上次修改日期：2024 年 9 月 4 日
引號內的詞彙以客戶或合作夥伴與 Google 簽署的適用協議中的定義為準。
下表中的「服務」屬於一或多個下列認證或報告的適用範圍：Google 的 ISO 27001 認證、ISO 27017 認證、ISO 27018 認證、PCI DSS 認證、SOC 1 報告、SOC 2 報告、SOC 3 報告，以及滲透測試報告。 下表的 done 代表「服務」(列) 在指定認證或報告 (欄) 的涵蓋範圍內。
| 服務 | ISO 27001、27017、27018 認證 | SOC 1、2、3 報告 | PCI DSS 認證 | 滲透測試 |
|---|---|---|---|---|
| Access Approval | done | done | done | done |
| Access Context Manager | done | done | done | done |
| 資料存取透明化控管機制 | done | done | done | done |
| Agent Assist | done | done | done | |
| AI 平台資料標籤服務 | done | done | done | done |
| AI 平台神經架構搜尋 (NAS) | done | done | done | |
| AI 平台訓練和預測 | done | done | done | done |
| AlloyDB | done | done | done | |
| Anthos Identity Service (AIS) | done | done | done | |
| Anthos on AWS | done (僅限 ISO 27001) | |||
| Anthos on Azure | done (僅限 ISO 27001) | |||
| Anti-Money Laundering AI | done (僅限 ISO 27001) | done | ||
| API Gateway | done | done | done | done |
| Apigee | done | done | done | done |
| App Engine | done | done | done | done |
| Artifact Registry | done | done | done | done |
| 政府機關適用的 Assured Workloads | done | done | done | done |
| AutoML Natural Language | done | done | done | done |
| AutoML Tables | done | done | done | done |
| AutoML Translation | done | done | done | done |
| AutoML Video | done | done | done | done |
| AutoML Vision | done | done | done | done |
| GKE 備份 | done | done | done | |
| Bare Metal 解決方案 | done | done | done | done |
| 批次 | done | done | done | done |
| BeyondCorp Enterprise | done | done | done | done |
| BigQuery | done | done | done | done |
| BigQuery 資料移轉服務 | done | done | done | done |
| Bigtable | done | done | done | done |
| 二進位授權 | done | done | done | done |
| 憑證授權單位服務 | done | done | done | done |
| Cloud Asset Inventory | done | done | done | done |
| Cloud Billing | done | done | done | done |
| Cloud Build | done | done | done | done |
| Cloud CDN | done | done | done | done |
| Cloud Composer | done | done | done | done |
| Cloud Console | done | done | done | done |
| Cloud Console 應用程式 | done | done | done | done |
| Cloud Data Fusion | done | done | done | done |
| Cloud Deployment Manager | done | done | done | done |
| Cloud DNS | done | done | done | done |
| Cloud Endpoints | done | done | done | done |
| Cloud External Key Manager (Cloud EKM) | done | done | done | done |
| Cloud Filestore | done | done | done | done |
| Cloud Firewall | done (僅限 ISO 27001) | done | done | |
| Cloud Functions | done | done | done | done |
| Cloud Functions for Firebase | done | done | done | done |
| Cloud Healthcare | done | done | done | done |
| Cloud HSM | done | done | done | done |
| Cloud IDS | done | done | done | done |
| Cloud Interconnect | done | done | done | done |
| Cloud Key Management Service | done | done | done | done |
| Cloud Life Sciences | done | done | done | done |
| Cloud Load Balancing | done | done | done | done |
| Cloud Logging | done | done | done | done |
| Cloud Monitoring | done | done | done | done |
| Cloud NAT (網路位址轉譯) | done | done | done | done |
| Cloud Natural Language API | done | done | done | done |
| Cloud Profiler | done | done | done | done |
| Cloud Router | done | done | done | done |
| Cloud Run | done | done | done | done |
| Cloud Run for Anthos | done | done | done | done |
| Cloud Scheduler | done | done | done | done |
| Cloud SDK | done | done | done | done |
| Cloud Shell | done | done | done | done |
| Cloud Source Repositories | done | done | done | done |
| Cloud Speaker ID | done | done | done | done |
| Cloud SQL | done | done | done | done |
| Cloud Storage | done | done | done | done |
| Cloud Storage for Firebase | done | done | done | done |
| Cloud Tasks | done | done | done | done |
| Cloud Trace | done | done | done | done |
| Cloud Translation | done | done | done | done |
| Cloud Vision | done | done | done | done |
| Cloud VPN | done | done | done | done |
| Cloud Workstations | done (僅限 ISO 27001) | done | done | done |
| Compute Engine | done | done | done | done |
| Config Management | done | done | done | done |
| Connect | done | done | done | done |
| Contact Center AI | done | done | done | done |
| Container Registry | done | done | done | done |
| Data Catalog | done | done | done | done |
| 資料庫遷移服務 | done | done | done | done |
| Dataflow | done | done | done | done |
| Dataform | done (僅限 ISO 27001) | done | done | done |
| Dataplex | done | done | done | done |
| Dataproc | done | done | done | done |
| Dataproc Metastore | done | done | done | |
| Datastore | done | done | done | done |
| DataStream | done | done | done | done |
| Dialogflow | done | done | done | done |
| 探索解決方案 | done | done | ||
| Document AI | done | done | done | done |
| Document AI 倉儲 | done | done | done | done |
| Earth Engine | done (僅限 ISO 27001) | done | done | |
| Eventarc | done | done | done | done |
| Firebase App Check | done (僅限 ISO 27001) | done | done | |
| Firebase 驗證 | done | done | done | done |
| Firebase Test Lab | done | done | done | |
| Firestore | done | done | done | done |
| GCVE | done | done | done | |
| Gemini for Google Cloud | done | done | ||
| Vertex AI 生成式 AI (舊稱 Vertex AI 生成式 AI 支援服務) | done | done | ||
| Google Cloud Armor | done | done | done | done |
| Google Cloud Deploy | done | done | done | done |
| Google Cloud Identity-Aware Proxy | done | done | done | done |
| Google Cloud Marketplace | done | done | done | done |
| Google Distributed Cloud Edge | done (僅限 ISO 27001) | done (僅限 SOC 2) | done | |
| Google Kubernetes Engine | done | done | done | done |
| Healthcare Data Engine (HDE) | done | done | done | |
| 中樞 | done | done | done | done |
| Identity & Access Management (IAM) | done | done | done | done |
| Identity Platform | done | done | done | done |
| Insights | done | done | done | done |
| IoT Core | done | done | done | done |
| 金鑰存取依據 (存取自主性) | done | done | done | done |
| Looker (Google Cloud Core) | done | done | done | |
| Looker Studio | done | done | done | done |
| Managed Service for Microsoft Active Directory (AD) | done | done | done | done |
| Memorystore | done | done | done | done |
| Migrate to Virtual Machines | done | done | ||
| Migration Center | done | done | done | |
| Network Connectivity Center | done | done | done | |
| Network Intelligence Center | done | done | done | done |
| 網路服務級別 | done | done | done | done |
| Persistent Disk | done | done | done | done |
| Pub/Sub | done | done | done | done |
| reCAPTCHA Enterprise | done | done | done | done |
| Recommendations AI | done | done | ||
| 推薦功能 | done | done | done | done |
| Resource Manager API | done | done | done | done |
| Retail Search | done | done | ||
| Risk Manager | done | done | done | done |
| Secret Manager | done | done | done | done |
| Security Command Center | done | done | done | done |
| Sensitive Data Protection | done | done | done | done |
| Service Directory | done | done | done | done |
| Service Infrastructure | done | done | done | done |
| Spanner | done | done | done | done |
| Spectrum Access System | done | done | done | |
| Speech-to-Text | done | done | done | done |
| Storage 移轉服務 | done | done | done | done |
| Tables | done (僅限 ISO 27001) | done | ||
| Talent Solution | done | done | done | done |
| Text-to-Speech | done | done | done | done |
| Traffic Director | done | done | done | done |
| Transcoder API | done | done | ||
| Transfer Appliance | done (僅限 ISO 27001) | done | done | |
| Vertex AI Conversation (舊稱 Generative AI App Builder) | done | done | ||
| Vertex AI 平台 (舊稱 Vertex AI) | done | done | done | done |
| Vertex AI Search (舊稱 Gen App Builder – Enterprise Search) | done | done | done | |
| Video Intelligence API | done | done | done | done |
| 虛擬私有雲 | done | done | done | done |
| VirusTotal | done (僅限 ISO 27001) | done | done | |
| VPC Service Controls | done | done | done | done |
| Web Risk API | done | done | done | done |
| Workflows | done | done | done | done |
| Workload Manager | done | done | done | |
| BigQuery Omni | done | done | done | done |
| Media CDN | done (僅限 ISO 27001) | done | ||
| Anthos Clusters on Bare Metal | done | |||
| Anthos clusters on VMware | done | |||
| Anthos Identity Service – 軟體 | done (僅限 ISO 27001) | |||
| Binary Authorization – 軟體 | done (僅限 ISO 27001) | |||
| Cloud Logging – 軟體 | done (僅限 ISO 27001) | |||
| Cloud Monitoring – 軟體 | done (僅限 ISO 27001) | |||
| Cloud Run for Anthos – 軟體 | done (僅限 ISO 27001) | |||
| Config Management – 軟體 | done (僅限 ISO 27001) | |||
| Connect – 軟體 | done (僅限 ISO 27001) | |||
| Migrate to Containers | done | |||
| Service Mesh – 軟體 | done (僅限 ISO 27001) |
法規遵循計畫涵蓋的 Google Workspace 和 Cloud Identity 服務
引號內的詞彙以客戶與 Google 簽署的適用協議中的定義為準。
下表中的「服務」屬於一或多個下列認證或報告的適用範圍：Google 的 ISO 27001 認證、ISO 27017 認證、ISO 27018 認證、SOC 1 報告、SOC 2 報告、SOC 3 報告，以及滲透測試報告。下表的 done 代表「服務」(列) 在指定認證或報告 (欄) 的涵蓋範圍內。
| 服務 | ISO 27001、27017、27018 認證 | SOC 1、2、3 報告 | 滲透測試 |
|---|---|---|---|
| 管理控制台 | done | done | done |
| Alert Center API | done (僅限 ISO 27001) | done | done |
| Apps Email Audit API | done (僅限 ISO 27001) | done | done |
| Apps Script | done (僅限 ISO 27001) | done | done |
| AppSheet | done | done (僅限 SOC 2/3) | done |
| 作業 | done | done | done |
| 日曆 | done | done | done |
| Calendar API | done (僅限 ISO 27001) | done | done |
| Classroom | done | done | done |
| Cloud Identity | done | done | done |
| Cloud Search | done | done | done |
| 聯絡人 | done | done | done |
| Data Transfer API | done (僅限 ISO 27001) | done | done |
| Directory API | done (僅限 ISO 27001) | done | done |
| 文件 | done | done | done |
| Domain Shared Contacts API | done (僅限 ISO 27001) | done | done |
| 雲端硬碟 | done | done | done |
| Drive Activity API | done (僅限 ISO 27001) | done | done |
| Drive Rest API | done (僅限 ISO 27001) | done | |
| Enterprise License Manager | done (僅限 ISO 27001) | done | |
| 表單 | done | done | done |
| Gmail | done | done | done |
| Gmail Rest API | done (僅限 ISO 27001) | done | |
| Google Chat | done | done | done |
| Google Meet | done | done | done |
| Google Workspace Migrate | done | done | done |
| 網路論壇 | done | done | done |
| Groups Migration API | done (僅限 ISO 27001) | done | done |
| Groups Settings API | done (僅限 ISO 27001) | done | done |
| Jamboard | done | done | done |
| Keep | done | done | done |
| 行動裝置管理 | done | done | done |
| People API | done (僅限 ISO 27001) | done | |
| Reports API | done (僅限 ISO 27001) | done | done |
| Reseller API | done (僅限 ISO 27001) | done | done |
| SAML-based SSO API | done (僅限 ISO 27001) | done | done |
| Service Mesh | done | done | done |
| 試算表 | done | done | done |
| Sheets API | done (僅限 ISO 27001) | done | |
| 協作平台 | done | done | done |
| 簡報 | done | done | done |
| Tasks | done | done | done |
| Tasks API | done (僅限 ISO 27001) | done | |
| 保管箱 | done | done | done |
| Voice | done | done | done |
法規遵循計畫涵蓋的其他服務
引號內的詞彙以客戶或合作夥伴與 Google 簽署的適用協議中的定義為準。
這些「服務」屬於一或多個下列認證或報告的適用範圍：Google 的 ISO 27001 認證、ISO 27017 認證、ISO 27018 認證、SOC 1 報告、SOC 2 報告、SOC 3 報告，以及滲透測試報告。下表的 done 代表「服務」(列) 在指定認證或報告 (欄) 的涵蓋範圍內。
| 服務 | ISO 27001、27017、27018 認證 | SOC 1、2、3 報告 | 滲透測試 |
|---|---|---|---|
| Looker (原始版本) | done | done | done |