FedRAMP
Moderate
Authorized baseline for federal SaaS
FEDRAMP MODERATE - IL2 - AI CONTENT
FedRamp Moderate AI course authoring for the federal mission.
WayPoints is the standalone AI authoring tool that turns your policies, SOPs, and directives into complete, Section 508-compliant courses in minutes. Built and authorized for federal agencies, contractors, and partners who require FedRAMP Moderate and DoD Impact Level 2.
Authorized for
- Federal civilian agencies
- Defense & IL2 workloads
- Cleared contractors & partners
- FFRDCs & national labs
FedRAMP
DoD IL2
Impact Level 2 workloads supported
508 By default
WCAG 2.1 AA, VPAT on request
Weeks →
minutes
From source document to ready course
BUILT FOR THE MISSION
Modern course creation, inside the controls your agency requires.
Turn directives into training
Drop in a policy memo, SOP, or compliance directive. WayPoints maps the outcomes and drafts complete, structured lessons and assessments, so mandated training ships in an afternoon instead of a quarter.
Keep data inside the boundary
WayPoints runs on customer-controlled AI endpoints within the authorized boundary. Your source content is never sent to public LLMs and never used to train third-party models.
Meet 508 the first time
Every course is keyboard-operable and screen-reader tested, generated to WCAG 2.1 AA. Accessibility is built in, not remediated after an audit flags it.
Run it in the LMS you already have
Publish to Tovuti, or export SCORM 2004 and standalone HTML to run courses in your agency’s existing authorized LMS. No rip-and-replace.
Security & Compliance
Federal-grade by default, not by add-on.
WayPoints is built to clear security review the first time. Here is what your ISSO, security, and procurement teams need on day one.
Authorization & data residency
- FedRAMP Moderate authorized baseline
- DoD Impact Level 2 (IL2) workloads
- Hosted in U.S. cloud regions, data kept in-boundary
- Tenant isolation with segregated environments
Identity & access
- SSO via SAML 2.0 and OpenID Connect
- SCIM provisioning and de-provisioning
- Role-based access control (RBAC)
- MFA and PIV / CAC-backed identity providers
Data protection & oversight
- Encryption in transit (TLS 1.2+) and at rest
- No public-LLM exposure of your content
- Audit logs for authoring and admin actions
- Customer-controlled AI endpoints
Detailed documentation, including the System Security Plan summary and current VPAT, is available under NDA on request.
WHO IT'S FOR
One authoring tool for the whole federal ecosystem.
Federal civilian agencies
Stand up mandated compliance, onboarding, and policy training fast, with the FedRAMP Moderate posture your AO expects.
Defense & IL2 programs
Author training for IL2 workloads inside a controlled boundary, with no public-LLM exposure of source material.
Contractors & integrators
Deliver course content to your agency customers on an authorized tool, and export SCORM to their LMS of record.
FFRDCs & national labs
Convert dense technical and safety documentation into accessible, outcome-mapped training your researchers will finish.
SECTION 508
Accessible for every learner, on every device.
Section 508 conformance is a requirement, not a nice-to-have. WayPoints generates courses that meet WCAG 2.1 AA out of the box, so you spend review cycles on content, not remediation.
- Keyboard-operable players and authoring controls
- Screen-reader tested against WCAG 2.1 AA
- Captions and 20-language narration generated automatically
- Color-contrast and reading-order checks built into the wizard
PATH TO DEPLOYMENT
From kickoff to authoring, in weeks.
Roll out Tovuti with confidence and minimal lift for your team. We implement it within your existing, authorized environment so your experts can start building courses from real source content in the first week, without disrupting or replacing your current LMS.
1
Discovery
We map your training mandates, identity provider, and target LMS.
2
Provisioning
Tenant set up inside the authorized boundary, with SSO and SCIM wired in.
3
Pilot
Your team authors a real course from your own documents in the first week.
4
Scale
Roll out to agencies, contractors, and partners with RBAC and audit logging.
See WayPoints build an accessible, compliant course from your own document.
Request a federal demo environment and walk your security and training teams through it together.
Schedule a demo →
FAQ
What federal buyers ask first.
Is WayPoints FedRAMP authorized?
Yes. WayPoints is offered at the FedRAMP Moderate authorization baseline, the standard for federal SaaS handling controlled unclassified information. Documentation is available under NDA for your authorizing official and security team.
Does WayPoints support DoD Impact Level 2 (IL2)?
Yes. WayPoints supports DoD IL2 workloads, with data kept inside the authorized boundary and no exposure of your source content to public large-language models.
Where does my content and AI processing happen?
WayPoints runs on customer-controlled AI endpoints within the authorized boundary. Your documents, courses, and prompts are not sent to public LLMs and are never used to train third-party models.
Does it support PIV / CAC and federal authentication?
Yes. WayPoints integrates with your identity provider over SAML 2.0 and OpenID Connect, supports SCIM provisioning, MFA, and PIV / CAC-backed sign-in, and can be configured to allow only your IdP.
Is WayPoints Section 508 compliant?
Yes. Courses are generated to WCAG 2.1 AA, keyboard-operable, and screen-reader tested. A current VPAT is available on request.
Do we need the Tovuti LMS to use WayPoints?
No. WayPoints is a standalone authoring tool. Author here, then export SCORM 2004 or standalone HTML to run courses in the authorized LMS your agency already uses, or publish directly to Tovuti.
How long does it take to get started?
Most federal teams are provisioned inside the boundary and authoring a real course from their own documents within the first week, with SSO and SCIM wired in during onboarding.
