Standards, regulations & certifications

To help you with compliance and reporting, we share information, best practices, and easy access to documentation. Our products regularly undergo independent verification of security, privacy, and compliance controls, achieving certifications against global standards to earn your trust. We're constantly working to expand our coverage.

This site contains information about Google's certifications and compliance standards it satisfies as well as general information about certain region or sector-specific regulations.


Assessment, authorization, and monitoring.

The U.S. Federal Government established Federal Risk and Authorization Management Program (FedRAMP), a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services.

Google maintains a FedRAMP Moderate authorization to operate (ATO) for Google Cloud Platform and G Suite. Google’s FedRAMP status is posted on the government’s website: FedRAMP Marketplace.

Google Cloud services that are covered by FedRAMP:

G Suite Editions
G Suite Services
Google Cloud Platform (GCP):