{
  "$comment": "Certification progress against documented goals and milestones (MKT-IIP-DCP), updated at least quarterly. Source: fedramp-20x-package/frc/certification-plan.md §2. Served at https://www.complianceone.ai/trust/milestones.json and rendered on /trust.",
  "fedRampId": "FR2700754082",
  "certificationPackageOverviewUri": "https://www.complianceone.ai/trust/cpo.json",
  "target": "FedRAMP 20x Class C (Moderate), Program Certification path",
  "updatedAt": "2026-10-08",
  "nextUpdateDue": "2027-01-08",
  "milestones": [
    {
      "id": 1,
      "milestone": "Public certification data live (fedramp.json, services.json, changes.json, milestones.json, cpo.json, Secure Configuration Guide, Trust Center page)",
      "targetDate": "2026-10-07",
      "drivingRules": "CDS-CSO-PUB, MKT-CSO-MLR",
      "status": "Done 2026-10-07"
    },
    {
      "id": 2,
      "milestone": "Listed in the FedRAMP Marketplace (Initial Implementation Phase)",
      "targetDate": "2026-10-08",
      "drivingRules": "MKT-CSO-PML, MKT-IIP-AGU",
      "status": "Done 2026-10-08: FedRAMP ID FR2700754082"
    },
    {
      "id": 17,
      "milestone": "Independent assessment scheduled within 2 years of listing",
      "targetDate": "2028-10-08",
      "drivingRules": "MKT-IIP-DLA",
      "status": "Met: DataLock fieldwork scheduled for 2026-11-16"
    },
    {
      "id": 3,
      "milestone": "FedRAMP Recognized assessor selected and engaged",
      "targetDate": "2026-10-03",
      "drivingRules": "IVV-CSO-FIA",
      "status": "Done: DataLock Consulting Group (assessor ID 200883); engagement signed"
    },
    {
      "id": 4,
      "milestone": "Production in Azure Government (US Gov Virginia)",
      "targetDate": "2026-10-07",
      "drivingRules": "SCN-TRF-*",
      "status": "Done 2026-10-07"
    },
    {
      "id": 5,
      "milestone": "KSI metric history starts accruing",
      "targetDate": "2026-10-07",
      "drivingRules": "FRC-CSX-MOT, SDR-CSX-KMT",
      "status": "In progress since 2026-10-07"
    },
    {
      "id": 6,
      "milestone": "Independent assessment fieldwork (DataLock Consulting Group, all Class C KSIs and FedRAMP rules)",
      "targetDate": "2026-11-16 to 2026-12-04",
      "drivingRules": "IVV-CSO-FIA, IVV-CSX-AIA",
      "status": "Scheduled"
    },
    {
      "id": 7,
      "milestone": "Draft assessment findings",
      "targetDate": "2026-12-04",
      "drivingRules": "IVV-CSO-FIA",
      "status": "Planned"
    },
    {
      "id": 8,
      "milestone": "Corrections to draft findings complete",
      "targetDate": "2026-12-31",
      "drivingRules": "IVV-CSO-FIA",
      "status": "Planned"
    },
    {
      "id": 9,
      "milestone": "First quarterly progress update in the Trust Center, then every quarter",
      "targetDate": "2027-01-08",
      "drivingRules": "MKT-IIP-DCP",
      "status": "Planned"
    },
    {
      "id": 10,
      "milestone": "Independent assessment completed (final assessment report)",
      "targetDate": "2027-01-15",
      "drivingRules": "FRC-APP-FIA, IVV-CSX-AIA",
      "status": "Planned"
    },
    {
      "id": 11,
      "milestone": "Fresh package verified (automated methods re-run, validator clean)",
      "targetDate": "2027-01-25",
      "drivingRules": "FRC-APP-FCP, FRC-CSO-JSN",
      "status": "Planned"
    },
    {
      "id": 12,
      "milestone": "Certification Application Form submitted by PlatformOne",
      "targetDate": "2027-02-01",
      "drivingRules": "FRC-APP-AFC, FRC-APP-NTP",
      "status": "Planned"
    },
    {
      "id": 13,
      "milestone": "Azure provider in the ComplianceONE KSI registry",
      "targetDate": "2027-03-15",
      "drivingRules": "FRC-CSX-VVK",
      "status": "Planned"
    },
    {
      "id": 14,
      "milestone": "Six months of KSI history complete",
      "targetDate": "2027-04-07",
      "drivingRules": "FRC-CSX-MOT",
      "status": "Planned"
    },
    {
      "id": 15,
      "milestone": "First Ongoing Certification Report and Quarterly Review",
      "targetDate": "Three months after certification",
      "drivingRules": "CCM-OCR-AVL, CCM-QTR-MTG",
      "status": "Planned"
    },
    {
      "id": 16,
      "milestone": "First annual independent assessment",
      "targetDate": "By 2027-11-16",
      "drivingRules": "IVV-CSO-FIA, IVV-CSX-AIA",
      "status": "Planned"
    }
  ]
}