Back

HITRUST CSF®

The HITRUST CSF is an industry-agnostic certifiable framework for regulatory compliance and risk management. This framework, developed by the not-for-profit organization HITRUST, contains a set of prescriptive controls that relate to the organizational processes and technical controls for processing, storing, and transmitting sensitive data.

Google Workspace and Google Cloud Platform have achieved HITRUST CSF certification.

Relevant products & services

Access Transparency

When Google Cloud administrators access your content, Access Transparency gives you near real-time logs of their actions.

VPC Service Controls

Keeps sensitive data private by defining a security perimeter around Google Cloud resources like Cloud Storage buckets, Cloud Bigtable instances, and BigQuery datasets.

Security Command Center

Prevent and detect threats in virtual machines, networks, applications, and storage from one location, and act on them before they cause damage or loss.

Cloud Data Loss Prevention

Provides fast, scalable classification and redaction for sensitive data elements like names, credit card numbers, Google Cloud credentials, and more.

Cloud Key Management Service

Manage cryptographic keys for your cloud services the same way you do on-premises, to protect secrets and other sensitive data that you store in Google Cloud.

Google Cloud Armor

Delivers defense at scale against infrastructure and application DDoS attacks using Google’s global infrastructure and security systems.

Anthos

Built on Google-pioneered open source products like Kubernetes and Knative, Anthos lets you build hybrid applications, on-premises, or in the public cloud.

Access Transparency - Google Workspace

Review logs of actions taken by Google staff when accessing user-generated text entered into Gmail, Docs, Sheets, Slides, and other apps.

Security Center - Google Workspace

Protect your organization with security analytics and best practice recommendations from Google. Included with Enterprise Plus.

Data Loss Prevention - Google Workspace

Scan files for sensitive content and prevent users from sharing sensitive content in Google Drive or shared drive with people outside your organization.

Vault - Google Workspace

Retain, search, and export your organization’s data from select apps with Vault for Business Plus and Enterprise SKUs.

Alert Center - Google Workspace

Protect your organization from the latest security threats by getting real-time actionable alerts and security insights about activity in your domain.

OAuth apps whitelisting - Google Workspace

Ensure that users can only grant permission to trusted applications by controlling which third-party apps are allowed to access users’ Google Workspace data.

GCP & Google Workspace certification letter

Apigee certification letter

Protecting healthcare data on Google Cloud whitepaper

Reference

HITRUST

HITRUST CSF 8.1

Understanding and Leveraging CSF

HIPAA

ISO/IEC 27001

Region

Global

Industry

Healthcare and life sciences