Heroku Shield

Heroku Shield is available through GSA MAS (Multiple Award Schedule) under Special Item Number (SIN) 518210C for Platform as a Service. Contracting officers can also procure via SEWP VI for IT services or utilize existing Salesforce enterprise agreements that include Heroku Shield entitlements. Government pricing typically includes volume discounts of 10-15% off commercial rates for annual commitments exceeding $100K. The authorization boundary encompasses Heroku Shield Private Spaces, Shield Postgres databases, and associated logging infrastructure within AWS FedRAMP regions. Contracting officers must approve the System Security Plan (SSP) addendum that documents how agency applications inherit Heroku Shield's security controls while maintaining responsibility for application-level security controls (AC-2, AC-3, AU-2). The typical procurement timeline spans 45-90 days including technical evaluation, pricing negotiations, and ATO boundary documentation. For CMMC Level 2 compliance, include Heroku Shield within your assessment boundary as a 'specialized asset' providing platform services for CUI processing. Document the shared responsibility model clearly, noting that Heroku Shield provides infrastructure and platform controls (SC-7, SC-8, AU-12) while the agency maintains responsibility for application access controls and data classification. Ensure your SPRS score reflects the FedRAMP Moderate baseline when hosting CUI workloads on the platform.