Standards, Regulations & Certifications

To help you with compliance and reporting, we share information, best practices, and easy access to documentation. Our products regularly undergo independent verification of security, privacy, and compliance controls, achieving certifications against global standards to earn your trust. We’re constantly working to expand our coverage.

CSA STAR

Securing cloud computing environments.

The Cloud Security Alliance is a not-for-profit organization with a mission to “promote the use of best practices for providing security assurance within Cloud Computing, and provide education on the uses of Cloud Computing to help secure all other forms of computing.”

The CSA’s Security, Trust & Assurance Registry Program (STAR) is a three-tiered cloud provider assurance program that consists of a self-assessment, third-party audit, and continuous monitoring, designed to aid customers with their assessment of cloud service providers.

Google is a CSA sponsor and a member of CSA’s International Standardization Council (ISC). The ISC is chartered with coordinating all aspects of the standardization effort in CSA.

Google Cloud (G Suite and the Google Cloud Platform) has achieved the third-party assessment-based certification (CSA STAR Level 2: Attestation). The Google Cloud Platform CSA Star SOC2+ report and the G Suite CSA Star SOC2+ report are available to customers under NDA. You can download the STAR Attestation documents from the CSA website.

The following Google Cloud Platform products are covered under the Google Cloud Platform CSA Star SOC2+ report:

Google Cloud Platform:

The following G Suite products are covered under the G Suite CSA Star SOC2+ report:

G Suite:
Additional Google Products:
Google Product APIs:
G Suite Admin SDK:
Supporting Services:
  • Gmail Delivery
  • Gmail Frontend/Middleware
  • Gmail Medley
  • Gmail Spam