Skip to content

Sharetru Federal: FedRAMP Rev 5 (Class C) Certified · SOC 2 Type II Attested · U.S.-citizen staff

Get the guide

Free guide · FedRAMP verification

Show your assessor Sharetru Federal’s FedRAMP certification in five minutes

A 7-page PDF for the person who has to prove the file service is FedRAMP Moderate. Sharetru Federal is FedRAMP Rev 5 (Class C) Certified, FedRAMP’s 2026 name for FedRAMP Moderate. The guide shows where to check it on fedramp.gov and what each field means.

  • The listing, field by field: package F1311222650, its status and class, and Sharetru Federal under Certified Services
  • Five steps on the Marketplace: what your reviewer clicks, and what they will see
  • CMMC’s assessment process: section 2.20 of CAP v2.0 lined up with the 2026 listing
  • Scope: what the certification settles under DFARS 252.204-7012, and what stays with you
  • FedRAMP Rev 5 (Class C) CertifiedSharetru Federal · the new name for FedRAMP Moderate
  • SOC 2 Type II Attested
  • U.S.-citizen staff · data stored in the U.S.
  • Every transfer on the record12 months of activity log on Sharetru Federal

What's inside

What does the guide cover?

The listing, how to check it, what your assessor’s process asks for, and where the certification stops. Written for the compliance lead who has to answer a prime or prepare for an assessment.

  1. What you are verifying

    The FedRAMP Marketplace listing for package F1311222650, field by field, and what each field tells your reviewer.

  2. Five steps on the Marketplace

    Where to search, what to read, where Sharetru Federal is named, and the evidence to keep for your SSP.

  3. What your assessor’s process says

    CMMC Assessment Process v2.0, section 2.20, lined up with the fields FedRAMP renamed in 2026.

  4. What the certification settles

    The cloud requirement in DFARS 252.204-7012(b)(2)(ii)(D), and the parts that stay with your organization.

  5. When the listing isn’t enough

    The questions the 30-minute security review answers, in writing after the call.

  • 7Pages
  • 5Steps on fedramp.gov
  • 1Package to cite
  • FreeNo cost

Why it matters

Why do reviewers check the listing themselves?

Because their rules tell them to. CMMC’s assessment process sends the assessor to the FedRAMP Marketplace, and primes check it before they accept a supplier’s file service.

  • Assessors

    CAP v2.0 section 2.20 checks the Marketplace

    The assessment team finds the provider and the offering named in your SSP on the listing, then reads its class and status.

  • Primes

    DFARS 252.204-7012 flows the question down

    Every subcontractor that handles covered defense information is asked whether its file service is FedRAMP Moderate, or only “equivalent”.

  • 2026

    The words on the listing changed

    “Authorized” became “Certified” and Moderate became Class C, so an older checklist and the listing no longer match word for word.

Before you download

What else should you know about the guide?

The answers reviewers usually want before they hand over an email address.

  • Who is the guide for?

    Compliance leads and IT managers at defense contractors and subcontractors, the consultants who prepare them for CMMC, and the supplier reviewers at primes who ask about their file service.

  • Is FedRAMP Rev 5 (Class C) the same as FedRAMP Moderate?

    Yes. That's FedRAMP's 2026 name for FedRAMP Moderate: the same package, the same NIST SP 800-53 Rev 5 Moderate baseline, the same Marketplace listing. The listing shows it as “Class C (Moderate)” until 31 December 2026.

  • Is the guide current?

    It describes the listing as read on fedramp.gov on 3 November 2026 and CMMC Assessment Process v2.0. The Marketplace changes, so the guide shows you how to check the listing yourself (opens in a new tab) on the day.

  • Can I get Sharetru’s responsibility matrix?

    Yes, under NDA. We walk you through it in the 30-minute security review, objective by objective. You get a copy once you are under NDA with us or have agreed to our Terms of Service, which include one.

  • Where do I get Sharetru’s DFARS 252.204-7012 statement?

    In the 30-minute security and compliance review, or once you start a trial. It answers paragraphs (c) to (g) one by one.

  • Will someone call me?

    No call unless you book one. The PDF opens on the next page, and you can ask for the security review or a demo there if you want one.

Already evaluating?

Checked the listing? Bring the rest of your questions to a 30-minute review

Bring your prime’s questionnaire or your assessor’s questions. We answer each one for Sharetru Federal, in writing after the call. Or see a CUI exchange run end to end in a 60-minute demo on sample files.

Not a compliance project? Talk through how you move files today, 30 minutes, no slides.

Ask for the security reviewRequest a demoSee plans and start a trial

The review runs 30 minutes · Demos run 60, on sample files · 15-day free trial

What happens next

  • Sharetru Federal FedRAMP Rev 5 (Class C) Certified, the new name for FedRAMP Moderate
  • U.S.-citizen staff everyone at Sharetru with access to customer data; data stored in the U.S.
  • Every transfer on the record who sent, opened and downloaded each file, kept 12 months on Sharetru Federal