Anthropic pursues FedRAMP authorization for Claude Enterprise

Anthropic is seeking FedRAMP Moderate authorization for its Claude Enterprise product through the government’s new FedRAMP 20x program. This initiative aims to provide a more automated route to cloud security approval, targeting regulated commercial work involving Controlled Unclassified Information (CUI).

Under the 20x framework, the application for Moderate authorization maps to Class C, a tier designed for systems where a breach could cause serious adverse effects. This process relies on 61 Key Security Indicators (KSIs), which serve as measurable checkpoints requiring continuous validation through machine-readable evidence rather than a single, large-scale review.

While Claude Enterprise does not currently hold FedRAMP authorization, Anthropic maintains third-party NIST attestations regarding CUI requirements. This move follows the company’s existing Claude for Government product, which has held FedRAMP High authorization since September 2026.