Vendor questions
Is GitHub Copilot FedRAMP authorized?
Short answer
No, not today. GitHub Copilot is not FedRAMP authorized. GitHub says Copilot itself will become FedRAMP authorized as part of GitHub Enterprise Cloud with data residency's authorization path, so it is not authorized today. Admins can restrict Copilot to models hosted on FedRAMP Moderate infrastructure, but that is not an authorization of Copilot.
The 'Restrict Copilot to FedRAMP models' policy is off by default and adds 10% to AI credit consumption. Requires GHEC with US data residency.
AI coding tools that do have a FedRAMP authorization on record: Kiro (AI coding IDE) in AWS GovCloud (High) and Codex (desktop app and CLI) signed in to a FedRAMP workspace (Moderate).
Generated from our dataset. Sources last re-checked Oct 17, 2026.
The sourced table
| AI offering | FedRAMP | DoD IL | Can I use it with CUI? | Source |
|---|---|---|---|---|
| GitHub Copilot Business and Enterprise | Not listed | Not established | No | fedramp.gov |
| Kiro (AI coding IDE) in AWS GovCloud | IL2, IL4, IL5 (GovCloud) | Yes, with conditions | aws.amazon.com | |
| Codex (desktop app and CLI) signed in to a FedRAMP workspace | Not established | Yes, with conditions | fedramp.gov | |
| Claude Code with a commercial Claude plan | In Process | Not established | Only in a separate environment | fedramp.gov |
| Cursor | In Process | Not established | No | fedramp.gov |
| Codex with a commercial ChatGPT plan | Not listed | Not established | Only in a separate environment | help.openai.com |
Every row links to its primary source and full page. Statuses change; open the source before you decide. How we verify.
Related questions
What FedRAMP authorization does GitHub have?
GitHub Enterprise Cloud is Certified at Class B (Low/LI-SaaS); GitHub says Copilot itself is not yet authorized.
Can I use GitHub Copilot with CUI?
No. GitHub says Copilot itself will become FedRAMP authorized as part of GitHub Enterprise Cloud with data residency's authorization path, so it is not authorized today. Admins can restrict Copilot to models hosted on FedRAMP Moderate infrastructure, but that is not an authorization of Copilot.
What does "Restrict Copilot to FedRAMP models" do?
The 'Restrict Copilot to FedRAMP models' policy is off by default and adds 10% to AI credit consumption. Requires GHEC with US data residency.
Not legal advice. These answers describe what public authorization records and vendor documentation say, not whether your contract, data or configuration is compliant. Confirm with your contracting officer, assessor or counsel.
More questions
Get status changes by email
One short email when an AI tool's FedRAMP, Impact Level or OneGov status changes. No spam, unsubscribe anytime. See our privacy page.