Dernière modification: 25 mars 2024
Les termes portant une majuscule ont la signification indiquée dans le contrat applicable conclu entre le Client ou le Partenaire et Google.
Les Services suivants relèvent du champ d'application de l'un ou plusieurs des éléments suivants : Certification ISO 27001, Certification ISO 27017, certification ISO 27018, Certification PCI DSS, Rapport SOC 1, Rapport SOC 2, Rapport SOC 3 et Rapport de test d'intrusion. Le terme done dans le tableau ci-dessous indique que le Service (ligne) relève du champ d'application de la certification ou du rapport spécifié (colonne).
| Service | Certifications ISO 27001, 27017, 27018 | Rapports SOC 1, 2, 3 | Certification PCI DSS | Test d'intrusion |
|---|---|---|---|---|
| Access Approval | done | done | done | done |
| Access Context Manager | done | done | done | done |
| Access Transparency | done | done | done | done |
| Agent Assist | done | done | done | |
| AI Platform Data Labeling | done | done | done | done |
| AI Platform Neural Architecture Search (NAS) | done | done | done | |
| AI Platform Training et AI Platform Prediction | done | done | done | done |
| AlloyDB | done | done | done | |
| Anthos Identity Service (AIS) | done | done | done | |
| Anthos sur AWS | done (ISO 27001 uniquement) | |||
| Anthos on Azure | done (ISO 27001 uniquement) | |||
| IA pour lutter contre le blanchiment d'argent | done (ISO 27001 uniquement) | done | ||
| API Gateway | done | done | done | done |
| Apigee | done | done | done | done |
| App Engine | done | done | done | done |
| Artifact Registry | done | done | done | done |
| Assured Workloads for Government | done | done | done | done |
| AutoML Natural Language | done | done | done | done |
| AutoML Tables | done | done | done | done |
| AutoML Translation | done | done | done | done |
| AutoML Video | done | done | done | done |
| AutoML Vision | done | done | done | done |
| Sauvegarde pour GKE | done | done | done | |
| Solution Bare Metal | done | done | done | done |
| Lot | done | done | done | done |
| BeyondCorp Enterprise | done | done | done | done |
| BigQuery | done | done | done | done |
| Service de transfert de données BigQuery | done | done | done | done |
| Bigtable | done | done | done | done |
| Autorisation binaire | done | done | done | done |
| Certificate Authority Service | done | done | done | done |
| Inventaire des éléments cloud | done | done | done | done |
| Cloud Billing | done | done | done | done |
| Cloud Build | done | done | done | done |
| Cloud CDN | done | done | done | done |
| Cloud Composer | done | done | done | done |
| Console Cloud | done | done | done | done |
| Application Cloud Console | done | done | done | done |
| Cloud Data Fusion | done | done | done | done |
| Cloud Deployment Manager | done | done | done | done |
| Cloud DNS | done | done | done | done |
| Cloud Endpoints | done | done | done | done |
| Cloud External Key Manager (Cloud EKM) | done | done | done | done |
| Cloud Filestore | done | done | done | done |
| Cloud Firewall | done (ISO 27001 uniquement) | done | done | |
| Cloud Functions | done | done | done | done |
| Cloud Functions for Firebase | done | done | done | done |
| Cloud Healthcare | done | done | done | done |
| Cloud HSM | done | done | done | done |
| Cloud IDS | done | done | done | done |
| Cloud Interconnect | done | done | done | done |
| Cloud Key Management Service | done | done | done | done |
| Cloud Life Sciences | done | done | done | done |
| Cloud Load Balancing | done | done | done | done |
| Cloud Logging | done | done | done | done |
| Cloud Monitoring | done | done | done | done |
| Cloud NAT (traduction d'adresses réseau) | done | done | done | done |
| API Cloud Natural Language | done | done | done | done |
| Cloud Profiler | done | done | done | done |
| Cloud Router | done | done | done | done |
| Cloud Run | done | done | done | done |
| Cloud Run for Anthos | done | done | done | done |
| Cloud Scheduler | done | done | done | done |
| Cloud SDK | done | done | done | done |
| Cloud Shell | done | done | done | done |
| Cloud Source Repositories | done | done | done | done |
| Cloud Speaker ID | done | done | done | done |
| Cloud SQL | done | done | done | done |
| Cloud Storage | done | done | done | done |
| Cloud Storage for Firebase | done | done | done | done |
| Cloud Tasks | done | done | done | done |
| Cloud Trace | done | done | done | done |
| Cloud Translation | done | done | done | done |
| Cloud Vision | done | done | done | done |
| Cloud VPN | done | done | done | done |
| Cloud Workstations | done (ISO 27001 uniquement) | done | done | done |
| Compute Engine | done | done | done | done |
| Config Management | done | done | done | done |
| Associer | done | done | done | done |
| Contact Center AI | done | done | done | done |
| Container Registry | done | done | done | done |
| Data Catalog | done | done | done | done |
| Database Migration Service | done | done | done | done |
| Dataflow | done | done | done | done |
| Dataform | done (ISO 27001 uniquement) | done | done | done |
| Dataplex | done | done | done | done |
| Dataproc | done | done | done | done |
| Dataproc Metastore | done | done | done | |
| Datastore | done | done | done | done |
| DataStream | done | done | done | done |
| Dialogflow | done | done | done | done |
| Solutions de découverte | done | done | ||
| Document AI | done | done | done | done |
| Document AI Warehouse | done | done | done | done |
| Duet AI dans Google Cloud | done | done | ||
| Earth Engine | done (ISO 27001 uniquement) | done | done | |
| Eventarc | done | done | done | done |
| Firebase App Check | done (ISO 27001 uniquement) | done | done | |
| Firebase Authentication | done | done | done | done |
| Firebase Test Lab | done | done | done | |
| Firestore | done | done | done | done |
| GCVE | done | done | done | |
| IA générative sur Vertex AI (anciennement compatible avec l'IA générative sur Vertex AI) | done | done | ||
| Google Cloud Armor | done | done | done | done |
| Google Cloud Deploy | done | done | done | done |
| Google Cloud Identity-Aware Proxy | done | done | done | done |
| Google Cloud Marketplace | done | done | done | done |
| Google Distributed Cloud Edge | done (ISO 27001 uniquement) | done (SOC 2 uniquement) | done | |
| Google Kubernetes Engine | done | done | done | done |
| Healthcare Data Engine (HDE) | done | done | done | |
| Hub | done | done | done | done |
| Identity and Access Management (IAM) | done | done | done | done |
| Identity Platform | done | done | done | done |
| Insights | done | done | done | done |
| IoT Core | done | done | done | done |
| Key Access Justification (Access Sovereignty) | done | done | done | done |
| Looker (Google Cloud Core) | done | done | done | |
| Looker Studio | done | done | done | done |
| Service géré pour Microsoft Active Directory (AD) | done | done | done | done |
| Memorystore | done | done | done | done |
| Migrate to Virtual Machines | done | done | ||
| Centre de migration | done | done | done | |
| Network Connectivity Center | done | done | done | |
| Network Intelligence Center | done | done | done | done |
| Niveaux de service réseau | done | done | done | done |
| Persistent Disk | done | done | done | done |
| Pub/Sub | done | done | done | done |
| reCAPTCHA Enterprise | done | done | done | done |
| Recommendations AI | done | done | ||
| Outils de recommandation | done | done | done | done |
| API Resource Manager | done | done | done | done |
| Retail Search | done | done | ||
| Risk Manager | done | done | done | done |
| Secret Manager | done | done | done | done |
| Security Command Center | done | done | done | done |
| Protection des données sensibles | done | done | done | done |
| Annuaire des services | done | done | done | done |
| Service Infrastructure | done | done | done | done |
| Spanner | done | done | done | done |
| Spectrum Access System | done | done | done | |
| Speech-to-Text | done | done | done | done |
| Service de transfert de stockage | done | done | done | done |
| Tables | done (ISO 27001 uniquement) | done | ||
| Talent Solution | done | done | done | done |
| Synthèse vocale | done | done | done | done |
| Traffic Director | done | done | done | done |
| API Transcoder | done | done | ||
| Transfer Appliance | done (ISO 27001 uniquement) | done | done | |
| Vertex AI Conversation (anciennement Generative AI App Builder) | done | done | ||
| Plate-forme Vertex AI (anciennement Vertex AI) | done | done | done | done |
| Vertex AI Search (anciennement Gen App Builder – Enterprise Search) | done | done | done | |
| API Video Intelligence | done | done | done | done |
| Cloud privé virtuel | done | done | done | done |
| VirusTotal | done (ISO 27001 uniquement) | done | done | |
| VPC Service Controls | done | done | done | done |
| API Web Risk | done | done | done | done |
| Workflows | done | done | done | done |
| Gestionnaire de charges de travail | done | done | done | |
| BigQuery Omni | done | done | done | done |
| Media CDN | done (ISO 27001 uniquement) | done | ||
| Clusters Anthos sur bare metal | done | |||
| Clusters Anthos sur VMware | done | |||
| Anthos Identity Service – Logiciels | done (ISO 27001 uniquement) | |||
| Autorisation binaire – Logiciel | done (ISO 27001 uniquement) | |||
| Cloud Logging – Logiciels | done (ISO 27001 uniquement) | |||
| Cloud Monitoring – Logiciels | done (ISO 27001 uniquement) | |||
| Cloud Run for Anthos – Logiciels | done (ISO 27001 uniquement) | |||
| Config Management – Logiciels | done (ISO 27001 uniquement) | |||
| Connect – Logiciel | done (ISO 27001 uniquement) | |||
| Migrate to Containers | done | |||
| Maillage de services – Logiciel | done (ISO 27001 uniquement) |
Services Google Workspace et Cloud Identity soumis au programme de conformité
Les termes commençant par une majuscule ont la signification donnée dans le contrat applicable conclu entre le Client et Google.
Les Services suivants relèvent de l'une ou de plusieurs des catégories suivantes: Certification ISO 27001 de Google, Certification ISO 27017, Certification ISO 27018, Rapport SOC 1, Rapport SOC 2, et Rapport SOC 3 et sur les tests d'intrusion. Le terme done dans le tableau ci-dessous indique que le Service (ligne) relève du champ d'application de la certification ou du rapport spécifié (colonne).
| Service | Certifications ISO 27001, 27017, 27018 | Rapports SOC 1, 2, 3 | Test d'intrusion |
|---|---|---|---|
| Console d'administration | done | done | done |
| API Alert Center | done (ISO 27001 uniquement) | done | done |
| API Apps Email Audit | done (ISO 27001 uniquement) | done | done |
| Apps Script ; | done (ISO 27001 uniquement) | done | done |
| AppSheet | done | done (SOC 2/3 uniquement) | done |
| Devoirs | done | done | done |
| Agenda | done | done | done |
| API Calendar | done (ISO 27001 uniquement) | done | done |
| Classroom | done | done | done |
| Cloud Identity | done | done | done |
| Cloud Search | done | done | done |
| Contacts | done | done | done |
| API Data Transfer | done (ISO 27001 uniquement) | done | done |
| API Directory | done (ISO 27001 uniquement) | done | done |
| Docs | done | done | done |
| API Domain Shared Contacts | done (ISO 27001 uniquement) | done | done |
| Drive | done | done | done |
| Drive Activity API | done (ISO 27001 uniquement) | done | done |
| API Drive REST | done (ISO 27001 uniquement) | done | |
| Gestionnaire de licences Enterprise | done (ISO 27001 uniquement) | done | |
| Forms | done | done | done |
| Gmail | done | done | done |
| API Gmail REST | done (ISO 27001 uniquement) | done | |
| Google Chat | done | done | done |
| Google Meet | done | done | done |
| Google Workspace Migrate | done | done | done |
| Groupes | done | done | done |
| API Groups Migration | done (ISO 27001 uniquement) | done | done |
| API Groups Settings | done (ISO 27001 uniquement) | done | done |
| Jamboard | done | done | done |
| Keep | done | done | done |
| Gestion des appareils mobiles | done | done | done |
| API People | done (ISO 27001 uniquement) | done | |
| API Reports | done (ISO 27001 uniquement) | done | done |
| API Reseller | done (ISO 27001 uniquement) | done | done |
| API SSO basée sur le protocole SAML | done (ISO 27001 uniquement) | done | done |
| Service Mesh | done | done | done |
| Sheets | done | done | done |
| API Sheets | done (ISO 27001 uniquement) | done | |
| Sites | done | done | done |
| Diapositives | done | done | done |
| Tâches | done | done | done |
| API Tasks | done (ISO 27001 uniquement) | done | |
| Vault | done | done | done |
| Voice | done | done | done |
Autres services soumis au programme de conformité
Les termes portant une majuscule ont leur signification indiquée dans le contrat applicable conclu entre le Client ou le Partenaire et Google.
Ces Services relèvent d'un ou de plusieurs des éléments suivants: certification ISO 27001, certification ISO 27017 et ISO 27018 de Google, rapport SOC 1, rapport SOC 2, rapport SOC 3 et rapport sur les tests d'intrusion. Le terme done dans le tableau ci-dessous indique que le Service (ligne) relève du champ d'application de la certification ou du rapport spécifié (colonne).
| Service | Certifications ISO 27001, 27017, 27018 | Rapports SOC 1, 2, 3 | Test d'intrusion |
|---|---|---|---|
| Looker (version initiale) | done | done | done |