Google Cloud Platform Services in Scope by Compliance Program

Last modified: June 14, 2023

Capitalized terms have the meaning stated in the applicable agreement between Customer or Partner and Google.

The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports PCI DSS Certification Penetration Testing
Access Approval
Access Context Manager
Access Transparency
AI Platform Data Labeling
AI Platform Neural Architecture Search (NAS)
AI Platform Training and Prediction
AlloyDB
Anthos Config Management (ACM)
Anthos Identity Service (AIS)
Anthos Service Mesh (ASM)
API Gateway
Apigee
App Engine
Artifact Registry
Assured Workloads for Government
AutoML Natural Language
AutoML Tables
AutoML Translation (ISO 27001 only)
AutoML Video
AutoML Vision
BeyondCorp Enterprise
BigQuery
BigQuery Data Transfer Service
Binary Authorization
Certificate Authority Service
Chronicle Uppercase
Cloud Asset Inventory
Cloud Bigtable
Cloud Billing
Cloud Build
Cloud CDN
Cloud Composer
Cloud Console
Cloud Console App
Cloud Data Fusion
Cloud Data Loss Prevention
Cloud Deployment Manager
Cloud DNS
Cloud Endpoints
Cloud External Key Manager (Cloud EKM)
Cloud Filestore
Cloud Functions
Cloud Functions for Firebase
Cloud Healthcare
Cloud HSM
Cloud IDS
Cloud Interconnect
Cloud Key Management Service
Cloud Life Sciences
Cloud Load Balancing
Cloud Logging
Cloud Monitoring
Cloud NAT (Network Address Translation)
Cloud Natural Language API
Cloud Profiler
Cloud Router
Cloud Run
Cloud Run for Anthos
Cloud Scheduler
Cloud SDK
Cloud Shell
Cloud Source Repositories
Cloud Spanner
Cloud Speaker ID
Cloud SQL
Cloud Storage
Cloud Storage for Firebase
Cloud Tasks
Cloud Trace
Cloud Translation
Cloud Vision
Cloud VPN
Compute Engine
Connect
Contact Center AI
Container Registry
Data Catalog
Database Migration Service
Dataflow
Datalab
Dataproc
Datastore
DataStream
Dialogflow
Document AI
Earth Engine (ISO 27001 only)
Eventarc
Firebase Authentication
Firebase Test Lab
Firestore
Game Servers
Google Cloud Marketplace
Google Cloud Armor
Google Cloud Identity-Aware Proxy
Google Cloud Threat Intelligence for Chronicle
Looker Studio (ISO 27001 only)
Google Kubernetes Engine
Hub
Identity & Access Management (IAM)
Identity Platform
Insights
IoT Core
Key Access Justification (Access Sovereignty)
Managed Service for Microsoft Active Directory (AD)
Memorystore
Migrate to Virtual Machines
Network Connectivity Center
Network Intelligence Center
Network Service Tiers
Notebooks (formerly AI Platform Notebooks)
Persistent Disk
Pub/Sub
reCAPTCHA Enterprise
Recommender
Resource Manager API
Risk Manager
Secret Manager
Security Command Center
Service Directory
Service Infrastructure
Speech-to-Text
Storage Transfer Service
Talent Solution
Text-to-Speech
Traffic Director
Transfer Appliance (ISO 27001 only)
Vertex AI Platform (formerly Vertex AI)
Video Intelligence API
Virtual Private Cloud
VPC Service Controls
Web Risk API
Workflows
BigQuery Omni
Cloud Media Edge (ISO 27001 only)
Anthos Clusters on Bare Metal
Anthos Clusters on VMware
Anthos Config Management – Software
Anthos Identity Service – Software
Anthos Service Mesh – Software
Binary Authorization – Software
Cloud Logging – Software
Cloud Monitoring – Software
Cloud Run for Anthos – Software
Connect – Software
Migrate to Containers


Google Workspace and Cloud Identity Services in Scope by Compliance Program

Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.

The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports Penetration Testing
Admin Console
Alert Center API (ISO 27001 only)
Apps Email Audit API (ISO 27001 only)
Apps Script (ISO 27001 only)
AppSheet (SOC 2/3 only)
Assignments
Calendar
Calendar API (ISO 27001 only)
Classroom
Cloud Identity
Cloud Search
Contacts
Contacts API (ISO 27001 only)
Currents
Data Transfer API (ISO 27001 only)
Directory API (ISO 27001 only)
Docs
Domain Shared Contacts API (ISO 27001 only)
Drive
Drive Activity API (ISO 27001 only)
Drive Rest API (ISO 27001 only)
Enterprise License Manager (ISO 27001 only)
Forms
Gmail
Gmail Rest API (ISO 27001 only)
Google Chat
Google Meet
Google Workspace Migrate
Groups
Groups Migration API (ISO 27001 only)
Groups Settings API (ISO 27001 only)
Hangouts
Jamboard
Keep
Mobile Device Management
People API (ISO 27001 only)
Reports API (ISO 27001 only)
Reseller API (ISO 27001 only)
SAML-based SSO API (ISO 27001 only)
Sheets
Sheets API (ISO 27001 only)
Sites
Sites API (ISO 27001 only)
Slides
Tasks
Tasks API (ISO 27001 only)
Vault
Voice