DKAP-19-SUPPORT-SLA FedRAMP SLA Evidence Standard

D-KaP Support SLA

D-KaP Support SLA (part of EpochCore's sealed-evidence product line) gives you your monthly FedRAMP SLA evidence package — uptime, mean time to recover, incident-closure records — sealed automatically at month-end so your federal customer's ConMon (continuous monitoring) review never bottlenecks on hand-built spreadsheets.

The problem

Once you have a FedRAMP Moderate authorization, the real work starts: every single month, your federal customer's continuous monitoring (ConMon) team expects a uptime report, a mean-time-to-recover number, and an incident-closure log. If you build it in a spreadsheet, the sponsoring agency can — and will — ask you to prove nothing was edited after the incident. That single sentence on a ConMon call has ended FedRAMP authorizations.

What this product is

Support SLA pulls the three numbers FedRAMP actually cares about — monthly uptime percentage, mean time to recover (MTTR) across incidents, and the closure record for every ticket — into one signed monthly evidence file. The seal is applied the moment the data is captured, not after the fact. When your ConMon reviewer asks "how do we know this is accurate," you hand them a verification command they can run on their own laptop. The file passes or it does not; there is nothing to argue about.

Who it's for

What you get when you buy

Monthly signed SLA report (JSON + PDF)
Uptime, MTTR, and per-incident closure records in one file. Sealed at month-end. 7-year retention by default.
Tamper-evident timestamps
Each data point carries the timestamp of capture, not the timestamp of report generation. Reviewers see the event order matches reality.
Triple cryptographic signature
Three independent tamper-evident signatures, including two designed to remain secure against future computing advances.
Offline verification
Your sponsoring agency runs a single command to verify against EpochCore root 40668c787c463ca5. No call to us required.

How to use it — 3 steps

Point us at your incident-tracking system

Give us read-only access to your ticketing tool (Jira, ServiceNow, Linear, PagerDuty, or a CSV export). We pull incident events as they close. You do not change any of your existing tools or workflows.

Get your signed monthly SLA file at month-end

On the first of each month, you receive the sealed evidence file for the prior month. JSON for machine review, PDF for the people on the ConMon call.

Forward both files to your sponsoring agency

They run a one-command offline verification. The file proves itself — you do not have to defend a spreadsheet. Your ConMon obligation for the month is closed in minutes.

What it looks like in practice

Example: A FedRAMP-Moderate-authorized 80-person SaaS used to spend half a day every month assembling uptime, MTTR, and ticket-closure numbers into a deck. Their agency sponsor twice questioned whether the spreadsheet had been edited. With Support SLA they receive the sealed monthly report at month-end automatically; the sponsor's ConMon team verifies it in under a minute and signs off the same day.

The value flow

Monthly FedRAMP SLA, Sealed at Month-End Your Incidents (tickets, uptime, resolve times) Support SLA monthly roll-up + seal at close Sponsor ConMon one-command verify, signs off same day No spreadsheets. No edit-history disputes. Your monthly ConMon obligation closes itself.

Why $59 is the right price

Half a day of an engineering manager's time on the spreadsheet rebuild costs more than this product, and that is just the cost when nothing goes wrong. One ConMon question about whether the file was edited is worth multiples of the annual subscription. Support SLA prices out at less than a single billable hour per month for the equivalent peace of mind across the year.

Pricing

Base product (monthly signed SLA report) $59
+ Tamper-evident watermark bundle +$20

Want the watermarked evidence bundle? (+$20)

The same monthly report, with an invisible watermark embedded in both the JSON file and the PDF, keyed to your account and the public root of trust. The mark stays attached through screenshots, JPEG compression, and re-uploads — it held up across 90 of 136 measured tampering attempts at structural similarity index 0.985 and zero false positives in our test set. It is not a magic shield (a determined attacker can still strip a file header), but it is machine-readable proof of custody for downstream regulators and FedRAMP PMO inquiries. MEASURED

Buy Now — $59 + Watermarked Bundle ($79)