VirtualDojoVirtualDojo Trust Center

Certification Progress

VirtualDojo is pursuing FedRAMP 20x Certification Class C for VirtualDojo AI CRM by the Program path. Progress below is measured against dated milestones and refreshed at least quarterly. Milestones that are not yet met say so.

Review cadence: quarterly
Next review: 2026-12-01
Last updated: 2026-10-22T08:12:55Z

Evidence history

2026-01-132026-10-22
Scheduled validation ran unattended, 110 days (2026-07-04 to 2026-10-22) Validation ran but was started by hand, 1 day (2026-07-03) Reconstructed from retained evidence, 171 days (2026-01-13 to 2026-07-02) No evidence, 1 days

282 days carry retained evidence in total. Of those, 110 are the output of the scheduled validation cycle running unattended on the day shown, which is the only class counted as persistent validation. 1 day carried validation started by hand rather than on the cycle, and 171 are status derived later from audit evidence retained from that period, and are not validation performed on those dates.

4 met 3 in progress 0 not started 7 total
G1

Continuous, automated validation of all Key Security Indicators

Every applicable Key Security Indicator is verified and validated by an automated, scheduled process with retained per-day evidence, meeting the Class C floor of at least two automated methods per indicator.

Scheduled, non-interactive KSI validation operating daily
Met 2026-07-04
51 of 183 days (28%) , measured 2026-09-02 to 2026-10-22

Cloud Scheduler triggers a Cloud Run job daily at 04:00 UTC under a dedicated service account. The first scheduled firing was 2026-07-04 at 04:00 UTC; per-indicator results are retained for every day since. The job was created on 2026-07-03 and the runs that day were started by hand, so 2026-07-03 is reported as manual and is not counted as persistent validation.

Two or more automated validation methods for every indicator
In progress, target 2026-12-15
46 of 46 indicators , source: latest validation run (indicators with 2+ PASSING automated methods)

Class C requires at least two automated methods per indicator (FRC-CSX-VVK). Method independence and outcome-based validation evidence are being strengthened indicator by indicator.

Six months of continuous validation history
In progress, target 2027-01-03
51 of 183 days (28%) , measured 2026-09-02 to 2026-10-22

FRC-CSX-MOT requires six months of historical metrics from persistent validation at Class C. The mechanism is in place and accumulating; the six-month point is reached on 2027-01-03.

G2

Complete, machine-readable certification data published openly

Certification data is published as valid JSON against the FedRAMP schemas, retrievable without negotiation, and kept current.

Public certification data published and schema-valid
Met 2026-08-26

Certification data is published at https://trust.virtualdojo.com and validated against the FedRAMP Certification Package Overview schema.

FedRAMP Marketplace listing obtained
Met

Marketplace Provider Listing Request submitted 2026-09-17 (ticket #67687); package validated and approved by FedRAMP 2026-09-21 and listed in the Initial Implementation Phase on 2026-09-22 as FR2635050861. Listing is a prerequisite to applying for Certification (FRC-APP-MLF).

G3

Independent assessment and Program certification

An independent assessment by a FedRAMP Recognized assessment service, followed by application for Certification.

Independent assessment conducted
Met

Independent assessment by a FedRAMP Recognized assessment service (Anthony Timbers LLC, Marketplace assessor id 203181). Assessment date 2026-10-02 as supplied by the assessor; KSI examination report dated 2026-10-05 and received 2026-10-06, which completes the assessment (38 of 46 indicators met, 8 partially met, remediation in progress). The assessment must be less than three months old at application (FRC-APP-FIA), so the application window runs to 2027-01-02.

Application for FedRAMP Certification submitted
In progress, target 2026-10-16

Both prerequisites are met: the Marketplace listing (2026-09-22, FRC-APP-MLF) and the independent assessment (assessment date 2026-10-02, assessor report received 2026-10-06, FRC-APP-FIA). The Certification Package is being submitted to the FedRAMP office the week of 2026-10-12. The package must be verified and validated within the 7 days before submission (FRC-APP-FCP), so the final regeneration happens in that week.

How these figures are produced. Milestones marked with a measured value are computed at publication time from retained validation results, not entered by hand. Milestones without a measured value are maintained manually and reviewed on the cadence above. VirtualDojo AI CRM is in the Initial Implementation Phase and is pursuing FedRAMP 20x Certification Class C by the Program path; it is not yet certified. The machine-readable form of this page is published at /public_info.json under continuous_progress.