State deadlines
Where states have written GovRAMP into their rules for state contracts, and when it takes effect. If one of these is on your sales list, it's worth a call.
States with dated requirements
- A dated requirement for state contracts
- Government organizations taking part in GovRAMP
States with a dated requirement: Arizona, Georgia, Indiana, Minnesota, Nevada, North Carolina, Texas, Utah. Other states with participating organizations: Alabama, Alaska, Arkansas, California, Colorado, Connecticut, Florida, Idaho, Illinois, Kansas, Maine, Massachusetts, Michigan, Missouri, Nebraska, New Hampshire, New Jersey, New York, North Dakota, Ohio, Oklahoma, Oregon, Vermont, Virginia, West Virginia.
Most of these rules cover new contracts first, then renewals. Not sure what applies to you? Ask us
-
Georgia
New state contracts with a cloud component have followed GovRAMP since October 1, 2026. Full compliance becomes mandatory for every cloud purchase on July 1, 2027.
-
North Carolina
New executive-branch cloud contracts have carried GovRAMP requirements since April 1, 2026. From April 1, 2027, there's no grace period.
-
Minnesota
Cloud vendors handling the state's high-risk data must be GovRAMP Authorized by April 1, 2027.
-
Utah
Required for state cloud contracts since July 1, 2025. From July 1, 2027, solicitations will require a verified status before award.
-
Nevada
New executive-branch cloud contracts have included GovRAMP requirements since July 1, 2026.
-
Arizona
Required for new state contracts since July 1, 2025, and for renewals since July 1, 2026.
-
Indiana
Required for cloud contracts signed, amended or renewed since October 14, 2025.
-
Texas
State agencies and universities need TX-RAMP certification for cloud contracts. A GovRAMP status qualifies.
Based on each state's published policy (November 2026) and GovRAMP's list of participating governments (October 2026).
Find out where you stand.
A free 30-minute call. You don't need to know anything about GovRAMP first. Bring whatever raised it, like an RFP, a security questionnaire or a buyer's email, and tell us when you need to answer. You'll leave knowing which route fits and what stands in the way.