Thanks to FedRAMP 20x, this milestone did not require choosing between speed and rigor. The 20x process moves authorization toward cloud-native security evidence, Key Security Indicators, automated validation, and ongoing visibility into how a cloud service offering is operated.

FedRAMP 20x, announced by GSA in March 2025, created a faster path for cloud service providers to demonstrate secure configurations and practices. OpenAI’s Security and Engineering teams worked through KSI implementation, evidence collection, validation, review cycles, and assessment materials to bring ChatGPT Enterprise and API Platform through the 20x Moderate path.

Our close collaboration with the FedRAMP team has been essential to reaching this milestone. Their partnership helped translate the promise of FedRAMP 20x into a practical, security-focused authorization path that moves at the speed modern government technology requires.

Agencies will no longer need to choose between cutting-edge AI and trusted deployment environments. For federal agencies, FedRAMP 20x Moderate opens a clearer path to adopt OpenAI’s managed AI products for internal, operational, and mission-support use cases. Program teams can use ChatGPT Enterprise to accelerate research, drafting, translation, analysis, and knowledge work. Technical teams can use the OpenAI API to build AI features into existing systems, copilots, case management tools, and citizen service workflows. Agencies can now access our most powerful models, including GPT‑5.5, in our FedRAMP environment. Additionally, agencies can soon access their Codex Cloud environment via their FedRAMP ChatGPT Enterprise workspace and utilize the Codex app via integration with FedRAMP account management and backend infrastructure.