Anthropic seeks FedRAMP Moderate approval for Claude Enterprise through 20x program

Anthropic is pursuing FedRAMP Moderate authorization for Claude Enterprise. It is using the FedRAMP 20x program, the government’s newer and more automated route to cloud security approval. FedRAMP sign-off is the badge that lets cloud services handle sensitive government-adjacent data. The target here is regulated commercial work involving Controlled Unclassified Information, or CUI. That category covers sensitive data that falls short of classified but still comes with strict handling rules. What Anthropic is actually applying for FedRAMP Moderate maps to what the 20x framework calls Class C. That tier covers systems where a breach could cause “serious adverse effects.” It does represent a significant portion of the cloud services that hold authorization today. Under the 20x track, Class C relies on 61 Key Security Indicators, known as KSIs. Each one is a measurable checkpoint that a provider must keep satisfying over time. Evidence is submitted in machine-readable form, so the process leans on continuous validation rather than one big review. As of October 2026, Claude Enterprise does not have FedRAMP authorization. It does hold third-party NIST attestations covering CUI requirem...