Standards, regulations & certifications
To help you with compliance and reporting, we share information, best practices, and easy access to documentation. Our products regularly undergo independent verification of security, privacy, and compliance controls, achieving certifications against global standards to earn your trust. We're constantly working to expand our coverage.
This site contains information about Google's certifications and compliance standards it satisfies as well as general information about certain region or sector-specific regulations.

SOC 1
Controls over financial reporting.
A SOC 1 report documents a service organization’s controls that may be relevant to financial reporting. Google Cloud Platform undergoes a regular third-party audit to certify individual products against this standard.
SSAE 18 / ISAE 3402 Type II
The Auditing Standards Board of the American Institute of Certified Public Accountants (AICPA) created the Statement on Standards for Attestation Engagements No. 18 (SSAE 18) to keep pace with globally recognized international accounting standards.
SSAE 18 aligns closely with the International Standard on Assurance Engagements 3402 (ISAE 3402).
SSAE 18 and ISAE 3402 are used to generate a report by an objective third-party attesting to a set of statements which an organization asserts about its controls. The Service Organization Controls (SOC) framework is the method by which the control of financial information is measured.
Google Cloud services that are in scope for SOC 1:
Google Cloud Platform:
- AI Platform Training and Prediction
- Access Transparency
- Apigee Edge
- App Engine
- BigQuery
- BigQuery Data Transfer Service
- Cloud Armor
- Cloud AutoML Natural Language
- Cloud AutoML Translation
- Cloud AutoML Vision
- Cloud Bigtable
- Cloud Billing API
- Cloud Build
- Cloud CDN
- Cloud Console
- Cloud Console Mobile App
- Cloud Dataflow
- Cloud Datalab
- Cloud Dataproc
- Cloud Datastore
- Cloud Deployment Manager
- Cloud DNS
- Cloud Endpoints
- Cloud Filestore
- Cloud Firestore
- Cloud Functions
- Cloud Healthcare
- Cloud HSM
- Cloud Identity and Access Management
- Cloud Identity-Aware Proxy
- Cloud Interconnect
- Cloud IoT Core
- Cloud Key Management Service
- Cloud Load Balancing
- Cloud Memorystore
- Cloud Natural Language
- Cloud Pub/Sub
- Cloud Resource Manager
- Cloud Router
- Cloud SDK
- Cloud Security Scanner
- Cloud Shell
- Cloud Source Repositories
- Cloud Spanner
- Cloud Speech-to-Text
- Cloud SQL
- Cloud Storage
- Cloud Storage Transfer Service
- Cloud Talent Solution
- Cloud Text-to-Speech
- Cloud Translation
- Cloud Video Intelligence
- Cloud Vision
- Cloud VPN
- Compute Engine
- Container Registry
- Data Loss Prevention
- Dialogflow Enterprise Edition
- GCP Marketplace
- Genomics
- Google Service Control
- Google Service Management
- Identity Platform
- Kubernetes Engine
- Network Service Tiers
- Orbitera
- Persistent Disk
- Service Consumer Management
- Stackdriver Debugger
- Stackdriver Error Reporting
- Stackdriver Logging
- Stackdriver Profiler
- Stackdriver Trace
- Virtual Private Cloud (VPC)
G Suite:
- App Maker
- Calendar
- Classroom
- Cloud Identity
- Cloud Search
- Contacts
- Docs
- Drive
- Forms
- Gmail
- Google Apps Script
- Google+
- Groups
- Hangouts
- Hangouts Chat
- Hangouts Meet
- Jamboard
- Keep
- Mobile Device Management
- Sheets
- Sites (Classic / New)
- Slides
- Talk
- Tasks
- Vault
- Voice