Public certification data
Trust Center
FedRAMP 20x certification data for Trust Swiftly for Government — the offering profile, certification progress, availability, and incident communication, published in human-readable and machine-readable formats from a single source.
Pursuing FedRAMP 20x Certification — Class A initial step, Class C (Moderate) targeted for 2027–2028; not yet FedRAMP Certified
Offering profile
The authoritative version of this profile is the machine-readable package-overview.json, conforming to FedRAMP's Certification Package Overview schema (FRC-CSO-PKG). This page is rendered from that same file.
Trust Swiftly for Government is an identity verification service centered on NIST SP 800-63A-4 IAL3 attended, supervised identity proofing: proofing sessions conducted remotely or in person on provider-controlled hardware — shipped remote kits and deployable kiosks — with document and NFC ePassport evidence, biometric comparison and liveness checks, and chain-of-custody evidence capture, used for high-risk workforce, contractor, and privileged-access screening. Configurable verification workflows (document, biometric and liveness, phone and email ownership, knowledge surveys, and live video) support lower assurance tiers on the same platform. The offering supports direct use by federal agencies and use as an identity-assurance component within another CSP's agency-facing cloud service. Trust Swiftly is pursuing FedRAMP 20x Certification, with Class A as the initial step and Class C (Moderate) targeted for 2027–2028; it is not FedRAMP Certified at this time.
- Cloud service offering
- Trust Swiftly for Government (TSG)
- Legal provider
- Verify Swiftly LLC
- UEI
- C7SJPE48R338
- CAGE/NCAGE
- 9JE90
- FedRAMP ID
- Verify Swiftly LLC TSG (assigned by FedRAMP at Marketplace listing)
- Certification path
- FedRAMP 20x — Class A initial step, Class C (Moderate) targeted for 2027–2028
- FIPS 199 security categorization
- Moderate
- Service model
- SaaS
- Deployment model
- Public Cloud
- Business category
- Cybersecurity & Risk Management
- Website
- https://trustswiftly.com
Services in certification scope (CDS-CSO-SVC)
- NIST IAL3 Verification Solution Attended, supervised identity proofing aligned to NIST SP 800-63A-4 IAL3: proofing sessions conducted remotely or in person on provider-controlled hardware — shipped remote kits and deployable kiosks — with document and NFC ePassport evidence, biometric comparison and liveness checks, and chain-of-custody evidence capture. Available for direct agency deployments and as an identity-assurance component within another CSP's agency-facing cloud service. FIPS 199 security category: Moderate. FedRAMP status: Not FedRAMP Certified. Available since 2024-11-19.
Deploying the platform? See the Secure Configuration Guidance for recommended hardening settings.
Documentation supplied
Documentation supplied for Trust Swiftly for Government. Product and integration documentation is public; hardening guidance is published on this trust center; certification and security documentation is shared with federal agencies through the access-controlled agency trust center. Machine-readable: documentation.json.
- Setup and integration Embedding verification in a web application, hosted verification links, mobile web views, and no-code integrations.
- API reference Authentication and API keys, users, verification templates, documents, statistics, errors, pagination, filtering, and rate limits.
- Webhooks Receiving verification events, verifying payload signatures, and worked receiver examples.
- Single sign-on SAML 2.0 configuration for administrative access, including Okta, Microsoft Entra ID, and Rippling.
- Notifications Routing verification and review notifications to email and chat destinations.
- Supported identity documents Document types and issuing countries accepted for document verification.
- Secure configuration guidance Recommended hardening settings for organizations deploying the service, published on this trust center in human-readable and JSON formats.
- Certification and security documentation Security policies, procedures, and FedRAMP Certification Data, shared with federal agency customers through the access-controlled agency trust center. Access-controlled — federal agency customers.
Public product documentation is published at docs.trustswiftly.com.
Certification progress
Goals and milestones per FedRAMP MKT-IIP-DCP, updated at least quarterly. Machine-readable: progress.json.
Goal: FedRAMP 20x Class A Certification targeted following the 2026 SOC 2 Type II examination, followed by Class C (Moderate) Certification targeted for 2027–2028.
-
Public trust center established with machine-readable certification data
-
SOC 2 Type II annual audit fieldwork (an approved FedRAMP 20x Class A alternative security framework)
-
FedRAMP Marketplace listing, followed by the 20x Class A certification application
-
FedRAMP 20x Class C (Moderate) preparation and independent assessment
Availability & incident communication
Live service availability and incident history are published on the independently hosted status page, which updates automatically. This trust center intentionally carries no point-in-time status snapshot, so a dated page can never contradict the live source.
FedRAMP Reportable Incident notices
Incident notices go to FedRAMP and to affected federal agency customers, not to this public page.
Notices are shared through the access-controlled agency trust center. Agency trust center →
Service availability is published on the status page above.
Machine-readable data
All certification data on this trust center is public and requires no authentication or access request. Every dataset is available as JSON at a stable URL and is regenerated together with this page from a single source, so the two formats cannot disagree.
| Dataset | URL | Format |
|---|---|---|
| Certification package overview | /fedramp/package-overview.json | FedRAMP FRC-CSO-PKG schema (2026-06-24) |
| Secure configuration guidance | /fedramp/secure-configuration.json | JSON Schema |
| Documentation overview | /fedramp/documentation.json | JSON Schema |
| Certification progress | /fedramp/progress.json | JSON Schema |
| Availability & incident communication | /fedramp/availability.json | JSON Schema |
Fetch any URL with a plain HTTP GET. CORS is enabled for JSON endpoints. Cache lifetime is five minutes.
Federal agencies: Agency-restricted certification data is shared through the access-controlled agency trust center. https://agency.trustswiftly.com. Request access before signing in: email Trust Swiftly Support at support@trustswiftly.com from your .gov or .mil address. Access requires prior approval and is enforced through layered, multi-factor access controls bound to your government email identity; identities that have not been approved cannot sign in.