← Back to Trust Center
IRS Publication 1075
Internal Revenue Service Publication 1075 (IRS Pub 1075) provides guidance for U.S. government agencies and their contractors on safeguarding Federal Tax Information (FTI). While the IRS does not offer an official certification or designation for compliance with Pub 1075, MongoDB helps organizations protect covered information by aligning our implementation of ISO/IEC 27000, NIST 800-53, and FedRAMP security controls with IRS Pub 1075 requirements.
MongoDB has worked closely with government agencies to ensure that MongoDB Atlas for Government meets the security and compliance needs for storing and processing FTI. Customers can refer to MongoDB’s security and compliance resources for guidance on their responsibilities under the Shared Responsibility Model and best practices for protecting the confidentiality of Federal Tax Information. View compliance documentation in MongoDB’s Customer Trust Portal.
FAQ
Does MongoDB comply with IRS Publication 1075?
There is no official certification or designation recognized by the IRS for compliance with Publication 1075. MongoDB protects covered information by aligning our implementation of ISO 27000, NIST 800-53, and FedRAMP security controls with IRS Publication 1075 requirements.
Can MongoDB be used to store and process Federal Tax Information (FTI)?
Yes, MongoDB Atlas for Government is designed to meet the security and compliance requirements for handling sensitive government data, including FTI. Customers remain responsible for implementing appropriate security controls to meet IRS Publication 1075 requirements.
Which MongoDB security controls align with IRS Publication 1075?
MongoDB aligns with ISO/IEC 27000, NIST 800-53, and FedRAMP security controls, which overlap with IRS Publication 1075 requirements. This includes encryption at rest and in transit, access controls, audit logging, and automated security policies.
What encryption methods does MongoDB provide for protecting FTI?
MongoDB Atlas for Government provides built-in encryption for data at rest and in transit, including TLS encryption for data in motion and encryption-at-rest using cloud provider-native Key Management Services (KMS). For additional security, MongoDB offers client-side encryption with Queryable Encryption and Client-Side Field Level Encryption (CSFLE).
Does MongoDB provide audit logging to support compliance with IRS Publication 1075?
Yes, MongoDB Atlas for Government provides detailed audit logging to track database access and modifications, helping organizations meet security and compliance requirements, including those outlined in IRS Publication 1075.
Can MongoDB be deployed in an IRS Pub 1075-compliant cloud environment?
Yes, MongoDB Atlas for Government is available in AWS GovCloud (US) and Google Cloud Assured Workloads US regions. These are both FedRAMP authorized environments that align with IRS Publication 1075 security requirements.
This page is for informational purposes only, and MongoDB does not intend the information or recommendations presented here to constitute legal advice. Each customer is responsible for independently evaluating its own particular use of MongoDB's services as appropriate to support its legal and compliance obligations.
Ready to get started?
Launch a new app or migrate to MongoDB Atlas with zero downtime