CUI Safe AI

GitHub (Microsoft) · Coding agent

Is GitHub Copilot Business and Enterprise FedRAMP authorized? Can I use it with CUI?

Can I use it with CUI?

No

GitHub says Copilot itself will become FedRAMP authorized as part of GitHub Enterprise Cloud with data residency's authorization path, so it is not authorized today. Admins can restrict Copilot to models hosted on FedRAMP Moderate infrastructure, but that is not an authorization of Copilot.

Checked Oct 17, 2026

The facts

FedRAMP status
Not listedsource: fedramp.gov
FedRAMP level
None for Copilotsource: fedramp.gov
Marketplace detail
GitHub Enterprise Cloud is Certified at Class B (Low/LI-SaaS); GitHub says Copilot itself is not yet authorizedsource: fedramp.gov
DoD Impact Level
Not established
GSA OneGov deal
No (not on the GSA lists we checked)
FedRAMP Marketplace package
FR1812058188source: fedramp.gov

Notes

The 'Restrict Copilot to FedRAMP models' policy is off by default and adds 10% to AI credit consumption. Requires GHEC with US data residency.

Not legal advice. A CUI answer here describes what public authorization records say, not whether your specific contract, data or configuration is compliant. Confirm with your contracting officer, assessor or counsel.

Questions that cover GitHub Copilot Business and Enterprise