Emburse and FedRAMP®
Last updated: August 31, 2026
Next update: November 25, 2026
Where we are today
Emburse is working toward a FedRAMP 20x Class A Certification under the FedRAMP Consolidated Rules for 2026, and has applied for a listing in the FedRAMP Marketplace Initial Implementation Phase.
- Target certification profile: FedRAMP 20x · Program Certification path · Class A
- Subsequent target: FedRAMP 20x Class C Certification
- Cloud service offering in scope: Emburse Enterprise
Emburse is not FedRAMP Certified. This page reports our progress toward certification, and we update it at least once a quarter. Our FedRAMP certification data, including a machine-readable version for agency systems, is published at emburse.com/trust/fedramp/certification-data.
Class A is our entry certification. We intend to progress to a FedRAMP 20x Class C Certification, and have committed to scheduling the required independent assessment within two years of our Marketplace Initial Implementation Phase listing.
Our goals and milestones
These are the FedRAMP targets we have set ourselves.
| # | Milestone | Target | Status |
|---|---|---|---|
| 1 | Publish our FedRAMP certification data and obtain a FedRAMP Marketplace listing in the Initial Implementation Phase | Q4 2026 | In progress |
| 2 | Complete the security implementation, documentation, and continuous monitoring required for Class A certification | Q1 2027 | In progress |
| 3 | Submit our FedRAMP 20x Class A Certification application | Q1 2027 | Planned |
| 4 | Obtain FedRAMP 20x Class A Certification | Subject to FedRAMP review | Planned |
| 5 | Engage an independent assessment service and schedule our Class C assessment | By Q2 2028 | Planned |
| 6 | Obtain FedRAMP 20x Class C Certification | Subject to assessment and FedRAMP review | Planned |
Milestones 4 and 6 depend on FedRAMP's review and on our independent assessor, so we do not publish target dates for them.
Progress log
Newest entry first. We add an entry every quarter, whether or not the quarter went to plan.
Q3 2026 — Last updated: August 31, 2026
- Completed this quarter: Reviewed the FedRAMP Consolidated Rules for 2026 and confirmed FedRAMP 20x Class A as our certification path, with Class C as our subsequent target.
- In progress: Internal assessment against the seven Class A Key Security Indicators. Preparing our FedRAMP Marketplace listing application and publishing our FedRAMP certification data.
- Did not move, and why: No milestones were delayed this quarter. This is our first published update.
- Milestone changes: None — first published set of targets.
Next update: November 25, 2026
Supporting information
Our security certifications, documentation access for agencies and assessors, and detail on what a Class A certification does and does not cover are available in the Emburse Trust Center at trust.emburse.com.
Questions about our FedRAMP program, or about Emburse Enterprise for federal use, can go to publicsector@emburse.com. Agencies and independent assessors requesting security documentation should follow the access instructions in the Emburse Trust Center.