FedCatalog

Microsoft 365 Government Community Cloud & Supporting Services

Microsoft

Microsoft 365 (M365) Government Community Cloud (GCC) is a suite of cloud-hosted messaging and collaboration services to meet the unique and evolving…

In processHighNo agency authorizations on record
FedRAMPIn processAgency path ⓘ
FedRAMP impact levelHighPublic Cloud
Runs on—Not recorded by FedRAMP
Agency authorizations0ATO or reuse on record ⓘ

Source: FedRAMP Marketplace · refreshed Oct 7, 2026 · DoD status: DoD Cyber Exchange · checked Sep 12, 2026 · OneGov: GSA ITVMO · checked Sep 12, 2026 · How the data works

How to buy

Confirmed paths come from GSA and the FedRAMP record; searches are places to look.

Confirmed buying paths

  • GSA OneGov agreementCopilot at no cost for year 1; 20% off Azure consumption; 100% waiver of egress fees; 25% off M365 G5; 70% off · via GSA Multiple Award Schedule (MAS)
    GSA agreement →
  • Vendor directGovernment sales page from the FedRAMP record
    Visit →

Microsoft’s marketplace listings

  • Microsoft 365 GCC and Azure Government are Microsoft’s own servicesHow this vendor is bought · Licensed through Microsoft enterprise agreements, CSP partners and GSA MAS resellers (Carahsoft and others), not through a marketplace listing. Azure Marketplace is Microsoft’s marketplace for third-party software. · checked Sep 12, 2026
    View →

Other places to check

✓ verified by FedCatalog · ○ vendor-supplied and reviewed · searches are places to look, not matches. FedCatalog shows what it can verify and labels what it can’t. Sell this to government? Send exact marketplace, GSA or SEWP listings to mark@fedcatalog.com.

FedRAMP Marketplace listing ↗ · Section 508 ACR Repository ↗ · SAM.gov ↗

What it does

Microsoft 365 (M365) Government Community Cloud (GCC) is a suite of cloud-hosted messaging and collaboration services to meet the unique and evolving requirements of the United States Federal, State, Local, and Tribal governments, as well as contractors holding or processing data on behalf of the US Government. These cloud-based services are designed to provide organizations with streamlined communication, high availability, comprehensive security, and simplified information technology (IT) management. M365 GCC provides the interactivity of on-premises client and server applications with the flexibility and scalability of web-based services. M365 GCC leverages Azure Government as the IaaS/Pa

Authorization details

  • Offering
    Microsoft 365 Government Community Cloud & Supporting ServicesFedRAMP ID MSO365MTA
  • Status
    FedRAMP In ProcessAgency authorization path
  • FedRAMP impact level
    HighAuthorized against the FedRAMP High baseline, the most extensive control set.
  • Deployment
    Public Cloud
  • Runs on
    Not recorded
  • Assessor (3PAO)
    Kratos
  • Data as of
    Oct 7, 2026FedRAMP Marketplace, refreshed daily

An authorization belongs to this specific offering and boundary; the vendor’s other offerings are listed separately. Source: FedRAMP Marketplace · refreshed Oct 7, 2026.

DoD Impact Level listings for Microsoft

  • Microsoft Azure DoD IL5IL5 high

    Provisional Authorization · Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS) · expires Nov 21, 2024 (past the listed date; verify on the DoD page)

  • Microsoft Azure Gov IL4/IL5 Workload IsolationIL4 high

    Provisional Authorization · Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS) · expires Nov 27, 2024 (past the listed date; verify on the DoD page)

  • Microsoft Azure IL6IL6 high

    Provisional Authorization · Infrastructure as a Service (IaaS), Platform as a Service (PaaS) · expires May 9, 2025 (past the listed date; verify on the DoD page)

  • Microsoft Isolated Secret RegionIL6 moderate

    Provisional Authorization · Infrastructure as a Service (IaaS), Platform as a Service (PaaS) · expires Apr 1, 2026 (past the listed date; verify on the DoD page)

  • Microsoft O365 SecretIL6 high

    Provisional Authorization · Software as a Service (SaaS) · expires May 25, 2025 (past the listed date; verify on the DoD page)

  • MS-SWIFTECLIPSE (Not Authorized for Operational Use)IL6 high

    IATT - Not Authorized for Operational Use · Software as a Service (SaaS) · expires Jun 12, 2024 (past the listed date; verify on the DoD page)

  • O365 DoDIL5 moderate

    Provisional Authorization · Software as a Service (SaaS) · expires Apr 30, 2025 (past the listed date; verify on the DoD page)

DoD listings name their own offering; they are not automatically the same boundary as this FedRAMP offering. All DoD listings.

Something wrong or missing on this page? Email me and I’ll fix it by checking the source.