Planisphere Download for Mac

Law · DoW IL2 / IL4

DoW IL2 / IL4 for legal AI workflows

DoW IL2 / IL4 in legal AI workflows: what compliance requires, who asks for evidence, and the records to keep.

Legal forceBinding on DoD components; applies to cloud providers through DISA authorization and contracts
SectorLaw
Checked21 Oct 2026

01 / The rule

What DoW IL2 / IL4 requires

Commercial cloud service providers seeking a DoD Provisional Authorization, and DoD mission owners hosting DoD data in commercial cloud.

  1. 01IL2: hold a FedRAMP Moderate or High authorization for the cloud service offering.
  2. 02IL4: implement FedRAMP Moderate controls plus DISA parameters and the SRG's FedRAMP+ controls (Table D-1).
  3. 03IL4: connect through a DoD-approved Boundary Cloud Access Point and use DoD PKI authentication.
  4. 04Obtain a DoD Provisional Authorization from the DISA Authorizing Official, then the mission owner's ATO.
  5. 05Maintain continuous monitoring, including 30/90/180-day vulnerability remediation and annual assessments.

02 / In this sector

In a legal AI workflow

Applies to AI systems as to any system: commercial AI services handling DoD CUI need at least an IL4 Provisional Authorization, and IL2 only suits public or non-critical data.

Usually asked by

General counsel and litigation support.

Named alongside

FRE 702 · ABA Model Rules.

Sector pagePlanisphere for law

03 / Records

Records to keep

  1. 01FedRAMP authorization and DoD Provisional Authorization memo
  2. 02DoD SSP addendum and 3PAO assessment report
  3. 03Cloud eMASS package and monthly scan reports
  4. 04Mission owner ATO referencing the PA

Optional evidence · where Planisphere fits

Keep a record anyone can check

When your team meets a duty, Planisphere can seal the event it reports as a receipt.

01 · Your teamRecord the event

A disclosure shown, a review signed, a model change approved: the event your system reports.

02 · PlanisphereSeal it

The event becomes a sealed receipt, dated and attributed to whoever is signed in.

03 · AnyoneCheck it

Paste the receipt into Verify. No account or key.

A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.

SOURCES

Go back to the source

RELATED

Related: DoW IL2 / IL4: the full guide · DoW IL2 / IL4 for defense · DoW IL2 / IL4 for medicine · DoW IL2 / IL4 for education