Emburse FedRAMP® certification data
Emburse is working toward a FedRAMP 20x Class A Certification. This page is published in line with FedRAMP's certification data sharing requirements.
A machine-readable version is available at emburse.com/trust/fedramp/certification-data.json.
Our progress toward certification is reported separately at https://www.emburse.com/trust/fedramp.
Service and provider details
| Item | Value |
|---|---|
| Provider name | Emburse |
| Service name | Emburse Enterprise |
| Service acronym | EE |
| FedRAMP ID | Emburse Ent |
| UEI number | LVF6SRG7MUY4 |
| Certification type | FedRAMP 20x |
| Service model | SaaS |
| Deployment model | Public Cloud |
| Business categories | Finance; Travel Management |
| Product website | https://www.emburse.com/ |
| Product logo | https://www.emburse.com/images/emburse-logo-dark.svg |
| Sales contact | Public Sector Sales publicsector@emburse.com |
| Security contact | Emburse Security Team fedramp-security@emburse.com |
| Trust Center | trust.emburse.com see Requesting documentation below |
| Secure configuration guidance | Not applicable at our current certification class |
| Next Ongoing Certification Report | Not applicable until certified |
| Independent assessment service | Not applicable at Class A |
Service description
Emburse Enterprise is a cloud-based SaaS solution that enables organizations to manage employee expense reporting, approval, and reimbursement workflows. For federal agency use, the solution is designed to enable authorized users to submit, review, approve, and administer business expenses in accordance with applicable organizational travel and expense policies. Potential users within a federal agency may include employees, expense approvers, finance and administrative personnel, and authorized system administrators.
Services in scope
| Service | Description | Available since |
|---|---|---|
| Emburse Enterprise | Expense report creation and submission, receipt capture and management, policy-based approval workflows, expense categorization, reporting, and administrative configuration. Previously marketed as Chrome River. | 2008 |
We will publish security categorizations for individual services once we finalize our assessment boundary.
Documentation available
The Emburse Trust Center holds current security and compliance documentation for Emburse Enterprise, including the SOC 2 Type II report, SOC 1 Type II report, ISO/IEC 27001, ISO/IEC 27701, and ISO/IEC 42001 certificates, and PCI DSS attestation. Following FedRAMP certification, it will also hold our Certification Package Overview, Security Decision Record, and Ongoing Certification Reports.
Requesting documentation
Request access at trust.emburse.com using a work email address. The Emburse security team reviews federal agency and independent assessor requests; please include your agency or organization name and the documents you require. Access is normally granted within 3 business days.