The local partner maintains exclusive control over security-critical systems, identity management, authentication, and all cryptographic roots of trust. Local operators build all components directly from source and manage deployment into production.

Strictly controls communication between Google and the Google Cloud Dedicated. The Boundary Proxy restricts data flow by enforcing partner review and approval on payloads entering and leaving. This prevents leakage of sensitive information and avoids deployment of unauthorized updates.

Google Cloud Dedicated ensures that all operations—from physical security and hardware maintenance to cloud administration and technical support—are handled exclusively by vetted local experts hired under local jurisdiction. Standard Google operators have no direct access.

The local partner maintains control over all universe infrastructure and operations. They combine the security critical systems’ logs with Google Dedicated Cloud logs to create a comprehensive view of the sovereign infrastructure. The platform provides continuous monitoring for anomalies, ensuring defense-in-depth. This helps ensure that operations can be independently verified and managed by a local entity.