Terms of use

Effective October 3, 2026

Agreeing to these terms

By using FedXchange, you agree to these terms. If you use it for an agency or company, you confirm you may accept them for that organization. If you don't agree, don't use FedXchange.

What FedXchange is

FedXchange is a free service from Varry LLC that helps federal security teams record their choice of services and roles, draft security policies, procedures, and plans, and follow changes in federal guidance.

FedXchange is not:

• legal advice, or a statement that your agency complies with any law or requirement;
• an authorization, assessment, or approval of any system;
• FedRAMP authorized, or affiliated with or endorsed by any government agency.

Documents FedXchange writes are drafts. Your agency is responsible for reviewing them and deciding what to adopt.

Early access

FedXchange is in early access. Features may change, and the service may sometimes be unavailable. We may limit or end early access. FedXchange is free; if that ever changes, we'll tell members well before any charge applies, and nothing is charged without your agreement.

Accounts

• Use your own work email and keep your sign-in methods secure. You're responsible for what happens under your account.
• An agency's owners decide who belongs to it and what role each person has.
• We may suspend an account that breaks these terms or puts the service or others at risk.

What not to put in FedXchange

FedXchange is not FedRAMP authorized. Don't put Controlled Unclassified Information, classified information, system details such as addresses or configurations, or personal information beyond the names and work emails of members into it.

Your content

Your agency's setup, decisions, and documents belong to your agency. You allow us to store and process them only to run FedXchange for you. Federal sources that FedXchange cites are public works.

AI assistants

If you connect an AI assistant, you're responsible for choosing one your agency allows and for following its provider's terms. The assistant can do only what your role allows, and every change it proposes needs your approval.

Acceptable use

Don't:

• try to reach another agency's data, or test security against other people's accounts or data;
• overload, scrape, or disrupt the service;
• use FedXchange for anything unlawful;
• present FedXchange drafts as official government documents before your agency adopts them.

No warranty

FedXchange is provided “as is”, without warranties of any kind, including that it is error-free, always available, or current with every federal requirement.

Limit of liability

To the extent the law allows, Varry LLC is not liable for indirect, incidental, special, or consequential damages from using FedXchange or relying on what it produces.

Changes to these terms

When we change these terms, we update the effective date above, and we'll email members about changes that matter. Using FedXchange after a change means you accept it.

Contact

Questions about these terms: use the contact form.