Zscaler Inc. (NASDAQ: ZS) announced an expansion of its data sovereignty capabilities on its Zero Trust Exchange cloud security platform. The company said it operates over 160 data centers globally and is extending control plane functionality to new regions, including a planned deployment in Canada.

The cybersecurity company's architecture separates control, data, and logging planes to keep sensitive information within required jurisdictions. Zscaler currently operates dedicated control planes in the United States and Europe, along with logging planes in six countries.

The expansion includes in-region SSL inspection and malware analysis capabilities that decrypt and inspect encrypted traffic locally. The company also offers Private Service Edges, which are single-tenant, customer-hosted appliances managed by Zscaler to meet specific hardware certification requirements.

Zscaler's platform provides encryption key control through integration with hardware security modules, allowing customers to maintain authority over data decryption. The system supports compliance frameworks including GDPR, NIS2, and DoD IL5 through what the company describes as a "Collect Once, Certify All" approach.

"Effective data sovereignty requires customers to have verified authority over their data residency, telemetry and control data plane data," said Misha Kuperman, Chief Reliability Officer at Zscaler.

The company owns and operates its cloud infrastructure rather than relying on third-party providers. Zscaler's decentralized architecture is designed to prevent single points of failure, with outages at individual data centers not affecting overall service availability.

The announcement addresses growing enterprise demand for solutions that comply with local data protection laws while enabling global business operations. Organizations can store logs regionally or on-premises to meet specific compliance requirements.