Built on ServiceNow

One Platform to Plan, Fund, and Govern Health & Human Services IT

GainControl unifies APD lifecycle management, federal compliance monitoring, cost allocation, and modular certification into a single ServiceNow-native platform purpose-built for state Medicaid and HHS agencies managing billions in federally funded IT.

Built on ServiceNow
FedRAMP High
NIST 800-53r5
45 CFR Part 95
SHO #25-003
MITA 3.0 Aligned

Billions in Federal Funding. Zero Unified Oversight.

State agencies manage massive federally-funded IT portfolios across Medicaid, SNAP, Child Welfare, and other programs, each governed by different federal agencies, matching rates, reporting requirements, and compliance mandates.

Today, that oversight runs on disconnected spreadsheets, siloed systems, and manual processes. The result: compliance gaps, missed deadlines, duplicated spending, and federal funding at risk.

$12B+
Annual Federal IT Funding Across HHS Programs
50+
State & Territory Agencies Needing Oversight
6
Major Federal Programs Requiring APDs
3
New Mandates with Imminent Deadlines

What GainControl Does

Six integrated capabilities that replace spreadsheets, siloed tools, and manual processes with a unified command center for HHS IT governance.

APD Lifecycle Management

Track every APD from Planning (PAPD) through Implementation (IAPD) to Operations, with full version history, approval workflows, and federal submission tracking.

Budget & FFP Tracking

Multi-rate federal financial participation: DDI at 90/10, M&O at 75/25, Admin at 50/50. Real-time budget tracking with automated cost allocation across programs.

Vendor & Contract Oversight

Centralized vendor management with milestone tracking, deliverable review, SLA monitoring, and performance scorecards tied directly to APD commitments.

Regulatory Compliance

Automated monitoring for HR1/OBBBA, ARC-AMPE, CMS-0057-F, and 45 CFR Part 95. Deadline tracking, gap analysis, and audit-ready documentation.

CMDB & IT Portfolio

ServiceNow-native CMDB integration maps services, systems, and integrations. Full visibility into your technology portfolio with dependency tracking and impact analysis.

AI-Powered Intelligence

Automated document review, risk scoring, and case summaries. AI identifies compliance gaps, flags budget anomalies, and accelerates federal submission review.

New in Annapolis

Built for What's Coming Next

GainControl Annapolis adds deep compliance frameworks, AI-assisted authoring, and the tools agencies need to meet the latest federal mandates head-on.

MITA 3.0 Framework

Complete State Self-Assessment with 12 business domains and 48 processes. Maturity tracking from Level 1 through Level 5 with gap analysis, target planning, and ServiceNow module mapping.

Streamlined Modular Certification

Track certification status across system modules with 22 CMS Conditions for Enhanced Funding per module. Monitor 34+ outcome metrics and generate CMS-ready compliance evidence.

ARC-AMPE Security Controls

Full NIST SP 800-53 Rev 5 compliance with 338 controls across 20 families. Replaces MARS-E 2.0 with the new CMS security framework. SHO #25-003 aligned with compliance scoring and audit evidence.

PACAP & Cost Allocation

Program Assessment and Cost Allocation Plan management with time study support (RMTS), enrollment-based allocation, and cross-program integration across Medicaid, CHIP, SNAP, and TANF.

AI-Assisted APD Creation

Multi-step wizard generates complete APD sections from your project context, strategy documents, and state priorities. AI drafts content, you review and refine with iterative feedback loops.

Compliance Dashboards

Executive dashboards with real-time compliance posture across all federal mandates. Track MITA maturity scores, ARC-AMPE control status, SMC progress, and regulatory deadlines in a single unified view.

ServiceNow, Rebuilt as Your Agency OS

GainControl doesn't just sit on top of ServiceNow -it transforms the platform into a purpose-built operating system for state agencies. Every module is configured around how HHS agencies actually work: cross-program governance, federal reporting timelines, and committee-based decision making.

The result is a single system of record that connects IT governance, service delivery, security, and operations -the way an agency actually runs.

Unified Platform Architecture
Agency
OS
APD Lifecycle Budget & FFP Security CMDB Vendors AI ITSM + CSM + PSDS Analytics

IT & Citizen Service Management

Agency help desk, incident management, and service request fulfillment for internal staff and external citizens. Route issues across programs, track SLAs, and provide a single portal for all technology and constituent support.

ServiceNow ITSM + CSM + PSDS

CMDB & IT Asset Management

Map every system, service, and integration across your agency. Track dependencies, license compliance, and hardware lifecycle. Know exactly what you have and how it connects.

ServiceNow CMDB + ITAM

Security Operations

Security incident response, vulnerability management, and threat intelligence. Automate ARC-AMPE control monitoring and link security events directly to your compliance posture.

ServiceNow SecOps

Governance, Risk & Compliance

Policy management, risk assessments, and audit workflows. Continuous monitoring against 45 CFR Part 95, NIST 800-53, and state-specific regulatory requirements with automated evidence collection.

ServiceNow IRM + GRC

Performance Analytics

Executive dashboards, KPI tracking, and predictive intelligence across every program. Real-time visibility into spending, timelines, vendor performance, and compliance status -no more manual reports.

ServiceNow PA + Reporting

Multivendor Management

Coordinate multiple vendors across modular system architectures. Track deliverables, milestones, and SLAs per module. Manage dependencies between vendors and ensure accountability across your entire MES ecosystem.

ServiceNow SPM + ITSM

Beyond Medicaid

Medicaid gets the headlines, but five other major federal programs require APD-based IT planning. GainControl manages them all.

Medicaid & CHIP

Federal Agency CMS
DDI FFP 90 / 10
System MES / MMIS

SNAP

Federal Agency FNS
DDI FFP 50 / 50
System Eligibility

WIC

Federal Agency FNS
DDI FFP 50 / 50
System MIS

Child Support (IV-D)

Federal Agency ACF / OCSE
DDI FFP 66 / 34
System CSE System

Child Welfare (IV-E)

Federal Agency ACF / CB
DDI FFP 50 / 50
System CCWIS

One platform, every program.

Navigate Federal Mandates

Three major regulatory changes are converging with imminent deadlines. GainControl provides the tracking, documentation, and compliance monitoring you need.

December 2026

HR1 / OBBBA

The One Big Beautiful Bill Act restructures federal oversight requirements for state IT systems. New reporting mandates, cost transparency rules, and accountability frameworks take effect December 2026.

March 2026

ARC-AMPE

The new CMS security framework replacing MARS-E 2.0. Requires 402 controls based on NIST SP 800-53 Rev 5, including the new PII Processing & Transparency family and U.S. data localization requirements.

January 2027

CMS-0057-F Interoperability

The CMS Interoperability and Prior Authorization final rule requires state Medicaid systems to implement standardized FHIR-based APIs for patient access, provider directory, and prior authorization by January 2027.

How It Works

Go from fragmented oversight to unified governance in three steps.

1

Import Your APD Portfolio

Upload existing APDs, budgets, and vendor contracts. GainControl ingests your data and maps it to a unified governance model.

2

Track Budgets, Vendors & Milestones

Monitor FFP allocations, vendor performance, and project milestones in real time across every program and system module.

3

Stay Compliant Automatically

Automated monitoring flags compliance gaps, tracks regulatory deadlines, and generates audit-ready documentation on demand.

See GainControl Annapolis in Action

Schedule a personalized walkthrough of the platform. We'll show you how GainControl maps to your state's programs, systems, and compliance requirements.

  • Live workspace demo tailored to your programs
  • MITA 3.0 maturity gap analysis for your state
  • ARC-AMPE compliance readiness assessment
  • Regulatory mandate timeline review
  • No commitment required

We'll respond within one business day.