Leader in ISG Private Cloud Report 2026.

UnitedLayerBlue Version

Sovereign private cloud

Your cloud.
Your keys.
Your laws.

UPC Sovereign Cloud is a dedicated, single-tenant private cloud inside the jurisdiction you choose. You decide where data lives, who can touch it and which laws apply, and we run it around the clock.
Find your sovereign setup
Try the console
0 + years
Sovereign cloud expertise
0 +
Delivery locations, five continents
0 +
Global compliance frameworks
0 %
Availability SLA
console.upc / example-agency · Sovereign

European Union boundary

Example tenant data · single-tenant sovereign cloud
Data in boundary100%
Key holderYou
Cross-border copies0
Audit events today37
Event · who · whereDecision
Read monitoring metricsOps engineer · EU · in boundaryAllowed
Nightly backup to recovery siteBackup service · EU · in boundaryAllowed
Key db-master rotated to v7You · EU · in boundaryLogged
Sign-in attemptUnknown user · United States · outsideDenied
Policy update · replicate in-region onlyYou · EU · in boundaryApproved
Compliance map

What sovereignty means here

Control over your data, your
operations and your digital estate

Compute, storage, network and security are provisioned only for you, inside the boundary you
choose.

Governed only by the laws where it’s stored

Your data stays inside the boundary you choose. No hyperscaler access, and no cross-border replication without your consent.

  • Residency inside your chosen jurisdiction
  • No hyperscaler access
  • No cross-border copies without consent
Your sovereign boundary
Primary siteRecovery siteBackups
Other countries · blocked without consent

Run inside your jurisdiction, always on

Operations stay in-jurisdiction, with business continuity and disaster recovery built in.

  • Always-on in-region operations
  • Built-in business continuity and DR
  • Follow-the-sun engineering support
In-region operatorsFollow-the-sun engineers
Business continuity · DR
Availability
99.999% availability SLA

You hold the keys and write the rules

You control encryption keys, access policies and audit trails, with policy-as-code governance and centralized control.

  • Customer-owned encryption keys
  • Access policies you define
  • Audit trail you own and export
You control
🔑 KeysAccess policiesAudit trail
Policy-as-code
allow.region = ["home"]

Single tenant, with residency-specific access

Private clouds dedicated to you, with access controls that limit data management to authorized regional personnel.

  • Single-tenant private cloud
  • Authorized regional personnel only
  • VMware, KVM, Hyper-V and Canonical
Your sovereign cloud · single tenant
ComputeStorageNetworkSecurity
VMwareKVMHyper-VCanonical

Compliance-ready, kept current

Aligned with GDPR, DORA, NIS2 and BSI C5, with automated AIOps and FinOps for continuous compliance, observability and cost control, and an advisory team tracking change.

  • GDPR, DORA, NIS2, BSI C5
  • Continuous compliance with AIOps and FinOps
  • Compliance advisory team
Aligned with
GDPRDORANIS2BSI C5KRITISISO 27001
AIOpsFinOpsObservability

Recovery and operations, handled

Native backup and DRaaS with built-in cyber resilience, plus end-to-end platform and lifecycle management.

  • Native backup and DRaaS
  • Built-in cyber resilience
  • End-to-end lifecycle management
Production
Primary site
Recovery
Same jurisdiction
Immutable backupsTested restoresPatchingUpgrades

See it in motion

Watch sovereignty
being enforced

Six moments that show what control means in practice, from keys you hold to recovery that
never crosses a border.
Data sovereignty
Your data stays inside the boundary you choose.
Your sovereign boundary
Primary siteProduction● Serving
Recovery siteSame jurisdiction● In sync
Other countryOutside boundary
✕ Blocked · no consent
Cross-border copy requested · blocked and logged without your consent
Digital sovereignty
Your keys. Your access rules. Your audit trail.
Your key vaultCustomer-held encryption keys
🔑 db-masterv3
🔑 backupv3
🔑 object-storev3
Held by you · not by UnitedLayer
Audit trailImmutable · exportable
09:14Engineer (in-region) · read metricsAllowed
09:21Support request · database accessAwaiting you
09:22You approved · 30 minutesApproved
09:40Login from outside boundaryDenied
Out-of-boundary access denied automatically
Operational sovereignty · Business continuity
If a site fails, recovery happens inside your borders.
Your sovereign boundary
Primary siteProduction
core-bankingpaymentsreporting
Recovery siteSame jurisdiction
core-bankingpaymentsreporting
Primary restored · replication resumes
Secure multicloud orchestration
Write the rule once. Every placement follows it.
sovereignty.policy 
policy "patient-data" {
  data.class  = "restricted"
  allow.region = ["home"]
  keys.owner  = "customer"
  replicate   = "in-region"
  audit       = true
}
Sovereign private cloudHome jurisdiction
ehr-api · placed
Edge siteHome jurisdiction
Public cloud regionOther country✕ Denied by policy
Placed in-jurisdiction · real-time audit visibility from one control plane
UPC Sovereign Core · Multi-hypervisor
Bring the platform you run today. Mix as you go.
VMwareSingle tenant
erp-appsap-db
KVMSingle tenant
web-tierk8s-node
Hyper-VSingle tenant
ad-dssql-01
CanonicalSingle tenant
ml-trainubuntu-ci
legacy-app → moving to KVM
Move workloads between platforms at your own pace · all inside your boundary
AI-optimized sovereign cloud
Train and run AI on GPUs that never leave your boundary.
DataClassified · in region🔒 Encrypted
TrainingDedicated GPU cluster🔒 Encrypted
ModelVersioned · signed🔒 Encrypted
InferencePrivate endpoints🔒 Encrypted
GPU cluster
single tenant
Data lineage
  • dataset v12 · approved source
  • training run #48 · in region
  • model v3.1 · signed
Encrypted in transit and during training · lineage documented for auditors
LIVE · AUTO-PLAYING PAUSED

Find your sovereign setup

Tell us where you operate
and what you run

See which frameworks usually apply, which UPC Sovereign Cloud tier fits, and the controls you
get from day one.
What you run
Tier 1 · SUGGESTED

UPC Sovereign Core

Fully managed private cloud at the sovereign location you choose, with VMware, KVM, Hyper-V or Canonical.

Tier 2 · SUGGESTED

Secure Multi-Cloud Orchestration

Policy-as-code and one control plane that keep every cloud you use inside your sovereignty rules.

Tier 3 · SUGGESTED

AI-Optimized Sovereign Cloud

Dedicated GPU clusters with encrypted training and inference, and data lineage for regulators.

Tier 4 · SUGGESTED

High Performance Computing Sovereign

High-throughput interconnects and dedicated tiered storage for compute-intensive work.

Frameworks that usually apply
ISO 27001 SOC 1 / SOC 2 GDPR UK GDPR NIS2 DORA BSI C5 KRITIS FedRAMP FISMA CJIS NIST FIPS ITAR FINRA PCI HIPAA ISO 27017 ISO 27018 EU AI Act mapping
Controls from day one
  • Data, backups and recovery copies kept in the European UnionGermanythe United Statesthe United Kingdomyour country
  • Customer-owned keys, access policies and audit trail
  • Access limited to authorized regional personnel
  • No cross-border replication without your consent
  • Policy-as-code enforced across public, private and edge
  • Encryption in transit and during training, with data lineage
  • Dedicated high-throughput interconnects and storage
  • Built for national security and critical infrastructure requirements

Guidance only, not legal advice. Certifications and alignment vary by framework and location; our compliance advisory team confirms scope with you.

Service tiers

Four ways to run sovereign

See which frameworks usually apply, which UPC Sovereign Cloud tier fits, and the controls you
get from day one.

Tier 1

UPC Sovereign
Core

Fully managed private cloud at the sovereign location you choose.
  • Compliance-aligned from the start
  • VMware, KVM, Hyper-V and Canonical
  • Built-in observability, AIOps and orchestration

Tier 2

Secure Multi-Cloud Orchestration

Sovereignty and policy enforced across every cloud you use.
  • Centralized policy-as-code
  • Real-time audit visibility
  • AI-driven workload placement, one control plane for public, private and edge

Tier 3

AI-Optimized Sovereign Cloud

Dedicated GPUs for AI that must stay in your jurisdiction.
  • Dedicated GPU clusters
  • Training and inference pipelines, encrypted in transit and during training
  • EU AI Act mapping and data lineage documentation

Tier 4

High Performance Computing Sovereign

Infrastructure tuned for compute-intensive work.
  • High-throughput interconnects
  • Tiered, dedicated storage
  • For national security and critical infrastructure

How it works

From boundary to running
workloads in five steps

See which frameworks usually apply, which UPC Sovereign Cloud tier fits, and the controls you
get from day one.

Pick the jurisdiction and locations your data must stay in, from 175+ delivery locations on five continents.

OUTCOMESovereign boundary defined

Size the single-tenant cloud, pick the tier and hypervisor, and map the frameworks you must meet with our advisory team.

OUTCOMEDesign and compliance map

We build inside the boundary and you take ownership of encryption keys, access policies and the audit trail.

OUTCOMEYour keys, your rules

Authorized regional personnel and follow-the-sun teams run the platform, with backup and DR inside the boundary.

OUTCOMEAlways-on, in-region operations

Continuous compliance, observability and reporting, updated as regulations change.

OUTCOMEAudit-ready, year after year

How it works

From boundary to running
workloads in five steps

See which frameworks usually apply, which UPC Sovereign Cloud tier fits, and the controls you
get from day one.

Single-tenant architecture

Compute, storage, network and security provisioned only for you.

Residency-specific access

Only authorized regional personnel can manage your data.

Customer-owned keys

You hold encryption keys, access policies and the audit trail.

No cross-border replication

Nothing leaves the boundary without your consent, and no hyperscaler access.

In-jurisdiction operations

Always-on operations with business continuity built in.

Native backup and DRaaS

Integrated backup and disaster recovery with cyber resilience.

Policy-as-code governance

Centralized control, enforced on every deployment.

Continuous compliance

Aligned with GDPR, DORA, NIS2 and BSI C5, with automated AIOps and FinOps.

Compliance advisory team

Experts who track regulatory change for you.

Intelligence layer

Unified observability, AIOps and agentic orchestration built in.

Multi-hypervisor

VMware, KVM, Hyper-V and Canonical.

Fully managed

End-to-end platform and lifecycle management from follow-the-sun teams.

ISG

Leader, 2026

Leader in the ISG Private Cloud Report 2026, with ISG recognition from 2023 to 2025.

Global Titans 2025

Best Private Cloud for AI Workloads

Recognition for UnitedLayer’s private cloud for AI.

NelsonHall

Recognized in 2022

Independent analyst recognition for UnitedLayer.

United Private Cloud®

99.999% availability

The platform UPC Sovereign Cloud is built on.

Side by side

Three ways to keep data at home

AreaPublic cloud regionBuild it yourselfUPC Sovereign Cloud
TenancyShared with other customersYoursSingle tenant, reserved for you
JurisdictionProvider may also answer to laws in other countriesYoursGoverned by the laws where your data is stored
Who operates itGlobal provider teamsYour team, all hoursAuthorized in-region personnel, follow-the-sun support
Keys and auditVaries by serviceYours to buildCustomer-owned keys, policies and audit trail
ComplianceShared responsibility to map yourselfEvery control on youAligned frameworks plus an advisory team
RecoveryDesign across regions yourselfSecond site to buildNative backup and DRaaS inside your boundary
Time to runFast, with trade-offsMonths to yearsFully managed from day one
Questions

What teams ask before they start

Is UPC Sovereign Cloud shared with other customers?

No. It is a dedicated, single-tenant private cloud. Compute, storage, network and security are provisioned only for you, inside your chosen boundary.

Can anyone outside our jurisdiction access our data?

Access is limited to authorized regional personnel under residency-specific controls. There is no hyperscaler access, and no cross-border replication without your consent.

Who holds the encryption keys?

You do. You own the encryption keys, access policies and audit trail, governed through policy-as-code.

Which frameworks do you support?

The platform is aligned with frameworks including GDPR, DORA, NIS2, BSI C5 and KRITIS in Europe, and the page lists more than 15 global frameworks such as ISO 27001, SOC 1 and SOC 2, PCI, HIPAA, NIST, FedRAMP, FISMA, CJIS, ITAR, FINRA and FIPS. Our compliance advisory team confirms scope for your location.

Can we run AI and GPU workloads?

Yes. The AI-Optimized Sovereign Cloud tier provides dedicated GPU clusters, encrypted training and inference pipelines, and EU AI Act mapping with data lineage documentation.

Which hypervisors can we use?

VMware, KVM, Hyper-V and Canonical are supported on UPC Sovereign Core.

↑