Sovereign Cloud from Google - Sovereignty Portfolio

Sovereign Cloud from Google is Google Cloud’s umbrella offering around digital sovereignty. Google groups several graduated options under it, ranging from controls inside the public cloud to fully separated operations.

What is Sovereign Cloud from Google?

On the official overview page, Google describes three benefits. First, complete control without compromising functionality: residency, access, and oversight settings can be configured to meet regional sovereign, security, and compliance needs. Second, engaging with independent regional operating partners for transparent operations, oversight, key management, and regional support. Third, going air-gapped with isolated operations, which enables fully disconnected operation while, according to Google, still integrating Google’s AI capabilities.

The page lists three building blocks. Google Cloud Data Boundary lets you customize data residency and access controls within the public cloud environment. Google Cloud Dedicated provides dedicated infrastructure with independent operations delivered by a local partner. Google Distributed Cloud brings Google Cloud to on-premises environments; it uses commercial hardware and Kubernetes and offers infrastructure, security, data, and AI services including Gemini. It is offered in two modes: the connected mode offers low latency and data residency by keeping data on-premises; the air-gapped mode isolates the system from the public internet, runs independently, and according to Google cannot be remotely shut down by Google.

In its security catalog, Google additionally lists Sovereign Controls by Partners as partner-operated sovereignty controls for Google Cloud.

Regarding availability in Germany, the overview page links under “What’s new” to a blog post titled “Thales and Google Cloud to offer a Sovereign Cloud in Germany” and a news item “Our first European Sovereign Cloud Hub is open”. A specific availability or GA date for Germany is not stated there, so such details should be clarified directly with Google Cloud.

Core Features

• Graduated options: Data Boundary, Dedicated, and Distributed Cloud cover sovereignty requirements of differing depth.
• Residency and access controls: Settings for data residency, access, and oversight according to regional needs.
• Independent operating partners: Local partners for operations, oversight, key management, and regional support.
• Air-gapped operation: Fully disconnected operation for classified data and workloads.
• AI capabilities: Google points to sovereign AI solutions with data residency and administrative access controls.

Typical Use Cases

Regulated industries with residency requirements

An organization in financial services or healthcare requires data residency in a specific region and selects one of the graduated options.

Public sector with oversight requirements

A public authority requires independent oversight of operations and key management processes and works with a local operating partner.

Classified workloads

For data that must not be connected to the public internet, the air-gapped mode of Google Distributed Cloud is a candidate.

Gradual approach to sovereignty goals

An organization starts with controls inside the public cloud and evaluates further-reaching options later.

AI workloads with sovereignty requirements

Google explicitly addresses sovereign AI solutions with data residency and administrative access controls over AI deployments.

Benefits

• One framework, several levels: Requirements can be matched precisely rather than uniformly.
• Regional partners: Independent oversight and regional support from local operators.
• Functionality preserved: Google emphasizes that sovereignty goals and use of current cloud services need not be mutually exclusive.
• Options up to air gap: Fully disconnected operation is covered as well.
• Built on Google Cloud: The options build on the Google Cloud platform.

Integration with innFactory

As a certified Google Cloud Partner, innFactory supports you on sovereignty questions in Google Cloud: classifying your regulatory requirements, selecting the right option, architecture and operating concepts, and coordination with operating partners. We describe the legal questions that arise for professionals bound by confidentiality obligations in our article on professional secrecy under section 203 of the German Criminal Code in the public cloud.

Contact us for a consultation on Sovereign Cloud from Google.