BSI C5 logo

Cloud Computing Compliance Controls Catalogue (C5)

The Cloud Computing Compliance Controls Catalogue (C5) was developed by the German Federal Office for Information Security (BSI) as a way to assess the information security of cloud services that leverage internationally recognized security standards like ISO/IEC 27001 to set a consistent audit baseline that helps establish a framework of trust between cloud providers and their customers.

Through an independent third-party audit, Google Cloud (Google Workspace and Google Cloud Platform) has achieved C5 attestation. This means current and potential customers can use the C5 attestation as verification of compliance and as part of their assessment for using Google Cloud services.

Google Cloud services that are in scope for the C5 attestation

Relevant products & services

Cloud Computing Compliance Controls Catalogue (C5) reports may be requested via the Compliance Reports Manager. Potential customers can reach out to sales for more information.