Google Cloud Platform Services in Scope by Compliance Program

Last modified: April 9th, 2019 | Previous Versions

Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.

The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports PCI DSS Certification
Google App Engine done done done
Google App Engine Flexible Environment done done done
Google BigQuery done done done
Google Cloud Bigtable done done done
Google Cloud Billing API done done
Google Cloud CDN (Content Delivery Network) done done done
Google Cloud Console done done done
Google Cloud Data Loss Prevention done done done
Google Cloud Dataflow done done done
Google Cloud Datalab done
Google Cloud Dataproc done done done
Google Cloud Datastore done done done
Google Cloud DNS done done done
Google Cloud Endpoints done
Google Cloud Functions done done done
Google Cloud Healthcare done done done
Google Cloud IAM (Identity & Access Management) done done done
Google Cloud Jobs API done done
Google Cloud Key Management Service done done done
Google Cloud Launcher done done done
Google Cloud Load Balancing done done done
Google Cloud Machine Learning Engine done done done
Google Cloud Mobile App done done
Google Cloud Natural Language API done done done
Google Cloud Pub/Sub done done done
Google Cloud Resource Manager done done done
Google Cloud Router done done done
Google Cloud SDK done done
Google Cloud Security Scanner done done done
Google Cloud Shell done done done
Google Cloud Source Repositories done done
Google Cloud Speech API done done done
Google Cloud SQL done done done
Google Cloud Storage done done done
Google Cloud Translation API done done done
Google Cloud Vision API done done done
Google Cloud Virtual Network done done done
Google Cloud VPN done done done
Google Compute Engine done done done
Google Cloud Build done done done
Google Kubernetes Engine done done done
Google Container Registry done done done
Google Deployment Manager done done done
Google Genomics done done
Google Service Control done done
Google Stackdriver Debugger done done done
Google Stackdriver Error Reporting done done done
Google Stackdriver Logging done done done
Google Stackdriver Trace done done done


G Suite and/or Complementary Products in Scope by Compliance Program

Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.

The following G Suite Services and/or Complementary Products fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports
Cloud Identity Management done done
Gmail done done
Google+ done done
Google Calendar done done
Google Cloud Search done done
Google Contacts done done
Google Docs done done
Google Sheets done done
Google Slides done done
Google Forms done done
Google Drive done done
Google Groups for Business done done
Google Hangouts done done
Hangouts Chat done done
Hangouts Meet done done
Google Talk done done
Google Voice done(ISO 27001 only) done
Google Jamboard done done
Google Keep done done
Google Sites done done
Google Tasks done done
Google Vault done done

Previous Versions