{"id":"FR2621445678","name":"Halo","provider":"Halo","providerSlug":"halo","status":"FedRAMP Authorized","impact":"20x Moderate","authType":"Program","authDate":"2026-05-06","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":[""],"assessor":"DataLock Consulting Group","assessorId":"200883","smallBusiness":true,"website":"https://usehalo.com","description":"Halo is a multi-tenant cloud platform that provides a unified operating environment for service management, workflow automation, reporting, and compliance operations. The platform is designed to support organizations in managing operational processes, security workflows, and regulated service delivery from a single, integrated system.\n\nFor Governance, Risk, and Compliance (GRC), Halo supports FedRAMP, CMMC, and DoD compliance programs by enabling compliance activities to be managed as part of day-to-day operations rather than as a separate workstream. Halo's GRC module provides functionality for vulnerability and risk management, Plan of Action and Milestones (POA&M) tracking, asset inventory, deviation management, OSCAL-based system documentation, and cross-framework control mapping. It also supports continuous monitoring packages, Key Security Indicator validation, and Ongoing Authorization deliverables in both human-readable and machine-readable formats.\n\nIn addition to GRC, the Halo platform supports broader enterprise service management capabilities, including IT Service Management (ITSM), Enterprise Service Management (ESM), Configuration Management (CMDB), and Service Level Management (SLM). These include core ITIL practices such as change management, incident management, user access management, self-service portals, automated task assignment and escalation, SLA tracking, and executive dashboards.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Halo%20Logo.png","inMarketplace":true,"agencies":["22-092"],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2026-05-06","to":"FedRAMP Certified","certType":"20x Pilot"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"DataLock Consulting Group"},"sponsor":"22-092","trustCenterCheck":null}