Client-side encryption and decryption reports

Supported editions for this feature: Enterprise Plus; Education Standard and Education Plus.  Compare your edition

With client-side encryption (CSE) for Google Drive and Docs, you can use your own encryption keys to encrypt your organization's files, in addition to using the default encryption that Google Workspace provides. Two CSE reports for Drive and Docs are available:

• The Client-side encryption report shows how many files in your domain were encrypted using CSE for a specific date range.
• The Client-side decryption report shows how many CSE files in your domain were downloaded and decrypted for a specific date range.

For details about CSE, see About client-side encryption.

Note: The security dashboard also includes a summary of CSE data. For details, see Security dashboard.

View the Client-side encryption or decryption report

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  SecuritySecurity centerDashboard.
3. In the lower-right corner of the Client-side encryption chart or Client-side decryption chart, click View report. 

​Client-side encryption or decryption graph

Depending on the report, this graph shows the number files in Drive that were encrypted with CSE over time, or the number of CSE files that were downloaded and decrypted over time, by file type.

You can customize the graph to provide details about specific types of files:

Filter	Description
Docs (documents) Sheets (spreadsheets) Slides (presentations) Other (Microsoft Office files, PDFs, and more)	To view data for specific file types, check or uncheck the boxes.
Domain	If you have multiple domains, choose the domain for your report.
Date range	View data from Today, Yesterday, This week, Last week, This month, Last month, or Days ago (up to 180 days); or enter a Start date and End date. Click Apply.

To generate a spreadsheet with the graph’s data, click Export Sheet. A spreadsheet with the data in the graph will be saved to your My Drive folder.

Files encrypted or decrypted table

Depending on the report, you can view a list of files that were encrypted with CSE, or CSE files that were downloaded and decrypted, filtered by date and file type:

1. Click Select filter.
2. To select a date on which files were encrypted, or downloaded and decrypted, click Date, and then choose the date. Click Apply.
3. To select specific file types, click Category, and then check or uncheck the boxes for file types. Click Apply.
4. The table shows any encrypted files match the selected filter:

Document ID	The file's system-generated identifier. This ID is useful if you need to troubleshoot CSE with your encryption provider.
Title	The filename. The file's extension is shown if it's not a Google Docs Editor format—that is, in the category Other.
Owner	The email address of user who owns the file.

To download a spreadsheet with the table's data, click Export table.