whatbindsCheck your order

Clauses · DFARS · Cybersecurity

DFARS 252.239-7010 Cloud Computing Services

Does the regulation require it to flow down?

Yes

All subs that involve or may involve cloud services, including commercial services

Form
verbatim (this clause)
Reaches
all tiers

Checked against acquisition.gov on 2026-08-09 · edition JAN 2023 · base v0.9.3 Read the text ↗

What it makes you produce

4 items for your checklist, slowest first.

  1. A program you have to be running2

    You are either running it or you are not, and what the prime asks for is the date it started.

    • Administrative, technical and physical safeguards at the level the DoD Cloud Computing Security Requirements Guide sets

      Owed when cloud computing is used to provide information technology services in performing the order, unless the contracting officer notifies you that the DoD Chief Information Officer has waived it

      252.239-7010(b)(2)
    • Hosting that keeps Government data inside the United States or an outlying area

      Owed when the data is not physically located on DoD premises and no written notification from the contracting officer allows another location

      252.239-7010(b)(3)

  2. Something you write

    Days to weeks, and nobody outside your company has to agree to it.

    • A written request for approval before the cloud service is used

      Owed when you answered no to 252.239-7009 at offer and now propose to use cloud services on the work

      252.239-7010(b)(1)

  3. Something you fill in and send back

    Hours, once you know which one is missing.

    • A report of every cyber incident related to the cloud service provided under the order

      Owed when an incident related to that service is discovered

      252.239-7010(d)

When it is used

IT services contracts that involve or may involve cloud computing.

Read closely

The DISA provisional authorization a buyer usually asks about is directed at the contracting officer by DFARS 239.7602-1(b)(1) rather than by a paragraph of this clause; what the clause itself carries is (b)(2). Paragraph (f) holds images of affected systems and (g) opens your equipment to forensic analysis on request.

The 14 templates that name it, with the line
233RTX Flowdown of U.S. Government Contract Clauses Under U.S. Government ContractsRTXline 78151Raytheon TC-001 — General Terms and Conditions of PurchaseRTXline 57460Raytheon TC-003 — Supplement 2: Government Contract Provisions from the DFARSRTXline 164166Northrop Grumman CTM-P-ST-001 — U.S. Government Firm Fixed Price Order (Not for Commercial Products and Services)Northrop Grummanline 252969Northrop Grumman CTM-P-ST-002 — U.S. Government FFP or T&M Order for Commercial Products and ServicesNorthrop Grummanline 2433166Northrop Grumman CTM-P-ST-003 — U.S. Government T&M Order (Not for Commercial Products and Services)Northrop Grummanline 2466168Northrop Grumman CTM-P-ST-004 — U.S. Government Cost Reimbursement Order (Not for Commercial Products and Services)Northrop Grummanline 2555255GD Mission Systems SCM-TMP-005 — General Provisions, Firm Fixed Price PO under U.S. Government Contract (Non-Commercial)General Dynamicsline 1389243GD Mission Systems SCM-TMP-048 — T&M Purchase Orders for Non-Commercial Items in Support of a U.S. Government ContractGeneral Dynamicsline 2360122GD Mission Systems SCM-TMP-095 — FFP Purchase Orders for Commercial/COTS Products or Services in Support of a U.S. Government ContractGeneral Dynamicsline 1139240L3Harris LGL-50.F1 — General T&C and Flowdown Clauses for Other Than Commercial Products/Services under a U.S. Government ContractL3Harrisline 2793106L3Harris LGL-50.F2 — General T&C and Flowdown Clauses for Commercial Products/Services under a U.S. Government ContractL3Harrisline 1856273BAE Systems Inc. USGOVA — FAR/DFARS Flow Down Provisions for Subcontracts/Purchase Orders under a U.S. Government (DoD) Prime ContractBAE Systemsline 1206107Honeywell — Supplemental Provisions Under Fixed Price U.S. Government Contracts for Commercial ItemsHoneywellline 1004

Source: acquisition.gov, DFARS 252.239-7010, codified text read at DFARS Change 5/7/2026, prescribed at 239.7604(b) with designation (JAN 2023); RFO class deviation 2026-O0024 (DFARS part 239, effective 2026-02-01) prints the same prescription and the same designation, so the two regimes agree (verified 2026-08-09)

This is research, not legal advice. It states what the regulation says about this clause and cites the paragraph behind it. It does not rule on your order, and it does not rule on whether a prime's markings are correct.