Microsoft Government CMMC AMA

In addition to being a Cloud Service Provider and System Integrator, Microsoft is also a Defense Contractor. As such, we too are undergoing our journey to meet CMMC compliance for federal business. All services released in the US Sovereign Cloud are contained within an accreditation boundary supporting US Export Controls requiring screened US persons and data sovereignty in the Continental United States (CONUS). Microsoft does not bar customers from deciding within their own tenant users who can/cannot have access nor do we screen your users for this. This is the responsibility of the customer.