GovRAMP (formerly StateRAMP) is a nonprofit organization that provides a standardized framework for securing cloud service providers (CSPs) at state, local, tribal, and educational levels. It enables a "verify once, serve many" model, reducing compliance costs for vendors and improving security for government data.

GovRAMP is based on the National Institute of Standards and Technology (NIST) SP 800-53 Rev. 5 standard. GovRAMP authorizations are granted at three impact levels (Low, Moderate, and High) based on NIST FIPS 199 security categorization. These levels rank the impact that the loss of confidentiality, integrity, or availability could have on an organization - Low (limited adverse effect), Moderate (serious adverse effect), and High (severe or catastrophic adverse effect).

Atlassian Government Cloud has achieved full GovRAMP Moderate authorization, enabling state, local, tribal, and educational organizations to securely use its cloud solutions for mission‑critical operations while maintaining compliance with stringent government security and regulatory standards. Please reach out to our government team if you’re interested in learning more.

To learn more about our commitment to safeguarding customer data, please visit our Security Practices page.