Who holds which certification

64 vendors · 63 certifications

FIPS 140 validated cloud and software vendors

Held by 13 vendors · 9 from NIST CMVP validated modules · 1 unverified

Cryptographic modules validated under FIPS 140-2 or 140-3.

AWS

Amazon Web Services, the largest public cloud.

FIPS 140-3NIST CMVP and vendor page18 active FIPS 140-3 modules: #5476 Amazon Linux 2023 GnuTLS Cryptographic Module; #5438 Amazon Linux 2023 OpenSSL FIPS Provider; #5429 AWS-LC Cryptographic Module (dynamic); #5369 Amazon Linux 2023 Kernel Cryptographic API; #5332 AWS Scalable Network Crypto Modules, version 1.1; #5314 AWS-LC 3 Cryp

read Nov 4, 2026
ClickHouse

ClickHouse Cloud, the column-oriented analytics database.

FIPS 140-3UnverifiedVendor page

read Oct 28, 2026
Google Cloud

Google Cloud Platform, Workspace and Gemini for Government.

FIPS 140-3NIST CMVP20 active FIPS 140-3 modules: #5565 Inline Crypto Engine (ICE); #5558 Integrated Compute Complex (ICC); #5550 Integrated Compute Complex (ICC); #5539 B227 True Random Number Generator (TRNG) Cryptographic Module; #5537 Google Tensor 6th Gen UFS Inline Storage Encryption Engine; #5474 Knuckle Cryptog

read Nov 4, 2026
HashiCorp

Terraform, Vault and HCP.

FIPS 140-3Vendor page

read Sep 24, 2026
IBM

IBM Cloud, watsonx and IBM's government cloud services.

FIPS 140-3NIST CMVP6 active FIPS 140-3 modules: #5486 IBM® Crypto for C; #5221 IBM ClevOS 3 OpenSSL Cryptographic Module; #5094 IBM COS Linux Kernel Cryptographic API Cryptographic Module; #5088 IBM® NVMe FlashCore™ Module 3; #5078 IBM® NVMe FlashCore™ Module 2; #4889 AIX FIPS Crypto Provider for OpenSSL 3

read Nov 4, 2026
Microsoft

Azure, Microsoft 365 and the Azure OpenAI Service.

FIPS 140-3NIST CMVP and vendor page9 active FIPS 140-3 modules: #5485 Microsoft HSM Cryptographic Module; #5410 Cryptographic Primitives Library; #5409 BitLocker Dump Filter; #5408 Kernel Mode Cryptographic Primitives Library; #5407 Secure Kernel Code Integrity; #5406 Code Integrity; more

read Nov 4, 2026
Oracle

Oracle Cloud Infrastructure and Oracle's cloud applications.

FIPS 140-3NIST CMVP9 active FIPS 140-3 modules: #5345 Acme Packet VME; #5344 Acme Packet 4600 and Acme Packet 6350; #5343 Acme Packet 1100, Acme Packet 3900, Acme Packet 3950 and Acme Packet 4900; #5339 Oracle Linux 9 NSS Cryptographic Module; #5294 Oracle Linux 9 OpenSSL FIPS Provider; #5037 Oracle Linux 9 GnuTLS Cry

read Nov 4, 2026
SAP

ERP, SAP Business Technology Platform and Joule.

FIPS 140-3NIST CMVP1 active FIPS 140-3 module: #5093 SAP CommonCryptoLib Crypto Kernel

read Nov 4, 2026
Snowflake

The AI Data Cloud: warehouse, lakehouse and Cortex AI.

FIPS 140-3NIST CMVP1 active FIPS 140-3 module: #4924 Snowflake FIPS Provider

read Nov 4, 2026
Splunk

Search, observability and SIEM.

FIPS 140-3NIST CMVP and vendor page2 active FIPS 140-3 modules: #5444 Splunk FIPS Provider (based on the OpenSSL FIPS Provider); #5187 Splunk Cryptographic Module

read Nov 4, 2026
Zscaler

Zero trust exchange for internet and private access.

FIPS 140-3NIST CMVP1 active FIPS 140-3 module: #5080 Zscaler Java Crypto Module

read Nov 4, 2026
Box

Content cloud and Box AI.

FIPS 140-2Vendor page

read Sep 24, 2026
MongoDB

MongoDB Atlas, the document database cloud.

FIPS 140-2Vendor page

read Nov 4, 2026
About FIPS 140 validated

Evidence: active certificates in the NIST Cryptographic Module Validation Program list under the vendor's name, or the vendor page. Validation covers the named modules, not every product.

Issued by NIST CMVP. Also searched as FIPS 140-3 validated cloud providers, FIPS 140-2 validated.

Also in US government: FedRAMP, DoD Impact Level, GovRAMP (StateRAMP), TX-RAMP, CMMC 2.0, NIST SP 800-171, NIST SP 800-53, ITAR, CJIS, IRS Publication 1075, Section 508 / VPAT