{"page":"/blog/air-gapped-ad-tech","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Level","What it means","Example from a primary or company source"],"rows":[["Logical separation","Shared hardware; tenants separated by software","IL5 accepts \"virtual/logical separation\" between DoD and federal tenants (Microsoft Learn, IL5)"],["Physical separation from other customer groups","Hardware not shared with outside tenants","IL5 requires physical separation from non-federal tenants (Microsoft Learn, IL5)"],["Sovereign or qualified cloud","Connected to the internet; operator and jurisdiction controlled","SecNumCloud qualification in France (ANSSI catalogue, 27 Oct 2026)"],["Dedicated classified region","Separate infrastructure for classified workloads, reached over dedicated connections","AWS says its Secret Cloud was \"designed and accredited\" for IL6 and ICD 503 (company statement) (AWS)"],["Disconnected on-premises cloud","Runs without the public internet","Google says its Distributed Cloud air-gapped mode \"isolates the system from the public internet\" (company statement) (Google Cloud)"],["Air gap","No physical connection; manual transfer only","NIST definition (NIST CSRC)"]],"sourceUrls":[["https://learn.microsoft.com/en-us/azure/compliance/offerings/offering-dod-il5"],["https://learn.microsoft.com/en-us/azure/compliance/offerings/offering-dod-il5"],["https://messervices.cyber.gouv.fr/visas/catalogue-produits-services-profils-de-protection-sites-certifies-qualifies-agrees-anssi.pdf"],["https://aws.amazon.com/federal/secret-cloud/"],["https://cloud.google.com/sovereign-cloud"],["https://csrc.nist.gov/glossary/term/air_gap"]]}