Integrations
Google Cloud
How Telonic runs inside your own Google Cloud project, with every component in your environment and your own encryption keys.
On this page
If your security policy requires customer data to stay in infrastructure your organisation controls, Telonic can be deployed into your own Google Cloud project (the unit in which Google Cloud organises your resources, billing and access). Every Telonic component runs inside your environment, in the Google Cloud region you choose, and stored data can be encrypted with keys you manage. Only operational health signals, which contain no customer data, are sent to Telonic, and you can switch them off. Your organisation owns the project; Telonic deploys and runs the software in it.
What running in your own Google Cloud project means
| Aspect | How it works |
|---|---|
| Where it runs | Every Telonic component runs inside your Google Cloud project, in the region you choose. The region is recorded in your agreement |
| Where processing happens | All processing for your deployment runs in the region you choose, unless you explicitly choose a language model provider outside it |
| Encryption | Connections use TLS (Transport Layer Security, the standard encryption for data in transit) version 1.2 or higher. Stored data is encrypted with AES-256 (the Advanced Encryption Standard, using 256-bit keys) |
| Your keys | You can use customer-managed keys (encryption keys your organisation creates and controls) held in Cloud Key Management Service, Google Cloud's key management service |
| What reaches Telonic | Operational health signals only, containing no customer data. You can switch them off |
| Backups | Backups and disaster recovery copies are encrypted and stay in the same country as your deployment |
How it connects
Your cloud team provides the project and grants the access described below. Telonic deploys and runs the software there, and the computing capacity your deployment needs is sized with your team during implementation. Your agents connect to your other systems from inside your own environment, over routes your network team controls.
Telonic engineers reach your deployment only when you approve it. Access is limited to named engineers, working from the UAE or your chosen country, and is time-limited and logged. If you later decide to move to another hosting option, the move is carried out as a migration agreed with you in advance: data is moved encrypted and never leaves the countries your agreement permits.
Telonic's own UAE and Saudi Arabian hosting options also use major cloud providers' data centres in those countries. For those options, the provider and region are named in your agreement. See Hosting and data residency.
Permissions
| Permission | Needed for | Default |
|---|---|---|
| Deploy and update Telonic components in the project | Installing, updating and supporting your deployment | Each access needs your approval, and is time-limited and logged |
| Use of your encryption keys | Encrypting stored data | Only if you choose customer-managed keys |
| Send operational health signals to Telonic | Monitoring the health of your deployment | On. You can switch it off |
| Access to other projects in your organisation | Not needed | Not requested |
Telonic can only reach what you have granted, and only when you approve it.
In practice
Qamar Stays, a hotel group in Saudi Arabia, runs its guest data platform on Google Cloud.
- Its cloud team creates a project for Telonic in its chosen region and grants deployment access for the installation window.
- Telonic deploys the agent, which connects to the group's reservation system from inside the group's network.
- The security team sets customer-managed keys and keeps operational health signals switched on, after reviewing what they contain.
- For each later update, the group approves the access, and every session is logged.
What your team controls
- The project, region and network routes.
- The encryption keys, and whether to use them.
- Whether operational health signals are sent, and each approval of engineer access.
Related
- Cloud hostingIntegrations
- Hosting and data residencySecurity and data protection
- EncryptionSecurity and data protection
- Access control and single sign-onSecurity and data protection
- What we need from your IT teamIntegrations
Product names and logos are trademarks of their owners. Their mention shows systems Telonic connects to and does not imply partnership or endorsement.