Scope of Sovereign Controls by Partners Solutions

Last modified: August 3, 2023

As further described in the Services Summary, Sovereign Controls by Partners (also known as “Sovereign Controls by Sovereign Partners”) are solutions offered by Google that are complemented by a set of services offered by third party partners (“Sovereign Controls Partners”); together these create additional controls for certain Google Services and allow the partner to provide additional security measures.

In-scope Google Cloud Controls

The Google controls included in Sovereign Controls by Partners solutions are:

Access Transparency
Cloud External Key Manager (Cloud EKM)
Key Access Justifications (KAJ)

Certain Organization policy constraints will also be applied, as further detailed in the Documentation.

Supported Google Cloud Services

The controls above are currently compatible with the following Google products and services:

Artifact Registry
BigQuery
Cloud Bigtable
Cloud Composer
Cloud DNS
Cloud External Key Manager (Cloud EKM)
Cloud Key Management Service
Cloud HSM
Cloud Interconnect
Cloud Load Balancing
Cloud Logging
Cloud NAT (Network Address Translation)
Cloud Router
Cloud Spanner
Cloud SQL
Cloud Storage
Cloud VPN
Compute Engine
Dataflow
Dataproc
Google Cloud Identity-Aware Proxy
Google Kubernetes Engine
Identity & Access Management (IAM)
Network Connectivity Center
Persistent Disk
Pub/Sub
Service Directory
Virtual Private Cloud
VPC Service Controls

Services in Preview are subject to Section 5 (Pre-GA Offerings Terms) of the General Service Terms of our Service Specific Terms (and applicable rules in your contract regarding Preview releases).

Sovereign Controls Partners

Sovereign Controls by Partners are complemented by a set of services, offered by, and under separate terms of service with, the following third party partners:

T-Systems International GmbH (“T-Systems”), who offers “Sovereign Controls by T-Systems”
Thales Cloud Sécurisé (“S3NS”), who offers “Local Controls by S3NS”