Perplexity Enterprise Earns First Fully CR26-Compliant FedRAMP 20x Class C Certification
Perplexity Enterprise and API Platform is the first cloud service offering to earn a fully CR26-compliant FedRAMP 20x Class C Certification, which FedRAMP confirmed on October 28, 2026. The cybersecurity and compliance firm 360 Advanced says it served as the independent assessor.
- FedRAMP confirmed on October 28, 2026 that Perplexity Enterprise and API Platform earned a fully CR26-compliant FedRAMP 20x Class C Certification.
- According to 360 Advanced, it served as the independent assessor and the offering is the first to reach this status.
- The assessment covered Key Security Indicators, automated validation methods and machine-readable evidence.
- The certification has no fixed expiration date but requires an independent assessment at least once per year.
What was certified and who assessed it
According to a 360 Advanced announcement dated Nov. 2, 2026, the firm carried out the independent assessment of Perplexity Enterprise and API Platform. FedRAMP confirmed the certification on October 28, 2026. 360 Advanced describes it as the first cloud service offering to receive a fully CR26-compliant FedRAMP 20x Class C Certification.
360 Advanced is based in St. Petersburg, Florida, and describes itself as a people-first, technology-forward cybersecurity and compliance firm. It says its approach to the engagement was people-led and AI-enabled.
How the assessment worked under CR26
The announcement explains that under CR26, independent assessors verify that security measures are implemented as documented. They also validate that those measures produce their intended outcomes, and they review them at a technical level.
For the Perplexity engagement, 360 Advanced says it did three things:
- Assessed the Key Security Indicators within the minimum assessment scope
- Evaluated the automated validation methods supporting each indicator
- Reviewed machine-readable evidence
The focus on automated validation and machine-readable evidence reflects the technical orientation the announcement attributes to the newest FedRAMP rules.
No fixed expiration, but annual assessment
According to the announcement, the certification carries no fixed expiration date. It stays in effect as long as the offering continues to meet ongoing certification requirements. Those requirements include an independent assessment at least once per year.
360 Advanced says it will keep supporting Perplexity's ongoing certification, including the annual independent assessment needed to keep the Class C Certification in effect.
Dan Collins, CEO and Founder of 360 Advanced, said Perplexity "approached FedRAMP 20x with the transparency and engineering discipline the new rules demand." He also called the result a "historic certification" and said his firm was proud to have served as the independent assessor for the first fully CR26-compliant Class C offering.
What it means for organizations
The announcement points organizations preparing for FedRAMP 20x to 360 Advanced's FedRAMP assessment services. For other cloud providers, the news shows that a certification under the CR26 rules has now been completed for one offering, with assessment centered on Key Security Indicators, automated validation and machine-readable evidence.
For Perplexity, which describes itself as the builder of a conversational answer engine that draws from credible sources in real time, the certification covers its Enterprise and API Platform offering. The source does not say which customers or agencies may use it, so any wider effect on government adoption remains unstated.
