Last modified: January 30, 2020
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
| Service | ISO 27001, 27017, 27018 Certifications | SOC 1, 2, 3 Reports | PCI DSS Certification |
|---|---|---|---|
|
App Engine
|
done | done | done |
|
App Engine Flexible Environment
|
done | done | done |
|
BigQuery
|
done | done | done |
|
Cloud Bigtable
|
done | done | done |
|
Cloud Billing API
|
done | done | |
|
Cloud CDN (Content Delivery Network)
|
done | done | done |
|
Cloud console
|
done | done | done |
|
Cloud Data Loss Prevention
|
done | done | done |
|
Dataflow
|
done | done | done |
|
Datalab
|
done | ||
|
Dataproc
|
done | done | done |
|
Datastore
|
done | done | done |
|
Cloud DNS
|
done | done | done |
|
Cloud Endpoints
|
done | ||
|
Cloud Functions
|
done | done | done |
|
Cloud Healthcare
|
done | done | done |
|
Identity & Access Management (IAM)
|
done | done | done |
|
Talent Solution
|
done | done | |
|
Cloud Key Management Service
|
done | done | done |
|
Google Cloud Marketplace
|
done | done | done |
|
Cloud Load Balancing
|
done | done | done |
|
AI Platform Training and Prediction
|
done | done | done |
|
Cloud Mobile App
|
done | done | |
|
Cloud Natural Language API
|
done | done | done |
|
Pub/Sub
|
done | done | done |
|
Resource Manager
|
done | done | done |
|
Cloud Router
|
done | done | done |
|
Cloud SDK
|
done | done | |
|
Web Security Scanner
|
done | done | done |
|
Cloud Shell
|
done | done | done |
|
Cloud Source Repositories
|
done | done | |
|
Speech-to-Text
|
done | done | done |
|
Cloud SQL
|
done | done | done |
|
Cloud Storage
|
done | done | done |
|
Cloud Translation API
|
done | done | done |
|
Cloud Vision API
|
done | done | done |
|
Google Cloud Virtual Network
|
done | done | done |
|
Cloud VPN
|
done | done | done |
|
Compute Engine
|
done | done | done |
|
Cloud Build
|
done | done | done |
|
Google Kubernetes Engine
|
done | done | done |
|
Container Registry
|
done | done | done |
|
Cloud Deployment Manager
|
done | done | done |
|
Cloud Life Sciences
|
done | done | |
|
Service Control
|
done | done | |
|
Stackdriver Debugger
|
done | done | done |
|
Stackdriver Error Reporting
|
done | done | done |
|
Stackdriver Logging
|
done | done | done |
|
Stackdriver Trace
|
done | done | done |
G Suite and/or Complementary Products in Scope by Compliance Program
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
The following G Suite Services and/or Complementary Products fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
| Service | ISO 27001, 27017, 27018 Certifications | SOC 1, 2, 3 Reports |
|---|---|---|
|
Cloud Identity Management
|
done | done |
|
Gmail
|
done | done |
|
Google+
|
done | done |
|
Google Calendar
|
done | done |
|
Google Cloud Search
|
done | done |
|
Google Contacts
|
done | done |
|
Google Docs
|
done | done |
|
Google Sheets
|
done | done |
|
Google Slides
|
done | done |
|
Google Forms
|
done | done |
|
Google Drive
|
done | done |
|
Google Groups for Business
|
done | done |
|
Google Hangouts
|
done | done |
|
Hangouts Chat
|
done | done |
|
Hangouts Meet
|
done | done |
|
Google Talk
|
done | done |
|
Google Voice
|
done (ISO 27001 only) | done |
|
Google Jamboard
|
done | done |
|
Google Keep
|
done | done |
|
Google Sites
|
done | done |
|
Google Tasks
|
done | done |
|
Google Vault
|
done | done |
