Salesforce Agentforce 360 clears DOD IL5 for CUI data
The authorization is a genuine compliance gate for CUI workloads, but the vendor's "first" framing ignores the eight companies already running AI at DOD's classified tiers.
TL;DR
Salesforce's Agentforce 360 platform received DOD Impact Level 5 authorization Wednesday, clearing it to store and process Controlled Unclassified Information and unclassified National Security Systems data across the department. The authorization, hosted on AWS GovCloud, puts Army Human Resources Command down as the first named customer. The IL5 milestone is a real compliance gate, but Salesforce's "first commercial software company bringing an agentic platform into national security" framing strains against the eight AI vendors DOD already has operating at the higher IL6 and IL7 classified tiers.
Salesforce's Agentforce 360 platform is now authorized at DOD Impact Level 5, hosted on Amazon Web Services' GovCloud, an environment the company describes as "physically and logically isolated" and operated exclusively by U.S. personnel. The ATO means the platform can process Controlled Unclassified Information and unclassified National Security Systems data, putting agentic AI tools in front of DOD users who handle CUI workflows. Army Human Resources Command is the first named customer.
The IL5 clearance is a real compliance gate, and it lands in the middle of an aggressive Pentagon AI push. DOD CTO Emil Michael has been rolling out commercial AI tools through the GenAI.mil platform since late 2025, and the department already has eight technology companies (including Google, Microsoft, and AWS) operating at the higher IL6 and IL7 classified tiers under formal agreements signed in May, per DefenseScoop. Salesforce's framing as the "first commercial software company bringing an agentic platform into national security," offered by Missionforce CEO Kendall Collins at the briefing, doesn't hold up against that field.
Where IL5 fits, and doesn't
IL5 is the highest authorization for unclassified but sensitive data. It doesn't touch IL6 (classified) or IL7 (top secret). Salesforce officials noted the Missionforce team also runs a fully air-gapped top-secret environment, but that's separate from the Agentforce 360 ATO announced Wednesday. For practitioners on the $5.6 billion Army IDIQ that Salesforce's national security subsidiary secured in January, the IL5 clearance means agentic AI tools are now deployable on CUI workloads, not on classified ones. That's the line that matters Monday morning.
Published ·Deep Fathom