Incode platform achieves FedRAMP In Process status, advancing identity verification for US federal agencies
The Incode Platform is now listed on the FedRAMP Marketplace with their Agency Auth In Process designation, commonly called FedRAMP In Process. The new milestone was updated on the Marketplace on October 15, 2026. This post explains what the status means, how Incode is pursuing federal authorization, and how federal agencies can verify the progress for themselves.
The listing marks Incode's progress and represents a major milestone: Incode has converted from FedRAMP Ready to achieving an agency-sponsored authorization effort at the Moderate impact level.
What FedRAMP In Process status means
The Federal Risk and Authorization Management Program (FedRAMP®) gives US federal agencies a standard way to assess and authorize cloud services. The FedRAMP Marketplace is the official public directory of those listings, their progress, and the type of authorization.
Agency Auth In Process means a sponsoring agency is actively working with Incode toward an Authority to Operate (ATO), the formal approval for an agency to use a cloud service. An ATO is the final step. The in-process listing shows verified progress that anyone can check on the Marketplace.
How Incode is pursuing FedRAMP authorization
Incode is pursuing FedRAMP Rev 5 authorization at the Moderate impact level for the Incode Platform, which runs in AWS GovCloud (US). Rev 5 is the fifth revision of the federal security requirements, Moderate is the middle tier between Low and High, and AWS GovCloud is the Amazon Web Services region built for US government workloads.
Incode is taking an agency-sponsored path with the US General Services Administration (GSA). The effort supports GSA's blanket purchase agreement (BPA) and call order for identity verification services for Login.gov, the federal sign-in service for government websites. Learn more about Incode's selection for Login.gov identity proofing.
Why federal agencies need high-assurance identity verification
Federal agencies need high-assurance identity verification to modernize citizen-facing digital services while defending against synthetic identity fraud (identities built from real and fabricated details), deepfakes, and account takeover.
Incode built its platform to help organizations confirm that a real person is the rightful owner of an identity, with security and privacy controls designed for regulated environments.
Next steps toward a FedRAMP ATO
Incode is scheduled to start its third-party assessment with their 3PAO before the end of 2026. This milestone puts Incode omni on a path toward final ATO in early 2027.
Incode security and compliance certifications
This milestone is part of Incode's broader commitment to supporting and sustaining critical identity infrastructure for government and commercial organizations. Independently of the FedRAMP effort, Incode maintains a security and compliance program that includes SOC 2 Type II reporting (an independent audit of security controls over time), ISO/IEC 27001 certification (the international standard for information security management), and ISO/IEC 42001:2023 certification for its AI management system.
How to verify the FedRAMP In Process listing
Federal agencies and partners can view the live listing and, where appropriate, submit a package-access request on the FedRAMP Marketplace under Package ID FR2510341317.
Ready to see how Incode delivers public sector identity verification for your agency? Request a demo today.