Priority Matrix Government is our specially designed solution for government agencies with enhanced security requirements. Our government-focused solution delivers the same powerful priority and project management capabilities as our commercial offering, but with the additional security and compliance features required by government agencies.
Deployment Architecture and Data Flow
Our government deployment is built from the ground up to meet stringent security standards. All Priority Matrix Government services are hosted in Azure Government Cloud (GCC) environments and specifically deployed in the USGov Virginia region. This ensures data sovereignty and compliance with federal regulations.
Security Implementation
We’ve implemented robust security measures throughout the Priority Matrix Government deployment:
All data is stored within US sovereign territory in accordance with government standards. We encrypt all cloud data both in transit and at rest, ensuring your information remains protected at all times. For additional security, we enforce single sign-on through Microsoft (with the option to enable Azure Active Directory user provisioning), simplifying the implementation of IT login policies while strengthening authentication.
To further enhance security, we’ve disabled certain features in the government version to eliminate any possibility of data sharing with unauthenticated users. This creates a controlled environment for your sensitive information.
For organizations needing to meet specific compliance requirements, we also offer GCC-High compatibility for environments that require additional security measures.
Data Processing and External Services
Our data processing architecture has been carefully designed to maintain security while delivering high performance. The Priority Matrix application provides a complete, secure environment for your priority and project management needs.
The government deployment connects to only a minimal set of essential external services: We integrate with Azure Marketplace for secure subscription management, ensuring your licensing is handled appropriately. For organizations that require email communications, we use Sendgrid for secure, reliable email notifications that comply with government standards.
Data Handling and Protection
We take data protection seriously at Priority Matrix. Here’s how we handle your information in our government deployment:
Data Collection
Priority Matrix Government collects only the information necessary to provide our service. This includes user account information for authentication, project and task data for your work management needs, chat messages for team communication, and user state information to maintain your workspace configuration. We never collect unnecessary data, adhering to data minimization principles.
Data Storage
All customer data is stored exclusively within the Azure Government Cloud environment in the USGov Virginia region. This means your data never leaves the sovereign US cloud environment, ensuring compliance with data residency requirements. Our storage architecture implements multiple layers of protection to guard against unauthorized access or data breaches. If users prefer so, they can configure the app to use their own OneDrive account for storage of attachments, which would then reside within their own tenant.
Data Transfer
When data must move within our system, we maintain strict security controls. Email notifications and push notifications are sent to users only via approved, secure channels. Subscription updates are exchanged with Azure Marketplace solely for license validation purposes, using encrypted communications channels. All data flows occur entirely within the secure US Government cloud infrastructure, maintaining the security boundary around your information.
Compliance Information
Priority Matrix Government has been designed to leverage the security capabilities of the Azure Government Cloud (GCC) infrastructure. Our deployment benefits from the Azure Government Cloud’s security features, including:
Physical and logical separation from commercial cloud data, preventing any potential data mingling. Data sovereignty with US-only access controls, ensuring only authorized personnel can access systems and data. Support for organizations working to meet CMMC (Cybersecurity Maturity Model Certification) requirements, helping your organization address its compliance obligations for handling controlled unclassified information.
GCC-H Specific Information
For organizations utilizing GCC-High (GCC-H) environments, Priority Matrix offers specialized capabilities. Our solution can be fully configured as a private, standalone deployment in GCC-H environments as detailed in our government deployment documentation.
GCC-H deployments provide enhanced security features beyond standard GCC, including additional protections for handling sensitive unclassified data. These environments maintain physical and logical separation of data from commercial cloud systems, ensuring your information remains within the appropriate security boundary.
Our GCC-H deployment can support organizations working to address government requirements including DFARS 7012, NIST 800-171, and CMMC requirements. This makes Priority Matrix a solution for organizations handling Controlled Unclassified Information (CUI) that requires protection.
For organizations with specific security requirements, we also offer private deployment options. This allows for customized environments tailored to your organization’s security needs.
Enterprise Support and Custom Deployments
Our government customers receive priority support from our experienced team. We understand the unique challenges faced by government agencies and contractors, and we provide implementation assistance to ensure your deployment meets necessary security requirements.
For enterprise users, we offer custom private deployments that can be tailored to your specific security and operational requirements. These custom deployments can be configured to address your organization’s particular compliance needs.
For more information about our government solutions or to discuss your specific deployment needs, please fill out our contact form or visit our Priority Matrix for Government page.