For PaaS, it depends on the size of the scope and development time. The more complex the system, the longer the development cycle will be, but the range is between six and 18 months.

Timelines for SaaS:

• Products that have both a FedRAMP Authority to Operate (ATO) and a VA ATO: approximately 4 -16 weeks
• Products that do not involve VA data and therefore do not require an ATO: approximately 12-18 weeks
• Products where an agency outside VA has sponsored the FedRAMP ATO and requires a VA ATO: approximately 1-1.5 years
• Products that need VA sponsorship for their FedRAMP ATO and require a VA ATO: approximately 1.5-2 years