# AGU-AGC-NAR — No Additional Security Requirements

> FedRAMP Consolidated Rules for 2026 v2026.07.14.01 · updated 2026-07-14
> Canonical page: /requirement/agu-agc-nar

Agency Use of FedRAMP Certified Cloud Services (`AGU`) · group all · subset AGC
Force: MUST NOT

## Statement

Agencies MUST NOT require additional information or materials from FedRAMP Certified cloud service offerings beyond those required by FedRAMP UNLESS the head of the agency or an authorized delegate determines there is a demonstrable need and notifies FedRAMP; this does not apply to seeking clarification or asking general questions about FedRAMP Certification Data.

## Who it binds

- Agencies

## Certification classes

_Applies regardless of certification class._

## Which certifications it binds

Certification type: 20x, Rev5
Path: Program, Agency

## Machine-readable form

_This requirement names no JSON schema. FRC-CSO-JSN binds a provider to a schema only where a rule contains one._

## Artifacts

_No requirement-specific artifact is named._

## Timeframes

_This requirement states no deadline._

## Notifications

- {"requirementId":"AGU-AGC-NAR","documentKey":"AGU","requirementName":"No Additional Security Requirements","party":"FedRAMP","method":"email","target":"info@fedramp.gov","name":"info@fedramp.gov"}