Physically & logically separated

Why important?

Reduces risk from shared platform and admin dependencies.

How measured?

• 0 = No separate environment (shared with global regions/control plane)
• 1 = Logical separation only (tenant isolation), no dedicated environment
• 2 = Some dedicated components, but relevant shared services/dependencies
• 3 = Dedicated region/environment, but some shared/control-plane dependencies
• 4 = Strong physical & logical separation, only a few non-critical shared services
• 5 = Fully physically & logically separated (incl. critical shared services/control plane)
• N/A = no reliable evidence

Sources / Evidence

• https://aws.amazon.com/blogs/aws/opening-the-aws-european-sovereign-cloud/
• https://aws.eu/de/
• https://www.ovhcloud.com/pl/bare-metal/secnumcloud/
• https://www.oracle.eu/faq/
• https://docs.oracle.com/en/solutions/learn-about-eusc/index.html
• https://news.microsoft.com/de-de/erste-souveraene-cloud-plattform-fuer-die-deutsche-verwaltung-auf-der-zielgeraden/

Validation questions (RFP)

• How is multi-tenancy implemented? Which shared services (IAM, monitoring, billing) are separated?

Scores comparison