Scope of Sovereign Controls by Partners Solutions

Last modified: May 23, 2024

As further described in the Services Summary, Sovereign Controls by Partners (also known as “Sovereign Controls by Sovereign Partners”) are solutions offered by Google that are complemented by a set of services offered by third party partners (“Sovereign Controls Partners”); together these create additional controls for certain Google Services and allow the partner to provide additional security measures.

In-scope Google Cloud Controls

The Google controls included in Sovereign Controls by Partners solutions are:

  • Access Transparency
  • Cloud External Key Manager (Cloud EKM)
  • Key Access Justifications (KAJ)

Certain Organization policy constraints will also be applied, as further detailed in the Documentation.

Supported Google Cloud Services

The controls above are currently compatible with the following Google products and services:

  • Artifact Registry
  • BigQuery
  • Cloud Bigtable
  • Cloud Composer
  • Cloud DNS
  • Cloud External Key Manager (Cloud EKM)
  • Cloud Key Management Service
  • Cloud HSM
  • Cloud Interconnect
  • Cloud Load Balancing
  • Cloud Logging
  • Cloud NAT (Network Address Translation)
  • Cloud Router
  • Cloud Spanner
  • Cloud SQL
  • Cloud Storage
  • Cloud VPN
  • Compute Engine
  • Dataflow
  • Dataproc
  • Google Cloud Identity-Aware Proxy
  • Google Kubernetes Engine
  • Identity & Access Management (IAM)
  • Network Connectivity Center
  • Persistent Disk 
  • Pub/Sub
  • Service Directory
  • Virtual Private Cloud
  • VPC Service Controls

Services in Preview are subject to Section 5 (Pre-GA Offerings Terms) of the General Service Terms of our Service Specific Terms (and applicable rules in your contract regarding Preview releases).

Sovereign Controls Partners

Sovereign Controls by Partners are complemented by a set of services, offered by, and under separate terms of service with, the following third party partners:

  • T-Systems International GmbH (“T-Systems”), who offers “Sovereign Controls by T-Systems”
  • Thales Cloud Sécurisé (“S3NS”), who offers “Local Controls by S3NS”
  • Indra Soluciones Tecnologías de la Información, S.L.U. (“Indra”) who offers “Sovereign Controls by SIA/Minsait”