RegDOX Solutions Accreditations
RegDOX FedRAMP Compliance and Achievements
RegDOX Solutions has achieved FedRAMP Moderate Equivalency through an independent 3PAO assessment.
FedRAMP (Federal Risk and Authorization Management Program) establishes a standardized approach to assessing and securing cloud services used by federal agencies.
Achieving FedRAMP Moderate Equivalency confirms that RegDOX meets all 320+ NIST SP 800-53 Rev. 5 controls, ensuring verified protection for Controlled Unclassified Information (CUI) and other regulated data.
This assessment demonstrates RegDOX’s commitment to providing a secure, compliant cloud environment for organizations operating under DFARS, NIST, and CMMC frameworks.
FIPS 140-3 Validated
Federal security frameworks increasingly require cryptographic assurance as a core component of protecting Controlled Unclassified Information (CUI) and other regulated data. FIPS 140-3, the latest U.S. and Canadian standard for validated cryptographic modules, defines the testing and certification requirements needed to ensure encryption mechanisms meet strict federal criteria. As part of RegDOX’s expanding compliance foundation, our FIPS 140-3 validation complements key achievements such as FedRAMP Moderate Equivalency, NIST SP 800-171 alignment, and ISO 27001 certification. Together, these standards demonstrate that RegDOX’s secure collaboration platform delivers independently verified protection for sensitive data across defense, research, and regulated industry environments.
NIST SP 800-171 & NIST SP 800-172 Concordance Document
The basic federal requirements for safeguarding Controlled Unclassified Information (CUI) in nonfederal systems have relied on the 110 controls within NIST SP 800-171 rev.2 (February 2020). The National Institute of Standards and Technology (NIST), in response to advanced persistent cybersecurity threats, has now released an important supplement to NIST SP 800-171 designated as NIST SP 800-172.
ISO 27001:2022 Certified Data Room Solution
Through A-LIGN, RegDOX Solutions has achieved ISO 27001 certification.
ISO 27001 is the world’s best-known information security management system (ISMS) standard. It defines the requirements an ISMS must meet.
Conformity with ISO 27001 means that an organization or business has implemented a system to manage risks related to the security of data owned or handled by the company and that this system respects all the best practices and principles enshrined in this International Standard.
ISO 27001 promotes a holistic approach to information security: vetting people, policies, and technology. An information security management system implemented according to this standard is a tool for risk management, cyber-resilience, and operational excellence.
Directorate Of Defense Trade Controls
The U.S. State Department has issued a formal opinion that companies using RegDOX® comply with ITAR requirements. This was intended to accelerate the growth of public clouds and the Internet for controlling ITAR technical data, and still RegDOX Solutions is the only company and its product remains the only product to be so designated.
EAR (Export Administration Regulations)
The overlap between ITAR and EAR allows RegDOX®‘s Secure Data Room to remain a designated solution, as all federal Export Control Material that is controlled uniquely or jointly by these regulations, fall underneath the umbrella of its coverage.
RegDOX Solutions Inc. Granted Several US Patents for its Cloud-based System to Secure and Exchange Export-controlled Data
RegDOX Solutions announced on Sept 04 2019 that the US Patent and Trademark had issued a patent covering RegDOX Solutions system to store and manage export-controlled documents in the cloud. (Patent No. 10,389,716). The patented technology confirms its ground-breaking and leading role in solving the problem of allowing multiple member and locations to collaborate using controlled data while complying with the strict regulatory and licensing requirements of US export laws.
