Global | All industries
ISO/IEC 27018
The International Organization for Standardization (ISO) is an independent, non-governmental international organization with a membership of 163 national standards bodies.
ISO/IEC 27018 relates to one of the most critical components of cloud privacy: the protection of personally identifiable information (PII). This standard focuses in two ways on security controls for public-cloud service providers that process PII:
- Builds upon existing ISO/IEC 27002 controls by adding specific items for cloud privacy
- Provides entirely new security controls for personal data
Google Cloud Platform, Google Workspace, and Apigee are certified as ISO/IEC 27018 compliant.
Google Cloud Platform, Google Workspace, and Apigee ISO 27018 certificates may be requested via the Compliance Reports Manager. Potential customers can reach out to sales for more information.
Google Cloud services that are in scope for ISO/IEC 27018
Google Cloud
Chronicle SIEM and Google Cloud Threat Intelligence for Chronicle are covered by the SecOps Services Agreement.
Where we are simplifying the name of our service, we have also included its former name in parentheses.
Google Workspace
* Indicates that the scope of this certification applies to this offering where Google acts as a processor of Service Data (in addition to Google acting as a processor of Customer Data). Google’s processing of Service Data as a processor is subject to agreement with relevant enterprise customers of this offering.
Apigee
Related offerings
ISO/IEC 27001
ISO/IEC 27017
Take the next step
Start building on Google Cloud with $300 in free credits and 20+ always free products.
Learn security best practices
See our best practicesSolve common problems
Watch security use-case videosWork with a partner
See our security partners
