HEY Email
by Basecamp
FedRAMP Status
Not FedRAMP Authorized
Impact Level
N/A
Category
Overview
HEY is a consumer-focused email service from Basecamp that reimagines inbox management. It is not FedRAMP authorized and lacks the security controls required for government CUI handling.
CUI Risk Assessment
Not FedRAMP authorized. Using this tool for CUI creates compliance violations under NIST 800-171 and DFARS 252.204-7012.
NIST 800-171 Violations
Using HEY Email for CUI without FedRAMP authorization may violate these NIST 800-171 controls:
FedRAMP Compliant Alternatives
Frequently Asked Questions
Is HEY Email FedRAMP authorized?
No. HEY Email is not FedRAMP authorized and is designed for consumer and small business use, not government compliance.
Can I use HEY Email with CUI?
No. HEY Email does not meet FedRAMP or NIST 800-171 requirements for CUI.
What is a compliant alternative to HEY Email?
Microsoft 365 GCC High (FedRAMP High) is the recommended email platform for defense contractors handling CUI.
Run a Full Tech Stack Audit
Check all your enterprise tools at once with our free CUI Compliance Auditor.
Launch CUI Auditor