Hello,

I'm curious about the requirements for US citizens and what that means with the Enclave.

Our company is planning to switch to MSFT GCC from our commercial tenant. We also have users across the world. We do not expect any sort of CUI in our environment but are required to get certified as some customers require a CMMC environment for the security services that we provide.

Our security services include SaaS tools that feed into a SOAR for SOC services. The SaaS services and SOAR will be locked down to US resources only. Does this mean we can setup a MSFT GCC tenant to house all users?

Thank you for any sort of help!