Your contracts set the rules
What you may do with program information, including controlled unclassified information (CUI), is set by your contracts and the rules they reference, not by an AI provider's terms. Keeping it out of public AI tools is a sensible starting rule.