On Google Cloud? Your CUI boundary can live there too.
Google Assured Workloads applies a controlled environment — data residency, personnel controls, and FedRAMP High with DoD IL2–IL5 coverage — to your existing Google Cloud projects. Run on Google today? The boundary can be built there, on the cloud you already operate.
Scope a Google buildAuthorization detail decides the DFARS 7012 path — so we verify it first.
Google Cloud holds FedRAMP High and DoD IL2–IL5 authorizations, enforced through Assured Workloads control packages. A FedRAMP-authorized cloud on the Marketplace satisfies DFARS 7012 directly; an "equivalent" one makes you prove the whole baseline with zero open POA&Ms. Exact coverage depends on the package and region you select — so before we build, we confirm which side of that line your configuration sits on, in writing. We won't overstate it to win the work.
The shared-responsibility split, written down.
| Inherited from Google | Built & run by Aletheon | Owned by you | |
|---|---|---|---|
| Physical & environmental | Data centers, hardware | — | — |
| Compliance package & residency | Assured Workloads controls | — | — |
| Project & network architecture | — | Designed & deployed | — |
| Identity, encryption, logging | Service primitives | Configured to controls | — |
| Evidence, SSP, monitoring | — | Maintained continuously | Reviewed with you |
| Your CUI, users & business decisions | — | Guided | Yours to own |
Google Cloud services, configured to the controls.
On Google Cloud? We'll tell you what it takes.
A readiness check confirms the authorization path and maps your projects to the 110 controls.