Skip to main content

FedRAMP High IAL3 Partnerships

Every company pursuing FedRAMP High (Class D) has to prove its privileged users at NIST IAL3, and the platform it builds on can't do that for it. We work with the firms that host, advise, build for and sell to those companies, so IAL3 proofing doesn't hold up the assessment.

Discuss a Partnership See Ways to Partner

Why IAL3 Partnerships Matter

A FedRAMP authorization can be inherited for the boundary. It can't be inherited for the people: who a company hires, and whether the person behind an administrator login is who they say they are.

The gap your clients still own

IA-12 identity proofing for a company's own engineers, administrators and support staff sits in the customer column of the responsibility matrix, and FedRAMP High (Class D) calls for IAL3. Where the gap lives.

IAL3 at their office or home, no travel

IAL3 Kits ship to an approved office or home in all 50 states and 32+ countries. A trained Trust Swiftly agent attends every NIST SP 800-63A-4 session on the controlled kit.

Evidence for the assessment

Each session produces a signed evidence package the assessor can review, and the IAL3 conformance mapping is available under NDA.

Ways to Partner

Each partnership starts with one client and a scoping call. These are the firms we work with, and what we bring to each.

FedRAMP accelerators

Your platform holds the boundary, but IA-12 proofing for each tenant's own engineers and administrators stays with the tenant. We give your tenants attended IAL3 on controlled kits, and the evidence their assessor tests.

Partner as an accelerator

FedRAMP advisors and readiness consultants

When a gap assessment flags IA-12 or IAL3, bring us in. We scope the rollout with your client, and your team gets the IAL3 conformance mapping under NDA for the package.

Partner as an advisor

Systems integrators and federal primes

Add attended IAL3 to the programs and proposals you deliver: privileged access, workforce onboarding and supply-chain identity, through our contract vehicles or direct award.

Talk about a program or proposal

Government resellers

Offer attended IAL3 to agencies and contractors. Trust Swiftly is available through GSA Schedule, NASA SEWP and ITES-SW2, and the capability statement carries our codes.

Partner as a reseller

Technology partners

Identity and governance platforms, compliance automation tools and authenticator makers: connect IAL3 results through our API and webhooks, take evidence into compliance tooling, or bind your authenticators in the attended session.

Explore an integration

Independent assessors

Reviewing a package that relies on Trust Swiftly for IAL3? See what each session gives you to test against SP 800-63A-4.

For assessors and 3PAOs

What Partners Get

  • A specialist who replies within one business day, and joint scoping calls with your clients.
  • The IAL3 conformance mapping under NDA, for your team and your clients' assessors.
  • A redacted sample evidence package, built from a synthetic identity.
  • A live kit walkthrough for your team.
  • Our federal capability statement, codes and contract vehicles for proposals.
  • The developer guide for integrations.
Security engineer at an office desk with a laptop and monitor showing an identity dashboard, beside a closed Trust Swiftly proofing kit case, a passport reader, and a coiled USB-C cable

How a Partnership Works

  1. Tell us about your clients or your platform. Who you work with, and where IAL3 comes up for them.
  2. We scope the first rollout together. Who needs IAL3, where they work, and the timeline to the assessment. A specialist replies within one business day.
  3. Kits ship and sessions run. Users complete attended IAL3 at their office or home, and the evidence goes to your client for its assessor.

Partner Questions

Do clients have to travel for IAL3?

No. IAL3 Kits ship to an approved office or home in all 50 states and 32+ countries, and a trained agent attends every session through the kit. NIST SP 800-63A-4 allows the agent to attend through a CSP-controlled kiosk or device.

Which contract vehicles can resellers and integrators use?

Trust Swiftly is available through established government contract vehicles, including GSA Schedule, NASA SEWP and ITES-SW2, as well as direct purchase. The federal capability statement lists our UEI and CAGE.

Can our team see what an assessor receives?

Yes. The IAL3 conformance mapping is available under NDA, and a redacted sample evidence package, built from a synthetic identity, is available on request. We can also walk your team through a live kit session.

Does Trust Swiftly integrate with identity and compliance tools?

Yes. Verification decisions and evidence reach IAM, HR and case-management systems through the REST API and webhooks, and an OSCAL component definition is available for compliance tooling. See the developer guide.

Working With Companies Pursuing FedRAMP High?

Tell us about your clients or your platform. A specialist replies within one business day.

Discuss a Partnership