Terms of Service

Last updated: January 16, 2026

These Terms of Service ("Terms") govern your use of the FedrampGPT KSI Checker GitHub App ("the App").

By installing or using the App, you agree to these Terms.

Purpose of the App

The App is intended to assist cloud service providers by:

  • Evaluating FedRAMP 20x Key Security Indicators (KSIs)
  • Producing automated, machine-generated evidence
  • Supporting continuous, engineering-based security assessments

The App does not provide legal, compliance, or authorization guarantees.

Intended Use

The App is designed for:

  • Cloud-native systems
  • Infrastructure-as-code–driven environments
  • Engineering and compliance teams supporting FedRAMP 20x assessments

You are responsible for determining whether the App's outputs are appropriate for your specific authorization or risk decision context.

Limitations

  • The App evaluates only what can be observed through automation and available artifacts.
  • Some FedRAMP KSIs require runtime, operational, or organizational evidence that is outside the scope of this App.
  • PASS results indicate that a specific KSI requirement is satisfied based on the evaluated evidence, not that a system is "FedRAMP compliant" or authorized.

No Guarantee of Authorization

Use of the App does not guarantee:

  • FedRAMP authorization
  • Approval by a Third-Party Assessment Organization (3PAO)
  • Acceptance by any federal agency

Final authorization decisions remain the responsibility of the appropriate federal authorities.

Content Moderation and Misuse

The App does not generate user content, comments, or recommendations beyond automated evaluation results.

You agree not to:

  • Use the App to misrepresent security posture
  • Alter or selectively present results in a misleading manner
  • Claim certification, authorization, or endorsement based solely on App output

Availability and Changes

The App may be modified, updated, or discontinued at any time, including during Beta availability. Features and supported KSIs may change as FedRAMP 20x guidance evolves.

Disclaimer of Warranties

The App is provided "as is" without warranties of any kind, express or implied.

Contact

Questions regarding these Terms can be directed to the project maintainer via the associated GitHub repository.