{
	"offering": "CLEATUS (CLEATUS, Inc.), the FedRAMP offering deployed in AWS GovCloud (US)",
	"asOf": "2026-10-15",
	"fedrampId": "FR2700857472",
	"scopeStatement": "Every service below is a feature of the single CLEATUS platform. The FedRAMP Minimum Assessment Scope is the CLEATUS environment in AWS GovCloud (US), with the application at app.cloud.cleatgov.us and the API at api.cloud.cleatgov.us, in operation since 2026-08-17. Names match the public feature pages at cleat.ai/features.",
	"services": [
		{
			"name": "Opportunity Discovery",
			"description": "AI-matched federal opportunities based on the capture profile, with fit and compliance analysis",
			"inMinimumAssessmentScope": true,
			"scopeNote": "Delivered inside the FedRAMP environment",
			"securityCategory": "Moderate (FIPS 199), the same as the offering"
		},
		{
			"name": "Opportunity Finder and Advanced Contract Search",
			"description": "Search and filters over SAM.gov and other public procurement sources",
			"inMinimumAssessmentScope": true,
			"scopeNote": "Delivered inside the FedRAMP environment; source data is public",
			"securityCategory": "Moderate (FIPS 199), the same as the offering"
		},
		{
			"name": "Market Intelligence",
			"description": "Agency hierarchies, contracting officers, competitor award history, forecasts and recompete scoring",
			"inMinimumAssessmentScope": true,
			"scopeNote": "Delivered inside the FedRAMP environment",
			"securityCategory": "Moderate (FIPS 199), the same as the offering"
		},
		{
			"name": "Contract Breakdown and Document Hub",
			"description": "Automatic shredding of the solicitation package (base, amendments, attachments) into one breakdown; document storage",
			"inMinimumAssessmentScope": true,
			"scopeNote": "Delivered inside the FedRAMP environment; customer documents handled here",
			"securityCategory": "Moderate (FIPS 199), the same as the offering"
		},
		{
			"name": "Proposal Writer",
			"description": "Agentic proposal drafting: compliance matrices, win themes, outlines, structured volumes",
			"inMinimumAssessmentScope": true,
			"scopeNote": "Delivered inside the FedRAMP environment; customer proposal content handled here",
			"securityCategory": "Moderate (FIPS 199), the same as the offering"
		},
		{
			"name": "Pursuit Management and Teams",
			"description": "Shared pipeline from capture to award, roles, notifications, activity",
			"inMinimumAssessmentScope": true,
			"scopeNote": "Delivered inside the FedRAMP environment",
			"securityCategory": "Moderate (FIPS 199), the same as the offering"
		},
		{
			"name": "Contractor Teaming",
			"description": "Partner and supplier discovery and outreach",
			"inMinimumAssessmentScope": true,
			"scopeNote": "Delivered inside the FedRAMP environment",
			"securityCategory": "Moderate (FIPS 199), the same as the offering"
		},
		{
			"name": "GovCon Copilot (AI agents)",
			"description": "Conversational agents that plan, reason, and execute multi-step work with the platform tools",
			"inMinimumAssessmentScope": true,
			"scopeNote": "Delivered inside the FedRAMP environment; model calls go to the FedRAMP-authorized AI service configured for the environment",
			"securityCategory": "Moderate (FIPS 199), the same as the offering"
		},
		{
			"name": "AI Workflows",
			"description": "Event-driven automations for capture and BD operations (triage, summaries, reporting, reminders)",
			"inMinimumAssessmentScope": true,
			"scopeNote": "Delivered inside the FedRAMP environment",
			"securityCategory": "Moderate (FIPS 199), the same as the offering"
		},
		{
			"name": "API",
			"description": "Programmatic access to the platform for customer integrations",
			"inMinimumAssessmentScope": true,
			"scopeNote": "Delivered inside the FedRAMP environment",
			"securityCategory": "Moderate (FIPS 199), the same as the offering"
		}
	],
	"excluded": [
		{
			"name": "Commercial CLEATUS environment (cleat.ai/dashboard on commercial cloud)",
			"reason": "Separate environment for commercial customers; not part of the FedRAMP offering"
		},
		{
			"name": "Public marketing website (www.cleat.ai) and help center",
			"reason": "Public content only; no customer or federal data"
		},
		{
			"name": "Public status page (status.cleat.ai)",
			"reason": "Supporting public service; publishes availability, holds no customer data"
		},
		{
			"name": "Claude.ai and ChatGPT MCP connectors",
			"reason": "Not available in the GovCloud offering."
		},
		{
			"name": "Customer CRM integrations (HubSpot, Salesforce)",
			"reason": "Customer-owned systems that receive data by the customer's configuration"
		}
	],
	"serviceOverview": {
		"fedrampId": "FR2700857472",
		"fedrampMarketplace": {
			"listingUrl": "https://www.fedramp.gov/marketplace/products/FR2700857472/",
			"packageId": "FR2700857472",
			"listingRequestApproved": "2026-10-09",
			"status": "Not yet certified",
			"phase": "Initial Implementation",
			"certified": false,
			"certificationType": "20x",
			"certificationPath": "Program",
			"independentAssessorOnListing": "A-LIGN",
			"statusVerifiedAt": "2026-10-15",
			"statusNote": "FedRAMP approved the Marketplace listing request on 2026-10-09. The listing shows phase Initial Implementation, status Not yet certified, and 0 authorizations."
		},
		"independentAssessor": {
			"name": "A-LIGN",
			"role": "FedRAMP recognized third party assessment organization (3PAO) performing the independent assessment",
			"assessorId": "138665"
		},
		"customerResponsibilityDocumentation": [
			{
				"title": "Secure Configuration Guide (machine-readable)",
				"url": "https://trust.cleat.ai/secure-configuration-guide.json"
			},
			{
				"title": "Secure Configuration Guide (human-readable)",
				"url": "https://trust.cleat.ai/secure-configuration-guide.md"
			}
		],
		"review": {
			"reviewedAt": "2026-10-15",
			"reviewedBy": "GRC Admin",
			"basis": "Reviewed against the live FedRAMP Marketplace listing and the assessor of record after the last change to this service list and to the assessor. The service list and the assessor (A-LIGN) did not change since 2026-10-07."
		}
	},
	"publicationReview": {
		"status": "reviewed",
		"reviewedAt": "2026-10-15",
		"note": "The scope statement matches the signed SSP 1.1: AWS GovCloud (US), app.cloud.cleatgov.us and api.cloud.cleatgov.us, and no Model Context Protocol client access in GovCloud."
	}
}