OpenAI’s ChatGPT Enterprise and API Platform have received FedRAMP 20x Moderate authorization, clearing the path for U.S. federal agencies to deploy frontier AI in compliant environments. The authorization covers GPT-5.5 — OpenAI’s most capable model — and will soon include Codex Cloud access via the FedRAMP ChatGPT Enterprise workspace.
The FedRAMP 20x process, announced by GSA in March 2025, replaced the older authorization track with cloud-native security evidence, Key Security Indicators, and automated validation. That shift let OpenAI move through the Moderate path without the multi-year timelines that have historically kept federal agencies on older tooling.
NOTE
FedRAMP 20x Moderate authorization doesn’t mean automatic deployment. Each agency still makes its own authorization decision based on its policies and mission requirements.
Practically, this splits into two lanes for government teams. Program staff can use ChatGPT Enterprise for research, drafting, translation, and analysis. Technical teams can hit the OpenAI API to build AI features into case management tools, copilots, and citizen-facing workflows — all within a FedRAMP-authorized boundary. Reusable authorization data is available in OpenAI’s Trust Portal, so agency security and procurement teams don’t have to rebuild compliance reviews from scratch.
Agencies can find both products in the FedRAMP Marketplace now. Procurement runs through direct OpenAI engagement, Carahsoft (OpenAI’s authorized public sector reseller), or other acquisition paths. Contact is fedramp@openai.com for package access or gov-gtm@openai.com for deployment guidance.