Commvault Introduces Geo Shield™ to Help Organisations Manage Cyber Resilience While Retaining Control of Their Data
Supports Data Residency and Select Regional, National, and Private Sovereign Cloud Environments Without Sacrificing Recoverability or Data Security
Commvault, a leader in unified resilience at enterprise scale, has announced Commvault Geo Shield™, a solution approach designed to help organisations protect and recover critical data while retaining control over data location, how environments are operated, and who holds the encryption keys.
As customers’ sovereign needs evolve and cloud adoption accelerates, Commvault continues to meet its customers where they are. Commvault Geo Shield extends the company’s long-standing support for regulated and compliance-driven environments.
“Commvault Geo Shield is designed to help customers strengthen resilience, support data compliance efforts, and maintain control over how and where their data is managed,” said Rajiv Kottomtharayil, Chief Product Officer, Commvault.
A Unified Approach to Sovereign Cyber Resilience
Commvault’s adaptive fabric architecture, which separates the control and data planes, is the foundation of Geo Shield—providing customers with control over where data is stored, how it is protected, and who controls access within customer- or partner-operated environments. With this announcement, Commvault is focused on providing customers with cloud sovereignty options that meet their individual requirements:
- Commvault Cloud SaaS in local hyperscaler regions, where available, to support data residency requirements.
- Commvault Cloud SaaS in sovereign hyperscaler regions, including initial support for environments such as AWS European Sovereign Cloud, with additional regional sovereign cloud support planned.
- Partner-operated sovereign offerings, enabling qualified local service providers to deliver national or regional sovereign cloud services using Commvault software and air-gapped protection.
- Private sovereign cloud deployments, operated by customers or designated partners within dedicated environments.
Key Capabilities
Commvault Geo Shield helps organisations:
- Enable cyber resilience without sacrificing sovereignty by supporting deployment patterns that validate recoverability and operational resilience while maintaining in-region control of data, operations, and encryption keys.
- Maintain customer-controlled encryption keys, for example, supporting Bring Your Own Key (BYOK) and Hold Your Own Key (HYOK) models, and integrating with customer- or partner-managed hardware security modules (HSMs).
- Operate within boundaries, including “no call home” requirements with operations run by screened local partners.
Bridging Regulatory and Sovereign Requirements with a Unified Platform
Commvault already supports a broad spectrum of federal, industry, and global regulatory requirements, including FedRAMP High, FIPS 140-3, and GovRAMP, industry-specific mandates such as SEC Rule 17a, HIPAA, and PCI DSS v4.0, as well as frameworks such as DORA and NIS2. Additionally, Commvault supports a host of global frameworks, including IRAP PROTECTED status for the Australian Federal Government, and certified Cloud Service Provider (CSP) status with the Dubai Electronic Security Center (DESC).
