Google Cloud Platform Services in Scope by Compliance Program

Last modified: January 27, 2021

Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.

The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports PCI DSS Certification Penetration Testing
Access Approval
Access Context Manager
Access Transparency
AI Platform
AI Platform Data Labeling
AI Platform Notebooks
AI Platform Training and Prediction
Anthos Config Management
Apigee
App Engine
AutoML Natural Language
AutoML Tables
AutoML Translation
AutoML Video
AutoML Vision
BigQuery
BigQuery Data Transfer Service
Binary Authorization
Certificate Authority Service
Cloud Asset Inventory
Cloud Bigtable
Cloud Billing
Cloud Build
Cloud CDN
Cloud Composer
Cloud console
Cloud console App
Cloud Data Fusion
Cloud Data Loss Prevention
Cloud Debugger
Cloud Deployment Manager
Cloud DNS
Cloud Endpoints
Cloud External Key Manager (Cloud EKM)
Cloud Filestore
Cloud Functions
Cloud Functions for Firebase
Cloud Healthcare
Cloud HSM
Cloud Interconnect
Cloud Key Management Service
Cloud Life Sciences (formerly Google Genomics)
Cloud Load Balancing
Cloud Logging
Cloud Monitoring
Cloud NAT (Network Address Translation)
Cloud Natural Language API
Cloud Profiler
Cloud Router
Cloud Run (fully managed)
Cloud Run for Anthos
Cloud Scheduler
Cloud SDK
Cloud Shell
Cloud Source Repositories
Cloud Spanner
Cloud SQL
Cloud Storage
Cloud Storage for Firebase
Cloud Tasks
Cloud Trace
Cloud Translation
Cloud Vision
Cloud VPN
Compute Engine
Connect
Container Registry
Data Catalog
Dataflow
Datalab
Dataproc
Datastore
Dialogflow
Document AI
Firebase Authentication
Firebase Test Lab
Firestore
Game Servers
GCP Marketplace
Google Cloud Armor
Google Cloud Identity-Aware Proxy
Google Kubernetes Engine
Hub
Identity & Access Management (IAM)
Identity Platform
IoT Core
Managed Service for Microsoft Active Directory (AD)
Memorystore
Network Service Tiers
Persistent Disk
Pub/Sub
Resource Manager API
Secret Manager
Security Command Center
Service Consumer Management
Service Control
Service Directory
Service Management
Speech-to-Text
Storage Transfer Service
Talent Solution
Text-to-Speech
Traffic Director
Transfer Appliance (ISO 27001 only)
Video Intelligence API
Virtual Private Cloud
VPC Service Controls


Google Workspace and/or Complementary Products in Scope by Compliance Program

Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.

The following Google Workspace Services and/or Complementary Products fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports Penetration Testing
Cloud Identity Management
Currents
G Suite Migrate (ISO 27001 only)
Gmail
Google Calendar
Google Chat
Google Cloud Search
Google Contacts
Google Docs
Google Drive
Google Forms
Google Groups for Business
Google Hangouts
Google Jamboard
Google Keep
Google Meet
Google Sheets
Google Sites
Google Slides
Google Tasks
Google Vault
Google Voice