Analyst(s): Daniel Newman
Publication Date: June 10, 2025
Google Cloud expands its sovereign cloud portfolio with enhanced data control capabilities, new validation services, and in-region operational models. These additions aim to address growing customer concerns over data residency, regulatory compliance, and geopolitical risk, particularly in Europe.
What is Covered in this Article:
- Google expands Google Cloud Data Boundary to support granular data location and control.
- Launches User Data Shield with Mandiant to validate app security on sovereign infrastructure.
- Google Cloud Dedicated rolls out with Thales (France) and T-Systems (Germany) to meet national compliance requirements.
- Air-Gapped solution now authorized to manage classified US government data in fully isolated environments.
- New offerings directly address European concerns around sovereignty amid escalating transatlantic tensions.
The News: Google Cloud has introduced major enhancements to its sovereign cloud offerings, focused on delivering more stringent data location control, independent security validation, and national compliance support for enterprise customers. New capabilities include an upgraded Google Cloud Data Boundary, the launch of User Data Shield, and expanded Google Cloud Dedicated deployments with local operators in Europe.
The company also confirmed that Google Cloud Air-Gapped, designed for high-security environments, is now authorized to handle classified US government workloads. These updates come as geopolitical friction and EU regulatory scrutiny continue to intensify pressure on US hyperscalers to adapt to local data sovereignty expectations.
Google Expands Sovereign Cloud to Address EU Data Sovereignty Requirements
Analyst Take: Google’s latest updates to its sovereign cloud offering come at a time when European customers are increasingly focused on keeping their data within national borders and under local control. These moves show Google is trying to meet that demand by combining strong technical features with region-specific operational models. Instead of offering a one-size-fits-all solution, Google is building a flexible framework that can support both security and compliance across multiple jurisdictions.
Reinforced Data Boundary Empowers Customers
Google’s updated Cloud Data Boundary now allows customers to choose exactly where their data is stored and processed, even down to the country level. They can also hold onto their own encryption keys and decide who can access their data or block access entirely if needed. For users of Google Workspace, there’s an option to limit data handling to the US or EU and to use encryption that even Google can’t bypass. These features help customers meet strict regional data rules while still using Google’s powerful cloud tools, including AI, Confidential Computing, and External Key Management. The flexibility ensures organizations can stay compliant without giving up performance or reach.
Built-In Security Testing Raises Confidence
The new User Data Shield service adds an extra layer of security by regularly testing the applications built on Google’s sovereign cloud systems. Mandiant, a well-known cybersecurity firm, powers these tests. User Data Shield introduces recurring security testing capabilities to customer applications built on sovereign infrastructure, leveraging Mandiant’s frontline expertise. This allows businesses to prove to regulators and stakeholders that their systems remain secure and compliant over time. Rather than just setting up controls and hoping they hold, companies now have an active way to monitor and validate their data protection efforts, building long-term trust in Google’s platform.
Dedicated Partnerships Enhance Regional Alignment
Google’s ongoing execution of its Dedicated Cloud model, including its Trusted Cloud deployment with Thales via S3NS in France and its upcoming rollout with T-Systems in Germany, creates an operational structure that aligns directly with national standards such as France’s SecNumCloud. These deployments bring Google Cloud’s full capabilities – including GPU-based support for AI – to customers under local operational control. This approach ensures that data remains under national jurisdiction, a critical factor for regulated sectors in Europe, and positions Google as a cooperative partner rather than an external provider imposing foreign infrastructure standards.
Air-Gapped Architecture Addresses the Highest Sensitivity Needs
Google offers a fully air-gapped cloud environment for organizations handling the most sensitive information, such as defense and intelligence agencies. This means the systems can run without any connection to external networks, reducing the risk of data leaks. These environments can be operated by Google, its partners, or the customer, and they are already cleared to handle classified US government data. The offering is built on open tools but is designed for continuity even during disruptions, making it suitable for the most demanding use cases.
What to Watch:
- Adoption levels of Google Cloud Dedicated in France and Germany will indicate whether local partnerships are effective in building trust and meeting regulatory expectations.
- The reception and uptake of User Data Shield may influence how enterprise customers perceive Google’s ability to deliver verified, ongoing security for sovereign deployments.
- Expansion of Google Cloud Data Boundary could become a differentiator if more governments mandate country-specific data handling and storage requirements.
- Google’s air-gapped solution could attract new clients in defense and intelligence, but customer willingness to adopt such isolated environments will depend on usability and cost.
- Competitive responses from Microsoft, AWS, and local European providers may intensify, potentially pressuring Google to accelerate its rollout of sovereign solutions to other regions.
See the complete blog post on the sovereign cloud updates on the Google Cloud website
Disclosure: Futurum is a research and advisory firm that engages or has engaged in research, analysis, and advisory services with many technology companies, including those mentioned in this article. The author does not hold any equity positions with any company mentioned in this article.
Analysis and opinions expressed herein are specific to the analyst individually and data and other information that might have been provided for validation, not those of Futurum as a whole.
Other insights from Futurum:
Google Cloud Next 2025: The Yellow Brick Road to AI Transformation
At Google Cloud Next, Google Brings Its Databases to Bear on Agentic AI Opportunity
Build Your Own AI Infrastructure Using Google Cloud
Author Information
Daniel is the CEO of The Futurum Group. Living his life at the intersection of people and technology, Daniel works with the world’s largest technology brands exploring Digital Transformation and how it is influencing the enterprise.
From the leading edge of AI to global technology policy, Daniel makes the connections between business, people and tech that are required for companies to benefit most from their technology investments. Daniel is a top 5 globally ranked industry analyst and his ideas are regularly cited or shared in television appearances by CNBC, Bloomberg, Wall Street Journal and hundreds of other sites around the world.
A 7x Best-Selling Author including his most recent book “Human/Machine.” Daniel is also a Forbes and MarketWatch (Dow Jones) contributor.
An MBA and Former Graduate Adjunct Faculty, Daniel is an Austin Texas transplant after 40 years in Chicago. His speaking takes him around the world each year as he shares his vision of the role technology will play in our future.
