Status: pursuing FedRAMP Class A Certification. Not FedRAMP Certified.
Concourse has not been granted a FedRAMP Certification and is not listed on the FedRAMP Marketplace. This page exists so that agencies, assessors, and FedRAMP can review current offering information during that process. Fields that depend on certification — the FedRAMP ID, the next Ongoing Certification Report date, and the independent assessment service — are shown as pending rather than filled with placeholder values.
This page carries the information FedRAMP requires providers to publish about a cloud service offering. The same information is available as a JSON document at /fedramp/public.json, which conforms to the FedRAMP Certification Package Overview schema (FRC-CSO-PKG). Both are generated from one source file, so the two cannot disagree — the consistency requirement in CDS-CSO-CBF.
Required disclosure information
The sixteen items below are the disclosures listed in CDS-CSO-PUB, in the order the rule states them.
| # | Required information | Value |
|---|---|---|
| 1 | FedRAMP IDCDS-CSO-FID | Pending Placeholder in use until FedRAMP assigns an ID (CDS-CSO-FID): Concourse Tech Inc. (CONCOURSE) |
| 2 | Service Model | SaaS |
| 3 | Deployment Model | Public Cloud |
| 4 | Business Category | Operations Management, Finance, Legal & Policy, Customer Service, Content Management System (CMS), Data Management, Grant Management, Human Resources, Law Enforcement, Collaboration |
| 5 | UEI Number | R1XGH5JT24M1 |
| 6 | Sales Contact Information | sales@concoursetech.com · 646-305-9964 |
| 7 | Security Contact Information | security@concoursetech.com |
| 8 | Product Website Link | https://www.concoursetech.com |
| 9 | Link to Product Logo | https://www.concoursetech.com/images/concourse-wordmark-blue.png |
| 10 | Overall Service Description | Concourse is a modular cloud platform for public institutions. A single shared core — identity and access, records, workflow, payments, reporting, and integrations — is configured into the twelve service lines listed below, so a city, county, school district, university, or state agency runs permitting, utility billing, public records, courts, procurement, grants, and related programs on one system of record rather than a patchwork of unconnected products. The platform is delivered as a multi-tenant SaaS offering on Amazon Web Services, with each customer's data logically isolated per tenant. |
| 11 | Detailed list of specific services and their security categoriesCDS-CSO-SVC | 12 services listed below |
| 12 | Link to Secure Configuration GuidanceSCG-CSO-RSC | Pending |
| 13 | Overview of documentation supplied by the provider | 5 repositories listed below |
| 14 | Link to Trust Center landing page, with access instructionsCDS-CSO-UTC | https://trust.concoursetech.com/ |
| 15 | Next Ongoing Certification Report dateCCM-OCR-NRD | Pending |
| 16 | Current FedRAMP Recognized independent assessment service | Pending |
Provider and offering
| Provider name | Concourse Tech Inc. |
| Cloud service offering | Concourse Platform |
| Acronym | CONCOURSE |
| Certification type | 20x |
| Certification class sought | Class A |
| SAM.gov Unique Entity ID (UEI) | R1XGH5JT24M1 |
| CAGE code | 09E17 |
| Service model | SaaS |
| Deployment model | Public Cloud |
| Business categories | Operations Management, Finance, Legal & Policy, Customer Service, Content Management System (CMS), Data Management, Grant Management, Human Resources, Law Enforcement, Collaboration |
Service description
Concourse is a modular cloud platform for public institutions. A single shared core — identity and access, records, workflow, payments, reporting, and integrations — is configured into the twelve service lines listed below, so a city, county, school district, university, or state agency runs permitting, utility billing, public records, courts, procurement, grants, and related programs on one system of record rather than a patchwork of unconnected products. The platform is delivered as a multi-tenant SaaS offering on Amazon Web Services, with each customer's data logically isolated per tenant.
Services in scope
CDS-CSO-SVC requires this list be complete enough for a prospective customer to determine what is and is not inside the FedRAMP Minimum Assessment Scope without requesting access to underlying certification data. Names match those used on the Solutions page.
| Service | Description | Security category | Available since |
|---|---|---|---|
| Permitting & Licensing | Applications, reviews, inspections, and renewals. Residents and businesses apply from anywhere; staff see one queue instead of five systems. | Pending | Pending |
| Legislative & Public Meetings | Organize, search, and publish agendas, minutes, votes, and public records from one system built for clerks and boards. | Pending | Pending |
| Utility Billing & Payments | Manage water, electricity, and other utilities from meter to bill to payment, with rate tables auditors can follow. | Pending | Pending |
| Community Engagement | Portals, surveys, 311, and websites residents can easily use. | Pending | Pending |
| Workforce & Labor Programs | Feedback, training, and placement programs for regional workforce boards. | Pending | Pending |
| Courts, Safety & Justice | Auditable case management and compliance for the systems the public counts on. | Pending | Pending |
| Clerk and Public Records | Public records intake, search, and fulfillment. | Pending | Pending |
| Parks & Recreation | Reservations, registrations, and memberships for public spaces. | Pending | Pending |
| Contracts & Procurement | Solicitations, contracts, vendors, and obligations under one roof. | Pending | Pending |
| Grants & Financial Aid | Intake, review, awards, and reporting for public funding programs. | Pending | Pending |
| Asset & Facilities Management | Every asset, work order, and facility in one operational picture. | Pending | Pending |
| Data & Integrations | Integration and data services connecting Concourse to systems the institution already runs. | Pending | Pending |
Documentation supplied by the provider
Concourse Trust Center — security and compliance documentation, including the SOC 2 Type II report, security policies, and subprocessor list.
How to request access: Open https://trust.concoursetech.com/ and use the access request form on that page. Requests from federal, state, local, and education customers and prospective customers are reviewed by the Concourse security team; documents under NDA are released once the request is approved. Agencies evaluating Concourse for a FedRAMP Certification should note that in the request so it can be routed accordingly. Questions: security@concoursetech.com.
Coordinated vulnerability disclosure policy, scope, and safe-harbor terms. Security contact information is also published in RFC 9116 form at /.well-known/security.txt.
Terms of Service for Concourse products and websites.
Privacy Policy covering information Concourse collects, uses, discloses, and safeguards.
Concourse Chat Services Agreement — terms specific to the AI chat service.
Secure Configuration Guidance (SCG-CSO-RSC) — Pending — not yet published
Assessment and certification status
| Independent assessment service | Pending — none engaged yet |
| Next Ongoing Certification Report | Pending — set after initial certification |
| Class A qualifying framework | SOC 2 Type II — report dated 2025-12-03 |
A FedRAMP Class A Certification requires a completed certification from an approved alternative security framework within the past twelve months — FedRAMP Rev5 including FedRAMP Ready, SOC 2 Type II, or GovRAMP (FRC-CLA-ASF). The supporting materials for that assessment are released through the Concourse Trust Center on request (FRC-CLA-EAM).
Contacts
| Type | Contact | Phone | |
|---|---|---|---|
| Security | Concourse Security Team | security@concoursetech.com | — |
| Sales | Concourse Public Sector Sales | sales@concoursetech.com | 646-305-9964 |
Information not yet established
Listed openly rather than left blank, so a reader can tell the difference between an answer and an absence.
- FedRAMP ID — Assigned by FedRAMP once the offering is registered for the Marketplace.
- Secure Configuration Guidance — No published customer-facing secure configuration guide yet.
- Next Ongoing Certification Report date — Set after initial certification.
- Independent assessment service — No FedRAMP Recognized assessor engaged yet.
- Per-service security categories — Set once the Minimum Assessment Scope and impact level are fixed.
- Per-service availability dates — The date each service became available or was certified. Required by the schema, so the service list is published on this page but held back from the JSON document until the dates are confirmed.
Machine-readable copy
Agencies and FedRAMP can fetch this disclosure programmatically at https://www.concoursetech.com/fedramp/public.json. It is served over HTTPS with Content-Type: application/json, requires no authentication, and returns 200 directly with no redirect.
Questions about this disclosure: security@concoursetech.com.