Perplexity’s Enterprise and API Platform is listed as certified under the U.S. government’s Federal Risk and Authorization Management Program (FedRAMP) 20x Class C (Moderate) program. The company says federal users can use the certified service for live web searches and answers that cite sources.
The FedRAMP Marketplace places the offering on the Program path and lists three authorizations. The Marketplace lists the current status as certified as of Oct. 28, 2026, and says the “Certified Since” date marks when the offering first became FedRAMP Certified: Feb. 1, 2026.
Perplexity named 360 Advanced as the independent third-party assessment organization. 360 Advanced said its review examined Key Security Indicators (KSIs) within the minimum assessment scope, the automated methods used to validate them and machine-readable evidence.
The assessor said Perplexity’s certification was the first Class C service to meet every part of FedRAMP’s 2026 Consolidated Rules, known as CR26. The Marketplace confirms the service’s classification and certified status but does not identify it as the first to meet those rules.
360 Advanced said the certification has no fixed expiration date and depends on ongoing compliance, including annual independent assessments. The organization said it would continue supporting Perplexity’s certification.
FedRAMP 20x is the program’s newer certification route for cloud services, and Class C corresponds to the Moderate category. FedRAMP says assessors check whether a provider’s security measures match its documentation and work as intended.
Under the Class C rules, providers must repeatedly validate each KSI with at least two automated methods to check its accuracy and completeness. The annual assessment requirement begins Jan. 1, 2027, when every KSI must be included in an independent review at least once a year.
