Global | Healthcare and life sciences


The HITRUST CSF is an industry-agnostic certifiable framework for regulatory compliance and risk management. This framework, developed by the not-for-profit organization HITRUST, contains a set of prescriptive controls that relate to the organizational processes and technical controls for processing, storing, and transmitting sensitive data.

Google Workspace and Google Cloud have achieved HITRUST CSF certification. A Shared Responsibility Matrix developed jointly by Google and HITRUST is available as a free download. 

Google Cloud services that are in scope for HITRUST CSF

ISO/IEC 27001

Learn more