Build connections with Bluebeamers around the world, discover what’s new, and make your voice heard.
Hello,
Does Bluebeam have any intentions of pursuing a Fedramp government offering?
Does Bluebeam have solid documentation on how to disable cloud functionality? This article referenced these support threads:
How to disable access to Bluebeam services | Bluebeam Technical Support
We've got a customer who wants to use Bluebeam but also remain complaint for NIST/CMMC.
Does anyone have Bluebeam MIP working in a M365 GCCH environment?
How to use Microsoft Information Protection (MIP) with Revu | Bluebeam Technical Support
Thanks!
My reseller tells me that Bluebeam has no NIST/CMMC compliant option. Bluebeam studio is not compliant. There is no more Bluebeam Studio Enterprise where we could have set up a server in our GCCH.
With so many companies in this space going after CMMC, what is Bluebeam doing to provide a compliant version of the estimated 35% of the Defense Industrial Base going for their CMMC?
February 2025… is Bluebeam working toward CMMC, or are they sticking their heads in the sand, hoping it was just a threat that's going to blow over soon? As a DoD contractor, we are in the process of dropping all software services that aren't FedRamp compliant. It's painful. I hate to lose all the convenience and functionality of Revu studio projects and sessions.
I can't speak for Bluebeam, but it seems there are many "industry standards" out there, and many are poorly defined or set unrealistic requirements. As for CMMC requirements, making Bluebeam compliant may simply be too monumental a shift to accomplish easily or quickly.
If it was just making basic Bluebeam available offline, that probably could be done. But if you want to use Bluebeam Studio offline (in-house server) that has already been rejected because of how it works on the backend (to the disappointment of many customers with security concerns).
Would having a Sessions-Free version/option meet your needs?
March 2025…we have a growing list of clients asking for NIST 800 so FedRAMP is essential for us to continue using cloud services.
Mmm… I don't think they're doing it. Obviously, I don't speak for Bluebeam, but even though it's an American company, it's also part of the Nemetschek group (a huge AEC/O company based out of Germany). They are one of the drivers of OPEN BIM, which is almost inherently against what the US would want for it's security purposes. So my guess is they won't be doing much, if anything, to meet NIST 800.
Here's a link that talks more about what OpenBIM is, if you're interested in knowing the direction Bluebeam is most likely going to continue in, with regards to file management and the likes.
OpenBIM
I don't know much about OPEN BIM.
On their website they list Autodesk as a strategic partner - along with the Nemetschek Group. Since Autodesk was able to launch a FedRAMP Authorized "Autodesk for Government", I'm going to continue hoping that Bluebeam will do the same.
Autodesk for Government
🤞Yeah, that would be cool. I just don't have much confidence that it would happen any time soon, if at all.
Attempted to set this up in a GCC High environment, I followed Bluebeam's documentation on How to Use Microsoft Information Protection (MIP) with Revu and was only able to open documents IF there aren't any Access Controls applied to the sensitivity labels. If Access Control is applied, then there would be an issue trying to authenticate and authorize users when attempting to open documents even if all App Registry and workstation registry keys matched. Followed up Bluebeam after their initial reply twice now and have gotten no update or response. Even if things get fixed to where you can open the documents, apparently users won't be able to edit them. Did you make any progress on this?
Hello, revisiting this. Has anyone gotten anything back from Bluebeam? The comment above about a "sessions-free" version or a "dumb" version would suffice for a majority of what's needed or at least serve as a bridge IF Bluebeam intended to pursue proper accreditations. I would hate to use the functionality of Bluebeam because of this.
@Luke Prescott could you, or someone from your team provide some input on this topic?
I'm in the same boat as everyone else listed above. We only use BB as a glorified pdf viewer and markup tool, the collaboration capabilities of Bluebeam would be very useful if they allowed local hosting or "just" became CMMC/FEDRAMP compliant. I would very much like to know what the plan is for studio and cloud as far as compliance or local hosting goes.
We're exploring Bluebeam Revu Offline as an option for our secure environment. Anyone have experience with that?
https://support.bluebeam.com/revu/resources/offline-introduction.html
It looks like you're new here. Sign in or register to get started.
