CUI Safe AI

Roundups

Which AI tools are DoD IL5 authorized?

Short answer

6 AI offerings we track have a published IL5 listing: Ask Sage (IL5 (per vendor)), Kiro (AI coding IDE) in AWS GovCloud (IL2, IL4, IL5 (GovCloud)), Azure OpenAI in Azure Government (IL2, IL4, IL5 (IL5 needs customer-managed keys)), Microsoft 365 Copilot in DoD environment (IL5 (environment)), OpenAI models in Amazon Bedrock (AWS GovCloud) (IL4/IL5 for listed models) and Grok models in Amazon Bedrock (AWS GovCloud) (IL4/IL5 for listed models).

Gemini for Government and Generative AI on Gemini Enterprise Agent Platform (formerly Vertex AI), Assured Workloads are listed at IL4 but not IL5.

Watch the fine print for Claude for Government, Claude in Amazon Bedrock (AWS GovCloud), Claude on Vertex AI with Assured Workloads and ChatGPT Gov (self-hosted in your Azure tenant): the Impact Level is either disputed between sources or explicitly excluded.

Who publishes the Impact Level matters. Where the only source is the vendor, the table says so in the IL column or on the tool page.

Generated from our dataset. Sources last re-checked Oct 17, 2026.

The sourced table

AI offeringFedRAMPDoD ILCan I use it with CUI?Source
Kiro (AI coding IDE) in AWS GovCloudAWS · Coding agentAuthorizedHighIL2, IL4, IL5 (GovCloud)Yes, with conditionsaws.amazon.comchecked Oct 17, 2026
Azure OpenAI in Azure GovernmentMicrosoft · Model APIAuthorizedHighIL2, IL4, IL5 (IL5 needs customer-managed keys)Yes, with conditionsfedramp.govchecked Oct 17, 2026
OpenAI models in Amazon Bedrock (AWS GovCloud)OpenAI via AWS · Model APIAuthorizedHighIL4/IL5 for listed modelsYes, with conditionsaws.amazon.comchecked Oct 17, 2026
Grok models in Amazon Bedrock (AWS GovCloud)xAI via AWS · Model APIAuthorizedHighIL4/IL5 for listed modelsYes, with conditionsaws.amazon.comchecked Oct 17, 2026
Ask SageAsk Sage · Chat assistantAuthorizedHighIL5 (per vendor)Yes, with conditionsfedramp.govchecked Oct 17, 2026
Microsoft 365 Copilot in DoD environmentMicrosoft · Productivity suite AIUnclearNot separately listedIL5 (environment)Yes, with conditionslearn.microsoft.comchecked Oct 17, 2026
Gemini for GovernmentGoogle · Chat assistantAuthorizedLow (Marketplace) / High via Assured Workloads (Google)IL4 (with exceptions)Yes, with conditionsfedramp.govchecked Oct 17, 2026
Generative AI on Gemini Enterprise Agent Platform (formerly Vertex AI), Assured WorkloadsGoogle · Model APIAuthorizedHighIL4Yes, with conditionsfedramp.govchecked Oct 17, 2026
Claude for GovernmentAnthropic · Chat assistantAuthorizedHighIL5 not included (per Anthropic)Yes, with conditionsfedramp.govchecked Oct 17, 2026
Claude in Amazon Bedrock (AWS GovCloud)Anthropic via AWS · Model APIAuthorizedHighUnclear (sources disagree)Yes, with conditionsaws.amazon.comchecked Oct 17, 2026
Claude on Vertex AI with Assured WorkloadsAnthropic via Google Cloud · Model APIAuthorizedHighIL5 not included (per Anthropic)Yes, with conditionsfedramp.govchecked Oct 17, 2026
Amazon Q BusinessAWS · Enterprise search and assistantAuthorizedModerateIL2 (East/West) onlyYes, with conditionsaws.amazon.comchecked Oct 17, 2026
ChatGPT Gov (self-hosted in your Azure tenant)OpenAI · Chat assistantUnclearInherited from your Azure environmentUnclearUnclearopenai.comchecked Oct 17, 2026

Every row links to its primary source and full page. Statuses change; open the source before you decide. How we verify.

Related questions

What is the difference between IL4 and IL5?

Both are DoD cloud Impact Levels defined in DISA's Cloud Computing Security Requirements Guide (public.cyber.mil/dccs), and IL5 carries stricter requirements than IL4. Which level you need is set by your contract and the data, so check with your contracting officer.

Is Azure OpenAI IL5?

Microsoft lists Azure OpenAI in the FedRAMP High and DoD IL2, IL4 and IL5 audit scope for Azure Government. For IL5 in US Gov regions, Microsoft requires encrypting content at rest with customer-managed keys in Key Vault.

Is Claude IL5?

For DoD Impact Levels the sources disagree: Anthropic says IL5 is included, but AWS's per-model IL4/IL5 column lists no Claude models today.

Not legal advice. These answers describe what public authorization records and vendor documentation say, not whether your contract, data or configuration is compliant. Confirm with your contracting officer, assessor or counsel.

More questions

All questions