Progress toward FedRAMP certification
Our goal is FedRAMP 20x Class B certification. This page shows where we are and is updated at least every quarter.
Last updated: 28 October 2026
Already in place
- The whole service runs on Amazon Web Services (US East), which is FedRAMP certified.
- All data is encrypted in transit and at rest.
- Infrastructure is defined as code, and every change is reviewed before it is applied.
- Every agent release is signed, and devices refuse unsigned or altered updates.
- Devices only make outbound HTTPS connections and accept only a fixed list of commands.
- Dashboard actions are recorded in an audit log kept for 400 days.
Milestones
| Quarter | Goal | Status |
|---|---|---|
| Q4 2026 | Listed on the FedRAMP Marketplace; public information, secure configuration guide and Trust Center published | In progress |
| Q4 2026 | Continuous security monitoring of the cloud environment turned on (configuration, threat and vulnerability monitoring) | Planned |
| Q1 2027 | Phishing-resistant sign-in for the dashboard (passkeys and single sign-on) | Planned |
| Q1 2027 | Optifi moved to its own dedicated cloud account with short-lived, role-based administrator access | Planned |
| Q1 2027 | Automated build, test and deployment pipeline; central security logging kept for at least one year | Planned |
| Q2 2027 | Written and tested incident response and recovery plans; security training program; vulnerability disclosure policy; public service status page | Planned |
| Q2 2027 | All FedRAMP 20x Key Security Indicators met, with automated validation | Planned |
| Q3 2027 | Class B assessment by a FedRAMP Recognized assessor scheduled | Planned |
Contact
Questions about our progress: security@accessagility.com.