Harvey gains FedRAMP Class D certification, opening its legal AI to US federal agencies

What Harvey announced

Harvey announced on 28 October 2026 that it has achieved Federal Risk and Authorization Management Program (FedRAMP) Class D certification in partnership with Knox Systems, which runs a managed federal cloud. FedRAMP is the US government's security programme for cloud services, and agencies generally look for it before adopting a cloud product.

Harvey says the certification extends its platform to US federal agencies, federal contractors and partners, international governments and commercial organisations with the strictest security requirements. It says it is used by 80% of the AmLaw 100 law firms, five of the Fortune 10 and more than 3,500 customers in over 85 countries.

What federal lawyers could use it for

The release names five uses. In procurement, Harvey can review solicitations, contractor agreements and modifications against agency playbooks and suggest edits. For Freedom of Information Act and public records requests, it can do a first-pass review to find potentially responsive material, with citations so attorneys can check findings before disclosure decisions. In investigations and litigation, it can build chronologies and surface conflicting accounts. It can also research statutes and prior legal opinions for policy advice, and support joint work across agencies with controlled access.

Harvey chief information security officer Brooks Evans says FedRAMP Class D "isn't a one-time assessment" but continuous monitoring. Knox Systems chief executive Irina Denisenko says the goal is for counsel to "spend less time on first-pass review". Harvey also lists SOC 2 Type II, ISO 27001, 27701 and 42001, AIUC-1, IRAP and Texas TX-RAMP Level 2 among its existing certifications.

What changed and why it matters

Government legal work, from FOIA backlogs to contract review, is document-heavy and, as the release puts it, largely manual. Until now Harvey has sold mainly to large law firms and corporate legal teams, such as Hogan Lovells Cadwalader. FedRAMP removes a procurement barrier, but it does not mean any agency has signed up.

The release names no agency customers and gives no pricing. Harvey runs inside Knox's managed federal cloud boundary; Knox says it delivers FedRAMP authorisation in 90 days. For another AI vendor's federal push, see the GSA agreement for Claude.

The timing fits Harvey's growth push. In September 2026 the company raised $550 million at a $15.5 billion valuation, and federal agencies were a legal market it could not easily sell into without this kind of certification. The release frames the move as giving government legal teams more capacity to serve the public.

What to watch next

Watch for the first named federal agency deployments, any listing in GSA purchasing programmes, and whether agencies use Harvey to cut FOIA backlogs. More public sector AI news is under AI in Industry.

Questions people ask

Is Harvey FedRAMP certified?

Yes. Harvey announced FedRAMP Class D certification on 28 October 2026, achieved in partnership with Knox Systems.

What can federal agencies use Harvey for?

The release names procurement and contract review, first-pass FOIA document review, investigations and litigation, regulatory research and advice, and cross-agency legal work.

Which agencies use Harvey?

Not stated in the announcement. No federal agency customer is named.

Sources

1. Harvey Achieves FedRAMP Class D Certification Through Partnership with Knox Systems (Knox Systems and Harvey, 28 Oct 2026)
2. Harvey Raises $550M at a $15.5B Valuation to Help Legal Teams Own Their Intelligence (Harvey, 9 Sep 2026)