HITRUST CSF®

The HITRUST CSF is an industry-agnostic certifiable framework for regulatory compliance and risk management. This framework, developed by the not-for-profit organization HITRUST, contains a set of prescriptive controls that relate to the organizational processes and technical controls for processing, storing, and transmitting sensitive data.

Google Workspace and Google Cloud have achieved HITRUST CSF certification. A Shared Responsibility Matrix developed jointly by Google and HITRUST is available as a free download.