Terms & Conditions

As a condition of your use of this Site, you will not use the Site for any purpose that is unlawful or prohibited by these terms, conditions, and notices. You may not use the Site in any manner that could damage, disable, overburden, or interfere with any other party’s use and enjoyment of the Site.

StateRAMP makes every effort for the content on the Site to be correct, current, and complete; however, you should confirm the accuracy and completeness of all posted information before making any decision related to any services, products, or other matters described in the Site.

If you choose, or you are provided with, a username, password, or other information as part of StateRAMP’s security procedures, you must treat such information as confidential and you must not disclose it to any third party. You agree that you are solely responsible to us for all activities identified with your account. You agree to immediately notify StateRAMP of any unauthorized use of your username or password or any other breach of security. You must logout from your account at the end of each session. You should use particular caution when accessing your account from a public or shared computer so that others are not able to view or record your password or other personal information. StateRAMP has the absolute right to disable any username or password, at any time, for any reason, including, if in our sole discretion, we believe that you have failed to comply with any provision of these Terms.

You agree that you are solely responsible for any activity associated with your account and any Information that you submit or otherwise upload to the Site, if applicable. By uploading any such Information to the Site, you hereby grant StateRAMP a non-exclusive, fully-paid, and royalty-free right and license to use any such Information only for StateRAMP’s business purposes. All Information submitted via the Site is hosted by a third-party service provider, not StateRAMP, and StateRAMP shall have no liability whatsoever for the security or storage of such Information. You understand that the Site is neither intended nor designed for the uploading, collection, storage or protection of any protected health information (“PHI”) governed by the Health Insurance Portability and Accountability Act and its implementing regulations (“HIPAA”), nor does it need or request any non-public consumer personally identifiable information or financial information governed by the Gramm-Leach-Bliley Act (“GLBA”) or payment card information covered by the Payment Card Industry Data Security Standards (“PCI DSS”). You should never disclose, or allow to be disclosed, PHI, information protected by PCI DSS or GLBA, or other sensitive information to StateRAMP. In the event that you disclose such information (which would be a violation of these Terms), you, on behalf of your organization, acknowledge that StateRAMP does not take steps to ensure its products are HIPAA or PCI compliant. All obligations of the aforementioned regulations remain solely with you.

If registering to represent a Third Party Assessment Organization, you attest that you represent an A2LA-accredited, FedRAMP-approved organization listed on the FedRAMP Marketplace as a third party assessment organization in good standing with FedRAMP; you are fully equipped to conduct independent assessments of IaaS, SaaS, and PaaS solutions; and that all information provided through this site (“Site”) is complete and accurate.

You agree to use the technology, tools, templates, and documents provided by StateRAMP to complete the necessary assessments and reporting for service providers pursuing StateRAMP verification. You agree to upload all requested information (“Information”) into the StateRAMP Site. By accessing or using this Site, you acknowledge that you have read, understood, and agree to be bound by these Terms and all applicable laws and regulations. The Terms govern your use of the Site and any Content that StateRAMP may make available through the Site. StateRAMP may change the Terms from time to time in its sole discretion without notice. StateRAMP reserves the right to terminate or modify the Site including any of its content, in whole or in part, in any manner in StateRAMP’s sole discretion, without notice. Access to the Site is granted at StateRAMP’s sole discretion and may be revoked at any time.

UNDER NO CIRCUMSTANCES SHALL STATERAMP BE LIABLE FOR ANY TYPE OF DAMAGES OR CLAIMS RELATED TO THE SITE, INCLUDING BUT NOT LIMITED TO, INCIDENTAL, SPECIAL, PUNITIVE, INDIRECT OR CONSEQUENTIAL DAMAGES, EVEN IF STATERAMP OR ITS REPRESENTATIVES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES OR CLAIMS.