How we verify

Not legal advice. CUI Safe AI summarizes public authorization records and vendor documentation. It is not legal, compliance or contracting advice. Your contract clauses, your agency or prime's guidance, your CMMC assessor, and your own security review decide what you may use. Always open the linked source before you decide.

What we track

We track each AI offering, not each brand. "ChatGPT Enterprise" and "ChatGPT Enterprise and API Platform for FedRAMP" are different services with different boundaries, so each gets its own page. For every offering we record:

FedRAMP status: Authorized (shown on the Marketplace as FedRAMP Certified), In Process (any in-process phase, including Initial Implementation), Not listed, or Unclear when the authorization is inherited from a platform and not listed on its own.
FedRAMP level: Low, Moderate or High. The Marketplace now shows classes: Class B is Low, Class C is Moderate, Class D is High. 20x is the newer assessment process, not a level.
DoD Impact Level, from DISA authorizations as published by the cloud provider (for example AWS and Microsoft scope pages), or the vendor when that is the only source. We say whose claim it is.
GSA OneGov deal: Yes if the offering appears on GSA's Buy AI table or a GSA OneGov announcement we cite.
A plain-English CUI answer and the exact source URL for every fact, with the date we read it.

Our sources

The FedRAMP Marketplace at fedramp.gov, read from its public product index.
GSA's Buy AI page and OneGov announcements at gsa.gov.
Cloud providers' services-in-scope pages (AWS, Microsoft Azure Government, Google Cloud), which list FedRAMP and DISA Impact Level scope per service and, for Amazon Bedrock, per model.
Vendors' own trust, compliance and help-center pages.

We do not use secondary blogs or analyst sites as evidence. If a fact only exists in a press release, we label it "per vendor".

How the CUI answer works

For contractors, DFARS 252.204-7012 says that if an external cloud service provider stores, processes or transmits covered defense information, it must meet security requirements equivalent to the FedRAMP Moderate baseline, plus the clause's incident reporting and related requirements. We apply that test to the public record:

Yes, with conditions: An authorization on public record covers CUI-level data, if you use the right environment and settings.
Only in a separate environment: This version is not covered. A separate government version or deployment is.
No: No authorization on public record covers CUI today.
Unclear: Primary sources are missing or disagree, so we do not give a verdict.

"Yes, with conditions" never means "safe by default". It means a Moderate or higher authorization exists for that specific environment, and you still must use that environment, turn off features outside the boundary, and meet your own contract requirements. A FedRAMP authorization is also not a CMMC certification.

When sources disagree

We show both sides and mark the field Unclear. For example, on the day we launched, Anthropic said Claude in Bedrock GovCloud is included for IL5, while AWS's per-model IL4/IL5 column listed no Claude models.

How often we check

A refresh job re-reads every source. Structured changes (Marketplace status, class, AWS scope tables) are logged as status changes. Any other page change is logged for human review. You can see everything on the changelog.

Privacy

We use Microsoft Clarity for anonymous usage analytics. See our privacy page.

Corrections

Vendors and readers can send corrections with a primary source to [email protected]. We never accept payment for a better answer.