VerifiedIBM and FedRAMP
IBM is listed in the FedRAMP Marketplace for FedRAMP (FedRAMP Authorized), dated 8 Jun 2023, assessed by Coalfire Systems, Inc.. CertReports last verified this on 17 Sep 2026 from the registry.
Evidence
- Kind
- authorization
- Issued or listed
- 14 Nov 2019
- Auditor or assessor
- Coalfire Systems, Inc.
- Impact level
- High
- Products in scope
- SmartCloud for Government
- Scope
- Government Community Cloud
| Source | Captured | Quote | Links |
|---|---|---|---|
FedRAMP Marketplace Official registry · HTTP 200 | 17 Sep 2026 | IBM - SmartCloud for Government: FedRAMP Authorized | Live pagesha256 395e7ad35d |
- Kind
- authorization
- Issued or listed
- 17 Jul 2015
- Auditor or assessor
- Coalfire Systems, Inc.
- Impact level
- Moderate
- Products in scope
- IBM Platform Services for Government
- Scope
- Public Cloud
| Source | Captured | Quote | Links |
|---|---|---|---|
FedRAMP Marketplace Official registry · HTTP 200 | 17 Sep 2026 | IBM - IBM Platform Services for Government: FedRAMP Authorized | Live pagesha256 395e7ad35d |
- Kind
- listing
- Auditor or assessor
- Coalfire Systems, Inc.
- Impact level
- High
- Products in scope
- IBM Platform Services for Government
- Scope
- Public Cloud
| Source | Captured | Quote | Links |
|---|---|---|---|
FedRAMP Marketplace Official registry · HTTP 200 | 17 Sep 2026 | IBM - IBM Platform Services for Government: Agency In Process | Live pagesha256 395e7ad35d |
- Kind
- authorization
- Issued or listed
- 14 Nov 2019
- Auditor or assessor
- Fortreum, LLC
- Impact level
- High
- Products in scope
- IBM Cloud for Government
- Scope
- Hybrid Cloud
| Source | Captured | Quote | Links |
|---|---|---|---|
FedRAMP Marketplace Official registry · HTTP 200 | 17 Sep 2026 | IBM - IBM Cloud for Government: FedRAMP Authorized | Live pagesha256 395e7ad35d |
- Kind
- authorization
- Issued or listed
- 12 Mar 2019
- Auditor or assessor
- Coalfire Systems, Inc.
- Impact level
- Moderate
- Products in scope
- IBM Automation Services for Government
- Scope
- Government Community Cloud
| Source | Captured | Quote | Links |
|---|---|---|---|
FedRAMP Marketplace Official registry · HTTP 200 | 17 Sep 2026 | IBM - IBM Automation Services for Government: FedRAMP Authorized | Live pagesha256 395e7ad35d |
- Kind
- authorization
- Issued or listed
- 8 Jun 2023
- Auditor or assessor
- Coalfire Systems, Inc.
- Impact level
- Moderate
- Products in scope
- IBM Federal HR Cloud
- Scope
- Government Community Cloud
| Source | Captured | Quote | Links |
|---|---|---|---|
FedRAMP Marketplace Official registry · HTTP 200 | 17 Sep 2026 | IBM - IBM Federal HR Cloud: FedRAMP Authorized | Live pagesha256 395e7ad35d |
- Kind
- authorization
- Issued or listed
- 13 Sep 2024
- Auditor or assessor
- Coalfire Systems, Inc.
- Impact level
- LI-SaaS
- Products in scope
- IBM Envizi ESG Reporting
- Scope
- Public Cloud
| Source | Captured | Quote | Links |
|---|---|---|---|
FedRAMP Marketplace Official registry · HTTP 200 | 17 Sep 2026 | IBM - IBM Envizi ESG Reporting: FedRAMP Authorized | Live pagesha256 395e7ad35d |
- Kind
- authorization
- Issued or listed
- 10 Feb 2026
- Auditor or assessor
- Fortreum, LLC
- Impact level
- Moderate
- Products in scope
- IBM Data Services for Government
- Scope
- Government Community Cloud
| Source | Captured | Quote | Links |
|---|---|---|---|
FedRAMP Marketplace Official registry · HTTP 200 | 17 Sep 2026 | IBM - IBM Data Services for Government: FedRAMP Authorized | Live pagesha256 395e7ad35d |
What is not public
- Impact level and authorization path come from the FedRAMP data file; the package itself and the agency ATO letters are not public.
What FedRAMP means, and what it does not
Status changes often and the official GitHub data file and its daily changelog are the source of truth. Legacy "Ready" status is being retired in 2026 under FedRAMP 20x.
Read the FedRAMP guide and browse all vendors with evidenceQuestions buyers ask
Is IBM FedRAMP authorized?
IBM is listed in the FedRAMP Marketplace with status "FedRAMP Authorized" at impact level Moderate as of 17 Sep 2026.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with FedRAMP evidence
Similar vendors (shared product tags or the AI infrastructure category) whose FedRAMP row is verified or vendor-stated, ranked by similarity.
Oracle
Data platforms
CircleCI
DevOps and observability
LogicMonitor
DevOps and observability
BMC Helix
DevOps and observability
Rescale
Cloud and hosting
High Performance Computing Built for the Cloud
Cloudera
Data platforms
OnSolve
DevOps and observability
OpenAI
AI infrastructure
