Sovereign Controls by Partners
Meet digital sovereignty requirements with partner-operated sovereignty controls for Google Cloud.
-
Enforce data residency
-
Protect data from external access
-
Add local supervision of cloud controls
Benefits
Combine innovation with control
You don’t have to choose between meeting sovereignty objectives and using the latest, most innovative cloud services.
Get assurance from a trusted third party
Trusted partners provide independent oversight and safeguards over platform controls.
Simplify meeting sovereignty requirements
Consistently apply controls for workloads with sovereignty requirements with just a few clicks.
Key features
Key features
Data residency controls
Customer data will be stored at rest in specific Google Cloud regions and restricted from moving outside of the specified regions.
External encryption key management
Encryption keys are stored and managed by partners outside of Google’s infrastructure.
Decrypting customer data requires a call outside of Google for the customer’s externally managed key.
Customers can expect every request to come with a justification and block requests programmatically for any reason.
Sovereign Controls support
Technical support access is limited by underlying data access controls and routed to persons meeting specific criteria.
Access transparency and access approval
Administrative access to customer data and workloads is logged, audited, and permitted only under predefined conditions.
Documentation
Documentation for Sovereign Controls by Partners
Creating a partner-managed folder
Guides you through setting up a new folder for resources in Sovereign Controls by Partners environments.
Configure partner-managed Cloud KMS
Covers the steps to use Cloud KMS in Sovereign Controls by Partners environments.
Supported products
See the list of Google Cloud products and services that are currently supported in Sovereign Controls by Partners.
Pricing
Pricing
Contact our partners for pricing information.