Government Cloud Available Products and Features

The Salesforce Government Cloud Plus and Government Cloud Plus Defense environments are dedicated instances of Salesforce Customer 360, which is composed of Salesforce’s industry-leading Platform-as-a-Service (PaaS) and Software-as-a-Service (SaaS) offerings. These environments are designed for mission impact and for use by U.S. federal, state, and local government customers, U.S. government contractors, and Federally Funded Research and Development Centers (FFRDCs).

• Salesforce Government Cloud Plus maintains a FedRAMP High Provisional Authority to Operate (P-ATO) along with IRS 1075, and NIST SP 800-171 attestations. DoD IL2 provisional authorization is also granted via FedRAMP reciprocity.
  
• Salesforce Government Cloud Plus Defense maintains a FedRAMP High P-ATO from the JAB, along with a DoD IL5 PA, IRS 1075, and NIST SP 800-171 attestations.

We strive to maintain parity between our commercial cloud products and our Government Cloud offerings. However, there are many factors that may create differences in accreditations and customers may choose to accept the risks of using products that haven't met the same accreditation standards. The following table outlines the:

• Authorized: Products that are included within the FedRAMP High, and DoD IL5 Authorization Boundaries.
• Interoperable: Products have undergone functional testing within a Government Cloud instance to ensure all functionality is working as intended. The product hasn't been evaluated and assessed in accordance with FedRAMP/DoD security and authorization boundary requirements, but customers can make a risk-based decision and take on any risk due to the product not being FedRAMP authorized.

Note: Salesforce products that aren't in the table below aren't available in Government Cloud Plus as they haven't passed functional testing yet.

Note: Out of Boundary products may be blocked or adversely impacted by network access limitations for U.S. Government customers on restricted access networks such as the Non-Classified Internet Protocol Routing Network (NIPRNet) or other restricted enclaves. Customers are responsible for following safe software deployment best practices and testing functionality of interoperable products in a non-production environment.

For a description of Salesforce’s current product offerings, please see http://www.salesforce.com/products/.

For more detailed information on Salesforce’s security and compliance posture for Salesforce Government Cloud Plus and Salesforce Government Cloud Plus Defense, please contact your Salesforce Account Executive.

Disclaimer: The information provided below is strictly for the convenience of our customers and is for general informational purposes only. Salesforce does not warrant the accuracy or completeness of any information, text, graphics, links, or other items in this document. Salesforce advises its customers that though a product may be included within the FedRAMP High, or DoD IL5 Authorization Boundaries, specific features of such product may or may not be included within such boundaries. Salesforce does not guarantee that you will achieve any specific results if you utilize this document. It may be advisable for you to consult with a professional, such as an agency authorization official, agency counsel, accountant, architect, business advisor or professional engineer to get specific advice that applies to your particular situation. This document is subject to change at any time without notice. Because Salesforce continues to innovate by providing each customer multiple major release upgrades each year, we cannot guarantee that these answers will remain the same over time. The rights and responsibilities with regard to your use of Salesforce's online software services shall be set forth in a negotiated agreement that does not incorporate the attached document.