{"id":"FR2700555844","name":"Linear","provider":"Linear Orbit, Inc.","providerSlug":"linear-orbit-inc","status":"Initial Implementation","impact":"Not yet listed","authType":"Program","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":["Operations Management","Development Tools","Collaboration","Artificial Intelligence (AI)"],"smallBusiness":false,"website":"https://linear.app","description":"Linear is the product development system for teams and agents, purpose-built for planning and building software products. It is a multi-tenant SaaS offering that provides issue tracking, project and cycle planning, roadmaps and initiatives, product intelligence, and agent workflows, delivered through web, desktop, and mobile clients and a public GraphQL API.\n\nLinear is currently listed in the **Initial Implementation** phase and is pursuing a FedRAMP 20x certification for its existing commercial offering, starting with a Class A submission and progressing toward Class C. Linear does not operate a separate government-only environment.\n\n**Certification scope.** The cloud service offering is the production Linear service. Federal customer data is stored and processed in Linear's US workspace region on Google Cloud Platform, with Cloudflare at the network edge. The offering includes these groups of information resources:\n\n- **Edge (Cloudflare global network):** DNS, CDN, web application firewall and DDoS protection, and Workers for request routing, file delivery and the MCP server.\n- **US workspace region (GCP us-east1, us-central1):** application, sync and background services on GKE, workspace databases, caches and queues, file storage, analytics, encryption keys, egress, and backups.\n- **Shared control plane (GCP us-east1):** authentication and account services and the account database, shared by all workspace regions.\n- **Build and deploy (GCP us-east1):** Cloud Build and Artifact Registry, with source code in GitHub.\n- **Administrative access:** Google Workspace single sign-on and Cloudflare Access for staff access to production and support tooling.\n- **Third-party information resources:** listed below with their use cases.\n\nThe logical architecture diagram in the Trust Center shows these groups and how requests move between them.\n\nProgress toward certification is published at least quarterly in Linear’s Trust Center (https://trust.linear.app).","logo":"https://linear.app/static/brand/wordmark-dark.svg","inMarketplace":false,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"cr26":{"type":"20x","trustCenterUrl":"https://trust.linear.app","trustCenterAuth":false,"nextOcr":"2027-04-15","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no FedRAMP Recognized assessor listed","rule":"CDS-CSO-PUB"}]},"timeline":[{"date":"2026-10-07","to":"Initial Implementation","certType":"20x"}],"trustCenterCheck":{"url":"https://trust.linear.app","ok":true,"kind":"answered","reason":"HTTP 200","status":200,"ms":212,"finalUrl":"https://trust.linear.app/","checkedAt":"2026-11-02T18:00:40.892Z"}}