OpenAI Receives FedRAMP 20x Moderate Authorization for Its AIs

OpenAI Receives FedRAMP 20x Moderate Authorization

OpenAI has recently obtained FedRAMP 20x Moderate authorization for its ChatGPT Enterprise and API Platform products. This authorization marks a significant advancement, allowing U.S. government agencies to access cutting-edge artificial intelligence tools while adhering to the strict security, privacy, and governance requirements necessary for federal work.

Officials should not be forced to wait for secure access to the same advanced AI capabilities that are transforming the rest of the economy. Agencies are already using AI to expedite approvals, draft communications to residents, advance cutting-edge science, summarize complex information, support public health analysis, accelerate software development, translate services, and help employees find answers in policy and program documents.

Accelerated Process Through FedRAMP 20x

The FedRAMP 20x Moderate authorization broadens the range of missions that can utilize OpenAI-managed products, subject to each agency's policies and authorization decisions. Thanks to FedRAMP 20x, this step did not require a choice between speed and rigor. The 20x process directs authorization towards cloud-appropriate security evidence, Key Security Indicators, automated validation, and continuous visibility into the operation of a cloud service offering.

FedRAMP 20x, announced by the GSA in March 2025, has created a faster path for cloud service providers to demonstrate secure configurations and practices. OpenAI's security and engineering teams have worked on implementing the KSI, collecting evidence, validation, review cycles, and assessment materials to guide ChatGPT Enterprise and the API Platform through the 20x Moderate path.

Our close collaboration with the FedRAMP team has been essential in reaching this milestone. Their partnership has helped translate the promise of FedRAMP 20x into a practical, security-focused authorization path that advances at the pace required by modern government technology.

FedRAMP Moderate Expands Government Capabilities

Agencies will no longer have to choose between cutting-edge AI and reliable deployment environments. For federal agencies, FedRAMP 20x Moderate opens a clearer path to adopt OpenAI-managed AI products for internal, operational, and mission-support use cases.

Program teams can use ChatGPT Enterprise to accelerate research, draft, translate, analyze, and perform knowledge work. Technical teams can use the OpenAI API to integrate AI capabilities into existing systems, copilots, case management tools, and citizen service workflows. Agencies can now access our most powerful models, including GPT‑5.5, in our FedRAMP environment. Additionally, agencies will soon be able to access their Codex Cloud environment via their FedRAMP ChatGPT Enterprise workspace and use the Codex application through integration with FedRAMP account management and backend infrastructure.

For security, privacy, and procurement teams, the authorization creates reusable FedRAMP authorization data for agency review. Agencies can assess the cloud service offering, its Minimum Assessment Scope, shared responsibility expectations, supported features, and evidence and validation materials in OpenAI's Trust Portal without starting from scratch.

How to Engage

Agencies can find ChatGPT Enterprise and the API Platform in the FedRAMP Marketplace and contact OpenAI at fedramp@openai.com to access the packages. Agencies can engage OpenAI directly, procure through Carahsoft, OpenAI's authorized reseller for the public sector, or explore other acquisition paths that meet their requirements. OpenAI can assist agencies in identifying the right deployment and acquisition path; teams can use our sales form, email gov-gtm@openai.com, or work with their OpenAI account team for assistance.

OpenAI will continue to expand supported features using the Significant Change Notification process, reducing the gap between FedRAMP and commercial product experiences, and working with government clients to make cutting-edge AI available with the controls, security, and assurance necessary for public sector missions.