{"id":"FR2300457485","name":"GSS One - AWS","provider":"Project Hosts Inc.","providerSlug":"project-hosts-inc","status":"FedRAMP Authorized","impact":"High","authType":"Agency","authDate":"2026-04-06","serviceModel":["PaaS","SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Collaboration","Communication","Content Management System (CMS)","Customer Service","Cybersecurity & Risk Management","Data Management","Development Tools","Network Management","Operations Management","Storage"],"assessor":"Lunarline, Inc.","assessorId":"137004","smallBusiness":true,"website":"https://www.projecthosts.com/","description":"The GSSOne AWS is a General Support System (GSS) operated by Project Hosts and deployed within AWS GovCloud. The platform is designed as a secure, multi-tenant PaaS/SaaS environment that enables federal, DoD, state, local, and tribal agencies, as well as government contractors, members of the DIB and the public to deploy and operate applications in compliance with federal security requirements. \nThe GSSOne AWS Core provides a standardized set of centrally managed services that support secure application deployment and operations, including: access control, authentication, auditing, monitoring, scanning, patching, configuration management, malware prevention, intrusion prevention, incident response, backup, and disaster recovery.\nThese capabilities are implemented and managed by Project Hosts and are leveraged by applications deployed on the platform to meet security and compliance requirements.\nGSSOne AWS supports two primary application deployment models:\n1. Applications Included Within the GSS One Authorization Boundary\nCertain SaaS applications are incorporated directly into the GSSOne AWS authorization boundary and are assessed and certified as part of the GSSOne AWS system.\n2. Applications Supported on the Platform\nGSSOne AWS also supports customer and Independent Software Vendor (ISV) applications that are deployed on the platform but maintain their own authorization boundary (e.g., agency ATO or ISV-owned system).\nIn this model, Project Hosts provides the underlying infrastructure, security services, and operational support, while the application owner maintains responsibility for their system authorization and application-specific controls. \nThis flexible deployment model allows agencies to either leverage existing SaaS capabilities or deploy their own applications within a secure, FedRAMP-authorized environment.\n\nApplications Included Within the GSS One Authorization Boundary\nThese applications are deployed, secured, and operated as part of the GSSOne AWS system and certification.\n - GSSOne AWS Portal/Admin Page\nProvided by Project Hosts this application provides user and administrative interfaces for account management, access provisioning, and operational support activities \n - JAMIS Prime ERP\nProvided and managed by JAMIS software, JAMIS Prime ERP is a platform that \nprovides browser and mobile access to finance, project accounting, contract management, billing, and operational workflows for U.S. government contractors. The system supports core functions including job cost/project accounting, contract and subcontract management, budgeting and forecasting, general ledger, cash management, accounts receivable/payable, timecards, expense reporting, fixed assets, distribution management, and project manufacturing. JAMIS Prime streamlines contract management and billing by centralizing documents, automating workflows and approvals, tracking contract actions and funding, supporting government-compliant billing across common contract types, and managing revenue recognition, cost ceilings, retention, labor categories, markups, ACRN funding, and contract-specific billing rules. These capabilities help improve visibility, collaboration, invoice accuracy, and timely payment processing across the contract lifecycle.\n - Siemens Federal Cloud (SFC)\nProvided and Managed by Siemens Government Technology, The primary software application suite within SFC consists of the Teamcenter Product Lifecycle Management (PLM) software, which is a product and process digital thread management system.  Teamcenter PLM provides full product lifecycle data management services for a customer authored end item (to include requirements, product(s) and processes) and enables customer teams to better connect with each other on relevant data needed to make informed decisions throughout a product’s lifecycle.  Teamcenter offers integration capabilities with various CAD products, serving as the central hub for managing design data throughout the product lifecycle. Teamcenter ensures that all CAD models, assemblies, and drawings are securely stored, version-controlled, and accessible within the environment. This integration allows engineers to work directly within their preferred CAD authoring tools while benefiting from Teamcenter's data management, workflow automation, and collaboration features. \n\nApplications Supported on the Platform\nGSSOne AWS also supports customer and Independent Software Vendor (ISV) applications that are deployed on the platform but maintain their own authorization boundary (e.g., agency ATO or ISV-owned system). Each of the systems below have been vetted and meets the FedRAMP requirements and are ready to pursue FedRAMP certification or have been certified under their own listing and are viewable under the dependent product list.\nExamples of supported applications include:\n - 1Factory (1Factory)\n - 202 Group/ BlueVoyant Government Services (Supply Chain Command)\n - Brightly (Brightly Software)\n - Caveonix (Caveonix Platform)\n - Chainbridge Solutions (Perseus™)\n - CloudApper (Cloudapper.ai)\n - FutureFeed (FutureFeed)\n - H2O.ai (H2O.ai Cloud for Government)\n - Invicti (Invicti Application Security Posture Management (ASPM) and Invicti Unified Platform (UP)\n - Microsoft (Office, Dynamics, Power BI Server, Project Server, SharePoint, SSRS)\n - ProSymmetry\n - San Luis Aviation, Inc. (ESChat)\n - TELCLOUD (TELCLOUD)\n - TCP Software (TimeClock Plus)\n - WordPress (WordPress CMS)\n - WordPress As a Service (WPaaS)\nFor each of these applications, Project Hosts provides deployment, security, and operational support services for these applications, enabling customers to leverage the GSSOne AWS platform while maintaining flexibility in how their systems are authorized and managed. Performing these functions on the partner’s behalf allows the software vendors to focus on their core business model in delivering a secure, highly functional application to the agency while Project Hosts handles the security/ compliance requirements. \nIn either scenario, GSSOne AWS customers also are provided with access to the following systems running on the GSS One Azure system.\n\nGSS One Command Center (GSSOCC)\nThe GSS One Command Center is a centralized compliance and operations platform that gives agencies and CSP partners real-time visibility into system security, risk, and authorization status. Designed to meet FedRAMP Rev. 5 BIRs and aligned with the direction of FedRAMP 20x, the GSSOCC supports a shift toward continuous, evidence-driven validation rather than static, point-in-time assessments. It serves as a single pane of glass for managing the full lifecycle of authorization and operations, bringing together system documentation, vulnerability data, incident tracking, change control, and monitoring into one integrated experience. By linking \ncontrols directly to supporting evidence and operational data, the GSSOCC reduces the overhead of maintaining compliance and enables faster, more transparent ATO decisions for agencies.\n\nGSS One Support Center: \nProject Hosts has configured a customer-facing support portal for creating and managing support tickets powered by Atlassian Jira. This allows customers to view all of their relevant tickets, create tickets, submit change control requests, upload screenshots, review knowledgebases and communicate with PH staff through a secure channel. \n\n","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Project%20Hosts%20Logo1.png","inMarketplace":true,"agencies":["22-005-10"],"reuseCount":0,"leverages":[],"leveragedBy":["FR2530025267","FR2521554684","FR2425742814"],"timeline":[{"date":"2022-12-21","to":"FedRAMP Ready","certType":"Rev5"},{"date":"2025-01-10","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2026-03-26","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2026-04-06","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","nextOcr":"2026-09-02","ocrOverdue":true,"valid":true,"findings":[{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"next Ongoing Certification Report date is in the past","rule":"CDS-CSO-PUB"}],"assessor":"Lunarline, Inc."},"sponsor":"22-005-10","trustCenterCheck":null}