FedRAMP Certification Data Sharing — CDS-CSO-PUB

FedRAMP certification information for UnifiedRespond & UnifiedAcquire

This page publishes the information required under FedRAMP's Consolidated Rules for 2026 so that federal agencies, government contractors, and the public can review Rohirrim's certification status, contacts, and documentation in one place. This certification effort covers both Rohirrim cloud service offerings.

Step 1
✓ Alternative framework in place
Step 2
✓ Marketplace Listing — Initial Implementation
Step 3 — Current
Building Toward Class A Certification
Step 4
Ongoing Certification
Two Products, One Certification

Which product applies to you

Rohirrim operates two cloud service offerings on shared infrastructure, currently pursuing FedRAMP 20x Class A Certification. Depending on which side of a solicitation you're on, one of these is the reason this page matters to you.

FOR GOVERNMENT CONTRACTORS

UnifiedRespond

Used by contractors to research and draft responses to government solicitations.

FOR GOVERNMENT AGENCIES

UnifiedAcquire

Used by government organizations to write and issue solicitations to contractors.
Service Identity

How this certification is classified

Classification information applies to the cloud infrastructure being certified for both UnifiedRespond and UnifiedAcquire.

SERVICE NAME

Unified Acquisition Platform (UAP)

FedRAMP ID

FR2632436493

ASSIGNED

Service Model

Software as a Service (SaaS)

Deployment Model

Government Community Cloud

BUSINESS CATEGORY

Artificial Intelligence (AI)

UEI Number

NYRPKZL34MZ4

Product Website

Overall Service Description

Rohirrim operates two related cloud service offerings on shared infrastructure, serving both sides of the government solicitation process. UnifiedRespond helps government contractors in the defense, aerospace, health, and energy sectors research and draft responses to solicitations, ingesting an organization's own archive of prior proposal content and using retrieval-based AI to surface relevant material and draft on-target technical responses. UnifiedAcquire helps government agencies write and issue those same solicitations, using the same underlying platform to draft clear, complete acquisition documents. Both offerings reduce manual research and drafting burden without displacing the judgment of the people using them.
Product logo
Points of Contact

Who to reach, for what

Separate contacts are maintained for commercial and security-related inquiries, consistent with FedRAMP's requirement to route these separately from general support channels.

Sales contact
Security Contact (General)
FedRAMP Security Inbox
Documentation & Configuration

What we've published, and where to find more

An overview of the governance documentation supporting this certification, plus guidance for securely configuring and administering the service.

Detailed Service List & Security Categories
UnifiedRespond and UnifiedAcquire, both hosted within the CUI Enclave documented in Rohirrim's System Security Plan. Security category: Moderate (confidentiality, integrity, availability), consistent with our FedRAMP 20x Class C target.
CONFIRMED
Secure Configuration Guide
Pending — In Development
PENDING
Trust Center
Rohirrim Trust Center ↗
AVAILABLE

Governance documentation on file

Access Control Policy

FedRAMP · v1.0

Access Control Procedure

FedRAMP · v1.0

Identification and Authentication Policy

FedRAMP · v1.0

System and Communications Protection Policy

FedRAMP · v1.0

System and Information Integrity Policy

FedRAMP · v1.0

Incident Response Policy

FedRAMP · v1.0

Configuration Management Policy

FedRAMP · v1.0

Awareness and Training Policy

FedRAMP · v1.0

Personnel Security Policy

FedRAMP · v1.0

Media Protection Policy

FedRAMP · v1.0

Risk Assessment Policy

FedRAMP · v1.0

Physical and Environmental Protection Policy

FedRAMP · v1.0

Maintenance Policy

FedRAMP · v1.0

Full certification package materials, including this documentation in detail, are available to authorized parties through the Trust Center linked above.
CERTIFICATION STATUS

Where things stand today

Rohirrim's FedRAMP Marketplace listing was approved on August 21, 2026 (FedRAMP ID FR2632436493). The fields below will be completed as each subsequent milestone toward full Certification is reached, rather than filled in advance.

Next Ongoing Certification Report

N/A — Pending Initial Certification

FedRAMP Recognized Assessor

N/A — Pending

Progress Toward Certification

Measured against our own documented goals and milestones, reviewed and republished at least quarterly.

Align engineering security training with Rohirrim's own Secure Development Policy

Target: Q4 2026

Complete independent verification of automated account lifecycle management

Target: Q4 2026

Close remaining enhancements identified in our annual incident response exercise

Target: Q4 2026

Next scheduled update: no later than November 22, 2026.
This page is maintained to comply with FedRAMP Certification Data Sharing rule CDS-CSO-PUB (FedRAMP Consolidated Rules for 2026).
Last updated: 27 August 2026