Vendor questions
Is ChatGPT FedRAMP authorized?
Short answer
Only one ChatGPT product is, and it is not the one most people use. ChatGPT Enterprise and API Platform for FedRAMP is FedRAMP authorized (Moderate): FedRAMP Certified, 20x Pilot, Class C (Moderate), since 2026-01-09. ChatGPT Plus, Business and standard Enterprise are not FedRAMP authorized. Existing commercial ChatGPT Enterprise workspaces cannot be converted; OpenAI offers a one-time migration into a new FedRAMP workspace.
Of the 7 OpenAI offerings and OpenAI model paths we track, 4 are FedRAMP authorized (Azure OpenAI in Azure Government: High; OpenAI models in Amazon Bedrock (AWS GovCloud): High; ChatGPT Enterprise and API Platform for FedRAMP: Moderate; Codex (desktop app and CLI) signed in to a FedRAMP workspace: Moderate), 2 are not authorized (ChatGPT Plus, Business and standard Enterprise and Codex with a commercial ChatGPT plan) and 1 has an unclear status (ChatGPT Gov (self-hosted in your Azure tenant)).
Generated from our dataset. Sources last re-checked Oct 17, 2026.
The sourced table
| AI offering | FedRAMP | DoD IL | Can I use it with CUI? | Source |
|---|---|---|---|---|
| Azure OpenAI in Azure Government | IL2, IL4, IL5 (IL5 needs customer-managed keys) | Yes, with conditions | fedramp.gov | |
| OpenAI models in Amazon Bedrock (AWS GovCloud) | IL4/IL5 for listed models | Yes, with conditions | aws.amazon.com | |
| ChatGPT Enterprise and API Platform for FedRAMP | Not established | Yes, with conditions | fedramp.gov | |
| Codex (desktop app and CLI) signed in to a FedRAMP workspace | Not established | Yes, with conditions | fedramp.gov | |
| ChatGPT Gov (self-hosted in your Azure tenant) | Unclear | Unclear | Unclear | openai.com |
| ChatGPT Plus, Business and standard Enterprise | Not listed | Not established | Only in a separate environment | fedramp.gov |
| Codex with a commercial ChatGPT plan | Not listed | Not established | Only in a separate environment | help.openai.com |
Every row links to its primary source and full page. Statuses change; open the source before you decide. How we verify.
Related questions
Is ChatGPT Enterprise FedRAMP authorized?
Only the separate "ChatGPT Enterprise and API Platform for FedRAMP" offering: FedRAMP Certified, 20x Pilot, Class C (Moderate), since 2026-01-09. Existing commercial ChatGPT Enterprise workspaces cannot be converted; OpenAI offers a one-time migration into a new FedRAMP workspace.
Is ChatGPT FedRAMP High?
ChatGPT Enterprise and API Platform for FedRAMP is listed at Moderate, not High. OpenAI models reach FedRAMP High through Azure OpenAI in Azure Government and OpenAI models in Amazon Bedrock (AWS GovCloud).
Is ChatGPT Gov FedRAMP authorized?
ChatGPT Gov runs inside an agency's own Azure tenant, so its authorization depends on that environment and the agency's own ATO. We could not find a public authorization record specific to ChatGPT Gov, so we do not give a verdict.
Is Codex FedRAMP authorized?
Covered when used with a FedRAMP ChatGPT workspace or a FedRAMP-enabled API organization. Codex signed in to a regular Plus, Pro, Business or Enterprise workspace runs outside the FedRAMP boundary. Use it only through a FedRAMP workspace or FedRAMP API organization for CUI.
Not legal advice. These answers describe what public authorization records and vendor documentation say, not whether your contract, data or configuration is compliant. Confirm with your contracting officer, assessor or counsel.
More questions
Get status changes by email
One short email when an AI tool's FedRAMP, Impact Level or OneGov status changes. No spam, unsubscribe anytime. See our privacy page.