It’s important to understand how sovereign cloud can help address your data privacy, national security, and regulatory requirements—sovereign cloud can help meet stringent requirements and protect the world’s most sensitive data. Oracle Cloud Infrastructure (OCI) delivers sovereign cloud solutions designed to help address requirements for location, access, data residency, and operational controls while reducing political uncertainty. With our distributed cloud portfolio, OCI offers multiple cloud deployment options that support commercial organizations as well as governments and their defense missions globally to help address their sovereignty needs.
Oracle sovereign cloud solutions
OCI’s distributed cloud environments are full hyperscale clouds that offer the same capabilities and set of 150+ services at the same low rate card across deployments. Additionally, these cloud environments are built using the same technology, so as OCI adds new services and capabilities to our public cloud, we can add them to our sovereign cloud solutions, bringing the cloud innovation pipeline to the world’s most secure environments.
Whether it’s to help ensure data privacy or safeguard national security interests, a sovereign cloud environment helps protect and maintain mission integrity and facilitates continuity of operations. As shown in the following images, OCI’s sovereign cloud solutions can be tailored to help address governance and country-specific requirements through multiple layers of control.
Data sovereignty
OCI’s distributed cloud environments help ensure data and customer-generated metadata remains within a country and geographic region to help meet legal and regulatory requirements. Oracle cloud regions are built with integrated security within the infrastructure and includes many security services for free. OCI can help your organization adopt a zero trust security model, which includes secure and reliable isolated networks, encryption by default, in depth access controls, and more. Please refer to the blog, Oracle sovereign cloud solutions: Choose where your data is located, for a detailed look at data sovereignty.
Operational sovereignty
Many organizations and governments have sovereignty requirements that specify required physical location, citizenship, and security clearances for operations personnel. Besides the global team of highly trained cloud engineers, Oracle offers 24/7 sovereign operations teams in the US, EU, UK, and Japan—with more on the way. These local operations teams are made up of personnel to help fulfill your unique sovereignty requirements. Please refer to the blog, Oracle sovereign cloud solutions: Implement more personnel requirements, for a deeper dive into our cloud deployment models and their operations models.
Technological sovereignty
OCI’s distributed cloud environments offer localized cloud infrastructure so organizations and government entities can build resilient and independent digital ecosystems. Each cloud realm—a collection of interconnected cloud regions that are physically and logically separated from each other—has its own control plane and operates independent of the OCI public commercial cloud. A cloud realm’s network isolation helps ensure your data stays within the confines of the physical environment that you selected when determining your cloud deployment model. In other words, OCI separates regions geographically and through physical and logical networks to help ensure data does not extend beyond the cloud realm, as shown in the following image. Please refer to the blog, Oracle sovereign cloud solutions: Using realms for enhanced cloud isolation, for more detail.
Global expertise
Public and private sector organizations can leverage Oracle’s global expertise in sovereign and disconnected cloud environments to run sensitive, mission-critical workloads. Here are some examples of Oracle’s distributed cloud environments available today to help you meet your sovereignty needs:
- Oracle EU Sovereign Cloud: These regions are located entirely within the European Union (EU), specifically in Frankfurt and Madrid, and are operated by new, EU-based sovereign legal entities that own the hardware and data center leases, providing operations and support by EU residents only.
- Oracle US Defense Cloud: These regions are accredited at Department of Defense (DoD) Impact Level (IL) 5, with connections to Defense Information Systems Agency (DISA) Boundary Cloud Access Points (BCAP) and the Defense Research and Engineering Network (DREN).
- Oracle US Government Cloud: Authorized at Federal Risk and Authorization Management Program (FedRAMP) High and DISA IL2 & IL4, Oracle US Government Cloud is operated by US citizens on US soil and it’s built for US federal civilian, state, and local agencies—and the companies that serve them—to help protect unclassified data.
- Oracle National Security Regions: US air-gapped regions support classified workloads for the US Defense Department and Intelligence Community at the Top Secret and Secret levels. These regions are operated by security-cleared engineers and are accredited to meet DISA IL6 and Intelligence Community Directive (ICD) 503 requirements.
- Oracle Cloud for UK Government and Defence: A dedicated, dual-region cloud operated by UK citizens on UK soil to enable OFFICIAL SENSITIVE workloads.
- Oracle Cloud for Australian Government and Defence: Isolated from other hyperscale commercial Oracle Cloud regions, the region is certified for Information Security Registered Assessors Program (IRAP) at PROTECTED level and for Hosting Certification Framework (HCF) at Certified Strategic level.
- Oracle Dedicated Region: This unique architecture enables you to deploy an Oracle Cloud region in your own data center to address digital sovereignty, security, and performance requirements for sensitive workloads.
- Oracle Alloy: The Alloy cloud model offers a complete cloud infrastructure platform that gives partners the ability to fulfill regulatory and sovereignty requirements. Oracle Alloy regions in Italy and Japan currently are operated by sovereign teams.
Sovereignty with all the capabilities of public cloud is possible
Whether it’s helping to ensure a country’s data boundaries are maintained while operating a cloud, or supporting secure collaboration for intelligence information, OCI’s sovereign cloud solutions continue to empower customers to run their missions effectively. Commercial organizations and government agencies should consider the benefits of an Oracle cloud environment for data sovereignty, security, and compliance for a resilient, innovative IT structure.
For more information, reach out to your Oracle sales representative, or try out our sovereign cloud solutions navigator to see what sovereign cloud solution fits your needs.