A proprietary, multi-faceted approach to continuous assessment and scoring for next-generation federal cybersecurity standards for cloud service providers
ARLINGTON, VA, UNITED STATES, September 22, 2026 Meridian Knowledge Solutions today announced that the U.S. Patent and Trademark Office has granted U.S. Patent No. 12,739,284, titled “Cloud Environment Compliance Automation Methods and Systems,” which covers technology developed by Meridian to automate critical elements of cloud security compliance.
Meridian developed the technology while working toward FedRAMP® 20x Class C certification for Meridian LMS, the company’s industry-leading enterprise learning management platform for public-sector and highly regulated organizations. The patented approach addresses a fundamental challenge in modern cloud compliance: translating high-level governance and compliance requirements into continuously validated technical evidence that can be consumed programmatically rather than relying primarily on manual, point-in-time assessments.
The technology creates an automated bridge between cloud security posture management and Governance, Risk and Compliance (GRC) workflows. Methods covered include multi-source technical validation of cloud security controls; normalization and correlation of security data from multiple sources; automated compliance determinations and attestations; detection of inconsistencies between stated security policy and actual enforcement; and machine-readable output containing compliance evidence and findings.
Rather than relying on a single technical check to determine whether a control is satisfied, the patented approach can evaluate multiple data sources and layers of a cloud environment to determine whether security requirements are both configured and enforced. Validation can also be repeated continuously at defined intervals, helping reduce the gaps inherent in traditional point-in-time compliance assessments.
“As we worked through FedRAMP 20x, it became clear that the traditional approach to cloud compliance was not designed for the level of automation, continuous validation and machine-readable evidence that the federal government is moving toward,” said Adam Burroughs, SVP of Technology. “We built technology to solve that problem for ourselves. Securing this patent validates the uniqueness of that work, but we also believe its potential extends well beyond Meridian and the learning technology market.”
The patented architecture was designed so that compliance requirements can evolve without requiring the underlying validation engine to be rebuilt for every framework change. It can produce structured attestations containing control-level compliance determinations, supporting evidence, timestamps, critical findings, and automated evaluation logic that can be consumed by GRC platforms and other systems.
While the technology was developed through Meridian’s own federal cloud compliance work, its potential applications extend to organizations operating across the broader cloud security and compliance ecosystem, including GRC platforms, FedRAMP 3PAOs, cloud service providers, and other organizations helping customers meet evolving government cybersecurity requirements.
“We see an opportunity for this technology to serve as an accelerator for organizations already investing in cloud compliance automation,” added Sean Osborne, President. “Meridian is open to strategic discussions with organizations interested in understanding the technology and exploring potential applications.”
Organizations interested in discussing the patented technology or potential strategic opportunities can visit https://meridianks.com/cloud-compliance-automation-patent.
Meridian Knowledge Solutions provides enterprise learning management technology for government and highly regulated organizations. Meridian LMS supports complex learning, compliance, and workforce development requirements with flexible deployment options, advanced reporting, and a security-first approach. Meridian is FedRAMP® 20x Class C Certified and serves organizations that require secure, configurable learning environments designed for mission-critical training.
