Zoom for Government Achieves StateRAMP Authorization and Adheres to CJIS Standards

We’re excited to announce that we've been issued a StateRAMP Moderate authorization, with Zoom for Government now on the StateRAMP authorized vendor list. This achievement is only complemented by our compliance with standards determined by the FBI’s Criminal Justice Information Services (CJIS).

StateRAMP is an assessment that outlines the cybersecurity standards required from service providers offering solutions to state and local governments. Similar to FedRAMP, the program is built on the National Institute of Standards and Technology (NIST) Special Publication 800-53 Rev. 4 requirements, and is in the process of incorporating Rev. 5. It involves both a third-party assessment and continuous monitoring, with the latter providing state and local governments continuous visibility into the security postures of their vendors. 

This StateRAMP Moderate authorization applies to the Zoom for Government platform, which includes Zoom Meetings, Zoom Chat, Zoom Phone, Zoom Rooms, Zoom Rooms Connector, and Zoom API. 

Designed to protect private or sensitive information gathered by local, state, and federal law enforcement agencies, CJIS has established a set of standards for entities that access or manage sensitive information from the U.S. Justice Department. Zoom’s CJIS compliance affirms that our processes and systems comply with its set of policies for wireless networking, data encryption, remote access, and more.

With CJIS serving as the primary source of information and services for all law enforcement, national security, and intelligence community partners, Zoom for Government’s adherence to these standards represents our ongoing commitment to helping secure and support the mission of first responders and public safety officials.

Our dedication to these standards helps strengthen the seamless and secure experience we strive to provide to our public sector users. As we continue to evolve our Zoom for Government platform, these standards will continue to serve as a critical component of our work to create a platform built on trust.

Zoom for Government delivers an intuitive and secure experience similar to what commercial Zoom users know, with the only difference being that Zoom for Government is designed to comply with the specific requirements of the U.S. federal government. Both versions of the platform are scalable and flexible, giving today’s governmental organizations the technology they need to achieve their goals while still helping to protect important information shared across the platform. 

Zoom for Government has been authorized at the FedRAMP Moderate Level and achieved a Provisional Authorization (PA) from Defense Information Systems Agency (DISA) for the Department of Defense (DoD) at Impact Level 4 (IL4) and an Authorization to Operate (ATO) for DoD IL4 for Zoom Meetings with the Department of the Air Force. Zoom for Government also helps to support HIPAA compliance. 

Learn more about Zoom for Government here. For more information on our StateRAMP authorization, please contact us at stateramp@zoom.us.