Public dates. Honest status.
This is our public, committed certifications roadmap for 🤫 Agent One and the 🤫 Puppy One edge grid — so every partner, integrator, and agency knows exactly what to expect by when. We publish target windows, document delays as they happen, and celebrate early releases. We are optimistic about our progress and critical about what we must improve. Every status below is a target / in-pursuit milestone — never an assertion that we are already certified.
Optimistic about progress. Honest about status.
We publish the dates
Every target window is stated publicly so partners, integrators, installers, and agencies can plan around what to expect by when — no private roadmaps, no vague 'coming soon'.
Target, not a claim
Until an attestation or authorization is granted, every item reads as in-pursuit / target. We never describe ourselves as certified before we are.
Delays and early releases
If a window moves, we say so and explain why. If we land early, we celebrate it. The record stays accurate — optimistic about progress, critical about what to improve.
Usable by your whole chain
End-users, installers, implementation, deployment, distribution, and support partners can all rely on this page to set expectations with their own stakeholders.
Status legend. 🎯 In pursuit / target means active work toward a stated window — not a granted attestation or authorization. We will update each item to achieved only when the certificate, attestation, or authorization is formally issued, and we will date it.
Every standard we're pursuing, with a target window.
SOC 2 Type II
Observation period underway; Type II attestation targeted for H2 2026. Type I readiness reached first as a milestone on the way.
ISO/IEC 27001
Information-security management system build-out in progress; Stage 1 then Stage 2 audit targeted for the second half of 2026.
ISO/IEC 42001 (AI management)
Pursuing the AI-management-system standard for governed, auditable agentic AI — targeted to follow 27001.
HIPAA readiness
Safeguards and BAA program for regulated health workloads; readiness targeted for the first half of 2027.
GDPR & EU-US Data Privacy Framework
Consent-first by construction (PCHP). Data-residency and DPF alignment is an ongoing, continuously-maintained commitment.
FedRAMP (Moderate → High)
Pursuing an agency sponsor and 3PAO assessment; Moderate authorization targeted in 2027, with High to follow. Status: in-pursuit, not authorized.
StateRAMP
Planned to follow the FedRAMP track for state and local government deployments.
CMMC 2.0 (Level 2)
Aligning to NIST SP 800-171 for the defense industrial base; Level 2 assessment targeted as the program matures.
DoD Impact Levels IL4 / IL5
Sovereign and controlled-environment deployments for the IL4/IL5 mission set, pursued alongside the FedRAMP High track.
Target windows are good-faith estimates and may move; when they do, we update this page and note the change. This roadmap is informational and is not itself a certification, attestation, or authorization.
Partners can't plan around a secret.
A roadmap you can hold us to.
SOC 2, ISO 27001 & 42001, HIPAA, GDPR/DPF, FedRAMP, StateRAMP, CMMC, IL4/IL5.
Committed windows on this page — so your stakeholders can plan around them.
We log slips and early releases as they happen. The record stays accurate.
Building for the most demanding environments.
If your standard isn't listed, or you need a sponsor conversation, talk to our trust team — we'll tell you exactly where we are and what we're targeting.
One is a product of Hushh Technologies Corporation (brand: 🤫 “hussh”), an independent company. One runs on third-party silicon, systems, and cloud; all company names are used solely to describe the platforms on which One software runs. Hushh Technologies is not affiliated with, endorsed by, sponsored by, or partnered with any company named.