Source URL: https://cloud.google.com/blog/products/identity-security/google-cloud-expands-services-in-saudi-arabia-delivering-enhanced-data-sovereignty-and-ai-capabilities/
Source: Cloud Blog
Title: Google Cloud expands services in Saudi Arabia, delivering enhanced data sovereignty and AI capabilities
Feedly Summary: Building on the launch of the Google Cloud region in the Kingdom of Saudi Arabia (KSA) in November 2023, we are excited to announce new data sovereignty, security, and AI capabilities for the Dammam region. These new offerings can help support the digital transformation journeys of organizations operating in Saudi Arabia that need to meet certain regulatory requirements, including multinational enterprises operating in the Kingdom.
Sovereign Controls by CNTXT
Google Cloud is committed to working with local, trusted partners to help our customers meet digital sovereignty requirements. In Saudi Arabia, Google Cloud has partnered with CNTXT to offer Sovereign Controls by CNTXT which is now generally available. This offering, provided through Assured Workloads, is built on Google Cloud’s Class C-certified infrastructure and adds additional CNTXT-operated controls to help organizations meet more stringent data sovereignty requirements. With this offering, CNTXT augments Google Cloud by offering a managed External Key Management (EKM) with Key Access Justifications (KAJ) service as well as localized support.
EKM with KAJ encrypts customer data at rest with keys stored outside Google Cloud’s infrastructure. It requires detailed justifications each time access to keys is required, offering customers the ability to deny access for any reason, including extraterritorial data requests. In this offering, CNTXT operates the external key manager in partnership with Saudi Information Technology Company (SITE) and Fortanix and configures and enforces key access policies on behalf of customers. With localized support, CNTXT ensures that support personnel for Google Cloud are Saudi-based.
CNTXT online portal
CNTXT has launched a new portal designed to streamline the procurement process for customers in the region, allowing a broad range of users to harness the power of Google Cloud’s advanced technologies. From the portal, users can easily:
Browse and purchase Google Cloud services: The portal provides a comprehensive overview of Google Cloud services available in Saudi Arabia, along with pricing information and easy-to-follow purchase options.
Manage their accounts: Users can view their account details, billing information, and service usage data, all in one place.
Get support: The portal offers access to a variety of support resources, including documentation, FAQs, and a contact form for direct assistance.
You can access the portal here.
“We’re excited to work with Google Cloud to help customers in Saudi Arabia drive their digital transformation with strong security and regulatory assurance,” said CNTXT CEO Abdullah Jarwan. “Together with Google Cloud, we are bringing unparalleled sovereign capabilities to the Google Cloud Dammam region that will benefit our public and private sector customers. This partnership and services embody our commitment to fostering technological innovation and supporting the Kingdom’s Vision 2030 by empowering individuals and small businesses with the tools they need to succeed in a digital economy.”
Google Cloud Sovereign Controls for KSA
For organizations that do not need the additional assurance of a local partner, Google Cloud’s Sovereign Controls for KSA is a new control package, transacted directly with Google, that can help non-Saudi domiciled organizations deploy cloud-based applications and services in the region while adhering to local regulations and industry standards. It allows organizations to easily configure core controls such as data residency at-rest, in use and in-transit for Google Cloud services, provides monitoring of the controlled environment for compliance violations, enables administrative access transparency and approval, and optionally supports customer-managed encryption.
“Google Cloud Sovereign Controls for KSA will allow our regional customers to use the full power of the Snowflake Data Cloud to solve unique business problems while meeting local regulatory requirements." – Kunal Kapoor, Director Product Management, Snowflake
Vertex AI expansion
Google Cloud has also expanded the availability of its Vertex AI platform in Saudi Arabia, with core offerings that went live in the Dammam cloud region in May 2024. Vertex AI lets businesses harness the power of machine learning and AI to drive innovation, optimize operations, and enhance customer experiences.
Take the next step
With the introduction of these new services and capabilities, Google Cloud reaffirms its commitment to supporting the digital transformation goals of Saudi Arabia. By providing a comprehensive suite of cloud solutions tailored to the unique needs of the Kingdom, Google Cloud is empowering organizations to innovate, grow, and thrive in the digital age.
AI Summary and Description: Yes
Summary: The announcement regarding Google Cloud’s new data sovereignty and AI capabilities in Saudi Arabia highlights the partnership with CNTXT to offer localized security controls and the introduction of the Sovereign Controls package, which facilitates compliance with regulatory requirements. This move demonstrates Google Cloud’s commitment to enhancing digital transformation and infrastructure security in the region, aligning with the broader goals of the Kingdom’s Vision 2030.
Detailed Description:
Google Cloud’s expansion into the Kingdom of Saudi Arabia (KSA) through the launch of new data sovereignty, security, and AI capabilities in the Dammam region is a strategic initiative that addresses both regulatory compliance and enhanced security needs for organizations operating in the country. Here are the key points from the announcement:
– **Strategic Partnership with CNTXT**:
– Google Cloud has partnered with CNTXT to offer the Sovereign Controls service, which ensures compliance with stringent data sovereignty regulations. CNTXT operates external controls and key management services, allowing organizations to better manage their data security.
– **Sovereign Controls by CNTXT**:
– This involves additional managed services that include External Key Management (EKM) integrated with Key Access Justifications (KAJ).
– Customer data is encrypted at rest with keys stored outside of Google’s infrastructure, enhancing control over data access and meeting local regulations.
– This service provides a mechanism for denying key access based on extraterritorial data requests, which is crucial for regulatory compliance.
– **Localized Support**:
– CNTXT provides localized support for Google Cloud users, ensuring that all support personnel are based in Saudi Arabia, facilitating better communication and assistance.
– **CNTXT Online Portal**:
– A new portal allows customers to browse, purchase, and manage Google Cloud services effectively.
– It enhances usability by centralizing account management and support resources.
– **Google Cloud Sovereign Controls for KSA**:
– Offered directly through Google Cloud, this control package helps organizations comply with local regulations without the need for a local partner.
– Key capabilities include data residency configurations, compliance monitoring, and options for customer-managed encryption.
– **Expansion of Vertex AI**:
– Google Cloud also expanded its Vertex AI offerings in the Dammam region, enabling organizations to utilize AI and machine learning technologies to improve operations and customer experiences.
– **Commitment to Digital Transformation**:
– This announcement aligns with the Kingdom’s Vision 2030 by supporting technological innovation and empowering local businesses with advanced cloud capabilities.
This development is significant for security and compliance professionals, as it reflects a growing emphasis on data sovereignty and localized control in cloud offerings, particularly in regions with strict regulatory environments. Organizations in Saudi Arabia can now leverage enhanced security measures while achieving regulatory compliance, promoting a more secure cloud computing landscape.