{"id":"FR2624455459","name":"Valid8 Financial GovCloud","provider":"Valid8 Financial","providerSlug":"valid8-financial","status":"Agency In Process","impact":"Moderate","authType":"Agency","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Accounting","Analytics","Artificial Intelligence (AI)","Law Enforcement","Legal & Policy"],"assessor":"A-LIGN Compliance and Security, Inc. dba A-LIGN","assessorId":"138665","smallBusiness":false,"website":"valid8financial.com","description":"Valid8 Financial GovCloud is a Software-as-a-Service asset tracing and forensic accounting platform hosted in AWS GovCloud (US) within a dedicated FedRAMP authorization boundary. It supports law enforcement, financial investigations, money laundering, elder financial exploitation, healthcare fraud, embezzlement, securities fraud, drug trafficking, human trafficking, gaming, asset tracing, e-discovery, and litigation-support workflows across dozens of states. Agency-controlled evidentiary datasets are ingested into the boundary, stored in encrypted relational and object storage, and processed through the application and analytics layer to organize, trace, and produce financial information for investigative and litigation use.\nThe authorization boundary consists of the ingestion and intake services, the application and analytics layer, the primary relational datastore, object storage, the Keycloak identity and access management service providing authentication, multi-factor authentication, and role-based access, and the audit, logging, and continuous-monitoring services. The platform runs on a CIS-hardened baseline with FIPS-validated cryptography enforcing encryption in transit and at rest. Access is restricted to authorized agency and supporting Valid8 personnel under role-based access control. The offering is being assessed against the FedRAMP Moderate baseline.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Valid8%20Logo.png","inMarketplace":true,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2026-06-30","to":"Agency Authorization In Process","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"A-LIGN Compliance and Security, Inc. dba A-LIGN"},"trustCenterCheck":null}