RediReview Trust Center
The RediReview solution is delivered as a SaaS offering using a multi-tenant Government-Only Cloud computing environment hosted entirely in AWS GovCloud (US).
RediReview is a benefits adjudication solution for federal programs and operations. It enables and assists agencies to make timely, accurate, and auditable adjudication decisions based on AI assisted document classification and analysis. The solution provides for secure ingestion of case files and related documents, that are processed post extraction, indexing, and classification of information. The information is then processed through a configurable agency-defined rules framework combined with AI to support adjudication decisions across a range of agency benefits. The result is faster, more consistent processing with less manual effort with complete audit trail.
Each agency operates as a logically isolated tenant with its own data, configuration, and access controls. Tenants share certain common services within a single authorization boundary, including identity and access management, AI services, and data services, which is governed by one System Security Plan, one set of controls, and one continuous monitoring program. The platform runs containerized services in AWS GovCloud (US), organized into presentation, application, and data zones in a port-constrained network, with a separate management network for security monitoring, privileged access, and administration. AI processes run within the same GovCloud environment. Agency users authenticate through a single sign-on service with multi-factor authentication. Agency case files and data enter the boundary through two defined, secured ingress points, authenticated API interface with the agency system or secure retrieval from an encrypted storage bucket within AWS GovCloud (US). All logging and security events are collected for continuous monitoring.
⌘KCompliance Programs
See All (1)The ongoing systems RediMinds maintains to stay secure and prove it—covering the policies, processes, and tools that ensure regulatory and security requirements are consistently met.
Controls
See All (204)Controls are the specific safeguards or security requirements put in place to reduce risk and protect systems, data, and operations.
AFC-CSO-ACK
PlannedProviders SHOULD promptly and automatically acknowledge the receipt of messages received from FedRAMP in their FedRAMP Security Inbox.
AFC-CSO-CRA
PlannedProviders MUST complete the required actions in Emergency or Emergency Test designated messages sent by FedRAMP within the timeframe included in the message.
AFC-CSO-EMR
PlannedProviders MUST route Emergency designated messages sent by FedRAMP to a senior security official for their awareness.
Subprocessor Systems
See All (3)A cloud service or system that is FedRAMP authorized and whose security capabilities are leveraged by RediMinds Cloud.

AWS GovCloud
AWS GovCloud (US) is an AWS Region designed to allow US government agencies and customers supporting the US government to move more sensitive workloads into the cloud. In addition to complying with FedRAMP requirements, the AWS GovCloud (US) framework adheres to U.S. International Traffic in Arms Regulations (ITAR) regulations. Additional information is available at http://aws.amazon.com/govcloud-us/. Federal agencies interested in collaborative continuous monitoring with AWS should reach out to: aws-collaborative-conmon@amazon.com

CrowdStrike Falcon Platform for Government
The primary purpose of the CrowdStrike Falcon Platform is to provide organizations with a comprehensive cybersecurity solution that encompasses the following system functions: Endpoint Security - Advanced endpoint security capabilities to protect laptops, desktops, servers, and virtual machines from various cyber threats. Threat Intelligence - Cloud-based intelligence engine to collect and analyze threat data from millions of endpoints worldwide. Managed Security - Managed security services with a team of security experts actively monitoring and responding to security events. Cloud Security - Cloud security capabilities to protect organizations' cloud environments. Security and IT Operations - Integration of security and IT operations for a unified view of security posture. Identity Protection - Identity protection capabilities to safeguard user identities and prevent unauthorized access. Next-Gen SIEM - Logging and analysis capabilities to collect, correlate, and analyze security events and logs. Charlotte AI - Delivers automated triage analysis for endpoint, identity and cloud detections and enables security teams to activate LLM inferencing within Falcon Fusion SOAR workflows.

Paramify Cloud - 20x Moderate
The Paramify Cloud (Paramify) is a software platform that automates risk management processes - including compliance planning, solution implementation, gap assessments, and continuous reporting - for cloud service providers, government agencies, and members of the Defense Industrial Base (DIB). Trusted by leading CSPs like Adobe, Cisco, Trellix, Palo Alto Networks, and Flock Safety. Living Gap Assessment Visualize compliance progress with Paramify's intuitive real-time dashboard. Track controls, manage gaps, and easily organize people, places, and components, ensuring audit readiness for FedRAMP 20X, GovRAMP, and other frameworks. Instant Audit-Ready Documentation Automate compliance, generate audit-ready deliverables like System Security Plans (SSPs), POA&Ms, and Customer Responsibility Matrices in days, not months. Continuously validate compliance with real-time automated validation tools for FedRAMP 20X and other frameworks. Fast, Cost-Effective Monitoring Continuously monitor, validate, and report compliance 90% faster at a quarter of the cost. Paramify's automated tools and Evidence Repository simplify compliance, reducing costs and enhancing efficiency. Integrated with issue management tools like Jira, it streamlines workflows, helping you meet tight deadlines.
Deliverables
See All (1)The evidence packages that demonstrate RediMinds has implemented required controls and is maintaining compliance.