FedRAMP FAQ

MapleLMS is in the implementation phase of FedRAMP 20x certification on the Class A path. The offering is not yet FedRAMP certified. This Trust Center publishes the certification data that FedRAMP requires and reports our progress.

FedRAMP 20x is the FedRAMP approach in which cloud providers demonstrate security through Key Security Indicators (KSIs) backed by machine-readable evidence and share certification data through a Trust Center, under the FedRAMP Consolidated Rules for 2026.

Class A is the entry certification class under the FedRAMP Consolidated Rules for 2026. At Class A, an independent assessor is optional. MapleLMS has not engaged one.

The MapleLMS learning management system: course delivery, role-based user management, built-in content, test and quiz authoring, assessments and exams, automated certificate issuance, learner progress tracking, and reporting and analytics. The full list is in the certification data.

Live KSI status is published on our public KSI dashboard. Detailed per-indicator evidence is restricted certification data, available to approved federal agencies.

Submit a request on the Request access page, then sign in or create an account. The request goes to the MapleLMS security team. Once it is approved, you can view restricted documents in the agency portal.

You receive an email at your sign-in address when a decision is made. If a request is denied, the notice says so, and you can write to security@maplelms.com if you believe it is an error.

Yes. Every access to restricted data is logged.

Yes. Approved users can retrieve certification data through the agency API using their signed-in credentials. See Agency API access for the endpoints and an example. Public data is also available as machine-readable JSON.

On Amazon Web Services (AWS), in the United States. AWS is our subprocessor for infrastructure, database and storage. See the subprocessor section on the overview.

Data is encrypted in transit and at rest, and access is controlled through role-based permissions. See the Data Handling Overview for details.

Follow the Secure Configuration Guide, which includes the shared responsibility split between MapleLMS and the customer.

Email security@maplelms.com or call 202-888-8039.

We keep public certification data current and report progress at each ongoing certification report. The next one is scheduled for 2027-03-01. See Updates and commitments on the overview.

Subprocessor changes are published on the Trust Center overview. Any future subprocessor must meet the same security and confidentiality standards as AWS.