Last modified: April 3, 2020
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
| Service | ISO 27001, 27017, 27018 Certifications | SOC 1, 2, 3 Reports | PCI DSS Certification |
|---|---|---|---|
| App Engine | done | done | done |
| BigQuery | done | done | done |
| Cloud Bigtable | done | done | done |
| Cloud Billing API | done | done | done |
| Cloud CDN | done | done | done |
| Cloud console | done | done | done |
| Cloud Data Loss Prevention | done | done | done |
| Dataflow | done | done | done |
| Datalab | done | done | done |
| Dataproc | done | done | done |
| Datastore | done | done | done |
| Cloud DNS | done | done | done |
| Cloud Endpoints | done | done | done |
| Cloud Functions | done | done | done |
| Cloud Healthcare | done | done | done |
| Identity & Access Management (IAM) | done | done | done |
| Talent Solution | done | done | |
| Cloud Key Management Service | done | done | done |
| Cloud Load Balancing | done | done | done |
| AI Platform Training and Prediction | done | done | |
| Cloud console App | done | done | done |
| Cloud Natural Language API | done | done | done |
| Pub/Sub | done | done | done |
| Resource Manager API | done | done | done |
| Cloud Router | done | done | done |
| Cloud SDK | done | done | |
| Web Security Scanner | done | done | done |
| Cloud Shell | done | done | done |
| Cloud Source Repositories | done | done | done |
| Speech-to-Text | done | done | done |
| Cloud SQL | done | done | done |
| Cloud Storage | done | done | done |
| Cloud Translation (and Cloud Translation v2 or any subsequent general availability version/release) | done | done | done |
| Cloud Vision | done | done | done |
| Cloud VPN | done | done | done |
| Compute Engine | done | done | done |
| Cloud Build | done | done | done |
| Google Kubernetes Engine | done | done | done |
| Container Registry | done | done | done |
| Cloud Deployment Manager | done | done | done |
| Cloud Life Sciences (formerly Google Genomics) | done | done | |
| Service Control | done | done | |
| Stackdriver Debugger | done | done | done |
| Stackdriver Logging | done | done | done |
| Stackdriver Trace | done | done | done |
| Stackdriver Profiler | done | done | |
| Stackdriver Error Reporting | done | done | done |
| Access Context Manager | done | done | |
| Access Transparency | done | done | done |
| AutoML Tables | done | done | |
| BigQuery Data Transfer Service | done | done | done |
| AI Platform Notebooks | done | done | |
| Google Cloud Armor | done | done | done |
| AutoML Natural Language | done | done | done |
| AutoML Translation | done | done | done |
| AutoML Video | done | done | |
| AutoML Vision | done | done | done |
| Cloud Data Fusion | done | ||
| Cloud Filestore | done | done | done |
| Firestore | done | done | done |
| Cloud Functions for Firebase | done | done | |
| Cloud HSM | done | done | done |
| Google Cloud Identity-Aware Proxy | done | done | done |
| Cloud Interconnect | done | done | done |
| IoT Core | done | done | done |
| Memorystore | done | done | done |
| Cloud NAT (Network Address Translation) | done | done | |
| Cloud Run (fully managed) | done | done | |
| Cloud Storage for Firebase | done | done | |
| Storage Transfer Service | done | done | done |
| Text-to-Speech | done | done | done |
| Video Intelligence API | done | done | done |
| Data Catalog | done | done | |
| Dialogflow | done | done | done |
| Firebase Authentication | done | done | |
| Firebase Test Lab | done | done | |
| GCP Marketplace | done | done | done |
| Service Management | done | done | |
| Network Service Tiers | done | done | done |
| Orbitera | done | done | done |
| Persistent Disk | done | done | done |
| Service Consumer Management | done | done | |
| Virtual Private Cloud | done | done | done |
| VPC Service Controls | done | done |
G Suite and/or Complementary Products in Scope by Compliance Program
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
The following G Suite Services and/or Complementary Products fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
| Service | ISO 27001, 27017, 27018 Certifications | SOC 1, 2, 3 Reports |
|---|---|---|
| Cloud Identity Management | done | done |
| Gmail | done | done |
| Google+ | done | done |
| Google Calendar | done | done |
| Google Cloud Search | done | done |
| Google Contacts | done | done |
| Google Docs | done | done |
| Google Sheets | done | done |
| Google Slides | done | done |
| Google Forms | done | done |
| Google Drive | done | done |
| Google Groups for Business | done | done |
| Google Hangouts | done | done |
| Hangouts Chat | done | done |
| Hangouts Meet | done | done |
| Google Voice | done | done |
| Google Jamboard | done | done |
| Google Keep | done | done |
| Google Sites | done | done |
| Google Tasks | done | done |
| Google Vault | done | done |