Platforms / Azure Government
Microsoft, without the second estate you didn't need.
Azure Government is FedRAMP High authorized. If your workloads already live in Azure, the CUI boundary belongs in the same tenant — not a parallel GCC High build alongside it. We architect and run the enclave inside your Government subscriptions.
Build on Azure GovernmentFedRAMPHigh (authorized)
DoD SRGIL2 · IL4 · IL5
DFARS 7012 cloud req.Satisfied directly
ITAR dataUS-person controls
Where GCC High fits — and doesn't
Azure Government and GCC High are not the same decision.
GCC High is a Microsoft 365 tenant for collaboration and email. Azure Government is the infrastructure cloud where your workloads run. If CUI lives in your applications and data, the boundary belongs in Azure Government — FedRAMP High, authorized on the Marketplace, satisfying DFARS 7012 directly. GCC High enters only when export-controlled collaboration is the real driver.
Who owns what
The shared-responsibility split, written down.
| Inherited from Microsoft | Built & run by Aletheon | Owned by you | |
|---|---|---|---|
| Physical & environmental | Data centers, hardware | — | — |
| Cloud FedRAMP authorization | FedRAMP High ATO | — | — |
| Subscription & network architecture | — | Designed & deployed | — |
| Identity, encryption, logging | Service primitives | Configured to controls | — |
| Evidence, SSP, monitoring | — | Maintained continuously | Reviewed with you |
| Your CUI, users & business decisions | — | Guided | Yours to own |
Physical & environmental
Inherited from Microsoft Data centers, hardware
Built & run by Aletheon —
Owned by you —
Cloud FedRAMP authorization
Inherited from Microsoft FedRAMP High ATO
Built & run by Aletheon —
Owned by you —
Subscription & network architecture
Inherited from Microsoft —
Built & run by Aletheon Designed & deployed
Owned by you —
Identity, encryption, logging
Inherited from Microsoft Service primitives
Built & run by Aletheon Configured to controls
Owned by you —
Evidence, SSP, monitoring
Inherited from Microsoft —
Built & run by Aletheon Maintained continuously
Owned by you Reviewed with you
Your CUI, users & business decisions
Inherited from Microsoft —
Built & run by Aletheon Guided
Owned by you Yours to own
What we build with
Azure Government services, configured to the controls.
Microsoft Entra ID
Azure Key Vault
Azure Monitor & Policy
Microsoft Sentinel
VNet & Azure Firewall
Management Groups & Policy
Microsoft Purview
Azure DevOps Pipelines
Service list illustrative; exact architecture set during the Enclave build. [confirm — per engagement]
Already on Azure? Let's scope the boundary.
A readiness check maps your Azure Government footprint to the 110 controls and tells you what's left.