Commvault debuts Geo Shield for sovereign cloud data

Commvault has launched Geo Shield, a new product approach designed to meet stringent data residency and sovereign cloud requirements for organizations in regulated industries, Security Brief United States reports.

The offering provides multiple deployment models, allowing customers to maintain control over data location, operational boundaries, and encryption keys. Options include running Commvault Cloud SaaS in local or sovereign hyperscaler regions like AWS European Sovereign Cloud, utilizing partner-operated sovereign services, or deploying private sovereign clouds. Chief Product Officer Rajiv Kottomtharayil stated Geo Shield is designed to "strengthen resilience, support data compliance efforts, and maintain control over how and where... data is managed."

The architecture separates control and data planes to enforce geographic and jurisdictional limits, supporting "no call home" requirements and integrating with customer-managed hardware security modules. Geo Shield aligns with frameworks such as FedRAMP High, DORA, NIS2, and IRAP PROTECTED, addressing the evolving compliance landscape for government, financial, and critical infrastructure sectors. Commvault plans to expand regional sovereign cloud support in partnership with qualified local service providers.