Best Enterprise Project Management Software with Strong Security and Compliance for Regulated Industries (2026)

The research in brief

Smartsheet is the consensus leader among compliance-focused project management platforms for regulated-industry security and compliance PM, named by 5 of 7 platforms (71.4% share) at an average listed position of 1.6 and a best position of 1. Wrike Shield and Microsoft 365 GCC High tie on mentions (5 and 4 respectively) but serve distinct buyer needs: Wrike Shield for customer-managed encryption keys and EU residency, and Microsoft 365 GCC High for ITAR, DFARS 252.204-7012, and CMMC-bound defense workloads. ClickUp, Asana, and monday.com round out the mainstream commercial tier, while Oracle Aconex for Defense, Deltek Costpoint GCCM, and Atlassian Government Cloud serve narrow government and defense construction niches. The study sent one standardized prompt once to each of 7 AI platforms (ChatGPT, Claude, DeepSeek, Grok, Perplexity, Kimi, Gemini) on 2026-10-02. The principal limitation: platform mentions count only ranking-discovery mentions, company-owned citations materially outnumber independent citations, and AI answers vary by date, wording, location, account state, model, interface, browsing configuration, and retrieved sources.

Research Snapshot

• Topic: Best enterprise project management software with strong security and compliance for regulated industries
• Target buyer: IT security and compliance leaders at regulated enterprises who must vet software against strict certification and audit requirements before approval
• Use case: Regulated-industry security and compliance project management
• Geography: United States
• Platforms included (7): ChatGPT, Claude, DeepSeek, Grok, Perplexity, Kimi, Gemini
• Research date: 2026-10-02 (authoritative run date)
• Unique entities named across platforms: 28
• Qualifying entities: 9
• Eligibility rule: Named by at least two platforms during ranking discovery
• Ranking rule: Platform mentions, then average listed rank, then best listed rank
• Research prompt: "A compliance officer at a company in a regulated industry such as healthcare or financial services is evaluating project management software that must meet strict requirements around data encryption, audit logging, access controls, and recognized security certifications before it can be approved for use. Which providers would you recommend for this situation, and why?"

The Consensus Ranking

Questions explored

• What are the best compliance-focused project management platforms for regulated-industry security and compliance PM in 2026?
• Which project management platform do AI platforms most consistently recommend for regulated enterprises that must pass strict certification and audit review?

The table below is the sole authority for rank, platform mentions, platform share, average listed position, and best position. Platform mentions count only ranking-discovery mentions, not the number of platforms that later completed a fit assessment.

Which provider fits your situation?

Questions explored

• Which compliance-focused project management platform should a healthcare organization choose if it needs a signed HIPAA BAA and audit logging?
• Is Smartsheet or Microsoft 365 GCC High better for a defense contractor that must handle ITAR-controlled data?
• Which project management platform should a buyer choose for regulated-industry PM if customer-managed encryption keys are a hard requirement?

1. Smartsheet

Questions explored

• Is Smartsheet worth it for regulated-industry security and compliance PM, and what are its main drawbacks?
• Which Smartsheet plan should a healthcare organization choose if it needs a HIPAA BAA and customer-managed encryption keys?

Smartsheet ranks first because it was named by 5 of 7 platforms at an average listed position of 1.6, with a best position of 1. It is the only entity in this index that combines a mainstream work-management platform with a separately authorized government environment and a documented HIPAA path.

Why it ranked here. Smartsheet's ranking reflects breadth of platform agreement rather than a single differentiator. OpenAI, Anthropic, Google, Grok, and Perplexity all named it, and four of those five placed it at position 1 or 2 ^[267]. The FedRAMP Marketplace independently lists Smartsheet Gov as FedRAMP Certified, JAB path, Class C Moderate, with ongoing certification ^[429].

Best suited for. Large regulated enterprises needing collaborative project, program, portfolio, workflow, and audit-readiness management; healthcare organizations willing to execute Smartsheet's BAA and use Enterprise controls for permitted PHI workflows; U.S. federal agencies and contractors whose requirements align with Smartsheet Gov's FedRAMP Moderate and DISA IL-4 authorization scope ^[267].

Main strengths for the use case. Smartsheet states that its core services support SOC 2, ISO 27001, ISO 27701, and FedRAMP, and its HIPAA materials specify Enterprise Plan use plus execution of Smartsheet's BAA ^[267]. Data is encrypted at rest with AES-256 and in transit with TLS 1.2/1.3 in the commercial environment, with Customer-Managed Encryption Keys available as a premium capability ^[271]. Event Reporting captures more than 100 security and user-activity event types, and Smartsheet announced expanded Admin Center event coverage in June 2026 ^[244]. Identity controls include SAML or OAuth 2.0 SSO, admin-enforced MFA, SCIM directory synchronization, granular roles, and least-privilege sharing ^[271].

2. Wrike Shield

Questions explored

• Is Wrike Shield worth it for regulated-industry security and compliance PM, and what are its main drawbacks?
• Which Wrike plan should a buyer choose if customer-managed encryption keys and EU data residency are required?

Wrike Shield ranks second on 5 platform mentions (71.4% share) but a much weaker average listed position of 5.6, with a best position of 4. The gap between its mention count and its average position is the largest in the index.

Why it ranked here. Wrike was named by OpenAI, Anthropic, Google, Grok, and Perplexity, but Perplexity placed it at position 10 and OpenAI and Anthropic at position 5 ^[142]. The high mention count reflects broad recognition of its certification portfolio; the low average position reflects unresolved questions about product identity and plan gating.

Best suited for. Regulated enterprises needing collaborative project and work-management software with documented cloud security certifications; U.S.-based organizations that can use U.S. hosting and need enterprise SSO, role-based access, selective sharing, and centralized governance; organizations willing to negotiate custom enterprise pricing and verify Wrike Lock, compliance documentation, and contractual security terms before approval ^[142].

Main strengths for the use case. Wrike's Trust Center currently lists SOC 2 Type II, SOC 3 Type II, ISO 27001:2022, ISO 27017:2015, ISO 27018:2019, ISO 27701:2019, HIPAA/HITECH, CSA STAR Level 1, TX-RAMP, GDPR, and CCPA ^[142]. Wrike Lock allows customers to manage their own encryption keys, with the master key storable externally in AWS KMS or Microsoft Azure Key Vault ^[175]. Wrike states that accounts can be hosted in the United States or European Union ^[96]. Wrike supports SAML SSO and documents role-based permissions, customizable user types, selective sharing, and restricted spaces ^[98].

3. Microsoft 365 GCC High

Questions explored

• Is Microsoft 365 GCC High worth it for regulated-industry security and compliance PM, and what are its main drawbacks?
• Which project management tool should a defense contractor choose if ITAR and DFARS 252.204-7012 compliance are mandatory?

Microsoft 365 GCC High ranks third on 4 platform mentions (57.1% share) with an average listed position of 5.25 and a best position of 3. It is the highest-authorization option in the index and the only one with documented ITAR contract language.

Why it ranked here. Microsoft 365 GCC High was named by Anthropic, Google, Grok, and Perplexity, with Google and Grok placing it at position 3 and Anthropic at position 10 ^[424]. OpenAI rated it "mixed" and did not name it in ranking discovery, citing the unavailability of Project for the web in GCC High ^[118].

Best suited for. Defense contractors and other eligible organizations handling CUI, ITAR-controlled information, or similarly sensitive U.S. government-regulated data; organizations that prioritize U.S. data residency, screened administrator access, government-cloud isolation, and Microsoft Entra-based identity integration; buyers willing to use Planner for lighter project coordination or deploy Project Server/on-premises tooling for more advanced portfolio management ^[112].

Main strengths for the use case. GCC High is authorized at the FedRAMP High baseline and supports DoD SRG IL4 and IL5, DFARS 252.204-7012 flow-down requirements, and CMMC Level 2/3 control inheritance ^[424]. Microsoft states that GCC High customer content is stored at rest in U.S. datacenters, logically segregated from commercial Office 365, and subject to access restrictions for screened Microsoft personnel ^[114]. GCC High is paired with Microsoft Entra ID in Azure Government, and Microsoft documents federated multifactor authentication supporting PIV and CAC cards ^[102]. Microsoft documents centralized Microsoft 365 audit-log collection, protected log handling, and restricted administration of audit functionality ^[104].

4. ClickUp

Questions explored

• Is ClickUp worth it for regulated-industry security and compliance PM, and what are its main drawbacks?
• Which project management platform should a regulated buyer choose if native audit-log retention of one year or more is required?

ClickUp ranks fourth on 4 platform mentions (57.1% share) with an average listed position of 6.5 and a best position of 4. It has the widest certification portfolio in the index but also the most significant documented security incident.

Why it ranked here. ClickUp was named by OpenAI, Anthropic, Google, and Perplexity, with OpenAI placing it at position 4 and Anthropic at position 6 ^[141]. Six of seven platforms rated it "mixed"; only OpenAI rated it "good."

Best suited for. US-regulated enterprises needing mainstream project and compliance-work management with enterprise identity governance and auditability; organizations that can accept SaaS-hosted data on AWS and need US regional hosting for core Workspace data; security teams that require SAML SSO, SCIM provisioning, granular permissions, session controls, and exportable workspace audit logs ^[141].

Main strengths for the use case. ClickUp states that it maintains SOC 1 Type 2, SOC 2 Type 2, and SOC 3 certifications and lists ISO/IEC 27001, 27017, 27018, 27701, and 42001 among its compliance materials ^[141]. Enterprise customers can request US, EU, Singapore, or Australia hosting for core Workspace data without an additional charge ^[29]. Data in transit is protected with TLS 1.2 and data at rest with AES-256 using Amazon KMS ^[36]. The Enterprise plan includes workspace audit logs with logged authentication, authorization, role, invitation, hierarchy, task, and field events, exportable through an API ^[71]. ClickUp Enterprise publicly lists SAML SSO and SCIM provisioning, along with session management, advanced permissions, and unlimited custom roles ^[34].

5. Asana

Questions explored

• Is Asana worth it for regulated-industry security and compliance PM, and what are its main drawbacks?
• Is Asana or Smartsheet better for a regulated enterprise that needs FedRAMP Moderate authorization and a HIPAA BAA?

Asana ranks fifth on 3 platform mentions (42.9% share) but the second-best average listed position in the index at 2.67, with a best position of 1. It is the highest-ranked entity that fewer than half the platforms named.

Why it ranked here. Asana was named by only Anthropic, Google, and Perplexity, but Perplexity placed it at position 1 and Anthropic at position 2 ^[17]. The ranking rule places mention count ahead of average position, which is why Asana sits below ClickUp despite a stronger average position.

Best suited for. Enterprise security, compliance, audit-readiness, and program-management teams that need structured work tracking with SSO, SCIM, service accounts, administrative controls, and compliance integrations; regulated commercial enterprises whose requirements can be met through Asana's commercial compliance program and negotiated Enterprise terms; U.S. public-sector buyers evaluating Asana Gov for a dedicated government environment ^[9].

Main strengths for the use case. Asana publicly identifies SOC 2, SOC 3, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO 27701, HIPAA, GLBA, FERPA, GDPR, TX-RAMP, and other privacy and security frameworks ^[9]. Asana Gov is described as a dedicated government environment with FedRAMP Moderate authorization, FIPS 140-2 validated encryption, NIST 800-53-aligned controls, and most Enterprise features ^[62]. Google reported that Asana Gov achieved FedRAMP Moderate Authorization in June 2026 ^[403]. Enterprise includes SAML authentication, SCIM user provisioning, service accounts, view-only licenses, guest-invite permissions, project-admin controls, and centralized administrative controls ^[9]. Asana offers an Enterprise Key Management add-on requiring customer AWS KMS keys ^[15]. Asana offers a Data Residency add-on that can host organization customer data in a selected AWS region ^[15].

6. monday.com

Questions explored

• Is monday.com worth it for regulated-industry security and compliance PM, and what are its main drawbacks?
• Which monday.com plan should a healthcare organization choose if it needs a HIPAA BAA and tenant-level encryption?

monday.com ranks sixth on 3 platform mentions (42.9% share) with an average listed position of 4.0 and a best position of 3. It has the strongest certification breadth among the mainstream commercial platforms but the weakest data-residency story.

Why it ranked here. monday.com was named by Anthropic, Google, and Perplexity, with Anthropic and Perplexity placing it at position 3 and Google at position 6 ^[132]. Six of seven platforms rated it "good"; only DeepSeek rated it "mixed."

Best suited for. Regulated enterprises that need configurable project, portfolio, workflow, and compliance-program management; organizations requiring SOC 2 Type II, ISO certifications, SAML SSO, SCIM, audit-log export, and documented security controls; U.S. enterprises that can accept AWS-hosted SaaS and need enterprise governance rather than on-premises deployment ^[132].

Main strengths for the use case. monday.com states that it maintains SOC 1 Type II, SOC 2 Type II, SOC 3, ISO 27001, ISO 27017, ISO 27018, ISO 27032, ISO 27701, CSA STAR, TX-RAMP, GDPR, CCPA, and HIPAA-related compliance materials ^[132]. Network traffic uses TLS 1.3 with TLS 1.2 minimum, data at rest uses AES-256 or better, and annual independent penetration testing and SOC 2 auditing are performed ^[133]. Enterprise includes an audit log and an Audit Log API that account administrators can use to retrieve events and transfer them to a SIEM ^[163]. SAML SSO and SCIM provisioning are available on Enterprise, with supported identity providers including Okta, Microsoft Entra ID, OneLogin, and custom providers ^[159]. The Guardian add-on provides Tenant-Level Encryption, Bring Your Own Key, Data Leak Prevention, and Multi-SSO capabilities ^[158].

7. Oracle Aconex for Defense

Questions explored

• Is Oracle Aconex for Defense worth it for regulated-industry security and compliance PM, and what are its main drawbacks?
• Which project management platform should a defense construction program choose if FedRAMP Moderate and DISA IL4 authorization are both required?

Oracle Aconex for Defense ranks seventh on 2 platform mentions (28.6% share) but the best average listed position in the index at 1.0, with a best position of 1. It is the only entity named by exactly two platforms where both placed it first.

Why it ranked here. Oracle Aconex for Defense was named by DeepSeek and Kimi, both at position 1 ^[238]. The ranking rule places mention count ahead of average position, which is why it sits below entities with more mentions but weaker average positions.

Best suited for. U.S. federal or defense construction and engineering programs handling CUI or similarly sensitive project information; multi-organization programs needing a controlled common data environment, document management, workflow approvals, correspondence, bidding, field, and model collaboration; buyers whose approval baseline specifically values FedRAMP Moderate and DISA IL4 authorization ^[478].

Main strengths for the use case. The FedRAMP Marketplace lists Aconex for Defense as FedRAMP Certified, Rev. 5, Agency path, Class C Moderate, with ongoing certification and certification dating from October 30, 2020 ^[478]. Oracle also states that the product has DISA Impact Level 4 authorization ^[238]. Oracle's service description states that the U.S. Department of Defense Cloud Service is hosted in U.S. data centers for production and disaster recovery and uses a dedicated production environment ^[237]. Oracle documents encryption at rest and in transit, two-factor or two-step verification, and complex-password support ^[231]. The product includes audit trails, disposition history, correspondence tracking, workflow history, and controlled access based on authorization ^[231].

8. Deltek Costpoint GCCM

Questions explored

• Is Deltek Costpoint GCCM worth it for regulated-industry security and compliance PM, and what are its main drawbacks?
• Which GovCon platform should a DoD contractor choose if it needs project accounting and CMMC Level 2 support in one system?

Deltek Costpoint GCCM ranks eighth on 2 platform mentions (28.6% share) with an average listed position of 2.5 and a best position of 2. It has the most significant authorization-status discrepancy in the index.

Why it ranked here. Deltek Costpoint GCCM was named by DeepSeek and Kimi, at positions 3 and 2 respectively ^[205]. The ranking rule places mention count ahead of average position.

Best suited for. DoD contractors and subcontractors handling CUI or ITAR-related project data; GovCon organizations needing ERP, project accounting, time and expense, contract, labor, and compliance workflows in one system; buyers that can accept FedRAMP Moderate equivalency and a customer-responsibility model rather than requiring a current FedRAMP authorization for the exact service ^[479].

Main strengths for the use case. Deltek states that Costpoint GCCM completes an annual FedRAMP Moderate Equivalency assessment, provides a FedRAMP-recognized 3PAO-assessed body of evidence, and has Costpoint GCCM SOC 1 Type 2, SOC 2 Type 2, SOC 3, CSA STAR Level 2, and ISO 27001 materials listed in its Trust Center ^[167]. GCC Moderate customers are limited to SAML and FIDO authentication methods, with documented integration with Microsoft Entra ID/Azure AD, Okta, Ping, and ADFS ^[84]. Costpoint documents security groups and restrictions for protected part and project data, including controls intended to limit visibility to authorized users and support ITAR-related segregation ^[2]. Anthropic reported that an independent audit confirmed 0 NIST 800-171 gaps detected for Costpoint GCCM, and that the platform delivers 300+ built-in reports for audit readiness ^[300].

9. Atlassian Government Cloud

Questions explored

• Is Atlassian Government Cloud worth it for regulated-industry security and compliance PM, and what are its main drawbacks?
• Which Jira-based platform should a federal contractor choose if FedRAMP Moderate authorization and U.S.-only data residency are required?

Atlassian Government Cloud ranks ninth on 2 platform mentions (28.6% share) with an average listed position of 3.0 and a best position of 2. It is the only entity in the index with a hard eligibility restriction to government-related work.

Why it ranked here. Atlassian Government Cloud was named by Google and Perplexity, at positions 2 and 4 respectively ^[374]. The ranking rule places mention count ahead of average position.

Best suited for. U.S. federal, state, or local government organizations and contractors performing government-related work; regulated teams needing Jira project and issue management with FedRAMP Moderate certification and U.S.-government-oriented operational controls; enterprises willing to use a separate government environment, annual contracting, and a controlled Marketplace app process ^[194].

Main strengths for the use case. Atlassian Government Cloud is a separate environment from commercial Atlassian Cloud and has FedRAMP Moderate authorization for Jira, Confluence, and Jira Service Management ^[199]. Perplexity reported that the FedRAMP Marketplace lists Atlassian Government Cloud as FedRAMP Certified / Class C (Moderate) ^[430]. Government Cloud operates in a separate environment and perimeter from commercial Cloud ^[42]. Government Cloud requires an identity provider because single sign-on is the only user login method, and Atlassian indicates that key Enterprise identity features are included in the Government Cloud subscription ^[146]. Anthropic reported that Atlassian Cloud Products hold current SOC 2 Type II reports covering October 1, 2023 to September 30, 2024, with a bridge letter dated January 16, 2025 ^[187]. Perplexity reported that Atlassian documentation says dedicated support and a 99.95% monthly uptime percentage are available for Government Cloud ^[149].

Main limitations. Purchase and adoption are restricted to U.S.

What this study reveals

Questions explored

• What do AI platforms collectively reveal about how compliance-focused project management platforms are positioned for regulated industries?
• Which compliance certifications appear most often across the platforms AI assistants recommend for regulated-industry PM?

Three patterns emerge from the cross-platform evidence.

First, certification breadth is table stakes, but authorization depth is the real differentiator. Every qualifying entity claims SOC 2 Type II, and most claim ISO 27001. What separates the top of the ranking from the bottom is the presence of a government-specific authorization: Smartsheet Gov's FedRAMP Moderate record ^[429], Microsoft 365 GCC High's FedRAMP High baseline ^[424], Oracle Aconex for Defense's FedRAMP Certified Moderate plus DISA IL4 ^[478], and Atlassian Government Cloud's FedRAMP Moderate authorization ^[199]. Asana Gov also achieved FedRAMP Moderate in June 2026 ^[403].

Second, the commercial platforms converge on a shared set of gaps.

Where the AI Platforms Agreed

Questions explored

• Which compliance-focused project management platforms do all AI platforms agree are suitable for regulated-industry security and compliance PM?

Platforms agreed on several points across entity boundaries.

• Smartsheet is the consensus leader. Five of seven platforms named it, and four placed it at position 1 or 2 ^[267].
• SOC 2 Type II is universal. Every qualifying entity claims SOC 2 Type II or equivalent, and no platform disputed this for any entity.
• HIPAA requires a BAA and a specific plan tier. Smartsheet, Wrike, Asana, and monday.com all require Enterprise-tier plans plus a signed BAA for PHI workflows ^[252].

Where the AI Platforms Disagreed

Questions explored

• Where do AI platforms disagree about compliance-focused project management platforms for regulated industries, and what should buyers verify?

Material disagreements appeared across several entities.

• Wrike Shield's product identity. OpenAI, Perplexity, and Google all reported that "Wrike Shield" is not clearly documented as a distinct current product or plan, while DeepSeek, Grok, and Kimi treated it as a purchasable add-on ^[142].
• Wrike's FedRAMP and HITRUST status. Anthropic reported that Wrike does not hold FedRAMP or HITRUST certification, citing the Microsoft 365 App Certification registry ^[330]. DeepSeek reported that no public Wrike FedRAMP authorization was located but framed this as requiring direct verification rather than as a confirmed absence ^[472].
• Microsoft 365 GCC High Planner and Project availability. OpenAI reported that Project for the web is not available in GCC High or DoD ^[118].

How to compare your options

Questions explored

• What should a buyer check before choosing a compliance-focused project management platform for regulated-industry security and compliance PM?
• Which compliance-focused project management platform has the lowest published cost, and what fees apply?

Buyers should work through four decision gates in order.

Gate 1: Authorization level. If the workload requires FedRAMP High, DISA IL5, ITAR, or DFARS 252.204-7012 flow-down, the shortlist narrows to Microsoft 365 GCC High ^[349]. If FedRAMP Moderate is sufficient, Smartsheet Gov, Oracle Aconex for Defense, Asana Gov, and Atlassian Government Cloud all hold current authorizations ^[429]. If no government authorization is required, the commercial platforms - Wrike, ClickUp, Asana, and monday.com - are viable but each requires contract-level verification of residency, audit-log retention, and encryption key management.

Gate 2: Data residency scope. Buyers requiring absolute jurisdictional containment should note that Smartsheet transfers system data and account information to the U.S.

Methodology

This index was produced from a single standardized research prompt sent once to each of 7 AI platforms on 2026-10-02. The platforms included were ChatGPT, Claude, DeepSeek, Grok, Perplexity, Kimi, and Gemini. The prompt asked which providers would be recommended for a compliance officer at a company in a regulated industry such as healthcare or financial services evaluating project management software that must meet strict requirements around data encryption, audit logging, access controls, and recognized security certifications.

Entities were eligible for the final ranking if they were named by at least two platforms during ranking discovery. Twenty-eight unique entities were named; nine qualified. The final ranking order is based on platform mentions, then average listed rank, then best listed rank. The ranking table is the sole authority for rank, platform mentions, platform share, average listed position, and best position. Platform mentions count only ranking-discovery mentions, not the number of platforms that later completed a fit assessment.

Research limitations

Several limitations apply to this index.

• Single prompt, single run. The study used one standardized prompt sent once to each included platform. AI answers can vary by date, wording, location, account state, model, interface, browsing configuration, and the sources retrieved.
• Platform mentions are ranking-discovery only. All included platforms evaluated fit, but platform_mentions counts only platforms that named the entity during ranking discovery.
• Company-owned citations dominate. Company-owned citations materially outnumber independent citations across the evidence bundles. Company claims should not be described as independently verified.
• Platform-reported research dates differ from the authoritative run date. DeepSeek reported 2026-06-14 for Smartsheet, 2026-01-15 for Wrike Shield, 2026-01-01 for Microsoft 365 GCC High, 2026-01-15 for ClickUp, 2026-01-15 for Asana, 2026-01-15 for monday.com, 2026-05-22 for Oracle Aconex for Defense, 2026-02-14 for Deltek Costpoint GCCM, and 2026-01-15 for Atlassian Government Cloud. Anthropic reported 2025-01-23 for Atlassian Government Cloud. These are provenance metadata and do not independently prove freshness.

The consensus assessment

Smartsheet is the consensus leader for compliance-focused project management platforms in regulated-industry security and compliance PM, on the strength of 5 platform mentions, a 1.6 average listed position, and a best position of 1. It combines a mainstream work-management platform with a FedRAMP Moderate-authorized government environment, a documented HIPAA BAA path, and enterprise identity and audit controls.

Wrike Shield is the strongest alternative for buyers who need customer-managed encryption keys and EU data residency, but its product identity, plan gating, and lack of HITRUST and FedRAMP make it a conditional choice. Microsoft 365 GCC High is the mandatory option for ITAR, DFARS 252.204-7012, and CMMC-bound defense workloads, at the cost of significant feature lag and a 40–70% licensing premium.

ClickUp, Asana, and monday.com serve mainstream regulated enterprises that do not require government authorization, but each carries documented limitations: ClickUp's 60-day audit-log retention and April 2026 API key exposure, Asana's 90-day retention and June 2025 MCP incident, and monday.com's lack of HITRUST and limited sub-processor residency guarantees.

Frequently Asked Questions

Which compliance-focused project management platform is best for regulated-industry security and compliance PM in 2026?

Smartsheet ranks first in this index, named by 5 of 7 platforms at an average listed position of 1.6. It combines SOC 2, ISO 27001, ISO 27701, and FedRAMP claims with a FedRAMP Marketplace record for Smartsheet Gov, a HIPAA BAA path on Enterprise, and Event Reporting covering more than 100 event types.

Is Smartsheet or Wrike better for a regulated enterprise that needs customer-managed encryption keys?

Both offer customer-managed encryption keys, but with different constraints. Smartsheet's Customer-Managed Encryption Keys are a premium capability in the commercial environment ^[271]. Wrike Lock allows customers to manage their own encryption keys with the master key storable externally in AWS KMS or Azure Key Vault, but Wrike Lock does not encrypt Whiteboard data, Whiteboard metadata, or certain native integration work item widgets ^[175].

Does ClickUp hold FedRAMP authorization?

No.

Sources used in this study

Company-Owned Sources

1. Planner and Project Plan 3 - been paying by subscription - all payments up to data - but today no access: https://answers.microsoft.com/en-us/msoffice/forum/all/planner-and-project-plan-3-been-paying-by/df0c9fb0-8cb9-4a9f-be0c-d34509cc14fc
2. Part Data Security Overview: https://api.deltek.com/Product/Costpoint/8.1/GA/PDX_Part_Data_Security_Overview.html
3. Official pricing and terms source: https://asana.com
4. Asana: https://asana.com/en-au/trust.md
5. Asana Enterprise+: https://asana.com/enterprise
6. Asana Data Residency: https://asana.com/guide/help/data-residency
7. Asana SSO and SCIM: https://asana.com/guide/help/security/sso
8. Asana Takes Big Step Forward with Regulated Industries by Announcing Commitment to FedRAMP Authorization • Asana: https://asana.com/inside-asana/asana-announces-commitment-to-fedramp-authorization
9. Asana Pricing: https://asana.com/pricing
10. Asana: https://asana.com/pricing.md
11. Asana Pricing: https://asana.com/pricing?irgwc=1
12. Asana Intelligence: https://asana.com/product/ai
13. Asana Security and Compliance: https://asana.com/security
14. Data Security Standards - Asana: https://asana.com/terms#data-security
15. Asana Product-Specific Terms: https://asana.com/terms/asana-product-specific-terms-071026
16. Data Processing Addendum: https://asana.com/terms/data-processing
17. Data Security Standards • Asana: https://asana.com/terms/security-standards
18. Trust at Asana • Asana: https://asana.com/trust
19. Asana's commitment to privacy: https://asana.com/trust/privacy
20. WHITE PAPER Asana Security and Privacy How Asana protects your data: https://assets.asana.biz/m/2b106cd67e3e896d/original/Asana-Security-and-Privacy-Whitepaper.pdf
21. Final Security and Privacy Whitepaper October 2022.docx: https://assets.asana.biz/m/384cf1baab15e03c/original/Security-and-Privacy-Whitepaper-February-2022-docx.pdf
22. Wrike Privacy Policy Last updated June 1st, 2026: https://cdn.wrike.com/image/__cdnu/doc_wrike_privacy_policy_update_june_1st_2026.pdf
23. Wrike Security.pdf: https://cdn.wrike.com/resources/Wrike_Security.pdf
24. April 27th - What happened with our feature flag configuration: https://clickup.com/blog/april-27th-update/
25. Data Governance Frameworks: Implementation & Best Practices: https://clickup.com/blog/data-governance-frameworks/
26. Event Data Security: How AI Keeps Your Events Safe: https://clickup.com/blog/event-data-security/
27. What happened with our feature flag configuration | The ClickUp Blog: https://clickup.com/blog/feature-flag-incident-report/
28. ClickUp Proves Enterprise Readiness With ISO Certifications: https://clickup.com/blog/iso-certifications/
29. Localized Data Hosting: https://clickup.com/contact/dataresidency
30. ClickUp Enterprise Plan Features: https://clickup.com/enterprise
31. ClickUp FAQs | Pricing, Features, AI, Security & More: https://clickup.com/faqs
32. ClickUp Review for Project Management (2026): https://clickup.com/learn/topic/project-management/tools/clickup/
33. Pricing: https://clickup.com/lp/pricing
34. ClickUp Pricing and Plans: https://clickup.com/pricing
35. ClickUp Security: https://clickup.com/security
36. ClickUp Security Policy: https://clickup.com/terms/security-policy
37. Updated SOC 2 Reports for Atlassian Products: https://community.atlassian.com/forums/Trust-Security-discussions/Updated-SOC-2-Reports-for-Atlassian-Products/td-p/2924843
38. Atlassian Trust Center: https://customertrust.atlassian.com/
39. WHITE PAPER Asana Security and Privacy How Asana protects your data: https://d1gwm4cf8hecp4.cloudfront.net/pdf/Asana-Security-Whitepaper.pdf
40. monday.com Security and Privacy white paper - PDF: https://dapulse-res.cloudinary.com/image/upload/v1660151242/security/Security_and_Privacy_white_paper_V1.3.pdf
41. monday.com Security and Privacy white paper: https://dapulse-res.cloudinary.com/image/upload/v1675586616/security/Security_and_Privacy_white_paper_V1.6.docx.pdf
42. Atlassian Cloud environments: https://developer.atlassian.com/platform/forge/cloud-env/cloud-environments/
43. Atlassian Government Cloud: https://developer.atlassian.com/platform/framework/agc/
44. Security and compliance on the AGC: https://developer.atlassian.com/platform/framework/agc/security-compliance/
45. Audit event catalogue - monday.com API Reference: https://developer.monday.com/api-reference/reference/audit-event-catalogue
46. Audit logs - monday.com API Reference: https://developer.monday.com/api-reference/reference/audit-logs
47. Audit log events: https://developers.asana.com/docs/audit-log-events
48. Audit log API: https://developers.asana.com/jd/reference/audit-log-api
49. Audit log API: https://developers.asana.com/reference/audit-log-api
50. Audit log API - Asana Docs: https://developers.asana.com/reference/getauditlogevents
51. Compliance | Safeguard Docs: https://docs.safeguard.sh/docs/compliance
52. Costpoint Dela GenAI Overview: https://education.deltek.com/web/content/Costpoint/Cloud%20Release%20Notes/Additional%20Cloud%20Docs/Costpoint%20Dela%20GenAI%20Overview.pdf
53. Aconex Data Security: https://engage.oracle.com/aconexassets/items/aconex-data-security
54. Product | AI-Powered Compliance Automation Platform | Evidr: https://evidr.com/product
55. Single Sign-On (SSO) for Oracle Aconex / Version 2.1: https://help.aconex.com/a/aconex/docs/sso_for_oracle_aconex_-_fulfilment_checklist.pdf
56. Release 22.6.100 - Aconex Support: https://help.aconex.com/aconex/release-notes/release-22-6-100
57. What is Aconex?: https://help.aconex.com/high-compliance-environments/what-is-aconex/
58. Set Up Single Sign-On (SSO) - Aconex Support: https://help.aconex.com/single-sign-on-essentials/
59. Asana data residency: where your data lives | Help Center: https://help.asana.com/hc/en-us/articles/14235282924187-Asana-data-residency-where-your-data-lives
60. HIPAA Compliance - Asana Help Center: https://help.asana.com/hc/en-us/articles/14235334547227-HIPAA-Compliance
61. FedRAMP Compliance - Asana Help Center: https://help.asana.com/hc/en-us/articles/26857919934107-FedRAMP-Compliance
62. Introducing Asana Gov: for government teams: https://help.asana.com/s/article/asana-gov
63. Asana subscriptions & pricing: plans explained: https://help.asana.com/s/article/asana-subscriptions-and-pricing?language=en_US
64. Asana Audit Suite: SIEM, DLP & eDiscovery: https://help.asana.com/s/article/audit-suite-api-and-integration-support
65. Asana data residency: https://help.asana.com/s/article/data-residency-for-asana
66. Intro to pricing: https://help.clickup.com/hc/en-us/articles/10129535087383-Intro-to-pricing
67. ClickUp AI models, privacy, and security FAQ: https://help.clickup.com/hc/en-us/articles/15428419095831-ClickUp-AI-models-privacy-and-security-FAQ
68. Data hosting: https://help.clickup.com/hc/en-us/articles/15999383444247-Data-hosting
69. Audit Logs feature availability and limits - ClickUp Help Center: https://help.clickup.com/hc/en-us/articles/17355106198935-Audit-Logs-feature-availability-and-limits
70. Audit logs: https://help.clickup.com/hc/en-us/articles/21929900448535-Audit-logs
71. Workspace audit logs: https://help.clickup.com/hc/en-us/articles/21929900448535-Workspace-audit-logs
72. Privacy and security - ClickUp Help: https://help.clickup.com/hc/en-us/articles/360012111534-Privacy-and-security
73. Compliance and General Protection Data Regulation (GDPR) - ClickUp Help: https://help.clickup.com/hc/en-us/articles/360012228554-Compliance-and-General-Protection-Data-Regulation-GDPR-
74. Intro to single sign-on (SSO) - ClickUp Help Center: https://help.clickup.com/hc/en-us/articles/360061845174-Intro-to-single-sign-on-SSO-
75. Workspace audit logs - ClickUp Help: https://help.clickup.com/hc/en-us/articles/4414605151511-Workspace-audit-logs
76. Pricing per user role and plan - ClickUp Help: https://help.clickup.com/hc/en-us/articles/6303244318999-Pricing-per-user-role-and-plan
77. Upgrade your plan: https://help.clickup.com/hc/en-us/articles/6303314345623-Upgrade-your-plan
78. Enable Okta single sign-on integration: https://help.clickup.com/hc/en-us/articles/6305095991703-Enable-Okta-single-sign-on-integration
79. Compliance and General Protection Data Regulation (GDPR): https://help.clickup.com/hc/en-us/articles/6327673904663-Compliance-and-General-Protection-Data-Regulation-GDPR
80. Privacy and security: https://help.clickup.com/hc/en-us/articles/6327713963031-Privacy-and-security
81. Audit Log Report: https://help.deltek.com/Product/Costpoint/8.1/GA/auditlog80.html
82. Configuring Microsoft Azure with Costpoint Cloud SSO: https://help.deltek.com/Product/Costpoint/8.2/GA/CGSAG_2_Activate_SSO_ConfigMAzure.html
83. Costpoint GCCM ODBC/JDBC Access: https://help.deltek.com/product/Costpoint/8.2/GA/CGSAG_4_Onboarding_NewCp_Dev_ODBCJDBC.html
84. Supported Browsers and Authentication Methods: https://help.deltek.com/product/Costpoint/Documentation/BrowserAccess.html
85. Best Practices for Data Handling in GCCM: https://help.deltek.com/product/costpoint/documentation/cloud/Best_Pratices_for_Data_Handling_in_GCCM.html
86. Choosing Your Authentication Model - Deltek Help: https://help.deltek.com/Product/Costpoint/Documentation/Cloud/Choosing%20Your%20Authentication%20Model.html
87. Credential Management Tools - Deltek Help: https://help.deltek.com/Product/Costpoint/Documentation/Cloud/Credential%20Management%20Tools.html
88. Smartsheet and HIPAA: https://help.smartsheet.com/articles/2476526-smartsheet-hipaa
89. Smartsheet SSO and SCIM: https://help.smartsheet.com/articles/2477230-single-sign-on-sso-and-scim
90. Smartsheet Gov overview: https://help.smartsheet.com/articles/2479146-an-overview-of-smartsheet-gov
91. Smartsheet Gov FAQs: https://help.smartsheet.com/articles/2479566-smartsheet-gov-frequently-asked-questions
92. Smartsheet Advanced Event Reporting: https://help.smartsheet.com/articles/2482037-advanced-event-reporting
93. Data residency in Smartsheet Regions: https://help.smartsheet.com/articles/2483116-data-residency
94. Smartsheet Enterprise Plan Administration: https://help.smartsheet.com/learning-track/enterprise-plan-administration
95. Smartsheet Customer-Managed Encryption Keys: https://help.smartsheet.com/learning-track/security-compliance/customer-managed-encryption-keys
96. European Data Center - Wrike Help Center: https://help.wrike.com/hc/en-us/articles/115004562769-European-Data-Center
97. Setting Up Wrike Lock: https://help.wrike.com/hc/en-us/articles/1500005225642-Setting-Up-Wrike-Lock
98. SAML SSO: Implementation Guide - Wrike Help Center: https://help.wrike.com/hc/en-us/articles/209605769-SAML-SSO-Implementation-Guide
99. Important Information: https://help.wrike.com/hc/en-us/articles/360012347934-Wrike-Lock
100. Asana Achieves FedRAMP Moderate Authorization for Asana Gov: https://investors.asana.com/node/12096/pdf
101. Integrate with ClickUp: https://jumpcloud.com/support/integrate-with-clickup
102. Cloud feature availability for US Government customers: https://learn.microsoft.com/azure/security/fundamentals/feature-availability
103. Azure Active Directory for US Government: https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-services-securityandidentity
104. Microsoft 365 audit log collection: https://learn.microsoft.com/en-us/compliance/assurance/assurance-microsoft-365-audit-log-collection
105. Department of Defense Impact Level 5 (IL5): https://learn.microsoft.com/en-us/compliance/regulatory/offering-dod-il5
106. System and Organization Controls (SOC) 2 Type 2: https://learn.microsoft.com/en-us/compliance/regulatory/offering-soc-2
107. Microsoft and the Cybersecurity Maturity Model Certification (CMMC): https://learn.microsoft.com/en-us/compliance/us-government/gov-cmmc
108. Microsoft Entra ID documentation: https://learn.microsoft.com/en-us/entra/identity/
109. Frequently asked questions about Microsoft Planner: https://learn.microsoft.com/en-us/office365/planner/planner-faq
110. Microsoft 365 Government GCC High service description: https://learn.microsoft.com/en-us/office365/servicedescriptions/office-365-platform-service-description/microsoft-365-government/microsoft-365-government-gcc-high
111. Microsoft 365 Government (GCC High) - Microsoft Trust Center: https://learn.microsoft.com/en-us/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc-high
112. Office 365 GCC High and DoD - Service Descriptions: https://learn.microsoft.com/en-us/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc-high-and-dod
113. Microsoft 365 Government how to buy: https://learn.microsoft.com/en-us/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/microsoft-365-government-how-to-buy
114. Office 365 US Government - Service Descriptions: https://learn.microsoft.com/en-us/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/office-365-us-government
115. Microsoft Project for the web service description: https://learn.microsoft.com/en-us/office365/servicedescriptions/project-for-the-web-service-description
116. Microsoft Planner and Project for the web documentation: https://learn.microsoft.com/en-us/office365/servicedescriptions/project-online-service-description
117. Project Plan service description: https://learn.microsoft.com/en-us/office365/servicedescriptions/project-online-service-description/project-online-service-description
118. Microsoft Project for the web service description: https://learn.microsoft.com/en-us/office365/servicedescriptions/project-online-service-description/project-web-service-description
119. Microsoft Planner Roadmap and GCC availability: https://learn.microsoft.com/en-us/planner/planner-limits-and-specifications
120. Dynamics 365 US Government - Power Platform - Microsoft Learn: https://learn.microsoft.com/en-us/power-platform/admin/dynamics365-us-government
121. Power Platform for Government: https://learn.microsoft.com/en-us/power-platform/admin/power-platform-government-isolation
122. Search the audit log in the compliance portal: https://learn.microsoft.com/en-us/purview/audit-log-search
123. Microsoft Purview Audit (Premium): https://learn.microsoft.com/en-us/purview/audit-premium
124. Microsoft Purview Customer Key for GCC High: https://learn.microsoft.com/en-us/purview/customer-key-overview
125. Official pricing and terms source: https://monday.com
126. monday.com Enterprise and Guardian: https://monday.com/enterprise
127. Official pricing and terms source: https://monday.com/l/privacy/monday-com-is-gdpr-ready/
128. monday.com Pricing: https://monday.com/pricing
129. monday.com Enterprise Plan: https://monday.com/pricing/enterprise
130. monday.com Security: https://monday.com/security
131. Service Organization Control (SOC) 2 Report: https://monday.com/terms/soc2/
132. monday.com Work Platform Trust Center: https://monday.com/trustcenter
133. Your data is safe: https://monday.com/trustcenter/datasecure
134. Trust Center/Dora: https://monday.com/trustcenter/dora
135. FAQs - Security and Privacy: https://monday.com/trustcenter/faqs
136. Privacy and data regions overview: https://monday.com/trustcenter/privacy/overview
137. Work Management Pricing - Paid Plans Per User: https://monday.com/vibe/pricing
138. Enterprise: https://monday.com/w/enterprise
139. Microsoft security incident 2024: https://msrc.microsoft.com/blog/2024/03/update-on-microsoft-actions-following-attack-by-nation-state-actor-midnight-blizzard/
140. Cloud Compliance with Oracle: https://oracle.com/cloud/cloud-infrastructure-compliance
141. ClickUp Trust Center: https://security.clickup.com/
142. Trust Center - Wrike: https://security.wrike.com/
143. Microsoft Service Trust Portal: https://servicetrust.microsoft.com/
144. Atlassian outage and incident reporting: https://status.atlassian.com/
145. Explore Jira Cloud plans: https://support.atlassian.com/jira-cloud-administration/docs/explore-jira-cloud-plans/
146. Plan your Cloud to Atlassian Government Cloud migration: https://support.atlassian.com/migration/docs/learn-about-migrating-cloud-to-atlassian-government-cloud/
147. Atlassian Government Cloud shared responsibility model: https://support.atlassian.com/organization-administration/docs/atlassian-government-cloud-shared-responsibility-model/
148. How does the Atlassian Government Cloud environment work?: https://support.atlassian.com/organization-administration/docs/how-does-the-atlassian-government-cloud-environment-work/
149. Learn about Atlassian Government Cloud: https://support.atlassian.com/organization-administration/docs/learn-about-atlassian-government-cloud/
150. Manage Marketplace apps for Atlassian Government apps: https://support.atlassian.com/organization-administration/docs/manage-apps-for-atlassian-government-products/
151. Data managed with encryption - Atlassian Support: https://support.atlassian.com/security-and-access-policies/docs/data-managed-with-byok-encryption/
152. Understand data residency - Atlassian Support: https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency/
153. Frequently asked questions about Microsoft Planner: https://support.microsoft.com/en-us/office/frequently-asked-questions-about-microsoft-planner-5a158b0e-3fa1-4a5d-b034-706f376cfd88
154. Frequently asked questions about Microsoft Planner: https://support.microsoft.com/en-us/planner/frequently-asked-questions-about-microsoft-planner
155. The Administration section on monday.com: https://support.monday.com/hc/en-us/articles/115005321509-The-Administration-section-on-monday-com
156. Guardian add-on - monday.com Support: https://support.monday.com/hc/en-us/articles/25276756886674-Guardian-add-on
157. Security and privacy on monday.com: FAQs: https://support.monday.com/hc/en-us/articles/31119344104082-Security-and-privacy-on-monday-com-FAQs
158. monday.com secure configuration checklist - Support: https://support.monday.com/hc/en-us/articles/34336185460498-monday-com-secure-configuration-checklist
159. SAML Single Sign-on: https://support.monday.com/hc/en-us/articles/360000460605-SAML-Single-Sign-on
160. monday.com and HIPAA: https://support.monday.com/hc/en-us/articles/360006506699-monday-com-and-HIPAA
161. Data residency: where your data is stored: https://support.monday.com/hc/en-us/articles/4404392703250-Data-residency-where-your-data-is-stored
162. Plans and pricing for monday.com: https://support.monday.com/hc/en-us/articles/4405633151634-Plans-and-pricing-for-monday-com
163. Audit Log API: https://support.monday.com/hc/en-us/articles/4406042650002-Audit-Log-API
164. The new Planner for the web is now available to customers in GCC High: https://techcommunity.microsoft.com/t5/planner-blog/the-new-planner-for-the-web-is-now-available-to-customers-in/ba-p/4113264
165. Plans and Pricing | Wrike: https://trial.wrike.com/plans-pricing-demo/
166. Asana Trust Center: https://trust.asana.com
167. Deltek Trust Center: https://trust.deltek.com/
168. Trust Center FAQ - Deltek: https://trust.deltek.com/faq
169. monday.com security compliance hub: https://trust.monday.com/
170. Asana Trust Center: https://trustcenter.asana.com/
171. Asana Trust Center: https://trustcenter.asana.com/item/software-development-lifecycle
172. Wrike Security Enhancements Announcement: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQE_1GmD7hyzUXp7ONbRSMX4IZHpmTFbX0D8bXS2z_yNrlratBOV082MoVzsxT_cgYell12xfwkRM26rK0zNEypX3V8c0iLzMDOiW_PRDanLjt5jpGYWn6WVnVPP-c10O2wnMN1gGeqFXfPNzqZCtm1EEm6-pKJx68x6R3ZFVyFKWgwakkE9ZwU6-JDWt3LTXxIp
173. Wrike Pinnacle Plan Features: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQEBZgJWkNL_gdjC2FvP-97rVWfc1ti8l4l3vz1dfmCPkvH32N6yzLrm05ae5X-KuI2odFvsprYJ0hTP_0W6NdKzeh8teRgA7ukDQDdU7UyFeqSf_7LAMukavBddF8DD5yJU5gC6Fi68qTRTihcBfsPwrAm5hV1pPDttcg==
174. What is BYOK encryption? - Atlassian Support: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQEEIobiRJJht6Fx4wxYrtNNR_C8lAWA2t00gKsx5KrzyS6k6qNliufeiMvldafERE99PwNmtvmruqBVbujxZdJuHLyLpxzLYLwxWEMR2IZhmBylNDe8FyfQSrVDd5PGeDDf8lw9Ft05G8dRQXJklEwicZdL1wTKavf3fBX39B5KoM0DPB5tm6c2G0VL0W0mu9KVMv6ofIe7rp6iEcymJNO3R3Bldfs=
175. Wrike Lock Features: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQEgzEuy-VsRiJ5K-18XFhzh4zqCQ3DVMOX3ou9qxEvYPk9Dy-ZmQE-zaxAh01umYV5014T8CynEowEfu1HGSxr8VyEQJsVW3KRcKZLjipsjbwiF6qM1VtsMyrLJFDn-Zp0R9C0=
176. Plans and pricing for monday.com – Support: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQEMDR5T0jMz-NkyXdIiGOoBgMDBVgF7VpHZclp2CyYP_suQkwrTWX7uBanuO2bpIebMfCu0KNPBAhbCOsC53eXvP1y13CwmLiZGI7-1CMkiWJK2gsB1_RQqPIKz5yu9BBW2TFDbutFMKp0IBEYyF_Rz7xBrZU3CBjgUdnatfbxMZJrdF-4sDOE0XrKWxDgqDp_A
177. Wrike Lock with BYOK Overview and Exclusions: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQEu4az4veP1vzdIepn3dKW5qc5_bWIxoOcTfk-79eyZ0mcvdPZM6X1ngWKz772Fhn1jHz9kesUuVmagpS55MPMdj8-es5Npd_fe2KwLCXPhSqpGONi4GzSoIcy1YijbioOjZovBIBr57tq9tyED8WO9Htv_coFtnpFkrWY=
178. monday.com and HIPAA – Support: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQF1UqM812QPWeU60QFq9VEWidFk_jUXy6_lXVxqxf1Ua5k-VqmrAAH0xZ8ZOPnR7MdMSKV4Wp7hJ0fLyPzD07k18hz_GMwJd11HhBYOrgL0KHJp3L87SmTEcAk7xhgdncMwo1vl2nVpK1GcKTmwYx8JjKRG6i8QdLZGB-YU36cslNYnmOM=
179. Wrike Security and Compliance Certifications: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQFCl3kI8TMBb3wAgrHqN9CQ4UB8cKyTSL7OM9LQDkiDJSBQuHcqm_S_D-hlHSQgBUktbxpz2-my0X-Nz9ByjuaXzebstN67aIf5EYaEdfNmox4a9nH1NHomu0jrIsSLVTCXupDIPmYrQw4=
180. Setting Up Wrike Lock: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQFHwifHmoOFKHdafvP5hvDbWXRXvPZ1BaO_5fPIRg0E9LYpMFgIMFvbSsq_aKmKjnMhUWfphwscYZ6WffaCGKJz3lYeh-5NfI1Ar56kgZR_n6DbQhwgdqDsg60PQHB18pBxsp0AE8ZW7DHRgLZGMiP_xFM_sUSmUGoVslbpeXnr2tCy-3HTkvU=
181. monday.com for Enterprise | monday.com: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQFp95wWu2Zjpcc0OUNalViUHMZuUg3JSs76Q_Dg247MNHjKVqlD23-vUFphNfh9p7lwATv46eYcwehjPE36iBpAj5d1X1geBbM_9r5KqUPu4HTLAezs
182. Atlassian Government Cloud FAQ: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQGUkudKGX2UbJhVltxo3gwMdszniG7ssRmlwM5uT1PN7vTfHvXARiNpsIqYBCRQo2P375Pr7Jq3QA0I1fuvEE3SpymEtCfkpjnvOvVnLFNf6x-TzWQIUn9IY-OuwIbFNwm_WMgT4p_W2rjP
183. Wrike Recertification Announcement: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQHUR71H6Hd8OeMSbbVxIDJ1sF7lmzuMb93zKye7zykus5hS9RI1Isr4IPx5bRFepGp4BAzd3b2TOzl2gJLLOJHuf5OZpj7U0MmzVy_55zhapdTxTp7ZOe0FqTMyVHJ_0SG-xpMjCtq0EyVPmBX3dA==
184. monday.com secure configuration checklist – Support: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQHvnFIW_OasRvYqzoZwa9sVuLTAVmj1i534hvVZHNIMO-Iki7CpSpYv1gREfJXCQgGHFgNILjgrCdNll-uWY_hlqDk4WjhoguAkeaz9T4Gbn03wmD75Chu1ke5quu6bpOpTpSCfHlD1q-ja5yQx_-hUBgT_c5w3nyZvPePfD59Nne3cc3-RVR1ObwhWl79vYn9BFGxr9Wbr2SnIgQ==
185. Guardian add-on - monday Support: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQHVt0pG0Zt76GXKeUl6ON8FzcES9eRS9X-Duy-2Q5UMji7aH8ZiCngLdsupDFO7s9gy0y0_efn8uM2tKqQusJAwjslt8OIG9fKLLcg-NAAH5mI2jblf3ZGZ1msBOV4opodZFv_InZDfGenYKnm6MinotQN1q1nFo21OYbj0GoaxodA=
186. ComplianceGuard - SOC 2, ISO 27001, FDA 21 CFR Part 11 | Vigil: https://vigilgrc.com/products/complianceguard
187. FY25 Mega Audit Atlassian SOC 2 Bridge Letter Template: https://wac-cdn.atlassian.com/misc-assets/pdfs/FY25_Mega_Audit_Atlassian_SOC_2_Bridge_Letter.pdf
188. Ramping Up US Government Missions with Atlassian's FedRAMP Moderate Authorized Cloud: https://www.atlassian.com/blog/company-news/atlassiangovernmentcloud
189. Peace of mind with built-in security and compliance: https://www.atlassian.com/dam/jcr%3A8fce890f-6a40-4f80-a8b8-5b8c35be9d0f/Cloud_Enterprise_Datasheet.pdf
190. Atlassian Enterprise Cloud: https://www.atlassian.com/enterprise/cloud
191. Atlassian Cloud Enterprise and Government Cloud: https://www.atlassian.com/enterprise/cloud/cloud-enterprise
192. Atlassian Government Cloud: https://www.atlassian.com/government
193. Atlassian Government Cloud: https://www.atlassian.com/government/cloud
194. Atlassian Government Cloud: https://www.atlassian.com/licensing/government-cloud
195. Atlassian Purchasing and Licensing FAQ: https://www.atlassian.com/licensing/purchase-licensing
196. Atlassian Pricing: https://www.atlassian.com/pricing
197. Atlassian Access: https://www.atlassian.com/software/access
198. Atlassian Trust Center: https://www.atlassian.com/trust
199. FedRAMP | Atlassian: https://www.atlassian.com/trust/compliance/resources/fedramp
200. SOC 2 | Atlassian: https://www.atlassian.com/trust/compliance/resources/soc2
201. Atlassian Cloud architecture and operational practices: https://www.atlassian.com/trust/reliability/cloud-architecture-and-operational-practices
202. Atlassian Security Incident January 2023: https://www.atlassian.com/trust/security-advisory
203. Security Practices | Atlassian: https://www.atlassian.com/trust/security/security-practices
204. Deltek’s Costpoint GCCM Completes FedRAMP Moderate Equivalency Assessment: https://www.deltek.com/company/news/deltek-costpoint-gccm-completes-fedramp-moderate-equivalency-assessment/
205. Cloud Compliance | Security and Trust | Deltek: https://www.deltek.com/company/security-and-trust/compliance/
206. Cloud Compliance - Deltek: https://www.deltek.com/en/about/security-and-trust/compliance
207. Privacy | Security and Trust - Deltek: https://www.deltek.com/en/about/security-trust/privacy
208. CMMC Program Officially Starts in November & Costpoint GCCM Has You Covered - Deltek: https://www.deltek.com/en/blog/cmmc-program-officially-starts-costpoint-gccm-has-you-covered
209. FedRAMP Moderate Equivalency - CMMC Compliance - Deltek: https://www.deltek.com/en/blog/deltek-costpoint-gccm-completes-fedramp-moderate-equivalency-assessment
210. Make Cybersecurity a Priority with Costpoint GovCon Cloud Moderate | Deltek: https://www.deltek.com/en/blog/make-cybersecurity-a-priority-with-costpoint-govcon-cloud-moderate
211. Raising the Bar for Security: Deltek Achieves Major Cybersecurity Certifications: https://www.deltek.com/en/blog/raising-the-bar-for-security-major-cybersecurity-certifications
212. How Deltek Supports Government Contracting Compliance: https://www.deltek.com/en/government-contracting/compliance
213. Costpoint Cloud - Deltek: https://www.deltek.com/en/government-contracting/costpoint/cloud
214. Deltek Costpoint: https://www.deltek.com/en/products/costpoint
215. ERP for Government Contractors | Deltek Costpoint: https://www.deltek.com/en/products/project-erp/costpoint/platform
216. How Deltek Supports Government Contracting Compliance: https://www.deltek.com/industries/government-contracting/compliance/
217. Deltek Costpoint: ERP for Government Contractors: https://www.deltek.com/products/erp/costpoint/
218. Costpoint Essentials: Purpose-Built for Small GovCon Firms: https://www.deltek.com/products/erp/costpoint/small-business/
219. Deltek Achieves Major Cybersecurity Certifications - Deltek: https://www.deltek.com/resources/articles/deltek-achieves-major-cybersecurity-certifications/
220. Deltek Cloud: Secure, Scalable ERP Solutions: https://www.deltek.com/resources/articles/deltek-cloud-customer-roundup/
221. FedRAMP Moderate Ready Status - Deltek: https://www.deltek.com/resources/articles/deltek-costpoint-gccm-achieves-fedramp-moderate-ready-status/
222. Guide to Government Contracting Compliance: https://www.deltek.com/resources/articles/government-contract-compliance/
223. Maximize Efficiency & Compliance with Deltek Costpoint: https://www.deltek.com/resources/articles/why-government-contractors-choose-costpoint/
224. Official pricing and terms source: https://www.deltek.com/resources/support/support-plans/
225. Official pricing and terms source: https://www.deltek.com/resources/support/support-plans/cloud/
226. Official pricing and terms source: https://www.microsoft.com
227. Microsoft 365 Government plans and pricing: https://www.microsoft.com/en-us/microsoft-365/government
228. Microsoft 365 Government how to buy: https://www.microsoft.com/en-us/microsoft-365/government/how-to-buy
229. Planner and Project Plan 3: https://www.microsoft.com/en-us/microsoft-365/planner/project-plan-3
230. Oracle Primavera and Aconex Cloud Services Assessment: https://www.oracle.com/a/ocom/docs/caiq-primavera-aconex-cloud-service.pdf
231. Aconex for Defense - Datasheet: https://www.oracle.com/a/ocom/docs/industries/construction-and-engineering/aconex-for-defense-datasheet.pdf
232. Oracle Cloud Infrastructure Security Architecture May 2024, Version 3.0: https://www.oracle.com/a/ocom/docs/oracle-cloud-infrastructure-security-architecture.pdf
233. Aconex for Defense - Datasheet | Oracle: https://www.oracle.com/a/otn/docs/aconex-for-defense-datasheet.pdf
234. Aconex for Defense: secure, collaborative, data-driven program management - Oracle: https://www.oracle.com/a/otn/docs/aconex-for-defense-overview.pdf
235. Aconex FedRAMP: https://www.oracle.com/construction-engineering/aconex-fedramp-construction-software/
236. Aconex Terms of Service - TSA USDoD - Oracle: https://www.oracle.com/contracts/aconex-tsa-usdod/
237. Oracle Aconex Cloud Services - Service Descriptions: https://www.oracle.com/contracts/docs/oracle_aconex_cloud_services___service_descriptions.pdf
238. Aconex FedRAMP | Oracle: https://www.oracle.com/industries/construction-engineering/aconex-fedramp-construction-software/
239. Oracle Aconex - construction project management software: https://www.oracle.com/industries/construction-engineering/aconex/
240. Key considerations for secure defense program management - Oracle: https://www.oracle.com/oce/dc/assets/CONTB733F752F7A44A158F3CC93F49D886AC/native/key-considerations-for-secure-defense-program-management1.pdf?elqTrackId=13bff693c9bf455dba2dcc483d3953d4&elqaid=130820&elqat=2
241. Oracle Security Practices and Critical Patch Updates: https://www.oracle.com/security-alerts/
242. Self-Hosted SOC 2, HIPAA, PCI DSS & ISO 27001 Compliance | Scorifya Controls: https://www.scorifya.com/controls
243. Official pricing and terms source: https://www.smartsheet.com/
244. Event Reporting: Admin Center Coverage and IP Enrichment: https://www.smartsheet.com/content-center/event-reporting-admin-center-coverage-and-ip-enrichment-now-generally-available
245. New security, governance, and compliance announcements from ENGAGE: ALL IN: https://www.smartsheet.com/content-center/product-news/product-releases/new-security-governance-and-compliance-announcements
246. Customer-Managed Encryption-Keys - Smartsheet: https://www.smartsheet.com/content/customer-managed-encryption-keys
247. Enterprise-grade security that scales with you | Smartsheet: https://www.smartsheet.com/enterprise-grade-security
248. Smartsheet Gov: https://www.smartsheet.com/gov
249. Smartsheet Gov | Government Collaboration Software: https://www.smartsheet.com/government
250. Smartsheet HIPAA Program: https://www.smartsheet.com/hipaa
251. Smartsheet Legal: https://www.smartsheet.com/legal
252. HIPAA Business Associate Agreement | Smartsheet: https://www.smartsheet.com/legal/hipaa-baa
253. Privacy Frequently Asked Questions: https://www.smartsheet.com/legal/privacy-faqs
254. Security Practices: https://www.smartsheet.com/legal/security
255. Official pricing and terms source: https://www.smartsheet.com/legal/site-terms
256. Amazon Web Services (AWS) - Smartsheet: https://www.smartsheet.com/marketplace/apps/amazon-web-services-aws
257. Smartsheet Pricing: https://www.smartsheet.com/pricing
258. Enterprise Plan | Smartsheet: https://www.smartsheet.com/pricing/enterprise
259. Smartsheet Advance Platinum and Smartsheet Safeguard Prerequisites: https://www.smartsheet.com/sites/default/files/2024-08/Safeguard_CMEK_Technical_Brief.pdf
260. External Security FAQs: https://www.smartsheet.com/sites/default/files/2025-05/Smartsheet%20External%20Security%20FAQs.pdf
261. Smartsheet Security Capabilities, Practices, and Safeguards: https://www.smartsheet.com/sites/default/files/2025-06/Smartsheet-Security-Capabilities-Practices-and-Safeguards.pdf
262. Smartsheet Security Capabilities, Practices, and Safeguards: https://www.smartsheet.com/sites/default/files/2026-03/smartsheet-security-capabilities-practices-safeguards.pdf
263. Smartsheet Security Abstract: https://www.smartsheet.com/sites/default/files/Smartsheet-Security-Paper.pdf
264. Enterprise | Smartsheet: https://www.smartsheet.com/solutions/enterprise
265. Government solutions | Smartsheet: https://www.smartsheet.com/solutions/government
266. Smartsheet Gov: https://www.smartsheet.com/solutions/government-federal
267. Trust Center | Smartsheet: https://www.smartsheet.com/trust
268. Compliance | Smartsheet: https://www.smartsheet.com/trust/compliance
269. Federal Risk and Authorization Management Program (FedRAMP): https://www.smartsheet.com/trust/compliance/fedramp
270. System and Organization Controls (SOC): https://www.smartsheet.com/trust/compliance/soc
271. Security | Smartsheet: https://www.smartsheet.com/trust/security
272. Master Encryption Key: https://www.wrike.com/add-on-wrike-lock/
273. Enterprise-grade security: Wrike extends SOC 2 and ISO 27K certifications: https://www.wrike.com/blog/security-certifications/
274. Wrike vs. ClickUp: The best choice for scaling teams: https://www.wrike.com/compare/wrike-vs-clickup/
275. Foster Enterprise Growth with Wrike's Innovative Features: https://www.wrike.com/enterprise/features/
276. Secure Project Management Software | Wrike: https://www.wrike.com/features/admin-security/
277. Wrike Information Security Addendum: https://www.wrike.com/legal/enterprise-winfosec/
278. Wrike Bolsters Enterprise-Grade Security with New Features, Wrike Lock, and ISO Certification: https://www.wrike.com/newsroom/wrike-bolsters-enterprise-grade-security-with-new-features-wrike-lock-and-iso-certification/
279. Wrike Reaffirms Commitment to Enterprise-Level Standards of Security and Compliance: https://www.wrike.com/newsroom/wrike-reaffirms-commitment-to-enterprise-level-standards-of-security-and-compliance/
280. Plans and Pricing | Wrike: https://www.wrike.com/price/
281. Wrike Security: https://www.wrike.com/security/
282. Security Overview: https://www.wrike.com/security/overview/
283. Wrike Privacy Policy: https://www.wrike.com/security/privacy/
284. Wrike Terms & Conditions: https://www.wrike.com/security/terms/

Independent Sources

285. Project Online retires on September 30, 2026: what to do with your plans: https://365fanatic.nl/project-online-retires-on-september-30-2026-what-to-do-with-your-plans/
286. Asana AI Incident: Comprehensive Lessons Learned for Enterprise Security and CISO: https://adversa.ai/blog/asana-ai-incident-comprehensive-lessons-learned-for-enterprise-security-and-ciso/
287. Oracle Aconex for Defense - AEC Integrations: https://aecintegrations.com/integration/oracle-aconex-for-defense
288. Wrike Pricing 2026: Plans, Bands & Real Cost: https://agiled.app/blog/wrike-pricing
289. monday.com Security & Compliance - aifoxx.com: https://aifoxx.com/trust/monday-com
290. Smartsheet Security & Compliance (SOC 2, ISO 27001): https://aifoxx.com/trust/smartsheet
291. Smartsheet Inc. Security & Compliance (SOC 2, ISO 27001, GDPR): https://aifoxx.com/trust/smartsheet-ai
292. Oracle Aconex Cloud Services - Service Descriptions: https://assets.applytosupply.digitalmarketplace.service.gov.uk/g-cloud-14/documents/702001/889270907264707-service-definition-document-2024-05-01-1336.pdf
293. Smartsheet Pricing 2026 - Pro & Business: https://automationatlas.io/answers/smartsheet-pricing-explained-2026/
294. AWS Marketplace: SmartSheet [Private Offer Only]: https://aws.amazon.com/marketplace/pp/prodview-sz3kydtkslyre
295. Vanta Review 2026: AI Agent, Pricing, and Limitations: https://axipro.co/vanta-review-2026/
296. What is Microsoft Government Community Cloud (GCC)?: https://bitwizards.com/blog/microsoft-gcc
297. Asana Data Breaches: Full Timeline Through 2026 - BreachHistory: https://breachhistory.com/blog/asana-data-breaches-full-timeline-through-2026
298. Asana Pricing Plans Explained: https://bridgeapp.ai/blog/asana-pricing-plans-explained
299. ClickUp CUI Compliance Audit - Not Safe for CUI (2026): https://cabrilloclub.com/insights/tools/cui-audit/clickup
300. Costpoint CUI Audit - 0 NIST 800-171 Gaps - Cabrillo Club: https://cabrilloclub.com/insights/tools/cui-audit/deltek-costpoint
301. Microsoft 365 GCC High FedRAMP High Guide (2026): https://cabrilloclub.com/insights/tools/fedramp-finder/microsoft-365-gcc-high
302. Smartsheet Pricing 2026: Plans, Costs & Hidden Fees: https://checkthat.ai/brands/smartsheet/pricing
303. Wrike: Details, Reviews, Pricing, & Features: https://checkthat.ai/brands/wrike
304. Microsoft Office 365 GCC High and ITAR Compliance in the Cloud: https://clearedsystems.com/blog/microsoft-office-365-gcc-high-itar-compliance-cloud/
305. Understanding GCC vs GCC High: https://cloudfitsoftware.com/understanding-gcc-vs-gcc-high/
306. GCC High Guide for DoD & Federal Agencies: https://cloudfitsoftware.com/what-is-gcc-high/
307. STAR Registry Listing for Costpoint GovCon Cloud Moderate (GCCM) | CSA: https://cloudsecurityalliance.org/star/registry/deltek-inc/services/costpoint-govcon-cloud-moderate-gccm
308. GCC vs. GCC High: What Defense Contractors Need to Know: https://cmmccompliance.us/gcc-vs-gcc-high-what-defense-contractors-need-to-know/
309. Microsoft 365 Business Premium Now in GCC High: https://cmmccompliance.us/microsoft-365-business-premium-now-in-gcc-high/
310. SOC 2 Compliance Software: Audit Preparation Tool: https://complies.ai/frameworks/soc-2
311. Asana Pricing 2026: Personal Free, Starter $10.99, Advanced $24.99/user/mo: https://costbench.com/software/project-management/asana/
312. The AI GRC platform for regulated enterprises: https://csquaregrc.com/en-US/regulated-enterprises
313. Researcher claims ClickUp ignores security disclosures: https://cybernews.com/security/security-researcher-finds-clickup-vulnerability-leaking-emails/
314. ClickUp Hardcoded API Key Exposes 959 Emails from Fortune 500 Giants: https://cyberpress.org/clickup-hardcoded-api-key-exposes-emails/
315. CyberSheath GCC Guide: https://cybersheath.com/wp-content/uploads/2026/05/CyberSheath-GCC-Guide.pdf
316. HIPAA-Compliant Asana Alternative for Healthcare: https://dock.health/blog/asana-hipaa-compliant-alternative
317. Audit Readiness: https://docs.mindline.com/docs/m365security/audit-readiness/
318. ClickUp Security Flaw Exposes 959 Emails Linked to Major Fortune 500 Firms: https://gbhackers.com/clickup-security-flaw-exposes-959-emails/
319. ClickUp Pricing 2026: Plans, Cost & Free Tier | PulseSignal: https://getpulsesignal.com/pricing/clickup
320. Securely Activate Microsoft 365 Copilot in GCC High: https://go-planet.com/microsoft-365-copilot-gcc-high/
321. GCC High: Essential guide to compliance and security benefits: https://gomomentum.com/gcc-high-essential-guide-to-compliance-and-security-benefits/
322. Microsoft GCC High Pricing: What It Costs in 2026: https://gsconsultingllc.com/insights/microsoft-gcc-high-pricing
323. HST Smartsheet: https://hst.umn.edu/services-technologies/hst-smartsheet
324. How Much Does Microsoft 365 GCC High Cost: https://i3solutions.com/gcc-high-cost/
325. Costpoint Users Authentication Update - Redstone GCI: https://info.redstonegci.com/blog/costpoint-users-wont-be-able-to-login-after-july-30th-unless-you-prepare-now
326. Deltek Costpoint - Invgate ITDB: https://invgate.com/itdb/deltek-costpoint
327. Costpoint for Government Contractors - Kinetek: https://kinetek.com/blog/post/why-deltek-costpoint-is-the-best-accounting-software-for-small-to-medium-sized-government-contractors
328. What Is Microsoft GCC High? Government Cloud Explained: https://knoxsystems.com/resources/gcc-high
329. ClickUp - Microsoft 365 App Certification: https://learn.microsoft.com/en-us/microsoft-365-app-certification/docs/clickup
330. Application Information for Wrike by Wrike Inc. - Microsoft 365 App Certification: https://learn.microsoft.com/en-us/microsoft-365-app-certification/teams/wrike-inc
331. FedRAMP Marketplace - Microsoft Office 365 GCC High: https://marketplace.fedramp.gov/products
332. Airtable vs. Smartsheet: A complete platform comparison for 2026: https://monday.com/blog/project-management/airtable-vs-smartsheet/
333. monday.com | Pricing: https://monday.i4asiacorp.com/pricing
334. Cloudflare Breach: https://nhimg.org/cloudflare-breach
335. Planner and Project Plan 3 Government Pricing: https://o365hq.com/subscriptions/planner-and-project-plan-3-government
336. Is Microsoft 365 SOC 2 Compliant?: https://ocd-tech.com/platform-compliance/is-microsoft-365-soc-2-compliant
337. Top 8 Government PM Software Picks to Streamline Public Projects: https://ones.com/blog/government-project-management-software
338. Atlassian Government Cloud Is Now GA: https://oxalis.io/atlassian-government-cloud-is-now-ga-heres-what-it-means-for-regulated-agencies-and-their-industry-partners/
339. Is Smartsheet HIPAA Compliant? Enterprise Only, With Broad…: https://phiguard.app/resources/guides/is-smartsheet-hipaa-compliant/
340. Best project management software for aerospace and defense contractors | Plane Blog: https://plane.so/blog/best-project-management-software-for-aerospace-and-defense
341. Plane vs. Wrike: Which should you choose in 2026?: https://plane.so/blog/plane-vs-wrike-which-should-you-choose-in-2026
342. What Is GCC High? Why Is it Critical for Compliance?: https://redriver.com/infrastructure/what-is-gcc-high
343. Wrike Review (2026): Honest Verdict on Features and Price: https://rewardio.com/wrike-review/
344. ClickUp data leak via misconfigured feature flags: https://riskping.org/news/4067
345. Wrike Review 2026: Pricing, Features, Pros & Cons: https://saascrmreview.com/wrike-review/
346. Asana's 2025 MCP data exposure.: https://sealtask.com/competitor-security-incidents/asana-mcp-data-exposure-2025/
347. Microsoft 365 GCC High Business Premium vs G3 vs G5: https://secureframe.com/blog/gcc-high-business-premium
348. GCC High Pricing and Licensing Guide: Per-User Costs Explained: https://secureframe.com/blog/gcc-high-pricing
349. What Is GCC High? The Complete Microsoft 365 Guide for Defense Contractors: https://secureframe.com/blog/microsoft-gcc-high
350. NIST 800-171 Audit and Accountability Controls in GCC High: https://secureframe.com/blog/nist-800-171-gcc-high-audit-accountability
351. GCC High vs GCC: Differences, Pricing, CMMC Fit: https://secureframe.com/marketplace/microsoft/compare/gcc-vs-gcc-high
352. Planner and Project Plan 3: https://secureframe.com/marketplace/microsoft/planner-and-project-plan-3
353. Planner & Project P3: GCC High Pricing & Compliance: https://secureframe.com/marketplace/microsoft/planner-project-p3-gcc-high
354. Planner & Project P3 Project P1: MSRP Pricing & Compliance Info: https://secureframe.com/marketplace/microsoft/planner-project-p3-project-p1
355. Planner & Project P5 FSA GCCH Renewal - GCC High Pricing & Compliance: https://secureframe.com/marketplace/microsoft/planner-project-p5-fsa-gcch-renewal-gcc-high
356. SOC 2 Compliance Software for Fintech: Framework Fit: https://soc2auditors.org/soc-2-compliance-software-for-fintech/
357. Oracle Aconex Reviews, Demo & Pricing: https://softwarefinder.com/project-management-software/aconex
358. Deltek Costpoint Overview - Software Finder: https://softwarefinder.com/project-management-software/costpoint
359. FedRAMP vs SOC 2: Differences in Scope, Controls and Certification: https://sprinto.com/blog/fedramp-vs-soc-2/
360. Deltek Costpoint Reviews 2026 - Subscribed.fyi: https://subscribed.fyi/deltek-costpoint/reviews/
361. What is Microsoft GCC High? - Summit 7: https://summit7.us/guides/what-is-microsoft-gcc-high
362. 9 Secure Collaboration Tools for Project Teams 2026: https://teamhood.com/pm/secure-collaboration-tools/
363. GCC High Cost and Licensing in 2026: https://thedefensecompliancereport.com/gcc-high-cost-and-licensing/
364. 10 Best Enterprise Project Management Software Of 2026: https://thedigitalprojectmanager.com/tools/enterprise-project-management-software/
365. 10 Best Enterprise Work Management Software For 2026: https://thedigitalprojectmanager.com/tools/enterprise-work-management-software-comparison/
366. ClickUp SSO / SAML: Full Guide & Honest Review (2026) | ToolStack: https://toolstackpm.com/tools/clickup/features/sso-saml
367. Asana Trust Center - SOC 2 Type II, SOC 2 Type I, SOC 3 | TrustLists: https://trustlists.org/company/asana/
368. Clickup Trust Center - SOC 2 Type II, SOC 3, ISO 27001: https://trustlists.org/company/clickup/
369. Atlassian Government Cloud: FedRAMP & Federal Compliance: https://us.seibert.group/blog/atlassian-government-cloud-fedramp
370. Deltek Pricing 2026 - Vendor Benchmark: https://vendorbenchmark.com/vendors/deltek-pricing
371. Smartsheet Pricing in 2026: What Enterprises Actually Pay: https://vendorbenchmark.com/vendors/smartsheet-pricing
372. monday.com Security & Compliance Profile - VTI: https://vendortrustindex.com/vendors/monday
373. Wrike Plan Comparisons & Security Features: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQEdmtukJByPo4pVGHH6GZ9g6iqG9z1YFYBpTV6KVvuSiv5WTm5AmflmK0U5ILegzwJv6aHipJwrXO5I7Z2NLDqeAzcsoRwtWXgNuLo7cKkPShN_YdAmOE6MiCXj77f6_Q==
374. Atlassian Government Cloud: FedRAMP & Federal Compliance - Seibert Solutions: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQEEcTBYOmOJkOq7HjTBNJ5H-VSyfOXedWU7Wj45JZjGShxqxOGbkAb1i1z1Kbz2BhPrTSy-KVXTiUoTp1WmS1VWBqbhQjFyBN_C3jW0TNHyx5giLAqMa9T_PiSgL1MU_tDupn1rb8xKWFRYjpzXim5QW7coFm-L
375. Wrike Security Recertification Press Release: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQELwJEnIyk7qsJTdy6PodFK6WEOTri9k4BeFCwJHf1zeiUWLcc8e_grj0RmEfeyV82cyz9VLl_oYCbMhnGx-0WPZVJylug9zJm3oaKv64nK2bCXXJFVAk7UCX8Hxv5QkH9FXQD49XU0Gpl3k8_ciqeReYQ7gRCvEI9MAW4vHpCcrpgwex_JMiV7dxJNp1cUgB0RbE3J8UB5pKdGP1SKpbO_NLWNzSbURK0PaeNoMizZcRB7S1FH6WTtBW80RcGlWoaMnPWXyv_MOg==
376. Wrike Pricing Breakdown: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQF_7TiVaLUSJ5lNTpf8ByEdBz-OplsLOnWevUVJsmbHSWyKBM1rlj7uUWO1raljL3Zjjh3j2PDeme0zlE-mGl8AtLm2aKWeS8TtmNnrwOGCcFjWK5mYIDVucbc5IGjOK7_-e6S86MaIG08s7gWbvg==
377. FedRAMP Authorized Vendor List (2026) - 100+ Vendors - ThirdProof.ai: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQFqoLZebgm92xBFavpyyskVaIQ_Pht8CADdLRbfEJoW8oERmXaJdInxXbeSzSxB2b5kyZ0lLdSXMjtKWFGrZNMQ2Ar-wNGIQWCUfZoNkMKmD-yyrkTILJwbaWL8jpyruJjJR3FLM_fSVqajHwsqVlc=
378. monday.com security compliance hub: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQG7jrYZ9dl8b9dO-kaCb7c-gJvxmUf7llShuOoZmopnudiRqORwTF6VB6iEnea1acCWUL7e9DvhALmzLxVwms0BrjRJSEdjld5Y1YW8IS4N
379. monday.com Enterprise Plan Pricing: Your 4-Step Evaluation Checklist - ONES.com: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQGBqUqJtbEzkEAl-wS8zu8VmviubHfVKoy9wHT6KYhjw81bL0CTI67QFiwqhf6o93dkNRBOr8DMgX9UkKwWB_5JR-Kpk2N7b5EEz9m2b29ALlrH0FbQYjm7ur1bakEeAOUiPzXBZTZlKNK-bEt3RknGfN3XKPiOmQGkViPhjdTMONcNBroIuFgIteVx4ueLf20=
380. How to Get Monday.com Pricing Under Control Across Every Product | CloudEagle.ai: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQGegLvDjCE7fsF7Bd-kOFx0mJiTc25IOEeHJLAffUjdc1A4x2MHkSBwIT7CMquhVxqVIYVPB4RghBIkMkK52JWosu1lWfd6LtbqDYWYV2cjcC2IC0ey-WKBLMi_LZUDl2tKeWjWyttpRED1NXObgCEwQRy44nm8Bauoc61kyttck-LiMw==
381. Granular Permissions in monday.com Enterprise: An IT/Security Deep Dive: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQGH-331TTgwVYBa2l_Wo_CXbgiTJLanbmvlJsR2zOD-R8kM4sXcDQ9qSEOgYeVRuyTl8hsj-stkXEqnpv4R8fccgIDEZKTzJXoWrKR0c3CxiV-eTIZ9LNHcHF4X9H2sPIsTFrqAt4Q6zWlW8qlpGeHOz4nFww-ReZCYmqE=
382. Best project management software for aerospace and defense contractors | Plane Blog: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQGiwIftzh2xN_dtlVEQJ6CrQdF-W3lkt27f2mlEODeE0fyMTEfaZvA0ryKsfIyP0RHLj2mvqDvY3837LxAbJeOS_Sbmsb6ZmnWcQwFV5eA937-NbzMVq_Wij8O7pXrWqIjWNQzQc_ZQ5i4ktlrpviaWNHPOLPxpkU5U3RSEXHzY2Xq-kXYXldzLNArtAOHRbCLu
383. Monday.com Pricing 2026: Plans, Cost, & Free Plan - VisioneerIT: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQGlNM3OySOH7Xwjl1HyCgLqroacDPpRmkoMxyKAYB3ghBQyzYIOyIkUYKL6wVZmGbH3flNJYxI-7RFUoaFfEjYiYxMfDMzO4WgLhwUoutxV8gU8dCNF-DaLWNZ-VMRBwbNfN_qZiebCSnBW1yIh4yEwIitspB725H-L
384. Best Project Management Software for Government, Ranked - Onplana: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQGLzRzZAQ7RgWyLzNF_CFhJB0XitwYXUVilScAp4f6_UO6neKLbtplVJc6vYU2uRP6aMdLBKrVHmHqH5FKSBRubZ1fbTOLp2Av2mV7jPDAcPzoH_rXpsWm7wKmTYT0GSDx5kyX4f7Dwcy8RBb7Fz7520xPa
385. Is Monday.com a HIPAA compliant cloud service? (2026 update) - Paubox: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQGv3Js7eYu3NTmTd658VqPx-20XRWEH_QX-Yn-UcYuBS8HiAQU9JUHag5eNjYjNI2dBAQ5GHIC4i8kxDxHegh7oyg-CK6cSbMry_PBhqscFvraW19HucdNy4GDkh9GC43vzjT7O7reUENUUBw==
386. monday.com Security and Privacy white paper - Cloudinary: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQGyr5gSIvGNn9uII3WeD9Z80BWcuJ8sY1MLGr8GSvda4XqvfI-yyK5WChSE11i9z-36QJVlJpoiUMLCvjz2QN8kgX2vwqqL54Xu-kvG2d0t1Pj-R6Nr4OqugT7Q2Y7GA6940BAu90855wyLI6OgNqmkSaLHfu69JPd5QIuqtmb2Brqm1il0M234JqY3vWCbh5wilGkvoOl2uNmZrg==
387. Is Wrike HIPAA Compliant?: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQH3_ltKomduRnpWrQMvqky5I7swCGbS_HQZF4RxINo9pSAkKOd_96NyadQZKGA5v5TmFdwXRP50lC7VrG7qHKoFEEWg14i9nC-d-wWZaQdQD56ru7vrXb_ulfgn1fTwdnSnCUwtBlZK8qCdZVCLgEvJwbJRe-aO
388. Is My Data Safe with monday.com? GDPR, Swiss FADP & Security Explained - Blinno Blog: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQHKIlCLf5fLM8kOZYYiaC_XyIvK7h6LzQSXXwE-AnHB2VA-ARFFNmTZVm9s5hwzVGHTniwt3RLEnWPgzeK2E2GAIYZ_s2fr5n8b5JuLbub2DvOTvGAUqMNAfVUdV4FJOeyKhKa6n0MmgTXs
389. Does monday.com Meet Project Controls Security Standards? - TaskRhino: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQHLynjwbm7iOyjeK_k4l8sTTzZCkyTqrFDw6PsCpSqgKGin_FCfZ-WPEHWnNgVMpIgN80QhT08pNFRzt2VUfkXY-cLHjE-ySxWdO2pOIVa6LMPIwejVicE9jNG2fCvyV5egS94wrc6ycpKO49jU1V0dtCtkebGVHgM=
390. Does monday.com Meet Project Controls Security Standards? - TaskRhino: https://vertexaisearch.cloud.google.com/grounding-api-redirect/AUZIYQHqbvCmrx0n8O3rRZNRFl_2nukPYbwG4gZOfX0bvVMRSqAjgW-Wlv9yZD_0biA0BZyQe1pGSf7KsbQ5FmEoaoAHfY3alhuSirC0PUTWIHSgA7d8S11lCcqKVpKhG_bW-2jdpjjDo5jAbwpRNvVhm9czQ3g_xZQ03TU=
391. GCC vs. GCC High: Which is right for your business?: https://weareaura.com/blog/gcc-vs-gcc-high-which-is-right-for-your-business/
392. Smartsheet Pricing 2026: Pro, Business & Enterprise Plans: https://workmanagementhub.com/smartsheet-pricing-2026/
393. Microsoft GCC High Implementation Services - Abel Solutions: https://www.abelsolutions.com/microsoft-gcc-high-implementation/
394. Asana HIPAA Compliance: Does Asana Sign a BAA and Can You Use It for PHI?: https://www.accountablehq.com/post/asana-hipaa-compliance-does-asana-sign-a-baa-and-can-you-use-it-for-phi
395. Is Asana HIPAA Compliant? BAA, PHI Rules, and Security Explained: https://www.accountablehq.com/post/is-asana-hipaa-compliant-baa-phi-rules-and-security-explained
396. Asana Admin and security: https://www.airframe.ai/product/asana-com-features-admin-security/analysis
397. EU Data Residency for Secure Client Portals in 2026: https://www.alkmist.com/eu-data-residency-secure-client-portals
398. GCC vs GCC High: Key Differences: https://www.atlantech.net/blog/gcc-vs-gcc-high-key-differences
399. GCC High Requirements: A Complete Guide: https://www.bemopro.com/compliance-requirements/gcc-high
400. Sind meine Daten bei monday.com sicher?: https://www.blinno.ch/blog/monday-com-datenschutz
401. Is My Data Safe with monday.com? GDPR & Security Explained - Blinno Blog: https://www.blinno.ch/en/blog/monday-com-datenschutz
402. Wrike Reaffirms Commitment to Enterprise-Level Standards of Security and Compliance: https://www.businesswire.com/news/home/20240404102346/en/Wrike-Reaffirms-Commitment-to-Enterprise-Level-Standards-of-Security-and-Compliance
403. Asana Achieves FedRAMP® Moderate Authorization for Asana Gov: https://www.businesswire.com/news/home/20260624892497/en/Asana-Achieves-FedRAMP%C2%AE-Moderate-Authorization-for-Asana-Gov
404. Wrike vs. Smartsheet: Features and Cost Comparison for 2025: https://www.capterra.com/compare-products/141011/vs/88771/wrike-vs-smartsheet
405. Government Project Management Software for Public Sector Projects: https://www.celoxis.com/article/government-project-management-software
406. Asana Enterprise vs. Enterprise+: Which Plan is Right for You?: https://www.cirface.com/blog/asana-enterprise-vs-enterprise-plus
407. ClickUp Review 2026: Pros & Cons, Pricing, Features & Guides: https://www.cloudwards.net/clickup-review/
408. Is monday.com HIPAA Compliant? Enterprise BAA & SOC 2: https://www.complysaas.com/compliance/monday-com
409. Aconex Pricing 2026: Subscription & Software Costs - CostLoop: https://www.costloop.com/oracle-aconex-pricing-negotiation/
410. GovCon Cloud Moderate (GCCM) | CRI - Corporate Results, Inc.: https://www.cri-solutions.com/govcon-cloud-moderate
411. Ground to Cloud Transition and 2026 Mandates - CRI4Results: https://www.cri4results.com/post/technical-brief-deltek-costpoint-ground-to-cloud-transition-and-2026-mandates
412. GCC High Cost and Licensing for Defense Contractors: https://www.daymarksi.com/blog/gcc-high-cost-and-licensing-for-defense-contractors
413. Microsoft 365 Copilot Licensing in GCC High: https://www.daymarksi.com/blog/microsoft-365-copilot-licensing-in-gcc-high-what-it-costs-what-you-need-and-how-to-pilot-without-over-buying
414. Wrike Review 2026: Best Enterprise Project Management?: https://www.dupple.com/tools/wrike-1768240859
415. GCC High: Pricing, Benefits & Compliance - ECF Data: https://www.ecfdata.com/gcc-high-pricing-and-benefits/
416. GCC High Pricing in 2026: https://www.ecfdata.com/gcc-high-pricing-in-2026/
417. GCC High Pricing 2026: Are You Overpaying for Licensing? - ECF Data: https://www.ecfdata.com/gcc-high-pricing/
418. GCC vs. GCC High vs. Commercial Microsoft 365: 2026 Compliance Guide: https://www.ecfdata.com/gcc-vs-gcc-high-vs-commercial-microsoft-365-2026-compliance-guide/
419. Microsoft 365 GCC High Price Increase July 2026: https://www.ecfdata.com/microsoft-365-gcc-high-price-increase-july-2026-a-complete-optimization-guide/
420. Oracle Aconex for Defense Receives Level 4 DoD Project Use Authorization: https://www.enr.com/articles/55830-oracle-aconex-for-defense-receives-level-4-dod-project-use-authorization
421. Oracle Aconex Software Receives Key Defense Dept. Authorization - ENR: https://www.enr.com/articles/55836-oracle-aconex-software-receives-key-defense-dept-authorization
422. Wrike toughens security stance: https://www.enterprisetimes.co.uk/2019/03/15/wrike-toughens-security-stance/
423. CMMC Compliance on Microsoft 365: Defense Contractor Guide 2026: https://www.epcgroup.net/cmmc-compliance-microsoft-365-defense-contractor-guide-2026
424. GCC vs GCC High vs GCC DoD - Microsoft 365 Government Cloud: https://www.epcgroup.net/understanding-gcc-high-gcc-dod-and-commercial-microsoft-365
425. Deltek Costpoint Pricing 2026: From $75/User | ERP Research: https://www.erpresearch.com/deltek-costpoint-pricing
426. Deltek Costpoint Pricing 2026 - ERPResearch: https://www.erpresearch.com/pricing/deltek-vision
427. ClickUp Data Leak Exposes Enterprise Emails for Over a Year: https://www.esecurityplanet.com/threats/clickup-data-leak-exposed-emails/
428. Oracle Granted DISA Provisional Authorization for Construction Project Management Tool: https://www.executivebiz.com/articles/oracle-secures-disa-provisional-authorization-for-aconex-for-defense-offering
429. Smartsheet Gov | FedRAMP Marketplace: https://www.fedramp.gov/marketplace/products/FR1730866868/
430. Atlassian Government Cloud | FedRAMP Marketplace: https://www.fedramp.gov/marketplace/products/FR2412062433/
431. Asana Review: Features, Pros And Cons – Forbes Advisor: https://www.forbes.com/advisor/business/software/asana-review/
432. Granular Permissions in monday.com Enterprise - fruitionservices.io: https://www.fruitionservices.io/post/mondaycom-enterprise-permissions
433. ClickUp Reviews and Security Overview: https://www.g2.com/products/clickup/reviews
434. Microsoft GCC vs GCC High: Key Differences Explained: https://www.icsdata.com/m365-gcc-vs-gcc-high/
435. What Is Microsoft GCC High and Do You Need It: https://www.impactmybiz.com/blog/what-is-microsoft-gcc-high-and-do-you-need-it/
436. Is ClickUp HIPAA Compliant? How to Check (2023) - Keragon: https://www.keragon.com/blog/is-clickup-hipaa-compliant
437. Microsoft 365 GCC High CMMC Compliance Explained: https://www.ktlsolutions.com/microsoft-365-gcc-high-cmmc-compliance/
438. ClickUp Pricing 2026: Full Plan Breakdown + Is It Worth It?: https://www.layer3labs.io/guides/clickup-pricing
439. Microsoft 365 GCC vs. GCC High: Which One Does Your Organization Need? - Apps4Rent: https://www.o365cloudexperts.com/blog/microsoft-365-gcc-vs-gcc-high/
440. All Vulnerabilities for about.monday.com Patched - Open Bug Bounty: https://www.openbugbounty.org/reports/1513772/
441. Atlassian Cloud Migration Compliance: What Regulated Industries ...: https://www.praecipio.com/resources/atlassian-cloud-migration-compliance-regulated-industries
442. ClickUp Proves Enterprise Readiness with ISO Certifications: https://www.prnewswire.com/news-releases/click-up-proves-enterprise-readiness-with-iso-270012013-iso-270172015-and-iso-270182019-certifications-301648216.html
443. Oracle Aconex for Defense Achieves DISA IL4 Provisional Authorization: https://www.prnewswire.com/news-releases/oracle-aconex-for-defense-achieves-disa-il4-provisional-authorization-301734060.html
444. Oracle Aconex for Defense Achieves DISA IL4 Provisional Authorization: https://www.prnewswire.com/news-releases/oracle-aconex-for-defense-achieves-disa-il4-provisional-authorization-301734260.html
445. Monday.com Pricing 2026: Plans, Seat Minimums and Real Costs: https://www.rock.so/blog/monday-pricing
446. monday.com Ltd. Form 20-F FY2021 - SEC: https://www.sec.gov/Archives/edgar/data/0001845338/000117891322001148/zk2227415.htm
447. monday.com Ltd. Form 20-F FY2024 - SEC: https://www.sec.gov/Archives/edgar/data/0001845338/000117891325000852/zk2532825.htm
448. Vulnerability Exposed Smartsheet Accounts to Hijacking: https://www.securityweek.com/vulnerability-allowed-hackers-hijack-smartsheet-accounts/
449. Asana Pricing 2026: Plans, Spend Data, and How to Pay Less: https://www.spendhound.com/marketplace/asana-pricing
450. Smartsheet Pricing 2026: Plans, Spend Data, and How to Pay Less: https://www.spendhound.com/marketplace/smartsheet-pricing
451. Wrike Project Management Software 2026 - Is It Right: https://www.spotsaas.com/product/wrike
452. Smartsheet Pricing: Plans, Reviews and Hidden Costs: https://www.stackby.com/blog/smartsheet-pricing/
453. Asana SCIM Provisioning: Pricing & Limitations: https://www.stitchflow.com/scim/asana
454. What's the Difference Between Microsoft 365 GCC and GCC High?: https://www.sysarc.com/microsoft-government-community-cloud/whats-the-difference-between-microsoft-365-gcc-and-gcc-high/
455. monday.com Pricing 2026: Complete Guide - TaskRhino: https://www.taskrhino.ca/blog/monday-com-pricing-complete-guide-2026/
456. GCC High vs. GCC: What Is It and Which One Is Right: https://www.techaxia.com/cmmc-resources/gcc-high-vs-gcc-which-one-is-right-for-your-organization-3ahr8
457. Government Project Management Software I Trust in 2026: https://www.techrepublic.com/article/government-project-management-software/
458. ClickUp Data Leak Exposes Enterprise Emails for Over a Year: https://www.techrepublic.com/article/news-clickup-api-key-email-exposure/
459. 6 ClickUp Identity Governance Tools in 2026: https://www.toriihq.com/articles/clickup-access-review-tools
460. Smartsheet Security Rating, Vendor Risk Report, and Data Breaches: https://www.upguard.com/security-report/smartsheet
461. Where is ClickUp Data Stored? Servers, GDPR & Security | UpSys Consulting: https://www.upsys-consulting.com/en/blog/clickup-data-storage
462. Wrike Pricing: https://www.usagepricing.com/blueprint/wrike
463. ClickUp Software Pricing & Plans 2026: See Your Cost: https://www.vendr.com/marketplace/clickup
464. Deltek Software Pricing 2026 - Vendr: https://www.vendr.com/marketplace/deltek
465. Smartsheet Software Pricing & Plans 2026: https://www.vendr.com/marketplace/smartsheet
466. Deltek Pricing 2026: What Enterprises Actually Pay - Vendor Benchmark: https://www.vendr.com/pricing/deltek
467. Monday.com Pricing Explained (2026) - visioneerit.com: https://www.visioneerit.com/blog/monday-com-pricing-2026-plans-cost
468. ClickUp Pricing 2026: Real Cost Per Plan [Breakdown]: https://www.waymakeros.com/learn/clickup-pricing-2026
469. Microsoft GCC vs. GCC High: What's the Difference?: https://www.workstreet.com/blog/microsoft-gcc-vs-gcc-high
470. What is Microsoft GCC High? And Does Your Business Need It?: https://www.workstreet.com/blog/what-is-microsoft-gcc-high
471. impulsive on X: Security researcher posts re: ClickUp certifications vs. vulnerabilities: https://x.com/weezerOSINT/status/2048663126250553478

Other Sources

472. FedRAMP Marketplace: https://marketplace.fedramp.gov/
473. Costpoint GovCon Cloud Moderate (CP GCCM) | FedRAMP Marketplace: https://marketplace.fedramp.gov/products/FR2005432578
474. Replicon FedRAMP Authorization: https://marketplace.fedramp.gov/products/replicon
475. Aconex for Defense Secure, collaborative, data-driven program management: https://static.carahsoft.com/concrete/files/6916/7163/1966/Aconex_for_Defense_Wrapped.pdf
476. CSRB Review of Microsoft Security Practices: https://www.cisa.gov/resources-tools/resources/cyber-safety-review-board-reports
477. DISA Cloud Service Support: https://www.disa.mil/Cloud-Services/Cloud-Service-Support
478. Aconex for Defense | FedRAMP Marketplace: https://www.fedramp.gov/marketplace/products/FR1712871948/
479. Costpoint GovCon Cloud Moderate (CP GCCM) | FedRAMP Marketplace: https://www.fedramp.gov/marketplace/products/FR2405880485/
480. Business Associates: https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/business-associates/index.html Explore more project management and team collaboration software guidance in the category directory.