Commvault unveils Geo Shield for sovereign cloud data

Commvault has introduced Geo Shield, a product approach that targets organisations with data residency and sovereign cloud requirements.

The company said Geo Shield focuses on control over where data sits, how environments run, and who holds encryption keys. Commvault positioned the announcement around cyber resilience and recovery in regulated settings.

Commvault said customer requirements have shifted as sovereign frameworks develop and cloud adoption rises. The company said Geo Shield builds on its existing work with regulated and compliance-led deployments.

“Commvault Geo Shield is designed to help customers strengthen resilience, support data compliance efforts, and maintain control over how and where their data is managed,” said Rajiv Kottomtharayil, Chief Product Officer, Commvault.

Sovereign options

Commvault described Geo Shield as an approach that spans several deployment patterns. It said customers can run Commvault Cloud SaaS in local hyperscaler regions when those regions exist. The company linked that option to data residency requirements.

Commvault also set out plans for Commvault Cloud SaaS in sovereign hyperscaler regions. It named AWS European Sovereign Cloud as an initial environment it will support. The company said it plans more regional sovereign cloud support.

A third option centres on partner-operated sovereign offerings. Commvault said qualified local service providers can deliver national or regional sovereign cloud services using Commvault software. The company also referenced air-gapped protection as part of that model.

The final model involves private sovereign cloud deployments. Commvault said customers, or designated partners, can run these deployments within dedicated environments.

Architecture focus

Commvault said Geo Shield rests on its adaptive fabric architecture. It said that architecture separates control and data planes. The company linked that design to customer control over where data is stored and how it is protected. It also linked the same design to control over who can access data inside customer-run or partner-run environments.

Commvault framed the announcement around cloud sovereignty. It said Geo Shield provides options that align with customer requirements, rather than a single operating model. The company's description reflected the range of sovereignty models now emerging across national, regional and sector-based frameworks.

Key management

Commvault highlighted encryption key control as a central theme. It said Geo Shield supports customer-controlled encryption keys. The company cited Bring Your Own Key and Hold Your Own Key models.

It also said Geo Shield integrates with customer-managed or partner-managed hardware security modules. That approach matches requirements in some regulated environments where organisations retain direct control over key material and key operations.

Operational boundaries

Commvault said Geo Shield can run within operational boundaries set by customers and regulators. It referenced “no call home” requirements. Such requirements can restrict vendor telemetry and remote connectivity from customer environments.

The company also said operations can run through screened local partners. It presented that model as part of its partner-operated sovereign offering, where local service providers take on day-to-day operational responsibilities within defined geographic and jurisdictional limits.

Compliance scope

Commvault placed Geo Shield alongside a broader list of standards and frameworks it said it already supports. It cited FedRAMP High, FIPS 140-3 and GovRAMP. It also named sector and industry mandates, including SEC Rule 17a, HIPAA and PCI DSS v4.0.

The company also referenced European regulatory and security frameworks, including DORA and NIS2. It added that it supports IRAP PROTECTED status for the Australian Federal Government. It also cited certified Cloud Service Provider status with the Dubai Electronic Security Centre.

These frameworks have shaped cloud procurement and operating models in government, financial services, healthcare and critical infrastructure. They have also influenced how cloud providers and software vendors structure regional operations, security controls and audit processes.

Rollout plans

Commvault said it will announce the availability of additional Geo Shield deployment models separately. It linked timing to implementation plans with partners in relevant regions.

The company's initial sovereign hyperscaler support includes AWS European Sovereign Cloud, with further regional sovereign cloud support planned.