AvePoint Solutions for Microsoft SharePoint Achieve FedRAMP Compliance at the Software-as-a-Service Level
Award-winning compliance, governance, and infrastructure management software proven compliant with the Federal Risk and Authorization Management Program baseline
AvePoint (NASDAQ: AVPT), the global leader in data security, governance, and resilience, announced today that it has earned Software-as-a-Service (SaaS) level compliance with the Federal Risk and Authorization Management Program (FedRAMP) rev4 baseline of security controls. In partnership with Cloud Service Provider (CSP) Project Hosts – the leading provider of Custom Cloud hosting for Microsoft solutions – AvePoint Compliance Guardian, DocAve Governance Automation, and DocAve Software have all met the necessary security control standards required by the GSA.
The FedRAMP approach is based on an accepted set of baseline security controls and consistent processes that have been vetted and agreed upon by agencies across the federal government. AvePoint and Project Hosts have fully implemented 326 unique security controls required in order to achieve FedRAMP SaaS compliance at the moderate impact level. With SaaS-level FedRAMP compliant solutions, U.S. Federal and State Agencies can realize all the advantages of cloud computing safely and securely.
“As our government customers make the shift from on-premises environments to public, private, or hybrid cloud solutions, it is our goal to support them in every capacity,” said Chris Foreman, CEO of AvePoint Public Sector, Inc. “With our network of partners and breadth of FedRAMP-compliant solutions, we are prepared to facilitate organizations’ move to the cloud in a way that is secure, efficiently managed, and cost effective.”
The following AvePoint products are all FedRAMP SaaS compliant:
- Compliance Guardian: Allows government agencies to create a culture of transparency, actions, and trust by understanding IT environments through data discovery and enabling the organization to say what it does to protect sensitive data, take action on data based upon its classification, and prove that appropriate controls are in place.
- DocAve Software: As a fully integrated platform, DocAve enables centralized or delegated management of SharePoint farms hosted on premises or in the cloud.
- DocAve Governance Automation: Enables agencies to implement and enforce an extensible SharePoint governance strategy that empowers users, is easy to maintain, and scales as an organization grows by giving organizational stakeholders oversight into provisioning, content lifecycle management, and security.
“An AvePoint-enhanced SharePoint environment in a Project Hosts’ private, hybrid, or community cloud can remove a huge IT burden and expense for any government agency considering building their own FedRAMP SaaS compliant SharePoint cloud," said Scott Chapman, CEO and Co-Founder of Project Hosts. “And unlike public cloud offerings, we provide dedicated cloud infrastructure to meet agency needs for highly secure, reliable, available, and affordable SharePoint solutions.”
For more information on the AvePoint Public Sector, Inc. and its FedRAMP-compliant solutions, please visit our website.
About AvePoint
AvePoint is the global leader in data protection, unifying data security, governance, and resilience to provide a trusted foundation for AI. More than 25,000 customers rely on the AvePoint Confidence Platform to secure, govern, and rapidly recover data across Microsoft, Google, Salesforce, and other cloud environments. With a single platform for lifecycle control, multicloud governance, and rapid recovery paired with clear ownership across the business, we prevent overexposure and sprawl, modernize legacy and fragmented data, and minimize data loss and interruption. Our global partner ecosystem includes 5,000 MSPs, VARs, and SIs, and our solutions are available in over 100 cloud marketplaces. To learn more, visit www.avepoint.com.
About FedRAMP
FedRAMP is a U.S. government-wide program that provides a standardized approach to security assessment, authorization and continuous monitoring for cloud products and services. The program was developed to significantly reduce the effort and expense that would be incurred by government agencies to achieve high-level standards for securing government data. Designed as an "approve once, deploy many" program, CSPs would attain a provisional Authority To Operate (ATO) and provide cloud services for many agencies. Government agencies can then select an authorized CSP in an effort to save taxpayer expense on government IT infrastructure and cloud applications. The JAB is the primary governance group of the FedRAMP program, consisting of the chief information officers of the Department of Defense, the Department of Homeland Security and the U.S. General Services Administration. The FedRAMP program supports the U.S. government's "Cloud-First" initiative to enable U.S. federal agencies to use managed service providers that enable cloud computing capabilities. The FedRAMP program is designed to comply with the Federal Information Security Management Act of 2002 (FISMA). All government agencies are required to use FedRAMP.



