Microsoft 365 GCC High
Automata runs on Microsoft 365 GCC High itself, with G5 licenses. It is the environment we help defense contractors move to, so the limits we warn about are ones we work within.
Our Microsoft 365 tenant selection whitepaperHow we meet the requirements ourselves
We advise on FedRAMP, CMMC and Section 508, so we hold our own systems and this website to the same requirements.
The systems Automata runs on
Azure Government
Our Azure landing zone runs in Azure Government, in the US Gov Virginia region, and is built and changed with Terraform.
Configuration as code
Our tenant’s settings are kept in Git as Microsoft365DSC configuration. Each change goes through a pull request and automated validation before it is applied, and a daily check compares the tenant with the configuration and opens an issue when they differ.
Application control
We use Windows Defender Application Control (WDAC) policies.
This website is built and tested to Section 508
The site is built to the Section 508 standards, which adopt WCAG 2.0 Level A and AA, and to WCAG 2.2 Level AA. We tested every page on October 20, 2026.
| Test | What we checked | Result |
|---|---|---|
| Automated | axe-core 4.10 against the WCAG 2.0, 2.1 and 2.2 Level A and AA rules, on every page at desktop, phone and 320 pixels wide | No violations |
| Keyboard | Every stop on every page, reached with Tab | Every stop shows its focus, none is hidden behind the header, and nothing traps the keyboard |
| Structure | Titles, language, landmarks, headings, images, link purpose, control names, ARIA references and live regions, by area of the federal ICT Testing Baseline for Web | We fixed what it found the same day |
| Size and reflow | Targets of at least 24 by 24 pixels; no sideways scrolling at 320 pixels; WCAG’s larger text spacing | Pass |
| PDFs | Our whitepapers: tags, language, title, bookmarks and alternative text | Every figure has alternative text |
The details, what we fixed and how to report a barrier: our accessibility statement.
Our CMMC registration
Where you see it in our work
Configuration you keep
We hand over our engineering work as configuration your team can change and apply again, the way we run our own tenant.
What you keepSection 508 testing
We test your product against the same standards and write the Accessibility Conformance Report from the results.
Section 508GCC High from the inside
Our advice on GCC High and Azure Government comes from running our own company in them.
Microsoft 365Who does the assessment
We are a CMMC RPO and we advise on FedRAMP. A C3PAO or a FedRAMP Recognized independent assessor does the assessment itself, and we tell you that before you hire us.
Our FedRAMP advisor information