OneVizion GovCloud Security and Authorization Information
FedRAMP 20x | FedRAMP ID: Pending
Scope Notice: The information on this page applies only to the OneVizion GovCloud environment within the FedRAMP boundary. It does not describe, represent, or make commitments regarding OneVizion commercial cloud environments, commercial customer deployments, or non-FedRAMP services.
Last Updated: [Date to follow] Page Version: [To follow]
Machine-Readable Data
The information on this page is also published as JSON conforming to the FedRAMP Certification Package Overview schema (FRC-CSO-PKG, revision 2026-06-24).
Download the JSON file: [Link to follow]
1. Service Identification and Description
- Provider: OneVizion
- Service Name: OneVizion GovCloud Platform
- Service Acronym: OneVizion
- Certification Type: 20x
- FedRAMP ID: Pending
- UEI Number: G47UCQQFXJS9
- Website: https://onevizion.com/
- Product Logo: [Link to follow]
Service Description
The OneVizion platform replaces rigid, table-based models and spreadsheets with a modular framework that reflects the dynamic relationships between projects, assets, contracts, compliance, and field operations. Its proprietary object knowledge graph is purpose-built for organizations operating complex, asset-intensive programs at scale.
The OneVizion GovCloud Platform is a cloud-based software-as-a-service environment designed to support federal and government-oriented customer use cases. It provides configurable workflow, data management, reporting, and operational management capabilities through a managed application environment. The GovCloud environment is operated separately from OneVizion’s commercial cloud environments.
OneVizion provides solutions for fiber providers, wireless carriers, tower owners, service providers, utilities, and energy developers.
2. Service Properties
- Service Model: SaaS
- Deployment Model: [To follow]
- Business Category: [To follow]
- Next Ongoing Certification Report: Not applicable before initial certification
3. FedRAMP Boundary Summary
The OneVizion GovCloud FedRAMP boundary includes the systems, services, infrastructure, applications, personnel processes, and operational controls used to deliver the OneVizion GovCloud Platform.
The boundary is hosted in a U.S. government cloud environment and includes the production application environment, supporting infrastructure, security monitoring capabilities, deployment mechanisms, administrative access controls, and operational processes required to operate the
OneVizion GovCloud Platform.
Sensitive infrastructure details, security tooling, internal network architecture, and implementation-specific configurations are not published on this public page. Additional details may be made available to assessors, sponsoring agencies, and government stakeholders through controlled channels.
4. Service Offering Description
Core capabilities may include:
- Configurable workflow and process management
- Structured data management
- Role-based user access
- Reporting and dashboards
- Document and record management
- Integration support, where authorized
- Administrative configuration capabilities
- Operational audit and activity tracking
The specific capabilities available to a customer may vary based on contract scope, configuration, and authorized use.
5. Data Types Handled
The OneVizion GovCloud Platform may process, store, or transmit customer-provided data associated with authorized government use cases.
Depending on customer authorization and configuration, data types may include:
- Federal customer operational data
- Business process and workflow data
- User account and access information
- System activity and audit records
- Customer-managed documents and records
- Controlled Unclassified Information, where contractually authorized and appropriately configured
OneVizion does not publish customer-specific data descriptions, tenant-specific configurations, or sensitive data handling details on this public page.
Customers are responsible for ensuring that data placed into the platform is consistent with their contract, authorization, configuration, and applicable laws, regulations, and agency requirements.
6. Customer Responsibilities
Security of the OneVizion GovCloud Platform follows a shared responsibility model. OneVizion is responsible for operating and securing the FedRAMP boundary under OneVizion’s control. Customers are responsible for their own users, data, configurations, and use of the platform.
OneVizion Responsibilities
OneVizion is responsible for:
- Operating and maintaining the GovCloud platform environment
- Implementing system-level security controls within the FedRAMP boundary
- Managing platform infrastructure and application operations
- Monitoring the environment for security-relevant events
- Maintaining vulnerability management and remediation processes
- Performing incident response activities for the platform
- Managing administrative access to the GovCloud environment
- Maintaining FedRAMP certification evidence and continuous monitoring artifacts
Customer Responsibilities
Customers are responsible for:
- Managing their authorized end users
- Assigning appropriate user roles and permissions
- Ensuring user activity complies with agency policy
- Determining what data is appropriate to place in the platform
- Maintaining customer-side integrations, where applicable
- Reviewing customer-specific reports, exports, workflows, and configurations
- Reporting suspected security issues to OneVizion in a timely manner
7. Security Controls Overview
The OneVizion GovCloud Platform is designed to address applicable FedRAMP security control requirements for the FedRAMP environment.
Security capabilities include, but are not limited to:
- Identity and access management
- Role-based access controls
- Administrative access restrictions
- Multi-factor authentication for privileged access
- Centralized logging and monitoring
- Security event detection and alerting
- Endpoint and workload protection
- Network security controls
- Application-layer protection
- Secure configuration management
- Vulnerability identification and remediation
- Change management
- Incident response procedures
- Backup and recovery processes
- Audit logging and accountability
- Continuous monitoring and evidence management
For security reasons, OneVizion does not publicly disclose specific internal tools, rule logic, detection content, network topology, or implementation-level control details. Such details are available to assessors and government stakeholders through controlled assessment channels.
8. Continuous Monitoring Approach
OneVizion performs continuous monitoring for the GovCloud environment to support ongoing security oversight and FedRAMP certification requirements.
Continuous monitoring activities include:
- Collection and review of security-relevant logs
- Monitoring of cloud, application, and infrastructure events
- Vulnerability scanning and tracking
- Review of security alerts and anomalous activity
- Assessment of system changes
- Tracking of remediation activities
- Periodic control review and evidence updates
- Maintenance of certification artifacts
- Reporting to authorized stakeholders as required
Continuous monitoring information is maintained as part of OneVizion’s FedRAMP evidence and governance process. Detailed monitoring procedures, evidence artifacts, and system-specific records are not published publicly.
9. Incident Response Summary and Security Contact
OneVizion maintains an incident response process for identifying, investigating, containing, remediating, and reporting security incidents involving the OneVizion GovCloud Platform.
Incident response activities may include:
- Security event triage
- Impact analysis
- Containment and remediation
- Customer and stakeholder notification, where required
- Evidence preservation
- Root cause analysis
- Corrective action tracking
- Post-incident review
Security Contact
Security inquiries related to the OneVizion GovCloud Platform may be submitted to:
Email: security@onevizion.com
For suspected security incidents, please include:
- Description of the issue
- Date and time observed
- Affected account, tenant, or system, if known
- Contact information for follow-up
- Any supporting evidence that can be safely shared
Do not include sensitive government data, credentials, secrets, or controlled information in an unencrypted email.
10. Vulnerability Disclosure
OneVizion monitors the operational availability of the GovCloud Platform.
Reports should be sent to:
Email: security@onevizion.com
Please include:
- Description of the suspected vulnerability
- Steps to reproduce, if applicable
- Potential impact
- Affected URL, endpoint, or component, if known
- Your contact information
OneVizion requests that researchers and reporters:
- Avoid accessing, modifying, or deleting customer data
- Avoid disrupting service availability
- Avoid social engineering, phishing, or physical attacks
- Avoid testing against systems outside the OneVizion GovCloud scope
- Provide OneVizion a reasonable opportunity to investigate and remedi
OneVizion will review submitted reports and respond as appropriate.
11. Service Availability and Status
OneVizion monitors the operational availability of the GovCloud Platform.
Customer-specific availability commitments, maintenance windows, and service-level terms are governed by applicable contracts and agreements.
12. FedRAMP Certification Status
FedRAMP ID: Pending
Certification Type: 20x
Certification Class: Class C (Moderate)
Environment: OneVizion GovCloud Platform
Boundary: GovCloud environment only
Commercial Cloud Applicability: Not applicable to this page
Independent Assessment Service: A-LIGN Compliance and Security, Inc. dba A-LIGN
FedRAMP Assessor ID: 138665
Next Ongoing Certification Report: Not applicable before initial certification
This page does not represent that OneVizion has received FedRAMP Certification unless and until that certification has been formally granted and listed on the FedRAMP Marketplace.
Once certification status changes, OneVizion will update this page accordingly.
13. Trust Center
The OneVizion FedRAMP Trust Center, operated on Stratus GRC-ITSM, serves as the source for OneVizion’s FedRAMP 20x transparency and ongoing certification evidence. It publishes the same certification data through a portal for people and standards-based REST APIs, supporting access by customers, assessors, and automated compliance tools.
The Trust Center provides the published policy and procedure library, FedRAMP public information, system points of contact, inventory data, POA&M status, vulnerability disclosures, accepted risk decisions, reportable incident information, significant change records, and other continuous monitoring artifacts. It also maintains point-in-time certification evidence, including FedRAMP-schema JSON artifacts and historical snapshots aligned with each Ongoing Certification Report.
Trust Center: https://onevizion-gov.haloitsm.com/portal
Requesting Access
Portal access. Access is granted through a User Access Request (UAR). Your sponsor or point of contact submits the UAR from the Trust Center portal under Request Services. An approver reviews it, and the request is tracked as an auditable ticket. Access is removed the same way. You may also self-register from the portal login page (Create New User Account). A self-registered account is associated with your organization when your email domain matches, but UAR approval is still required before certification data is released. Accounts are role-based and scoped to this system, and sensitive fields are excluded from shared reports.
Programmatic access. There is no self-service token flow. Submit a service request under Request Services on the same UAR path. OneVizion then issues a Client ID and Client Secret scoped to your organization and system, along with your base URL and tenant identifier, the report IDs your organization may pull, and the document retrieval endpoints. Authentication uses OAuth2 client_credentials.
Full instructions: https://grcitsm.stratuscyber.com/trust-center-access-guide/
14. External Dependencies and Third-Party Information Resources
The OneVizion GovCloud Platform relies on external cloud, security, identity, monitoring, and operational services to support secure delivery of the GovCloud environment.
Publicly disclosed dependency categories include:
- Government cloud infrastructure services
- Identity and access management services
- Privileged access management services
- Security monitoring and logging services
- Endpoint and workload protection services
- Cloud-native threat detection services
- Application-layer protection services
- Secure software delivery and deployment services
- Governance, risk, and compliance support services
Apart from the FedRAMP Certified third-party information resource listed below, OneVizion does not publicly disclose the specific vendors, products, detection tooling, internal service names, or detailed architecture used to operate the GovCloud security environment. Detailed dependency information is maintained in OneVizion’s certification package and may be provided to assessors, sponsoring agencies, and government stakeholders through controlled disclosure processes.
Third-Party Information Resources: FedRAMP Certified
Halo (Halo Service Solutions Ltd) | FedRAMP ID: FR2621445678
Halo is the service management platform underlying Stratus GRC-ITSM, which OneVizion operates as its FedRAMP Trust Center at https://onevizion-gov.haloitsm.com/portal. It stores and shares OneVizion’s FedRAMP Certification Data with agencies and other necessary parties through the portal and the REST API. It also holds the governance records behind OneVizion’s certification: the policy and procedure library, continuous monitoring reports, POA&M and vulnerability records, user access requests, change records, and point-in-time certification documents. Stratus Cyber LLC configures and operates the tenant for OneVizion. OneVizion uses a FedRAMP Certified platform for certification data sharing rather than building and certifying its own. Halo is FedRAMP Certified under package ID FR2621445678 (Type 20x, Path Program, Class C (Moderate), certified 2026-05-06).
15. FedRAMP Contacts
Security Contact: [Email to follow]
Sales Contact: [Email to follow]
16. Update Cadence
Progress toward FedRAMP Certification is published at least quarterly per MKT-IIP-DCP.
Last Reviewed: [Date to follow]
Next Scheduled Review: [Date to follow]
Page Owner: FedRAMP System Owner
Disclaimer
The information on this page is provided for public transparency regarding the OneVizion GovCloud Platform and OneVizion’s FedRAMP certification activities.
This page applies only to the OneVizion GovCloud FedRAMP boundary. It does not describe OneVizion commercial cloud services, commercial customer environments, or non-FedRAMP deployments.
Security-sensitive details, including internal tools, architecture diagrams, detection logic, network configurations, and implementation-specific control details, are intentionally excluded from this public page. Such information may be provided through controlled channels to authorized parties with a need to know.
Published to satisfy CDS-CSO-PUB (Public Information) under the FedRAMP Consolidated Rules for 2026
Last updated: [Date to follow]