Compliance & Security for Chamber Operations
TX-RAMP Level 2 compliant, built on AWS, PCI DSS-compliant for payments, and WCAG-accessible the security and compliance public-sector buyers need to sign off.
Book a Demo
Is Chamber Operations TX-RAMP certified?
Yes. Chamber Operations is TX-RAMP Level 2 compliant.TX-RAMP (Texas Risk and Authorization Management Program) is the State of Texas's cloud security certification program, modeled after the federal FedRAMP framework. TX-RAMP Level 2 compliance means Chamber Operations has been assessed against the security controls required for cloud services that handle moderate-impact state data.This certification is required for cloud software purchased by Texas state agencies and is recognized by government-affiliated chambers and organizations purchasing through Texas DIR contract.
TX-RAMP compliance documentation is available to authorized procurement and compliance reviewers during the evaluation process.
How does Chamber Operations handle payments securely?
Yes. Payment processing is PCI DSS-compliant through Square.Chamber Operations integrates with Square, a PCI DSS Level 1 certified payment processor, for credit card transactions. Square handles all sensitive cardholder data and encryption — Chamber Operations never stores full credit card numbers or CVV codes.When a member pays by credit card, the payment data is transmitted directly to Square's secure infrastructure. Chamber Operations receives only a tokenized reference that confirms the payment succeeded. These tokens cannot be used to initiate transactions outside the platform.
For ACH bank transfers and alternative payment methods (CashApp, Venmo, Zelle), Chamber Operations displays payment instructions but does not process or store banking credentials.
All payment data in transit is encrypted using TLS 1.2 or higher. All data at rest is encrypted using AWS-managed encryption services.
Is Chamber Operations accessible?
Yes. Chamber Operations is built to meet WCAG 2.1 Level AA standards.Web Content Accessibility Guidelines (WCAG) 2.1 Level AA is the accessibility standard required by Section 508 of the Rehabilitation Act and adopted by many state and local procurement policies.Chamber Operations meets WCAG 2.1 AA requirements across the staff admin panel, member portal, and public-facing website components. This includes:
Sufficient color contrast ratios for text and interactive elements
Full keyboard navigation support without mouse dependency
Screen reader compatibility with proper semantic HTML and ARIA labels
Visible focus indicators for keyboard navigation
Form labels and error messages programmatically associated with inputs
Responsive design that works across devices and zoom levels
Accessibility compliance is built into the platform architecture and tested as part of the development process, not added retroactively.
Where is Chamber Operations hosted?
Yes. Chamber Operations is hosted on Amazon Web Services (AWS) infrastructure in the United States.Chamber Operations runs on AWS cloud infrastructure, using the following services:Compute: AWS Elastic Compute Cloud (EC2) for application hosting
Database: AWS Relational Database Service (RDS) with automated backups
Storage: AWS Simple Storage Service (S3) for file and asset storage
DNS: AWS Route 53 for domain name resolution
SSL/TLS: Auto-managed SSL certificates through AWS Certificate Manager
All AWS infrastructure is located in U.S. data centers. Data does not leave the United States.
AWS maintains certifications including SOC 2, ISO 27001, and FedRAMP, which provide the foundation for Chamber Operations' TX-RAMP compliance.
What about HIPAA and health data?
Chamber Operations is not HIPAA-compliant and should not be used to store protected health information (PHI).Chamber Operations is designed for membership management, event registration, and business operations — not for storing medical records, health insurance information, or other data covered by the Health Insurance Portability and Accountability Act (HIPAA).If your organization collects health-related data from members (for example, dietary restrictions for event catering or emergency contact information), that data may be stored in Chamber Operations only if it does not constitute PHI under HIPAA definitions.
Organizations subject to HIPAA should consult with their compliance officer before using Chamber Operations to store any health-related member data.
Who builds and stands behind Chamber Operations?
Chamber Operations is built and maintained by Blue Parrot Software LLC, a Texas-based software company.Blue Parrot Software LLC is headquartered in Edinburg, Texas, and is certified as a Texas Historically Underutilized Business (HUB). We focus exclusively on membership management software for chambers of commerce, nonprofits, and associations.Chamber Operations is available through two established government procurement channels:
Texas DIR Contract
GSA Multiple Award Schedule
Frequently Asked Questions
Need compliance documentation for your review?
Book a demo and let us know you need TX-RAMP, security, or accessibility documentation for procurement.
Book a Demo