Google Cloud compliance, certifications and attestations
Cloud · 31 certifications held · 6 from public registries · read Sep 24, 2026
| Certification | Evidence | ||
|---|---|---|---|
| SOC reports | |||
| SOC 1 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| SOC 2 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| SOC 3 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO standards | |||
| ISO/IEC 27001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27017 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27018 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27701 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO 9001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO 22301 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 20000-1 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| AI governance | |||
| ISO/IEC 42001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| US government | |||
| FedRAMP High Google Workspace; Google Services (Google Cloud Platform Products and underlying Infrastructure) FedRAMP Marketplace | High | FedRAMP Marketplace | Sep 23, 2026 |
| GovRAMP (StateRAMP) High Google Services (Authorized, Federal JAB, High); Google Workspace (Authorized, Federal JAB, High) GovRAMP product list | High | GovRAMP product list | Sep 24, 2026 |
| FIPS 140 validated FIPS 140-3 15 active FIPS 140-3 modules: #5474 Knuckle Cryptographic Module; #5455 Non-Volatile Memory express (NVMe) Data Path Security Cluster (DPSC) Module; #5434 B227 True Random Number Generator (TRNG) Cryptographic Module; #5359 Non-Volatile Memory express (NVMe) Data Path Security Cluster (DPSC) Module; NIST CMVP | FIPS 140-3 | NIST CMVP | Sep 24, 2026 |
| Finance | |||
| PCI DSS Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| APRA CPS 234 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Health | |||
| HIPAA (BAA) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| HITRUST Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Life sciences (GxP) | |||
| GxP qualification Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| FDA 21 CFR Part 11 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| EU GMP Annex 11 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| CSV / CSA validation Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Privacy and cloud | |||
| Data Privacy Framework Held EU-US, UK extension, Swiss-US; non-HR data and HR data. Covered entity of Google LLC Data Privacy Framework List | Held | Data Privacy Framework List | Sep 23, 2026 |
| EU Cloud Code of Conduct Held Partner entry in the STAR Registry CSA STAR Registry | Held | CSA STAR Registry | Sep 23, 2026 |
| CSA STAR Level 2 CAIQ, certification, attestation CSA STAR Registry | Level 2 | CSA STAR Registry | Sep 23, 2026 |
| Regional programs | |||
| BSI C5 (Germany) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ENS (Spain) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| IRAP (Australia) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISMAP (Japan) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| MTCS (Singapore) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| TISAX Held Vendor page | Held | Vendor page | Sep 24, 2026 |
From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.
History
| Date | Change | |
|---|---|---|
| Removed FedRAMP Google Cloud VMware Engine (GCVE) | FedRAMP Marketplace | |
| Added FedRAMP Low Gemini for Government | FedRAMP Marketplace | |
| In process FedRAMP Low Gemini for Government | FedRAMP Marketplace | |
| Ready FedRAMP High Google Cloud VMware Engine (GCVE) | FedRAMP Marketplace | |
| Added FedRAMP High Google Workspace | FedRAMP Marketplace | |
| Ready FedRAMP High Google Workspace | FedRAMP Marketplace | |
| Added FedRAMP High Google Services (Google Cloud Platform Products and underlying Infrastructure) | FedRAMP Marketplace | |
| In process FedRAMP High Google Services (Google Cloud Platform Products and underlying Infrastructure) | FedRAMP Marketplace | |
| Added CSA STAR First listed in the CSA STAR Registry | CSA STAR Registry | |
| Added Data Privacy Framework Covered entity of Google LLC | Data Privacy Framework List |
About Google Cloud
Google Cloud Platform, Workspace and Gemini for Government.
- Website
- cloud.google.com
No public evidence found for
- ISO standards
- ISO 27799
- AI governance
- STAR AI
- US government
- DoD IL, TX-RAMP, CMMC, 800-171, 800-53, ITAR, CJIS, IRS 1075, 508/VPAT
- Finance
- PCI 3DS, SWIFT, 17a-4, GLBA, SOX, FFIEC, MAS TRM, OSFI, FISC, DORA
- Health
- HDS, NHS DSPT, PHIPA
- Privacy and cloud
- CBPR
- Regional programs
- Cyber Ess., G-Cloud, SecNum, K-ISMS
- Education
- FERPA, HECVAT, COPPA
Compare with Microsoft, Oracle, AWS, IBM, Alibaba Cloud