Frequently Asked Questions
Does GovConHouse hold FedRAMP authorization?
Section titled “Does GovConHouse hold FedRAMP authorization?”No. We do not currently hold FedRAMP authorization, SOC 2, or ISO 27001. We state that plainly and will update this site the day anything is actually granted. See Certifications.
Is my data isolated from other customers?
Section titled “Is my data isolated from other customers?”Yes. Data is scoped to your organization at the data-access layer. A request from one account cannot read another customer’s records. See Data Isolation.
Who processes my data?
Section titled “Who processes my data?”The platform and the subprocessors listed in Subprocessors: hosting (Fly.io, Vercel), AI processing (Anthropic, OpenAI), and payments (Stripe).
Does GovConHouse sell my data?
Section titled “Does GovConHouse sell my data?”No. We do not sell personal information, and we do not share it with third parties for their own independent marketing purposes.
Does AI submit anything on my behalf?
Section titled “Does AI submit anything on my behalf?”No. Generated content is gated behind human review. Drafts are drafts until a person approves them. See AI Human Review.
Is my compliance data my own?
Section titled “Is my compliance data my own?”Yes. Scores, evidence, and exports are your submission material. GovConHouse is your toolbox, never your certificate holder. See Shared Responsibility.