Google Security Operations, known as Chronicle until April 2024, is a cloud service from Google Cloud for security teams. Organisations use it to retain, analyse and search security and network telemetry in order to detect threats. It combines log data with threat intelligence, including from VirusTotal. It is a commercial product delivered as a cloud service and runs on the same core infrastructure that Google uses for its own security. There is no self-hosted or open source edition.
Google is headquartered in Mountain View, California, in the United States, and is a wholly owned subsidiary of Alphabet Inc. As a US provider, Google is subject to the CLOUD Act. According to Google Cloud documentation, data residency is always enabled for Google Security Operations and is enforced for data at rest by default; for data in use or in transit, you need to contact your account representative. The available locations are listed on a separate Google page. A European organisation placing logs and telemetry here therefore needs to weigh the chosen location together with the provider's jurisdiction.