gVisor is an open-source application kernel for containers, written in Go. It sits between a containerised application and the host operating system, intercepting system calls so that the application does not reach the host kernel directly. It works with Docker, Kubernetes and containerd, and is installed and operated by the user on their own infrastructure.
The software is developed by Google under the Apache-2.0 licence. Google is headquartered in Mountain View, California, and is a subsidiary of the US holding company Alphabet Inc. Because gVisor runs inside the user's own environment, it does not by itself send data to a vendor. The project does not publish a GDPR or data processing commitment of its own. The main consideration for a European organisation is the US origin of the code's maintenance, which is why the source code is worth reviewing and building independently, so that control stays with the operator.