{"id":"FR2200507410","name":"Copado GovCloud","provider":"Copado","providerSlug":"copado","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2023-04-28","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":[""],"assessor":"A-LIGN Compliance and Security, Inc. dba A-LIGN","assessorId":"138665","smallBusiness":true,"website":"https://www.copado.com/industries/public-sector","description":"Copado GovCloud is a cloud DevOps platform designed to make Salesforce releases faster, more efficient, and scalable across hundreds of production and sandbox instances. Copado GovCloud integrates with all major Git solutions and ensures developers, administrators, and low-code Salesforce users can all commit changes to a central Git repository or seamlessly deploy from a QA environment to production. Copado is used by small organizations and large enterprises across a wide range of industries to accelerate time to market for Salesforce applications, enhance developer efficiency, increase security visibility, improve Salesforce testing capabilities and enable digital cloud transformations. The services in scope for Copado GovCloud are:\n\n- Deploying Salesforce metadata to production and sandbox instances, with Git integration for version control and branch management. \n- Change management including agile development processes, quality gates, and code scanning. \n- Continuous deployment and continuous integration, including visual pipeline configuration.\n- Compliance rules for Salesforce metadata, including rule creation, monitoring, and enforcement of policies across user stories, Git snapshots, and deployments. * Test data seeding across sandboxes ensuring accurate quality assurance prior to production deployments.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Copado%20Logo.png","inMarketplace":true,"agencies":["22-011-01","22-005-08","22-042","22-036","22-032"],"reuseCount":4,"leverages":["AGENCYAMAZONEW","FR1805751477","F1206081364","F1512167750","F1508207205","FR2003061248","FR1918740338"],"leveragedBy":[],"timeline":[{"date":"2022-02-23","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2022-10-28","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2023-04-28","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"A-LIGN Compliance and Security, Inc. dba A-LIGN"},"sponsor":"22-036","trustCenterCheck":null}