The higher education information security community, EDUCAUSE, Internet2, and the Research & Education Networks Information Sharing & Analysis Center (REN-ISAC) created the Higher Education Cloud Vendor Assessment Toolkit (HECVAT), a self-assessment that attempts to standardize higher education information security and data protection requirements around cloud service providers. The assessment helps higher education institutions ensure that cloud services are appropriately assessed for security and privacy needs, and allows a consistent, easily-adopted methodology for those who want to use cloud services.
Google Cloud has completed a HECVAT self-assessment for GCP and for G Suite. These assessments detail our compliance with industry standards and the security protocols built into our infrastructure.
You can find Google's HECVAT self-assessments on REN-ISAC's Cloud Broker Index.
Google's HECVAT self-assessments are available on REN-ISAC's Cloud Broker Index.
The Google Cloud Platform CSA Star SOC2+ report and the G Suite CSA Star SOC2+ report are available to our existing customers and may be requested via customer support. Navigate directly to the console for GCP and the contact center for G Suite. Potential customers can reach out to sales for more information.