Trust Center / FedRAMP High
FedRAMP High
FedRAMP compliance through Project Hosts, a FedRAMP-authorized hosting partner, with onboarding in about three months.
What It Is
FedRAMP (Federal Risk and Authorization Management Program) is the U.S. government’s standardized approach to security assessment and authorization for cloud products used by federal agencies. FedRAMP High is the highest impact-level authorization, required for the most sensitive federal workloads.
What FedRAMP High Majorly Requires
- Full implementation of the NIST SP 800-53 High control baseline: hundreds of security controls across access, audit, encryption, and incident response.
- Continuous monitoring: ongoing vulnerability scanning and reporting to the authorizing body, not a one-time assessment.
- Independent assessment by a certified Third-Party Assessment Organization (3PAO).
- A named agency sponsor, or the FedRAMP Joint Authorization Board, to actually issue the Authorization to Operate (ATO).
How VIDIZMO Supports It
VIDIZMO does not hold an independent FedRAMP ATO. There are two paths to FedRAMP High coverage for a Digital Evidence Management deployment:
- Microsoft Azure Government Cloud: if you already run, or want to self-host VIDIZMO in, your own Azure Government Cloud environment, that infrastructure is already FedRAMP High authorized. Extending that authorization to VIDIZMO’s application layer still requires your agency to sponsor it.
- Project Hosts' FedRAMP-authorized environment: Project Hosts holds a FedRAMP authorization and hosts multiple software vendors inside it, covering both infrastructure and application-level authorization. VIDIZMO is onboarded there in about three months, at additional cost, with no agency sponsorship required.
Scope & Limitations
Neither path means VIDIZMO independently holds a FedRAMP ATO. The Azure Government Cloud path requires an agency sponsor before VIDIZMO’s application layer is covered; the Project Hosts path removes that dependency, at additional cost, with onboarding in about three months.
Need our security documentation?
Tell us what your review requires and we will send the relevant evidence.