FedRAMP Authorized — Moderate Impact
Tableau Government Cloud by Salesforce (Tableau). 6 compliance features verified.
Tableau Government Cloud
by Salesforce (Tableau)
Impact Level
Moderate
Status
Authorized
Pricing
enterprise
Authorization Date: January 25, 2021 | Sponsoring Agency: GSA
Overview
Tableau Government Cloud provides FedRAMP Moderate authorized visual analytics and business intelligence for government organizations. It enables self-service data exploration with drag-and-drop visualization and natural language queries. The platform connects to hundreds of data sources within the compliant boundary.
Key Features
Certifications & Authorizations
Deployment Options
NIST 800-171 Compliance Coverage
How to Procure Tableau Government Cloud for Defense Contracts
Tableau Government Cloud is available through GSA Multiple Award Schedule (MAS) under SIN 132-51 (Information Technology Professional Services) and SIN 518210C (Business Intelligence Software). Procurement is also available via SEWP V contracts and CIO-SP3 OASIS pools. Government pricing includes volume discounts and educational pricing for training programs, typically 25-40% below commercial rates. The authorization boundary encompasses Tableau Server, Tableau Online services, data connectors, and mobile applications within Salesforce Government Cloud Plus infrastructure. Contracting officers must approve the System Security Plan (SSP) outlining data flow diagrams, integration points with existing government systems, and user access controls. Include data classification levels, backup/recovery procedures, and incident response protocols in the SOW. Procurement timeline typically spans 120-180 days including technical evaluation, security review, and ATO approval process. For CMMC assessments, include Tableau Government Cloud within your assessment boundary as a specialized asset requiring Level 2 controls. Document data flows between Tableau and CUI-containing systems, encryption in transit/at rest, and audit log integration with your SIEM. Ensure contractor personnel accessing Tableau have appropriate clearances matching data sensitivity levels processed within the analytics environment.
Compliance Cross-References
Tableau Government Cloud's FedRAMP Moderate authorization directly satisfies DFARS 252.204-7012 requirements for adequate security when processing Controlled Unclassified Information (CUI). The cloud deployment aligns with DFARS 252.239-7010 cloud computing security requirements through its AWS GovCloud infrastructure and government-specific tenant isolation. NIST 800-171 control families are addressed comprehensively: Access Control (AC) through role-based permissions and CAC/PIV integration, System and Communications Protection (SC) via FIPS 140-2 encryption and TLS 1.2+ protocols, and Audit and Accountability (AU) through comprehensive logging and SIEM integration capabilities. For CMMC Level 2 compliance, Tableau Government Cloud supports Asset Management (AM), Configuration Management (CM), Identification and Authentication (IA), Media Protection (MP), and System and Information Integrity (SI) domains through its centralized analytics platform. DoD Cloud Computing SRG requirements are met through the underlying Salesforce Government Cloud Plus infrastructure, providing IL2-appropriate data isolation, continuous monitoring, and government-approved encryption standards for analytics workloads processing sensitive but unclassified information.
Defense Contractor Use Case
Defense contractors use Tableau Government for visual data analytics, creating interactive dashboards for program management, and sharing insights with government stakeholders.
Related Products
More Analytics & BI Products
Frequently Asked Questions
What is the FedRAMP authorization level for Tableau Government Cloud?
Tableau Government Cloud is authorized at the FedRAMP Moderate impact level, with authorization granted on 2021-01-25 sponsored by GSA. The FedRAMP Moderate baseline includes approximately 325 security controls covering confidentiality, integrity, and availability.
Can defense contractors use Tableau Government Cloud for CUI?
Tableau Government Cloud is authorized at the FedRAMP Moderate baseline. While FedRAMP Moderate covers a broad range of government data, defense contractors handling CUI should carefully evaluate whether Moderate controls meet their specific DFARS 252.204-7012 and NIST 800-171 requirements. Some CUI categories may require FedRAMP High authorization depending on the sensitivity of the data and contract requirements.
How does Tableau Government Cloud pricing compare to commercial?
Tableau Government Cloud government pricing is typically negotiated on an enterprise basis and may differ from commercial list prices. Government and defense contractor pricing often includes compliance overhead that can make it 15-30% higher than commercial equivalents. However, volume discounts, GSA Schedule pricing, and multi-year commitments can help offset these costs. Contact Salesforce (Tableau) directly or check GSA Advantage for current government pricing.
Browse All FedRAMP Authorized Tools
Search and filter 80+ FedRAMP authorized products for your defense contracting needs.
Open FedRAMP FinderGet a defensible CUI architecture
This Tableau Government Cloud FedRAMP profile flags the gaps. The next step is a compliance architecture review where we map your data flows to FedRAMP-authorized alternatives and CMMC-aligned controls.
Schedule architecture reviewRelated: how much CMMC certification costs — DoD’s own priced figures