240db4e2a7
Some checks failed
Server CI / Postgres (shard 0) (push) Has been skipped
Server CI / Postgres (shard 3) (push) Has been skipped
BuildEnv Docker Image / build-image (push) Failing after 4s
BuildEnv Docker Image / build-image-fips (push) Failing after 4s
Migration Review & Release Notes / Generate migration review & release notes (push) Failing after 3s
Server CI / Build Environment (push) Failing after 3s
Server CI / Postgres (shard 1) (push) Has been skipped
Tools CI / check-style (mattermost-govet) (push) Failing after 4s
Server CI / Postgres (shard 2) (push) Has been skipped
Tools CI / check-style (mmgotool) (push) Failing after 3s
Server CI / Elasticsearch v8 Compatibility (push) Has been skipped
Server CI / OpenSearch v2 Compatibility (push) Has been skipped
Server CI / Postgres FIPS (shard 0) (push) Has been skipped
Tools CI / Test (mattermost-govet) (push) Failing after 3s
Server CI / Postgres FIPS (shard 1) (push) Has been skipped
Server CI / Postgres FIPS (shard 2) (push) Has been skipped
Tools CI / Test (mmgotool) (push) Failing after 3s
Server CI / Postgres FIPS (shard 3) (push) Has been skipped
Server CI / Run mmctl tests (push) Has been skipped
Server CI / Run mmctl tests (FIPS) (push) Has been skipped
Server CI / Merge Postgres Test Results (push) Has been skipped
Server CI / Merge Postgres FIPS Test Results (push) Has been skipped
Server CI / Check backport migrations (push) Has been skipped
Server CI / Check generated files (push) Has been skipped
Server CI / check-style (push) Has been skipped
Server CI / Vet API (push) Has been skipped
Server CI / Build mattermost server app (push) Has been skipped
Server CI / Server CI Complete (push) Failing after 2s
Server CI / Server CI Artifacts (push) Has been skipped
Server CI / Sentry Upload (push) Has been skipped
Server CI / Server CI Report (push) Failing after 5m1s
Server CI Nightly Race / Race Detector (push) Has been skipped
CodeQL / Analyze (go) (push) Has been cancelled
CodeQL / Analyze (javascript) (push) Has been cancelled
Webapp CI Cache Warm / Warm Webapp node_modules Cache (push) Has been cancelled
E2E CI Cache Warm / Warm E2E npm Registry Cache (push) Has been cancelled
API / build (push) Has been cancelled
Web App CI / check-types (push) Has been cancelled
Web App CI / check-lint (push) Has been cancelled
Web App CI / check-i18n (push) Has been cancelled
Web App CI / check-external-links (push) Has been cancelled
Web App CI / test (platform) (push) Has been cancelled
Web App CI / test (mattermost-redux) (push) Has been cancelled
Web App CI / test (channels shard 1/4) (push) Has been cancelled
Web App CI / test (channels shard 2/4) (push) Has been cancelled
Web App CI / test (channels shard 3/4) (push) Has been cancelled
Web App CI / test (channels shard 4/4) (push) Has been cancelled
Web App CI / upload-coverage (push) Has been cancelled
Web App CI / build (push) Has been cancelled
YAML Lint / yamllint (push) Has been cancelled
Push mirrored docker images / cd/Push mirrored docker images (push) Has been cancelled
docs-cd / Build and deploy docs (push) Has been cancelled
Docs CI / build (push) Has been cancelled
E2E Cache Warm: Cypress deps / Warm Cypress deps cache (push) Has been cancelled
Scorecards supply-chain security / Scorecard analysis (push) Has been cancelled
Server CI Weekly / Postgres FIPS (push) Has been skipped
Server CI Weekly / Run mmctl tests (FIPS) (push) Has been skipped
Server CI Weekly / Postgres with binary parameters (push) Has been skipped
Server CI Weekly / Build Environment (push) Failing after 1s
Server CI Cache Warm / Warm Go Module and Build Cache (push) Failing after 2s
Server CI Nightly Race / Build Environment (push) Failing after 1s
76 lines
4.2 KiB
Plaintext
76 lines
4.2 KiB
Plaintext
---
|
||
title: "U.S. Federal Procurement FAQ"
|
||
sidebar_label: "Federal Procurement"
|
||
---
|
||
## Is Mattermost FedRAMP authorized (High or Moderate)?
|
||
|
||
Yes. Mattermost is currently FedRAMP High authorized via partner FedHIVE and listed on the [FedRAMP Marketplace](https://marketplace.fedramp.gov/products/FR1802451335).
|
||
|
||
## Has it been granted a DoD ATO (Authority to Operate)?
|
||
|
||
Yes. Mattermost has received a Certificate to Field under Platform One’s Continuous Authority to Operate (CATO).
|
||
|
||
## What IL level (IL4/IL5/IL6) has Mattermost been deployed at?
|
||
|
||
Mattermost has been deployed in IL4, IL5, and IL6 environments, as well as in JWICS and other classified IC networks.
|
||
|
||
## Are there any export restrictions (e.g., ITAR, EAR) that would limit sharing with foreign partners?
|
||
|
||
Our software is classified as ECCN 5D002 with License Exception ENC. Additional [export compliance details](/product-overview/certifications-and-compliance#us-export-compliance-overview) are available. As of July 21, 2025, no export-control limitations affect sharing the Mattermost Professional, Enterprise, or Enterprise Advanced software with foreign entities.
|
||
|
||
## Can external partner users be added under a U.S. license (i.e., shared licensing model)?
|
||
|
||
Yes. External partners can be added as [guest or standard end user accounts](/end-user-guide/collaborate/learn-about-roles). They count towards licensing and are billed at the standard end user rate under the buyer’s subscription.
|
||
|
||
## Does it support FOIA and records compliance (e.g., message retention, audit logs, eDiscovery)?
|
||
|
||
Yes. Mattermost supports configurable retention policies, audit logs, legal hold, and eDiscovery tools, enabling compliance with FOIA and records management requirements. Full capabilities depend on configuration. Please visit the [Compliance page](https://mattermost.com/compliance/) online for more details.
|
||
|
||
## Do you support air-gapped or self-hosted deployments?
|
||
|
||
Yes. Mattermost can be deployed on-premises, in private clouds, or air-gapped networks, ensuring data sovereignty and control. See the [Deployment Guide](/deployment-guide/deployment-guide-index) for more information.
|
||
|
||
## Is CAC/SAML/LDAP integration available?
|
||
|
||
Yes. Mattermost supports [SAML 2.0](/administration-guide/onboard/sso-saml) (compatible with Okta, ADFS, OneLogin, Azure AD, PingFederate, etc.), CAC via SAML integration (configuration details may vary), and [AD/LDAP integration](/administration-guide/onboard/ad-ldap) for centralized identity, user provisioning, and group sync in Enterprise editions.
|
||
|
||
## Can it be used securely on BYOD mobile?
|
||
|
||
Yes. Mattermost supports [mobile security controls](/security-guide/mobile-security) like restricting file downloads, screen capture, and external sharing.
|
||
|
||
## Can it be used securely on mobile with MDM controls?
|
||
|
||
Yes. Mattermost supports [mobile device management (MDM) policies](/security-guide/mobile-security), while also including [mobile security controls](/security-guide/mobile-security) like restricting file downloads, screen capture, and external sharing.
|
||
|
||
## Do you have existing STIGs or documentation to support RMF/ATO efforts?
|
||
|
||
Yes, available after confirmation of appropriate governmental use. Please [contact us](https://mattermost.com/contact/).
|
||
|
||
## Are you listed on the GSA?
|
||
|
||
Yes, you can find more information [via Carasoft](https://www.carahsoft.com/mattermost/contracts).
|
||
|
||
## Are there other contract vehicles for purchasing Mattermost for other Federal, State and Local and Educational purposes?
|
||
|
||
Yes, you can find more information [here](https://www.carahsoft.com/mattermost/contracts).
|
||
|
||
## What is the entity name, address and CAGE code for Mattermost, Inc.?
|
||
|
||
- Entity Name: Mattermost, Inc.
|
||
- Address: 2100 Geng Road, Suite 210, Office 243, Palo Alto, CA, 94303, USA
|
||
- CAGE Code: 7ZTZ9
|
||
- NAICS Code: 513210
|
||
- SAM.gov Unique Entity ID: J7QLN24NAEN7
|
||
|
||
## What is the entity name, address and CAGE code Mattermost Federal, Inc?
|
||
|
||
- Entity Name: Mattermost Federal, Inc.
|
||
- Address: 11921 Freedom Drive, Suite 550, Reston, VA, 20190, USA
|
||
- CAGE Code: 9TG37
|
||
- NAICS Code: 513210
|
||
- SAM.gov Unique Entity ID: RN3UJ3CK94Q3
|
||
|
||
## What if my question is not answered here?
|
||
|
||
For any questions not answered here, please [contact us](https://mattermost.com/contact/).
|