They have sequestered environmentd for that, check out Fedramp. They basically have their own DC and security requirements met. Every cloud provider has a fedramp version of services. Even the CIA uses this. Cost-benefit analysis wins.