So we are a small company that has these crazy FedRAMP MBL requirements for our IaaS and SaaS. This compliance program is not available in our region though.
What is the process for a situation like ours? Do I ask for an exception? Is there an equivalent for our region? It's just me and future scalability and planning is key here.
[link] [comments]