U.S. | Financial services

OCC Third-Party Risk Management Guidance

The Office of the Comptroller of the Currency ("OCC") is an independent bureau of the United State Department of the Treasury that ensures that national banks and federal savings associations operate in a safe and sound manner. The OCC Bulletin 2013-29 Third-Party Relationship: Risk Management Guidance ("OCC Bulletin") provides guidance to banks for assessing and managing risks associated with outsourced service providers.

The OCC Bulletin recommends risk management strategies for when banks outsource their banking functions, including in relation to due diligence, contract negotiation, ongoing monitoring and termination.

Google Cloud’s contracts for banks in the United State address the contractual requirements in the OCC Bulletin. We have also created mappings to the guidance for both GCP and Google Workspace to assist you with understanding how we can support you with meeting the requirements and assess us as an outsourced service provider. Google Cloud is committed to addressing these requirements regardless of how banks choose to use our services.


ISO/IEC 27001

Learn more