Google Workspace

SaaS / Software United States Website Reviewed Sept. 2, 2026

Google's cloud productivity suite - Gmail, Drive, Docs, Meet and Calendar - with enterprise admin, identity and endpoint management.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body Google Workspace and Google Cloud services covered by the Google ISMS — — Current
ISO/IEC 27017:2015 Accredited third-party certification body Cloud-specific information security controls for Google Workspace and Google Cloud — — Current
ISO/IEC 27018:2019 Accredited third-party certification body Protection of personally identifiable information processed in public cloud services — — Current
SOC 1, SOC 2 and SOC 3 Type II Independent third-party auditor Google Workspace core services. SOC 3 report is published publicly; SOC 1 and SOC 2 reports are available to customers under NDA — — Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Google acts as processor under the Data Processing Amendment; SCCs and UK IDTA available
HIPAA Security
Partial
HIPAA BAA available for covered Google Workspace services
NIST Cybersecurity Framework
Partial
Mapped in the Google Cloud compliance resource centre

Assess Google Workspace in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register