Google Cloud Platform Services in Scope by Compliance Program

Last modified: February 14, 2020 | Previous Versions

Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.

The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports PCI DSS Certification
App Engine done done done
App Engine Flexible Environment done done done
BigQuery done done done
Cloud Bigtable done done done
Cloud Billing API done done
Cloud CDN (Content Delivery Network) done done done
Cloud Console done done done
Cloud Data Loss Prevention done done done
Dataflow done done done
Datalab done
Dataproc done done done
Datastore done done done
Cloud DNS done done done
Cloud Endpoints done
Cloud Functions done done done
Cloud Healthcare done done done
Identity & Access Management (IAM) done done done
Talent Solution done done
Cloud Key Management Service done done done
Google Cloud Marketplace done done done
Cloud Load Balancing done done done
AI Platform Training and Prediction done done done
Cloud Mobile App done done
Cloud Natural Language API done done done
Pub/Sub done done done
Resource Manager done done done
Cloud Router done done done
Cloud SDK done done
Web Security Scanner done done done
Cloud Shell done done done
Cloud Source Repositories done done
Speech-to-Text done done done
Cloud SQL done done done
Cloud Storage done done done
Cloud Translation API done done done
Cloud Vision API done done done
Google Cloud Virtual Network done done done
Cloud VPN done done done
Compute Engine done done done
Cloud Build done done done
Google Kubernetes Engine done done done
Container Registry done done done
Cloud Deployment Manager done done done
Cloud Life Sciences done done
Service Control done done
Stackdriver Debugger done done done
Stackdriver Error Reporting done done done
Stackdriver Logging done done done
Stackdriver Trace done done done


G Suite and/or Complementary Products in Scope by Compliance Program

Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.

The following G Suite Services and/or Complementary Products fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports
Cloud Identity Management done done
Gmail done done
Google+ done done
Google Calendar done done
Google Cloud Search done done
Google Contacts done done
Google Docs done done
Google Sheets done done
Google Slides done done
Google Forms done done
Google Drive done done
Google Groups for Business done done
Google Hangouts done done
Hangouts Chat done done
Hangouts Meet done done
Google Voice done done
Google Jamboard done done
Google Keep done done
Google Sites done done
Google Tasks done done
Google Vault done done

Previous Versions