SWITCH FROM GOOGLE WORKSPACE SECURITY
Google Workspace security controls to Calisto Sovereign
Sovereign is where a business decides where its data lives and who holds its keys: its own database, storage and models in any country, its own key, company sign-in from its directory, one Activity log that cannot be altered, and its customers’ data requests reviewed before anything is erased.
Feature by feature
Calisto Sovereign beside Google Workspace
- 4 In both
- 1 Only in Google Workspace
| 5 features | Calisto Sovereign | Google Workspace |
|---|---|---|
| Keys | ||
| Encryption Under Your Own KeyCalisto: your business’s stored secrets (connection details, provider keys, tokens) are sealed under data keys wrapped by a key in your own key service, OpenBao or Vault Transit, OVHcloud KMS or Scaleway Key Manager; revoking it locks Calisto out of everything sealed under it. With your own database and storage, your records and files rest under your own provider’s encryption.Checked Nov 8, 2026Source | Yes | Yes |
| Sign-In | ||
| Single Sign-OnCalisto: OpenID Connect or SAML sign-in, for your business or a client company, each email domain proven by a TXT record in its DNS, in Sovereign’s Sign-In and every Core app’s Settings.Checked Nov 8, 2026Source | Yes | Yes |
| People Synced From Your DirectoryCalisto: Microsoft Entra ID (which brings Active Directory through Entra Connect), Okta or JumpCloud add and remove your people; each directory group opens Access profiles and zones while a person is in it.Checked Nov 8, 2026Source | Yes | Yes |
| Records | ||
| Admin Activity LogCalisto: one Activity log of custody changes, access to walled matters and personal data, client money, exports and requests, each entry chained to the one before it and verified daily.Checked Nov 8, 2026Source | Yes | Yes |
| Gaps | ||
| Data Loss PreventionCalisto does not scan what people share for sensitive content or block it.Checked Nov 8, 2026Source | No | Yes |
What moves
Bringing your data from Google Workspace
Your data is read in your own browser and sent to your Calisto account. Calisto never sees your login for the old system.
From an export file
Export your data from Google Workspace and drop the file in. It is read in your browser and mapped onto Calisto.
Any spreadsheet you export from Google Workspace can be mapped onto Calisto, column by column.
Moving from Google Workspace
Questions about switching
Can we keep our data in our own country?
Yes. Connect your own PostgreSQL and S3-compatible storage there, from your first day or by a move. Calisto’s application servers, and its default database and storage, stay in the European Union.
How are our customers’ erasure requests handled?
Every record you hold about the person is listed first, in every app. You approve each record or kind, and what the law requires you to keep is kept with their details replaced.
Learn more
Everything Calisto does here
The pages behind this comparison: the sector, the apps and the guides.