上次修改时间：2024 年 9 月 4 日
文中术语的含义以客户或合作伙伴与 Google 签订的适用协议中的规定为准。
以下服务适用于以下一项或多项认证或报告：Google 的 ISO 27001 认证、ISO 27017 认证、ISO 27018 认证、PCI DSS 认证、SOC 1 报告、SOC 2 报告、SOC 3 报告和渗透测试报告。下表中的 done 表示服务（行）符合指定的认证或报告（列）的要求。
| 服务 | ISO 27001 认证、ISO 27017 认证、ISO 27018 认证 | SOC 1 报告、SOC 2 报告、SOC 3 报告 | PCI DSS 认证 | 渗透测试 |
|---|---|---|---|---|
| Access Approval | done | done | done | done |
| Access Context Manager | done | done | done | done |
| Access Transparency | done | done | done | done |
| Agent Assist | done | done | done | |
| AI Platform Data Labeling | done | done | done | done |
| AI Platform 神经架构搜索 (NAS) | done | done | done | |
| AI Platform Training 和 AI Platform Prediction | done | done | done | done |
| AlloyDB | done | done | done | |
| Anthos Identity Service (AIS) | done | done | done | |
| Anthos on AWS | done（仅限 ISO 27001） | |||
| Anthos on Azure | done（仅限 ISO 27001） | |||
| Anti-Money Laundering AI | done（仅限 ISO 27001） | done | ||
| API Gateway | done | done | done | done |
| Apigee | done | done | done | done |
| App Engine | done | done | done | done |
| Artifact Registry | done | done | done | done |
| Assured Workloads for Government | done | done | done | done |
| AutoML Natural Language | done | done | done | done |
| AutoML Tables | done | done | done | done |
| AutoML Translation | done | done | done | done |
| AutoML Video | done | done | done | done |
| AutoML Vision | done | done | done | done |
| Backup for GKE | done | done | done | |
| 裸金属解决方案 | done | done | done | done |
| 批次 | done | done | done | done |
| BeyondCorp Enterprise | done | done | done | done |
| BigQuery | done | done | done | done |
| BigQuery Data Transfer Service | done | done | done | done |
| Bigtable | done | done | done | done |
| Binary Authorization | done | done | done | done |
| Certificate Authority Service | done | done | done | done |
| Cloud Asset Inventory | done | done | done | done |
| Cloud Billing | done | done | done | done |
| Cloud Build | done | done | done | done |
| Cloud CDN | done | done | done | done |
| Cloud Composer | done | done | done | done |
| Cloud 控制台 | done | done | done | done |
| Cloud 控制台应用 | done | done | done | done |
| Cloud Data Fusion | done | done | done | done |
| Cloud Deployment Manager | done | done | done | done |
| Cloud DNS | done | done | done | done |
| Cloud Endpoints | done | done | done | done |
| Cloud External Key Manager (Cloud EKM) | done | done | done | done |
| Cloud Filestore | done | done | done | done |
| Cloud Firewall | done（仅限 ISO 27001） | done | done | |
| Cloud Functions | done | done | done | done |
| Cloud Functions for Firebase | done | done | done | done |
| Cloud Healthcare | done | done | done | done |
| Cloud HSM | done | done | done | done |
| Cloud IDS | done | done | done | done |
| Cloud Interconnect | done | done | done | done |
| Cloud Key Management Service | done | done | done | done |
| Cloud Life Sciences | done | done | done | done |
| Cloud Load Balancing | done | done | done | done |
| Cloud Logging | done | done | done | done |
| Cloud Monitoring | done | done | done | done |
| Cloud NAT（网络地址转换） | done | done | done | done |
| Cloud Natural Language API | done | done | done | done |
| Cloud Profiler | done | done | done | done |
| Cloud Router | done | done | done | done |
| Cloud Run | done | done | done | done |
| Cloud Run for Anthos | done | done | done | done |
| Cloud Scheduler | done | done | done | done |
| Cloud SDK | done | done | done | done |
| Cloud Shell | done | done | done | done |
| Cloud Source Repositories | done | done | done | done |
| Cloud Speaker ID | done | done | done | done |
| Cloud SQL | done | done | done | done |
| Cloud Storage | done | done | done | done |
| Cloud Storage for Firebase | done | done | done | done |
| Cloud Tasks | done | done | done | done |
| Cloud Trace | done | done | done | done |
| Cloud Translation | done | done | done | done |
| Cloud Vision | done | done | done | done |
| Cloud VPN | done | done | done | done |
| Cloud Workstations | done（仅限 ISO 27001） | done | done | done |
| Compute Engine | done | done | done | done |
| 配置管理 | done | done | done | done |
| 连接 | done | done | done | done |
| Contact Center AI | done | done | done | done |
| Container Registry | done | done | done | done |
| Data Catalog | done | done | done | done |
| Database Migration Service | done | done | done | done |
| Dataflow | done | done | done | done |
| Dataform | done（仅限 ISO 27001） | done | done | done |
| Dataplex | done | done | done | done |
| Dataproc | done | done | done | done |
| Dataproc Metastore | done | done | done | |
| Datastore | done | done | done | done |
| DataStream | done | done | done | done |
| Dialogflow | done | done | done | done |
| 发现解决方案 | done | done | ||
| Document AI | done | done | done | done |
| Document AI Warehouse | done | done | done | done |
| Earth Engine | done（仅限 ISO 27001） | done | done | |
| Eventarc | done | done | done | done |
| Firebase App Check | done（仅限 ISO 27001） | done | done | |
| Firebase Authentication | done | done | done | done |
| Firebase 测试实验室 | done | done | done | |
| Firestore | done | done | done | done |
| GCVE | done | done | done | |
| 适用于 Google Cloud 的 Gemini | done | done | ||
| Vertex AI 上的生成式 AI（原 Vertex AI 上的生成式 AI 支持） | done | done | ||
| Google Cloud Armor | done | done | done | done |
| Google Cloud Deploy | done | done | done | done |
| Google Cloud Identity-Aware Proxy | done | done | done | done |
| Google Cloud Marketplace | done | done | done | done |
| Google Distributed Cloud Edge | done（仅限 ISO 27001） | done（仅限 SOC 2） | done | |
| Google Kubernetes Engine | done | done | done | done |
| Healthcare Data Engine (HDE) | done | done | done | |
| Hub | done | done | done | done |
| 身份和访问权限管理 (IAM) | done | done | done | done |
| Identity Platform | done | done | done | done |
| 数据分析 | done | done | done | done |
| IoT Core | done | done | done | done |
| Key Access Justification (Access Sovereignty) | done | done | done | done |
| Looker (Google Cloud Core) | done | done | done | |
| Looker Studio | done | done | done | done |
| Managed Service for Microsoft Active Directory (AD) | done | done | done | done |
| Memorystore | done | done | done | done |
| Migrate to Virtual Machines | done | done | ||
| Migration Center | done | done | done | |
| Network Connectivity Center | done | done | done | |
| Network Intelligence Center | done | done | done | done |
| Network Service Tiers | done | done | done | done |
| Persistent Disk | done | done | done | done |
| Pub/Sub | done | done | done | done |
| reCAPTCHA Enterprise | done | done | done | done |
| Recommendations AI | done | done | ||
| Recommender | done | done | done | done |
| Resource Manager API | done | done | done | done |
| Retail Search | done | done | ||
| Risk Manager | done | done | done | done |
| Secret Manager | done | done | done | done |
| Security Command Center | done | done | done | done |
| 敏感数据保护 | done | done | done | done |
| Service Directory | done | done | done | done |
| Service Infrastructure | done | done | done | done |
| Spanner | done | done | done | done |
| Spectrum Access System | done | done | done | |
| Speech-to-Text | done | done | done | done |
| Storage Transfer Service | done | done | done | done |
| 表 | done（仅限 ISO 27001） | done | ||
| Talent Solution | done | done | done | done |
| Text-to-Speech | done | done | done | done |
| Traffic Director | done | done | done | done |
| Transcoder API | done | done | ||
| Transfer Appliance | done（仅限 ISO 27001） | done | done | |
| Vertex AI Conversation（原 Generative AI App Builder） | done | done | ||
| Vertex AI Platform（原 Vertex AI） | done | done | done | done |
| Vertex AI Search（原 Gen App Builder - Enterprise Search） | done | done | done | |
| Video Intelligence API | done | done | done | done |
| Virtual Private Cloud | done | done | done | done |
| VirusTotal | done（仅限 ISO 27001） | done | done | |
| VPC Service Controls | done | done | done | done |
| Web Risk API | done | done | done | done |
| Workflows | done | done | done | done |
| Workload Manager | done | done | done | |
| BigQuery Omni | done | done | done | done |
| 媒体 CDN | done（仅限 ISO 27001） | done | ||
| Anthos Clusters on Bare Metal | done | |||
| Anthos Clusters on VMware | done | |||
| Anthos Identity Service – 软件 | done（仅限 ISO 27001） | |||
| Binary Authorization – 软件 | done（仅限 ISO 27001） | |||
| Cloud Logging – 软件 | done（仅限 ISO 27001） | |||
| Cloud Monitoring – 软件 | done（仅限 ISO 27001） | |||
| Cloud Run for Anthos – 软件 | done（仅限 ISO 27001） | |||
| 配置管理 – 软件 | done（仅限 ISO 27001） | |||
| Connect – 软件 | done（仅限 ISO 27001） | |||
| Migrate to Containers | done | |||
| Service Mesh – 软件 | done（仅限 ISO 27001） |
Google Workspace 和 Cloud Identity 服务对合规计划的遵守情况
术语具有客户与 Google 签订的适用协议中规定的含义。
以下服务适用于以下一项或多项认证或报告：Google 的 ISO 27001 认证、ISO 27017 认证、ISO 27018 认证、SOC 1 报告、SOC 2 报告、SOC 3 报告和渗透测试报告。下表中的 done 表示服务（行）符合指定的认证或报告（列）的要求。
| 服务 | ISO 27001 认证、ISO 27017 认证、ISO 27018 认证 | SOC 1 报告、SOC 2 报告、SOC 3 报告 | 渗透测试 |
|---|---|---|---|
| 管理控制台 | done | done | done |
| Alert Center API | done（仅限 ISO 27001） | done | done |
| Apps Email Audit API | done（仅限 ISO 27001） | done | done |
| Apps 脚本 | done（仅限 ISO 27001） | done | done |
| AppSheet | done | done（仅限 SOC 2/3） | done |
| 作业 | done | done | done |
| 日历 | done | done | done |
| Calendar API | done（仅限 ISO 27001） | done | done |
| 课堂 | done | done | done |
| Cloud Identity | done | done | done |
| Cloud Search | done | done | done |
| 通讯录 | done | done | done |
| Data Transfer API | done（仅限 ISO 27001） | done | done |
| Directory API | done（仅限 ISO 27001） | done | done |
| 文档 | done | done | done |
| Domain Shared Contacts API | done（仅限 ISO 27001） | done | done |
| 云端硬盘 | done | done | done |
| Drive Activity API | done（仅限 ISO 27001） | done | done |
| Drive Rest API | done（仅限 ISO 27001） | done | |
| Enterprise License Manager | done（仅限 ISO 27001） | done | |
| 表单 | done | done | done |
| Gmail | done | done | done |
| Gmail Rest API | done（仅限 ISO 27001） | done | |
| Google Chat | done | done | done |
| Google Meet | done | done | done |
| Google Workspace Migrate | done | done | done |
| 群组 | done | done | done |
| Groups Migration API | done（仅限 ISO 27001） | done | done |
| Groups Settings API | done（仅限 ISO 27001） | done | done |
| Jamboard | done | done | done |
| Keep | done | done | done |
| 移动设备管理 | done | done | done |
| People API | done（仅限 ISO 27001） | done | |
| Reports API | done（仅限 ISO 27001） | done | done |
| Reseller API | done（仅限 ISO 27001） | done | done |
| SAML-based SSO API | done（仅限 ISO 27001） | done | done |
| Service Mesh | done | done | done |
| 表格 | done | done | done |
| Sheets API | done（仅限 ISO 27001） | done | |
| 协作平台 | done | done | done |
| 幻灯片 | done | done | done |
| Tasks | done | done | done |
| Tasks API | done（仅限 ISO 27001） | done | |
| 保险柜 | done | done | done |
| 语音 | done | done | done |
其他服务对合规计划的遵守情况
文中术语的含义以客户或合作伙伴与 Google 签订的适用协议中的规定为准。
这些服务符合以下一项或多项认证或报告的要求：Google 的 ISO 27001 认证、ISO 27017 认证、ISO 27018 认证、SOC 1 报告、SOC 2 报告、SOC 3 报告和渗透测试报告。下表中的 done 表示服务（行）符合指定的认证或报告（列）的要求。
| 服务 | ISO 27001 认证、ISO 27017 认证、ISO 27018 认证 | SOC 1 报告、SOC 2 报告、SOC 3 报告 | 渗透测试 |
|---|---|---|---|
| Looker（原始版本） | done | done | done |