Is Harvey FedRAMP Certified? What It Covers and How to Start

Using AI on Government Legal Work: How :Harvey: Protects Your Data

A guide for government lawyers and their security teams: where your documents and prompts go under Harvey’s FedRAMP Class D (High) certification, what stays your agency’s call, and how to start a review.

Download White Paper

Summary

For most government lawyers, the question isn't whether AI can do the work. It's what happens to sensitive information once it goes in. Harvey holds FedRAMP Class D (High) certification within Knox Systems' FedRAMP offering, listed on the FedRAMP Marketplace. Your documents and outputs stay in Knox's Azure Government environment, your prompts go only to government-authorized AI model services, and none of it is used to train models. Here's how that works, what stays as your agency's call, and how to start.

Key Takeaways

  1. Your documents and outputs stay in Knox’s Azure Government environment, and your prompts go only to government-authorized AI model services.
  2. Neither Harvey nor its subprocessors train models on your data, and only US persons can access the federal production environment.
  3. Your agency still owns the authorization to operate and the decisions outside FedRAMP’s scope.
  4. Request the security package through the FedRAMP Marketplace listing (FR2528033654), or talk to our public sector team to start.
Download White Paper