Who holds which certification

Vendors64Certifications63

64 vendors · 63 certifications

Vendors and the certifications they hold

Cloud50 held
MicrosoftAzure, Microsoft 365 and the Azure OpenAI Service.SOC 2 · ISO 27001 · FedRAMP High · HIPAA · +46 more
Cloud43 held
OracleOracle Cloud Infrastructure and Oracle's cloud applications.SOC 2 · ISO 27001 · FedRAMP High · HIPAA · +39 more
Cloud41 held
AWSAmazon Web Services, the largest public cloud.SOC 2 · ISO 27001 · FedRAMP High · HIPAA · +37 more
Cloud31 held
Google CloudGoogle Cloud Platform, Workspace and Gemini for Government.SOC 2 · ISO 27001 · FedRAMP High · HIPAA · +27 more
Cloud31 held
IBMIBM Cloud, watsonx and IBM's government cloud services.SOC 2 · ISO 27001 · FedRAMP High · HIPAA · +27 more
Cloud29 held
Alibaba CloudThe cloud arm of Alibaba Group.SOC 2 Type II · ISO 27001 · HIPAA · GxP · +25 more
Business apps25 held
SAPERP, SAP Business Technology Platform and Joule.SOC 2 · ISO 27001 · FedRAMP Moderate · GxP · +21 more
Security and infra24 held
CrowdStrikeFalcon endpoint and cloud security platform.SOC 2 · ISO 27001 · FedRAMP High · HIPAA · +20 more
Business apps24 held
ServiceNowIT service management and the Now Platform.SOC 2 Type II · ISO 27001 · FedRAMP High · PCI DSS · +20 more
Data platforms22 held
PalantirFoundry, Gotham and the AI Platform (AIP).SOC 2 Type II · ISO 27001 · FedRAMP High · HIPAA · +18 more
Data platforms22 held
SnowflakeThe AI Data Cloud: warehouse, lakehouse and Cortex AI.SOC 2 Type II · ISO 27001 · FedRAMP High · HIPAA · +18 more
Data platforms21 held
MongoDBMongoDB Atlas, the document database cloud.SOC 2 · ISO 27001 · FedRAMP Moderate · HIPAA · +17 more
Cloud20 held
CloudflareEdge network, security and developer platform.SOC 2 Type II · ISO 27001 · FedRAMP High · HIPAA · +16 more
Business apps20 held
WorkdayHR and finance cloud applications.SOC 2 Type II · ISO 27001 · FedRAMP Moderate · HIPAA · +16 more
Data platforms19 held
DatabricksThe Data Intelligence Platform: lakehouse, Mosaic AI and Unity Catalog.SOC 2 Type II · ISO 27001 · FedRAMP High · HIPAA · +15 more
Business apps19 held
DropboxFile storage, sharing and Dash.SOC 2 · ISO 27001 · HIPAA · PCI DSS · +15 more
Business apps19 held
SlackWork messaging and GovSlack.SOC 2 · ISO 27001 · FedRAMP High · HIPAA · +15 more
Data platforms19 held
SplunkSearch, observability and SIEM.SOC 2 · ISO 27001 · FedRAMP High · HIPAA · +15 more
Dev tools16 held
AtlassianJira, Confluence and Rovo.SOC 2 · ISO 27001 · FedRAMP Moderate · HIPAA · +12 more
Business apps14 held
FigmaCollaborative design and Figma Make.SOC 2 Type II · ISO 27001 · FedRAMP Moderate · ISO 42001 · +10 more
Data platforms13 held
ElasticElasticsearch and Elastic Cloud for search, observability and security.SOC 2 · ISO 27001 · FedRAMP High · HIPAA · +9 more
Business apps12 held
AsanaWork management.SOC 2 Type II · ISO 27001 · FedRAMP Moderate · HIPAA · +8 more
Data platforms12 held
ConfluentData streaming on Apache Kafka and Flink.SOC 2 Type II · ISO 27001 · FedRAMP Moderate · PCI DSS · +8 more
Security and infra11 held
WizCloud security platform.SOC 2 Type II · ISO 27001 · FedRAMP High · HIPAA · +7 more
AI labs10 held
AnthropicClaude models, Claude Enterprise and the Claude API.SOC 2 Type II · ISO 27001 · HIPAA · ISO 42001 · +6 more
Business apps10 held
BoxContent cloud and Box AI.FedRAMP High · HIPAA · GxP · PCI DSS · +6 more
Cloud10 held
DigitalOceanDeveloper cloud: droplets, Kubernetes, managed databases, GPUs.SOC 2 Type II · ISO 27001 · PCI DSS · DPF · +6 more
Dev tools10 held
HashiCorpTerraform, Vault and HCP.SOC 2 · ISO 27001 · PCI DSS · FIPS 140-3 · +6 more
Data platforms10 held
New RelicObservability platform.SOC 2 · ISO 27001 · FedRAMP Moderate · HIPAA · +6 more
Dev tools9 held
GitLabThe DevSecOps platform.SOC 2 Type II · ISO 27001 · FedRAMP Moderate · DPF · +5 more
Business apps9 held
NotionConnected workspace for docs, wikis and projects.SOC 2 · ISO 27001 · HIPAA · C5 · +5 more
AI labs9 held
OpenAIChatGPT Enterprise and the OpenAI API platform.SOC 2 Type II · ISO 27001 · FedRAMP Moderate · HIPAA · +5 more
Data platforms8 held
dbt Labsdbt, the data transformation framework, and dbt Cloud.SOC 2 Type II · ISO 27001 · HIPAA · ISO 42001 · +4 more
Data platforms8 held
FivetranManaged data movement and ELT.SOC 2 · ISO 27001 · HIPAA · PCI DSS · +4 more
Dev tools8 held
PostmanAPI platform.SOC 2 Type II · ISO 27001 · HIPAA · PCI DSS · +4 more
Dev tools7 held
GitHubCode hosting, Actions and Copilot.SOC 2 Type II · ISO 27001 · FedRAMP Low · PCI DSS · +3 more
Security and infra7 held
TwilioCommunications APIs and Segment.SOC 2 Type II · ISO 27001 · HIPAA · PCI DSS · +3 more
Data platforms6 held
ClickHouseClickHouse Cloud, the column-oriented analytics database.SOC 2 Type II · ISO 27001 · HIPAA · PCI DSS · +2 more
Business apps6 held
SalesforceCRM, Agentforce, Tableau and MuleSoft.FedRAMP High · ISO 42001 · DPF · CSA STAR L1 · +2 more
Dev tools6 held
VercelFrontend cloud and the AI SDK.SOC 2 Type II · ISO 27001 · HIPAA · PCI DSS · +2 more
AI labs5 held
AI21 LabsJamba models and enterprise AI systems.SOC 2 Type II · ISO 27001 · ISO 42001 · +2 more
AI labs5 held
CohereEnterprise language models: Command, Embed and Rerank.SOC 2 Type II · ISO 27001 · HIPAA · ISO 42001 · +1 more
Data platforms5 held
DatadogObservability and security monitoring in the cloud.FedRAMP High · HIPAA · DPF · CSA STAR L1 · +1 more
Security and infra5 held
OktaWorkforce and customer identity.FedRAMP High · DPF · CSA STAR L2 · +2 more
Security and infra5 held
PagerDutyIncident response and operations cloud.SOC 2 Type II · ISO 27001 · FedRAMP Low · PCI DSS · +1 more
AI labs5 held
PerplexityAnswer engine, Enterprise Pro and the Sonar API.SOC 2 Type II · ISO 27001 · FedRAMP Low · HIPAA · +1 more
AI labs5 held
Scale AIData labeling, evaluation and AI for government.SOC 2 Type II · ISO 27001 · FedRAMP High · DoD IL4 · +1 more
Dev tools5 held
SnykDeveloper security: code, dependencies, containers.SOC 2 Type II · ISO 27001 · FedRAMP Moderate · PCI DSS · +1 more
Security and infra5 held
StripePayments infrastructure.SOC 2 Type II · DPF · SOC 1 · +2 more
Security and infra5 held
ZscalerZero trust exchange for internet and private access.FedRAMP High · FIPS 140-3 · DPF · CSA STAR L2 · +1 more
Data platforms4 held
Cockroach LabsCockroachDB, distributed SQL.SOC 2 · ISO 27001 · HIPAA · DPF
AI labs4 held
Mistral AIOpen and commercial models from Paris, and Le Chat.SOC 2 Type II · ISO 27001 · HIPAA · ISO 27701
Business apps4 held
ZoomVideo meetings, Zoom Workplace and Zoom for Government.FedRAMP Moderate · DPF · CSA STAR L2 · +1 more
Data platforms3 held
InformaticaIntelligent Data Management Cloud for integration and governance.FedRAMP Moderate · DPF · CSA STAR L1
Data platforms3 held
SupabasePostgres development platform.SOC 2 Type II · ISO 27001 · HIPAA
Cloud2 held
AkamaiContent delivery, security and Akamai Cloud (Linode).FedRAMP Moderate · DPF
AI labs2 held
GroqLPU inference chips and GroqCloud.SOC 2 Type II · HIPAA
Dev tools2 held
JFrogArtifactory and the software supply chain platform.DPF · CSA STAR L1
Data platforms2 held
PineconeManaged vector database.SOC 2 Type II · HIPAA
AI labs2 held
Together AIInference and training cloud for open models.SOC 2 Type II · ISO 27001
AI labs1 held
Hugging FaceThe model hub, Inference Endpoints and Enterprise Hub.SOC 2 Type II
Data platforms1 held
RedisRedis Cloud, the in-memory database service.CSA STAR L2
AI labs1 held
SpaceXAIGrok models and the xAI API.CSA STAR L1
Data platforms1 held
TeradataTeradata VantageCloud analytics platform.DPF

Found in official registries, not reviewed yet

Companies in the fru.dev registry that FedRAMP or GovRAMP lists, matched by exact company name each Wednesday. Each stays Unverified until it is checked and added to the vendors above.

CompanyListing
Abnormal AIListed as Abnormal AIFedRAMP Authorized, moderate Unverified
Abnormal AIListed as Abnormal AI, Inc.GovRAMP Authorized, moderate Unverified
AccelaListed as Accela Inc.GovRAMP In process Unverified
Accenture Federal ServicesListed as Accenture Federal ServicesFedRAMP Authorized, moderate Unverified
AlationListed as AlationFedRAMP In process, moderate Unverified
Barracuda NetworksListed as Barracuda NetworksGovRAMP In process Unverified
Bentley SystemsListed as Bentley Systems, IncorporatedFedRAMP Authorized, moderate Unverified
Bentley SystemsListed as Bentley SystemsGovRAMP Authorized, moderate Unverified
BlackbaudListed as Blackbaud Inc.GovRAMP In process Unverified
BlackBerryListed as BlackBerryFedRAMP Authorized, high Unverified
BoomiListed as BoomiFedRAMP Authorized, moderate Unverified
BoomiListed as BoomiGovRAMP Authorized, moderate Unverified
CommVault SystemsListed as Commvault Systems, Inc.FedRAMP Ready, moderate Unverified
CommVault SystemsListed as Commvault Systems, Inc.FedRAMP Authorized, high Unverified
CommVault SystemsListed as Commvault Systems, Inc.GovRAMP Authorized, high Unverified
CopadoListed as CopadoFedRAMP Authorized, moderate Unverified
CopadoListed as CopadoGovRAMP In process Unverified
DataRobotListed as DataRobotFedRAMP Ready, high Unverified
DeloitteListed as DeloitteFedRAMP Authorized, moderate Unverified
DeltekListed as Deltek, Inc.FedRAMP Ready, moderate Unverified
DrataListed as DrataFedRAMP Authorized, low Unverified
DruvaListed as Druva, Inc.FedRAMP Authorized, moderate Unverified
DruvaListed as Druva Inc.GovRAMP Authorized, moderate Unverified
Eightfold AIListed as Eightfold AI Inc.FedRAMP Authorized, moderate Unverified
EquifaxListed as Equifax, Inc.GovRAMP In process Unverified
EricssonListed as EricssonFedRAMP Ready, high Unverified
Ernst & YoungListed as Ernst & Young LLPFedRAMP Authorized, moderate Unverified
EsriListed as ESRIFedRAMP Authorized, moderate Unverified
Flock SafetyListed as Flock SafetyFedRAMP Authorized, low Unverified
HackerOneListed as HackerOneFedRAMP Authorized, low Unverified
IcertisListed as Icertis Inc.FedRAMP Ready, moderate Unverified
IllumioListed as Illumio, Inc.FedRAMP Authorized, moderate Unverified
Iron MountainListed as Iron MountainFedRAMP Authorized, moderate Unverified
IroncladListed as Ironclad Inc.FedRAMP Ready, moderate Unverified
KeyfactorListed as KeyfactorFedRAMP Authorized, moderate Unverified
KnowBe4Listed as KnowBe4, Inc.FedRAMP Authorized, moderate Unverified
LaunchDarklyListed as LaunchDarklyFedRAMP Authorized, moderate Unverified
LexisNexis Risk SolutionsListed as LexisNexis Risk SolutionsFedRAMP In process, moderate Unverified
LogicMonitorListed as LogicMonitorFedRAMP Authorized, moderate Unverified
Lucid SoftwareListed as Lucid Software, Inc.FedRAMP Authorized, moderate Unverified
MaximusListed as MAXIMUS Inc.FedRAMP Authorized, moderate Unverified
Menlo SecurityListed as Menlo SecurityFedRAMP Authorized, moderate Unverified
MicroStrategyListed as MicroStrategyFedRAMP Authorized, moderate Unverified
MimecastListed as MimecastFedRAMP Authorized, moderate Unverified
Motorola SolutionsListed as Motorola SolutionsFedRAMP Authorized, high Unverified
Motorola SolutionsListed as Motorola SolutionsGovRAMP Authorized, high Unverified
Motorola SolutionsListed as Motorola SolutionsGovRAMP In process Unverified
NetskopeListed as Netskope, Inc.FedRAMP Authorized, high Unverified
NinjaOneListed as NinjaOneFedRAMP Authorized, moderate Unverified
NinjaOneListed as NinjaOneFedRAMP Ready, high Unverified
NinjaOneListed as NinjaOne LLCGovRAMP Authorized, moderate Unverified
Nozomi NetworksListed as Nozomi Networks Inc.FedRAMP In process, moderate Unverified
OneSpanListed as OneSpan Inc.FedRAMP Authorized, moderate Unverified
Open Text CorporationListed as OpenTextFedRAMP Authorized, moderate Unverified
Orca SecurityListed as Orca SecurityFedRAMP Authorized, moderate Unverified
Orca SecurityListed as Orca Security, Inc.GovRAMP Authorized, moderate Unverified
PegasystemsListed as PegasystemsFedRAMP Authorized, high Unverified
PegasystemsListed as PEGA Systems Inc.GovRAMP Authorized, high Unverified
PeratonListed as Peraton CorporationFedRAMP Authorized, moderate Unverified
Pitney BowesListed as Pitney BowesFedRAMP Authorized, moderate Unverified
Pitney BowesListed as Pitney BowesGovRAMP Authorized, moderate Unverified
Proofpoint, Inc.Listed as Proofpoint, Inc.FedRAMP Authorized, moderate Unverified
Proofpoint, Inc.Listed as Proofpoint, Inc.GovRAMP Authorized, moderate Unverified
QuestionProListed as QuestionPro, Inc.FedRAMP In process, moderate Unverified
Rackspace TechnologyListed as Rackspace TechnologyGovRAMP Authorized, moderate Unverified
RampListed as RampFedRAMP Ready, moderate Unverified
RampListed as RampGovRAMP Ready Unverified
Riverbed TechnologyListed as Riverbed TechnologyFedRAMP Authorized, high Unverified
RubrikListed as RubrikFedRAMP Authorized, moderate Unverified
RubrikListed as RubrikGovRAMP Authorized, moderate Unverified
SandboxAQListed as SandboxAQFedRAMP Ready, moderate Unverified
SaviyntListed as SaviyntFedRAMP In process, high Unverified
SaviyntListed as Saviynt, Inc.FedRAMP Authorized, moderate Unverified
SkillsoftListed as SkillsoftFedRAMP Authorized, moderate Unverified
SmartsheetListed as SmartsheetFedRAMP Authorized, moderate Unverified
SocureListed as Socure, Inc.FedRAMP Authorized, moderate Unverified
SocureListed as Socure Inc.GovRAMP Authorized, moderate Unverified
SprinklrListed as Sprinklr, Inc.FedRAMP Authorized, low Unverified
Sumo LogicListed as Sumo LogicFedRAMP Authorized, moderate Unverified
TalkdeskListed as TalkdeskFedRAMP Authorized, moderate Unverified
TalkdeskListed as TalkdeskGovRAMP In process Unverified
TaniumListed as TaniumFedRAMP Authorized, moderate Unverified
TaniumListed as Tanium, Inc.GovRAMP Authorized, moderate Unverified
TelosListed as Telos CorporationFedRAMP Authorized, high Unverified
TelosListed as Telos CorporationGovRAMP Authorized, high Unverified
Thomson ReutersListed as Thomson ReutersFedRAMP In process, moderate Unverified
TrellixListed as TrellixFedRAMP Authorized, moderate Unverified
Trend Micro IncorporatedListed as Trend Micro Inc.FedRAMP Authorized, moderate Unverified
Trend Micro IncorporatedListed as Trend MicroGovRAMP Authorized, moderate Unverified
VantaListed as VantaFedRAMP Authorized, low Unverified
VeracodeListed as VeracodeFedRAMP Authorized, moderate Unverified
VeracodeListed as VeracodeGovRAMP Authorized, moderate Unverified
AdobeListed as AdobeFedRAMP Authorized, low Unverified
AutodeskListed as AutodeskFedRAMP Authorized, moderate Unverified
CiscoListed as CiscoFedRAMP Authorized, moderate Unverified
ClouderaListed as ClouderaGovRAMP Authorized, moderate Unverified
CyeraListed as CyeraFedRAMP In process, high Unverified
CyeraListed as CyeraGovRAMP In process Unverified
DocusignListed as DocuSignFedRAMP Authorized, moderate Unverified
DocusignListed as DocuSignGovRAMP Authorized, moderate Unverified
DynatraceListed as DynatraceFedRAMP Authorized, moderate Unverified
FortinetListed as FortinetGovRAMP Authorized, moderate Unverified
Hewlett Packard EnterpriseListed as Hewlett Packard Enterprise (HPE)GovRAMP Authorized, moderate Unverified
Manhattan AssociatesListed as Manhattan Associates, Inc.FedRAMP Authorized, moderate Unverified
MoveWorksListed as MoveworksFedRAMP Authorized, moderate Unverified
Palo Alto NetworksListed as Palo Alto Networks, Inc.FedRAMP Authorized, high Unverified
Palo Alto NetworksListed as Palo Alto NetworksGovRAMP Authorized, high Unverified
QualysListed as QualysFedRAMP Authorized, moderate Unverified
Rapid7Listed as Rapid7FedRAMP Authorized, moderate Unverified
Rapid7Listed as Rapid7GovRAMP Authorized, moderate Unverified
Red HatListed as Red HatFedRAMP Authorized, high Unverified
SamsaraListed as SamsaraGovRAMP In process Unverified
SentinelOneListed as SentinelOneFedRAMP Authorized, high Unverified
SentinelOneListed as SentinelOneGovRAMP Authorized, high Unverified
Spectro CloudListed as Spectro CloudFedRAMP Authorized, low Unverified
Spectro CloudListed as Spectro CloudFedRAMP In process, moderate Unverified
Spectro CloudListed as Spectro Cloud, Inc.GovRAMP Authorized, moderate Unverified
TenableListed as TenableFedRAMP Authorized, moderate Unverified
TenableListed as TenableGovRAMP Authorized, moderate Unverified
Tyler TechnologiesListed as Tyler TechnologiesGovRAMP In process Unverified
UiPathListed as UiPathFedRAMP Authorized, moderate Unverified
UiPathListed as UiPathGovRAMP Authorized, moderate Unverified
VaronisListed as VaronisFedRAMP Authorized, moderate Unverified
VaronisListed as VaronisGovRAMP Authorized, moderate Unverified
WorkivaListed as WorkivaFedRAMP Authorized, moderate Unverified
WorkivaListed as Workiva Inc.GovRAMP Authorized, moderate Unverified