OpenAI Gains FedRAMP Moderate Authorization

OpenAI announced that ChatGPT Enterprise and the OpenAI API Platform have secured FedRAMP 20x Moderate authorization, clearing a significant compliance milestone for the company's push into U.S. government work. The certification allows federal agencies to adopt OpenAI's managed AI products for civilian workloads, though each agency still needs to make its own policy and authorization decisions before deployment.

What FedRAMP Moderate Means for Federal AI Adoption

The Moderate designation sits above the Low tier that OpenAI first obtained in January 2026 through the FedRAMP 20x program. Moderate-level systems are held to stricter security standards because they handle data where a breach could cause serious harm to agency operations or individuals.

For federal technology buyers, this clearance opens the door to using ChatGPT Enterprise and the OpenAI API across a far broader range of internal workflows. Agencies working with sensitive (but unclassified) information can now consider OpenAI's tools for tasks that the previous Low authorization could not cover.

FedRAMP compliance also requires that all API traffic route through a dedicated government endpoint at gov.api.openai.com, and the FedRAMP versions of both products carry tighter access restrictions than their commercial counterparts. OpenAI has said its goal is to bring feature parity as close to the standard ChatGPT Enterprise and API platforms as possible over time.

A Crowded Race for Government AI Contracts

OpenAI is not alone in chasing federal dollars. Microsoft secured FedRAMP High authorization for Azure OpenAI Service in late 2024, giving agencies access to GPT-4o within Azure Government's more restricted environment. IBM, meanwhile, expanded its own FedRAMP portfolio to 11 authorized AI and automation products in early 2026, including its flagship watsonx platform.

The FedRAMP 20x framework itself is accelerating competition. Designed to replace the legacy authorization process that often stretched beyond 18 months, the modernized program uses automated, machine-readable security evidence instead of static documentation. Pilot participants in the 20x Low track received authorization in under two months, and timelines for Moderate are expected to follow a similar pace.

What to Watch Next

OpenAI already offers ChatGPT Gov, a separately deployable version that agencies can host in their own Microsoft Azure environment for more sensitive use cases. The company has also signaled plans for AWS GovCloud deployments.

The next benchmark to watch is whether OpenAI pursues FedRAMP High authorization, which would unlock access to the government's most sensitive civilian datasets in areas such as health care, law enforcement, and emergency response. For now, the Moderate clearance positions the company to compete for a broad slice of federal AI spending at a time when agencies face growing pressure to modernize operations with artificial intelligence.

Full details on the announcement are available in OpenAI's official blog post.