FedRAMP
roadmap.

FedRAMP authorization is the gating compliance event for federal procurement of any cloud service that handles federal information. The program inherits NIST SP 800-53 controls applied at three impact levels: Low (public-facing systems), Moderate (the most common requirement for federal mission systems), and High (national-security-adjacent workloads). Most federal procurements require Moderate as a hard prerequisite.

DialPhone's FedRAMP Moderate authorization is in active sponsorship with target Joint Authorization Board (JAB) authorization Q4 2026. The work-in-flight: agency sponsor identified and engaged, Third-Party Assessment Organization (3PAO) scheduled for Q3 2026 assessment, package submission Q4 2026. Timelines beyond submission depend on JAB/PMO review queue, which historically runs 3-9 months. Federal agencies needing DialPhone before the JAB ATO can engage under agency-specific ATO processes; coordinate via the program office at [email protected].

For state-and-local-government (SLED) procurement, the StateRAMP Moderate authorization is already in place — same NIST 800-53 control set, same 3PAO assessment model, applied at the state level rather than the federal level. The two frameworks have substantially overlapping evidence requirements, so the DialPhone control set carries forward between them. For the broader compliance picture (SOC 2, HIPAA, ISO 27001, PCI-DSS, FINRA), see the Trust Center.