Google Workspace security whitepaper
How Google Workspace protects your data
Supporting compliance requirements
Google is committed to providing secure products and services that meet your compliance and reporting needs. We share extensive information on best practices and provide easy access to our compliance documentation. Google Cloud’s industry-leading security, third-party audits and certifications, documentation, and legal commitments help support your compliance. Our products regularly undergo independent verification of their security, privacy, and compliance controls, achieving certifications, attestations of compliance, or audit reports against standards around the world. As a part of the independent verification process, third-party auditors examine our end-to-end security practices, including data centers, infrastructure, and operations, at a regular cadence. We’ve also created resource documents and mappings against frameworks and laws where formal certifications or attestations may not be required or applied. Our
We’re constantly working to expand our compliance coverage. Google evaluates the available guidance from leading standards and regulatory bodies and adjusts our security and privacy programs as the compliance landscape changes. We carefully curate programs by region and industry to ensure customers are able to leverage our compliance resources to make informed decisions for their business.
When you consider Google Workspace, our compliance offerings can help to confirm whether the product suite meets your security and compliance needs.
Regulatory compliance
Our customers operate across regulated industries, including
Independent third-party certifications and attestations
Our customers and regulators expect independent verification of security, privacy, and compliance controls. Google undergoes several independent third-party audits on a regular basis to provide this assurance. Some of the key international standards we are audited against are:
-
ISO/IEC 27001 (Information Security Management) -
ISO/IEC 27017 (Cloud Security) -
ISO/IEC 27018 (Cloud Privacy) -
ISO/IEC 27701 (Privacy) -
SOC 2 andSOC 3 reports
Google also participates in sector and country-specific frameworks, such as
For a complete listing of our compliance offerings, please visit the