Infrastructure partner

Google Cloud

Reference evaluation and designated-cloud operator. Briefing environments and optional in-region cloud estates can run on Google Cloud infrastructure that Google attests. Production default remains the buyer’s on-premise estate.

Scope

When a demonstration, designated-cloud, or buyer-approved in-region estate is used, it can sit on Google Cloud. Google publishes ISO 27001, SOC 2 Type II, and PCI-DSS attestations for that infrastructure — the same class of operator programmes as AWS.

What this is not

This is not a claim that every Nexus production system runs on Google Cloud, or that Inject Group is a Google Cloud Partner Advantage showcase. Production for a central bank is typically on-premise or a sovereign cloud the buyer chooses at contract.

How Nexus uses it

Evaluation, briefing environments, and optional designated-cloud deployments where the buyer accepts an in-region Google Cloud estate.

Google Cloud compliance →

Inject Group Ltd holds Cyber Essentials. An ISO 27001 formal audit is in progress (target Q4 2026). ISO 27001, SOC 2 Type II, and PCI-DSS attestations for a designated environment sit with the hosting or HSM operator named above.