Nix inside the FedRAMP boundary
FlakeHub, our Nix binary cache and flake platform, is FedRAMP High authorized (Certification Class D under FedRAMP's 2026 Consolidated Rules), bringing the many benefits of Nix and the Determinate platform to federal agencies and their partners.
Authorized at FedRAMP High
FlakeHub is authorized at the FedRAMP High level, the baseline for federal systems handling the most sensitive, mission-critical data.FIPS-compliant builds
Determinate Secure Packages offers FIPS-140-2-compliant package variants for organizations with strict federal requirements.Zero-trust access control
Fine-grained, zero-trust access controls mean every request Nix makes is scoped and authenticated, not implicitly trusted.Continuous monitoring
Ongoing scanning and an established CVE remediation process keep your supply chain auditable, a core FedRAMP expectation.Restricted network deployment
Deployment patterns for air-gapped and restricted government networks, with automatic handling of enterprise proxies and custom certificate authorities.Sponsored under Knox's ATO
FlakeHub's FedRAMP High authorization is sponsored under Knox's Authority to Operate, achieved by deploying on Knox's managed federal cloud.- FlakeHub now has FedRAMP High Authorization
FlakeHub now has FedRAMP High Authorization
The full announcement of FlakeHub's FedRAMP High Authorization, achieved by partnering with Knox Systems.
- How Knox Systems brought Determinate into FedRAMP High
How Knox Systems brought Determinate into FedRAMP High (opens in a new tab)
Knox Systems' case study on deploying FlakeHub to its managed federal cloud and aligning it with FedRAMP High controls.
- Determinate Trust Center
Determinate Trust Center (opens in a new tab)
Our current security and compliance posture, including SOC 2 Type II certification and audit reports.
- Support for AWS GovCloud and European Sovereign Cloud
Support for AWS GovCloud and European Sovereign Cloud
NixOS AMIs for Determinate in AWS GovCloud and European Sovereign Cloud, for teams with strict data residency and regulatory needs.
- Nix for enterprise
Nix for enterprise
Business-class Nix at organization scale: zero-trust security, enterprise authentication, and unified developer environments.
Explore more solutions
- Learn more about Software supply chain security
Software supply chain security
Provenance, SBOMs, and CVE remediation, built into every build.
- Learn more about Binary caching
Binary caching
Never build the same thing twice.
- Learn more about Federated authentication for Nix
Federated authentication for Nix
No static credentials, no rotation schedules.
- Learn more about Nix for enterprise
Nix for enterprise
The power of Nix scaled to organizations of any size and complexity.
- Learn more about Nix at scale
Nix at scale
Keep Nix fast as your monorepo, CI, and fleet grow.
- Learn more about Nix for macOS
Nix for macOS
The easy button for Nix on macOS.
- Learn more about Nix for Linux
Nix for Linux
Business-class Nix for every Linux distribution.
- Learn more about Nix-based deployments
Nix-based deployments
Deploy Nix configs without building or evaluating on the target.
- Learn more about Nix for CI/CD
Nix for CI/CD
Faster, more reproducible pipelines with Nix.
- Learn more about Nix with MDM
Nix with MDM
Zero-touch Nix deployment through your MDM.