Microsoft · Productivity suite AI

Is Microsoft 365 Copilot in GCC (Moderate) FedRAMP authorized? Can I use it with CUI?

Q: Is Microsoft 365 Copilot in GCC (Moderate) FedRAMP authorized?

Authorized. Microsoft 365 GCC, FedRAMP Certified Class C (Moderate).

Q: Can I use Microsoft 365 Copilot in GCC (Moderate) with CUI?

Unclear. GCC is FedRAMP Moderate, which matches the baseline DFARS 252.204-7012 names on paper. But Microsoft's own guidance sends organizations that handle CUI, or need DFARS or ITAR compliance, to GCC High. Ask your assessor before putting CUI in GCC.

Can I use it with CUI?

Unclear

GCC is FedRAMP Moderate, which matches the baseline DFARS 252.204-7012 names on paper. But Microsoft's own guidance sends organizations that handle CUI, or need DFARS or ITAR compliance, to GCC High. Ask your assessor before putting CUI in GCC.

Checked Oct 17, 2026

The facts

FedRAMP status: Authorizedsource: fedramp.gov
FedRAMP level: Moderatesource: fedramp.gov
Marketplace detail: Microsoft 365 GCC, FedRAMP Certified Class C (Moderate)source: fedramp.gov
DoD Impact Level: Not established
GSA OneGov deal: Yessource: gsa.gov
FedRAMP Marketplace package: MSO365MTsource: fedramp.gov

Notes

Microsoft describes GCC customers as federal civilian agencies, state and local governments and contractors.

Not legal advice. A CUI answer here describes what public authorization records say, not whether your specific contract, data or configuration is compliant. Confirm with your contracting officer, assessor or counsel.

Is Microsoft 365 Copilot in GCC (Moderate) FedRAMP authorized? Can I use it with CUI?

The facts

Notes

Related offerings

Questions that cover Microsoft 365 Copilot in GCC (Moderate)

Get status changes by email