Skip to content

Page Info

Description: Explanation of the process for getting listed on the Marketplace in the preparation phase to start with, and how that changes during the lifecycle of the product. Reference the Applicable Rules for preparation but don't quote them. The Rules will be directly underneath this.

Purpose: Folks will understand the reasons for getting listed and how to do it.

Getting Listed

flowchart LR
  A["Preparation"] --> B[Initial Implementation] --> C[Ongoing Certification]

  classDef current stroke:#00A86B,stroke-width:3px;
  class B current;

The FedRAMP Marketplace the authoritative repository that lists all cloud service offerings have an active FedRAMP Certification and those who are close to doing so. The Consolidated Rules for 2026 now allow cloud service providers who are early in the implementation phase for obtaining a FedRAMP Certification to be listed as well.

FedRAMP Rules for Marketplace Listing

Navigating the initial FedRAMP Marketplace Listing rules is a good tutorial to both the underlying FedRAMP rules and the changes you'll need to start making to obtain and maintain a FedRAMP Certification. These rules outline a series of obligations that the cloud service provider will make in order to be listed in the FedRAMP Marketplace in the Implementation Phase:

  1. You will need a website that hosts specific information about your cloud service offering, and you'll need to make some of that information available on the site in a special JSON file for FedRAMP.

  2. You will need to be able to prove that your cloud service offering is eligible for a FedRAMP Certification

  3. many cloud service offerings, especially those used by private businesses in the Defense Industrial Base, are not eligible by default for a FedRAMP Certification.

  4. You will need a basic FedRAMP-compatible Trust Center.

  5. You will commit to providing quarterly updates that demonstrate your progress towards obtaining a FedRAMP Certification, measured against your own internal goals

  6. You will commit to beginning an assessment to receive a FedRAMP Certification of some kind within 2 years of your initial listing - in general, with FedRAMP 20x, you should be able to qualify for a FedRAMP Class B Certification within a few months so there's no reason to delay.

Providers will need to address all rules when applying for a Marketplace listing!

FedRAMP expects providers to work with advisors or other third-parties to ensure they have performed all necessary activities prior to submitting a request for a Marketplace listing (such as confirming the JSON data is available and valid against the required schema). FedRAMP does not supply support to guide cloud service providers through this process, and will reject applications that do not meet the requirements with only the minimum amount of information necessary to explain the rejection.

Please be considerate of government resources and help us operate efficiently with our limited government funding by ensuring all applications are complete in advance!

Next Steps

Follow the FedRAMP Rules for Marketplace Listing here!

Comments