fedramp

4 posts

cloudflare

Serving the most critical missions- Cloudflare for Government achieves FedRAMP Class D (High) Certified status (opens in new tab)

Cloudflare announced that Cloudflare for Government has achieved FedRAMP High (Class D) certification, enabling it to support highly sensitive federal workloads. The company is also using the systems built for FedRAMP High as the foundation for pursuing DoD Impact Level 4 authorization. Its core argument is that government agencies should receive the same modern capabilities as commercial customers without relying on isolated, outdated platforms. ## What FedRAMP High Represents - FedRAMP provides standardized security assessment, authorization, and continuous monitoring for U.S. government cloud services. - Cloudflare previously achieved FedRAMP Moderate authorization in 2022. - FedRAMP High involves substantially stricter controls and addresses data where a breach could have catastrophic consequences. - High-impact workloads include law enforcement, emergency services, financial systems, and national security information. - The authorization was sponsored by the National Institute of Standards and Technology and verified by the FedRAMP Program Management Office. ## One Platform on a Global Network - Traditional public-sector technology platforms often use separate, isolated environments that fall behind commercial products. - Cloudflare instead runs the same software stack across its global network. - Its FedRAMP High offering uses the same underlying machines and services, with software-defined regional controls rather than a separate government cloud. - This allows federal customers to access current Zero Trust tools, application performance services, and developer features as they are released. ## Data Localization and Compliance - Cloudflare’s Data Localization Suite controls where traffic is processed and stored. - For FedRAMP High services, traffic inspection and processing can be restricted exclusively to U.S. data centers. - These software-defined controls allow Cloudflare to meet strict residency and handling requirements while retaining a unified global architecture. ## Path Toward DoD IL4 - Cloudflare designed its FedRAMP High systems with DoD Impact Level 4 requirements in mind. - DoD IL4 applies to systems handling controlled, unclassified information. - The company expects its existing compliance infrastructure to support the pursuit of IL4 authorization. - Cloudflare argues that this approach could help defense organizations adopt new security capabilities faster than release-isolated government clouds allow. Cloudflare presents FedRAMP High as more than a compliance milestone: it is a way to modernize federal infrastructure with Zero Trust security, DDoS protection, resilient services, and continuously updated technology.

figma

Figma Make Is Now Available in Figma for Government | Figma Blog (opens in new tab)

Figma Make is now available in Figma for Government, giving federal agencies a secure way to create and test interactive prototypes. Figma argues that faster, collaborative design can help modernize public services, improve accessibility, and build public trust. The feature is available within Figma’s FedRAMP Moderate–authorized environment, although some cloud infrastructure will not reach full compliance until 2026. ## Modernizing Public Services - Government teams are improving services such as public portals, operational systems, benefits platforms, and research tools. - The online passport renewal system demonstrates the potential impact: by 2025, more than two million people had renewed passports online, with 97% reporting a positive experience. - Public-sector projects are difficult because policymakers, technologists, and operational leaders must coordinate under changing requirements and limited resources. - A 2025 executive order highlighted usability, accessibility, and design consistency as essential to citizen-facing services. ## Faster Prototyping and Collaboration - Figma Make enables teams to turn ideas into interactive prototypes in hours rather than weeks. - Designers, policy leaders, researchers, engineers, and IT staff can collaborate in a shared workspace. - Teams can test workflows and validate assumptions with citizens before development begins. - Shared libraries, integrations, accessibility standards, and design patterns help agencies maintain consistency. - Prototyping supports a wide range of initiatives, including federal benefits, financial communications, education platforms, space systems, and internal agency tools. ## Security and Compliance - Figma Make is included in Figma for Government and operates within its authorized environment. - Figma for Government is FedRAMP Moderate authorized, providing agencies with a compliant foundation for design and prototyping. - Figma notes that part of its cloud infrastructure is expected to achieve full FedRAMP Moderate compliance in 2026, while Make is usable today within the authorized environment. ## Broader Government Design Efforts - Federal agencies are already using Figma to modernize complex public services. - Shared design systems can improve accessibility and consistency across agencies and products. - Examples such as the National Park Service’s digital app illustrate how small teams can transform large, paper-based systems into accessible digital experiences. Figma positions Make as a practical tool for helping agencies adopt faster, citizen-first design processes. Government teams can use it to explore ideas early, collaborate across disciplines, and test accessible services before committing development resources.

figma

Everything You Need to Know About Figma for Government | Figma Blog (opens in new tab)

Figma for Government is now FedRAMP Moderate certified, allowing U.S. federal agencies to use Figma’s collaboration and design tools in a secure, privacy-focused environment. The platform is intended to help agencies replace siloed workflows with a shared process spanning ideation, design, prototyping, and development. Figma argues that improving how digital services are built is essential to creating more accessible, consistent, and effective experiences for citizens. ## FedRAMP Certification and Product Availability - Figma for Government meets the federal government’s security and privacy requirements at the Moderate level. - The offering includes: - Figma Design - FigJam - Dev Mode - Figma Slides, planned for a future release - The certification builds on Figma’s earlier commitment to achieving FedRAMP status. ## Why Figma Built a Government Offering - Government agencies increasingly need to provide healthcare, assistance, and other services through seamless digital experiences. - Federal digital-first policies emphasize accessibility, consistency, and ease of use. - Siloed tools and disconnected teams can reduce efficiency and produce less usable products. - Figma for Government aims to give agencies secure access to the same collaborative workflows used by leading private-sector organizations. ## Government Use Cases and Examples - More than 100 government agencies and contractors already use Figma to modernize their processes. - Examples include: - The National Park Service creating an app for 431 parks and monuments. - Amtrak streamlining systems for more than 20,000 employees and 28 million passengers. - Agencies working on passport, visa, taxpayer, and citizenship services. - The official United States Web Design System design kit contains 42 components built with variables and smart layouts. - A shared Figma link gives teams a common source of truth for viewing, editing, and commenting on work. ## Collaborative Planning with FigJam - FigJam supports real-time and asynchronous collaboration for distributed teams. - Agencies can use it to: - Brainstorm ideas - Build project roadmaps - Map user journeys - Align stakeholders around strategy - Keeping planning materials in one shared workspace helps teams communicate across locations and time zones. ## Design Alignment with Figma - Designers, developers, product managers, executives, and other stakeholders can access the latest design files. - Teams can move efficiently from wireframes to prototypes, reviews, and refinements. - Shared feedback reduces delays and keeps everyone aligned on design direction. - Design systems help agencies maintain consistency, quality, and recognizable brand identities. ## Connecting Design and Development with Dev Mode - Dev Mode provides a shared space for designers and engineers. - It is designed to reduce misunderstandings about design intent, changes between iterations, and how designs map to code. - By connecting design and development workflows, agencies can reduce clarification work and move products toward implementation more efficiently. Figma for Government is best suited to agencies seeking a secure, centralized environment for collaborative digital-service development—from early planning through engineering handoff and implementation.

figma

Figma's commitment to FedRAMP | Figma Blog (opens in new tab)

Figma is pursuing FedRAMP Moderate certification to make its collaborative design platform available to US government agencies and public-sector organizations. The certification process demonstrates that Figma meets rigorous security and privacy requirements and would allow government teams to safely design, prototype, and test digital services. Figma argues that its browser-based, collaborative workflow could help agencies iterate faster and improve citizen-facing software. ## FedRAMP Status and Purpose - Figma’s FedRAMP Moderate authorization is currently “in process.” - Listing on the FedRAMP Marketplace indicates that Figma has completed an audit and is moving through the final certification steps. - FedRAMP evaluates cloud applications against government security controls and categorizes them as low, moderate, or high impact. - Certification is necessary before Figma can fully host government data. ## Benefits for Public-Sector Users - Certification would allow government agencies, contractors, and civic-technology teams to: - Create software designs in Figma - Build and test interactive prototypes - Validate ideas through rapid iteration - Improve the usability of government applications - Figma says the certification will give customers confidence that their data and content meet demanding security and privacy standards. - Its browser-based and platform-agnostic design supports collaboration among distributed teams, including agencies and contingent workers. ## Public-Sector Collaboration and Modernization - The shift toward hybrid and remote work has increased demand for accessible, collaborative digital tools in government. - Figma connects this trend with broader efforts to improve customer experience and rebuild trust in government services. - The company believes public-sector organizations often work similarly to private companies despite having different missions and business models. - Collaborative design could help agencies ship services more quickly and achieve better outcomes for citizens. ## Building a Federal Government Team - Figma is expanding its federal-government organization, beginning with federal sales leader James Kohler. - The company is seeking people who understand government procurement and security requirements while also being able to build new programs from the ground up. - Kohler’s role is to adapt lessons from Figma’s private-sector work to the needs of government users. - Figma plans to encourage knowledge sharing between its commercial and government teams. ## Next Steps - Figma’s immediate goal is to complete FedRAMP certification and become authorized for federal use. - The company intends to continue engaging public-sector customers and sharing updates about its government efforts. Figma’s certification effort is a prerequisite for broader government adoption. If completed, the platform could give public-sector teams a secure way to collaborate on and rapidly improve digital services.