Google terms of service violations and Google Cloud resources
Google treats policy and Terms of Service (ToS) violations very seriously in order to protect users, resources, and data. At the same time at Google we understand the value of users' Google Cloud resources and we have provided safeguards and recovery mechanisms for legitimate users that temporarily lose access to their Google Cloud resources due to ToS violations.
This page describes how ToS violations may affect access to your Google Cloud resources and provides best practices to ensure a quick recovery.
Suspended vs orphaned Project resources
A Project resource or user can be suspended by Google due to ToS violations. If the user is the sole owner of a Project resource, that Project will also be suspended. When this happens, existing workloads are shut down, and users lose access to the suspended Project resource. Project owners will receive an email notification informing them of the suspension, and how to appeal the suspension. If a Project resource is suspended for more than nine months, it is marked for deletion. See the Policy Violations FAQ for more information on appeal best practices in case of a Project resource suspension.
A Project resource becomes orphaned if it does not have an owner, regardless of whether they are active or suspended. This might come about if the Google accounts belonging to all owners or users associated with the Project resource are deleted. A Project resource isn't considered orphaned if the owners are suspended.
Orphaned Project resources are inaccessible. If you want to recover an orphaned project, reach out to Google support. A Project resource that is orphaned will immediately be marked for deletion unless one of the following criteria are met:
- It has some API activity that is reflected in the logs.
- It is associated with a G Suite customer domain.
- It has a live App Engine app.
- It has any active or future Variable Term Quota.
- It has a valid Cloud billing account billing state.
- It is owned by an Organization resource resource.
Projects that are marked for deletion are not usable, and will be fully deleted after approximately 30 days. Some resources, such as Cloud Storage resources, are deleted much sooner. For more information about the project deletion process, see Creating and Managing Projects.
How to avoid orphaned projects
In order to prevent a project from becoming orphaned, we recommend that more than one owner be associated with the project at all times.
If a project belongs to an Organization resource, then it will always have at least the Organization as an owner and as such will not be orphaned. The Organization administrator has full control over each project in the Organization. To eliminate the risk of a Project resource becoming orphaned, we recommend obtaining an Organization resource and migrating all production projects under it.
Effect of ToS violations
Google-wide disabled account
In some cases a Google-wide account (which covers access to a variety of Google products like Google Photos, Google Play, Google Drive, and GCP) will be disabled for violations of a Google ToS, egregious policy violations, or as required by law. Owners of disabled Google accounts will not be able to access their Google Cloud resources until the account is reinstated. If an account is disabled, a notification is sent to the secondary email address provided during the signup process, if available. If a phone number is available, the user is notified via text message. The notification includes a link for appeal and recovery, where applicable.
In order to regain access to their GCP resources, owners of disabled Google accounts will need to contact Google support and have their account re-enabled.
To minimize the effect of an account being disabled on Google Cloud resources, we recommend that you add more than one owner to all resources. As long as there is at least one active owner, GCP resources will not be suspended due to the one of the owners being disabled.
Google Cloud account suspension
In certain circumstances when a Google Cloud user is consistently violating ToS or Google Cloud Acceptable Use Policy (AUP) through their projects, their access to Google Cloud may be suspended. When that happens, the developer will not be able to access their Cloud projects. They will continue to have access to other Google services like Gmail.
When a Google Cloud account is suspended and the developer has at least one active project, they will get an email informing them about the project being suspended. The developer can go to the Console, fill out the form and reach out to Google to resolve the issue. See the Policy Violations FAQ for more information on appeal best practices in case of a Project resource suspension.
Google Cloud project suspension
Google Cloud projects may be suspended due to violations of the GCP ToS, including the Google Cloud Acceptable Use Policy (GCP AUP). When activities that violate the Google Cloud AUP or ToS are detected in a project, the project owner has an obligation to fix the violation immediately. If the violation is not fixed, Google may take action to suspend the project. It is important that Google Cloud developers check the project owner email account regularly. If Google suspends a Google Cloud project then all the associated Google Cloud workloads will be suspended as well. The owner of a suspended project will receive a notification email from firstname.lastname@example.org with resources to appeal.
If a suspended Project resource has at least one owner, whether active or suspended, it is not considered orphaned and will not marked be for deletion. However, a Project resource that has been suspended for nine months will be marked for deletion even if it is not orphaned.
To recover a suspended project please fix the issue and follow the link in the notification email or contact Google support. See the Policy Violations FAQ for more information on appeal best practices in case of a Project resource suspension.
Billing account suspension
Google Cloud billing accounts may be suspended due to violations of Google Cloud ToS or for suspected fraud. If a billing account is suspended then all Google Cloud resources attached to that billing account are suspended as well.
To recover a suspended billing account owners must fill out the Account Verification Form to submit an appeal for review with the Google support team.
Cloud resources linked to a suspended billing account are not considered orphaned, as long as they have at least one active owner.