| Provider & Service Identification | |
| Provider name | Ardoq Inc |
| Service name | Ardoq |
| Service acronym | Ardoq |
| Service description | Ardoq is a cloud-based software-as-a-service enterprise architecture platform that gives organizations a single, connected model of their IT and business landscape, covering applications, infrastructure, processes, data, and strategic initiatives. Built on a proprietary graph-based data model, Ardoq ingests and continuously updates information from an organization’s existing systems, replacing static documentation with a live, queryable view of how technology and business capabilities connect. It has built-in AI capabilities, visualization, and dashboards that help expedite access to and transformation of architecture into consumable insights for non-technical stakeholders. Agencies use Ardoq to gain visibility into AI deployment and current-state architecture, plan and track technology transformation and modernization initiatives, and maintain ongoing oversight of technical risk, dependencies, and change across the enterprise. The platform supports IT portfolio management, application rationalization, cloud migration planning, risk and compliance reporting, strategic planning and execution, and tracking of AI adoption across the technology estate. |
| Certification type | 20x |
| FedRAMP ID | FR2700429895 |
| Website | https://www.ardoq.com |
| Logo | RGB_Ardoq_Logo_Primary_Purple.svg |
| Service properties | |
| Service type | SaaS |
| Deployment model | Public Cloud |
| Business category | Data Management; Artificial Intelligence (AI); Analytics; Operations Management; Governance, Risk, and Compliance (GRC) |
| Next Ongoing Certification Report | 29 January 2027 |
| Services Included | |
| Business & IT Optimization Suite | Ardoq platform capabilities for IT portfolio management, application rationalization, and cloud migration planning, built on Ardoq's connected model of applications, infrastructure, processes, and data. |
| Strategic Planning Suite | Ardoq platform capabilities for strategic planning and execution, including planning and tracking of technology transformation and modernization initiatives. |
| Governance, Risk & Compliance Suite | Ardoq platform capabilities for risk and compliance reporting and for ongoing oversight of technical risk, dependencies, and change across the enterprise. |
| Trust center and certification data | |
Ardoq's FedRAMP Trust Center landing page and the Certification Package Overview (this record, available in both human-readable and JSON form) are public. Incident Reports related to FedRAMP Reportable Incidents are shared with affected parties as applicable.
Landing page: https://www.ardoq.com/trust-center (this page)
Repository type: Trust Center
Authentication required: No
Ardoq's SOC 2 Type II report and supporting documentation, information security, privacy, and data protection policy documents, and the ISO/IEC 27001:2022 certificate (LC-516-07, Linford & Company, valid through February 2028), available to federal agencies and FedRAMP on request.
Repository type: Assessment Reports; Policies and Procedures; Certifications
Authentication required: Yes
Access instructions: To request Ardoq's SOC 2 Type II report, supporting documentation, policy documents, and ISO/IEC 27001:2022 certificate, email fedramp@ardoq.com from a federal agency or FedRAMP address and state the purpose of the request.
| Certifications and Programs |
Certificate LC-516-07, Linford & Company, valid through February 2028
Security Trust Services Criteria, March 2025 to February 2026, Linford & Company, clean opinion
Solution Provider, SaaS Membership
Initial Implementation phase approved 5 October 2026. Not yet certified.
Protection of customer data is a priority for Ardoq. These policies set out how Ardoq safeguards the confidentiality, integrity, and availability of information stored and processed on the Ardoq platform.
Ardoq's FedRAMP 20x Class A Marketplace listing was approved on 5 October 2026, and Ardoq is in the Initial Implementation Phase, working toward certification. Progress is measured against the milestones below and updated at least quarterly.
| Milestone | Target | Status |
|---|---|---|
| Marketplace listing approved, Initial Implementation phase (5 October 2026) | Q4 2026 | Complete |
| Key Security Indicator (KSI) evidence baseline complete | Q4 2026 | In progress |
| Independent assessment for full certification Class C scheduled | Q4 2028 | Planned |
| Contacts | |
| Security contact | fedramp@ardoq.com |
| Sales contact | sales@ardoq.com |
| Machine-readable record: | Ardoq_public_information_skeleton.json ↗ |
/Logos/Ardoq/RGB_Ardoq_Logo_Stacked_White_Monochrome%201.png?width=80&height=77&name=RGB_Ardoq_Logo_Stacked_White_Monochrome%201.png){kind=logo}
We Value Your Business and Respect Your Privacy
Protection of customer data is critical to Ardoq, and information security is considered a high priority by senior management. Read on to learn more about Ardoq’s approach to safeguarding the confidentiality, integrity and availability of information stored and processed by the Ardoq Cloud platform.
Information Security/Logos/Ardoq/RGB_Ardoq_Logo_Primary_Purple.svg){kind=logo}
