OpenAI available at FedRAMP Moderate

Source: OpenAI Blog

FedRAMP Moderate Authorization Overview

OpenAI has achieved FedRAMP 20x Moderate authorization for ChatGPT Enterprise and the API Platform, enabling frontier AI to meet the security, privacy, and governance requirements of U.S. government agencies.

Use Cases for Government Agencies

Agencies are already leveraging AI to:

• Expedite permitting – see the work with the Pacific Northwest National Laboratory.
• Draft resident communications – see the partnership with the State of Minnesota.
• Advance frontier science – see collaboration with Los Alamos National Laboratory.
• Summarize complex information.
• Support public‑health analysis.
• Accelerate software development.
• Provide translation services.
• Help employees find answers across policy and program material.

The FedRAMP 20x Moderate authorization expands the set of missions that can use OpenAI’s managed products, subject to each agency’s policies and authorization decisions.

FedRAMP 20x Process

FedRAMP 20x, announced by GSA in March 2025, creates a faster path for cloud service providers to demonstrate secure configurations and practices. Key aspects include:

• Cloud‑native security evidence.
• Key Security Indicators (KSI).
• Automated validation.
• Ongoing visibility into service operations.

OpenAI’s Security and Engineering teams implemented KSIs, collected evidence, and completed validation and assessment cycles to bring ChatGPT Enterprise and the API Platform through the 20x Moderate path.

Collaboration with FedRAMP

Close collaboration with the FedRAMP team was essential. Their partnership helped translate the promise of FedRAMP 20x into a practical, security‑focused authorization path that moves at the speed modern government technology requires.

Benefits for Agencies

• No longer a trade‑off between cutting‑edge AI and trusted deployment environments.
• Clearer path to adopt OpenAI’s managed AI products for internal, operational, and mission‑support use cases.
• ChatGPT Enterprise can accelerate research, drafting, translation, analysis, and knowledge work.
• The OpenAI API enables AI features in existing systems, copilots, case‑management tools, and citizen‑service workflows.
• Access to the most powerful models, including GPT‑5.5, in the FedRAMP environment.
• Future access to the Codex Cloud environment via FedRAMP ChatGPT Enterprise workspaces and integration with FedRAMP account management.

For security, privacy, and procurement teams, the authorization provides reusable FedRAMP data for agency review, including the cloud service offering, Minimum Assessment Scope, shared‑responsibility expectations, supported features, and supporting evidence in OpenAI’s Trust Portal.

Access and Procurement

• Find ChatGPT Enterprise and API Platform in the FedRAMP Marketplace.
• Contact OpenAI at fedramp@openai.com for package access.
• Procurement options include direct engagement with OpenAI, purchasing through Carahsoft (OpenAI’s authorized public‑sector reseller), or other acquisition paths that align with agency requirements.
• For sales inquiries, use the sales form, email gov-gtm@openai.com, or work with your OpenAI account team.

Ongoing Commitment

OpenAI will continue expanding supported features via the Significant Change Notification process, narrowing the gap between FedRAMP and commercial product experiences, and working with government customers to make frontier AI available with the controls, security, and assurance required for public‑sector missions.