VMware Tanzu Application Service

VMware Tanzu Application Service is available through GSA MAS under Software Category 132-51 (Cloud Computing Services) and SEWP V contracts. Government pricing includes significant discounts compared to commercial rates, typically 15-25% under GSA schedules. For SSP development, the authorization boundary must clearly delineate TAS platform services from customer applications — VMware provides detailed system architecture diagrams and data flow documentation. The contracting officer must approve the inherited control matrix, which covers 200+ NIST 800-53 controls at the platform layer. Request VMware's Customer Responsibility Matrix (CRM) and Security Inheritance Documentation during RFP evaluation. Typical procurement timeline spans 6-9 months including security review, ATO reciprocity assessment, and technical evaluation. For CMMC compliance, TAS infrastructure components fall within the assessment boundary when processing CUI, but the platform's FedRAMP authorization provides significant control inheritance. Ensure your CMMC assessment plan addresses the shared responsibility model and documents how TAS platform controls satisfy CMMC Level 2 requirements for domains like Access Control (AC), System and Communications Protection (SC), and Audit and Accountability (AU). Include TAS platform documentation in your System Security Plan and maintain currency with VMware's quarterly authorization updates.