Public certification data
Trust Center
FedRAMP 20x certification data for Trust Swiftly for Government — the offering profile, certification progress, availability, and incident notices, published in human-readable and machine-readable formats from a single source.
Pursuing FedRAMP 20x Class A Certification — aligned to FedRAMP 20x practices, not yet FedRAMP Certified
Offering profile
The authoritative version of this profile is the machine-readable package-overview.json, conforming to FedRAMP's Certification Package Overview schema (FRC-CSO-PKG). This page is rendered from that same file.
Trust Swiftly for Government is an identity verification service centered on NIST SP 800-63A-4 IAL3 attended, supervised identity proofing: proofing sessions conducted remotely or in person on provider-controlled hardware — shipped remote kits and deployable kiosks — with document and NFC ePassport evidence, biometric comparison and liveness checks, and chain-of-custody evidence capture, used for high-risk workforce, contractor, and privileged-access screening. Configurable verification workflows (document, biometric and liveness, phone and email ownership, knowledge surveys, and live video) support lower assurance tiers on the same platform. Trust Swiftly is pursuing FedRAMP 20x Class A Certification and is not FedRAMP Certified at this time.
- Cloud service offering
- Trust Swiftly for Government (TSG)
- Legal provider
- Verify Swiftly LLC
- UEI
- C7SJPE48R338
- CAGE/NCAGE
- 9JE90
- FedRAMP ID
- Verify Swiftly LLC TSG (assigned by FedRAMP at Marketplace listing)
- Certification type
- FedRAMP 20x — Class A (target), Class B to follow
- Service model
- SaaS
- Deployment model
- Public Cloud
- Business category
- Cybersecurity & Risk Management
- Website
- https://trustswiftly.com
Services in certification scope (CDS-CSO-SVC)
- NIST IAL3 Verification Solution Attended, supervised identity proofing aligned to NIST SP 800-63A-4 IAL3: proofing sessions conducted remotely or in person on provider-controlled hardware — shipped remote kits and deployable kiosks — with document and NFC ePassport evidence, biometric comparison and liveness checks, and chain-of-custody evidence capture. Available since 2024-11-19.
Deploying the platform? See the Secure Configuration Guidance for recommended hardening settings.
Certification progress
Goals and milestones per FedRAMP MKT-IIP-DCP, updated at least quarterly. Machine-readable: progress.json.
Goal: FedRAMP 20x Class A Certification targeted following the 2026 SOC 2 Type II examination, with a Class B assessment to follow.
-
Public trust center established with machine-readable certification data
-
SOC 2 Type II annual audit fieldwork (an approved FedRAMP 20x Class A alternative security framework)
-
FedRAMP Marketplace listing, followed by the 20x Class A certification application
-
FedRAMP 20x Class B preparation: full Key Security Indicator automation and an independent assessment
Availability & incident communication
Live service availability and incident history are published on the independently hosted status page, which updates automatically. This trust center intentionally carries no point-in-time status snapshot, so a dated page can never contradict the live source.
FedRAMP Reportable Incident notices
FedRAMP Reportable Incident notices are not broadcast on this public page. FedRAMP defines the recipients as the parties whose interests are directly affected — FedRAMP itself and affected federal agency customers — and requires that they be notified responsibly, without publishing details that could assist an adversary or disclose a vulnerability before it is remediated.
Incident reports carry indicators of compromise, root cause, recovery milestones, and the list of affected agencies, so they are delivered to FedRAMP and to affected agency customers directly and shared through the access-controlled agency trust center, where access is authenticated, inventoried, and logged. Agency trust center →
Service availability affecting any customer is published on the status page above, independently of FedRAMP incident reporting.
Machine-readable data
All certification data on this trust center is public and requires no authentication or access request. Every dataset is available as JSON at a stable URL and is regenerated together with this page from a single source, so the two formats cannot disagree.
| Dataset | URL | Format |
|---|---|---|
| Certification package overview | /fedramp/package-overview.json | FedRAMP FRC-CSO-PKG schema (2026-06-24) |
| Secure configuration guidance | /fedramp/secure-configuration.json | JSON Schema |
| Certification progress | /fedramp/progress.json | JSON Schema |
| Availability & incident communication | /fedramp/availability.json | JSON Schema |
Fetch any URL with a plain HTTP GET. CORS is enabled for JSON endpoints. Cache lifetime is five minutes.
Federal agencies: Agency-restricted certification data is shared through the access-controlled agency trust center. https://agency.trustswiftly.com. Request access before signing in: email Trust Swiftly Support at support@trustswiftly.com from your .gov or .mil address. Access requires prior approval and is enforced through layered, multi-factor access controls bound to your government email identity; identities that have not been approved cannot sign in.