DataXRay and Microsoft 365 Government Cloud: what federal teams ask

Can DataXray connect to a GCC High or DoD tenant?

Yes. An administrator selects the tenant's cloud environment, Global, GCC High, or DoD, on the Microsoft Graph connector in the Admin Center, and DataXray authenticates and communicates through the sovereign endpoints for that environment: graph.microsoft.us for GCC High and dod-graph.microsoft.us for DoD.

What can DataXray scan?

Support today covers SharePoint and OneDrive. DataXray discovers the files in both, reads the contents of each one, and classifies what it finds, so your team can see where CUI, PII, and other regulated material sits across the tenant.

Does any data leave our environment?

No. DataXray deploys as an agentless container inside your own environment, including air-gapped networks, and its classification models run there too. No file and no inference leaves the environment

What does setup involve?

DataXray itself arrives as an agentless container, runs on your own infrastructure, and is operational in hours. From its Admin Center, an administrator configures the Microsoft Graph connector, enters the tenant's credentials, selects its cloud environment, and starts a scan.

Will this pass our security review?

Deployments are STIG-compliant, cryptography is FIPS-compliant, Ohalo holds SOC 2 Type 2 and ISO 27001, and Authority to Operate has been achieved in US Department of Defense customer environments.

Where does Copilot fit?

Microsoft 365 Copilot is now available in GCC High, and it reads whatever the signed-in user can reach. A DataXray scan shows you what that includes, which files hold CUI, PII, or other sensitive material and where they sit, so your team can put the right controls in place before the assistant reaches those files.

Can we defend the results to an auditor?

Yes. DataXray records which rule or model produced each classification and when the file was last checked, so when an auditor asks why a file carries a label, your team answers from the record.

How do we start?

Book a consultation. We will walk through the setup with your team and show what classification looks like running inside your own boundary.