Last modified: February 14, 2020
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
| Service | ISO 27001, 27017, 27018 Certifications | SOC 1, 2, 3 Reports | PCI DSS Certification |
|---|---|---|---|
| App Engine | done | done | done |
| App Engine Flexible Environment | done | done | done |
| BigQuery | done | done | done |
| Cloud Bigtable | done | done | done |
| Cloud Billing API | done | done | |
| Cloud CDN (Content Delivery Network) | done | done | done |
| Cloud console | done | done | done |
| Cloud Data Loss Prevention | done | done | done |
| Dataflow | done | done | done |
| Datalab | done | ||
| Dataproc | done | done | done |
| Datastore | done | done | done |
| Cloud DNS | done | done | done |
| Cloud Endpoints | done | ||
| Cloud Functions | done | done | done |
| Cloud Healthcare | done | done | done |
| Identity & Access Management (IAM) | done | done | done |
| Talent Solution | done | done | |
| Cloud Key Management Service | done | done | done |
| Google Cloud Marketplace | done | done | done |
| Cloud Load Balancing | done | done | done |
| AI Platform Training and Prediction | done | done | done |
| Cloud Mobile App | done | done | |
| Cloud Natural Language API | done | done | done |
| Pub/Sub | done | done | done |
| Resource Manager | done | done | done |
| Cloud Router | done | done | done |
| Cloud SDK | done | done | |
| Web Security Scanner | done | done | done |
| Cloud Shell | done | done | done |
| Cloud Source Repositories | done | done | |
| Speech-to-Text | done | done | done |
| Cloud SQL | done | done | done |
| Cloud Storage | done | done | done |
| Cloud Translation API | done | done | done |
| Cloud Vision API | done | done | done |
| Google Cloud Virtual Network | done | done | done |
| Cloud VPN | done | done | done |
| Compute Engine | done | done | done |
| Cloud Build | done | done | done |
| Google Kubernetes Engine | done | done | done |
| Container Registry | done | done | done |
| Cloud Deployment Manager | done | done | done |
| Cloud Life Sciences | done | done | |
| Service Control | done | done | |
| Stackdriver Debugger | done | done | done |
| Stackdriver Error Reporting | done | done | done |
| Stackdriver Logging | done | done | done |
| Stackdriver Trace | done | done | done |
G Suite and/or Complementary Products in Scope by Compliance Program
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
The following G Suite Services and/or Complementary Products fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report. A done in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
| Service | ISO 27001, 27017, 27018 Certifications | SOC 1, 2, 3 Reports |
|---|---|---|
| Cloud Identity Management | done | done |
| Gmail | done | done |
| Google+ | done | done |
| Google Calendar | done | done |
| Google Cloud Search | done | done |
| Google Contacts | done | done |
| Google Docs | done | done |
| Google Sheets | done | done |
| Google Slides | done | done |
| Google Forms | done | done |
| Google Drive | done | done |
| Google Groups for Business | done | done |
| Google Hangouts | done | done |
| Hangouts Chat | done | done |
| Hangouts Meet | done | done |
| Google Voice | done | done |
| Google Jamboard | done | done |
| Google Keep | done | done |
| Google Sites | done | done |
| Google Tasks | done | done |
| Google Vault | done | done |