{"id":"FR2601536221","name":"Get A-Head (Keel Mind)","provider":"Get A-Head","providerSlug":"get-a-head","status":"FedRAMP Ready","impact":"Moderate","authType":"Agency","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Analytics","Communication","Content Management System (CMS)","Education & Training","Health & Wellness","Research"],"assessor":"A-LIGN Compliance and Security, Inc. dba A-LIGN","assessorId":"138665","smallBusiness":true,"website":"https://www.keelmind.com/","description":"The Get A-Head Platform is delivered as a Software-as-a-Service (SaaS) offering using a multi-tenant SAAS cloud computing environment. A cloud-based SaaS platform deployed in AWS GovCloud that enables secure real-time audio communication and content delivery for behavioral health and training use cases. It is available to federal, state, local, and tribal governments, as well as research institutions and federal contractors.\n\nTo simplify the tracking, delivery, and administration of clinical training Get A-Head provides institutions with a digital ecosystem that centralizes and optimizes the interactions between supervisors, counseling trainees, and those seeking mental health support. \n\nDeveloped through the lens of both those seeking and providing mental health care, Get A-Head supports efficient communication between supervisor, trainee, and client, facilitate access to notes, and recorded sessions, across all devices (i.e., smartphones, laptops, desktops, and tablets) in a secure HIPAA & PIPEDA compliant environment.\n\nThe service includes authentication, user access management, secure media distribution, and activity logging through AWS native services, Keycloak, and internal microservices. All components are containerized and orchestrated using AWS services, and encryption is applied end-to-end using FIPS 140-3 validated cryptographic modules. The authorization boundary includes the application services, identity and access management, storage, logging, monitoring, and backup components required to operate the platform in AWS GovCloud.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Getahead%20Logo.png","inMarketplace":true,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2025-12-04","to":"FedRAMP Ready","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"A-LIGN Compliance and Security, Inc. dba A-LIGN"},"trustCenterCheck":null}