Teams Calling in GCC High

Why does Microsoft Teams calling require special handling in a GCC High environment?

Microsoft Teams calling in GCC High requires special handling because Microsoft does not offer Calling Plans or Operator Connect in the GCC High environment. Direct Routing through a compliant third-party voice provider is the only supported method for adding Public Switched Telephone Network (PSTN) calling to a GCC High tenant.

This restriction exists because GCC High's compliance requirements demand that all voice data, call metadata, and signaling stay within U.S.-only infrastructure operated by screened U.S. personnel. Standard Microsoft Calling Plans route through commercial carrier infrastructure that does not meet ITAR, DFARS, or CMMC standards. Operator Connect uses carrier partnerships that lack the necessary certifications for the GCC High boundary. With Direct Routing, the organization's voice provider manages certified Session Border Controllers (SBCs) that connect the GCC High Teams environment to the PSTN through compliant pathways. GCC High also uses different fully qualified domain names (FQDNs), ports, and certificate requirements than commercial Teams, so standard commercial Teams Phone tutorials and configuration guides do not apply. Only a small number of carriers are authorized to deliver compliant Teams PSTN calling for GCC High.

What compliance frameworks does GCC High Teams calling cover? CMMC, ITAR, DFARS, FedRAMP?

GCC High Teams calling covers all four frameworks. The environment holds FedRAMP High Impact authorization, meets DFARS 252.204-7012 safeguarding requirements, aligns with CMMC 2.0 Levels 2 and 3, and supports ITAR and EAR export control regulations. It also aligns with NIST SP 800-171, DoD Cloud Computing Security Requirements Guide (SRG) at Impact Level 4, and federal Criminal Justice Information Services (CJIS) agreements.

On the CMMC side, GCC High Teams calling satisfies security controls for access management, encryption, and audit logging. For ITAR, all call data stays within U.S.-based data centers with access restricted to U.S. persons only, and audit logs are available for tracking ITAR-related communications. DFARS 7012 compliance comes from the FedRAMP High cloud infrastructure, encrypted call routing via Direct Routing, and multi-layered access controls with role-based permissions. FedRAMP High authorization means the platform meets over 400 security controls based on NIST SP 800-53. Multifactor authentication in GCC High supports Personal Identity Verification (PIV) and Common Access Card (CAC) cards, which are standard authentication methods across DoD environments.

Does GCC High work with Teams Phone?

GCC High works with Teams Phone, but only through Direct Routing. Microsoft Calling Plans and Operator Connect are not available in the GCC High environment. Organizations must use a third-party voice provider with a Microsoft-certified SBC to connect Teams Phone to the PSTN.

The provider deploys and manages the SBC infrastructure on behalf of the customer, connecting the GCC High Teams environment to PSTN calling services through compliant U.S.-based pathways. Once configured, users get full Teams Phone capabilities, including inbound and outbound PSTN calling, call queues, auto attendants, enterprise dial plans, dynamic E911 location routing, call reporting, and call recording. Audio conferencing in GCC High is also delivered exclusively through Direct Routing, which means the provider supplies dial-in phone numbers rather than Microsoft. Teams Phone in GCC High requires either a Microsoft 365 E5 GCC High license (which includes Teams Phone) or a Microsoft 365 E3 GCC High license with a separate Teams Phone add-on.

Is Microsoft Copilot available in GCC High?

Microsoft 365 Copilot became generally available in GCC High in December 2025, bringing AI-powered capabilities to Word, Excel, PowerPoint, Outlook, and Teams within the GCC High compliance boundary. All data is processed and stored in U.S.-based data centers managed by screened U.S. personnel.

Copilot in GCC High ships with web grounding turned off by default, which prevents the AI from accessing public web sources and keeps all prompts and responses inside the compliance boundary. Organizations can choose to enable web grounding where appropriate. Copilot Chat with the ability to reason over uploaded files is included with eligible Microsoft 365 plans, while the full Microsoft 365 Copilot license adds deeper Work IQ integration across apps. Wave 2 features, including expanded model access, image generation, a code interpreter for data analysis, and a research agent, are expected to roll out in the first half of 2026. Security Copilot, a separate product, is not currently available in GCC High. Organizations considering Copilot should review their data governance, permissions model, and sensitivity labeling before enabling it, because Copilot surfaces information based on existing user access permissions