Google Cloud Platform
Google public cloud: compute, storage, BigQuery, Kubernetes Engine and Vertex AI, with EU and UK regions.
Certifications & Accreditations
| Certification | Certifying Body | Scope | Achieved | Expiry | Status |
|---|---|---|---|---|---|
| ISO/IEC 27001:2022 | Accredited third-party certification body | Google Cloud Platform services covered by the Google ISMS | — | — | Current |
| ISO/IEC 27017:2015 and ISO/IEC 27018:2019 | Accredited third-party certification body | Cloud security controls and protection of PII in public cloud for GCP | — | — | Current |
| ISO/IEC 27701:2019 | Accredited third-party certification body | Privacy information management system covering Google Cloud | — | — | Current |
| SOC 1, SOC 2 and SOC 3 Type II | Independent third-party auditor | Google Cloud Platform services. SOC 3 published publicly; SOC 1 and SOC 2 available to customers | — | — | Current |
| PCI DSS | Qualified Security Assessor | In-scope Google Cloud Platform services for customers building cardholder data environments | — | — | Current |
Compliance Frameworks
ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Google acts as processor under the Cloud Data Processing Addendum; SCCs and UK IDTA available
PCI DSS v4.0
Full
GCP is a PCI DSS compliant service provider for in-scope services
HIPAA Security
Partial
HIPAA BAA available for covered GCP services
NIST Cybersecurity Framework
Partial
Mapped in the Google Cloud compliance resource centre
Copyright © 2026 SnapGRC