Your company wants to share curated retail performance datasets with multiple external partners and internal business units. The data management strategy has the following requirements: Data consumers must query live data in place without copying, duplicating, or moving datasets into separate storage buckets. The data governance team must maintain centralized control over access policies and security rules. The solution must allow sharing curated assets (such as BigQuery tables, views, and ML models) across organizational boundaries. Which Google Cloud service should you use to implement this data sharing policy?

Analytics Hub: ### **What Analytics Hub is** **Analytics Hub** is a fully managed data exchange platform built natively into BigQuery that allows organizations to securely discover, share, and consume datasets and analytics assets across organizational boundaries. ### **How it meets the requirements:** - **Live, zero-copy data sharing (✓):** Analytics Hub shares data in place using linked datasets. Consumers query the source data directly without needing data pipelines, replication, or manual ETL routines, ensuring they always see the most up-to-date information. - **Centralized data governance (✓):** Data publishers retain complete ownership and control. Publishers can define fine-grained Identity and Access Management (IAM) permissions, apply column-level security, configure row-level filters, and leverage data masking to protect sensitive values before sharing. - **Multi-asset sharing across boundaries (✓):** Analytics Hub enables secure sharing of diverse assets—including BigQuery datasets, views, routines, and machine learning models—with external partners and internal teams alike. - **Cost and operational efficiency (✓):** Because data is not duplicated, consumers only incur query compute costs in their own projects while avoiding redundant storage costs across organizations. ### **Key capabilities:** - **Exchange and Listing Management:** Organize datasets into private or public exchanges with granular subscriber management. - **Zero-Copy Architecture:** Linked datasets provide instant, real-time access to source updates with zero synchronization latency. - **Built-in Governance:** Seamless integration with Google Cloud IAM, BigQuery data masking, and VPC Service Controls. - **Audit and Tracking:** Detailed logging through Cloud Audit Logs to monitor listing subscriptions and query activity. ### **Why this is optimal:** Analytics Hub is purpose-built for secure, governed, zero-copy data exchange. It eliminates traditional file transfer mechanisms and duplicate storage while empowering data publishers to enforce strict regulatory, compliance, and privacy controls across all subscribers.