Google Cloud Platform Services in Scope by Compliance Program

Last modified: February 24, 2022

Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.

The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports PCI DSS Certification Penetration Testing
Access Approval
Access Context Manager
Access Transparency
AI Platform
AI Platform Data Labeling
AI Platform Notebooks
AI Platform Training and Prediction
Anthos Config Management
Anthos Service Mesh (ASM)
API Gateway
Apigee
App Engine
Artifact Registry
Assured Workloads for Government
AutoML Natural Language
AutoML Tables
AutoML Translation
AutoML Video
AutoML Vision
BeyondCorp Enterprise
BigQuery
BigQuery Data Transfer Service
BigQuery Omni
Binary Authorization
Certificate Authority Service
Cloud Asset Inventory
Cloud Bigtable
Cloud Billing
Cloud Build
Cloud CDN
Cloud Composer
Cloud console
Cloud console App
Cloud Data Fusion
Cloud Data Loss Prevention
Cloud Debugger
Cloud Deployment Manager
Cloud DNS
Cloud Endpoints
Cloud External Key Manager (Cloud EKM)
Cloud Filestore
Cloud Functions
Cloud Functions for Firebase
Cloud Healthcare
Cloud HSM
Cloud Interconnect
Cloud Key Management Service
Cloud Life Sciences (formerly Google Genomics)
Cloud Load Balancing
Cloud Logging
Cloud Monitoring
Cloud NAT (Network Address Translation)
Cloud Natural Language API
Cloud Profiler
Cloud Router
Cloud Run (fully managed)
Cloud Run for Anthos
Cloud Scheduler
Cloud Shell
Cloud Source Repositories
Cloud Spanner
Cloud SQL
Cloud Storage
Cloud Storage for Firebase
Cloud Tasks
Cloud Trace
Cloud Translation
Cloud Vision
Cloud VPN
Compute Engine
Connect
Container Registry
Data Catalog
Database Migration Service
Dataflow
Datalab
Dataproc
Datastore
Datastream
Dialogflow
Document AI
Firebase Authentication
Firebase Test Lab
Firestore
Game Servers
GCP Marketplace
Google Cloud Armor
Google Cloud CLI
Google Cloud Identity-Aware Proxy
Google Kubernetes Engine
Hub
Identity & Access Management (IAM)
Identity Platform
Insights (ISO 27001 only)
IoT Core
Key Access Justification (Access Sovereignty)
Managed Service for Microsoft Active Directory (AD)
Memorystore
Network Intelligence Center
Network Service Tiers
Persistent Disk
Pub/Sub
reCAPTCHA Enterprise
Resource Manager API
Risk Manager (ISO 27001 only)
Secret Manager
Security Command Center
Service Consumer Management
Service Control
Service Directory
Service Management
Speech-to-Text
Storage Transfer Service
Talent Solution
Text-to-Speech
Traffic Director
Transfer Appliance (ISO 27001 only)
Video Intelligence API
Virtual Private Cloud
VPC Service Controls


Google Workspace and/or Complementary Products in Scope by Compliance Program

Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.

The following Google Workspace Services and/or Complementary Products fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports Penetration Testing
Cloud Identity Management
Currents
Gmail
Google Calendar
Google Chat
Google Cloud Search
Google Contacts
Google Docs
Google Drive
Google Forms
Google Groups for Business
Google Hangouts
Google Jamboard
Google Keep
Google Meet
Google Sheets
Google Sites
Google Slides
Google Tasks
Google Vault
Google Voice
Google Workspace Migrate (ISO 27001 only)