Anthropic is seeking FedRAMP Moderate authorization for its commercial product, Claude Enterprise. The company is utilizing the government's FedRAMP 20x program, which replaces traditional document-heavy reviews with an automated, continuous validation process based on 61 Key Security Indicators.
This certification is intended for commercial entities managing Controlled Unclassified Information. While Claude Enterprise currently lacks FedRAMP status, it holds third-party NIST attestations, including those for NIST SP 800-171. Anthropic has not provided a timeline for the completion of the authorization process.
The company already maintains a higher level of security for its federal-focused product, Claude for Government, which received FedRAMP High authorization as of September 30, 2026. Currently, customers requiring FedRAMP compliance access Claude through third-party channels like AWS Bedrock GovCloud and Google Vertex AI.
The FedRAMP 20x framework, launched in 2025, transitioned from a pilot phase to broader operations in 2026. By pursuing this certification, Anthropic aims to expand its compliance footprint beyond federal workloads to include regulated commercial businesses.
