iMessage
by Apple
FedRAMP Status
Not FedRAMP Authorized
Impact Level
N/A
Category
Secure Messaging
Overview
iMessage is the default messaging app on iPhones and is explicitly listed by DoD as not authorized for non-public DoD information. Because it is the default app, defense personnel and contractors frequently use it without thinking about compliance, creating one of the largest CUI leakage vectors.
CUI Risk Assessment
DoD memorandum explicitly lists iMessage as NOT authorized for non-public DoD information. Widely used because it is the default on iPhones, creating significant CUI leakage risk.
NIST 800-171 Violations
Using iMessage for CUI without FedRAMP authorization may violate these NIST 800-171 controls:
FedRAMP Compliant Alternatives
Frequently Asked Questions
Is iMessage approved for defense communications?
No. DoD memoranda explicitly prohibit iMessage for non-public DoD information. Its default status on iPhones makes it a common but unauthorized communication channel for CUI.
Run a Full Tech Stack Audit
Check all your enterprise tools at once with our free CUI Compliance Auditor.
Launch CUI Auditor