As governments and regulators around the world tighten requirements around data residency, encryption ownership and operational control, organisations are being forced to rethink how cyber resilience is achieved in the cloud.
Commvault’s newly announced Geo Shield™ reflects this shift, addressing a growing reality for enterprises and public sector organisations alike: resilience is no longer just about recovery speed, but about where data lives, who controls it, and how it is protected.
With cloud adoption accelerating, many organisations are finding that traditional SaaS and hyperscaler models do not always align with national, regional or industry-specific sovereignty requirements. Regulations increasingly mandate that sensitive data remain in-country, encryption keys stay under customer control, and operational access be restricted to trusted local entities.
Commvault Geo Shield is designed to bridge this gap by enabling cyber resilience across sovereign, regulated and private cloud environments, without sacrificing recoverability or security.
“Customers are looking for resilience solutions that respect sovereignty while still delivering enterprise-grade recovery and protection,” said Rajiv Kottomtharayil, Chief Product Officer at Commvault. “Geo Shield gives organisations the flexibility to meet regulatory and operational requirements on their own terms.”
The solution is built on Commvault’s adaptive fabric architecture, which separates control and data planes. This allows organisations to validate recoverability and operational resilience while maintaining in-region control of data, operations and encryption keys.
Geo Shield supports multiple sovereignty-aligned deployment options, including local and sovereign hyperscaler regions, partner-operated national cloud offerings, and fully private sovereign cloud environments. Customers can also retain full control over encryption through BYOK and HYOK models, integrating with their own or partner-managed HSMs.
Importantly, the approach supports operational constraints such as “no call home” requirements, enabling environments to be run entirely by screened local partners where mandated.
Commvault’s sovereign approach builds on its existing compliance credentials, which span frameworks such as FedRAMP High, FIPS 140-3, GovRAMP, DORA, NIS2 and IRAP PROTECTED in Australia. This positions Geo Shield as a unified platform capable of addressing both cyber resilience and regulatory accountability.
As regulatory pressure continues to rise globally, Commvault Geo Shield highlights a broader shift in enterprise security strategy: cyber resilience must now be sovereign by design, not retrofitted after the fact.
