Standards, Regulations & Certifications
To help you with compliance and reporting, we share information, best practices, and easy access to documentation. Our products regularly undergo independent verification of security, privacy, and compliance controls, achieving certifications against global standards to earn your trust. We’re constantly working to expand our coverage.
Protecting personal data.
The International Organization for Standardization (ISO) is an independent, non-governmental international organization with a membership of 163 national standards bodies.
ISO 27018 relates to the protection of personally identifiable information (PII), and as such, deals with one of the most critical components of the cloud—privacy. This standard is primarily focused on security controls for public-cloud service providers acting as PII processors.
ISO 27018 works in two ways:
Builds off of existing ISO 27002 controls with specific items for cloud privacy
Provides completely new security controls for personal data
Google Cloud services that are in scope for ISO 27018:
Google Cloud Platform:
Google App Engine, Google App Engine Flexible Environment, Google BigQuery, Google Cloud Bigtable, Google Billing API, Google Cloud CDN (Content Delivery Network) Google Cloud Console, Google Cloud Data Loss Prevention API, Google Cloud Dataflow, Google Cloud Datalab, Google Cloud Dataproc, Google Cloud Datastore, Google Cloud DNS, Google Cloud Endpoints, Google Cloud Functions, Google Cloud IAM (Identity & Access Management), Google Cloud Jobs API, Google Cloud Key Management Service, Google Cloud Launcher, Google Cloud Load Balancing, Google Cloud Machine Learning Engine, Google Cloud Mobile App, Google Cloud Natural Language API, Google Cloud Pub/Sub, Google Cloud Resource Manager, Google Cloud Router, Google Cloud SDK, Google Cloud Security Scanner, Google Cloud Shell, Google Cloud Source Repositories, Google Cloud Speech API, Google Cloud SQL, Google Cloud Storage, Google Cloud Translation API, Google Cloud Vision API, Google Cloud Virtual Network, Google Cloud VPN, Google Compute Engine, Google Cloud Build, Google Container Engine, Google Container Registry, Google Deployment Manager, Google Genomics, Google Service Control, Google Stackdriver Debugger, Google Stackdriver Error Reporting, Google Stackdriver Logging, Google Stackdriver Trace
Calendar, Classroom (Only for G Suite for Education), Cloud Search, Contacts, Docs, Drive, Forms, Gmail, Google+, Groups, Hangouts, Hangouts Meet, Keep, Sites, Sheets, Classic Sites, Slides, Vault
Additional Google Products:
Admin Console, App Maker, Chrome Device Management, Chrome Sync, Cloud Identity, Apps Script, Google Now, Hangouts Chat, Inbox by Gmail, Jamboard, Talk, Tasks
Google Product APIs:
Apps Activity API, Calendar API, Contacts API, Drive Rest API, Gmail Rest API, Sheets API, Sites API, Tasks API
G Suite Admin SDK:
Admin Settings API, Calendar Resource API, Domain Shared Contacts API, Directory API, Email Audit API, Email Settings API, Enterprise License Manager API, Groups Migration API, Groups Settings API, Reports API, SAML-based SSO API, Reseller API