The Indiana Office of Technology has developed standards and policies around how agencies implement technology solutions and how vendors work with the State of Indiana.
Below are sections that apply specifically to vendors. State agencies must adhere to all items on this page.
Other more sensitive standards and policies are available on Archer, the State's Governance, Risk and Compliance tool (login required).
Per Executive Order 25-19 requiring Indiana to establish a Risk and Authorization Management Program (RAMP) policy, the following policy is effective as of October 14, 2025. Any questions should be directed to IndianaRAMP@iot.in.gov
