Document room

Access the OpenLM FedRAMP package

The OpenLM FedRAMP trust center holds our certification package, SOC 2 Type II report, policies and quarterly reports. It is available to U.S. federal agency staff and to contractors working on their behalf.

How it works

Fill in the access request form: name, agency, work email, role and reason for access. The online form goes live with the document room. Until then, email security@openlm.com with the same details.
Confirm your email address with the link we send you.
Approval. Requests from .gov and .mil addresses are approved automatically after confirmation. Other requests are reviewed by the OpenLM security team within 2 business days; we will ask for the name and .gov email of your agency sponsor.
Sign in. Once approved, you sign in once (with multi-factor authentication) and can read every document without further approval. Documents are also available through a documented API.

Programmatic access

Approved users can also fetch documents through a documented REST API, so an agency's compliance tooling can pull the current package automatically. The API description (OpenAPI) is published with the document room.

What we record

Every grant of access: who, which agency, when, and who approved it (or that it was automatic).
Every document access: user, document and time, kept for at least 12 months.
Accounts not used for 90 days are removed; the access list is reviewed every quarter.
If we refuse a request from an agency, we record the reason and notify FedRAMP within 5 business days, as FedRAMP requires.

Questions

Write to security@openlm.com.