Google Cloud Platform Services in Scope by Compliance Program

Last modified: December 01, 2020

Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.

The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports PCI DSS Certification Penetration Testing
App Engine
Access Approval
Access Context Manager
Access Transparency
AI Platform Data Labeling
AI Platform Notebooks
AI Platform Training and Prediction
Apigee Hybrid
AutoML Natural Language
AutoML Tables
AutoML Translation
AutoML Video
AutoML Vision
BigQuery
BigQuery Data Transfer Service
Cloud Asset Inventory
Cloud Bigtable
Cloud Billing API
Cloud Build
Cloud CDN
Cloud console
Cloud console App
Cloud Data Fusion
Cloud Data Loss Prevention
Cloud Debugger (formerly Stackdriver Debugger)
Cloud Deployment Manager
Cloud DNS
Cloud Endpoints
Cloud Filestore
Cloud Functions
Cloud Functions for Firebase
Cloud Healthcare
Cloud HSM
Cloud Interconnect
Cloud Key Management Service
Cloud Life Sciences (formerly Google Genomics)
Cloud Load Balancing
Cloud Logging (formerly Stackdriver Logging; includes the Error Reporting feature)
Cloud Monitoring (formerly Stackdriver Monitoring)
Cloud NAT (Network Address Translation)
Cloud Natural Language API
Cloud Profiler (formerly Stackdriver Profiler)
Cloud Router
Cloud Run (fully managed)
Cloud Run for Anthos
Cloud SDK
Cloud Shell
Cloud Source Repositories
Cloud Spanner
Cloud SQL
Cloud Storage
Cloud Storage for Firebase
Cloud Trace (formerly Stackdriver Trace)
Cloud Translation (and Cloud Translation v2 or any subsequent general availability version/release)
Cloud Vision
Cloud VPN
Compute Engine
Container Registry
Data Catalog
Dataflow
Datalab
Dataproc
Datastore
Dialogflow
Event Threat Detection
Firebase Authentication
Firebase Test Lab
Firestore
GCP Marketplace
GKE Connect
GKE Hub
Google Cloud Armor
Google Cloud Identity-Aware Proxy
Google Kubernetes Engine
Identity & Access Management (IAM)
IoT Core
Managed Service for Microsoft Active Directory (AD)
Memorystore
Network Service Tiers
Orbitera
Persistent Disk
Pub/Sub
Resource Manager API
Security Command Center
Service Consumer Management
Service Control
Service Management
Speech-to-Text
Storage Transfer Service
Talent Solution
Text-to-Speech
Traffic Director
Video Intelligence API
Virtual Private Cloud
VPC Service Controls
Web Security Scanner


Google Workspace and/or Complementary Products in Scope by Compliance Program

Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.

The following Google Workspace Services and/or Complementary Products fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports Penetration Testing
Cloud Identity Management
Gmail
Currents
Google Calendar
Google Cloud Search
Google Contacts
Google Docs
Google Sheets
Google Slides
Google Forms
Google Drive
Google Groups for Business
Google Hangouts
Google Chat
Google Meet
Google Voice
Google Jamboard
Google Keep
Google Sites
Google Tasks
Google Vault
G Suite Migrate