{
  "serviceIdentification": {
    "fedRampPackageId": "Pitbull Audit (PBA)",
    "ueiNumber": "D59VTQCM4KX7",
    "providerName": "Pitbull Audit LLC",
    "serviceName": "Pitbull Audit",
    "serviceAcronym": "PBA",
    "serviceDescription": "Pitbull Audit is an audit management platform for government auditors. Workpapers, evidence, supervisory review, findings and reporting sit in one environment, and every finding traces back to the evidence that supports it. It is built for audits under the Government Auditing Standards (the Yellow Book, GAGAS), used by federal Offices of Inspector General, and the IIA Global Internal Audit Standards, used by state and local government auditors.\n\nAgency users sign in through their own agency's identity provider, with its PIV/CAC and multi-factor authentication. AI features, which find evidence that may support a statement, run on Amazon Bedrock inside the same AWS FedRAMP boundary; the auditor decides what is sufficient and appropriate evidence and what gets linked.\n\nThe service runs in AWS US East (us-east-1), with backups copied to AWS US West (us-west-2), in an AWS account used for nothing else. Pitbull Audit is pursuing a FedRAMP 20x Class C (Moderate) certification.",
    "certificationType": "20x",
    "website": "https://pitbullaudit.com/",
    "logo": "https://trust.pitbullaudit.com/pitbull-audit-logo.png"
  },
  "serviceProperties": {
    "serviceType": [
      "SaaS"
    ],
    "deploymentModel": "Public Cloud",
    "businessCategory": [
      "Governance, Risk, and Compliance (GRC)",
      "Collaboration",
      "Artificial Intelligence (AI)"
    ],
    "trustCenter": {
      "repositoryType": [
        "Trust Center"
      ],
      "url": "https://trust.pitbullaudit.com/",
      "repositoryDescription": "Pitbull Audit's FedRAMP trust center: this public information, the progress toward certification, and, once the offering is assessed, the certification package for agencies.",
      "authenticationRequired": false
    },
    "additionalRepositories": [
      {
        "repositoryType": [
          "Certification Package",
          "Assessment Reports"
        ],
        "url": "https://trust.pitbullaudit.com/package/",
        "repositoryDescription": "The FedRAMP certification package for agencies, in human-readable and JSON forms with an API: the policies and procedures now, and the overview, minimum assessment scope, security decision record, secure configuration guide, and assessment and ongoing certification reports as each is approved.",
        "authenticationRequired": true,
        "accessRequestInstructions": "Sign in at https://trust.pitbullaudit.com/package/ with a federal (.gov or .mil) email address: a one-time code is emailed to you and access is immediate, with no request to approve. Agency systems use API tokens that a signed-in person makes there. Anyone else may ask at security@pitbullaudit.com."
      }
    ]
  },
  "contactInformation": [
    {
      "contactType": "Security",
      "contactName": "Pitbull Audit security",
      "contactEmail": "security@pitbullaudit.com"
    },
    {
      "contactType": "Sales",
      "contactName": "Pitbull Audit sales",
      "contactEmail": "admin@pitbullaudit.com"
    }
  ],
  "certifiedServices": [
    {
      "serviceName": "Workpapers and evidence",
      "serviceDescription": "The audit file: workpapers, evidence files and engagement records, with retention and disposition. Security category: Moderate."
    },
    {
      "serviceName": "Workpaper & review workflow",
      "serviceDescription": "Preparation, supervisory review, comments and approvals in one structured environment built around the audit file. Security category: Moderate."
    },
    {
      "serviceName": "AI-assisted cross-indexing",
      "serviceDescription": "Searches the whole engagement for evidence that may support a statement and points to the source, using Anthropic Claude models on Amazon Bedrock (US regions only). The auditor decides what is linked. Security category: Moderate."
    },
    {
      "serviceName": "Findings and reporting",
      "serviceDescription": "Findings and report language, each traced to its supporting evidence. Security category: Moderate."
    },
    {
      "serviceName": "Audit trail",
      "serviceDescription": "Review history, comments and changes preserved throughout the engagement. Security category: Moderate."
    },
    {
      "serviceName": "Time & expense tracking",
      "serviceDescription": "Hours per team member, total time per audit, and audit expenses, kept with the work itself. Security category: Moderate."
    },
    {
      "serviceName": "Agency single sign-on",
      "serviceDescription": "Sign-in through the agency's own identity provider (SAML 2.0), including PIV/CAC and the agency's multi-factor authentication. Security category: Moderate."
    }
  ],
  "thirdPartyInformationResources": {
    "certified": [
      {
        "fedRampCertifiedThirdPartyInformationResource": "AGENCYAMAZONEW",
        "useCase": "Amazon Web Services (US East/West): Hosts the whole offering: compute, database, storage, keys, network, identity, logging and security services, in a dedicated production account"
      },
      {
        "fedRampCertifiedThirdPartyInformationResource": "AGENCYAMAZONEW",
        "useCase": "Amazon Bedrock (Anthropic Claude models, US inference profiles): AI features: text an agency user chooses to send for analysis is processed by the model and the result returned"
      }
    ]
  }
}