FedRAMP Authorization Information for Confluent Cloud for Government
Confluent Cloud for Government satisfies the FedRAMP 20x public posting requirements (CDS-CSO-PUB, CDS-CSO-SVC, and CCM-OCR-NRD). This page covers the authorization status, service profile, in-scope services, and customer responsibilities. For contact information, service status, and trust center access, see Confluent Support for Confluent Cloud for Government.
Authorization status
Confluent Cloud for Government holds an active FedRAMP 20x Moderate authorization, with public references in the FedRAMP Marketplace and Confluent’s Trust Center.
- Impact level
Moderate
- FedRAMP Marketplace listing
- Authority to Operate (ATO) letter
Confluent Trust Center US Public Sector Documents section
- FedRAMP 20x trust center
trust.confluentgov.com (authentication required). Agencies can request access by sending an email to fedramp_inquiries@confluentgov.com.
- Next Ongoing Authorization Report (OAR) date
January 2027
Service profile
Confluent Cloud for Government is offered with the following specifications:
- FedRAMP ID
FR2409863458XL
- Product website
- Product logo
- Service description
Confluent Cloud for Government Software-as-a-Service (SaaS) is a fully managed, cloud-native Apache Kafka® service for connecting and processing data using a cloud computing environment. It enables its customers to focus on business needs instead of managing the underlying infrastructure supporting their Kafka instances. It is available to public, federal, state, local, and tribal governments, as well as research institutions, federal contractors, and government contractors.
The Confluent Cloud for Government offering consists of two components: the Cloud Control Plane and the Data Plane (Kafka clusters). The Cloud Control Plane is hosted in Amazon Web Services (AWS) GovCloud and Google Cloud Platform (GCP). Customers use it to select and deploy their managed Kafka resources to a Satellite Cluster. The Satellite Cluster consists of one or many Kubernetes nodes running Kafka, deployed across one or many availability zones (AZs) based on options that the customer selects. A customer can choose to deploy a Satellite Cluster to AWS GovCloud. The Control Plane manages resources in Satellite Clusters using the Control Pipeline. All customer data is retained in Satellite Clusters, and no customer data from the Satellite Clusters is sent to the Control Plane.
- Service model
Software-as-a-Service (SaaS)
- Deployment model
Public cloud
- Business category
Analytics, Data Management, Storage, Cybersecurity & Risk Management
- Unique Entity Identifier (UEI)
GHN5M5CAYT69
- Independent assessment service
Fortreum (FedRAMP assessor ID 201664)
For an overview of Confluent Cloud for Government supported features, cloud providers, and regions, see Confluent Cloud for Government.
Services in the FedRAMP Minimum Assessment Scope
The following Confluent Cloud for Government services handle federal data and metadata according to the FedRAMP 20x Minimum Assessment Scope (KSI-MAS). Security objectives use FIPS 199 impact levels for Confidentiality, Integrity, and Availability (C/I/A).
Service |
Security objective (C/I/A) |
Status |
|---|---|---|
Dedicated Kafka Cluster |
Moderate / Moderate / Moderate |
Authorized |
Confluent Cloud for Government services that are not listed in the preceding table are not in the Minimum Assessment Scope. Other Confluent offerings, including commercial Confluent Cloud and Confluent Platform, are also not in the Confluent Cloud for Government Minimum Assessment Scope.
For applicable FedRAMP security controls and best practices for the in-scope services, see Manage Security for Confluent Cloud for Government.
Customer responsibilities and secure configuration
For a summary of customer responsibilities and secure configuration guidance, see Audit access control lists in the FedRAMP best practices guide.
Documentation overview
The Confluent Cloud for Government documentation includes the following sections: