DOC-REF: FRC-2026-04-28Rev 04 / 2026

Section 8.4 - Register entry

DOC-REF: FRC-MKT-FR2417149419

Commvault Clumio Data Protection Platform

Commvault Systems, Inc. lists Commvault Clumio Data Protection Platform on the FedRAMP Marketplace with the status Legacy FedRAMP Ready, at Moderate impact, on the Agency path under the Rev5 process. Package FR2417149419, read from the marketplace feed as of September 3, 2026.

Legacy FedRAMP ReadyRev5Agency path

Section A. Register entry

What the marketplace records

FedRAMP package ID
FR2417149419
Cloud service provider
Commvault Systems, Inc.
Certification status
Legacy FedRAMP Ready
Impact level
Moderate
Certification class
Class C (Moderate)
Authorization path
Agency
Certification type
Rev5
Marketplace phase
Legacy FedRAMP Ready
Deployment model
Public Cloud
Register snapshot
September 3, 2026
Independent assessor
Coalfire Systems, Inc.
Status date
July 27, 2026
FedRAMP Ready date
July 24, 2026
Business categories
Cybersecurity & Risk Management, Data Management, Governance, Risk, and Compliance (GRC), Storage
SAM.gov UEI
XAXKNJGAZ4H2
Milestones on record
1

The marketplace carries Commvault Clumio Data Protection Platform under package FR2417149419 with 16 recorded fields. Its current status was set on July 27, 2026, and a FedRAMP Ready date of July 24, 2026. Coalfire Systems, Inc. is named as the independent assessor. No agency authorizations are listed against it in the current feed. The feed lists no service model for it, on a public cloud. Its SAM.gov unique entity identifier is XAXKNJGAZ4H2.

Section B. Milestones

1 entry in the marketplace event log

Most recent first, as recorded by FedRAMP.

Event log
DateCategoryRecorded
July 27, 2026Status ChangeStatus set to Legacy FedRAMP Ready

Section C. Cost context

What reaching Moderate costs

Our own published ranges for a provider going through this level. Nothing here is a figure this provider has disclosed.

Cost context

Budget for a Moderate authorization

Initial authorization$800,000 to $2,000,000
Continuous monitoring$150,000 to $350,000 a year
Typical timeline12 to 18 months
Control baseline325+ controls
Annual assessment$90,000 to $260,000 a year

Our published planning range for a provider pursuing Moderate. It is not a figure any listed provider has disclosed.

Read the FedRAMP Moderate cost guide / annual assessment cost / continuous monitoring cost

Path

Agency Authorization is the route for 578 of the offerings on the marketplace. Our cost pages put it at $800,000 to $2,000,000 over 12 to 18 months for Moderate. Agency authorization cost

Assessment and monitoring

No annual assessment date is on the record. Assessment recurs annually for as long as a package stays listed. Annual assessment cost / continuous monitoring cost

Section G. Nearest entries on the register

Comparable offerings

Scored on impact level, path, status, shared business categories and how close the two entries sit in the register's own timeline.

Commvault Systems, Inc. lists 2 offerings on the marketplace. The others are:

Section H. Description

As published on the marketplace

The provider's own description of the service, reproduced from the FedRAMP feed without edits.

The Clumio Data Protection Platform is delivered as a SaaS offering using Amazon Web Services public cloud computing environment. Clumio is a backup and recovery solution that helps AWS customers build resilience into their applications, data lakes, and sensitive information. Air gapped and immutable by design, Clumio helps organizations recover from ransomware and operational disruptions, automate data compliance, and optimize storage costs. Clumio is available to AWS customers for the public, federal, state, local, and tribal governments, as well as research institutions, federal contractors and government contractors.

Next step

What the same authorization would cost you

The worksheet turns an impact level, an existing security posture and an organization size into a line-by-line budget, with the 3PAO fee split out.

Provenance and independence

Source: the FedRAMP Marketplace product feed, produced by the General Services Administration. The feed's own last-change stamp is September 3, 2026; this copy was taken on September 5, 2026.

GSA's disclaimers page states that FedRAMP content about a specific commercial product or service is provided for the information and convenience of the public and “does not constitute endorsement, recommendation, or favoring by the General Services Administration”. A listing here is a record of a certification status, not a judgment about the product.

FedRAMPCost.com is an independent cost reference. We are not affiliated with FedRAMP, the GSA, any provider listed on this page, or any assessment organization, and no provider pays to appear in this register.

DOC-REF: FRC-2026-04-28 / Updated 2026-04-28