# CLEATUS public offering information - **schema:** CLEATUS public offering information - **status:** Pre-certification. CLEATUS is pursuing FedRAMP 20x Class C certification and is not FedRAMP certified. The FedRAMP Marketplace lists CLEATUS (FR2700857472) in phase Initial Implementation with status Not yet certified. - **as Of:** 2026-10-17 - **cloud Service Offering:** CLEATUS - **fedramp Id:** FR2700857472 ## fedramp Marketplace - **listing Url:** https://www.fedramp.gov/marketplace/products/FR2700857472/ - **package Id:** FR2700857472 - **listing Request Approved:** 2026-10-09 - **status:** Not yet certified - **phase:** Initial Implementation - **certified:** false - **certification Type:** 20x - **certification Path:** Program - **independent Assessor On Listing:** A-LIGN - **status Verified At:** 2026-10-15 - **status Note:** FedRAMP approved the Marketplace listing request on 2026-10-09. The listing shows phase Initial Implementation, status Not yet certified, and 0 authorizations. - **provider:** CLEATUS, Inc. - **service Model:** SaaS - **deployment Model:** Public Cloud - **security Contact:** security@cleat.ai - **product Website:** https://cleat.ai - **trust Center:** https://trust.paramify.com/cleatus ## ongoing Certification Reports - **cadence:** every 3 months on the 25th of the second month of each quarter (25 Feb, 25 May, 25 Aug, 25 Nov) - **latest Report:** Not published - **next Report Target Date:** 2026-11-25 ## quarterly Reviews - **next Review Target Date:** 2026-12-02 - **registration:** published with each report - **feedback Channel:** security@cleat.ai, subject prefix \[OCR feedback\] - **maintained By:** The GRC Admin maintains this file. - **revision:** 9 ## formats - **machine Readable:** https://trust.cleat.ai/offering.json - **human Readable:** https://trust.cleat.ai/offering.md - **consistency Check:** Automated check that each Markdown file matches its JSON source - **business Category:** Software as a Service: government contracting intelligence, proposal automation, and AI agents for federal contractors - **uei Number:** L6FVP55CMYA6 ## sales Contact - **email:** info@cleat.ai - **web:** https://cleat.ai/contact ## security Contact Detail - **email:** security@cleat.ai - **security Txt:** https://cleat.ai/.well-known/security.txt - **product Logo:** https://www.cleat.ai/images/logo/logo-cleatus-small-500.png - **service Description:** CLEATUS is a multi-tenant SaaS platform for government contractors: opportunity discovery and market intelligence, solicitation analysis, agentic proposal drafting, pipeline collaboration, and AI workflows, delivered through a web application and an API. ## services ### Item 1 - **name:** CLEATUS platform (web application, API, AI workflows and agents) - **security Category:** as stated in the FedRAMP 20x Class C certification; confirmed at certification - **separately Adoptable:** false - **secure Configuration Guidance:** https://trust.cleat.ai/secure-configuration-guide.md - **certification Package Maintenance:** Class C: the GRC Admin reviews and updates the FedRAMP Certification Package at least every 2 weeks, and each update sets lastUpdated in the Certification Package Overview. A weekly scheduled check re-verifies the published files and fails when lastUpdated is more than 14 days old. This cadence is separate from the Ongoing Certification Reports, which are published every 3 months. ## documentation Overview - Public FedRAMP Certification Data (this file and its human-readable rendering) - Ongoing Certification Reports every 3 months with snapshots of the certification data - Quarterly Review registration, agendas, and recordings for necessary parties - Policies and procedures reference with summaries - Public status page with availability history and incidents (https://status.cleat.ai) - FedRAMP Certification Reports as received from FedRAMP - Key Security Indicator validation results (in the trust center for necessary parties) ## trust Center Landing Page - **url:** https://trust.paramify.com/cleatus - **access Instructions:** Public deliverables download without an account. For restricted deliverables, select Request Access in the trust center and sign in. CLEATUS reviews each request. - **independent Assessment Service:** A-LIGN ## package Overview ### responsible Official - **name:** Mehmet Yigit Guney - **title:** Chief Executive Officer - **email:** yigit@cleat.ai - **phone:** 855-961-5108 - **version:** 1.0.5 - **last Updated:** 2026-10-17T00:00:00Z - **update Source:** CR26 Certification Package Overview at https://trust.cleat.ai/certification-package-overview.json. ## independent Assessment - **status:** In progress. A-LIGN started the 20x Class C assessment on 2026-09-08. Assessment completion and the assessor-supplied summary are not yet published. - **assessor:** A-LIGN - **assessment Date:** Not published - **overall Summary:** supplied verbatim by the assessor under IVV-IAS-OSA and inserted here unmodified when received; the SHA-256 of the assessor-supplied text is recorded in overallSummarySha256 - **overall Summary Sha256:** Not published ## publication Review - **status:** current - **source Revision:** 9 - **source As Of:** 2026-10-17 ### unconfirmed Fields - **note:** The UEI (L6FVP55CMYA6), FedRAMP ID (FR2700857472), FedRAMP Marketplace status, independent assessor (A-LIGN), responsible official, service security categories, and next Quarterly Review date are published. - **assessment Source:** Paramify VDR activity report dated 2026-09-07 records A-LIGN engagement under a statement of work executed 2026-07-31. A-LIGN email of 2026-08-19 set the 20x Class C assessment start at 2026-09-08, and CLEATUS confirmed it on 2026-08-20. A-LIGN issued its KSI Assessment Report v3.2 on 2026-09-18 and agreed on 2026-10-09 to re-test updated controls. ### pending External Identifiers