Google App Engine (Government)

Google App Engine for Government is available through GSA MAS (Multiple Award Schedule) under SIN 518210C and SEWP VI. Government pricing includes volume discounts and sustained use discounts that differ from commercial rates, with committed use contracts providing additional savings. The authorization boundary includes the serverless runtime environment, managed services, and underlying Google Cloud infrastructure within the government boundary. Contracting officers must approve the use of Google's government-specific terms of service, data processing addendum, and ensure the Statement of Work explicitly defines the government boundary deployment. The procurement timeline typically spans 60-90 days including security assessment documentation review, legal terms negotiation, and technical configuration validation. For CMMC assessments, App Engine serverless functions and associated data flows must be documented within your assessment boundary, particularly focusing on data processing locations, encryption in transit/at rest, and access control integration with your identity management system. Ensure your System Security Plan documents the shared responsibility model where Google manages infrastructure security while your organization maintains responsibility for application-level security configurations, identity management integration, and data classification handling within the serverless environment.