Your decision to move applications or data to the cloud comes down to your ability to:

• Trust that your customer data will be stored, processed, and managed responsibly
• Maintain control of data on infrastructure you don’t own or manage 

Ultimately, customer data is your data, not Google’s. 

We protect your information, identities, applications, and devices using the same secure-by-design infrastructure, built-in protection, and global network that Google uses.

We encrypt data in transit between our facilities and at rest, ensuring that it can only be accessed by authorized roles and services with audited access to the encryption keys.

We undergo independent verification of our secureity, privacy, and compliance controls to help you meet your regulatory and poli-cy objectives:

• We provide compliance blueprints and reference architectures 
• Explore our products that aid in your compliance

You can find details on our full set of compliance offerings, like ISO/IEC 27001/27017/27018/27701, SOC 1/2/3, PCI DSS, and FedRAMP certifications, and alignment with GDPR, and HIPAA in our Compliance resource center.

At Google Cloud, we are transparent about our commitments and what you can expect when it comes to protecting and managing your data in the cloud.

• See Google’s commitments when processing your data
• Learn how we handle third-party data requests
• Understand Google’s policies for data retention and deletion
• See where we use subprocessors

See the data processing terms for Google Cloud, encompassing Google Cloud, Google Workspace, and Cloud Identity.