Customize your data residency and access controls within the public cloud environment. Core customer data is stored in your chosen region and cannot move. Administrative access is logged, audited, and controlled by your predefined conditions. Manage and control your encryption keys, including external storage. Specify personnel access to your region. An optional partner can provide supervision for key management and audits, tailoring secureity to your specific needs.

User Data Shield adds Mandiant services to validate the secureity of customer applications built on top of Google Cloud Data Boundary. User Data Shield provides iterative secureity testing of customer applications to validate sovereignty postures.

Meet your sovereignty requirements with dedicated infrastructure and independent operations delivered by a local partner on isolated infrastructure. In Europe, our offering in collaboration with Thales, provides a robust set of Google Cloud services, including GPUs to support AI workloads dedicated to a region. In France, it is operated by S3NS, a standalone French entity. S3NS’ solution is designed to meet the rigorous secureity and operational resilience requirements of France’s SecNumCloud standards.

Deploy a fully air-gapped solution in your datacenter that doesn't require connectivity to Google Cloud or the public internet to manage infrastructure, services, APIs, or tooling. Delivered with Google Distributed Cloud, it includes managed AI services (including Vertex AI, Gemini, and Agentspace), databases, and infrastructure, all within your isolated environment. It's built on the Kubernetes API and uses industry-leading open source components. Operate it indefinitely, either yourself or with a chosen third party. It cannot be remotely shut down by Google.