# October 10 publication scope

The notification history records zero actual transmissions through September 8, 2026.
Rendered examples are distinguished from delivered notifications.
This does not mean that no changes occurred or decide whether a notification was required.

The package overview is the CR26 Certification Package Overview, valid against FedRAMP's 2026-06-24 schema.
Request restricted package materials through Request Access at https://trust.paramify.com/cleatus.

The legal provider is CLEATUS, Inc. The first Ongoing Certification Report is due November 25, 2026.
The responsible official is the Chief Executive Officer. Each service carries the offering's Moderate security category.
The Unique Entity Identifier is L6FVP55CMYA6. The FedRAMP ID is FR2700857472.
The FedRAMP Marketplace lists CLEATUS in phase Initial Implementation with status Not yet certified: https://www.fedramp.gov/marketplace/products/FR2700857472/
The independent assessor is A-LIGN.
Vulnerability activity is agency-only certification data and is not published here.
Federal agencies can request it through Request Access at https://trust.paramify.com/cleatus.

CLEATUS is pursuing certification. Publication does not establish completed controls or an assessment result.

## FedRAMP certification reports

CLEATUS publishes each FedRAMP Certification Report that FedRAMP issues, unmodified, with this certification data within 2 weeks of receipt.
Each report is listed here with its title, receipt date, publication date, and SHA-256.
Restricted reports are available to federal agencies through Request Access at https://trust.paramify.com/cleatus.
CLEATUS notifies FedRAMP and each agency customer by email from security@cleat.ai when a report is published.

As of October 17, 2026, FedRAMP has issued no Certification Report for CLEATUS.

## Certification progress

Updated October 17, 2026. CLEATUS refreshes this section at least once per quarter, by March 6, June 6, September 6, and December 6.
The next update is due by December 6, 2026.

Goal: FedRAMP 20x Class C certification of the CLEATUS GovCloud offering, FedRAMP ID FR2700857472.

| Milestone | Target | Status |
| --- | --- | --- |
| AWS GovCloud (US) environment in two regions | August 25, 2026 | Done |
| Public certification data and trust center published | October 31, 2026 | Done, September 8, 2026 |
| Policies and procedures (SSP Appendix C 1.1) approved | October 31, 2026 | Done, September 29, 2026 |
| Unique Entity Identifier obtained | October 31, 2026 | Done, L6FVP55CMYA6 |
| Independent assessor engaged | November 30, 2026 | Done, A-LIGN |
| FedRAMP Marketplace listing requested through the FedRAMP form | October 31, 2026 | Done, requested October 8, listed October 9, 2026 |
| First Ongoing Certification Report | November 25, 2026 | Planned |
| Quarterly review | December 2, 2026 | Planned |
| Independent 20x Class C assessment by A-LIGN | Started September 8, 2026 | In progress |
| Assessment results submitted to FedRAMP | March 31, 2027 | Planned |

Measured progress: 6 of 10 milestones are done. 1 is in progress. The remaining 3 are planned.