Last modified: July 20, 2020
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
| Service | ISO 27001, 27017, 27018 Certifications | SOC 1, 2, 3 Reports | PCI DSS Certification | Penetration Testing |
|---|---|---|---|---|
|
App Engine
|
done | done | done | done |
|
Access Approval
|
done | done | done | |
|
Access Context Manager
|
done | done | done | done |
|
Access Transparency
|
done | done | done | done |
|
AI Platform Data Labeling
|
done | done | done | |
|
AI Platform Notebooks
|
done | done | done | done |
|
AI Platform Training and Prediction
|
done | done | done | done |
|
Apigee Hybrid
|
done | done | ||
|
AutoML Natural Language
|
done | done | done | done |
|
AutoML Tables
|
done | done | done | done |
|
AutoML Translation
|
done | done | done | done |
|
AutoML Video
|
done | done | done | done |
|
AutoML Vision
|
done | done | done | done |
|
BigQuery
|
done | done | done | done |
|
BigQuery Data Transfer Service
|
done | done | done | done |
|
Cloud Asset Inventory
|
done | done | done | |
|
Cloud Bigtable
|
done | done | done | done |
|
Cloud Billing API
|
done | done | done | done |
|
Cloud Build
|
done | done | done | done |
|
Cloud CDN
|
done | done | done | done |
|
Cloud console
|
done | done | done | done |
|
Cloud console App
|
done | done | done | |
|
Cloud Data Fusion
|
done | done | done | |
|
Cloud Data Loss Prevention
|
done | done | done | done |
|
Cloud Debugger (formerly Stackdriver Debugger)
|
done | done | done | done |
|
Cloud Deployment Manager
|
done | done | done | done |
|
Cloud DNS
|
done | done | done | done |
|
Cloud Endpoints
|
done | done | done | done |
|
Cloud Filestore
|
done | done | done | done |
|
Cloud Functions
|
done | done | done | done |
|
Cloud Functions for Firebase
|
done | done | ||
|
Cloud Healthcare
|
done | done | done | done |
|
Cloud HSM
|
done | done | done | done |
|
Cloud Interconnect
|
done | done | done | done |
|
Cloud Key Management Service
|
done | done | done | done |
|
Cloud Life Sciences (formerly Google Genomics)
|
done | done | done | done |
|
Cloud Load Balancing
|
done | done | done | done |
|
Cloud Logging (formerly Stackdriver Logging; includes the Error Reporting feature)
|
done | done | done | done |
|
Cloud Monitoring (formerly Stackdriver Monitoring)
|
done | done | ||
|
Cloud NAT (Network Address Translation)
|
done | done | done | done |
|
Cloud Natural Language API
|
done | done | done | |
|
Cloud Profiler (formerly Stackdriver Profiler)
|
done | done | done | |
|
Cloud Router
|
done | done | done | done |
|
Cloud Run (fully managed)
|
done | done | done | done |
|
Cloud Run for Anthos
|
done | done | ||
|
Cloud SDK
|
done | done | done | done |
|
Cloud Shell
|
done | done | done | done |
|
Cloud Source Repositories
|
done | done | done | done |
|
Cloud Spanner
|
done | done | done | done |
|
Cloud SQL
|
done | done | done | done |
|
Cloud Storage
|
done | done | done | done |
|
Cloud Storage for Firebase
|
done | done | ||
|
Cloud Trace (formerly Stackdriver Trace)
|
done | done | done | done |
|
Cloud Translation (and Cloud Translation v2 or any subsequent general availability version/release)
|
done | done | done | done |
|
Cloud Vision
|
done | done | done | done |
|
Cloud VPN
|
done | done | done | done |
|
Compute Engine
|
done | done | done | done |
|
Container Registry
|
done | done | done | done |
|
Data Catalog
|
done | done | done | done |
|
Dataflow
|
done | done | done | done |
|
Datalab
|
done | done | done | done |
|
Dataproc
|
done | done | done | done |
|
Datastore
|
done | done | done | done |
|
Dialogflow
|
done | done | done | done |
|
Event Threat Detection
|
done | done | done | |
|
Firebase Authentication
|
done | done | ||
|
Firebase Test Lab
|
done | done | ||
|
Firestore
|
done | done | done | done |
|
GCP Marketplace
|
done | done | done | done |
|
GKE Connect
|
done | |||
|
GKE Hub
|
done | done | done | |
|
Google Cloud Armor
|
done | done | done | done |
|
Google Cloud Identity-Aware Proxy
|
done | done | done | done |
|
Google Kubernetes Engine
|
done | done | done | done |
|
Identity & Access Management (IAM)
|
done | done | done | done |
|
IoT Core
|
done | done | done | done |
|
Managed Service for Microsoft Active Directory (AD)
|
done | done | done | |
|
Memorystore
|
done | done | done | done |
|
Network Service Tiers
|
done | done | done | done |
|
Orbitera
|
done | done | done | done |
|
Persistent Disk
|
done | done | done | done |
|
Pub/Sub
|
done | done | done | done |
|
Resource Manager API
|
done | done | done | done |
|
Security Command Center
|
done | done | done | |
|
Service Consumer Management
|
done | done | done | done |
|
Service Control
|
done | done | done | done |
|
Service Management
|
done | done | done | done |
|
Speech-to-Text
|
done | done | done | done |
|
Storage Transfer Service
|
done | done | done | done |
|
Talent Solution
|
done | done | done | done |
|
Text-to-Speech
|
done | done | done | done |
|
Traffic Director
|
done | done | done | |
|
Video Intelligence API
|
done | done | done | done |
|
Virtual Private Cloud
|
done | done | done | done |
|
VPC Service Controls
|
done | done | done | done |
|
Web Security Scanner
|
done | done | done |
G Suite and/or Complementary Products in Scope by Compliance Program
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
The following G Suite Services and/or Complementary Products fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
| Service | ISO 27001, 27017, 27018 Certifications | SOC 1, 2, 3 Reports | Penetration Testing |
|---|---|---|---|
|
Cloud Identity Management
|
done | done | done |
|
Gmail
|
done | done | done |
|
Google+
|
done | done | |
|
Google Calendar
|
done | done | done |
|
Google Cloud Search
|
done | done | done |
|
Google Contacts
|
done | done | done |
|
Google Docs
|
done | done | done |
|
Google Sheets
|
done | done | done |
|
Google Slides
|
done | done | done |
|
Google Forms
|
done | done | done |
|
Google Drive
|
done | done | done |
|
Google Groups for Business
|
done | done | done |
|
Google Hangouts
|
done | done | done |
|
Google Chat
|
done | done | done |
|
Google Meet
|
done | done | done |
|
Google Voice
|
done | done | done |
|
Google Jamboard
|
done | done | done |
|
Google Keep
|
done | done | done |
|
Google Sites
|
done | done | done |
|
Google Tasks
|
done | done | done |
|
Google Vault
|
done | done | done |
