Google Cloud and BSI cooperate for secure cloud solutions in public administration
In February 2025, Google Cloud and the German Federal Office for Information Security (BSI) sealed a strategic partnership. The common goal: the development and provision of trustworthy cloud services that are specifically tailored to the requirements of the public sector in Germany - from federal authorities to municipal institutions.
A central concern of this collaboration is to meet the highest standards of data security and sovereignty. The solutions offered are strictly based on the applicable data protection regulations at national and European level and take into account the specific requirements of public institutions.
The partnership covers the entire range of services offered by Google Cloud - including innovative AI services and accompanying support services. Although the exact conditions are set out in the standard contracts for Google Cloud customers (available at cloud.google.com/terms/services), it has been made explicitly clear that Google does not have access to personal user data.
Security through modern encryption technologies
Special attention is being paid to IT security as part of the cooperation - especially with a view to future technological developments. Among other things, the focus is on advanced cryptographic processes such as post-quantum cryptography and the use of established standards such as brainpool curves. These technologies are considered essential in order to counter the growing threat posed by powerful quantum computers at an early stage and to secure sensitive data in the long term.
Thanks to close coordination with the BSI, the security requirements of the public administration can be directly integrated into the technical implementation of the cloud solutions. The result is a solid foundation for a digital transformation that is both innovative and resilient to cyber risks.
Cooperation forum as a steering unit
A central body - the so-called Cooperation Forum - was set up specifically for the implementation of the partnership. It coordinates the cooperation and serves as a point of contact for all relevant topics. In addition to the development of joint security standards and certification processes, a particular focus is on rapid response to security incidents and the structured exchange of information on current threats (threat intelligence).
This is complemented by close cooperation in the area of supply chain security: the BSI receives comprehensive insights into Google Cloud's protective measures in order to identify and assess risks such as unauthorized access or manipulation at an early stage.
Long-term perspective for sovereign digitalization
With this initiative, the BSI and Google Cloud are sending a clear signal for secure digital administration in Germany. The cooperation is designed for the long term and provides for regular adjustments to new technological and regulatory developments - without exceeding legal requirements or introducing special regulations.
A continuous flow of information, the provision of security-relevant documentation and the joint analysis of potential vulnerabilities are key components of the agreement. In this way, both partners are creating a reliable basis for the secure and responsible use of modern cloud and AI technologies in the public sector.
This blog post originally appeared on https://cloud.google.com/blog/de/topics/offentlicher-sektor/google-cloud-bsi?e=48754805&hl=de
