Google Cloud Platform Services in Scope by Compliance Program

Last modified: September 04, 2024

Capitalized terms have the meaning stated in the applicable agreement between Customer or Partner and Google.

The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, PCI DSS Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports PCI DSS Certification Penetration Testing
Access Approval
Access Context Manager
Access Transparency
Agent Assist
AI Platform Data Labeling
AI Platform Neural Architecture Search (NAS)
AI Platform Training and Prediction
AlloyDB
Anthos Identity Service (AIS)
Anthos on AWS (ISO 27001 only)
Anthos on Azure (ISO 27001 only)
Anti-Money Laundering AI (ISO 27001 only)
API Gateway
Apigee
App Engine
Artifact Registry
Assured Workloads for Government
AutoML Natural Language
AutoML Tables
AutoML Translation
AutoML Video
AutoML Vision
Backup for GKE
Bare Metal Solution
Batch
BeyondCorp Enterprise
BigQuery
BigQuery Data Transfer Service
Bigtable
Binary Authorization
Certificate Authority Service
Cloud Asset Inventory
Cloud Billing
Cloud Build
Cloud CDN
Cloud Composer
Cloud Console
Cloud Console App
Cloud Data Fusion
Cloud Deployment Manager
Cloud DNS
Cloud Endpoints
Cloud External Key Manager (Cloud EKM)
Cloud Filestore
Cloud Firewall (ISO 27001 only)
Cloud Functions
Cloud Functions for Firebase
Cloud Healthcare
Cloud HSM
Cloud IDS
Cloud Interconnect
Cloud Key Management Service
Cloud Life Sciences
Cloud Load Balancing
Cloud Logging
Cloud Monitoring
Cloud NAT (Network Address Translation)
Cloud Natural Language API
Cloud Profiler
Cloud Router
Cloud Run
Cloud Run for Anthos
Cloud Scheduler
Cloud SDK
Cloud Shell
Cloud Source Repositories
Cloud Speaker ID
Cloud SQL
Cloud Storage
Cloud Storage for Firebase
Cloud Tasks
Cloud Trace
Cloud Translation
Cloud Vision
Cloud VPN
Cloud Workstations (ISO 27001 only)
Compute Engine
Config Management
Connect
Contact Center AI
Container Registry
Data Catalog
Database Migration Service
Dataflow
Dataform (ISO 27001 only)
Dataplex
Dataproc
Dataproc Metastore
Datastore
DataStream
Dialogflow
Discovery Solutions
Document AI
Document AI Warehouse
Earth Engine (ISO 27001 only)
Eventarc
Firebase App Check (ISO 27001 only)
Firebase Authentication
Firebase Test Lab
Firestore
GCVE
Gemini for Google Cloud
Generative AI on Vertex AI (formerly Generative AI support on Vertex AI)
Google Cloud Armor
Google Cloud Deploy
Google Cloud Identity-Aware Proxy
Google Cloud Marketplace
Google Distributed Cloud Edge (ISO 27001 only) (SOC 2 only)
Google Kubernetes Engine
Healthcare Data Engine (HDE)
Hub
Identity & Access Management (IAM)
Identity Platform
Insights
IoT Core
Key Access Justification (Access Sovereignty)
Looker (Google Cloud core)
Looker Studio
Managed Service for Microsoft Active Directory (AD)
Memorystore
Migrate to Virtual Machines
Migration Center
Network Connectivity Center
Network Intelligence Center
Network Service Tiers
Persistent Disk
Pub/Sub
reCAPTCHA Enterprise
Recommendations AI
Recommenders
Resource Manager API
Retail Search
Risk Manager
Secret Manager
Security Command Center
Sensitive Data Protection
Service Directory
Service Infrastructure
Spanner
Spectrum Access System
Speech-to-Text
Storage Transfer Service
Tables (ISO 27001 only)
Talent Solution
Text-to-Speech
Traffic Director
Transcoder API
Transfer Appliance (ISO 27001 only)
Vertex AI Conversation (formerly Generative AI App Builder)
Vertex AI Platform (formerly Vertex AI)
Vertex AI Search (formerly Gen App Builder – Enterprise Search)
Video Intelligence API
Virtual Private Cloud
VirusTotal (ISO 27001 only)
VPC Service Controls
Web Risk API
Workflows
Workload Manager
BigQuery Omni
Media CDN (ISO 27001 only)
Anthos Clusters on Bare Metal
Anthos Clusters on VMware
Anthos Identity Service – Software (ISO 27001 only)
Binary Authorization – Software (ISO 27001 only)
Cloud Logging – Software (ISO 27001 only)
Cloud Monitoring – Software (ISO 27001 only)
Cloud Run for Anthos – Software (ISO 27001 only)
Config Management – Software (ISO 27001 only)
Connect – Software (ISO 27001 only)
Migrate to Containers
Service Mesh – Software (ISO 27001 only)


Google Workspace and Cloud Identity Services in Scope by Compliance Program

Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.

The following Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports Penetration Testing
Admin Console
Alert Center API (ISO 27001 only)
Apps Email Audit API (ISO 27001 only)
Apps Script (ISO 27001 only)
AppSheet (SOC 2/3 only)
Assignments
Calendar
Calendar API (ISO 27001 only)
Classroom
Cloud Identity
Cloud Search
Contacts
Data Transfer API (ISO 27001 only)
Directory API (ISO 27001 only)
Docs
Domain Shared Contacts API (ISO 27001 only)
Drive
Drive Activity API (ISO 27001 only)
Drive Rest API (ISO 27001 only)
Enterprise License Manager (ISO 27001 only)
Forms
Gmail
Gmail Rest API (ISO 27001 only)
Google Chat
Google Meet
Google Workspace Migrate
Groups
Groups Migration API (ISO 27001 only)
Groups Settings API (ISO 27001 only)
Jamboard
Keep
Mobile Device Management
People API (ISO 27001 only)
Reports API (ISO 27001 only)
Reseller API (ISO 27001 only)
SAML-based SSO API (ISO 27001 only)
Service Mesh
Sheets
Sheets API (ISO 27001 only)
Sites
Slides
Tasks
Tasks API (ISO 27001 only)
Vault
Voice


Other Services in Scope by Compliance Program

Capitalized terms have the meaning stated in the applicable agreement between Customer or Partner and Google.

These Services fall within the scope of one or more of: Google's ISO 27001 Certification, ISO 27017 Certification, ISO 27018 Certification, SOC 1 Report, SOC 2 Report and SOC 3 Report and Penetration Testing Report. A in the table below indicates that the Service (row) is in scope for the specified certification or report (column).

Service ISO 27001, 27017, 27018 Certifications SOC 1, 2, 3 Reports Penetration Testing
Looker (original)