Security, Compliance & Certifications

FedRAMP standardizes security assessment, authorization, and continuous monitoring for cloud products and services used by U.S. federal agencies, helping ensure federal information is consistently protected. 

The FedRAMP review process validates more than 300 security controls. By meeting these rigorous requirements, Collabware has achieved Authorized status, demonstrating compliance with federal mandates and a strong commitment to protecting sensitive government information. 

FedRAMP is endorsed by the U.S. government’s Federal Chief Information Officers Council. About FedRAMP

GovRAMP provides a standardized approach to cloud security assessment and authorization for U.S. state and local governments, helping public-sector organizations adopt trusted cloud solutions with confidence.

Collabware has achieved GovRAMP Authorized status, demonstrating that Collabspace meets rigorous security requirements for protecting government information and supporting secure cloud operations.

TX-RAMP standardizes security assessment and authorization for cloud products and services used by Texas state agencies, helping ensure government information is protected according to state security requirements. 

Collabware meets TX-RAMP Level 2 requirements and is available through Texas DIR, combining strong security assurance with a streamlined procurement path for eligible government organizations.

NARA establishes standards for managing U.S. federal electronic records throughout their lifecycle. Collabspace supports NARA UERM and M-19-21 requirements, helping agencies manage, retain, and dispose of records electronically while aligning with 36 CFR Chapter 12 standards and supporting the transition to secure, compliant, fully electronic records management.

DoD 5015.2 establishes baseline requirements for records management software used by the U.S. Department of Defense. Collabspace supports these standards, including required system functionality, interfaces, search capabilities, and records management controls aligned with NARA regulations, helping organizations maintain consistent and compliant records management practices.

Section 508 requires U.S. federal agencies to make electronic and information technology accessible to people with disabilities. Collabspace supports Section 508 accessibility requirements, helping government organizations provide accessible digital experiences across software and web-based information while meeting technical and functional accessibility standards.

GSA Schedule and GSA Advantage provide U.S. government agencies with a streamlined way to purchase Collabware solutions. With pre-negotiated pricing, terms, and conditions, eligible federal, state, and local organizations can simplify procurement, reduce purchasing complexity, and accelerate access to Collabspace through established government contracting channels.

HIPAA establishes requirements for protecting the privacy and security of sensitive health information. Collabspace supports HIPAA-aligned information governance with secure access controls, encryption, automated PII and PHI detection, and records lifecycle management, helping healthcare organizations protect sensitive information while maintaining compliant, audit-ready operations.

21 CFR Part 11 establishes FDA requirements for electronic records and electronic signatures. It requires organizations to maintain controls that help ensure regulated records remain authentic, secure, confidential, and protected from unauthorized changes. Collabspace supports these requirements with governed information management and controls designed to protect electronic records.

SOC 2 Type II evaluates how organizations protect and manage customer data based on the AICPA Trust Services Criteria. Collabware undergoes independent assessment of its internal processes and security controls, demonstrating consistent practices across security, availability, processing integrity, confidentiality, and privacy to help protect sensitive information.

SEC Rule 17a-4 establishes requirements for how regulated financial organizations preserve and protect electronic records. Collabspace supports these requirements with secure, WORM-compliant storage, retention controls, and immutable audit trails, helping organizations keep regulated information secure, traceable, and audit-ready.

SOC 2 Type II evaluates how organizations protect and manage customer data based on the AICPA Trust Services Criteria. Collabware undergoes an independent assessment of its internal processes and security controls, demonstrating consistent practices across security, availability, processing integrity, confidentiality, and privacy to help protect sensitive information.

The Sarbanes-Oxley Act (SOX) establishes requirements for financial reporting, corporate accountability, and record integrity. Collabspace helps organizations support SOX compliance with secure records management, retention controls, and auditable information governance, protecting critical business records and maintaining reliable information for regulatory reviews and audits.

SOC 2 Type II evaluates how organizations protect and manage customer data based on the AICPA Trust Services Criteria. Collabware undergoes independent assessment of its internal processes and security controls, demonstrating consistent practices across security, availability, processing integrity, confidentiality, and privacy to help protect sensitive information.

The Sarbanes-Oxley Act (SOX) establishes requirements for financial reporting, corporate accountability, and record integrity. Collabspace helps organizations meet SOX compliance with secure records management, retention controls, and auditable information governance, protecting critical business records and maintaining reliable information for regulatory reviews and audits.

MoReq2010 defines core requirements for records management systems, helping ensure records remain accessible, are retained for as long as required, and are properly disposed of when retention periods expire. Its modular framework supports public and private organizations across industries, allowing records management policies and regulatory requirements to be adapted to specific business needs.

CGSB 72.34-2017 establishes Canadian standards for managing electronic records as reliable evidence. Collabspace supports these requirements with secure information governance, helping organizations maintain the integrity, authenticity, and reliability of electronic records throughout their lifecycle while strengthening compliance, audit readiness, and defensible recordkeeping practices.

MoReq2010 defines core requirements for records management systems, helping ensure records remain accessible, are retained for as long as required, and are properly disposed of when retention periods expire. Its modular framework supports public and private organizations across industries, allowing records management policies and regulatory requirements to be adapted to specific business needs.

SOC 2 Type II evaluates how organizations protect and manage customer data based on the AICPA Trust Services Criteria. Collabware undergoes an independent assessment of its internal processes and security controls, demonstrating consistent practices across security, availability, processing integrity, confidentiality, and privacy to help protect sensitive information.

WCAG 2 provides internationally recognized guidelines for making web content more accessible to people with disabilities. The guidelines address accessibility across visual, auditory, physical, cognitive, language, learning, and neurological needs, helping organizations deliver digital experiences that are more accessible and usable for people with diverse abilities.

CGSB 72.34-2017 establishes Canadian standards for managing electronic records as reliable evidence. Collabspace supports these requirements with secure information governance, helping organizations maintain the integrity, authenticity, and reliability of electronic records throughout their lifecycle while strengthening compliance, audit readiness, and defensible recordkeeping practices.

SOC 2 Type II evaluates how organizations protect and manage customer data based on the AICPA Trust Services Criteria. Collabware undergoes independent assessment of its internal processes and security controls, demonstrating consistent practices across security, availability, processing integrity, confidentiality, and privacy to help protect sensitive information.

MoReq2010 defines core requirements for records management systems, helping ensure records remain accessible, are retained for as long as required, and are properly disposed of when retention periods expire. Its modular framework supports public and private organizations across industries, allowing records management policies and regulatory requirements to be adapted to specific business needs.