Procore Federal Environment Overview
Learn how the Federal Zone differs from Procore’s Commercial environment and what developers need to know.
Overview
The Federal Zone is a separate Procore environment for U.S. federal agencies and contractors that require heightened security, compliance, and data governance. It is distinct from Procore’s Commercial environment and is designed to meet FedRAMP Moderate Compliance.
This page explains how the Federal Zone differs from Commercial, what changes for developers, and how to request access and publish to the Federal Marketplace.
What’s Different at a Glance
- Separate environment, infrastructure, and tenants from Commercial.
- Separate Developer Portal and Marketplace; apps are not shared between environments.
- Unique app registration and credentials per environment.
- Different OAuth and API endpoints (see table below).
- No sandbox environments in the Federal Zone.
Key Differences Between Federal and Commercial Environments
Note: Each environment requires its own app registration, credentials, and listing. Plan and scope development accordingly.
Feature | Federal Zone | Commercial (Production) |
---|---|---|
Login URL | https://login.procoregov.com |
https://login.procore.com |
API base URL | https://api.procoregov.com |
https://api.procore.com |
Developer Portal | Access by request | Open to registered developers |
Environment isolation | Separate tenant and infrastructure | Shared infrastructure |
Customer base | U.S. federal agencies and contractors (U.S. IPs only) | Global usage |
Sandbox availability | Not available | Available (developer and monthly) |
Marketplace | Separate Federal Marketplace | Procore Marketplace |
Testing Recommendations
The Federal Zone does not offer sandbox environments. To validate your app for Federal:
- Build and test in the Commercial environment first. Use Procore’s available sandbox accounts to develop and stabilize your app.
- Switch to Federal configuration for validation. Update the base API URL (
https://api.procoregov.com
), the login endpoint (https://login.procoregov.com
), and use your Federal-specific client ID and client secret. Credentials are not interchangeable between environments. - Limit scope and use non‑sensitive data. Perform only the minimum validation required in the Federal Zone using controlled test cases and restricted access.
While not a full substitute for a sandbox, this approach provides the closest model for validating behavior in the Federal Zone.
How to Get Started as a FedRAMP Marketplace Partner
⚠️ Important: The Federal Zone does not provide sandbox accounts. All development and most testing should occur outside the Federal Zone before final validation.
If you want your app available in the Federal Zone, follow these steps to gain access to the FedRAMP Developer Portal and publish to the Federal Marketplace.
Step 1: Request Access
Email marketplaceqa@procore.com with the following details:
- Your company name
- Your intent to build for the Federal Zone
- Contact information for collaborators who need portal access
To qualify for access, you must:
- Already be a Procore Marketplace partner
- Plan to list in the Federal Marketplace
- Provide proof of your FedRAMP status (for example, an ATO or reference to your listing on the FedRAMP Marketplace)
Step 2: Accept Your Portal Invitation
Once verified, you’ll receive an email invitation to the FedRAMP Developer Portal. After accepting the invite, you can:
- Build or adapt your app for the Federal Zone
- Prepare your Federal‑specific Marketplace listing
Step 3: Submit for Review
When your app is ready, submit it for validation. Procore will review:
- Functionality
- FedRAMP compliance
- Data handling practices
- Your Marketplace listing and documentation
Step 4: Publish to the Federal Marketplace
After successful validation, your app will be listed in the Procore FedRAMP Marketplace for U.S. federal agencies and contractors.
Additional Resources
- What is FedRAMP?
- Federal Developer Portal
- Federal Marketplace
- For questions or support, contact marketplaceqa@procore.com.