# FedRAMP certification

**URL:** https://meta.discourse.org/t/fedramp-certification/183748
**Category:** Self-hosting
**Tags:** hosting
**Created:** [March 19, 2021, 11:03am UTC](https://meta.discourse.org/t/fedramp-certification/183748 "2021-03-19T11:03:12Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![martinduparc](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/martinduparc/32/115526_2.png) [@martinduparc](https://meta.discourse.org/u/martinduparc)
#### Post date: [March 19, 2021, 11:03am UTC](https://meta.discourse.org/t/fedramp-certification/183748/1 "2021-03-19T11:03:12Z")

</div>

It doesn’t look like it but does anyone know if Discourse is FedRAMP certified? I am deploying it for a government agency on an AWS GovCloud instance (FedRAMP certified cloud service) but was wondering about Discourse itself.

Thank you

---

<div class="post-metadata">

### Author: ![awesomerobot](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/awesomerobot/32/142900_2.png) [@awesomerobot](https://meta.discourse.org/u/awesomerobot)
#### Post date: [March 19, 2021, 8:43pm UTC](https://meta.discourse.org/t/fedramp-certification/183748/2 "2021-03-19T20:43:25Z")

</div>

Discourse and our official Discourse hosting are _not_ FedRAMP certified. Our team spans 18 different countries so we’d likely need to hire more staff in the US and implement controls to prevent staff from outside of the US touching related infrastructure, which we currently have no plans to do.

---

<div class="post-metadata">

### Author: ![martinduparc](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/martinduparc/32/115526_2.png) [@martinduparc](https://meta.discourse.org/u/martinduparc)
#### Post date: [March 26, 2021, 2:43pm UTC](https://meta.discourse.org/t/fedramp-certification/183748/3 "2021-03-26T14:43:31Z")

</div>

Thanks for the update, Kris.
