Not FedRAMP authorized
workwae holds no FedRAMP or other government authorization.
Use case: Government
GCC High and DoD mailboxes, next to commercial ones.
workwae connects Microsoft 365 accounts in GCC High, DoD and GCC beside worldwide tenants, so one product serves agencies, defense contractors and commercial customers.
// Your own UI, the tenant's own Microsoft cloud
const { authorizeUrl } = await workwae.oauthAuthorizations.create({
provider: "microsoft",
microsoftCloud: "gcc-high",
redirectUri: "https://app.example.com/mail/connected",
});
return redirect(authorizeUrl);// Your webhook, when the account is ready
{
"type": "account.connected",
"data": {
"email": "ada@agency.example",
"provider": "graph",
"cloud": "gcc-high",
"reauthorized": false
}
} What you get
Each account in its own Microsoft cloud.
One workspace and one typed SDK for worldwide, GCC, GCC High and DoD tenants.
Every account in its own cloud
Sign-in goes to login.microsoftonline.us and Graph calls to graph.microsoft.us (GCC High) or dod-graph.microsoft.us (DoD); GCC uses the worldwide endpoints.
Your Entra app per cloud
Register your own app in each cloud so consent shows your name, or use workwae’s app for a cloud where we run one.
Organization connections
App-only access with admin consent works in GCC High and DoD, through your own app registration or workwae’s where we run one.
Mail, calendars and contacts
All three run on Microsoft Graph in the account’s cloud, with change notifications where the cloud offers them.
Teams, Zoom and Webex
Teams meetings where the calendar offers them, and Zoom or Webex meetings that follow their events.
US hosting, per-record encryption
Data is stored and processed on AWS in the United States, each record encrypted with AES-256-GCM under keys in HashiCorp Vault.
How it fits
From app registration to synced mailbox.
-
Pick the app for the cloud
Add your Entra app registration with its cloud, or name the cloud with
microsoftCloudto use workwae’s. -
Users or administrators connect
Users sign in through hosted connect or your own UI, or an administrator consents once for the organization.
-
Your webhook hears the cloud
account.connectedcarries the account’s cloud, and every later change arrives as a signed webhook.
Limits
What workwae is not, yet.
Check these against your contract and your customers’ requirements before you build.
SOC 2 planned, not started
The audit has not started, and we claim no certification.
Hosted SaaS only
There is no on-premises or self-hosted option.
Not in a government cloud region
workwae runs on AWS in the United States, not in a government cloud region.
FAQ
Questions from government teams.
Are GCC (moderate) tenants supported?
Yes. GCC runs on Microsoft’s worldwide endpoints, so GCC accounts connect with the global cloud.
Can government and commercial customers share one workspace?
Yes. Each account and app records its cloud, and tokens never cross clouds.
Where is our users’ data stored?
On AWS in the United States. The companies that process data for us are on the subprocessors page.
Does it work with Zoom or Webex government services?
No. Zoom and Webex meetings are created through the commercial Zoom and Webex services.
Early access
Serve agencies and commercial customers with one API.
We are onboarding a small number of teams. Tell us what you are building.