.png?width=135&height=41&name=DSS-Lockup-Black-RGB%20(1).png "DSS, Inc. Logo"){kind=small}
DSS Health Cloud: FedRAMP High Certified
Advancing Federal Health Care with a Secure, Scalable Cloud Platform
The DSS Health Cloud (DSSHC) is FedRAMP High (Class D) certified – a distinction that underscores its unwavering commitment to the highest standards of data security, regulatory compliance, and operational integrity. DSS is the first solutions provider and integrator to the Department of Veterans Affairs (VA) to receive FedRAMP High certification. Achieving an agency certification such as FedRAMP goes far beyond compliance — it directly supports our mission to improve patient care in meaningful ways.
With the support of VA as our federal sponsor, we are enabling broader adoption of DSS Health Cloud by federal agencies and commercial sectors via the FedRAMP Marketplace.
FedRAMP benefits both federal and commercial sectors by providing a standardized security framework for cloud services. For federal agencies, it streamlines cloud adoption, reduces costs through reuse of security assessments, and ensures compliance with rigorous cybersecurity standards. For commercial cloud service providers, FedRAMP opens access to the federal market, enhances credibility, and improves internal security practices, offering a competitive edge in both public and private sectors. FedRAMP status also strengthens the credibility of Juno Health, our commercial division, by improving security, enabling entry into government-related markets, and increasing competitiveness in regulated industries.
“Achieving FedRAMP High certification is a significant step in our journey to deliver trusted, secure cloud solutions to the federal health care community. This journey reflects our strong collaboration with our federal sponsor and our commitment to providing innovative, efficient, and secure technologies that improve care delivery and outcomes for patients across the country.” Mark Byers, President and CEO of DSS, Inc.
Our VA-issued Authority to Operate (ATO) for the DSS Health Cloud verifies our compliance in meeting strict cybersecurity standards and securely storing or processing federal data.
What does the certification and ATO ultimately mean to our customers? Certified systems deliver higher uptime and resilience, reducing the risk of disruptions in care delivery. In both federal and commercial health care environments, scalable and compliant cloud infrastructure ensures consistent access to real-time data, enabling clinicians to make timely, informed decisions. This foundation supports quality patient care while meeting regulatory and security requirements.
Why Choose the DSS Health Cloud
The DSS Health Cloud offers a robust and secure multi-tenant Platform as a Service (PaaS) that allows flexible integration with Software as a Service (SaaS) applications. Built on Amazon Web Services (AWS) and FedRAMP High compliant, it is designed to support the rapid deployment of secure, compliant, and scalable health care applications.
Key Benefits:
FedRAMP High Ready + In Process
Progressing toward full authorization at the High impact level.
Enhanced Security
Built with zero-trust architecture and comprehensive encryption at rest and in transit, ensuring maximum protection for sensitive health care data.
Faster Deployment
Enables rapid scaling and deployment of new projects in a fraction of the time compared to traditional on-premises solutions.
Increased Efficiency
Helps federal and commercial sectors save time and resources by streamlining cloud procurement and enhancing operational efficiency.
Improved Interoperability
Facilitates secure data sharing with other FedRAMP systems, including VA's enterprise cloud and DoD’s Medical Community of Interest or MedCOI.
Reliability
Configured across multiple AWS Availability Zones and Regions for maximum uptime and disaster recovery.
Accelerating innovation for federal agencies and vendors who support them.
Bringing new health care technology into federal agencies and large clinical organizations is complex. Independent Software Vendors (ISVs) and government program offices face long security timelines, integration hurdles, governance challenges, and high upfront costs, often delaying innovation for patients and providers.
SBG Technology Solutions, a DSS Inc. subsidiary, is the preferred onboarding and advisory partner for DSS Health Cloud.
It supports on-ramp success through:
-
Consulting structured readiness assessments and developing clear onboarding road maps
-
Helping organizations align to FedRAMP High security expectations
-
Providing architecture and interoperability guidance
-
Ensuring operational readiness for monitoring, support, and resilience
-
Coordinating across independent software vendors, DSS, and technical stakeholders at federal agencies
What is FedRAMP?
FedRAMP is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring of cloud products and services used by federal agencies. It ensures that cloud service providers (CSPs) meet stringent security standards before they can offer their services to federal agencies.
The program consists of three key milestones for CSPs:
FedRAMP Ready
FedRAMP In Process
FedRAMP Certified
Indicates that a provider has a mature security capability and is prepared for the authorization process.
The DSSHC achieved FedRAMP High Ready status from its authorizing entity, the Department of Veterans Affairs, indicating the platform meets the most stringent data protection requirements for high-impact systems handling sensitive health care data.
Signifies that a CSP is actively working with a sponsoring federal agency toward full authorization.
The DSSHC has achieved FedRAMP In Process status. This designation means DSS has worked with its federal sponsor to achieve full certification. It has completed its Readiness Assessment Report (RAR) and Security Assessment Report (SAR) and has met the final stages of review before full submission to the FedRAMP Program Management Office (PMO).
Confirms the provider has completed the assessment and been granted an Authorization to Operate (ATO) for use by federal agencies.
DSS Health Cloud is FedRAMP High (Class D) Certified, which validates the platform’s compliance with federal security standards and enable broader use of DSS Health Cloud across federal agencies through the FedRAMP Marketplace.
FedRAMP Class D Certification is the updated, highest-tier security designation (formerly called the High Impact Baseline) that replaces traditional terminology for cloud services managing sensitive U.S. government data. It requires meeting over 400 rigorous security controls defined by NIST SP 800-53.
FedRAMP Ready
Indicates that a provider has a mature security capability and is prepared for the authorization process.
The DSSHC achieved FedRAMP High Ready status from its authorizing entity, the Department of Veterans Affairs, indicating the platform meets the most stringent data protection requirements for high-impact systems handling sensitive health care data.
FedRAMP In Process
Signifies that a CSP is actively working with a sponsoring federal agency toward full authorization.
The DSSHC has achieved FedRAMP In Process status. This designation means DSS has worked with its federal sponsor to achieve full certification. It has completed its Readiness Assessment Report (RAR) and Security Assessment Report (SAR) and has met the final stages of review before full submission to the FedRAMP Program Management Office (PMO).
FedRAMP Certified
Confirms the provider has completed the assessment and been granted an Authorization to Operate (ATO) for use by federal agencies.
DSS Health Cloud is FedRAMP High (Class D) Certified, which validates the platform’s compliance with federal security standards and enable broader use of DSS Health Cloud across federal agencies through the FedRAMP Marketplace.
FedRAMP Class D Certification is the updated, highest-tier security designation (formerly called the High Impact Baseline) that replaces traditional terminology for cloud services managing sensitive U.S. government data. It requires meeting over 400 rigorous security controls defined by NIST SP 800-53.
Being part of the FedRAMP Marketplace allows the DSSHC to be discovered and reused by agencies across the federal government, promoting secure and efficient procurement of trusted cloud services. Search for the DSS Health Cloud on the FedRAMP Marketplace.
Additional Resources:
DSS Health Cloud Achieves FedRAMP In Process Status
Q&A: Inside DSS’ Journey to FedRAMP Authorization
Q&A: FedRAMP and Multicloud Strategies Accelerate Innovation Across Federal Health Care
