OnePlan Azure GCC Hosting for Government Organizations

Overview

OnePlan is hosted in Microsoft Azure Government Community Cloud (GCC), a secure, government‑only cloud environment designed to meet U.S. federal, state, and local government security and compliance requirements.

This hosting model ensures that sensitive government data is protected using industry‑recognized security controls, U.S. data residency, and independently audited compliance standards.

What Is Azure Government Community Cloud (GCC)?

Azure Government Community Cloud (GCC) is a physically and logically isolated version of Microsoft Azure that is built specifically for U.S. government organizations and approved partners.

Key characteristics of Azure GCC include:

• Datacenters located exclusively in the United States
• Access restricted to screened U.S. personnel
• Separation from Microsoft’s commercial (public) Azure cloud
• Support for Software‑as‑a‑Service (SaaS), Platform‑as‑a‑Service (PaaS), and Infrastructure‑as‑a‑Service (IaaS)

Azure GCC is commonly used by organizations that must comply with government security, privacy, and data residency requirements.

How OnePlan Uses Azure GCC

OnePlan is deployed as a SaaS application within an Azure GCC tenant (us.oneplan.ai). This means:

• Customer data is hosted in Azure Government, not in commercial Azure
• Infrastructure security, physical protection, and baseline compliance controls are provided by Microsoft Azure Government
• Application‑level security and governance are provided by OnePlan

This layered approach helps ensure that government data remains secure throughout the infrastructure and application stack.

Security and Compliance

Azure Government Security

Azure Government provides robust security controls, including:

• Physically isolated U.S. datacenters
• Dedicated government networks
• Enhanced access controls and monitoring
• Independent audits against recognized standards such as ISO 27001 and SOC 2

These controls help safeguard sensitive data against unauthorized access and external threats.

OnePlan Security Certifications

In addition to Azure Government’s compliance framework, OnePlan maintains its own independent certifications, including:

• SOC 2
• ISO 27001
• ISO 27701

These certifications demonstrate OnePlan’s commitment to secure system operations, data protection, and privacy management at the application level.

Note
OnePlan is actively working toward FedRAMP certification as part of its ongoing commitment to meeting the security and compliance requirements of U.S. federal, state, and local government customers.

What This Means for Government Customers

By hosting OnePlan in Azure GCC and combining it with OnePlan’s own security certifications, government organizations benefit from:

• ✅ U.S. data residency and sovereign cloud hosting
• ✅ Separation from commercial cloud environments
• ✅ Defense‑in‑depth security (infrastructure + application)
• ✅ Alignment with government security and compliance expectations
• ✅ A trusted environment for managing projects, portfolios, and planning data

This integrated hosting model helps organizations meet regulatory obligations while efficiently managing work in OnePlan.

Who Is This Hosting Option For?

OnePlan Azure GCC hosting is intended for:

• U.S. federal agencies
• State, local, tribal, and territorial government organizations
• Approved government contractors and partners
• Organizations with strict security, privacy, or compliance requirements

Additional Questions?

If you have questions about Azure GCC hosting, eligibility, or how this applies to your organization, please contact OnePlan Support or your OnePlan account representative.