{"generatedAt":"2026-10-18T00:00:00Z","provider":"CLEATUS","offering":"CLEATUS GovCloud","program":"FedRAMP 20x","certificationClass":"Class C","programCycle":"CR26","status":"pursuing","statusNote":"CLEATUS is pursuing FedRAMP 20x Class C certification. The offering information, public service list, Secure Configuration Guide, certification package overview, policy and procedure reference, significant change history, cryptographic module inventory, programmatic access instructions, and GovCloud release notes are published. Vulnerability activity is agency-only certification data: federal agencies request it through Request Access at https://trust.paramify.com/cleatus.","resources":[{"id":"certification-data-index","url":"https://trust.cleat.ai/certification-data-index.json","format":"application/json","description":"Index of the available publication pages and outstanding materials.","publicationStatus":"index"},{"id":"offering-json","url":"https://trust.cleat.ai/offering.json","format":"application/json","description":"Offering information (machine-readable)","publicationStatus":"available","sha256":"cc0d1e8262189e91ea8609bb522c579404cf6fb60ec0455f1cc7fea1cd8535b3"},{"id":"offering-md","url":"https://trust.cleat.ai/offering.md","format":"text/markdown","description":"Offering information (human-readable)","publicationStatus":"available","sha256":"9c1139d063201bf5ba01499d91f97bf79ee3e6ae114dbbbe27c94d206b383dfe"},{"id":"service-list-json","url":"https://trust.cleat.ai/service-list.json","format":"application/json","description":"Public service list (machine-readable)","publicationStatus":"available","sha256":"668dda23afc5735bd10ccd3e58b6c7c338e85008789e30fc0c68a9594465e9f4"},{"id":"service-list-md","url":"https://trust.cleat.ai/service-list.md","format":"text/markdown","description":"Public service list (human-readable)","publicationStatus":"available","sha256":"54fe75cde52668136308d5a7d3605b5f6ac153fef84d2848e967c4ab684d106a"},{"id":"secure-configuration-guide-json","url":"https://trust.cleat.ai/secure-configuration-guide.json","format":"application/json","description":"Secure Configuration Guide (machine-readable)","publicationStatus":"available","sha256":"85d41c857aa97d7b3fb4fde2b0b20e0749baab7c27c7d1a085dfc496177bd32f"},{"id":"secure-configuration-guide-md","url":"https://trust.cleat.ai/secure-configuration-guide.md","format":"text/markdown","description":"Secure Configuration Guide (human-readable)","publicationStatus":"available","sha256":"942cfceb4ec33b503ae68e3d1f2449956a8c42099f52e2f59eb6f1bd4edeb48a"},{"id":"scn-history-index","url":"https://trust.cleat.ai/scn-history-index.json","format":"application/json","description":"Actual significant change notification history: zero recorded transmissions. Rendered examples are not delivery evidence.","publicationStatus":"published","sha256":"59d8df1cc27ee920ebb5398af8ff95ccffff2ac796f7859b0136a86f3c3b3637"},{"id":"scn-history-index-md","url":"https://trust.cleat.ai/scn-history-index.md","format":"text/markdown","description":"Human-readable actual notification history.","publicationStatus":"published","sha256":"aeb717190efe1d151566556617f602087517ed32579a44bca655bcd414cf1979"},{"id":"certification-package-overview-json","url":"https://trust.cleat.ai/certification-package-overview.json","format":"application/json","description":"Certification Package Overview (CPO-CSO-OVR), valid against fedramp-certification-package-overview-schema-2026-06-24.","publicationStatus":"published","sha256":"146b7b74687f8fb0e8ef28091cec9e50ac2a8b11960a3267326e2f30de40d452"},{"id":"certification-package-overview-md","url":"https://trust.cleat.ai/certification-package-overview.md","format":"text/markdown","description":"Human-readable Certification Package Overview.","publicationStatus":"published","sha256":"628985002bab64614194ecee1a25483f6fccf86cbab43a6ae91bed9e2d9ad27e"},{"id":"publication-notes-md","url":"https://trust.cleat.ai/publication-notes.md","format":"text/markdown","description":"Publication scope, notification-history interpretation, package document access, quarterly certification progress (MKT-IIP-DCP), and FedRAMP Certification Reports (CDS-CSO-FRC).","publicationStatus":"published","sha256":"badbe519a4e8ce5248c2765848bc84509f09d1f15ba8f533c4c20b62c0de51e6"},{"id":"policy-procedure-reference-json","url":"https://trust.cleat.ai/policy-procedure-reference.json","format":"application/json","description":"Policy and procedure reference (CDS-CSO-IRP) for SSP Appendix C 1.1.","publicationStatus":"published","sha256":"b950625391e5bad4b8cb9b5b7d7f79e2439211f65821dba362c1158e7ac11b07"},{"id":"policy-procedure-reference-md","url":"https://trust.cleat.ai/policy-procedure-reference.md","format":"text/markdown","description":"Human-readable policy and procedure reference.","publicationStatus":"published","sha256":"8b759f30f8a729cfa04c5e6a32457830746509fa612195665cab75e7cfa31b06"},{"id":"cryptographic-modules-json","url":"https://trust.cleat.ai/cryptographic-modules.json","format":"application/json","description":"Cryptographic module inventory (CMU-CSO-CMD): the module, CMVP certificate, and validation status for each service. Rows without a public AWS certificate, and known gaps, are marked as such.","publicationStatus":"published","sha256":"8aea81711bd8bbce0581b11a8af491068b450e9a44e0ee1ce6fc6ed03b5fc7af"},{"id":"cryptographic-modules-md","url":"https://trust.cleat.ai/cryptographic-modules.md","format":"text/markdown","description":"Human-readable cryptographic module inventory.","publicationStatus":"published","sha256":"47a81759f2ff5235435e83e5e64eb17c45b662573d4d40b7b0f06de577c714ff"},{"id":"programmatic-access-json","url":"https://trust.cleat.ai/programmatic-access.json","format":"application/json","description":"Programmatic access (CDS-TRC-PAC): base URL, authentication, CORS, content types, and curl examples that retrieve every resource in this index.","publicationStatus":"published","sha256":"e23fe30d05f8908484af6630787d32ff5f051c523f0b0190c8b466c425dc6dce"},{"id":"programmatic-access-md","url":"https://trust.cleat.ai/programmatic-access.md","format":"text/markdown","description":"Human-readable programmatic access instructions.","publicationStatus":"published","sha256":"dec5f8281a046e5abd4118a58a0954b4027f5da6a0020f2ec4d1966b0175bfd0"},{"id":"release-notes-json","url":"https://trust.cleat.ai/release-notes.json","format":"application/json","description":"GovCloud release notes: the functionality and security changes of each production release (machine-readable).","publicationStatus":"published","sha256":"8b489d404a5beabb67afba2334edad93306bdc7a8afb0657790436b48057b05e"},{"id":"release-notes-md","url":"https://trust.cleat.ai/release-notes.md","format":"text/markdown","description":"GovCloud release notes (human-readable).","publicationStatus":"published","sha256":"299051e7648257e1c90c0715e353f474f90409eeb643f04a81c3ab508b2b8b52"}],"access":{"documentation":"https://trust.cleat.ai/programmatic-access.json","documentationMarkdown":"https://trust.cleat.ai/programmatic-access.md","method":"GET","authentication":"none","cors":"Access-Control-Allow-Origin: *","contentTypes":{"json":"application/json","markdown":"text/markdown; charset=utf-8"},"listing":"Every published resource appears in resources with its url and format. Download each url to retrieve all public certification data.","integrity":"Every resource except this index carries sha256, the lowercase hex SHA-256 digest of the exact bytes its url serves. The digest is computed from those bytes when the site is built. Verify a download with: curl -s <url> | shasum -a 256","baseUrl":"https://trust.cleat.ai/"},"publicationStatus":"incomplete","pendingMaterials":[{"id":"verified-reporting","title":"Reconcile the agency-only manual-register vulnerability reports with current scanner intake and recent remediation; complete restricted delivery evidence"},{"id":"trust-center","title":"Protected agency access and access-management evidence"}],"nextOngoingCertificationReport":"2026-11-25"}