In discussions with leaders from various sectors in Germany and Europe, a recurring question emerges: How can cutting-edge innovations coexist with reliable data and system control? The Federal Office for Information Security (BSI) has introduced the C3A Framework, a significant guide for evaluating cloud offerings in Germany.
The C3A criteria catalog was developed by the BSI in collaboration with national and international cloud providers, incorporating practical insights into a framework for sovereign cloud usage in Germany. Google Cloud has worked closely with the BSI to ensure that its products meet the highest security standards.
The introduction of the C3A Framework reaffirms Google Cloud's strategy, which has been focused on offering "Cloud under European conditions" since 2020, tailored to the sovereignty requirements of the European market, particularly Germany. The portfolio has evolved continuously, incorporating features like external encryption and dedicated local cloud regions.
Portfolio for Diverse Sovereignty Requirements
Google Cloud aims to provide digital sovereignty, choice, and security in the cloud for its customers. This approach is detailed in their publication, "Creating a Secure, Open, and Sovereign Digital World." The company does not endorse a one-size-fits-all solution; instead, it emphasizes freedom of choice in digital sovereignty. This is achieved by combining modern AI capabilities with a flexible infrastructure and close collaboration with local partners.
The Sovereign Cloud portfolio includes various control and security levels based on data and customer preferences:
- Data Boundary: Ensures customer data remains within clearly defined geographical boundaries in Germany, operated by EU personnel and compliant with European regulations.
- Google Cloud Dedicated: Offers enhanced separation for highly regulated sectors and public services, fully operated by a local partner.
- Google Distributed Cloud: Designed for environments with the strictest isolation requirements.
- Sovereign Workspace by StackIT: A SaaS solution for productivity and collaboration, featuring local data backups and client-side encryption to support interoperability and business continuity.
All solutions are developed in partnership with German entities such as the Schwarz Group and T-Systems. The portfolio aligns with the BSI's C3A criteria, integrating them directly into the products. A sovereign digital future necessitates choice—the ability to utilize the best tools without being tied to a single provider. Many Google solutions, including Android, Chrome, Kubernetes, and Gemma, leverage open technologies, providing developers, businesses, and public authorities with versatile tools.
Google Cloud looks forward to collaborating with customers in Germany to develop sovereign cloud solutions based on the BSI C3A Framework.
