Agentforce 360 hits IL5 — read what shipped

When AI agents clear the bar for sensitive government data, the interesting question isn't whether the compliance paperwork went through. It's what they were actually pointed at. On August 5, Salesforce announced that Agentforce 360 has received IL5 authorization and is now embedded in its Missionforce National Security platform — the AI agent stack cleared to handle Controlled Unclassified Information and unclassified national security systems data for the Department of War. The deployed workload list is the part small-business operators should read.

What actually happened

IL5 is the Defense Department's authorization tier for Controlled Unclassified Information and unclassified national security data. Clearing it means the agents, the data handling, and the audit trail all passed review — a materially higher bar than a standard SaaS security questionnaire.

So what got built on top of it, per Salesforce's announcement? Logistics and supply chain operations. Army Human Resources Command handling soldier and military family support. Personnel management across Intelligence Community agencies. Aircraft maintenance tracking for the Air Force — where Salesforce cites that 74% of U.S. Air Force aircraft missed depot maintenance deadlines.

Case management. Records. Scheduling. Parts tracking. Nobody deployed an agent that decides anything. Missionforce CEO Kendall Collins led with the word that gives it away: "Trust is the foundation of every successful mission."

Why this matters for your business

The most heavily scrutinized agentic AI deployment in the U.S. government is back-office paperwork with a human at the end of it. That's not a criticism — it's the tell.

Look at what those four workloads have in common. Each is high volume. Each has a clear, checkable right answer. Each was already drowning in queue time before anyone said "AI." And in each, the agent drafts, summarizes, routes, or tracks — a person still signs. That's the shape of automation that survives an audit, and it's the same shape that survives contact with your customers.

Compare it to how the pitch usually arrives at a 20-person company: an agent that handles the whole sales conversation, or runs procurement end to end. The Air Force didn't do that with a $5.6 billion contract and a review board. Your maintenance schedule and your inbox aren't more forgiving than theirs.

The second takeaway is about evidence. IL5 is achievable for agentic systems, which means "AI agents can't be used in regulated work" stopped being true. Expect that to flow downhill — into your enterprise customers' vendor questionnaires, then into yours. The requirement won't be "do you use AI." It'll be: which agent, acting for whom, touched which record, and can you produce the log. Build that logging now, while it's a design decision rather than a retrofit under deadline.

And the honest caveat: this is an authorization and a set of deployments announced by the vendor selling the platform. Published outcome numbers — cases cleared, deadlines recovered — aren't in it yet. Judge it when they are.

Sources: Salesforce Investor Relations, SC Media.