longer applies to it and no body of evidence is needed.
Its FRME claim
achieved FedRAMP Moderate Equivalency following a comprehensive independent assessment by SchellmanWhere the vendor said it