Patrick Foxhoven on data sovereignty
From Zscaler, SASE Outbound inspection and protection, Season 1, Episode 3 · · Security Architecture Podcast
“We can guarantee if you're a customer in the US, we'll store your logs in the US; if you're in the EU, we'll start in the EU — for a large financial institution we can guarantee the logs are stored inside Switzerland or even in private logging clusters on‑prem if there are data sovereignty/privacy requirements.”
On , Patrick Foxhoven, Chief Innovation Officer & Executive Vice President at Zscaler, spoke about data sovereignty during Zscaler, SASE Outbound inspection and protection, Season 1, Episode 3 on Security Architecture Podcast.
About Patrick Foxhoven
Patrick Foxhoven, Chief Innovation Officer and Executive Vice President at Zscaler, appeared on the Security Architecture Podcast in February 2021 to discuss Zscaler's approach to Secure Access Service Edge (SASE), specifically outbound browsing and user access to internet resources. He described Zscaler Internet Access (ZIA) as the company's outbound security gateway in the cloud, which uses a lightweight software agent on devices to forward traffic to Zscaler's cloud for inspection, without performing on-device analysis. Foxhoven noted that Zscaler processes over 100 billion internet transactions daily and that the company can guarantee log storage in specific regions, including the US, EU, or Switzerland, to meet data sovereignty requirements. In a 2017 interview, Foxhoven outlined three key concerns for CISOs and CSOs: rising breaches, lowered barriers to entry for threats like ransomware, and the shift of applications and users outside corporate networks. He positioned Zscaler as a cloud-based security platform that inspects all traffic without performance bypasses, integrates security functions into a single correlated system, and leverages a "cloud effect" to share threat intelligence across customers in real time, blocking over 100 million threats daily. Foxhoven emphasized that Zscaler's architecture was designed from the start as a multi-tenant cloud, distinguishing it from appliance-based approaches.