Status: pursuing FedRAMP Class A Certification.
Concourse has not yet been granted a FedRAMP Certification and is not yet listed on the FedRAMP Marketplace. This page exists so that agencies, assessors, and FedRAMP can review current offering information during that process.
A machine-readable copy is available as a JSON document at /fedramp/public.json, which conforms to FRC-CSO-PKG.
About this disclosure
This disclosure applies only to the Concourse Platform cloud service offering identified on this page.
| Public disclosure version | 1.4 |
|---|---|
| Last updated | 2026-08-10 |
| Last reviewed | 2026-08-10 |
| Next scheduled review | 2026-11-03 |
| Document owner | Concourse Security Team |
| Maintained by | Concourse GRC Team |
Required disclosure information
| # | Required information | Value |
|---|---|---|
| 1 | FedRAMP IDCDS-CSO-FID | Pending — Concourse Tech Inc. (CONCOURSE) |
| 2 | Service Model | SaaS |
| 3 | Deployment Model | Public Cloud |
| 4 | Business Category | Operations Management, Finance, Legal & Policy, Customer Service, Content Management System (CMS), Data Management, Grant Management, Human Resources, Law Enforcement, Artificial Intelligence (AI) |
| 5 | UEI Number | R1XGH5JT24M1 |
| 6 | Sales Contact Information | sales@concoursetech.com |
| 7 | Security Contact Information | security@concoursetech.com |
| 8 | Product Website Link | https://www.concoursetech.com |
| 9 | Link to Product Logo | https://www.concoursetech.com/images/concourse-logo.png |
| 10 | Overall Service Description | The Concourse platform is a cloud-based, configurable software platform that enables government agencies, educational institutions, and other public-sector organizations to digitize, manage, and automate their operational workflows. The platform is modular in design, allowing customers to adopt capabilities individually or in combination based on their specific requirements. Concourse delivers its services to federal, state, and local government agencies; K–12 and higher education institutions; public utilities; transit authorities; and similar public-sector organizations. The capability categories that make up the platform are listed individually below. |
| 11 | Detailed list of specific services and their security categoriesCDS-CSO-SVC | One cloud service offering, marketed as 12 solutions and comprising 8 assessed capability categories, both listed below |
| 12 | Link to Secure Configuration GuidanceSCG-CSO-RSC | https://www.concoursetech.com/fedramp/secure-configuration |
| 13 | Overview of documentation supplied by the provider | 6 documentation locations listed below |
| 14 | Link to Trust Center landing page, with access instructionsCDS-CSO-UTC | https://trust.concoursetech.com/ |
| 15 | Next Ongoing Certification Report dateCCM-OCR-NRD | Unresolved — Set after an initial certification is granted. |
| 16 | Current FedRAMP Recognized independent assessment service | Satisfied through the SOC 2 Type II engagement performed by Advantage Partners (IVV-CSX-AIA). A FedRAMP Recognized assessor is optional at Class A (FRC-CLA-IVV). |
Provider and offering
| Provider name | Concourse Tech Inc. |
|---|---|
| Cloud service offering | Concourse Platform |
| Certification type | 20x |
| SAM.gov Unique Entity ID (UEI) | R1XGH5JT24M1 |
| Service model | SaaS |
| Deployment model | Public Cloud |
| Business categories | Operations Management, Finance, Legal & Policy, Customer Service, Content Management System (CMS), Data Management, Grant Management, Human Resources, Law Enforcement, Artificial Intelligence (AI) |
What the Concourse Platform includes
Concourse Platform is a single cloud service offering, marketed as the 12 solutions below. Each solution is a configuration of the assessed capability categories that follow — solutions are how agencies buy the platform; capability categories are the units the assessment examined.
Solutions
Assessment coverage for each solution derives from the capability categories it is configured from. Solutions are not separately assessed units.
| Solution | Assessment coverage |
|---|---|
| Permitting & Licensing | In scope — covered at Moderate via the assessed capability categories |
| Legislative & Public Meetings | In scope — covered at Moderate via the assessed capability categories |
| Utility Billing & Payments | In scope — covered at Moderate via the assessed capability categories |
| Community Engagement | In scope — covered at Moderate via the assessed capability categories |
| Workforce & Labor Programs | In scope — covered at Moderate via the assessed capability categories |
| Courts, Safety & Justice | In scope — covered at Moderate via the assessed capability categories |
| Clerk and Public Records | In scope — covered at Moderate via the assessed capability categories |
| Parks & Recreation | In scope — covered at Moderate via the assessed capability categories |
| Contracts & Procurement | In scope — covered at Moderate via the assessed capability categories |
| Grants & Financial Aid | In scope — covered at Moderate via the assessed capability categories |
| Asset & Facilities Management | In scope — covered at Moderate via the assessed capability categories |
| Data & Integrations | In scope — covered at Moderate via the assessed capability categories |
Assessed capability categories
The eight entries below are the capability categories within the offering. The platform became generally available as one product on 2025-09-01, so every capability category carries that availability date rather than a separate launch date.
| Capability | Description | Security category | Available since |
|---|---|---|---|
| Data Management and Search | Centralized storage, search, and retrieval of structured and unstructured records. | Moderate | 2025-09-01 |
| Workflow Automation | Configurable multi-step approval workflows, task routing, and automated notifications. | Moderate | 2025-09-01 |
| Reporting and Analytics | Dashboards, KPI tracking, compliance reporting, and data visualization. | Moderate | 2025-09-01 |
| Citizen and Public-Facing Portals | Self-service portals for public engagement, applications, service requests, and transparency. | Moderate | 2025-09-01 |
| Document and Records Management | Upload, storage, indexing, version control, and retrieval of documents and records. | Moderate | 2025-09-01 |
| Integration Services | APIs and data connectors enabling interoperability with third-party systems. | Moderate | 2025-09-01 |
| AI-Assisted Capabilities | AI-powered search, content generation, and decision support tools. | Moderate | 2025-09-01 |
| User and Role Management | Multi-tenant, role-based access control for internal and external users. | Moderate | 2025-09-01 |
Documentation
Concourse Trust Center — the SOC 2 Type I and Type II reports and fifteen security policies, including access control, cryptography, incident response, risk management, secure development, and third-party management.
How to request access: Open https://trust.concoursetech.com/ and use the access request form on that page. Requests from federal, state, local, and education customers and prospective customers are reviewed by the Concourse security team; documents under NDA are released once the request is approved. Agencies evaluating Concourse for a FedRAMP Certification should note that in the request so it can be routed accordingly. Questions: security@concoursetech.com.
Policies and procedures
| Name | Document | Summary | Words | Version | Last updated |
|---|---|---|---|---|---|
| Secure Configuration Guidance | https://www.concoursetech.com/fedramp/secure-configuration | Configuration responsibilities for agency administrators: identity and access, portals, workflows, records, integration credentials, AI, and logging. | 769 | 1.0 | 2026-08-10 |
| Vulnerability Disclosure Policy | https://www.concoursetech.com/bugbounty | Coordinated vulnerability disclosure: scope, reporting channel, and safe-harbor terms for security researchers. | 802 | 1.0 | 2025-11-13 |
| Terms of Service | https://www.concoursetech.com/terms | Terms governing use of Concourse products and websites. | 6908 | 1.0 | 2025-06-15 |
| Privacy Policy | https://www.concoursetech.com/privacy | What information Concourse collects, how it is used and disclosed, and user rights and controls. | 2114 | 1.0 | 2026-08-10 |
| Concourse Platform Services Agreement | https://www.concoursetech.com/service-terms | Service terms for the Concourse Platform: data ownership, AI provisions, security, indemnities, and government-entity terms. | 2072 | 2.0 | 2026-08-10 |
Assessment and certification status
| Independent verification and validation | Satisfied through the SOC 2 Type II engagement, performed by Advantage Partners. At Class A, IVV-CSX-AIA is met by the alternative security framework’s own assessment rather than by a separate FedRAMP independent assessment, which is required annually only at Classes B, C and D. A FedRAMP Recognized assessor is optional before submission (FRC-CLA-IVV). |
|---|---|
| Next Ongoing Certification Report | Unresolved — set after an initial certification is granted |
Intended federal use
Concourse Platform is intended for Direct Use as defined by MKT-IIP-AGU: The product will be used directly by agency customers for integration into a federal information system that falls within the scope of 44 USC § 3506 and will receive an agency Authorization to Operate.
Progress toward certification
Published under MKT-IIP-DCP, which asks providers to measure progress against documented goals and milestones and to keep the statement current at least quarterly.
| Milestone | Status | Date / target |
|---|---|---|
| SOC 2 Type II completed | Complete | 2026-03-06 |
| FedRAMP 20x public disclosure published | Complete | 2026-07-31 |
| Per-capability security categories set | Complete | 2026-07-31 |
| Minimum Assessment Scope information resources identified | In progress | target 2026-09-01 |
| Secure configuration guidance published | Complete | 2026-08-07 |
| FedRAMP Marketplace Initial Implementation Phase listing requested | In progress | target 2026-08-15 |
| Class A certification package submitted | In progress | target 2026-09-15 |
| Class A Certification granted | Planned | target 2026-09-21 |
| Availability reporting service published | Planned | target 2028-08-15 |
| Class C (Moderate) assessment scheduled | Planned | target 2028-08-15 |
Progress table last updated 2026-08-07.
Contacts
| Type | Contact | |
|---|---|---|
| Security | Concourse Security Team | security@concoursetech.com |
| Sales | Concourse Public Sector Sales | sales@concoursetech.com |
Machine-readable copy
Agencies and FedRAMP can fetch this disclosure programmatically at https://www.concoursetech.com/fedramp/public.json. It is served over HTTPS with Content-Type: application/json, requires no authentication, and returns 200 directly with no redirect.
Questions about this disclosure: security@concoursetech.com.