{"id":"FR2532766956","name":"IntelliGRC","provider":"IntelliGRC, Inc.","providerSlug":"intelligrc-inc","status":"FedRAMP Ready","impact":"Moderate","authType":"Agency","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":["Cybersecurity & Risk Management","Governance, Risk, and Compliance (GRC)"],"assessor":"A-LIGN Compliance and Security, Inc. dba A-LIGN","assessorId":"138665","smallBusiness":true,"website":"https://intelligrc.com/","description":"IntelliGRC is an AI-powered, all US-based and developed FedRAMP-aligned multi-tenant Governance, Risk, and Compliance (GRC) SaaS platform purpose-built for Service Providers (MSPs/MSSPs), cybersecurity consultants, and regulated organizations that must achieve, manage and maintain audit-ready compliance at scale. The platform combines asset-centric scoping, context-aware control mapping, intelligent automation, bidirectional cross tenant shared implementations, and practitioner-trained AI features to streamline assessments, evidence collection, ongoing monitoring, and compliance program management across multiple frameworks. \n\nDesigned with deep operational expertise from cybersecurity assessors and compliance practitioners, IntelliGRC enables service providers to deliver consistent, repeatable, and high-caliber compliance outcomes for their customers while reducing manual effort and SME dependency. IntelliGRC is widely used by organizations across the Defense Industrial Base (DIB), research institutions, and service providers supporting CMMC, NIST SP 800-171, NIST CSF, HIPAA, ISO 27001, SOC 2, FedRAMP, etc. Used in over 30+ CMMC L2 Certification Assessments.\n\nA fully multi-tenant architecture allows providers to centrally manage multiple customer environments, distribute governance content, standardize workflows, and operationalize compliance-as-a-service (GRCaaS). IntelliGRC’s integrated AI assistant—trained on IntelliGRC methodologies and cybersecurity compliance best practices—supports evidence analysis, control interpretation, gap evaluation, and documentation generation. Our mission is to make authentic, tangible, actionable, high-caliber, and scalable cybersecurity compliance accessible.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/IntelliGRC%20Logo.png","inMarketplace":true,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2025-12-04","to":"FedRAMP Ready","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"A-LIGN Compliance and Security, Inc. dba A-LIGN"},"trustCenterCheck":null}