Check whether your cloud backup provider can hold CUI
Your backups include CUI and go to a cloud service, and you need to know whether that service meets DFARS 7012.
- You get
- A plain answer on whether the provider qualifies, the questions to ask them and the documents to request.
- Works in
- ChatGPT
- Claude
- Copilot
- Gemini
Fill in the blanks
A few words each is enough. Leave a blank empty and the assistant will ask you or assume.
Describe, don't paste: no CUI, personal data, hostnames, IP addresses or credentials. What you type stays on this page until you copy it or open it in an assistant.
Your prompt0 of 3 filled
Our backups include CUI and are stored with a cloud provider. Check whether that meets DFARS 252.204-7012(b)(2)(ii)(D), which requires cloud services that store CUI to meet the FedRAMP Moderate baseline or equivalent. - Provider and service: [Provider and product name] - What they say about FedRAMP: [e.g. "FedRAMP High authorized", "FedRAMP aligned", or "unknown"] - Where the data is stored: [Commercial cloud / GovCloud / Not sure] Explain the difference between FedRAMP authorized, FedRAMP Moderate equivalent (as defined in DoD's December 2023 memo) and marketing terms like "FedRAMP aligned", and say plainly whether what they've told us would meet the requirement. Then list the questions to ask the provider, the documents to request (for example the customer responsibility matrix), and what an assessor will want to see from us. If you aren't sure of a detail, say so. Some details above are still in square brackets. Ask me for them before you answer, rather than guessing.
Before you paste
Check the provider's listing on the FedRAMP Marketplace yourself; it's the quickest way to confirm an authorization.
Then check the answer
Commvault Cloud for Government
FedRAMP High backup, run by KELYN
More compliance prompts
All 28 prompts- Draft the backup section of your System Security PlanYou need SSP language for NIST SP 800-171 requirement 3.8.9 and don't want to start from a blank page.
- Find gaps against the 800-171 recovery requirementsBefore a CMMC assessment, you want a quick read on which backup and recovery requirements you can't yet show evidence for.
- Write a POA&M entry for a backup gapYou've found a gap and need a Plan of Action and Milestones entry an assessor will accept.
- Prepare for your cyber insurance renewalYour renewal questionnaire asks about backups, and a weak answer can raise your premium or put a claim at risk.
- Answer a customer's security questionnaire about backupsA customer or prime sent a security questionnaire and the backup and recovery section is yours to fill in.
Want a person to check the answer?
AI gets you a first draft. A KELYN engineer can tell you whether it would hold up in an assessment or a real recovery.