Record / microsoft-365-gcc-high
Microsoft 365 GCC High.
Microsoft 365 GCC High is a US government cloud for the Department of Defense and for contractors that hold or process DoD controlled unclassified information or that are subject to ITAR. The page says eligibility is validated before an environment is established, and that trials are not available. Microsoft 365 GCC High has no published dollar price in this directory, so the listing stays by quote, checked Oct 16, 2026.
Compare all CMMC Level 2 tools and where CMMC Phase 2 stands.
Opens the vendor site. No referral fee is paid on this listing.
Published price.
USD
FedRAMP FedRAMP marketplace status: FedRAMP Certified As of 12/26/2024, Class D (High). Type Rev5. Path Agency. Source Oct 21, 2026
What the vendor states.
OTHERClaim 01Vendor states: Office 365 GCC High is assessed using NIST SP 800-53 controls at a FIPS 199 High categorization. NIST SP 800-171 is not named.
CMMCClaim 02Vendor states: Non-DoD organizations that meet eligibility requirements might purchase GCC High licenses and can demonstrate equivalency to IL4 or necessary inheritance for CMMC.
ITARClaim 03Vendor states: GCC High and DoD environments are offered for contractors holding or processing DoD CUI or subject to ITAR.
OTHERClaim 04Vendor states: Office 365 GCC High and DoD support is not inside the service accreditation boundary and does not provide FedRAMP, DOD SRG, ITAR, IRS 1075, or CJIS data handling compliance assurances. That sentence is about support, not a statement that the cloud itself lacks every control.
FedRAMP marketplace status: FedRAMP Certified As of 12/26/2024, Class D (High). SourceOct 21, 2026
Not verified by this index. A vendor statement is not a finding, and this index does not say that any tool makes a company meet a rule.
FedRAMP is the federal cloud security authorization. Most small contractors only need it if they sell cloud services to agencies.
As the vendor describes it.
Priced plan
The page publishes no price. It says the environment is available through Volume Licensing and to engage an account team or preferred partner. It does not use the word quote.
Also listed under
Listed in one category.
Disclosures.
Website
Price checked
Price type
Sponsored
Vendor published
Questions
Who can buy Microsoft 365 GCC High?
Microsoft offers GCC High for the Department of Defense and for contractors that hold or process DoD controlled unclassified information or that are subject to ITAR. Buyers go through a validation process to confirm eligibility before Microsoft sets up an environment.
What does GCC High cost?
Microsoft does not publish a price on its GCC High service description. It sells GCC High through Volume Licensing and asks buyers to contact their account team or a preferred partner. Trials are not available.
Which security controls is GCC High assessed against?
Microsoft says GCC High is assessed using NIST SP 800-53 controls at a FIPS 199 High categorization. The service description does not name NIST SP 800-171, the standard CMMC Level 2 uses.
Does moving to GCC High satisfy CMMC for my company?
No. Microsoft says non DoD organizations might buy GCC High when they meet its eligibility rules and can show equivalency to IL4 or necessary inheritance for CMMC. Your company still runs and affirms its own Level 2 assessment.
Which listed products run on GCC High?
Cuick Trac sells a managed enclave based in Microsoft GCC High for contractors that handle CUI, ITAR and FCI. VisibleThread lists a customer hosted option on a private cloud such as Azure GCC High.
Source: Cuick Trac, VisibleThread pricing, Cuick Trac listing, VisibleThread listing
Newsletter
Get price changes by email.
A short email when CMMC status or a tracked price changes. At most one a week. We send a confirm link first, and every email has an unsubscribe link.