{
	"schema": "CLEATUS public offering information",
	"status": "Pre-certification. CLEATUS is pursuing FedRAMP 20x Class C certification and is not FedRAMP certified. The FedRAMP Marketplace lists CLEATUS (FR2700857472) in phase Initial Implementation with status Not yet certified.",
	"asOf": "2026-10-17",
	"cloudServiceOffering": "CLEATUS",
	"fedrampId": "FR2700857472",
	"fedrampMarketplace": {
		"listingUrl": "https://www.fedramp.gov/marketplace/products/FR2700857472/",
		"packageId": "FR2700857472",
		"listingRequestApproved": "2026-10-09",
		"status": "Not yet certified",
		"phase": "Initial Implementation",
		"certified": false,
		"certificationType": "20x",
		"certificationPath": "Program",
		"independentAssessorOnListing": "A-LIGN",
		"statusVerifiedAt": "2026-10-15",
		"statusNote": "FedRAMP approved the Marketplace listing request on 2026-10-09. The listing shows phase Initial Implementation, status Not yet certified, and 0 authorizations."
	},
	"provider": "CLEATUS, Inc.",
	"serviceModel": "SaaS",
	"deploymentModel": "Public Cloud",
	"securityContact": "security@cleat.ai",
	"productWebsite": "https://cleat.ai",
	"trustCenter": "https://trust.paramify.com/cleatus",
	"ongoingCertificationReports": {
		"cadence": "every 3 months on the 25th of the second month of each quarter (25 Feb, 25 May, 25 Aug, 25 Nov)",
		"latestReport": null,
		"nextReportTargetDate": "2026-11-25"
	},
	"quarterlyReviews": {
		"nextReviewTargetDate": "2026-12-02",
		"registration": "published with each report"
	},
	"feedbackChannel": "security@cleat.ai, subject prefix [OCR feedback]",
	"maintainedBy": "The GRC Admin maintains this file.",
	"revision": 9,
	"formats": {
		"machineReadable": "https://trust.cleat.ai/offering.json",
		"humanReadable": "https://trust.cleat.ai/offering.md",
		"consistencyCheck": "Automated check that each Markdown file matches its JSON source"
	},
	"businessCategory": "Software as a Service: government contracting intelligence, proposal automation, and AI agents for federal contractors",
	"ueiNumber": "L6FVP55CMYA6",
	"salesContact": {
		"email": "info@cleat.ai",
		"web": "https://cleat.ai/contact"
	},
	"securityContactDetail": {
		"email": "security@cleat.ai",
		"securityTxt": "https://cleat.ai/.well-known/security.txt"
	},
	"productLogo": "https://www.cleat.ai/images/logo/logo-cleatus-small-500.png",
	"serviceDescription": "CLEATUS is a multi-tenant SaaS platform for government contractors: opportunity discovery and market intelligence, solicitation analysis, agentic proposal drafting, pipeline collaboration, and AI workflows, delivered through a web application and an API.",
	"services": [
		{
			"name": "CLEATUS platform (web application, API, AI workflows and agents)",
			"securityCategory": "as stated in the FedRAMP 20x Class C certification; confirmed at certification",
			"separatelyAdoptable": false
		}
	],
	"secureConfigurationGuidance": "https://trust.cleat.ai/secure-configuration-guide.md",
	"certificationPackageMaintenance": "Class C: the GRC Admin reviews and updates the FedRAMP Certification Package at least every 2 weeks, and each update sets lastUpdated in the Certification Package Overview. A weekly scheduled check re-verifies the published files and fails when lastUpdated is more than 14 days old. This cadence is separate from the Ongoing Certification Reports, which are published every 3 months.",
	"documentationOverview": [
		"Public FedRAMP Certification Data (this file and its human-readable rendering)",
		"Ongoing Certification Reports every 3 months with snapshots of the certification data",
		"Quarterly Review registration, agendas, and recordings for necessary parties",
		"Policies and procedures reference with summaries",
		"Public status page with availability history and incidents (https://status.cleat.ai)",
		"FedRAMP Certification Reports as received from FedRAMP",
		"Key Security Indicator validation results (in the trust center for necessary parties)"
	],
	"trustCenterLandingPage": {
		"url": "https://trust.paramify.com/cleatus",
		"accessInstructions": "Public deliverables download without an account. For restricted deliverables, select Request Access in the trust center and sign in. CLEATUS reviews each request."
	},
	"independentAssessmentService": "A-LIGN",
	"packageOverview": {
		"responsibleOfficial": {
			"name": "Mehmet Yigit Guney",
			"title": "Chief Executive Officer",
			"email": "yigit@cleat.ai",
			"phone": "855-961-5108"
		},
		"version": "1.0.5",
		"lastUpdated": "2026-10-17T00:00:00Z",
		"updateSource": "CR26 Certification Package Overview at https://trust.cleat.ai/certification-package-overview.json."
	},
	"independentAssessment": {
		"status": "In progress. A-LIGN started the 20x Class C assessment on 2026-09-08. Assessment completion and the assessor-supplied summary are not yet published.",
		"assessor": "A-LIGN",
		"assessmentDate": null,
		"overallSummary": "supplied verbatim by the assessor under IVV-IAS-OSA and inserted here unmodified when received; the SHA-256 of the assessor-supplied text is recorded in overallSummarySha256",
		"overallSummarySha256": null
	},
	"publicationReview": {
		"status": "current",
		"sourceRevision": 9,
		"sourceAsOf": "2026-10-17",
		"unconfirmedFields": [],
		"note": "The UEI (L6FVP55CMYA6), FedRAMP ID (FR2700857472), FedRAMP Marketplace status, independent assessor (A-LIGN), responsible official, service security categories, and next Quarterly Review date are published.",
		"assessmentSource": "Paramify VDR activity report dated 2026-09-07 records A-LIGN engagement under a statement of work executed 2026-07-31. A-LIGN email of 2026-08-19 set the 20x Class C assessment start at 2026-09-08, and CLEATUS confirmed it on 2026-08-20. A-LIGN issued its KSI Assessment Report v3.2 on 2026-09-18 and agreed on 2026-10-09 to re-test updated controls.",
		"pendingExternalIdentifiers": []
	}
}