Google and BSI Collaborate on Secure Cloud Solutions for Public Sector

Google has entered into a strategic partnership with the Federal Office for Information Security (BSI) aimed at developing secure and sovereign cloud solutions tailored for government entities at federal, state, and municipal levels. This collaboration emphasizes the importance of ensuring data sovereignty, with the objective of creating solutions that adhere to the stringent requirements of the public sector while complying with German and European data protection regulations.

The agreement encompasses Google's complete cloud portfolio, which includes artificial intelligence applications and associated support services. At the core of this collaboration will be a newly established cooperation forum, led by Thomas Caspers, the new BSI Vice-President, and Wieland Holfelder, Vice-President of Google Cloud Germany. This forum will act as the main coordination point and contact for all matters related to the partnership, addressing key issues such as systematic security monitoring, rapid responses to potential security incidents, and the joint development of technical standards and certifications.

Both partners have committed to advancing post-quantum cryptography and leveraging elliptic curves for encryption, recognizing these technologies as critical for the long-term protection of sensitive data, especially in light of the challenges posed by future quantum computing capabilities. The agreement also includes provisions for regular assessments of security vulnerabilities and the provision of essential security documentation. Google has pledged to keep the BSI proactively informed about security-related developments, particularly concerning incidents of significant public interest.

Major US cloud service providers are already promoting 'sovereign' cloud solutions in collaboration with German partners. Google previously announced plans in 2021 to establish such a solution for local enterprises and government agencies in cooperation with T-Systems. Similarly, Amazon is working on the AWS European Sovereign Cloud, which will consist of at least three data centers located in undisclosed areas of Brandenburg. Microsoft is partnering with SAP and Arvato for its Delos Cloud initiative. Critics have raised concerns that the United States, through the Cloud Act, retains the ability to access data stored in the cloud globally as long as US firms are involved.