Scotti Woolery-Price | Partner Marketing Manager, Thales
More About This Author >
Scotti Woolery-Price | Partner Marketing Manager, Thales
More About This Author >
CipherTrust Data Security Platform as a Service (CDSPaaS) now available on Google Cloud Marketplace
As organizations accelerate AI and cloud adoption, many are finding that data sovereignty requirements can complicate modernization efforts. Without independent control over encryption keys, security and compliance teams are often forced to choose between cloud agility and governance.
Cloud-native key storage can introduce risk when the same provider that delivers cloud services also manages the encryption keys protecting sensitive data. For organizations with strict sovereignty, compliance, or internal governance requirements, that model can raise concerns about third-party access, jurisdictional exposure, and separation of duties. It can also make it harder to maintain consistent control across hybrid and multi-cloud environments.
Overcoming the Sovereignty Stalemate
For organizations operating across regions, clouds, and regulatory frameworks, these risks can quickly become barriers to modernization. Security teams remain concerned that storing keys with a cloud provider could expose sensitive data through government warrants issued without their knowledge or consent. Meanwhile, as hybrid and multi-cloud environments grow, fragmented key management can create operational silos and visibility gaps.
Thales is collaborating with Google Cloud to help organizations address these challenges by enabling stronger separation of control over encryption keys and cloud infrastructure. Thales is recognized by Google Cloud for supporting External Key Management (EKM), Workspace Client-side Encryption (CSE), and Identity and Access Management (IAM) use cases.
True Hold Your Own Key (HYOK) Control
Thales CipherTrust Data Security Platform as a Service (CDSPaaS) is now available on Google Cloud Marketplace, allowing organizations to easily adopt cloud services while maintaining independent control over encryption keys.
Availability through Google Cloud Marketplace can also simplify procurement and deployment for customers already investing in Google Cloud. It gives organizations a more direct path to evaluate and adopt independent key control as part of their existing cloud strategy.
By leveraging Thales external key management, organizations can help ensure their encryption keys:
- Remain outside Google Cloud infrastructure to reduce third-party access and jurisdictional risk.
- Are backed by FIPS 140-2 Level 3 certified Luna Cloud HSM root of trust.
- Do not permanently reside on Google Cloud servers, while still supporting strong access control policies.
“Bringing CDSPaaS from Thales to Google Cloud Marketplace will help customers quickly deploy, manage, and grow the solution on Google Cloud’s trusted, global infrastructure,” said Dai Vu, Managing Director, Marketplace & ISV GTM Programs at Google Cloud. “Thales can securely scale and support customers using CDSPaaS to help them maintain independent control over encryption keys and meet sovereignty requirements as they adopt cloud services.”
Operational Simplicity at Cloud Scale
Security and compliance controls should not slow cloud adoption. Through native interoperability with Google Cloud EKM APIs, the Thales solution supports secure, low latency access to Google Cloud services such as BigQuery, GoogleCompute Engine, and Gemini Enterprise Agent Platform.
A recent third-party analysis found that organizations using CipherTrust Data Security Platform reported measurable benefits, including:
- 221% ROI over three years
- 70% less time spent on encryption and key management tasks
- Centralized management that can help automate compliance and simplify audits
Built on a Strong Partnership
Thales has been recognized by Google Cloud as a Technology Partner of the Year for Security in 2024, and for Sovereign Cloud in 2026. This collaboration helps organizations protect sensitive data while confidently expanding their use of Google Cloud’s analytics and AI capabilities.
Ready to Strengthen Your Digital Sovereignty?
For organizations navigating sovereignty, compliance, and cloud transformation at the same time, independent key control can be an important foundation for moving forward with confidence.
Explore Thales CipherTrust Data Security Platform as a Service on Google Cloud Marketplace and see how independent key control can help you meet sovereignty requirements while moving cloud and AI initiatives forward with added peace of mind.