Scope of Sovereign Controls by Partners Solutions
Last modified: March 27, 2023
As further described in the Services Summary, Sovereign Controls by Partners (also known as “Sovereign Controls by Sovereign Partners”) are solutions offered by Google that are complemented by a set of services offered by third party partners (“Sovereign Controls Partners”); together these create additional controls for certain Google Services and allow the partner to provide additional security measures.
In-scope Google Cloud Controls
The Google controls included in Sovereign Controls by Partners solutions are:
- Access Transparency
- Cloud External Key Manager (Cloud EKM)
- Key Access Justifications (KAJ)
Certain Organization policy constraints will also be applied, as further detailed in the Documentation.
Supported Google Cloud Services
The controls above are currently compatible with the following Google products and services:
- BigQuery (Preview)
- Cloud DNS
- Cloud External Key Manager (Cloud EKM)
- Cloud Key Management Service
- Cloud HSM
- Cloud Interconnect
- Cloud Load Balancing
- Cloud Logging
- Cloud NAT (Network Address Translation)
- Cloud Router
- Cloud SQL
- Cloud Storage
- Cloud VPN
- Compute Engine
- Google Cloud Identity-Aware Proxy
- Google Kubernetes Engine
- Identity & Access Management (IAM)
- Network Connectivity Center
- Persistent Disk
- Pub/Sub
- Service Directory
- Virtual Private Cloud
- VPC Service Controls
Services in Preview are subject to Section 5 (Pre-GA Offerings Terms) of the General Service Terms of our Service Specific Terms (and applicable rules in your contract regarding Preview releases).
Sovereign Controls Partners
Sovereign Controls by Partners are complemented by a set of services, offered by, and under separate terms of service with, the following third party partners:
- T-Systems International GmbH (“T-Systems”), who offers “Sovereign Controls by T-Systems”
- Thales Cloud Sécurisé (“S3NS”), who offers “Local Controls by S3NS”