Google Workspace security whitepaper

How Google Workspace protects your data

Supporting compliance requirements

Google is committed to providing secure products and services that meet your compliance and reporting needs. We share extensive information on best practices and provide easy access to our compliance documentation. Google Cloud’s industry-leading security, third-party audits and certifications, documentation, and legal commitments help support your compliance. Our products regularly undergo independent verification of their security, privacy, and compliance controls, achieving certifications, attestations of compliance, or audit reports against standards around the world. As a part of the independent verification process, third-party auditors examine our end-to-end security practices, including data centers, infrastructure, and operations, at a regular cadence. We’ve also created resource documents and mappings against frameworks and laws where formal certifications or attestations may not be required or applied. Our Compliance resource center contains details on our compliance documentation and resources.

We’re constantly working to expand our compliance coverage. Google evaluates the available guidance from leading standards and regulatory bodies and adjusts our security and privacy programs as the compliance landscape changes. We carefully curate programs by region and industry to ensure customers are able to leverage our compliance resources to make informed decisions for their business.

When you consider Google Workspace, our compliance offerings can help to confirm whether the product suite meets your security and compliance needs.

Regulatory compliance

Our customers operate across regulated industries, including finance, government, healthcare and education. Google Cloud provides products and services in a way that enables our customers to be compliant with numerous industry-specific requirements. More information is available here.

Independent third-party certifications and attestations

Our customers and regulators expect independent verification of security, privacy, and compliance controls. Google undergoes several independent third-party audits on a regular basis to provide this assurance. Some of the key international standards we are audited against are:

Google also participates in sector and country-specific frameworks, such as FedRAMP (US government), BSI C5 (Germany), MTCS (Singapore), and many others. We also provide resource documents and mappings for certain frameworks where formal certifications or attestations may not be required or applied.

For a complete listing of our compliance offerings, please visit the Compliance resource center.

Download full whitepaper (PDF).