The news
Salesforce (CRM) said on August 5, 2026, that the Department of War can now deploy its AI agents after Agentforce 360 won Impact Level 5 (IL5) authorization. The Agentforce IL5 authorization covers its AI agents, data tools and apps on the Missionforce National Security platform.
IL5 is a Defense Department cloud security level. DefenseScoop described it as the highest authorization for environments that store and process controlled unclassified information (CUI) and unclassified national security systems data. Neither Salesforce's release nor the DefenseScoop report named the office that granted the authorization.
Salesforce said the agents could help with defense logistics, recruit onboarding and training, administrative work for military families, and turning data into command insights. In one example, it described an agent that checks readiness logs against supply inventories, spots a parts shortage and triggers a procurement order for human review. The package includes Data 360 and Tableau Next, but the IL5 authorization excludes Slack; GovSlack is authorized at IL4.
The same day, Salesforce said U.S. Army Human Resources Command would be the first Department of War organization to deploy the newly authorized Agentforce. It said the agents will support 9.2 million soldiers, veterans and military families, projected more than 55 million agent conversations a month at full scale and $6 million in annual savings, and said specialists keep decision-making authority on complex benefits matters.
Senior Salesforce officials, in response to reporters' questions, suggested that the company had to attest to the Pentagon that generative AI models and capabilities supplied by Anthropic were disabled in order to achieve IL5, DefenseScoop reported; outside that constraint, they said, the platform is model-agnostic. Kendall Collins, CEO of Missionforce and Government Cloud, told the outlet that Salesforce was the first commercial software company to bring an agentic platform that has been productive on the commercial side into the national security environment.
Salesforce also said Missionforce National Security is expanding across the intelligence community, with a model that lets teams build in unclassified environments and deploy to the Top Secret Network.
The numbers
- Authorization level
- Impact Level 5 (IL5)
- GovSlack authorization level (Slack excluded from IL5)
- IL4
- People Army HRC agents will support (company figure)
- 9.2 million
- Agent conversations per month, projected at full scale
- More than 55 million
- Cases per day expected for automated summarization
- More than 1,500
- Projected annual savings at Army HRC (company figure)
- $6 million
Why CEOs should care
CISOs in regulated industries should read the Anthropic detail closely. According to DefenseScoop, Salesforce officials suggested the authorization depended on a configuration with one supplier's models switched off; Salesforce's IL5 release does not mention it. Any enterprise buying agents should ask which models power them, whether the customer can choose or disable models, and how the vendor will notify it when the model mix changes. An accreditation earned by one configuration does not automatically cover another.
Buyers in defense and government contracting should plan around the gaps. Slack is outside the IL5 authorization and GovSlack is authorized at IL4, so collaboration and agent workflows may live at different security levels, which affects how data moves between them. Salesforce's own examples keep a person in the loop, from procurement orders sent for human review to benefits cases routed to specialists, so budget for that review time rather than assuming full automation.
CFOs and boards should treat the Army figures as projections: 55 million monthly conversations is a full-scale estimate and $6 million is projected savings. Ask for the baseline behind any similar vendor claim, and for the date by which the vendor expects to reach full scale.
The bigger picture
The authorization extends a public-sector push. In January 2026 the Army gave Salesforce a 10-year contract with a $5.6 billion ceiling, which the company said is not a guaranteed purchase amount, and on July 24, 2026, Salesforce said the Department of Veterans Affairs had awarded it an agentic AI license with a $1.6 billion ceiling. Futurum analyst Keith Kirkpatrick described the IL5 security clearance as a competitive moat and a signal to regulated sectors such as financial services and health care.
The Anthropic detail also points to how model supply chains can bear on government accreditation. Salesforce officials said the platform is model-agnostic, and their remarks, as DefenseScoop reported them, suggest that in Salesforce's case the model provider underneath mattered to whether the platform cleared IL5.
What happened next
On August 26, 2026, Salesforce reported fiscal second-quarter revenue of $11.3 billion, up 11%, and said Agentforce annual recurring revenue exceeded $1.5 billion. Watch for the Army Human Resources Command rollout to reach the full scale Salesforce projected, for any change in which AI models run inside the IL5 environment, and for progress on the Top Secret Network work the company described.
What “Fact-checked” means
Fact-checking means testing a story’s facts against the evidence before it is published. This story went through at least two separate checks before this version was published.
- What we checked
- Its names, figures, dates, job titles, quotes and who said what were checked against the story’s sources, including its main source where it could be opened. The headline was checked for accuracy and overstatement.
- How
- A first check reviewed the whole story. If it passed, a second, skeptical check went back to the sources to look for mistakes in the most important facts. If a check flagged the story, it was edited to fix the problems found, and a separate re-check then reviewed the whole story again.
- Who
- The checks are made with our newsroom’s technology tools, as steps kept separate from the writing, under rules set by our editor, Hussein Mukhtar. A story the checks still flag is not published automatically; it is held for the editor, who decides whether it is fixed, published or dropped.
- Archive story
- It was written after the event. Its dates were checked against the date of the event, including the dates of any later developments it reports.
- If something is wrong
- “Fact-checked” does not mean error-free. If a material error is found after publication, we correct the story and add a note saying what changed. Report an error
Companies in this story
