Last modified: January 27, 2021
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
| Service | ISO 27001, 27017, 27018 Certifications | SOC 1, 2, 3 Reports | PCI DSS Certification | Penetration Testing |
|---|---|---|---|---|
| Access Approval | done | done | done | done |
| Access Context Manager | done | done | done | done |
| Access Transparency | done | done | done | done |
| AI Platform | done | done | ||
| AI Platform Data Labeling | done | done | done | done |
| AI Platform Notebooks | done | done | done | done |
| AI Platform Training and Prediction | done | done | done | done |
| Anthos Config Management | done | done | done | |
| Apigee | done | done | done | |
| App Engine | done | done | done | done |
| AutoML Natural Language | done | done | done | done |
| AutoML Tables | done | done | done | done |
| AutoML Translation | done | done | done | done |
| AutoML Video | done | done | done | done |
| AutoML Vision | done | done | done | done |
| BigQuery | done | done | done | done |
| BigQuery Data Transfer Service | done | done | done | done |
| Binary Authorization | done | done | done | |
| Certificate Authority Service | done | done | done | |
| Cloud Asset Inventory | done | done | done | done |
| Cloud Bigtable | done | done | done | done |
| Cloud Billing | done | done | done | done |
| Cloud Build | done | done | done | done |
| Cloud CDN | done | done | done | done |
| Cloud Composer | done | done | done | done |
| Cloud console | done | done | done | done |
| Cloud console App | done | done | done | |
| Cloud Data Fusion | done | done | done | done |
| Cloud Data Loss Prevention | done | done | done | done |
| Cloud Debugger | done | done | done | done |
| Cloud Deployment Manager | done | done | done | done |
| Cloud DNS | done | done | done | done |
| Cloud Endpoints | done | done | done | done |
| Cloud External Key Manager (Cloud EKM) | done | done | done | |
| Cloud Filestore | done | done | done | done |
| Cloud Functions | done | done | done | done |
| Cloud Functions for Firebase | done | done | done | |
| Cloud Healthcare | done | done | done | done |
| Cloud HSM | done | done | done | done |
| Cloud Interconnect | done | done | done | done |
| Cloud Key Management Service | done | done | done | done |
| Cloud Life Sciences (formerly Google Genomics) | done | done | done | done |
| Cloud Load Balancing | done | done | done | done |
| Cloud Logging | done | done | done | done |
| Cloud Monitoring | done | done | done | |
| Cloud NAT (Network Address Translation) | done | done | done | done |
| Cloud Natural Language API | done | done | done | done |
| Cloud Profiler | done | done | done | |
| Cloud Router | done | done | done | done |
| Cloud Run (fully managed) | done | done | done | done |
| Cloud Run for Anthos | done | done | done | |
| Cloud Scheduler | done | done | done | |
| Cloud SDK | done | done | done | done |
| Cloud Shell | done | done | done | done |
| Cloud Source Repositories | done | done | done | done |
| Cloud Spanner | done | done | done | done |
| Cloud SQL | done | done | done | done |
| Cloud Storage | done | done | done | done |
| Cloud Storage for Firebase | done | done | done | |
| Cloud Tasks | done | done | done | |
| Cloud Trace | done | done | done | done |
| Cloud Translation | done | done | done | done |
| Cloud Vision | done | done | done | done |
| Cloud VPN | done | done | done | done |
| Compute Engine | done | done | done | done |
| Connect | done | done | done | |
| Container Registry | done | done | done | done |
| Data Catalog | done | done | done | done |
| Dataflow | done | done | done | done |
| Datalab | done | done | done | done |
| Dataproc | done | done | done | done |
| Datastore | done | done | done | done |
| Dialogflow | done | done | done | done |
| Document AI | done | done | done | |
| Firebase Authentication | done | done | done | |
| Firebase Test Lab | done | done | done | |
| Firestore | done | done | done | done |
| Game Servers | done | done | done | |
| GCP Marketplace | done | done | done | done |
| Google Cloud Armor | done | done | done | done |
| Google Cloud Identity-Aware Proxy | done | done | done | done |
| Google Kubernetes Engine | done | done | done | done |
| Hub | done | done | done | done |
| Identity & Access Management (IAM) | done | done | done | done |
| Identity Platform | done | done | done | done |
| IoT Core | done | done | done | done |
| Managed Service for Microsoft Active Directory (AD) | done | done | done | done |
| Memorystore | done | done | done | done |
| Network Service Tiers | done | done | done | done |
| Persistent Disk | done | done | done | done |
| Pub/Sub | done | done | done | done |
| Resource Manager API | done | done | done | done |
| Secret Manager | done | done | done | |
| Security Command Center | done | done | done | done |
| Service Consumer Management | done | done | done | done |
| Service Control | done | done | done | done |
| Service Directory | done | done | done | |
| Service Management | done | done | done | done |
| Speech-to-Text | done | done | done | done |
| Storage Transfer Service | done | done | done | done |
| Talent Solution | done | done | done | done |
| Text-to-Speech | done | done | done | done |
| Traffic Director | done | done | done | done |
| Transfer Appliance | done(ISO 27001 only) | done | done | |
| Video Intelligence API | done | done | done | done |
| Virtual Private Cloud | done | done | done | done |
| VPC Service Controls | done | done | done | done |
Google Workspace and/or Complementary Products in Scope by Compliance Program
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
The following Google Workspace Services and/or Complementary Products fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
| Service | ISO 27001, 27017, 27018 Certifications | SOC 1, 2, 3 Reports | Penetration Testing |
|---|---|---|---|
| Cloud Identity Management | done | done | done |
| Currents | done | done | done |
| G Suite Migrate | done(ISO 27001 only) | done | |
| Gmail | done | done | done |
| Google Calendar | done | done | done |
| Google Chat | done | done | done |
| Google Cloud Search | done | done | done |
| Google Contacts | done | done | done |
| Google Docs | done | done | done |
| Google Drive | done | done | done |
| Google Forms | done | done | done |
| Google Groups for Business | done | done | done |
| Google Hangouts | done | done | done |
| Google Jamboard | done | done | done |
| Google Keep | done | done | done |
| Google Meet | done | done | done |
| Google Sheets | done | done | done |
| Google Sites | done | done | done |
| Google Slides | done | done | done |
| Google Tasks | done | done | done |
| Google Vault | done | done | done |
| Google Voice | done | done | done |