Skip to main content

Government Compliance Frameworks

If you are selecting a service for a public-sector agency, or supplying services under a government contract, identify the program named by that agency's procurement and compliance requirements. The relevant program and approval level depend on the jurisdiction, agency, service, and information involved. Government-related work does not create a single approval requirement shared by every public-sector customer.

For example, TX-RAMP's eligibility guidanceExternal LinkThis link leads to an external website and will open in a new tab identifies covered Texas state agencies, institutions of higher education, and public community colleges, as well as the cloud services within its scope. Check the applicable program's rules for exclusions and recognition of equivalent certifications, then confirm the status required for your intended use. Files.com's existing FedRAMP certification and our willingness to pursue another program are separate from approval under that program.

StateRAMP and TX-RAMP are security authorization programs for public-sector agencies and the cloud service providers who support them. TX-RAMP is specific to Texas state agencies and public higher education institutions and requires their vendors to meet state-defined security standards.

Files.com Status and Sponsorship

Files.com holds the FedRAMP 20x Class A Certification described in its Certification Package. Files.com is not currently authorized under StateRAMP or TX-RAMP. We welcome a sponsoring government agency that wants to pursue approval under its applicable program; an intention to pursue a listing is separate from an existing authorization.

This page explains that sponsorship approach for local and state-specific frameworks beyond our existing certification. Each program has its own scope and requirements, so one listing must not be treated as approval under another.

Our mission is to eliminate shadow IT. Every file transfer and integration belongs in an approved, secure, and accountable environment. That philosophy carries directly into how we engage with government compliance and whitelist frameworks: StateRAMP and Texas TX-RAMP at the state level, and their counterparts in other U.S. states and international jurisdictions.

We Welcome Scrutiny

We treat official listing and accreditation programs as a chance to demonstrate the security posture we already operate under. Our platform meets or exceeds the technical and operational standards expected in government contexts, and the transparency and independent validation that these frameworks bring is something we want, not something we tolerate.

Our Commitment: Partnership and Compliance

For any government agency or public-sector organization, our stance is clear:

  • We do not want to be shadow IT anywhere.
  • We want to be an approved and visible vendor under any relevant certification or whitelist framework.
  • We will work with a sponsoring agency to achieve accreditation under your specific program.

StateRAMP and Texas TX-RAMP each provide a path for qualified vendors to achieve provisional approval and Authorization to Operate (ATO) when sponsored by an agency. When that path is open to us, we will collaborate with the sponsoring agency to complete it.

Why Sponsorship Matters

Some organizations engage us as a subcontractor under a larger integrator or prime contractor. In those cases, sponsorship for inclusion in a government framework typically falls to another entity up the chain.

We encourage that sponsorship. Recognition as an approved vendor benefits the agency, the contractors involved, and the citizens those agencies serve, because it puts a layer of transparency and accountability around data operations that would otherwise be invisible.

A Growing Landscape

Regional and sector-specific frameworks at the state, county, national, and cross-border level continue to expand. We see that as a positive trend toward standardized cloud security expectations. As each new framework emerges, our position stays the same.

We want to work with you to get on the list. If your agency or program requires formal vendor registration or sponsorship for cloud services, contact us. We will work with you to get Files.com listed and fully compliant under your governance framework.