# Tranquility makes investigative AI available to federal teams through Knox's Class D cloud

> Source: <https://runtimewire.com/article/tranquility-ai-fedramp-knox-federal-investigations>
> Published: 2026-10-08 13:43:44+00:00

# Tranquility makes investigative AI available to federal teams through Knox's Class D cloud

**Founder Jim Penrose spent 17 years at the NSA; the FedRAMP Marketplace lists Knox's cloud platform, not Tranquility's products, as certified.**

        By [RuntimeWire Staff](https://runtimewire.com/author/runtimewire-staff)
        · Published 

Primary source: [PR Newswire](https://www.prnewswire.com/news-releases/tranquility-achieves-fedramp-class-d-certification-through-partnership-with-knox-systems-302901747.html)

## Why it matters

Knox's Class D cloud gives Tranquility a federal-ready route for its investigative software. The FedRAMP listing applies to Knox's platform, not to TimePilot or HelioTrace individually. The announcement opens a procurement path; it does not establish federal adoption or product performance.

[Tranquility AI](https://tranquility.ai/?ref=runtimewire), led by former National Security Agency technical director [Jim Penrose](https://www.iwp.edu/cyber-intelligence-initiative-team/jim-penrose/?ref=runtimewire), says federal investigators can now use its evidence-analysis and threat-detection software through a partnership with [Knox Systems](https://knoxsystems.com/?ref=runtimewire). The announcement, published in a [PR Newswire release](https://www.prnewswire.com/news-releases/tranquility-achieves-fedramp-class-d-certification-through-partnership-with-knox-systems-302901747.html?ref=runtimewire) on October 8th, describes access for federal investigators and homeland-security teams.

The FedRAMP Marketplace listing narrows what the certification claim covers. The official [listing](https://www.fedramp.gov/marketplace/products/FR2528033654/?ref=runtimewire) identifies Knox Systems' Managed Platform as FedRAMP Certified, Class D (High), with certification dating to March 30th, 2026. The listing names Knox's cloud offering; it does not list Tranquility's TimePilot or HelioTrace applications individually. Tranquility describes its products as available through the partnership, while the federal listing supports the status of the Knox platform.

Agencies evaluating the software need to know what has been reviewed and authorized. Tranquility says its investigative tools are available through the partnership in a federal-ready cloud environment. Agency buyers still need to understand the authorization boundary and how the applications operate within it.

### Penrose's bet on evidence

Penrose says he spent nearly 20 years at the NSA tracking terrorist networks. An [Institute of World Politics biography](https://www.iwp.edu/cyber-intelligence-initiative-team/jim-penrose/?ref=runtimewire) describes 17 years at the agency, including founding its Operational Discovery Center, serving as the first mission manager for the NSA/CSS Threat Operations Center, and working as technical director for counterterrorism. He later held executive roles at Darktrace and BlueVoyant, where Tranquility's company page lists him as chief operating officer.

Penrose's argument for the products comes from that work: investigators make consequential decisions while information sits in separate systems and formats. In the release, Penrose said the software should help analysts identify relevant evidence and verify findings. He says the software should give investigators evidence they can check as they make decisions.

Tranquility says [TimePilot](https://tranquility.ai/?ref=runtimewire) can search evidence in natural language, connect information across sources, build timelines and generate work products while tracing findings back to source material. Tranquility describes sources including handwritten notes, reports, financial records, spreadsheets, video, audio and mobile-device extractions. Those are company descriptions of product capabilities; the announcement offers no independent accuracy tests or performance measures.

The second product, HelioTrace, targets border and homeland-security work. Tranquility says it combines mobile-device forensic information with open-source intelligence to generate threat reports for analysts. The product is intended to help analysts assess risks and identify networks, with reports meant to inform operational decisions. The announcement does not detail how the system handles errors, source reliability or analyst review beyond Penrose's statement that it is meant to inform human judgment.

### The certification record names Knox

Knox's managed platform appears in the FedRAMP Marketplace as Class D (High). The Marketplace records two authorizations for Knox's offering. Knox says it can deliver [FedRAMP authorization in 90 days](https://knoxsystems.com/?ref=runtimewire), a Knox claim about its own service rather than a timeline independently established for Tranquility's products.

For Penrose, the move takes Tranquility's investigative evidence-analysis tools to federal and homeland-security buyers. Tranquility emerged from stealth in February 2025 with backing from Quiet Capital, MaC Venture Capital and Champion Hill Ventures, according to [coverage of the announcement](https://www.streetinsider.com/Business%2BWire/Tranquility%2BAI%2BEmerges%2Bfrom%2BStealth%2Bwith%2BVenture%2BBacking%2Bto%2BTransform%2BCriminal%2BJustice%2BInvestigations/24409392.html?ref=runtimewire). The funding amount and valuation were not reported there. The October announcement supplies no federal customer count, deployment figures, revenue or contract value, so certification provides access to a procurement channel but does not show government adoption at scale.

Tranquility's pitch is to gather disparate evidence in one place, help investigators find connections, and let them trace an AI-generated insight back to its source. The FedRAMP listing establishes the status of Knox's platform; it does not establish separate authorization for TimePilot or HelioTrace. Agency adoption will depend on evidence handling, auditability and the product's performance in actual investigations, which a certification label alone cannot establish.
