FedRAMP
Working toward FedRAMP 20x Class A. not certified yet, this is where we track it.
Status
| SOC 2 Type I | 2026-07-31 | Done |
| SOC 2 Type II observation period | 2026-06-17 to 2026-09-17 | Done |
| SOC 2 Type II report | 2026-11 | Expected |
| FedRAMP Marketplace listing request | 2026-11 | Planned |
| FedRAMP 20x Class A application | After listing | Planned |
| Class B or C independent assessment | Within 2 years of listing | Planned |
| Next ongoing certification report | 2027-01-31 | Quarterly |
Scope
Certiv watches what AI agents do on work devices. Scout on the device sends us what the agent did. we apply your rules. not FedRAMP certified yet.
Boundary - our hosted service in us-west-2, plus Bedrock model calls that can run in us-east-1 or us-east-2. Scout on your devices doesnt count. the update and config path to Scout does.
agencies use it directly. anything Scout forwards to us counts as federal data.
| Provider | Certiv, Inc. |
| Service | Certiv AI Agent Assurance Platform |
| Certification type | FedRAMP 20x, Class A (in progress) |
| Service model | SaaS |
| Deployment model | Public Cloud |
| Business category | Artificial Intelligence (AI), Cybersecurity & Risk Management |
| Hosting | AWS us-west-2, Bedrock model calls in us-east-1 and us-east-2 |
Services in the offering
| Certiv Console | app.certiv.ai - policies, devices, sessions, findings, approvals. proposed Moderate. |
| Policy decision API | api.certiv.ai. takes agent traffic from Scout, answers allow, block, rewrite or pause. proposed Moderate. |
| Human approvals | holds a risky agent action till someone allows or denies it. proposed Moderate. |
| Agent discovery and inventory | list of AI agents, MCP servers and local models seen on enrolled devices. proposed Moderate. |
| Scout management | enrolls Scout devices, sends rules, settings, update and disable commands, takes in health data. proposed Moderate. |
Documents
| Trust center | trust.certiv.ai (request access) |
Certiv Trust Center. security overview, subprocessors, compliance status. SOC 2 report and FedRAMP materials on request. Select Request Access on https://trust.certiv.ai and use your agency email address, or email security@certiv.ai with your name, agency and role. |
| Machine-readable data | certification-package-overview.json |
FedRAMP certification package overview, schema version 2026-06-24. |
| Secure configuration | docs.certiv.ai (sign in) |
admin docs - org settings, SSO, MFA, Scout rollout. Sign in with your Certiv console account. Agencies evaluating Certiv can email security@certiv.ai for access. |
Contacts
| Security and FedRAMP | security@certiv.ai |
| Sales | hello@certiv.ai |