OpenAI achieves FedRAMP Moderate authorization

OpenAI has achieved FedRAMP 20x Moderate authorization for ChatGPT Enterprise and the OpenAI API Platform. This milestone allows U.S. government agencies to deploy frontier AI capabilities with the security, privacy, and governance standards required for federal work.

FedRAMP 20x Moderate Authorization Details

OpenAI's authorization was achieved through the FedRAMP 20x process, a faster authorization path announced by the GSA in March 2025. This process shifts the focus toward cloud-native security evidence, Key Security Indicators (KSI), automated validation, and continuous visibility into cloud service operations.

To reach this milestone, OpenAI's Security and Engineering teams implemented KSIs, collected evidence, and completed the necessary validation and review cycles required for the 20x Moderate path.

Expanded Capabilities for Federal Agencies

FedRAMP Moderate authorization removes the trade-off between using cutting-edge AI and maintaining trusted deployment environments. Federal agencies can now access OpenAI's most powerful models, including GPT-5.5, within a FedRAMP-authorized environment.

Operational and Mission-Support Use Cases

Program teams can utilize ChatGPT Enterprise for the following tasks:

• Research and knowledge work
• Drafting and translation
• Analysis

Technical teams can utilize the OpenAI API to integrate AI features into:

• Existing systems
• Copilots
• Case management tools
• Citizen service workflows

Upcoming Integrations

Agencies will soon be able to access their Codex Cloud environment via their FedRAMP ChatGPT Enterprise workspace and use the Codex app through integration with FedRAMP account management and backend infrastructure.

Security and Procurement Workflow

The authorization provides reusable FedRAMP authorization data, allowing security, privacy, and procurement teams to review the cloud service offering without starting from scratch. Agencies can evaluate the following in OpenAI's Trust Portal:

• Minimum Assessment Scope
• Shared-responsibility expectations
• Supported features
• Supporting evidence and validation materials

Acquisition and Engagement Paths

U.S. government agencies can find ChatGPT Enterprise and the API Platform in the FedRAMP Marketplace. Procurement can be handled through several paths:

• Direct engagement with OpenAI
• Procurement via Carahsoft, OpenAI's authorized public sector reseller
• Other acquisition paths aligned with agency requirements

OpenAI has stated it will continue to use the Significant Change Notification process to expand supported features and reduce the gap between the FedRAMP and commercial product experiences.