# Fortreum and InfusionPoints Test FedRAMP 20x

Fortreum and InfusionPoints completed two FedRAMP 20x pilot assessments for InfusionPoints’ XBU40 platform hosted on AWS GovCloud: the Class B (Low) pilot on July 31, 2025, and the Class C (Moderate) pilot on April 10, 2026. The pilots tested continuous, machine-readable evidence against 11 Key Security Indicators, 61 rules, and 209 validations, providing an early example of how cloud service providers can prepare evidence pipelines for independent assessment. No contract award, solicitation, or contract value was reported.

- The pilots offer cloud service providers and assessment organizations a concrete reference for engineering and evaluating continuous evidence processes across Low and Moderate assessment levels.
- Procurement teams evaluating cloud services can use the reported pilot scope as context for discussions about evidence readiness; the pilots do not, by themselves, establish a new FedRAMP requirement or procurement vehicle.
- Providers pursuing FedRAMP authorization can evaluate how machine-readable evidence and automated validations fit into their assessment preparation, while recognizing that no specific solicitation or deadline is identified.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Cloud Services
**Published:** October 01, 2026

### Government Entities
- Federal Risk and Authorization Management Program (FedRAMP)

### Vendors
- Fortreum (Third-party assessment organization)
- InfusionPoints (XBU40 platform provider)
- Amazon Web Services (AWS) (Cloud hosting provider for XBU40 on AWS GovCloud)

### Key Quotes
> We had to show that continuous evidence could work under real assessment conditions, not simply demonstrate the idea.
> — Jason Shropshire, COO at InfusionPoints

### Sources
- [Fortreum and InfusionPoints Put FedRAMP 20x to the Test](https://www.businesswire.com/news/home/20261001061434/en/Fortreum-and-InfusionPoints-Put-FedRAMP-20x-to-the-Test) - Business Wire