Services Included in FedRAMP Authorization
The following services are included in the IVM SmartHub FedRAMP Minimum Assessment Scope.
| Service | Description | Security Objectives |
|---|---|---|
| SmartHub Portal | Web-based management console for smart vending device fleet management, user administration, and reporting | Confidentiality, Integrity, Availability |
| SmartHub API | RESTful API for programmatic access to device telemetry, transaction data, and fleet management operations | Confidentiality, Integrity, Availability |
| Device Telemetry Ingestion | IoT data pipeline collecting real-time telemetry from smart vending machines including inventory, temperature, and status | Integrity, Availability |
| Cashless Payment Processing | Integration with payment processors for contactless and mobile payment at vending machines | Confidentiality, Integrity |
| Reporting & Analytics | Dashboard and reporting services for fleet performance, revenue, and operational metrics | Confidentiality, Integrity |
Customer Responsibilities
Customers are responsible for:
- Managing user access within their SmartHub tenant
- Configuring SAML 2.0 federation with their identity provider (if applicable)
- Reviewing and acknowledging the shared responsibility model
- Reporting security incidents to IVM within 24 hours of discovery
For the full Secure Configuration Guide, see the authorization data after logging in.