Skip to content

Google CloudCompliance, certifications and attestations

Certifications held, by family26 held
Trust center Company profile
26
Certifications held
5
Backed by a registry
29
Pieces of evidence
Sep 24, 2026
Last captured
Across fru.devReleasesReleases

SOC reports

ISO standards

AI governance

US government

Health

Payments

Privacy

Cloud security

Regional

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

Added or renewedUpgradedIn process or ReadyLapsed or removed
  1. RemovedFedRAMPGoogle Cloud VMware Engine (GCVE)
  2. AddedFedRAMP LowGemini for Government
  3. In processFedRAMP LowGemini for Government
  4. ReadyFedRAMP HighGoogle Cloud VMware Engine (GCVE)
  5. AddedFedRAMP HighGoogle Workspace
  6. ReadyFedRAMP HighGoogle Workspace
  7. AddedFedRAMP HighGoogle Services (Google Cloud Platform Products and underlying Infrastructure)
  8. In processFedRAMP HighGoogle Services (Google Cloud Platform Products and underlying Infrastructure)
  9. AddedCSA STARFirst listed in the CSA STAR Registry
  10. AddedData Privacy FrameworkCovered entity of Google LLC

Evidence

Every source, what it says and when it was read.

SOC 11 source

HeldVendor compliance page
...ISO/IEC 27110 Learn more GLOBAL ISO/IEC 27701 Learn more ISO/IEC 42001 Learn more GLOBAL SOC 1 Learn more GLOBAL SOC 2 Learn more GLOBAL SOC 3 Learn more JAPAN 2G3M (Japan) Learn more SINGAPORE ABS (Singapore)...
Captured Sep 24, 2026Open source

SOC 21 source

HeldVendor compliance page
...more GLOBAL ISO/IEC 27701 Learn more ISO/IEC 42001 Learn more GLOBAL SOC 1 Learn more GLOBAL SOC 2 Learn more GLOBAL SOC 3 Learn more JAPAN 2G3M (Japan) Learn more SINGAPORE ABS (Singapore) Learn more ITALY ACN...
Captured Sep 24, 2026Open source

SOC 31 source

HeldVendor compliance page
...Learn more ISO/IEC 42001 Learn more GLOBAL SOC 1 Learn more GLOBAL SOC 2 Learn more GLOBAL SOC 3 Learn more JAPAN 2G3M (Japan) Learn more SINGAPORE ABS (Singapore) Learn more ITALY ACN (Italy) Learn more FRANCE...
Captured Sep 24, 2026Open source

ISO/IEC 270011 source

HeldVendor compliance page
...Learn more GLOBAL ISO 9001:2015 Learn more GLOBAL ISO/IEC 20000-1:2018 Learn more GLOBAL ISO/IEC 27001 Learn more GLOBAL ISO/IEC 27017 Learn more GLOBAL ISO/IEC 27018 Learn more GLOBAL ISO 22301:2019 & BS EN ISO 22301:2019...
Captured Sep 24, 2026Open source

ISO/IEC 270171 source

HeldVendor compliance page
...Learn more GLOBAL ISO/IEC 20000-1:2018 Learn more GLOBAL ISO/IEC 27001 Learn more GLOBAL ISO/IEC 27017 Learn more GLOBAL ISO/IEC 27018 Learn more GLOBAL ISO 22301:2019 & BS EN ISO 22301:2019 Learn more EU MEMBERS...
Captured Sep 24, 2026Open source

ISO/IEC 270181 source

HeldVendor compliance page
...20000-1:2018 Learn more GLOBAL ISO/IEC 27001 Learn more GLOBAL ISO/IEC 27017 Learn more GLOBAL ISO/IEC 27018 Learn more GLOBAL ISO 22301:2019 & BS EN ISO 22301:2019 Learn more EU MEMBERS ISO 50001:2018 Learn more GLOBAL...
Captured Sep 24, 2026Open source

ISO/IEC 277011 source

HeldVendor compliance page
...22301:2019 Learn more EU MEMBERS ISO 50001:2018 Learn more GLOBAL ISO/IEC 27110 Learn more GLOBAL ISO/IEC 27701 Learn more ISO/IEC 42001 Learn more GLOBAL SOC 1 Learn more GLOBAL SOC 2 Learn more GLOBAL SOC 3 Learn more JAPAN...
Captured Sep 24, 2026Open source

ISO/IEC 420011 source

HeldVendor compliance page
...ISO 50001:2018 Learn more GLOBAL ISO/IEC 27110 Learn more GLOBAL ISO/IEC 27701 Learn more ISO/IEC 42001 Learn more GLOBAL SOC 1 Learn more GLOBAL SOC 2 Learn more GLOBAL SOC 3 Learn more JAPAN 2G3M (Japan) Learn more...
Captured Sep 24, 2026Open source

FedRAMP4 sources

Held · HighFedRAMP Marketplace

Google Workspace

FedRAMP Authorized, High impact; authorized 2021-10-28 (JAB); assessor Coalfire Systems, Inc.; 19 agency authorizations
Captured Sep 23, 2026Since Oct 28, 2021Open source
Held · HighFedRAMP Marketplace

Google Services (Google Cloud Platform Products and underlying Infrastructure)

FedRAMP Authorized, High impact; authorized 2019-12-04 (JAB); assessor Coalfire Systems, Inc.; 24 agency authorizations
Captured Sep 23, 2026Since Dec 4, 2019Open source
Held · LowFedRAMP Marketplace

Gemini for Government (FedRAMP 20x)

FedRAMP Authorized, 20x Low impact; authorized 2026-01-21 (Program); assessor Federal Risk and Authorization Management Program; 2 agency authorizations
Captured Sep 23, 2026Since Jan 21, 2026Open source
FedRAMP Ready · HighFedRAMP Marketplace

Google Cloud VMware Engine (GCVE)

FedRAMP Ready, High impact; assessor Coalfire Systems, Inc.
Captured Sep 23, 2026Open source

HIPAA (BAA)1 source

HeldVendor compliance page
Back to offerings Current U.S. | HEALTHCARE AND LIFE SCIENCES HIPAA The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law that establishes data...
Captured Sep 24, 2026Open source

HITRUST1 source

HeldVendor compliance page
Back to offerings Current GLOBAL | HEALTHCARE AND LIFE SCIENCES HITRUST CSF® The HITRUST CSF is an industry-agnostic certifiable framework for regulatory compliance and risk management....
Captured Sep 24, 2026Open source

PCI DSS1 source

HeldVendor compliance page
Back to offerings Current GLOBAL | ALL INDUSTRIES PCI DSS The PCI Security Standards Council is a global forum for the ongoing development, enhancement, storage, dissemination,...
Captured Sep 24, 2026Open source

Data Privacy Framework1 source

HeldData Privacy Framework List

EU-US, UK extension, Swiss-US; non-HR data and HR data. Covered entity of Google LLC

EU-US status: Active; certified since 2016-09-22; recertification due 2027-09-13; verification: Self-Assessment
Captured Sep 23, 2026Since Sep 22, 2016Renewal due Sep 13, 2027Open source

EU Cloud Code of Conduct1 source

HeldCSA STAR Registry

Partner entry in the STAR Registry

Listed as Google since 2017-02-21; EU Cloud Code of Conduct entry
Captured Sep 23, 2026Since Feb 21, 2017Open source

CSA STAR1 source

Held · Level 2CSA STAR Registry

CAIQ, certification, attestation

Listed as Google since 2017-02-21; Level 2 (third-party audit)
Captured Sep 23, 2026Since Feb 21, 2017Open source

IRAP1 source

HeldVendor compliance page
Back to offerings Current ASIA PACIFIC | GOVERNMENT AND PUBLIC SECTOR IRAP (Information Security Registered Assessors Program) IRAP—the Information Security Registered Assessors Program—provides...
Captured Sep 24, 2026Open source

ISMAP1 source

HeldVendor compliance page
...GOVERNMENT AND PUBLIC SECTOR Information System Security Management and Assessment Program (ISMAP) The Information System Security Management and Assessment Program (ISMAP) is a Japanese government system for...
Captured Sep 24, 2026Open source

TISAX1 source

HeldVendor compliance page
Back to offerings Current EMEA | AUTOMOTIVE TISAX TISAX (Trusted Information Security Assessment Exchange), governed by the ENX Association on behalf of the German...
Captured Sep 24, 2026Open source

Compare with

Weekly: vendors that gained or lost a certification, Wednesdays.