Google Cloud Platform (gcp)
This page describes the Landing Zone catalogue gcp as shipped with SWAO: the provider and its sovereignty model, the regions with their residency and certifications, how the catalogue is refreshed and how to use it as a target.
Provider and sovereignty model
Google Cloud Platform is the public cloud of Google LLC, a US company. The catalogue covers 42 regions and is generated from a public region picker product list.
Sovereignty model: every region is operated by a US entity and records US CLOUD Act and FISA Section 702 exposure. Three European regions record a BSI C5 attestation: europe-west3 (Frankfurt), europe-west10 (Berlin) and europe-west4 (Netherlands). Sovereign offerings that partners operate on Google Cloud technology are not part of this catalogue.
Summary
| Property | Value |
|---|---|
| Provider ID (for targets) | gcp |
| Catalogue name | GCP service catalogue |
| Regions | 42 |
| Distinct services | 110 |
| Operator jurisdiction | US entity (US-entity) |
| Extraterritorial exposure | US CLOUD Act (us_cloud_act), FISA Section 702 (fisa_702) |
| Certifications recorded | BSI_C5 (3 regions), FedRAMP_High (3 regions), IRAP (1 region), ISO_27001 (42 regions), MAS_TRM (1 region), PCI_DSS (12 regions), SOC_2 (41 regions) |
| Refresh mode | Automated: swao lz catalogue update --provider gcp (Consultant and above) reads Google Cloud region picker product list |
| Confidence | medium |
| Last updated | 2026-09-04 |
| Schema version | 0.1 |
Default region for Europe | gcp:europe-west3 |
Default region for Germany | gcp:europe-west3 |
| Catalogue file in the public repository | lz-catalogues/gcp.json |
Regions
The catalogue has 42 regions. The first table counts them by residency country; the second lists the 13 regions in the europe geography (EU member states plus Iceland, Liechtenstein, Norway, Switzerland and the United Kingdom) with their full sovereignty facts. swao lz catalogue show prints every region.
Regions by residency country
| Country | Regions | Region IDs |
|---|---|---|
| Australia (AU) | 2 | australia-southeast1, australia-southeast2 |
| Belgium (BE) | 1 | europe-west1 |
| Brazil (BR) | 1 | southamerica-east1 |
| Canada (CA) | 2 | northamerica-northeast1, northamerica-northeast2 |
| Chile (CL) | 1 | southamerica-west1 |
| Finland (FI) | 1 | europe-north1 |
| France (FR) | 1 | europe-west9 |
| Germany (DE) | 2 | europe-west10, europe-west3 |
| Hong Kong (HK) | 1 | asia-east2 |
| India (IN) | 2 | asia-south1, asia-south2 |
| Indonesia (ID) | 1 | asia-southeast2 |
| Israel (IL) | 1 | me-west1 |
| Italy (IT) | 2 | europe-west12, europe-west8 |
| Japan (JP) | 2 | asia-northeast1, asia-northeast2 |
| Mexico (MX) | 1 | northamerica-south1 |
| Netherlands (NL) | 1 | europe-west4 |
| Poland (PL) | 1 | europe-central2 |
| Qatar (QA) | 1 | me-central1 |
| Saudi Arabia (SA) | 1 | me-central2 |
| Singapore (SG) | 1 | asia-southeast1 |
| South Africa (ZA) | 1 | africa-south1 |
| South Korea (KR) | 1 | asia-northeast3 |
| Spain (ES) | 1 | europe-southwest1 |
| Sweden (SE) | 1 | europe-north2 |
| Switzerland (CH) | 1 | europe-west6 |
| Taiwan (TW) | 1 | asia-east1 |
| United Kingdom (GB) | 1 | europe-west2 |
| United States (US) | 9 | us-central1, us-east1, us-east4, us-east5, us-south1, us-west1, us-west2, us-west3, us-west4 |
European regions
| Region ID | Name | Residency country | Operator jurisdiction | Extraterritorial exposure | Certifications | Services | Geographies |
|---|---|---|---|---|---|---|---|
europe-central2 | Warsaw, Poland | Poland (PL) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2 | 68 | eu, europe |
europe-north1 | Finland | Finland (FI) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2 | 68 | eu, europe |
europe-north2 | Stockholm, Sweden | Sweden (SE) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001 | 43 | eu, europe |
europe-southwest1 | Madrid, Spain | Spain (ES) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2 | 62 | eu, europe |
europe-west1 | Belgium | Belgium (BE) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2, PCI_DSS | 82 | eu, europe |
europe-west10 | Berlin, Germany | Germany (DE) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | BSI_C5, ISO_27001, SOC_2 | 52 | germany, eu, europe |
europe-west12 | Turin, Italy | Italy (IT) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2 | 63 | eu, europe |
europe-west2 | London, United Kingdom | United Kingdom (GB) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2, PCI_DSS | 82 | europe |
europe-west3 | Frankfurt, Germany | Germany (DE) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | BSI_C5, ISO_27001, SOC_2, PCI_DSS | 78 | germany, eu, europe |
europe-west4 | Netherlands | Netherlands (NL) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | BSI_C5, ISO_27001, SOC_2, PCI_DSS | 79 | eu, europe |
europe-west6 | Zurich, Switzerland | Switzerland (CH) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2 | 74 | europe |
europe-west8 | Milan, Italy | Italy (IT) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2 | 66 | eu, europe |
europe-west9 | Paris, France | France (FR) | US entity (US-entity) | US CLOUD Act, FISA Section 702 | ISO_27001, SOC_2 | 64 | eu, europe |
Certifications
| Certification | Regions holding it |
|---|---|
BSI_C5 | europe-west10, europe-west3, europe-west4 |
FedRAMP_High | us-central1, us-east1, us-east4 |
IRAP | australia-southeast1 |
ISO_27001 | 42 regions |
MAS_TRM | asia-southeast1 |
PCI_DSS | asia-northeast1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, us-central1, us-east1, us-east4, us-east5, us-west1, us-west2 |
SOC_2 | 41 regions |
Certifications are compared without regard to case or separators; C5 and BSI_C5 count as the same BSI C5 attestation. They are facts recorded in the catalogue, not verified by SWAO.
Using this catalogue
Name a region of this catalogue as a target of the Landing Zone Catalog Assessment, on the command line or in the app .swao.yml:
swao lz catalogue show gcp
swao assess --type landing-zone-catalog --app <app-id> --lz-cat-targets "gcp:europe-west3"assessment:
landing_zone:
targets:
- gcp:europe-west3A geography such as gcp:Europe instead of a region ID resolves to the default region shown in the summary.
To correct or extend the facts for one engagement, copy the catalogue into the workspace with swao lz catalogue copy gcp and edit wsp/inputs/catalogs/lz-catalogues/gcp/index.json; the workspace copy then takes precedence. See Adapting LZ catalogues.
Catalogue facts are point-in-time and are not legal advice. Check the date and confidence above and review the provider's contracts before you rely on a verdict.