Procore Federal Environment Overview

Introduction

This guide introduces the Procore Federal Zone, a new environment built to support U.S. federal agencies and contractors that require heightened security, compliance, and data governance. It operates as a fully separate platform from Procore’s Commercial environment and is authorized under the Federal Risk and Authorization Management Program (FedRAMP).

In this document, you’ll learn how the Federal Zone differs from Procore’s Commercial environment, what app developers need to consider, and where to find additional resources. Whether you’re building a new app or adapting an existing one, this guide will help you understand how to succeed within this highly regulated space.

Overview of Procore’s Federal Zone

Procore is introducing a dedicated Federal Zone, a new environment designed to meet the strict compliance and security requirements of U.S. federal agencies and contractors. This zone is FedRAMP-authorized and operates independently from our Commercial (Production) environment.

The Federal Zone includes a standalone Developer Portal and Marketplace. Apps cannot be shared between the Commercial and Federal environments; they must be registered, maintained, and deployed independently in each.

What Is FedRAMP?

The Federal Risk and Authorization Management Program (FedRAMP) is a U.S. government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. FedRAMP authorization confirms that cloud providers meet rigorous security standards and are approved for use by federal agencies.

Key Differences Between Federal and Commercial Environments

Note: Developers targeting the Federal Zone should review the distinctions below carefully. Each environment requires its own app registration and credentials, and development efforts must be scoped accordingly.

Testing Recommendations

The Federal Zone does not currently offer sandbox environments for testing purposes. This means Procore cannot provision developer or monthly sandbox accounts as it can in the Commercial environment.

To validate your app for the Federal Zone, we recommend:

• Develop and test in the Commercial environment first, using Procore’s available sandbox accounts. Once stable, conduct limited testing in the Federal Zone using production credentials in a tightly controlled staging scenario with non-sensitive sample data and restricted access.
• Swapping in the appropriate Federal environment configuration: This includes the base API URL (https://api.procoregov.com), login endpoint (https://login.procoregov.com), and your Federal-specific client ID and client secret. These credentials are not interchangeable with those used in the Commercial environment.

While this approach is not a perfect substitute for a full sandbox, it currently offers the best available method for replicating Federal Zone behavior.

How to Get Started as a FedRAMP Marketplace Partner

⚠️ Important: The FedRAMP environment does not provide sandbox accounts. All development and testing must be done in outside of the Federal Zone before final validation.

If you’d like to make your app available in Procore’s Federal Zone, you’ll need to follow a few steps to gain access to the FedRAMP Developer Portal and publish to the Federal Marketplace.

Additional Resources

• What Is FedRAMP?
• Federal Developer Portal
• Federal Marketplace
• For questions or support, contact MarketplaceQA@procore.com.