Meet digital sovereignty requirements with partner-operated sovereignty controls for Google Cloud.
Enforce data residency
Protect data from external access
Add local supervision of cloud controls
Benefits
Combine innovation with control
You don’t have to choose between meeting sovereignty objectives and using the latest, most innovative cloud services.
Get assurance from a trusted third party
Trusted partners provide independent oversight and safeguards over platform controls.
Simplify meeting sovereignty requirements
Consistently apply controls for workloads with sovereignty requirements with just a few clicks.
Key features
Customer data will be stored at rest in specific Google Cloud regions and restricted from moving outside of the specified regions.
Encryption keys are stored and managed by partners outside of Google’s infrastructure.
Decrypting customer data requires a call outside of Google for the customer’s externally managed key.
Customers can expect every request to come with a justification and block requests programmatically for any reason.
Technical support access is limited by underlying data access controls and routed to persons meeting specific criteria.
Administrative access to customer data and workloads is logged, audited, and permitted only under predefined conditions.
Documentation
Guides you through setting up a new folder for resources in Sovereign Controls by Partners environments.
Covers the steps to use Cloud KMS in Sovereign Controls by Partners environments.
See the list of Google Cloud products and services that are currently supported in Sovereign Controls by Partners.
Pricing
Contact our partners for pricing information.
Start building on Google Cloud with $300 in free credits and 20+ always free products.