Last modified: December 01, 2020
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
| Service | ISO 27001, 27017, 27018 Certifications | SOC 1, 2, 3 Reports | PCI DSS Certification | Penetration Testing |
|---|---|---|---|---|
| App Engine | done | done | done | done |
| Access Approval | done | done | done | |
| Access Context Manager | done | done | done | done |
| Access Transparency | done | done | done | done |
| AI Platform Data Labeling | done | done | done | |
| AI Platform Notebooks | done | done | done | done |
| AI Platform Training and Prediction | done | done | done | done |
| Apigee Hybrid | done | done | ||
| AutoML Natural Language | done | done | done | done |
| AutoML Tables | done | done | done | done |
| AutoML Translation | done | done | done | done |
| AutoML Video | done | done | done | done |
| AutoML Vision | done | done | done | done |
| BigQuery | done | done | done | done |
| BigQuery Data Transfer Service | done | done | done | done |
| Cloud Asset Inventory | done | done | done | |
| Cloud Bigtable | done | done | done | done |
| Cloud Billing API | done | done | done | done |
| Cloud Build | done | done | done | done |
| Cloud CDN | done | done | done | done |
| Cloud console | done | done | done | done |
| Cloud console App | done | done | done | |
| Cloud Data Fusion | done | done | done | |
| Cloud Data Loss Prevention | done | done | done | done |
| Cloud Debugger (formerly Stackdriver Debugger) | done | done | done | done |
| Cloud Deployment Manager | done | done | done | done |
| Cloud DNS | done | done | done | done |
| Cloud Endpoints | done | done | done | done |
| Cloud Filestore | done | done | done | done |
| Cloud Functions | done | done | done | done |
| Cloud Functions for Firebase | done | done | ||
| Cloud Healthcare | done | done | done | done |
| Cloud HSM | done | done | done | done |
| Cloud Interconnect | done | done | done | done |
| Cloud Key Management Service | done | done | done | done |
| Cloud Life Sciences (formerly Google Genomics) | done | done | done | done |
| Cloud Load Balancing | done | done | done | done |
| Cloud Logging (formerly Stackdriver Logging; includes the Error Reporting feature) | done | done | done | done |
| Cloud Monitoring (formerly Stackdriver Monitoring) | done | done | ||
| Cloud NAT (Network Address Translation) | done | done | done | done |
| Cloud Natural Language API | done | done | done | |
| Cloud Profiler (formerly Stackdriver Profiler) | done | done | done | |
| Cloud Router | done | done | done | done |
| Cloud Run (fully managed) | done | done | done | done |
| Cloud Run for Anthos | done | done | ||
| Cloud SDK | done | done | done | done |
| Cloud Shell | done | done | done | done |
| Cloud Source Repositories | done | done | done | done |
| Cloud Spanner | done | done | done | done |
| Cloud SQL | done | done | done | done |
| Cloud Storage | done | done | done | done |
| Cloud Storage for Firebase | done | done | ||
| Cloud Trace (formerly Stackdriver Trace) | done | done | done | done |
| Cloud Translation (and Cloud Translation v2 or any subsequent general availability version/release) | done | done | done | done |
| Cloud Vision | done | done | done | done |
| Cloud VPN | done | done | done | done |
| Compute Engine | done | done | done | done |
| Container Registry | done | done | done | done |
| Data Catalog | done | done | done | done |
| Dataflow | done | done | done | done |
| Datalab | done | done | done | done |
| Dataproc | done | done | done | done |
| Datastore | done | done | done | done |
| Dialogflow | done | done | done | done |
| Event Threat Detection | done | done | done | |
| Firebase Authentication | done | done | ||
| Firebase Test Lab | done | done | ||
| Firestore | done | done | done | done |
| GCP Marketplace | done | done | done | done |
| GKE Connect | done | |||
| GKE Hub | done | done | done | |
| Google Cloud Armor | done | done | done | done |
| Google Cloud Identity-Aware Proxy | done | done | done | done |
| Google Kubernetes Engine | done | done | done | done |
| Identity & Access Management (IAM) | done | done | done | done |
| IoT Core | done | done | done | done |
| Managed Service for Microsoft Active Directory (AD) | done | done | done | |
| Memorystore | done | done | done | done |
| Network Service Tiers | done | done | done | done |
| Orbitera | done | done | done | done |
| Persistent Disk | done | done | done | done |
| Pub/Sub | done | done | done | done |
| Resource Manager API | done | done | done | done |
| Security Command Center | done | done | done | |
| Service Consumer Management | done | done | done | done |
| Service Control | done | done | done | done |
| Service Management | done | done | done | done |
| Speech-to-Text | done | done | done | done |
| Storage Transfer Service | done | done | done | done |
| Talent Solution | done | done | done | done |
| Text-to-Speech | done | done | done | done |
| Traffic Director | done | done | done | |
| Video Intelligence API | done | done | done | done |
| Virtual Private Cloud | done | done | done | done |
| VPC Service Controls | done | done | done | done |
| Web Security Scanner | done | done | done |
Google Workspace and/or Complementary Products in Scope by Compliance Program
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
The following Google Workspace Services and/or Complementary Products fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
| Service | ISO 27001, 27017, 27018 Certifications | SOC 1, 2, 3 Reports | Penetration Testing |
|---|---|---|---|
| Cloud Identity Management | done | done | done |
| Gmail | done | done | done |
| Currents | done | done | |
| Google Calendar | done | done | done |
| Google Cloud Search | done | done | done |
| Google Contacts | done | done | done |
| Google Docs | done | done | done |
| Google Sheets | done | done | done |
| Google Slides | done | done | done |
| Google Forms | done | done | done |
| Google Drive | done | done | done |
| Google Groups for Business | done | done | done |
| Google Hangouts | done | done | done |
| Google Chat | done | done | done |
| Google Meet | done | done | done |
| Google Voice | done | done | done |
| Google Jamboard | done | done | done |
| Google Keep | done | done | done |
| Google Sites | done | done | done |
| Google Tasks | done | done | done |
| Google Vault | done | done | done |
| G Suite Migrate | done |