FedRAMP and DoD compliance scope

Last reviewed 2025-12-15 UTC

Google Cloud and Google Workspace services meet demanding US government compliance requirements that are verified through formal third-party authorizations, including the following:

For more information, see the Google FedRAMP and DoD compliance offerings pages.

This document provides a detailed list of Google Cloud and Google Workspace services in scope for FedRAMP High, DoD IL2, DoD IL4, and DoD IL5 provisional authorizations. You can use all Google Cloud and Google Workspace services that are FedRAMP High authorized for FedRAMP Moderate deployments.

This document also tracks the Google Cloud regions that are suitable for FedRAMP Moderate, FedRAMP High, DoD IL2, DoD IL4, and DoD IL5 deployments.

Terminology

This document uses the following terminology:

  • FedRAMP High: FedRAMP High P-ATO
  • FedRAMP Moderate: FedRAMP Moderate deployment for a cloud region based on inheritance from a FedRAMP High P-ATO
  • DoD IL2: DoD SRG Impact Level 2 PA
  • DoD IL4: DoD SRG Impact Level 4 PA
  • DoD IL5: DoD SRG Impact Level 5 PA
  • GSA review: Service was submitted for FedRAMP authorization and is waiting for GSA approval
  • DISA review: Service was submitted for DoD authorization and is waiting for DISA approval
  • : Service or cloud region is authorized

Google Cloud services by audit scope

Last updated: January 2026

Google's authorization strategy focuses on the top-level cloud services.

A component service or feature of an authorized top-level cloud service might not be authorized yet, in which case it's explicitly excluded from the authorization scope. Conversely, a commonly used feature of an authorized cloud service might be explicitly called out as authorized for emphasis and to proactively address questions about the authorization status for commonly used Google Cloud services. You can use all Google Cloud services that are FedRAMP High authorized for FedRAMP Moderate deployments.

This document also tracks changes to authorization status resulting from service rebranding, restructuring, and deprecation. Typically, authorization status is no longer tracked for deprecated services that are shut down and unavailable for provisioning.


Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Access Approval

Access Context Manager

DISA review

DISA review

Access Transparency

DISA review

DISA review

Agent Assist

AlloyDB

API keys

GSA review

Apigee

DISA review

DISA review

App Engine standard environment (excluding bundled services)

App Hub

DISA review

DISA review

Application Integration

Artifact Analysis

Artifact Registry (replaced Container Registry)

Assured Open Source Software (Assured OSS)

Backup and DR Service

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Batch

BigQuery (excluding BigLake and BigQuery sharing)

      BigQuery Data Transfer Service

DISA review

DISA review

Bigtable

DISA review

DISA review

Binary Authorization

DISA review

DISA review

Certificate Authority Service

Certificate Manager

DISA review

DISA review

Chrome Enterprise Premium (formerly BeyondCorp Enterprise)

Cloud Asset Inventory

Cloud Billing

Cloud Build

Cloud CDN

Cloud Composer

Cloud Data Fusion

Cloud Deploy

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Cloud Deployment Manager (replaced by Infrastructure Manager)

Cloud DNS

Cloud Endpoints

Cloud External Key Manager (Cloud EKM)

Cloud Run functions for Firebase

Cloud Healthcare API

Cloud HSM

Cloud Identity

Cloud Interconnect

Cloud Intrusion Detection System (Cloud IDS)

Cloud Key Management Service (Cloud KMS)

Cloud Life Sciences (formerly Google Genomics)

Cloud Load Balancing: Application Load Balancer

      External Application Load Balancer (regional)

      Internal Application Load Balancer (regional)

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Cloud Load Balancing: Passthrough Network Load Balancer

      External passthrough Network Load Balancer

      Internal passthrough Network Load Balancer

Cloud Load Balancing: Proxy Network Load Balancer

      External proxy Network Load Balancer (regional)

      Internal proxy Network Load Balancer (regional)

Cloud Logging

      Error Reporting

Cloud Monitoring

Cloud NAT

Cloud Natural Language API

Cloud Next Generation Firewall (Cloud NGFW) (excluding Enterprise)

      Cloud Next Generation Firewall Essentials

      Cloud Next Generation Firewall Standard

Cloud Profiler

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Cloud Router

Cloud Run

      Cloud Run functions (formerly Cloud Functions)

      Knative serving (formerly Cloud Run for Anthos)

      Direct VPC egress (replaced Serverless VPC Access)

Cloud Scheduler

Cloud Service Mesh (formerly Anthos Service Mesh)

DISA review

DISA review

      Traffic Director API

DISA review

DISA review

Cloud Shell

Cloud SQL

      Cloud SQL for MySQL

      Cloud SQL for PostgreSQL

      Cloud SQL for SQL Server

Cloud Storage

Cloud Storage for Firebase

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Cloud Talent Solution

Cloud Tasks

Cloud Trace

Cloud Translation API

Cloud Vision API

Cloud VPN

Cloud Workstations

Compute Engine

      Compute Engine: OS Login

DISA review

DISA review

      Compute Engine: VM Manager

DISA review

DISA review

Conversational Agents (formerly Dialogflow CX)

Conversational Insights (formerly CCAI Insights)

Data Catalog (replaced by Dataplex Universal Catalog)

Database Center

DISA review

DISA review

Database Migration Service

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Dataflow

Dataform

DISA review

DISA review

Dataplex Universal Catalog

DISA review

DISA review

Dataproc

Datastream

Dialogflow ES

Document AI

DISA review

DISA review

Earth Engine

Eventarc (excluding Advanced)

      Eventarc Standard

Filestore

DISA review

DISA review

      Filestore Basic HDD tier

DISA review

DISA review

      Filestore Basic SSD tier

DISA review

DISA review

Firebase Authentication

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Firebase Security Rules

Firestore (replaced Datastore; excluding Firestore with MongoDB compatibility)

DISA review

DISA review

Gemini Enterprise (formerly Google Agentspace; excluding NotebookLM Enterprise; for a full list of exclusions, see Deployment guidance for Gemini for Government)

DISA review

Generative AI on Vertex AI

      Vertex AI Tuning

DISA review

DISA review

Google Admin console

      Google Admin console: Admin SDK

      Google Admin console: Directory Sync

Google Cloud app

Google Cloud Armor

DISA review

DISA review

Google Cloud Marketplace

Google Cloud Migration Center

Google Cloud SDK

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Google Kubernetes Engine (GKE)

      Backup for GKE

      GKE Config Sync

      GKE Connect Agent

      GKE Hub

      GKE Identity Service (formerly Anthos Identity Service)

Google Security Operations SIEM (Google SecOps SIEM)

Google Security Operations SOAR (Google SecOps SOAR)

Identity and Access Management (IAM)

Identity Platform

Identity-Aware Proxy (IAP) (excluding IAP for TCP)

Infrastructure Manager

DISA review

DISA review

Integration Connectors

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Key Access Justifications

DISA review

DISA review

Looker (Google Cloud core)

DISA review

DISA review

Looker Studio (formerly Google Data Studio)

      Looker Studio Pro

Memorystore (excluding Memorystore for Redis Cluster and Memorystore for Valkey)

      Memorystore for Memcached

      Memorystore for Redis

Model Armor

Network Connectivity Center

DISA review

DISA review

Network Intelligence Center

Network Service Tiers

Organization Policy Service

Persistent Disk

Pub/Sub

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

reCAPTCHA Enterprise

Resource Manager

DISA review

DISA review

Secret Manager (excluding Global secrets)

      Secret Manager: Regional secrets

Secure Source Manager (replaced Cloud Source Repositories)

DISA review

DISA review

Secure Web Proxy

Security Command Center (excluding Enterprise)

DISA review

DISA review

      Security Command Center Premium (excluding Compliance Manager, Data Security Posture Management, AI Protection, and Issues)

DISA review

DISA review

Sensitive Data Protection (formerly Cloud DLP)

      Cloud Data Loss Prevention API

Service Directory

Spanner

Speech-to-Text

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Storage Transfer Service

Text-to-Speech

Vertex AI Model Monitoring

Vertex AI Model Registry

Vertex AI Neural Architecture Search (NAS) (formerly AI Platform NAS)

Vertex AI Pipelines

Vertex AI Inference: Batch and Online

Vertex AI Search

Vertex AI Tabular Workflows

Vertex AI Training

Vertex AI Vector Search

Vertex AI Workbench (formerly Notebooks)

Vertex ML Metadata

Video Intelligence API

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Virtual Private Cloud (VPC)

      Private Google Access

      Private Service Connect

      Private services access

      VPC Flow Logs

VPC Service Controls

Web Risk API

Workflows

Workforce Identity Federation

DISA review

DISA review

      Workforce Identity Pools

DISA review

DISA review

Google Workspace services by audit scope

Last updated: January 2026

The Google Workspace Enterprise Plus edition is included in the FedRAMP High P-ATO and maintains a DoD IL4 PA. You can use all Google Workspace services that are FedRAMP High authorized for FedRAMP Moderate deployments.


Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

AppSheet (excluding Tables)

Contacts

Drawings

DISA review

Gemini app

Gmail

DISA review

Admin SDK (including Admin Settings API, Apps Email Audit API, Calendar Resource API, Directory API (which replaced Provisioning API), Domain Shared Contacts API, Email Settings API, Enterprise License Manager API, Groups Migration API, Groups Settings API, Reports API, and Reseller API)

Google Admin console: Android and Chrome device management

Google Calendar

DISA review

Google Chat

Google Chrome sync (Google Workspace for Education domains only)

Google Classroom

Google Cloud Search

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Google Docs

DISA review

Google Drive

DISA review

Google Forms

Google Keep

Google Meet

DISA review

      Google Meet: Live stream

Google Sheets

DISA review

Google Sites Classic (replaced by Google Sites New)

Google Sites New

DISA review

Google Slides

DISA review

Google Tasks

Google Vault

Google Vids

Google Voice

Service FedRAMP High DoD IL2 DoD IL4 DoD IL5

Google Workspace Security Center

(for Google Workspace Enterprise and Google Workspace Enterprise for Education domains only)

Google Workspace with Gemini

      Gemini in Chat

      Gemini in Docs

      Gemini in Drive

      Gemini in Gmail

      Gemini in Meet

             Generative images in Meet backgrounds

             Live translated captions

             Studio look

      Gemini in Sheets

      Gemini in Slides

Secure LDAP

Authorized Google Cloud regions

Last updated: January 2026

Google Cloud regions hold FedRAMP and Department of Defense (DoD) provisional authorizations (PAs). The suitability of these regions depends on the following security impact levels (IL):

  • For an IL2 PA, DoD grants full reciprocity with a FedRAMP Moderate or High P-ATO.
  • Only US-based cloud regions are appropriate for FedRAMP High, DoD IL2, DoD IL4, and DoD IL5 deployments.
  • You can use any US-based cloud region that's approved for FedRAMP High for FedRAMP Moderate deployments.
  • Non-US cloud regions are only suitable for FedRAMP Moderate deployments, which can rely on the FedRAMP High P-ATO.

Geographic area Location Cloud region FedRAMP Moderate FedRAMP High DoD IL2 DoD IL4 DoD IL5

North America

Arcola, VA, USA

us-east4

Ashburn (1), VA, USA

us-east4

Ashburn (2), VA, USA

us-east4

Ashburn (3), VA, USA

us-east4

Atlanta (1), GA, USA

Not applicable (N/A)

Atlanta (2), GA, USA

N/A

Clarksville, TN, USA

us-east6

Columbus, OH, USA

us-east5

Council Bluffs (1), IA, USA

us-central1

Council Bluffs (2), IA, USA

us-central1

Henderson, NV, USA

us-west4

Las Vegas, NV, USA

us-west4

Geographic area Location Cloud region FedRAMP Moderate FedRAMP High DoD IL2 DoD IL4 DoD IL5

Lancaster, OH, USA

us-east5

Leesburg, VA, USA

N/A

Lenoir, NC, USA

N/A

Los Angeles (1), CA, USA

us-west2

Los Angeles (2), CA, USA

us-west2

Los Angeles (3), CA, USA

us-west2

Midlothian (Dallas), TX, USA

us-south1

Moncks Corner, SC, USA

us-east1

Montreal, Québec, Canada

northamerica-northeast1

New Albany, OH, USA

us-east5

Papillion, NE, USA

us-central1

Phoenix, AZ, USA

us-west8

Geographic area Location Cloud region FedRAMP Moderate FedRAMP High DoD IL2 DoD IL4 DoD IL5

Pryor Creek, OK, USA

us-central2

Reno, NV, USA

N/A

Salt Lake City (1), UT, USA

us-west3

Salt Lake City (2), UT, USA

us-west3

Salt Lake City (3), UT, USA

us-west3

The Dalles (1), OR, USA

us-west1

The Dalles (2), OR, USA

us-west1

Toronto, Ontario, Canada

northamerica-northeast2

Widows Creek, AL, USA

N/A

South America

Osasco, São Paulo, Brazil

southamerica-east1

Vinhedo, São Paulo, Brazil

southamerica-east1

Quilicura, Santiago, Chile

southamerica-west1

Geographic area Location Cloud region FedRAMP Moderate FedRAMP High DoD IL2 DoD IL4 DoD IL5

Europe

Eemshaven, Netherlands

europe-west4

Frankfurt (1), Hesse, Germany

europe-west3

Frankfurt (2), Hesse, Germany

europe-west3

Frankfurt (3), Hesse, Germany

europe-west3

Frankfurt (4), Hesse, Germany

europe-west3

Frankfurt (5), Hesse, Germany

europe-west3

Frankfurt (6), Hesse, Germany

europe-west3

Frankfurt (7), Hesse, Germany

europe-west3

Fredericia, Denmark

N/A

Ghlin, Hainaut, Belgium

europe-west1

Hamina, Finland

europe-north1

London (1), United Kingdom

europe-west2

Geographic area Location Cloud region FedRAMP Moderate FedRAMP High DoD IL2 DoD IL4 DoD IL5

London (2), United Kingdom

europe-west2

London (3), United Kingdom

europe-west2

London (4), United Kingdom

europe-west2

London (5), United Kingdom

europe-west2

London (6), United Kingdom

europe-west2

Madrid (1), Spain

europe-southwest1

Madrid (2), Spain

europe-southwest1

Middenmeer, Netherlands

europe-west11

Milan (1), Italy

europe-west8

Milan (2), Italy

europe-west8

Paris (1), France

europe-west9

Paris (2), France

europe-west9

Geographic area Location Cloud region FedRAMP Moderate FedRAMP High DoD IL2 DoD IL4 DoD IL5

Paris (3), France

europe-west9

Warsaw (1), Poland

europe-central2

Warsaw (2), Poland

europe-central2

Zurich, Switzerland

europe-west6

Middle East

Doha (1), Qatar

me-central1

Tel Aviv (1), Israel

me-west1

Tel Aviv (2), Israel

me-west1

Asia Pacific

Changhua, Taiwan

asia-east1

Delhi (1), India

asia-south2

Jakarta (1), Indonesia

asia-southeast2

Jakarta (2), Indonesia

asia-southeast2

Kōtō-ku (1), Tokyo, Japan

asia-northeast1

Geographic area Location Cloud region FedRAMP Moderate FedRAMP High DoD IL2 DoD IL4 DoD IL5

Kōtō-ku (2), Tokyo, Japan

asia-northeast1

Kōtō-ku (3), Tokyo, Japan

asia-northeast1

Lok Yang Way, Singapore

asia-southeast1

Melbourne, Victoria, Australia

australia-southeast2

Mumbai (1), India

asia-south1

Mumbai (2), India

asia-south1

Mumbai (3), India

asia-south1

Osaka, Japan

asia-northeast2

Seoul, South Korea

asia-northeast3

Sydney (1), NSW, Australia

australia-southeast1

Sydney (2), NSW, Australia

australia-southeast1

Sydney (3), NSW, Australia

australia-southeast1

Sydney (4), NSW, Australia

australia-southeast1

Wenya, Singapore

asia-southeast1

What's next