Fact · Voice privacy and security
OMB memorandum M-24-15 says federal agencies must obtain and maintain a FedRAMP authorization when a cloud product or service falls within the scope of FedRAMP.
Checked against its source on October 17, 2026
In the source's own words
“Agencies must obtain and maintain a FedRAMP authorization when the cloud product or service falls within the scope of this section.”
M-24-15: Modernizing the Federal Risk and Authorization Management Program, Office of Management and Budget, Executive Office of the President, 2024, III. Scope of FedRAMP.
Open the original- What it measures
- The scope is set by the Act and by OMB, and the memo leaves the application to each agency. A cloud dictation service that holds federal information would need to be checked against that scope.
- What it does not show
- The memo covers federal agencies only. It does not tell state or local governments, or private companies, what to approve, and it does not say that every speech service is in scope.