Cloud you can inherit.Proof an assessor can open.
CSP Collective lists cloud offerings that process, store, or transmit CUI by authorization, not by brand. Your listing carries one reviewed row and one CRM mapped to NIST SP 800-171 Rev 2 and Rev 3, so every contractor's assessor gets the same answer.
59
Offerings indexed from public record
14
FedRAMP High or DoD SRG PA
8
Announced Moderate equivalents
538
Certified on the FedRAMP Marketplace
01
Inherit
Name the authorized CSO, the region, and the package ID. Contractors put the right offering in their boundary instead of its commercial twin.
02
Prove
Publish a customer responsibility matrix mapped to NIST SP 800-171 Rev 2 and Rev 3. Your customers stop rewriting your controls into their SSPs one audit at a time.
03
Host
Get a dated, reviewed listing an assessor can open, with a change log, a revalidation date, and the documents to request. A marketing page can't stand in for a package.
Rev 2 today. Rev 3 next. One matrix for both.
Contractors inherit your controls one requirement at a time. A CRM mapped to both revisions covers the assessment they face now and the one they're planning for.
The revision that contracts and assessments cite today. Your CRM has to answer every requirement a customer inherits from you.
Adds Planning, System and Services Acquisition, and Supply Chain Risk Management, plus organization-defined parameters. Map it now so the transition doesn't turn into a rewrite.
Family-by-family crosswalk: Rev 2 to Rev 3.
The track decides what a contractor can inherit.
FedRAMP Moderate
Listed CSO. Confirm the package, not the brand.
37
FedRAMP High
Stronger baseline. Still needs a CRM mapped to 800-171 Rev 2 and Rev 3.
12
Provisional authorization
IL4 and IL5 sit above Moderate. Name the isolated offering.
2
3PAO body of evidence
No Marketplace row. The OSC holds the SSP, SAR, and CRM.
8
Start with the offerings that have no Marketplace row.
| Vendor | Offering | Authorization | Status |
|---|---|---|---|
| JAMIS Software | JAMIS Prime ERP / Federal Cloud | Public FedRAMP Moderate equivalent (3PAO Lunarline, Jul 2025) | Public record |
| Beryllium InfoSec | Cuick Trac Managed Enclave (CTME) | Public FedRAMP Moderate equivalent (3PAO, Jan 2025) | Reviewed |
| FutureFeed / Continuous Compliance | FutureFeed + Cyber Illumination | Lunarline FRME attestation 10 Feb 2026; later claimed FedRAMP High Class D | Reviewed |
| PreVeil | PreVeil Email and Drive | Public FedRAMP Moderate equivalent; DIBCAC / CMMC PMO review (2024) | Reviewed |
| Deltek | Costpoint GovCon Cloud Moderate | Public FedRAMP Moderate equivalent (Schellman 3PAO, Apr 2025) | Public record |
| A-LIGN | A-SCEND audit platform | Public FedRAMP Moderate equivalent (Sep 2026) | Public record |