Thomson Reuters first in sector to reach FedRAMP In Process stage
Thomson Reuters has announced it has achieved "In Process" status for the Federal Risk and Authorisation Management Program (FedRAMP), becoming the first in its market to do so.
This achievement marks a significant step for Thomson Reuters toward full FedRAMP Authorisation, demonstrating the company's efforts to meet the security and compliance standards required by United States federal agencies regarding the handling of federal data in cloud environments.
FedRAMP is a government-wide programme that standardises the approach to security assessment, authorisation, and continuous monitoring for cloud services used by federal agencies. Achieving the "In Process" designation signals that Thomson Reuters is working closely with a federal agency sponsor and is undergoing the necessary audit and compliance assessments.
Statement from leadership
Thomson Reuters President of the Government business, Steve Rubley, said:
"Achieving FedRAMP 'In Process' status demonstrates our commitment to meeting federal security standards and is truly reflective of the strength of our partnerships with government agencies through our many years of service. The trust and confidence our customers place in Thomson Reuters is demonstrated by the Department of Health and Human Services' willingness to sponsor us."
"This partnership and FedRAMP certification reinforce our commitment to delivering secure, AI-powered, trusted solutions that help the government ensure the justice system functions effectively, detects fraud and assist law enforcement in protecting communities."
Collaboration with government agencies
During the agency authorisation process, the Department of Health and Human Services (HHS) is acting as the federal sponsor for both Thomson Reuters' Legal Research and Risk & Fraud applications. The direct engagement with HHS is cited as a key factor that helped expedite the review of the application by the FedRAMP Program Management Office, as well as the company's entry into the FedRAMP marketplace.
This collaboration is described as underscoring Thomson Reuters' focus on meeting the stringent requirements needed to protect federal information systems, while still delivering what it calls mission-critical solutions to government agencies.
Implications for procurement
The status allows clients, including those served by Thomson Reuters subsidiary TRSS, a smoother purchasing process for key Thomson Reuters products. Federal agencies and regulated industries can more readily procure solutions that are FedRAMP Approved or are demonstrably advancing toward full approval, in line with tightening requirements for cloud purchasing by federal customers.
The distinction between FedRAMP In Process and the earlier FedRAMP Ready stage was highlighted in the announcement. FedRAMP In Process means a company is actively pursuing full authorisation with a federal agency sponsor. In contrast, FedRAMP Ready serves as a preliminary assessment of capabilities by a third party rather than a current, active authorisation effort.
FedRAMP and regulatory compliance
The company considers the In Process status as tangible evidence of its focus on security and privacy for its government clients. The move also strengthens Thomson Reuters' position in the procurement cycle as compliance and regulatory expectations increase for cloud service providers supplying the US federal government.
Thomson Reuters serves professionals across legal, tax, accounting, compliance, government, and media sectors. It provides software products and content resources, including legal research and risk management tools, that are increasingly being evaluated under federal security frameworks such as FedRAMP.
This milestone comes as more US government agencies continue to transition sensitive workloads to cloud-based platforms, often requiring external suppliers to achieve FedRAMP Authorisation before any purchase or contract award.